@opengeni/sdk 0.29.0 → 0.32.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -32,7 +32,7 @@ for await (const event of client.streamEvents(workspaceId, session.id)) {
32
32
  }
33
33
  ```
34
34
 
35
- Omit `firstPartyMcpTools` for the minimal self-management default. An explicit
35
+ Omit `firstPartyMcpTools` for the complete OpenGeni tool catalog. An explicit
36
36
  `[]` exposes no broad first-party tools; attached resources and separately
37
37
  selected `files`/`docs` MCP servers are unaffected.
38
38
 
@@ -210,9 +210,12 @@ await client.sendApprovalDecision(workspaceId, sessionId, { approvalId, decision
210
210
  ## Session tool policy and native web search
211
211
 
212
212
  Omitting `tools` when creating a top-level session selects the current
213
- workspace-default capability policy. Supported Responses providers can then
214
- attach their native bounded web-search tool without requiring a sandbox.
215
- Passing `tools`, including `[]`, is an intentional fixed narrowing.
213
+ workspace-default capability policy, including the built-in `files` server.
214
+ Passing `tools`, including `[]`, is an intentional fixed narrowing and can
215
+ therefore disable file-download access for that session. OpenGeni's own web UI
216
+ keeps `files` enabled as a hidden default, while API and embedded clients retain
217
+ exact control over the explicit list. Supported Responses providers attach
218
+ their native bounded web-search tool independently of this MCP policy.
216
219
 
217
220
  Existing explicit sessions are not widened when a new default capability is
218
221
  introduced. Opt one in explicitly with the current optimistic-concurrency
@@ -255,6 +258,11 @@ await client.resumeGoal(workspaceId, sessionId); // resets counters, re-arms con
255
258
  `uploadFile` wraps the three-step flow (begin → signed PUT → complete) in one
256
259
  call; the lower-level steps are exported for resumable/custom flows.
257
260
 
261
+ Browser hosts need no storage credentials or per-application registration.
262
+ OpenGeni authorizes the workspace request and returns a short-lived,
263
+ object-scoped signed URL; operators must configure the private object store to
264
+ allow CORS from `*` so any product embedding the SDK can use that URL.
265
+
258
266
  ```ts
259
267
  const file = await client.uploadFile(workspaceId, {
260
268
  filename: "incident-notes.md",