@opengeni/sdk 0.32.1 → 0.33.1

package/README.md

@@ -8,6 +8,11 @@ helpers for proxying the stream through your own API.
 Zero runtime dependencies. Needs only WHATWG `fetch` and streams, so it runs in
 Node 18+, Bun, Deno, browsers, and edge runtimes.
 
+Browser clients may call the public API from any origin with an API key or
+other bearer credential. Browser cookies are accepted cross-origin only from
+operator-configured trusted origins; arbitrary embedding origins never receive
+credentialed CORS responses.
+
 ## Quick start
 
 ```ts
@@ -32,6 +37,36 @@ for await (const event of client.streamEvents(workspaceId, session.id)) {
 }
 ```
 
+## Workspace artifacts
+
+Workspace artifacts are generic, immutable HTML publications. The SDK does not
+assign product types such as app, page, dashboard, or gallery. List pages are
+bounded and expose both `truncated` and an opaque `nextCursor` so callers never
+mistake a partial page for the complete workspace catalog.
+
+The initial web renderer supports semantic HTML, inline CSS, CSS-only
+interactions, and inline SVG. It removes JavaScript, event handlers, forms,
+embeds, external URLs, and other active or navigation-capable markup before
+rendering. Executable artifacts require a later, stronger isolation boundary.
+
+```ts
+let cursor: string | undefined;
+do {
+  const page = await client.listWorkspaceArtifacts(workspaceId, {
+    limit: 50,
+    ...(cursor ? { cursor } : {}),
+  });
+  for (const artifact of page.artifacts) console.log(artifact.title);
+  cursor = page.nextCursor ?? undefined;
+} while (cursor);
+```
+
+Creation and publication require a caller-supplied idempotency key. Reuse the
+same key only to retry the same logical mutation. Agent-authored versions also
+return the exact source session, turn, attempt, and execution generation that
+published them. Version and event history are bounded; inspect
+`versionsTruncated` and `eventsTruncated` on the detail response.
+
 Omit `firstPartyMcpTools` for the complete OpenGeni tool catalog. An explicit
 `[]` exposes no broad first-party tools; attached resources and separately
 selected `files`/`docs` MCP servers are unaffected.

package/dist/artifact-client.d.ts

@@ -0,0 +1,11 @@
+import { OpenGeniClient as OpenGeniCoreClient } from "./client";
+import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts";
+/** Public SDK client. Artifact operations stay out of the console's eager core graph. */
+export declare class OpenGeniClient extends OpenGeniCoreClient {
+    listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions): Promise<WorkspaceArtifactListResponse>;
+    getWorkspaceArtifact(workspaceId: string, artifactId: string): Promise<WorkspaceArtifactDetailResponse>;
+    getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionId?: string): Promise<WorkspaceArtifactContentResponse>;
+    createWorkspaceArtifact(workspaceId: string, request: CreateWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
+    publishWorkspaceArtifactVersion(workspaceId: string, artifactId: string, request: PublishWorkspaceArtifactVersionRequest): Promise<WorkspaceArtifactMutationResponse>;
+    rollbackWorkspaceArtifact(workspaceId: string, artifactId: string, request: RollbackWorkspaceArtifactRequest): Promise<WorkspaceArtifactMutationResponse>;
+}