@opengeni/sdk 5.0.5-canary.3 → 5.1.0-canary.1

package/README.md

@@ -819,6 +819,32 @@ await client.sendApprovalDecision(workspaceId, sessionId, { approvalId, decision
 
 ## Session tool policy and native web search
 
+For standalone credential maintenance, use the dedicated operation rather than
+sending a message:
+
+```ts
+const request = {
+  operationKey: crypto.randomUUID(),
+  updates: [{
+    id: "crm",
+    expectedCredentialVersion: 1,
+    expectedServerUrl: "https://tools.example.test/mcp",
+    headers: { Authorization: `Bearer ${replacementToken}` },
+  }],
+};
+const receipt = await client.rotateSessionMcpCredentials(workspaceId, sessionId, request);
+```
+
+Only exact existing inline servers without `connectionRef` are eligible. Both
+session control and MCP attach permissions, live session authorization, expected
+versions, and a quiescent credential-consumer boundary are required. This never
+sends a message, starts work, retries a failed turn, or refreshes an active
+client. Reconcile an ambiguous response with the same request/key; the SDK does
+not retry mutations automatically. Exact authorized replay returns the original
+receipt without a second write. Old receipt verification fails explicitly with
+503 if the deployment encryption key has been replaced. See the full
+[rotation contract](../../docs/session-mcp-servers.md#standalone-inline-credential-rotation).
+
 Omitting `tools` when creating a top-level session selects the current
 workspace-default capability policy, including the built-in `files` server.
 Passing `tools`, including `[]`, is an intentional fixed narrowing and can

package/dist/artifacts.js

@@ -1,10 +1,10 @@
 import {
   OpenGeniClient
-} from "./chunk-A7KFT3LE.js";
-import "./chunk-KTHFOTHG.js";
-import "./chunk-YTKQQMYF.js";
+} from "./chunk-EEMS7J5L.js";
+import "./chunk-5PBXPPUW.js";
+import "./chunk-6ZXNC3HS.js";
 import "./chunk-QTBAMHEF.js";
-import "./chunk-ZGUPH7BG.js";
+import "./chunk-2NJBP2PS.js";
 import "./chunk-OO5LPTO7.js";
 export {
   OpenGeniClient

package/dist/browser.js

@@ -8,12 +8,12 @@ import {
 } from "./chunk-FMLDFJ2Q.js";
 import {
   OpenGeniClient
-} from "./chunk-YTKQQMYF.js";
+} from "./chunk-6ZXNC3HS.js";
 import "./chunk-QTBAMHEF.js";
 import {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION
-} from "./chunk-ZGUPH7BG.js";
+} from "./chunk-2NJBP2PS.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,

package/dist/chat/index.js

@@ -1,13 +1,13 @@
 import {
   OpenGeniEmbeddingClient
-} from "../chunk-XWVDS6OX.js";
-import "../chunk-A7KFT3LE.js";
-import "../chunk-KTHFOTHG.js";
+} from "../chunk-CDQUIE4A.js";
+import "../chunk-EEMS7J5L.js";
+import "../chunk-5PBXPPUW.js";
 import {
   parseSseStream
-} from "../chunk-YTKQQMYF.js";
+} from "../chunk-6ZXNC3HS.js";
 import "../chunk-QTBAMHEF.js";
-import "../chunk-ZGUPH7BG.js";
+import "../chunk-2NJBP2PS.js";
 import {
   OpenGeniApiError
 } from "../chunk-OO5LPTO7.js";

package/dist/{chunk-ZGUPH7BG.js → chunk-2NJBP2PS.js}

@@ -239,4 +239,4 @@ export {
   GENERATED_VIDEO_MAX_BYTES,
   KNOWN_USAGE_EVENT_TYPES
 };
-//# sourceMappingURL=chunk-ZGUPH7BG.js.map
+//# sourceMappingURL=chunk-2NJBP2PS.js.map