@polpo-ai/sdk 0.15.106 → 0.15.108

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +4 -1
  2. package/package.json +3 -3
package/README.md CHANGED
@@ -123,7 +123,10 @@ The runtime consumes that contract directly: `skill_read({ name })` returns
123
123
  the skill entrypoint together with its textual `references/` resources, while
124
124
  `skill_read({ name, path })` reads one exact bundle-relative resource. Clients
125
125
  do not need to rewrite imported skills or instruct the model to use workspace
126
- file tools for bundle content.
126
+ file tools for bundle content. Assigned skills implicitly authorize
127
+ `skill_list` and `skill_read` through static agent and Loop allowlists;
128
+ request, route, execution, and trusted-grant restrictions remain
129
+ authoritative.
127
130
 
128
131
  An agent can have several assigned skills while a caller explicitly applies
129
132
  one or more of them to a single execution:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@polpo-ai/sdk",
3
- "version": "0.15.106",
3
+ "version": "0.15.108",
4
4
  "description": "Polpo SDK — typed HTTP client, SSE streaming, and reactive store for AI agent orchestration",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -55,8 +55,8 @@
55
55
  "url": "https://github.com/lumea-labs/polpo/issues"
56
56
  },
57
57
  "dependencies": {
58
- "@polpo-ai/channels": "0.15.106",
59
- "@polpo-ai/core": "0.15.106"
58
+ "@polpo-ai/channels": "0.15.108",
59
+ "@polpo-ai/core": "0.15.108"
60
60
  },
61
61
  "scripts": {
62
62
  "build": "tsc",