@sequenceholdings/artifact-studio 0.10.0 → 0.11.0

package/dist/server/platform-client.js

@@ -0,0 +1,34 @@
+import { createConsumerPlatformClient } from '@sequenceholdings/platform/browser';
+import { createArtifactServerClient } from './client.js';
+/** Shared endpoint clients are bound to the existing verified broker, never a bearer fallback. */
+export function createArtifactServerPlatformAdapter(client) {
+    const shared = createConsumerPlatformClient({ transport: {
+            request: ({ path, method, body }) => client.api[method === 'GET' ? 'get' : method === 'POST' ? 'post' : method === 'PUT' ? 'put' : method === 'PATCH' ? 'patch' : 'delete'](path, body),
+        } });
+    return {
+        ...shared,
+        context: client.context,
+        principal: client.principal,
+        mode: client.mode,
+        log: client.log,
+        api: client.api,
+        /** Broker domains retain their narrower, manifest-declared operation contracts. */
+        agents: { ...shared.agents, ...client.agents },
+        groups: { ...shared.groups, ...client.groups },
+        functions: { ...shared.functions, invoke: ({ id, params }) => client.functions.invoke(id, params) },
+        storage: client.storage,
+        processes: client.processes,
+        flags: client.flags,
+        audit: client.audit,
+        files: { ...shared.files, download: (input) => client.api.fetch(shared.files.downloadPath(input)) },
+    };
+}
+/** One per Next.js request. Uses the same context verification and explicit service transition as the legacy factory. */
+export async function createArtifactServerPlatformClient(options) {
+    const client = await createArtifactServerClient(options);
+    const adapt = (source) => ({
+        ...source.platform,
+        asService: () => adapt(source.asService()),
+    });
+    return adapt(client);
+}

package/dist/server.d.ts

@@ -20,3 +20,5 @@ export type { ArtifactGroupDetail, ArtifactGroupDirectoryPage, ArtifactGroupDire
 export type { ArtifactTaskAssignments } from './server/task-assignments.js';
 export type { ArtifactGroupTasksQuery, ArtifactGroupTasksPage } from './server/task-assignments.js';
 export type { ArtifactHumanCompletionQuery, ArtifactHumanCompletion, ArtifactHumanContinuation } from './server/human-completion.js';
+export { createArtifactServerPlatformClient } from './server/platform-client.js';
+export type { ArtifactServerPlatform, ArtifactServerPlatformClient } from './server/platform-client.js';

package/dist/server.js

@@ -6,3 +6,4 @@ export { getArtifactRequestContext, readArtifactRuntimeConfig } from './server/r
 export { ArtifactContextError, getArtifactBrowserBootstrap, ARTIFACT_REQUEST_AUTHENTICATION_HEADER, verifyArtifactRequestAuthentication } from './server/request-context.js';
 export { verifyArtifactExternalContext } from './server/external-context.js';
 export { externalEvidence } from './server/principal.js';
+export { createArtifactServerPlatformClient } from './server/platform-client.js';

package/dist/templates/nextjs/README.md

@@ -186,6 +186,10 @@ own origin rather than a neighbour's. When the application origin is on a
 different site from its Atlas frame, a cookie it needs there must also be
 `SameSite=None; Partitioned`, or the browser drops it.
 
+For the same reason, the gateway refuses any `POST`, `PUT`, `PATCH`, `DELETE` or
+WebSocket upgrade whose `Origin` is not your application's own. It does not guard
+`GET`, `HEAD` or `OPTIONS`, so never change state in response to them.
+
 The local process is ordinary code running as your operating-system user.
 Atlas governs access to platform resources; it does not sandbox your laptop's
 filesystem or all outbound network connections.

package/dist/templates/nextjs/pnpm-workspace.yaml

@@ -12,6 +12,7 @@ minimumReleaseAgeExclude:
   - '@sequenceholdings/custom-roles-manifest'
   - '@sequenceholdings/lattice-form-renderer'
   - '@sequenceholdings/orm'
+  - '@sequenceholdings/platform'
   - '@sequenceholdings/storage'
 strictDepBuilds: true
 allowBuilds:

package/dist/templates/react-vite/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@sequenceholdings/artifact-studio": "^0.10.0",
+    "@sequenceholdings/artifact-studio": "^0.11.0",
     "@sequenceholdings/atlas-ui": "^3.1.1",
     "@tailwindcss/postcss": "^4.2.2",
     "@tailwindcss/vite": "^4.2.2",

package/package.json

@@ -9,7 +9,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "SDK types and CLI library for building Artifact Studio apps. Driven via `seq-studio artifact <sub>` (@sequenceholdings/studio-cli), which runs the `./cli` runCli export.",
   "type": "module",
   "exports": {
@@ -171,9 +171,10 @@
     "google-auth-library": "^10.5.0",
     "server-only": "0.0.1",
     "parse5": "7.3.0",
+    "@sequenceholdings/storage": "0.1.3",
     "@sequenceholdings/lattice-form-renderer": "0.2.0",
-    "@sequenceholdings/storage": "0.1.2",
-    "@sequenceholdings/orm": "2.7.0"
+    "@sequenceholdings/orm": "2.8.1",
+    "@sequenceholdings/platform": "0.1.0"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",

package/templates/nextjs/README.md

@@ -186,6 +186,10 @@ own origin rather than a neighbour's. When the application origin is on a
 different site from its Atlas frame, a cookie it needs there must also be
 `SameSite=None; Partitioned`, or the browser drops it.
 
+For the same reason, the gateway refuses any `POST`, `PUT`, `PATCH`, `DELETE` or
+WebSocket upgrade whose `Origin` is not your application's own. It does not guard
+`GET`, `HEAD` or `OPTIONS`, so never change state in response to them.
+
 The local process is ordinary code running as your operating-system user.
 Atlas governs access to platform resources; it does not sandbox your laptop's
 filesystem or all outbound network connections.

package/templates/nextjs/pnpm-workspace.yaml

@@ -12,6 +12,7 @@ minimumReleaseAgeExclude:
   - '@sequenceholdings/custom-roles-manifest'
   - '@sequenceholdings/lattice-form-renderer'
   - '@sequenceholdings/orm'
+  - '@sequenceholdings/platform'
   - '@sequenceholdings/storage'
 strictDepBuilds: true
 allowBuilds:

package/templates/react-vite/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@sequenceholdings/artifact-studio": "^0.10.0",
+    "@sequenceholdings/artifact-studio": "^0.11.0",
     "@sequenceholdings/atlas-ui": "^3.1.1",
     "@tailwindcss/postcss": "^4.2.2",
     "@tailwindcss/vite": "^4.2.2",