SDK
The SDK calls Merulan from TypeScript through typed resource methods.
Set up access
Public acquisition: Available. Install the reviewed release with pnpm add @merulan/sdk@0.1.0. The package and its declared exports were loaded from a clean environment on September 17, 2026.
Live operation: Preview. Authenticated production execution and authoritative readback have not been qualified since the infrastructure was hibernated. Package availability does not prove a production call works.
License: PolyForm Shield 1.0.0. Support: support@merulan.com. Security reports: security@merulan.com.
The SDK client uses createMerulanSdk with an API key or JWT. It rejects construction when neither is supplied. Keep credentials outside source control and logs. Use the released access flow for the Workspace you need.
How the SDK works
SDK resources group related methods. Each method sends a typed request and returns its typed result. The API checks the caller's access. Using the SDK does not grant more permission.
Decide here whether the SDK is the right Surface for the call. Use it when your code is TypeScript and you want typed requests and results. Use the API (HTTP) when it is not. The choice does not change what the call is allowed to do.
Use SDK reference for native method names and types. Use Capability guides to learn the feature.
First call
SDK use starts with a client and valid access. Read an existing List with lists.get. Supply its List id and inspect the returned result. Compare the id with the List you chose before making a change.
The SDK reference names the native input and result types. Its linked API method owns the exact response and readback rules.
When it fails
SDK recovery depends on the failed step.
Missing credential
SDK construction requires an API key or JWT. Supply a valid credential through the released access flow. Do not put the secret into a request URL.
Access refused
SDK requests cannot widen Workspace access. Check the caller's membership and the method's permission. Correct access before retrying.
Production operation is unavailable
The public package can still be installed and loaded. Do not treat that as proof of a working production endpoint. Wait for a live qualification notice before depending on production execution.
Reference
The SDK reference lists admitted native methods. The API guide explains the HTTP request boundary.