
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@runapi.ai/core
Advanced tools
The RunAPI Core JavaScript SDK provides shared authentication, HTTP, retry, error, and polling primitives for RunAPI model SDK packages. Install @runapi.ai/core only when you are building SDK infrastructure or shared tooling; application code should normally install a concrete model package such as @runapi.ai/suno.
npm install @runapi.ai/core
Use the core package for ClientOptions, common error classes, request helpers, and task polling behavior that model SDKs share. Public SDK docs live at https://runapi.ai/docs#runapi-sdks and the model catalog lives at https://runapi.ai/models.
RunAPI accepts an optional X-Client-Request-Id header on public API calls. Use printable ASCII values up to 512 characters. Accepted values are echoed in the response and stored with the RunAPI task for support and reconciliation.
await client.textToImage.create(
{ prompt: 'A sunset over the ocean' },
{ headers: { 'X-Client-Request-Id': 'order-123' } }
);
Public API responses expose X-RunAPI-Task-Id when a RunAPI task exists. High-level model SDK methods return parsed response bodies; use a custom transport or direct HTTP request when your integration needs response headers.
import { NanoBananaClient } from '@runapi.ai/nano-banana';
const client = new NanoBananaClient({ apiKey: process.env.RUNAPI_API_KEY });
const upload = await client.files.create({ source: { type: 'url', url: 'https://cdn.runapi.ai/public/samples/image.jpg' } });
console.log(upload.url);
[!IMPORTANT] Uploaded file URLs expire 1 hour after creation. Pass them to a model promptly rather than storing them for later use.
Licensed under the Apache License, Version 2.0.
FAQs
RunAPI core SDK for JavaScript, Python, Ruby, Go, Java, and PHP
The npm package @runapi.ai/core receives a total of 129 weekly downloads. As such, @runapi.ai/core popularity was classified as not popular.
We found that @runapi.ai/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.