@collective-intelligence/external-apps-server-sdk 0.1.10 → 0.1.11

package/dist/runtime/next.d.ts

@@ -23,13 +23,15 @@ export type ApplicationUserSession = Readonly<{
  * and request/correlation IDs are deliberately not part of that logical identity.
  */
 export type EntityInvocationContext = Readonly<{
+	/** The App Permissions of the user's effective roles on the app. */
+	appPermissions: readonly string[];
 	applicationId: string;
 	issuer: string;
 	organizationId: string;
 	resourceId: string;
+	/** The user's effective roles on the app, read from CI at this lookup. */
 	roles: readonly string[];
 	scopes: readonly string[];
-	groupIds: readonly string[];
 	user: ApplicationUserIdentity;
 }>;
 export type ApplicationUserAuth = Readonly<{
@@ -38,7 +40,7 @@ export type ApplicationUserAuth = Readonly<{
 	/** Returns null only when the request has no valid application session. */
 	getSession: (request: Request) => Promise<ApplicationUserSession | null>;
 	/** Server-only current CI authority. The host still owns resource/operation policy.
-	 * Null means no valid CI session or no current role/group policy supplied by CI.
+	 * Null means no valid CI session, including a user without a role on the app.
 	 */
 	getEntityContext: (request: Request, resourceId: string) => Promise<EntityInvocationContext | null>;
 	/** Server-only Delegated access token. Absent for local application login. */
@@ -261,7 +263,7 @@ export type ResourceCreateInput<Value> = Readonly<{
 	value: Value;
 }>;
 /** Common entity operations. Generic resource lifecycle/cursor APIs remain separate. */
-export type EntityOperation = "list" | "get" | "create" | "update" | "delete" | "upload";
+export type EntityOperation = "list_members" | "list" | "get" | "create" | "update" | "delete" | "upload";
 export type EntityListQuery = Omit<ResourceListQuery, "pagination" | "includeDeleted"> & Readonly<{
 	pagination: Extract<ResourcePagination, {
 		mode: "page";
@@ -270,6 +272,8 @@ export type EntityListQuery = Omit<ResourceListQuery, "pagination" | "includeDel
 export type EntityPage<Value> = Extract<ResourceListResult<Value>, {
 	pagination: "page";
 }>;
+/** Member schemas are resolved by CI, independently of the parent resource. */
+export type EntityMemberValue = Readonly<Record<string, ResourceJsonValue>>;
 export type EntityCreateInput<Value> = ResourceCreateInput<Value>;
 export type EntityUpdateInput<Patch> = ResourceMutationInput<Patch> & Readonly<{
 	idempotencyKey: IdempotencyKey;
@@ -297,6 +301,11 @@ export type EntityRequestIdentity = Readonly<{
 export type EntityRequest<Create = unknown, Patch = unknown> = EntityRequestIdentity & (Readonly<{
 	operation: "list";
 	query: EntityListQuery;
+}> | Readonly<{
+	operation: "list_members";
+	parentId: ResourceRecordId;
+	field: string;
+	query: EntityListQuery;
 }> | Readonly<{
 	operation: "get";
 	id: ResourceRecordId;
@@ -310,7 +319,7 @@ export type EntityRequest<Create = unknown, Patch = unknown> = EntityRequestIden
 }> & EntityDeleteInput) | (Readonly<{
 	operation: "upload";
 }> & EntityUploadInput));
-export type EntityOperationResult<Value, Operation extends EntityOperation> = Operation extends "list" ? EntityPage<Value> : Operation extends "upload" ? EntityUploadSlot : ResourceRecord<Value>;
+export type EntityOperationResult<Value, Operation extends EntityOperation> = Operation extends "list_members" ? EntityPage<EntityMemberValue> : Operation extends "list" ? EntityPage<Value> : Operation extends "upload" ? EntityUploadSlot : ResourceRecord<Value>;
 export interface ConfidentialCredentials {
 	readonly clientId: string;
 	readonly clientSecret: string;