@collective-intelligence/external-apps-server-sdk 0.1.10 → 0.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -552,13 +552,15 @@ export type ApplicationUserSession = Readonly<{
552
552
  * and request/correlation IDs are deliberately not part of that logical identity.
553
553
  */
554
554
  export type EntityInvocationContext = Readonly<{
555
+ /** The App Permissions of the user's effective roles on the app. */
556
+ appPermissions: readonly string[];
555
557
  applicationId: string;
556
558
  issuer: string;
557
559
  organizationId: string;
558
560
  resourceId: string;
561
+ /** The user's effective roles on the app, read from CI at this lookup. */
559
562
  roles: readonly string[];
560
563
  scopes: readonly string[];
561
- groupIds: readonly string[];
562
564
  user: ApplicationUserIdentity;
563
565
  }>;
564
566
  export type ApplicationUserAuth = Readonly<{
@@ -567,7 +569,7 @@ export type ApplicationUserAuth = Readonly<{
567
569
  /** Returns null only when the request has no valid application session. */
568
570
  getSession: (request: Request) => Promise<ApplicationUserSession | null>;
569
571
  /** Server-only current CI authority. The host still owns resource/operation policy.
570
- * Null means no valid CI session or no current role/group policy supplied by CI.
572
+ * Null means no valid CI session, including a user without a role on the app.
571
573
  */
572
574
  getEntityContext: (request: Request, resourceId: string) => Promise<EntityInvocationContext | null>;
573
575
  /** Server-only Delegated access token. Absent for local application login. */