@crossworks/client-types 0.232.321 → 0.232.322

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossworks/client-types",
-  "version": "0.232.321",
+  "version": "0.232.322",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/dto/access.ts

@@ -60,6 +60,13 @@ export type AccessNodeView = {
   /** Set when a member wrote it and an admin accepted it into the brain (the
    *  member-authored badge). Absent from brains before 0.232.285. */
   author?: MemberItemAuthor | null;
+  /** Levels at which this brain makes a NEW open link (client logins C1:
+   *  ['public']). Absent on brains before C1: the client then uses the old
+   *  copy (Client = open link). */
+  openLinkLevels?: AccessLevel[];
+  /** Old live links above this item (see ClientOldLinkAbove); only for an
+   *  item at client. */
+  oldLinksAbove?: ClientOldLinkAbove[];
 };
 
 /** One item that went down with the item that embeds it. */
@@ -96,13 +103,27 @@ export type AccessNodeUpdate = {
 
 // ── "What clients see" (client logins C1) ────────────────────────────────────
 
+/** A live open link on something ABOVE a client-level item (a folder that
+ *  holds it, or a client page that embeds it): made when client meant
+ *  "anyone with the link", still live until old client links retire.
+ *  Anyone with that link can open this item. */
+export type ClientOldLinkAbove = {
+  shareId: string;
+  /** The folder or page that carries the link. */
+  nodeId: string;
+  title: string;
+  type: string;
+  via: 'folder' | 'page';
+};
+
 /** A brain item a client-level item names but a client may not read: a
  *  mention chip, a link or an embed pointing at a team or admin item (or at
  *  something that is not the brain's). Its title reaches the client page as
  *  a label unless the client view hides it. */
 export type ClientReportRef = {
   id: string;
-  /** Null when the id names nothing the brain holds any more. */
+  /** Null when the id names nothing the brain holds: gone, or an item that
+   *  is not the brain's (a personal item), whose title is never shown. */
   type: string | null;
   title: string | null;
   /** The item's level; null when it is not a brain item (a personal item,
@@ -129,6 +150,10 @@ export type ClientReportItem = {
   emailedTo: string[];
   /** What it names that a client may not read (see ClientReportRef). */
   refsAbove: ClientReportRef[];
+  /** Live old links on a folder that holds it or a client page that embeds
+   *  it: anyone with one of those links can open this item. Absent from
+   *  brains before the audit fixes. */
+  oldLinksAbove?: ClientOldLinkAbove[];
 };
 
 /** The newest acknowledgement of the report. */
@@ -152,10 +177,18 @@ export type ClientReport = {
   acknowledged: boolean;
   /** Client-level items the newest acknowledgement did not include. */
   newSinceAck: string[];
+  /** sha256 hex of every current client-level item id (sorted, joined by
+   *  ','), the WHOLE set, not the 2000 shown. Send it back to acknowledge.
+   *  Absent from brains before the audit fixes. */
+  fingerprint?: string;
 };
 
-/** POST /api/access/client-report/ack { itemIds } -> the acknowledgement.
- *  `itemIds`: the client-level items the admin saw on the report. */
+/** POST /api/access/client-report/ack { fingerprint } (preferred) or
+ *  { itemIds } (old) -> the acknowledgement. With a fingerprint the server
+ *  recomputes it: equal records every current client-level item, different
+ *  answers 409 { error: 'conflict', reason: 'report-changed', message } and
+ *  the client reloads the report. `itemIds`: the client-level items the
+ *  admin saw on the report. */
 export type ClientReportAckResponse = { acknowledgement: ClientReportAck; acknowledged: boolean };
 
 /** GET /api/shares/all -> { shares: SharedLinkRow[] }: every live link,

package/src/dto/logins.ts

@@ -19,3 +19,12 @@ export type LoginRefused = {
   reason: LoginRefusedReason;
   message: string;
 };
+
+/** The 400 POST /api/users/:id/password answers when the target does not sign
+ *  in with a password: a client (a link or a code) or a role this brain does
+ *  not know. An admin's or a member's password can be reset. */
+export type PasswordResetRefused = {
+  error: string;
+  reason: 'not-a-password-login';
+  message: string;
+};

package/src/dto/review.ts

@@ -0,0 +1,55 @@
+/**
+ * Member review, the admin side (`/api/team-admin/submissions/*` and the
+ * admin's own Accept, `/api/admin/space/:id/accept`): the fields client
+ * logins added (C1, audit A28). Additive only: every field is optional on
+ * the wire, so an older brain or an older client keeps working.
+ */
+import type { AccessItemView, AccessLevel } from './access';
+
+/** Who wrote a reviewable item: a member or a client login. */
+export type ReviewAuthorRole = 'member' | 'client';
+
+/** GET /api/team-admin/submissions: a queue row's `author`. */
+export type ReviewAuthorView = {
+  loginId: string | null;
+  name: string;
+  email: string | null;
+  /** Deactivated, or the login is gone. */
+  inactive: boolean;
+  /** Member or client; null when the login is gone. Absent on brains
+   *  before client logins C1. */
+  role?: ReviewAuthorRole | null;
+};
+
+/** GET /api/team-admin/submissions/:id/bundle: what Accept would move. */
+export type AcceptPreview = {
+  items: { id: string; type: string; title: string }[];
+  linksStayingBehind: number;
+  /** Brain items in the embed closure of what Accept moves in, with their
+   *  CURRENT level. The client shows the ones above the chosen level: they
+   *  go DOWN with it and need a tick. */
+  closure?: AccessItemView[];
+};
+
+/** POST /api/team-admin/submissions/:id/accept and
+ *  POST /api/admin/space/:id/accept. */
+export type AcceptRequest = {
+  audience?: AccessLevel;
+  parentPageId?: string | null;
+  folderPath?: string | null;
+  /** A client's item at client or public: the admin confirmed the level. */
+  lowerConfirmed?: boolean;
+  /** Ids of closure items the admin ticked (with `lowerConfirmed: true`).
+   *  For a client's item at client or public every closure item that goes
+   *  down must be here. */
+  confirmedIds?: string[];
+};
+
+/** 409 from either Accept: a client's item at client or public without the
+ *  confirmation, or with a closure item that goes down not ticked. */
+export type AcceptConfirmLevelRefusal = {
+  error: string;
+  reason: 'confirm-level';
+  /** The brain items that would go down with it (tick each one). */
+  goingDown?: AccessItemView[];
+};

package/src/index.ts

@@ -40,6 +40,7 @@ export type {
   AccessLoweredView,
   AccessNodeUpdate,
   AccessNodeView,
+  ClientOldLinkAbove,
   ClientReport,
   ClientReportAck,
   ClientReportAckResponse,
@@ -48,6 +49,13 @@ export type {
   MemberItemAuthor,
   SharedLinkRow,
 } from './dto/access';
+export type {
+  AcceptConfirmLevelRefusal,
+  AcceptPreview,
+  AcceptRequest,
+  ReviewAuthorRole,
+  ReviewAuthorView,
+} from './dto/review';
 export type {
   AdminSpaceItem,
   AdminSpaceItemRow,
@@ -95,7 +103,12 @@ export type {
   MemberInviteState,
 } from './dto/member-invites';
 export type { MemberItemKind } from './member-kinds';
-export type { LoginKind, LoginRefused, LoginRefusedReason } from './dto/logins';
+export type {
+  LoginKind,
+  LoginRefused,
+  LoginRefusedReason,
+  PasswordResetRefused,
+} from './dto/logins';
 export type {
   ClientAdminRefusedReason,
   ClientLinkSignIn,