@crossworks/client-types 0.232.369 → 0.232.380

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossworks/client-types",
-  "version": "0.232.369",
+  "version": "0.232.380",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/dto/access.ts

@@ -7,6 +7,7 @@
  * docs/access-levels.md.
  */
 import type { ShareMode } from './rows';
+import type { AccessContactShare } from './contact-shares';
 
 /** Highest first: the order the control shows them in. */
 export const ACCESS_LEVELS = ['admin', 'team', 'client', 'public'] as const;
@@ -82,6 +83,10 @@ export type AccessNodeView = {
   /** What it is read through by embeds (migration 0208); null when nothing
    *  reaches it. Absent from brains before 0208. */
   readThrough?: AccessReadThrough | null;
+  /** The contacts it is shared with (contact shares, migration 0214): each
+   *  has its own link, opened with that contact's code. They change no
+   *  level. Absent from brains before 0214. */
+  contactShares?: AccessContactShare[];
 };
 
 /** An item is read through the items that embed it (migration 0208): a
@@ -255,6 +260,12 @@ export type SharedLinkRow = {
   /** The item's level (client logins C1): `client` marks an old link, from
    *  when client meant an open link. Absent from brains before C1. */
   level?: AccessLevel;
+  /** A contact share (migration 0214): the contact it is for, by id and
+   *  name. Null or absent on an open link and on brains before 0214. */
+  contactId?: string | null;
+  contactName?: string | null;
+  /** A contact share of an app whose contact may write its data. */
+  canWrite?: boolean;
 };
 
 /** An old client link the brain retired (client logins C3, migration 0192):

package/src/dto/agent-graph.ts

@@ -79,10 +79,32 @@ export interface ToolDTO {
   handler: ToolHandler;
   requiresConfirm: boolean;
   enabled: boolean;
+  /** "Team apps may use" on an outside tool (mcp or http): team members'
+   *  runs of a team app may call it. Null when off. Absent from servers
+   *  before it shipped. Set it with `PUT /api/tools/:id/team-apps`. */
+  teamApps?: ToolTeamAppsDTO | null;
   createdAt: string;
   updatedAt: string;
 }
 
+/** The "Team apps may use" switch of one tool, as the server reports it. */
+export interface ToolTeamAppsDTO {
+  /** False when the handler changed after the admin confirmed it: the switch
+   *  no longer counts and must be switched on again. */
+  on: boolean;
+  /** When the admin confirmed the tool only reads (ISO time). */
+  confirmedReadOnlyAt: string;
+  /** Who switched it on. */
+  by: { via: 'web' | 'mcp' | 'dev-tools'; actorId?: string; actorEmail?: string };
+}
+
+/** `PUT /api/tools/:id/team-apps` body. Switching on needs
+ *  `readOnlyConfirmed: true` (the admin confirms the tool only reads). */
+export interface ToolTeamAppsBody {
+  allow: boolean;
+  readOnlyConfirmed?: boolean;
+}
+
 /** `GET/PUT /api/tools/settings` — the two owner-level tool policy toggles. */
 export interface ToolSettings {
   /** Tools an agent authors (Toolsmith) start confirm-gated until cleared. */

package/src/dto/contact-shares.ts

@@ -0,0 +1,98 @@
+/**
+ * Contact shares (migration 0214; docs/sharing.md, "Contact shares"): one
+ * workspace item shared with one contact. The contact opens the item's own
+ * link (`/s/<token>`) with their personal code. The item's level never
+ * changes, so the team never sees it. Read only, except an app with
+ * "Can write". Never brain tools.
+ */
+
+/** A contact's sharing (the contact DTO's `sharing`); null: sharing off. */
+export type ContactSharing = {
+  /** When the current code was made (Enable or Regenerate). */
+  enabledAt: string;
+  lastUsedAt: string | null;
+  /** 30 wrong codes in a day lock the contact for 24 hours. Regenerate
+   *  clears the lock. */
+  locked: boolean;
+  /** Live contact shares of this contact. */
+  shareCount: number;
+};
+
+/** POST /api/contacts/:id/sharing body. */
+export type ContactSharingAction = 'enable' | 'regenerate' | 'disable';
+
+/** POST /api/contacts/:id/sharing answer. `code` comes ONCE (enable and
+ *  regenerate); `revoked` is how many shares a disable ended. */
+export type ContactSharingResponse = {
+  sharing: ContactSharing | null;
+  code?: string;
+  revoked?: number;
+};
+
+/** One row of a contact's "Shared" tab (GET /api/contacts/:id/shares). */
+export type ContactShareRow = {
+  shareId: string;
+  nodeId: string;
+  /** The item's node type ('page', 'app', ...). */
+  kind: string;
+  icon: string | null;
+  title: string;
+  canWrite: boolean;
+  /** When the item was shared with the contact. */
+  sharedAt: string;
+  /** When the contact last opened it (null: never). */
+  lastOpenedAt: string | null;
+  /** Server-relative: `/s/<token>`. */
+  path: string;
+};
+
+/** GET /api/contacts/:id/shares?cursor= : live shares, newest first, 100 a
+ *  page. `nextCursor` null: the last page. */
+export type ContactSharesPage = {
+  shares: ContactShareRow[];
+  nextCursor: string | null;
+};
+
+/** DELETE /api/contacts/:id/shares (Revoke all): no level changes, sharing
+ *  stays on. */
+export type ContactSharesRevokedAll = { revoked: number };
+
+/** POST /api/shares/contacts body. `canWrite` only for an app. */
+export type CreateContactSharesBody = {
+  nodeId: string;
+  contactIds: string[];
+  canWrite?: boolean;
+};
+
+/** One share POST /api/shares/contacts made (or found: the call is
+ *  idempotent per item and contact). */
+export type CreatedContactShare = {
+  shareId: string;
+  contactId: string;
+  /** Server-relative: `/s/<token>`. */
+  path: string;
+};
+
+/** POST /api/shares/contacts answer. */
+export type CreateContactSharesResponse = { shares: CreatedContactShare[] };
+
+/** Why POST /api/shares/contacts refused (400 `{ error, reason }`). */
+export type ContactShareRefusedReason =
+  'sharing-off' | 'not-a-contact' | 'not-shareable' | 'folder' | 'write-not-app';
+
+/** PATCH /api/shares/:id body for a contact share of an app. */
+export type ContactShareUpdate = { canWrite: boolean };
+
+/** One contact an item is shared with (`AccessNodeView.contactShares`). */
+export type AccessContactShare = {
+  shareId: string;
+  contactId: string;
+  name: string;
+  canWrite: boolean;
+  /** The contact's sharing is on: off means the link opens nothing (a
+   *  switch off revokes the shares, so this is rarely false). */
+  sharingOn: boolean;
+  lastOpenedAt: string | null;
+  /** Server-relative: `/s/<token>`. */
+  path: string;
+};

package/src/dto/rows.ts

@@ -609,7 +609,15 @@ export type NeedsYou = {
     open: number;
     newest: NeedsYouItem | null;
   };
-  /** review.submitted + review.leftBehind + requests.open. */
+  /** Contacts whose sharing locked after 30 wrong codes in a day (contact
+   *  shares, migration 0214): the code opens nothing until the lock lapses
+   *  or an admin regenerates it. `newest.from` is empty. Absent from brains
+   *  before 0214. */
+  sharing?: {
+    locked: number;
+    newest: NeedsYouItem | null;
+  };
+  /** review.submitted + review.leftBehind + requests.open (+ sharing.locked). */
   total: number;
 };
 

package/src/index.ts

@@ -32,6 +32,7 @@ export * from './dto/turns';
 export * from './dto/rows';
 export * from './dto/views';
 export * from './dto/recall';
+export * from './dto/contact-shares';
 // Types only; ACCESS_LEVELS (runtime) is the `@mantle/client-types/dto/access` subpath.
 export type {
   AccessItemView,