@crossworks/client-types 0.232.381 → 0.232.384

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossworks/client-types",
-  "version": "0.232.381",
+  "version": "0.232.384",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

package/src/app-viewer.ts

@@ -0,0 +1,43 @@
+/**
+ * Who runs a mini app (app identity, 2026-10-02): what `host.me()` answers
+ * inside the app, and what the server fills into the reserved SQL parameters
+ * `:host_me_id`, `:host_me_name` and `:host_me_kind`. Docs:
+ * docs/app-authoring-guide.md, "Who is running the app".
+ *
+ * There is no email field, by design: an app is code the admin may not have
+ * written. `id` is a per-app pseudonym (the same person has a different id in
+ * every app), so an app cannot join a person across apps.
+ */
+
+/** The kind of viewer: the owner or an admin login, a member login, a client
+ *  login, a Contact share's contact, or an open /s link (no person). */
+export type AppViewerKind = 'admin' | 'member' | 'client' | 'contact' | 'public';
+
+export type AppViewer = {
+  /** Stable for this person inside this app only; null on an open link. */
+  id: string | null;
+  /** The display name, for display; null when none is set, and on an open
+   *  link. Never use it for permission logic. */
+  name: string | null;
+  kind: AppViewerKind;
+};
+
+/** The viewer on an open /s link: nobody in particular. */
+export const PUBLIC_APP_VIEWER: AppViewer = Object.freeze({
+  id: null,
+  name: null,
+  kind: 'public',
+}) as AppViewer;
+
+/** Every SQL parameter name with this prefix (any case, after the `:`, `@` or
+ *  `$`) is the server's: an app may use the three below in its SQL, and a
+ *  value the browser sends for any such name is refused. */
+export const APP_VIEWER_PARAM_PREFIX = 'host_me_';
+
+/** The reserved parameter names (without the prefix character) and the
+ *  AppViewer field each one is filled from. */
+export const APP_VIEWER_PARAMS = {
+  host_me_id: 'id',
+  host_me_name: 'name',
+  host_me_kind: 'kind',
+} as const satisfies Record<string, keyof AppViewer>;

package/src/dto/agent-graph.ts

@@ -9,6 +9,8 @@
  * public surface is byte-identical — only the file a symbol lives in moved.
  */
 
+import type { AccessLevel } from './access';
+
 // ── Skills ────────────────────────────────────────────────────────────────────
 
 /** A skill as returned by `GET /api/skills`. */
@@ -191,6 +193,11 @@ export interface ToolGroupDTO {
   /** Set when the group is an API integration; null for capability-only bundles. */
   integration: ToolGroupIntegrationDTO | null;
   enabled: boolean;
+  /** The group's level: an agent or a team app may hold it only at or above
+   *  it, and team apps call only tools in an enabled group at team level or
+   *  below. Absent from servers before it shipped. Set it with
+   *  `PATCH /api/access/tool-groups/:slug { audience }`. */
+  audience?: AccessLevel;
   createdAt: string;
   updatedAt: string;
 }

package/src/index.ts

@@ -178,6 +178,10 @@ export type {
   AppTint,
 } from './app-nav';
 
+// Types only at the root; the runtime constants (the reserved parameter names)
+// are the `@mantle/client-types/app-viewer` subpath.
+export type { AppViewer, AppViewerKind } from './app-viewer';
+
 // Types only at the root; the runtime constants (kinds, specs, limits) are the
 // `@mantle/client-types/tree` subpath.
 export type {