@elliemae/microfe-common 2.23.4 → 2.24.0

package/dist/types/lib/index.d.ts

@@ -10,5 +10,5 @@ export { MessageType } from './messageType.js';
 export type { EventListeners, Listener } from './common.js';
 export type { ISSFGuest, ConnectParam } from './guest.js';
 export { ScriptingObjectManager, SecurityContext, } from './scriptingObjectManager.js';
-export type { AddScriptingObjectParams, GetObjectParams, GuestContext, } from './scriptingObjectManager.js';
+export type { AddScriptingObjectParams, CallContext, CallerInfo, GetObjectParams, GuestContext, } from './scriptingObjectManager.js';
 export { ScriptingObjectProxy, isScriptingObjectProxy } from './proxy.js';

package/dist/types/lib/scriptingObjectManager.d.ts

@@ -11,6 +11,41 @@ export type GuestContext = {
      */
     id: string;
 };
+/**
+ * identity and optional host-supplied metadata for a caller
+ * in the call chain.
+ */
+export type CallerInfo = GuestContext & {
+    /**
+     * arbitrary metadata the intermediate host associates with
+     * this guest (e.g. security role, tenant id, permissions).
+     * Supplied via the `metadata` option in loadGuest().
+     */
+    metadata?: Record<string, unknown>;
+};
+/**
+ * Context attached to scripting object method calls.
+ * `guest` identifies the direct caller (verified via sourceWin);
+ * `callChain` traces the full path from the original caller when
+ * the call is forwarded through intermediate host/guest layers.
+ *
+ * **Trust model**: `guest` is host-verified (derived from the
+ * message source window). `callChain` is self-reported by the
+ * intermediate guest and carries the same trust level as the
+ * direct caller — if you trust guest B, you can trust the
+ * callChain it supplies.
+ */
+export type CallContext = {
+    guest: GuestContext;
+    /**
+     * Ordered list of callers when a call is forwarded through
+     * intermediate guests (e.g. A hosts B hosts C, C calls a
+     * scripting object — callChain will be [{ id: "C" }]).
+     * Each entry may carry host-supplied metadata.
+     * Absent for direct (non-forwarded) calls.
+     */
+    callChain?: CallerInfo[];
+};
 /**
  * security context under which the guest application is running
  */