@homespunapps/core 1.6.78 → 1.6.79

package/dist/client.d.ts

@@ -487,6 +487,33 @@ export declare class HomespunClient {
      * be removed — the relay refuses with a 409 conflict.
      */
     removeAppMember(appId: string, humanId: string): Promise<void>;
+    /**
+     * POST /v1/apps/:id/transfer: invite `opts.email` to take ownership of the
+     * app. Nothing moves yet: the relay mints a pending transfer and emails the
+     * recipient an accept link, and ownership only changes hands once they
+     * accept it. `keepAsMember` (default true) decides whether the current
+     * owner stays on as a plain member afterward, or is removed the moment the
+     * transfer is accepted. 409s when a transfer is already pending for this
+     * app, or when the target is already the owner.
+     */
+    createAppTransfer(appId: string, opts: {
+        email: string;
+        keepAsMember?: boolean;
+    }): Promise<{
+        transfer: AppTransfer;
+    }>;
+    /**
+     * GET /v1/apps/:id/transfer: the app's pending transfer, or `null` when
+     * none is pending.
+     */
+    getAppTransfer(appId: string): Promise<{
+        transfer: AppTransfer | null;
+    }>;
+    /**
+     * DELETE /v1/apps/:id/transfer: withdraw the app's pending transfer.
+     * Idempotent: a 204 comes back even when nothing was pending.
+     */
+    cancelAppTransfer(appId: string): Promise<void>;
     /**
      * GET /v1/apps/:id/collections/:name/retention returns the collection's
      * effective retention (the bounds in force), the author default, the raw owner
@@ -1316,6 +1343,19 @@ export interface AppMember {
     customRole?: string | null;
     createdAt: string;
 }
+/**
+ * A pending app ownership transfer (issue #1847): the shape `createAppTransfer`
+ * and `getAppTransfer` return. Fields are camelCase on the wire, matching the
+ * app-membership shapes above rather than the usual snake_case convention.
+ */
+export interface AppTransfer {
+    id: string;
+    appId: string;
+    toEmail: string;
+    keepAsMember: boolean;
+    expiresAt: string;
+    createdAt: string;
+}
 /**
  * One inbound catch-hook row from `listIngestHooks`. `url` is the full secret
  * ingest URL to hand a sender. Rule-derived fields (collection/mode/wake/

package/dist/client.js

@@ -864,6 +864,47 @@ export class HomespunClient {
             this.fail(r);
     }
     // -------------------------------------------------------------------------
+    // App ownership transfer (issue #1847). Moving an app to another human is a
+    // two-party job, same shape as custom domains above: this side mints a
+    // pending transfer and emails the recipient, and ownership only actually
+    // moves once THEY accept it from that email, by verified address. An app
+    // holds at most one pending transfer at a time.
+    // -------------------------------------------------------------------------
+    /**
+     * POST /v1/apps/:id/transfer: invite `opts.email` to take ownership of the
+     * app. Nothing moves yet: the relay mints a pending transfer and emails the
+     * recipient an accept link, and ownership only changes hands once they
+     * accept it. `keepAsMember` (default true) decides whether the current
+     * owner stays on as a plain member afterward, or is removed the moment the
+     * transfer is accepted. 409s when a transfer is already pending for this
+     * app, or when the target is already the owner.
+     */
+    async createAppTransfer(appId, opts) {
+        const r = await this.call("POST", `/v1/apps/${encodeURIComponent(appId)}/transfer`, { email: opts.email, keepAsMember: opts.keepAsMember });
+        if (!r.ok)
+            this.fail(r);
+        return this.asObject(r);
+    }
+    /**
+     * GET /v1/apps/:id/transfer: the app's pending transfer, or `null` when
+     * none is pending.
+     */
+    async getAppTransfer(appId) {
+        const r = await this.call("GET", `/v1/apps/${encodeURIComponent(appId)}/transfer`);
+        if (!r.ok)
+            this.fail(r);
+        return this.asObject(r);
+    }
+    /**
+     * DELETE /v1/apps/:id/transfer: withdraw the app's pending transfer.
+     * Idempotent: a 204 comes back even when nothing was pending.
+     */
+    async cancelAppTransfer(appId) {
+        const r = await this.call("DELETE", `/v1/apps/${encodeURIComponent(appId)}/transfer`);
+        if (!r.ok)
+            this.fail(r);
+    }
+    // -------------------------------------------------------------------------
     // Collection retention override (issue #956). The author declares default
     // retention in the manifest; this lets the OWNER tighten or loosen it per
     // collection at runtime, without a redeploy. Effective retention is per-axis

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { HomespunClient, HomespunApiError, putPresigned } from "./client.js";
-export type { ClientOptions, RelayResponse, AttachmentRef, UploadBlobOptions, PresignBlobOptions, AttachmentTokenMintResponse, ListBlobsOptions, AttachmentTokenAuditEntry, AttachmentTokenListResponse, QueryResponse, AppAsset, DeployAppRequest, DeployAppResponse, RedeployAppRequest, RedeployAppResponse, DeployCheckRequest, DeployCheckResult, MissingConnection, KeyMintResult, AppSummary, AppDetail, AppsPage, AppDomain, AppDomainDnsRecord, AppMember, AddAppMemberResult, AppRow, AppRowsPage, ListScalar, ListWhereCondition, ListSortSpec, BatchRowInput, BatchRowResult, BatchResult, BatchWriteOptions, AppFeedEntry, AppFeedPage, CommunitySetupStep, RetentionAxes, CollectionRetentionView, ServiceCredentialGrant, MintAppCredentialResult, AppCredentialSummary, RotateAppCredentialResult, ConnectionSummary, } from "./client.js";
+export type { ClientOptions, RelayResponse, AttachmentRef, UploadBlobOptions, PresignBlobOptions, AttachmentTokenMintResponse, ListBlobsOptions, AttachmentTokenAuditEntry, AttachmentTokenListResponse, QueryResponse, AppAsset, DeployAppRequest, DeployAppResponse, RedeployAppRequest, RedeployAppResponse, DeployCheckRequest, DeployCheckResult, MissingConnection, KeyMintResult, AppSummary, AppDetail, AppsPage, AppDomain, AppDomainDnsRecord, AppMember, AddAppMemberResult, AppTransfer, AppRow, AppRowsPage, ListScalar, ListWhereCondition, ListSortSpec, BatchRowInput, BatchRowResult, BatchResult, BatchWriteOptions, AppFeedEntry, AppFeedPage, CommunitySetupStep, RetentionAxes, CollectionRetentionView, ServiceCredentialGrant, MintAppCredentialResult, AppCredentialSummary, RotateAppCredentialResult, ConnectionSummary, } from "./client.js";
 export { openStream } from "./stream.js";
 export type { OpenStreamOptions, StreamHandlers, StreamHandle, } from "./stream.js";
 export { openAppStream, appWsUrlFromAppUrl } from "./app-stream.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homespunapps/core",
-  "version": "1.6.78",
+  "version": "1.6.79",
   "description": "Homespun relay client: typed HTTP + WebSocket operations against a Homespun relay. Framework-free.",
   "license": "MIT",
   "type": "module",