@hotmeshio/long-tail 0.23.1 → 0.24.0

package/build/adapters/express.d.ts

@@ -1,4 +1,4 @@
-import { Router } from 'express';
+import { Router } from '../lib/http';
 import type { Server as HttpServer } from 'http';
 /**
  * Express adapter for mounting the Long Tail dashboard at an arbitrary subpath
@@ -65,5 +65,13 @@ export declare class LTExpressAdapter {
      * - SPA fallback with injected `<base href>` and `window.__LT_BASE__`
      */
     getRouter(): Router;
+    /**
+     * The OAuth well-known documents. Mount at the host's root, not under the
+     * base path: clients look for them at the origin. It answers only its two
+     * paths and passes everything else on.
+     */
+    getWellKnownRouter(): Router;
+    /** Whether a built dashboard was found to serve. */
+    hasDashboard(): boolean;
     private resolveDashboardDist;
 }

package/build/adapters/express.js

@@ -1,37 +1,4 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -39,9 +6,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LTExpressAdapter = void 0;
 const fs_1 = require("fs");
 const path_1 = __importDefault(require("path"));
-const express_1 = __importStar(require("express"));
+const http_1 = require("../lib/http");
+const CONSENT_PAGE_PATH = '/oauth/consent';
 const routes_1 = __importDefault(require("../routes"));
 const mcp_endpoint_1 = __importDefault(require("../routes/mcp-endpoint"));
+const oauth_well_known_1 = require("../routes/oauth-well-known");
 const events_1 = require("../lib/events");
 const socketio_1 = require("../lib/events/socketio");
 const nats_1 = require("../lib/events/nats");
@@ -124,6 +93,7 @@ class LTExpressAdapter {
             }
             (0, nats_ws_proxy_1.attachNatsWsProxy)(server, natsAdapter.wsProxyTarget, {
                 basePath: this.basePath,
+                authToken: natsAdapter.authToken,
                 onWsUrlDerived: (url) => {
                     if (!natsAdapter.wsUrl) {
                         natsAdapter.setWsUrl(url);
@@ -141,8 +111,8 @@ class LTExpressAdapter {
      * - SPA fallback with injected `<base href>` and `window.__LT_BASE__`
      */
     getRouter() {
-        const router = (0, express_1.Router)();
-        router.use(express_1.default.json());
+        const router = (0, http_1.Router)();
+        router.use((0, http_1.jsonBody)());
         // Health check
         router.get('/health', (_req, res) => {
             res.json({ status: 'ok', timestamp: new Date().toISOString() });
@@ -154,16 +124,25 @@ class LTExpressAdapter {
         // Dashboard static assets
         const dashboardDist = this.resolveDashboardDist();
         if (dashboardDist) {
-            router.use(express_1.default.static(dashboardDist, { index: false }));
-            // SPA fallback — inject base path into index.html
-            const indexHtml = (0, fs_1.readFileSync)(path_1.default.join(dashboardDist, 'index.html'), 'utf-8');
+            router.use((0, http_1.serveStatic)(dashboardDist, { index: false }));
+            // SPA fallback — inject base path into index.html. Outside production
+            // the file is re-read per request so dashboard rebuilds show without a restart.
+            const indexPath = path_1.default.join(dashboardDist, 'index.html');
+            const cachedIndex = process.env.NODE_ENV === 'production' ? (0, fs_1.readFileSync)(indexPath, 'utf-8') : null;
             const basePath = this.basePath;
             // Serve __LT_BASE__ as external script (CSP-safe, no inline scripts)
             router.get('/config.js', (_req, res) => {
                 res.type('application/javascript').send(`window.__LT_BASE__="${basePath}";`);
             });
-            router.get('/{*splat}', (_req, res) => {
-                const html = indexHtml.replace('<head>', '<head>' +
+            router.get('/{*splat}', (req, res) => {
+                // The consent page grants access to a person's account: never inside
+                // a frame. Browsers enforce every CSP header, so appending a second
+                // policy keeps the host's and still refuses framing.
+                if (req.path.startsWith(CONSENT_PAGE_PATH)) {
+                    res.setHeader('X-Frame-Options', 'DENY');
+                    res.append('Content-Security-Policy', "frame-ancestors 'none'");
+                }
+                const html = (cachedIndex ?? (0, fs_1.readFileSync)(indexPath, 'utf-8')).replace('<head>', '<head>' +
                     `<base href="${basePath}/">` +
                     `<script src="./config.js"></script>`);
                 res.type('html').send(html);
@@ -171,6 +150,18 @@ class LTExpressAdapter {
         }
         return router;
     }
+    /**
+     * The OAuth well-known documents. Mount at the host's root, not under the
+     * base path: clients look for them at the origin. It answers only its two
+     * paths and passes everything else on.
+     */
+    getWellKnownRouter() {
+        return (0, oauth_well_known_1.createWellKnownRouter)();
+    }
+    /** Whether a built dashboard was found to serve. */
+    hasDashboard() {
+        return this.resolveDashboardDist() !== null;
+    }
     resolveDashboardDist() {
         // Check multiple paths relative to the compiled output location:
         // - Dev (ts-node from repo root): adapters/ -> dashboard/dist

package/build/api/auth-sso.d.ts

@@ -1,4 +1,4 @@
-import type { Request, Response } from 'express';
+import type { Request, Response } from '../lib/http';
 import type { LTApiResult } from '../types/sdk';
 /**
  * Exchange host authentication for a Long Tail JWT.

package/build/api/bot-accounts.d.ts

@@ -138,4 +138,6 @@ export declare function createBotKey(input: {
  */
 export declare function revokeBotKey(input: {
     keyId: string;
+    /** When given, the key is revoked only if it belongs to this bot. */
+    botId?: string;
 }): Promise<LTApiResult>;

package/build/api/bot-accounts.js

@@ -44,6 +44,7 @@ exports.removeBotRole = removeBotRole;
 exports.listBotKeys = listBotKeys;
 exports.createBotKey = createBotKey;
 exports.revokeBotKey = revokeBotKey;
+const bot_api_key_1 = require("../services/auth/bot-api-key");
 const iam = __importStar(require("../services/iam"));
 const user_1 = require("../services/user");
 /**
@@ -292,6 +293,9 @@ async function createBotKey(input) {
  */
 async function revokeBotKey(input) {
     try {
+        if (input.botId !== undefined && (await (0, bot_api_key_1.getBotApiKeyOwner)(input.keyId)) !== input.botId) {
+            return { status: 404, error: 'API key not found' };
+        }
         const revoked = await iam.revokeBotKey(input.keyId);
         if (!revoked) {
             return { status: 404, error: 'API key not found' };

package/build/api/capabilities.d.ts

@@ -1,2 +1,7 @@
-import type { LTApiResult } from '../types/sdk';
-export declare function listCapabilities(): Promise<LTApiResult>;
+import type { LTApiAuth, LTApiResult } from '../types/sdk';
+/**
+ * Every tool the caller may run, by category. A built-in server's tool is
+ * listed only when its manifest gate admits the caller, the same rule the
+ * tool-call route applies; an external server's tools are listed as before.
+ */
+export declare function listCapabilities(auth?: LTApiAuth): Promise<LTApiResult>;

package/build/api/capabilities.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.listCapabilities = listCapabilities;
 const db_1 = require("../lib/db");
+const capabilities_1 = require("../modules/capabilities");
+const tools_1 = require("./mcp/tools");
 const LIST_SERVERS_WITH_TOOLS = `
   SELECT id, name, description, tags, tool_manifest, compile_hints, category
   FROM lt_mcp_servers
@@ -40,18 +42,27 @@ function resolveCategory(server) {
     }
     return 'Other';
 }
-async function listCapabilities() {
+/**
+ * Every tool the caller may run, by category. A built-in server's tool is
+ * listed only when its manifest gate admits the caller, the same rule the
+ * tool-call route applies; an external server's tools are listed as before.
+ */
+async function listCapabilities(auth) {
     try {
         const pool = (0, db_1.getPool)();
         const { rows } = await pool.query(LIST_SERVERS_WITH_TOOLS);
         const categoryMap = new Map();
+        const access = (0, capabilities_1.capabilityAccess)(auth?.userId ? { userId: auth.userId } : undefined);
         for (const server of rows) {
             const category = resolveCategory(server);
             const tools = (server.tool_manifest || []);
             if (!categoryMap.has(category)) {
                 categoryMap.set(category, []);
             }
+            const builtin = await (0, tools_1.builtinServerFor)(server.name);
             for (const tool of tools) {
+                if (builtin && !(await access((0, tools_1.builtinToolGate)(builtin, tool.name))))
+                    continue;
                 categoryMap.get(category).push({
                     name: tool.name,
                     description: tool.description || '',
@@ -62,7 +73,7 @@ async function listCapabilities() {
             }
         }
         const categories = CATEGORY_ORDER
-            .filter((name) => categoryMap.has(name))
+            .filter((name) => (categoryMap.get(name)?.length ?? 0) > 0)
             .map((name) => ({
             name,
             tools: categoryMap.get(name).sort((a, b) => a.name.localeCompare(b.name)),

package/build/api/escalations/analytics.js

@@ -73,6 +73,11 @@ async function effectiveRoles(query) {
     // query will actually touch. Resolution throws AnalyticsInputError (→ 400)
     // for unknown keys, before any scope decision.
     if (query?.entity) {
+        // The gate covers the entity's roles only, so a role filter beside it is
+        // refused here, before the gate, rather than reaching the query unchecked.
+        if (query.role !== undefined || query.roles !== undefined) {
+            throw new escalation_1.AnalyticsInputError('query.entity and query.role/roles are two scoping mechanisms: use one');
+        }
         return (await escalationService.resolveEntitySystem(query.entity)).map((s) => s.role);
     }
     if (query?.role)

package/build/api/escalations/bulk.d.ts

@@ -43,6 +43,8 @@ export declare function bulkClaim(input: {
  *
  * Non-superadmin callers must verify the target user holds each
  * escalation's role (the query form requires exactly the declared role).
+ * The query form also requires the caller to manage that role's queue
+ * (write_scope all); read-only and self-scope members may not assign.
  * Publishes claim events for assigned items.
  *
  * @param input.ids — array of escalation UUIDs (ids form)

package/build/api/escalations/bulk.js

@@ -128,6 +128,8 @@ async function bulkClaim(input, auth) {
  *
  * Non-superadmin callers must verify the target user holds each
  * escalation's role (the query form requires exactly the declared role).
+ * The query form also requires the caller to manage that role's queue
+ * (write_scope all); read-only and self-scope members may not assign.
  * Publishes claim events for assigned items.
  *
  * @param input.ids — array of escalation UUIDs (ids form)
@@ -163,14 +165,17 @@ async function bulkAssign(input, auth) {
             if (!query.role || typeof query.role !== 'string') {
                 return { status: 400, error: 'query.role is required' };
             }
-            // RBAC, query form: the caller must hold the queried role (or global),
-            // and the target user must hold it — one role check instead of per-id.
+            // RBAC, query form: the caller must manage the queried role's queue
+            // (write_scope all, or global), and the target user must hold the role.
             const hasGlobal = await (0, helpers_1.hasGlobalEscalationAccess)(auth.userId);
             if (!hasGlobal) {
-                const callerHasRole = await userService.hasRole(auth.userId, query.role);
-                if (!callerHasRole) {
+                const callerScope = await userService.getRoleScope(auth.userId, query.role);
+                if (!callerScope) {
                     return { status: 404, error: 'One or more escalations not found' };
                 }
+                if (callerScope.write !== 'all') {
+                    return { status: 403, error: `You do not have permission to manage the "${query.role}" queue` };
+                }
                 const targetHasRole = await userService.hasRole(targetUserId, query.role);
                 if (!targetHasRole) {
                     return { status: 400, error: `Target user does not hold the "${query.role}" role` };

package/build/api/escalations/helpers.d.ts

@@ -15,6 +15,11 @@ export interface EscalationReadScope {
     selfRoles: string[];
 }
 export declare function getEscalationReadScope(userId: string): Promise<EscalationReadScope>;
+/** Whether a read scope admits one escalation: the same rule as assertReadAccess, with no lookup. */
+export declare function scopeAdmits(scope: EscalationReadScope, userId: string, escalation: {
+    role: string;
+    assigned_to?: string | null;
+}): boolean;
 export declare function validateIds(ids: unknown): ids is string[];
 /**
  * Write-scope partition for metadata-driven resolve. Splits the user's roles by

package/build/api/escalations/helpers.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.hasGlobalEscalationAccess = void 0;
 exports.getEscalationReadScope = getEscalationReadScope;
+exports.scopeAdmits = scopeAdmits;
 exports.validateIds = validateIds;
 exports.getEscalationWriteScope = getEscalationWriteScope;
 exports.assertReadAccess = assertReadAccess;
@@ -70,6 +71,12 @@ async function getEscalationReadScope(userId) {
     }
     return { global: false, allRoles, selfRoles };
 }
+/** Whether a read scope admits one escalation: the same rule as assertReadAccess, with no lookup. */
+function scopeAdmits(scope, userId, escalation) {
+    if (scope.global || scope.allRoles.includes(escalation.role))
+        return true;
+    return scope.selfRoles.includes(escalation.role) && escalation.assigned_to === userId;
+}
 function validateIds(ids) {
     return Array.isArray(ids) && ids.length > 0;
 }

package/build/api/escalations/index.d.ts

@@ -11,3 +11,4 @@ export { findByMetadata, claimByMetadata, resolveByMetadata } from './metadata';
 export { cancelSingleEscalation, bulkCancel } from './cancel';
 export { searchByFacets, claimGroups, claimByFacets } from './facets';
 export { aggregateByFacets, timelineByFacet } from './analytics';
+export { getRelatedAggregates, getRelatedRows } from './related';

package/build/api/escalations/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.timelineByFacet = exports.aggregateByFacets = exports.claimByFacets = exports.claimGroups = exports.searchByFacets = exports.bulkCancel = exports.cancelSingleEscalation = exports.resolveByMetadata = exports.claimByMetadata = exports.findByMetadata = exports.itemsView = exports.getEscalationItemsBySignalKey = exports.getEscalationItems = exports.removeItemByMetadata = exports.removeItemBySignalKey = exports.removeItem = exports.accumulateItemByMetadata = exports.accumulateItemBySignalKey = exports.accumulateItem = exports.resolveBatchItemByMetadata = exports.resolveBatchItemBySignalKey = exports.resolveBatchItem = exports.resolveAllOrNone = exports.resolveByIds = exports.resolveBySignalKey = exports.resolveEscalation = exports.bulkTriage = exports.bulkEscalate = exports.bulkUnassign = exports.bulkAssign = exports.bulkClaim = exports.updatePriority = exports.releaseExpiredClaims = exports.releaseEscalation = exports.claimEscalation = exports.getEscalationLookups = exports.escalateToRole = exports.getEscalationsByWorkflowId = exports.getEscalation = exports.getStationMetrics = exports.getEscalationStats = exports.listFacetValues = exports.listFacetKeys = exports.listDistinctTypes = exports.listAvailableEscalations = exports.listEscalations = exports.createEscalation = void 0;
+exports.getRelatedRows = exports.getRelatedAggregates = exports.timelineByFacet = exports.aggregateByFacets = exports.claimByFacets = exports.claimGroups = exports.searchByFacets = exports.bulkCancel = exports.cancelSingleEscalation = exports.resolveByMetadata = exports.claimByMetadata = exports.findByMetadata = exports.itemsView = exports.getEscalationItemsBySignalKey = exports.getEscalationItems = exports.removeItemByMetadata = exports.removeItemBySignalKey = exports.removeItem = exports.accumulateItemByMetadata = exports.accumulateItemBySignalKey = exports.accumulateItem = exports.resolveBatchItemByMetadata = exports.resolveBatchItemBySignalKey = exports.resolveBatchItem = exports.resolveAllOrNone = exports.resolveByIds = exports.resolveBySignalKey = exports.resolveEscalation = exports.bulkTriage = exports.bulkEscalate = exports.bulkUnassign = exports.bulkAssign = exports.bulkClaim = exports.updatePriority = exports.releaseExpiredClaims = exports.releaseEscalation = exports.claimEscalation = exports.getEscalationLookups = exports.escalateToRole = exports.getEscalationsByWorkflowId = exports.getEscalation = exports.getStationMetrics = exports.getEscalationStats = exports.listFacetValues = exports.listFacetKeys = exports.listDistinctTypes = exports.listAvailableEscalations = exports.listEscalations = exports.createEscalation = void 0;
 var create_1 = require("./create");
 Object.defineProperty(exports, "createEscalation", { enumerable: true, get: function () { return create_1.createEscalation; } });
 var list_1 = require("./list");
@@ -61,3 +61,6 @@ Object.defineProperty(exports, "claimByFacets", { enumerable: true, get: functio
 var analytics_1 = require("./analytics");
 Object.defineProperty(exports, "aggregateByFacets", { enumerable: true, get: function () { return analytics_1.aggregateByFacets; } });
 Object.defineProperty(exports, "timelineByFacet", { enumerable: true, get: function () { return analytics_1.timelineByFacet; } });
+var related_1 = require("./related");
+Object.defineProperty(exports, "getRelatedAggregates", { enumerable: true, get: function () { return related_1.getRelatedAggregates; } });
+Object.defineProperty(exports, "getRelatedRows", { enumerable: true, get: function () { return related_1.getRelatedRows; } });

package/build/api/escalations/list.d.ts

@@ -19,6 +19,11 @@ export interface FacetInput {
      * carries the full record.
      */
     include?: string;
+    /**
+     * Page by groups of this metadata key: a page holds whole groups and
+     * `total` counts groups. The response adds `groups: [{ key, ids }]`.
+     */
+    groupBy?: string;
 }
 /**
  * List escalations with optional filters.

package/build/api/escalations/list.js

@@ -43,6 +43,7 @@ exports.getStationMetrics = getStationMetrics;
 const escalationService = __importStar(require("../../services/escalation"));
 const features_1 = require("../../modules/features");
 const helpers_1 = require("./helpers");
+const facet_sql_1 = require("../../services/escalation/facet-sql");
 /** Strip the heavyweight JSON columns from list rows unless asked back. */
 function projectListRows(rows, include) {
     if (include === 'envelope')
@@ -53,6 +54,12 @@ function projectListRows(rows, include) {
 function projectListResult(result, include) {
     return { ...result, escalations: projectListRows(result.escalations, include) };
 }
+/** Run a scoped faceted search, paged by groups when the caller asked. */
+async function runFacetedSearch(search, groupBy) {
+    return groupBy
+        ? escalationService.searchEscalationsGrouped({ ...search, groupKey: groupBy })
+        : escalationService.searchEscalationsFaceted(search);
+}
 /** True when the caller asked for anything the plain list path can't express. */
 function hasFacetQuery(i) {
     return !!(i.facets ||
@@ -62,7 +69,8 @@ function hasFacetQuery(i) {
         i.orderBy?.length ||
         i.roles?.length ||
         i.available != null ||
-        i.jeopardy === true);
+        i.jeopardy === true ||
+        !!i.groupBy);
 }
 /**
  * List escalations with optional filters.
@@ -86,6 +94,9 @@ function hasFacetQuery(i) {
 async function listEscalations(input, auth) {
     try {
         const scope = await (0, helpers_1.getEscalationReadScope)(auth.userId);
+        if (input.groupBy != null && !facet_sql_1.FACET_KEY.test(input.groupBy)) {
+            return { status: 400, error: 'groupBy must be a metadata key (letters, numbers, underscores)' };
+        }
         if (!scope.global && scope.allRoles.length === 0 && scope.selfRoles.length === 0) {
             return { status: 200, data: { escalations: [], total: 0 } };
         }
@@ -93,7 +104,7 @@ async function listEscalations(input, auth) {
         // language (facets/block/range/exists/metadata-sort) IN SQL — the caller's
         // role(s) can only NARROW within their scope, never widen past it.
         if (hasFacetQuery(input)) {
-            const result = await escalationService.searchEscalationsFaceted({
+            const result = await runFacetedSearch({
                 global: scope.global,
                 visibleRoles: scope.global ? undefined : scope.allRoles,
                 selfRoles: scope.global ? undefined : scope.selfRoles,
@@ -117,7 +128,7 @@ async function listEscalations(input, auth) {
                 search: input.search,
                 limit: input.limit ?? 50,
                 offset: input.offset ?? 0,
-            });
+            }, input.groupBy);
             return { status: 200, data: projectListResult(result, input.include) };
         }
         const result = await escalationService.listEscalations({
@@ -164,12 +175,15 @@ async function listEscalations(input, auth) {
 async function listAvailableEscalations(input, auth) {
     try {
         const scope = await (0, helpers_1.getEscalationReadScope)(auth.userId);
+        if (input.groupBy != null && !facet_sql_1.FACET_KEY.test(input.groupBy)) {
+            return { status: 400, error: 'groupBy must be a metadata key (letters, numbers, underscores)' };
+        }
         if (!scope.global && scope.allRoles.length === 0 && scope.selfRoles.length === 0) {
             return { status: 200, data: { escalations: [], total: 0 } };
         }
         // Faceted path — same as listEscalations but pinned to the available pool.
         if (hasFacetQuery(input)) {
-            const result = await escalationService.searchEscalationsFaceted({
+            const result = await runFacetedSearch({
                 global: scope.global,
                 visibleRoles: scope.global ? undefined : scope.allRoles,
                 selfRoles: scope.global ? undefined : scope.selfRoles,
@@ -192,7 +206,7 @@ async function listAvailableEscalations(input, auth) {
                 search: input.search,
                 limit: input.limit ?? 50,
                 offset: input.offset ?? 0,
-            });
+            }, input.groupBy);
             return { status: 200, data: projectListResult(result, input.include) };
         }
         const result = await escalationService.listAvailableEscalations({

package/build/api/escalations/metadata.js

@@ -73,6 +73,9 @@ async function findByMetadata(input, auth) {
         // WHERE and COUNT. Global access → no filter. Never filter a fetched page
         // controller-side — that shrinks the page and reports a wrong total.
         const scope = await (0, helpers_1.getEscalationReadScope)(auth.userId);
+        if (!scope.global && scope.allRoles.length === 0 && scope.selfRoles.length === 0) {
+            return { status: 200, data: { escalations: [], total: 0 } };
+        }
         const result = await escalationService.findByMetadata(input.key, input.value, input.status, input.limit, input.offset, scope.global
             ? undefined
             : { allRoles: scope.allRoles, selfRoles: scope.selfRoles, meUserId: auth.userId });

package/build/api/escalations/related.d.ts

@@ -0,0 +1,18 @@
+import type { LTApiAuth, LTApiResult } from '../../types/sdk';
+/**
+ * Aggregate every related set the role's list schema declares, for one page
+ * of host rows. One statement per (set, split) pair, whatever the page size.
+ */
+export declare function getRelatedAggregates(input: {
+    role: string;
+    ids: string[];
+    version?: number;
+}, auth: LTApiAuth): Promise<LTApiResult>;
+/** One host's rows in one related set, for a row detail section. */
+export declare function getRelatedRows(input: {
+    role: string;
+    id: string;
+    set: string;
+    version?: number;
+    limit?: number;
+}, auth: LTApiAuth): Promise<LTApiResult>;