@isomorph.ai/app-sdk 1.14.0 → 1.16.0

package/README.md

@@ -168,7 +168,52 @@ await isomorph.integrations.execute('company-basecamp', {
 });
 ```
 
-(1.14.0; contracts 0.76.0)
+SharePoint runs as the signed-in person after their consent. Every operation
+names a site alias IT mapped to one site of the company's Microsoft 365 tenant.
+Ids are opaque Microsoft Graph ids; a list item's `fields` are its columns by
+internal name; adding an item or uploading a file is an explicit action with a
+fresh UUID, while an update is a PATCH and needs none.
+
+```ts
+// The site's lists, then one list's open items
+const { lists } = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.list.list', resource: 'intranet', input: {},
+});
+const open = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.item.list', resource: 'intranet',
+  input: { listId: lists[0].id, filter: "fields/Status eq 'Open'" },
+});
+// open.nextPageToken, when hasMore, is the next read's pageToken
+
+// A new item, then one of its columns changed
+const item = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.item.create', resource: 'intranet',
+  input: { listId: lists[0].id, fields: { Title: 'Confirm the venue', Status: 'Open', DueDate: '2026-10-20' } },
+  idempotencyKey: crypto.randomUUID(),
+});
+await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.item.update', resource: 'intranet',
+  input: { listId: lists[0].id, itemId: item.id, fields: { Status: 'Done' } },
+});
+
+// The default library's root, a search, one file's bytes, and an upload into a folder
+const { files } = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.file.list', resource: 'intranet', input: {},
+});
+const found = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.file.search', resource: 'intranet', input: { q: 'venue contract' },
+});
+const file = await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.file.read', resource: 'intranet', input: { fileId: found.files[0].id },
+});
+await isomorph.integrations.execute('company-sharepoint', {
+  operation: 'sharepoint.file.upload', resource: 'intranet',
+  input: { filename: 'venue-contract-signed.pdf', contentType: 'application/pdf', dataBase64: file.dataBase64, folderId: files.find((entry) => entry.isFolder)?.id, conflict: 'rename' },
+  idempotencyKey: crypto.randomUUID(),
+});
+```
+
+(1.16.0; contracts 0.78.0)
 
 ## Browser read tools
 
@@ -230,6 +275,10 @@ and no second GET is sent. When the refresh fails, `identity.current()`
 answers `null` and listeners hear `null`, as before. On the page's own origin
 the identity GET is never renewed (it is the renewal). (1.5.3)
 
+## External OTP users
+
+Use `user.id` for ownership and database row rules. External users can sign in with a phone number and have no email. `user.name`, `user.phone`, `user.email` and the `emailVerified`/`phoneVerified` flags describe their profile; an optional contact is not verified automatically. `user.directory` identifies `company` or `external`. Database transactions also expose `current_setting('harbour.directory', true)` when a row rule needs that distinction.
+
 ## The signed-in user's groups
 
 `user.groups` — the company groups your identity provider sent at sign-in; use

package/dist/index.d.ts

@@ -13,7 +13,12 @@ export declare class IsomorphError extends Error {
 }
 export interface IsomorphUser {
     id: string;
-    email: string;
+    email?: string;
+    name?: string;
+    phone?: string;
+    directory?: 'company' | 'external';
+    emailVerified?: boolean;
+    phoneVerified?: boolean;
     /**
      * The company groups your identity provider sent at sign-in, `[]` when it
      * sent none. Use them for in-app roles: who may open the app at all is
@@ -368,6 +373,113 @@ export interface BasecampPeopleListRequest {
         pageToken?: string;
     };
 }
+/** What `sharepoint.file.upload` does when the folder already has a file of that name: `rename` (the default), `replace` or `fail`. */
+export type SharePointConflictBehavior = 'rename' | 'replace' | 'fail';
+/** One column value as a SharePoint write takes it: a string of at most 4000 characters, a number, a boolean, or null (which clears the column on an update). */
+export type SharePointFieldValue = string | number | boolean | null;
+/** Lists the site's lists the signed-in person can see (hidden lists dropped); resource is a site alias. */
+export interface SharePointListListRequest {
+    operation: 'sharepoint.list.list';
+    resource: string;
+    input?: {
+        /** The `nextPageToken` of the previous page; leave it out to read the first page. */
+        pageToken?: string;
+    };
+}
+/** Lists one list's items, 50 a page, filtered when `filter` says so. */
+export interface SharePointItemListRequest {
+    operation: 'sharepoint.item.list';
+    resource: string;
+    input: {
+        /** The `id` a `sharepoint.list.list` result named. */
+        listId: string;
+        /** An OData `$filter` over the columns as `fields/<column> <op> <value>`, e.g. `fields/Status eq 'Open'`; 1 to 512 characters. */
+        filter?: string;
+        pageToken?: string;
+    };
+}
+/** Adds one item to a list as the signed-in person; an explicit action with its own idempotency key. */
+export interface SharePointItemCreateRequest {
+    operation: 'sharepoint.item.create';
+    resource: string;
+    input: {
+        listId: string;
+        /** 1 to 32 column values keyed by the column's internal name (`Title`, `Status`, `DueDate`...); which columns the list has is Graph's check. */
+        fields: Record<string, SharePointFieldValue>;
+    };
+    /** A fresh UUID per authorized action, reused only to retry that action. */
+    idempotencyKey: string;
+}
+/** Changes the named columns of one item; a PATCH, the same outcome however often it runs, so no idempotency key. */
+export interface SharePointItemUpdateRequest {
+    operation: 'sharepoint.item.update';
+    resource: string;
+    input: {
+        listId: string;
+        /** The `id` a `sharepoint.item.list` or `sharepoint.item.create` result named. */
+        itemId: string;
+        /** 1 to 32 column values; null clears a column. */
+        fields: Record<string, SharePointFieldValue>;
+    };
+}
+/** Lists the site's document libraries; their `id` is what the file operations take as `driveId`. */
+export interface SharePointDriveListRequest {
+    operation: 'sharepoint.drive.list';
+    resource: string;
+    input?: {
+        pageToken?: string;
+    };
+}
+/** Lists one folder's entries, files and folders alike: the site's default library and its root when `driveId` and `folderId` are absent. */
+export interface SharePointFileListRequest {
+    operation: 'sharepoint.file.list';
+    resource: string;
+    input?: {
+        driveId?: string;
+        /** The `id` of an entry with `isFolder` from an earlier listing. */
+        folderId?: string;
+        pageToken?: string;
+    };
+}
+/** Searches one library's file names and contents. */
+export interface SharePointFileSearchRequest {
+    operation: 'sharepoint.file.search';
+    resource: string;
+    input: {
+        /** The words to search for, 1 to 256 characters. */
+        q: string;
+        driveId?: string;
+        pageToken?: string;
+    };
+}
+/** Reads one file's bytes (at most 2 MiB) as the signed-in person; `fileId` comes from a listing, a search or an upload. */
+export interface SharePointFileReadRequest {
+    operation: 'sharepoint.file.read';
+    resource: string;
+    input: {
+        fileId: string;
+        driveId?: string;
+    };
+}
+/** Uploads one file (at most 2 MiB) as the signed-in person; an explicit action with its own idempotency key. */
+export interface SharePointFileUploadRequest {
+    operation: 'sharepoint.file.upload';
+    resource: string;
+    input: {
+        /** The name to store it under, 1 to 255 characters; the result's `filename` is the stored name, which `conflict: 'rename'` may have changed. */
+        filename: string;
+        /** The file's MIME type, e.g. `application/pdf`. */
+        contentType: string;
+        /** The bytes as standard base64: at most 2 MiB of bytes (2,796,203 base64 characters). */
+        dataBase64: string;
+        driveId?: string;
+        folderId?: string;
+        /** `rename` when absent. */
+        conflict?: SharePointConflictBehavior;
+    };
+    /** A fresh UUID per authorized action, reused only to retry that action. */
+    idempotencyKey: string;
+}
 export interface ServiceRequest {
     operation: 'service.request';
     resource?: never;
@@ -385,7 +497,7 @@ export interface ServiceRequestResult {
     headers: Record<string, string>;
     body: unknown;
 }
-export type IntegrationRequest = ServiceRequest | SlackChannelHistoryRequest | SlackMessagePostRequest | SlackMessageUpdateRequest | SlackMessageDeleteRequest | SlackDmSendRequest | SlackUserLookupRequest | WarehouseViewReadRequest | GmailThreadListRequest | GmailThreadReadRequest | GmailMessageReadRequest | GmailAttachmentReadRequest | GmailMessageSendRequest | BasecampProjectListRequest | BasecampTodolistListRequest | BasecampTodoListRequest | BasecampTodoCreateRequest | BasecampTodoCompleteRequest | BasecampMessageListRequest | BasecampMessagePostRequest | BasecampCommentListRequest | BasecampCommentPostRequest | BasecampCampfirePostRequest | BasecampPeopleListRequest;
+export type IntegrationRequest = ServiceRequest | SlackChannelHistoryRequest | SlackMessagePostRequest | SlackMessageUpdateRequest | SlackMessageDeleteRequest | SlackDmSendRequest | SlackUserLookupRequest | WarehouseViewReadRequest | GmailThreadListRequest | GmailThreadReadRequest | GmailMessageReadRequest | GmailAttachmentReadRequest | GmailMessageSendRequest | BasecampProjectListRequest | BasecampTodolistListRequest | BasecampTodoListRequest | BasecampTodoCreateRequest | BasecampTodoCompleteRequest | BasecampMessageListRequest | BasecampMessagePostRequest | BasecampCommentListRequest | BasecampCommentPostRequest | BasecampCampfirePostRequest | BasecampPeopleListRequest | SharePointListListRequest | SharePointItemListRequest | SharePointItemCreateRequest | SharePointItemUpdateRequest | SharePointDriveListRequest | SharePointFileListRequest | SharePointFileSearchRequest | SharePointFileReadRequest | SharePointFileUploadRequest;
 export type IntegrationOperation = IntegrationRequest['operation'];
 export interface SlackMessage {
     id: string;
@@ -573,7 +685,75 @@ export interface BasecampTodoCompleteResult {
     id: string;
     completed: true;
 }
-export type IntegrationResult<R extends IntegrationRequest> = R extends ServiceRequest ? ServiceRequestResult : R extends SlackChannelHistoryRequest ? SlackChannelHistoryResult : R extends SlackMessagePostRequest | SlackMessageUpdateRequest | SlackMessageDeleteRequest ? SlackMessagePostResult : R extends SlackDmSendRequest ? SlackDmSendResult : R extends SlackUserLookupRequest ? SlackUserLookupResult : R extends WarehouseViewReadRequest ? WarehouseViewReadResult : R extends GmailThreadListRequest ? GmailThreadListResult : R extends GmailThreadReadRequest ? GmailThreadReadResult : R extends GmailMessageReadRequest ? GmailMessageReadResult : R extends GmailAttachmentReadRequest ? GmailAttachmentReadResult : R extends GmailMessageSendRequest ? GmailMessageSendResult : R extends BasecampProjectListRequest ? BasecampProjectListResult : R extends BasecampTodolistListRequest ? BasecampTodolistListResult : R extends BasecampTodoListRequest ? BasecampTodoListResult : R extends BasecampMessageListRequest ? BasecampMessageListResult : R extends BasecampCommentListRequest ? BasecampCommentListResult : R extends BasecampPeopleListRequest ? BasecampPeopleListResult : R extends BasecampTodoCreateRequest | BasecampMessagePostRequest | BasecampCommentPostRequest | BasecampCampfirePostRequest ? BasecampRecordingResult : R extends BasecampTodoCompleteRequest ? BasecampTodoCompleteResult : never;
+/** One list of the site; `id` is the `listId` the item operations take. `template` is what Graph reports (genericList, documentLibrary, tasks, events...) when it does. */
+export interface SharePointList {
+    id: string;
+    name: string;
+    description?: string;
+    webUrl: string;
+    template?: string;
+}
+/** One list item: `fields` are its column values keyed by internal column name as Graph returns them, system columns dropped and the whole object cut at 16 KiB; `id` is the `itemId` an update takes. */
+export interface SharePointListItem {
+    id: string;
+    fields: Record<string, unknown>;
+    webUrl: string;
+    createdAt: string;
+    modifiedAt: string;
+}
+/** One document library; `id` is the `driveId` the file operations take. */
+export interface SharePointDrive {
+    id: string;
+    name: string;
+    webUrl: string;
+}
+/** One entry of a folder or a search: a file (`mimeType` set; `id` is a `fileId`) or a folder (`isFolder`; `id` is a `folderId`). `size` is in bytes, a folder's the total of its contents. */
+export interface SharePointFile {
+    id: string;
+    name: string;
+    isFolder: boolean;
+    size: number;
+    mimeType?: string;
+    webUrl: string;
+    modifiedAt: string;
+}
+/** One page of a SharePoint list; `nextPageToken` is present only when `hasMore` and is the next read's `pageToken`. */
+export interface SharePointPage {
+    hasMore: boolean;
+    nextPageToken?: string;
+}
+export interface SharePointListListResult extends SharePointPage {
+    lists: SharePointList[];
+}
+export interface SharePointItemListResult extends SharePointPage {
+    items: SharePointListItem[];
+}
+export interface SharePointDriveListResult extends SharePointPage {
+    drives: SharePointDrive[];
+}
+/** `sharepoint.file.list` and `sharepoint.file.search` answer the same page of entries. */
+export interface SharePointFileListResult extends SharePointPage {
+    files: SharePointFile[];
+}
+/** The new item and its SharePoint page, for a person to open. */
+export interface SharePointItemCreateResult {
+    id: string;
+    webUrl: string;
+}
+export interface SharePointItemUpdateResult {
+    id: string;
+}
+/** The Gmail attachment shape plus the file's id. */
+export interface SharePointFileReadResult extends GmailAttachmentReadResult {
+    id: string;
+}
+/** The stored file, under the name `conflict: 'rename'` may have given it, and its SharePoint page. */
+export interface SharePointFileUploadResult {
+    id: string;
+    filename: string;
+    webUrl: string;
+}
+export type IntegrationResult<R extends IntegrationRequest> = R extends ServiceRequest ? ServiceRequestResult : R extends SlackChannelHistoryRequest ? SlackChannelHistoryResult : R extends SlackMessagePostRequest | SlackMessageUpdateRequest | SlackMessageDeleteRequest ? SlackMessagePostResult : R extends SlackDmSendRequest ? SlackDmSendResult : R extends SlackUserLookupRequest ? SlackUserLookupResult : R extends WarehouseViewReadRequest ? WarehouseViewReadResult : R extends GmailThreadListRequest ? GmailThreadListResult : R extends GmailThreadReadRequest ? GmailThreadReadResult : R extends GmailMessageReadRequest ? GmailMessageReadResult : R extends GmailAttachmentReadRequest ? GmailAttachmentReadResult : R extends GmailMessageSendRequest ? GmailMessageSendResult : R extends BasecampProjectListRequest ? BasecampProjectListResult : R extends BasecampTodolistListRequest ? BasecampTodolistListResult : R extends BasecampTodoListRequest ? BasecampTodoListResult : R extends BasecampMessageListRequest ? BasecampMessageListResult : R extends BasecampCommentListRequest ? BasecampCommentListResult : R extends BasecampPeopleListRequest ? BasecampPeopleListResult : R extends BasecampTodoCreateRequest | BasecampMessagePostRequest | BasecampCommentPostRequest | BasecampCampfirePostRequest ? BasecampRecordingResult : R extends BasecampTodoCompleteRequest ? BasecampTodoCompleteResult : R extends SharePointListListRequest ? SharePointListListResult : R extends SharePointItemListRequest ? SharePointItemListResult : R extends SharePointItemCreateRequest ? SharePointItemCreateResult : R extends SharePointItemUpdateRequest ? SharePointItemUpdateResult : R extends SharePointDriveListRequest ? SharePointDriveListResult : R extends SharePointFileListRequest | SharePointFileSearchRequest ? SharePointFileListResult : R extends SharePointFileReadRequest ? SharePointFileReadResult : R extends SharePointFileUploadRequest ? SharePointFileUploadResult : never;
 export type IntegrationConnectResult = {
     status: 'connected';
     accountLabel: string;

package/dist/integration-execute-input-rules.d.ts

@@ -56,9 +56,18 @@ export type IntegrationExecuteInputFieldRule = {
 } | {
     kind: 'boolean';
     required: boolean;
+} | {
+    kind: 'record';
+    required: boolean;
+    minProperties: number;
+    maxProperties: number;
+    types: readonly IntegrationExecuteInputRecordValueType[];
+    maxLength?: number;
 };
 /** The scalar types a `value` input accepts, alone or in its list form. */
 export type IntegrationExecuteInputValueType = 'string' | 'number' | 'boolean';
+/** The value types a `record` input accepts under each of its keys (0.78.0): a value type or null. */
+export type IntegrationExecuteInputRecordValueType = IntegrationExecuteInputValueType | 'null';
 export type IntegrationExecuteOperationRule = {
     idempotencyKey: boolean;
     fields: Record<string, IntegrationExecuteInputFieldRule>;
@@ -569,6 +578,199 @@ export declare const IntegrationExecuteInputRules: {
             };
         };
     };
+    readonly "sharepoint.list.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+            };
+        };
+    };
+    readonly "sharepoint.item.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly listId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly filter: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 512;
+            };
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+            };
+        };
+    };
+    readonly "sharepoint.item.create": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly listId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly fields: {
+                readonly kind: "record";
+                readonly required: true;
+                readonly minProperties: 1;
+                readonly maxProperties: 32;
+                readonly types: readonly ["string", "number", "boolean", "null"];
+                readonly maxLength: 4000;
+            };
+        };
+    };
+    readonly "sharepoint.item.update": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly listId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly itemId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly fields: {
+                readonly kind: "record";
+                readonly required: true;
+                readonly minProperties: 1;
+                readonly maxProperties: 32;
+                readonly types: readonly ["string", "number", "boolean", "null"];
+                readonly maxLength: 4000;
+            };
+        };
+    };
+    readonly "sharepoint.drive.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+            };
+        };
+    };
+    readonly "sharepoint.file.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly driveId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly folderId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+            };
+        };
+    };
+    readonly "sharepoint.file.search": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly q: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+            readonly driveId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+            };
+        };
+    };
+    readonly "sharepoint.file.read": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly fileId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly driveId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+        };
+    };
+    readonly "sharepoint.file.upload": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly filename: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 255;
+            };
+            readonly contentType: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 128;
+            };
+            readonly dataBase64: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 2796203;
+            };
+            readonly driveId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly folderId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9!._,=-]{1,256}$";
+            };
+            readonly conflict: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["rename", "replace", "fail"];
+                readonly default: "rename";
+            };
+        };
+    };
     readonly "warehouse.view.read": {
         readonly idempotencyKey: false;
         readonly fields: {

package/dist/integration-execute-input-rules.js

@@ -172,6 +172,75 @@ export const IntegrationExecuteInputRules = {
             pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
         },
     },
+    "sharepoint.list.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 2048 },
+        },
+    },
+    "sharepoint.item.list": {
+        idempotencyKey: false,
+        fields: {
+            listId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            filter: { kind: "string", required: false, minLength: 1, maxLength: 512 },
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 2048 },
+        },
+    },
+    "sharepoint.item.create": {
+        idempotencyKey: true,
+        fields: {
+            listId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            fields: { kind: "record", required: true, minProperties: 1, maxProperties: 32, types: ["string", "number", "boolean", "null"], maxLength: 4000 },
+        },
+    },
+    "sharepoint.item.update": {
+        idempotencyKey: false,
+        fields: {
+            listId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            itemId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            fields: { kind: "record", required: true, minProperties: 1, maxProperties: 32, types: ["string", "number", "boolean", "null"], maxLength: 4000 },
+        },
+    },
+    "sharepoint.drive.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 2048 },
+        },
+    },
+    "sharepoint.file.list": {
+        idempotencyKey: false,
+        fields: {
+            driveId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            folderId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 2048 },
+        },
+    },
+    "sharepoint.file.search": {
+        idempotencyKey: false,
+        fields: {
+            q: { kind: "string", required: true, minLength: 1, maxLength: 256 },
+            driveId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 2048 },
+        },
+    },
+    "sharepoint.file.read": {
+        idempotencyKey: false,
+        fields: {
+            fileId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            driveId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+        },
+    },
+    "sharepoint.file.upload": {
+        idempotencyKey: true,
+        fields: {
+            filename: { kind: "string", required: true, minLength: 1, maxLength: 255 },
+            contentType: { kind: "string", required: true, minLength: 1, maxLength: 128 },
+            dataBase64: { kind: "string", required: true, minLength: 1, maxLength: 2796203 },
+            driveId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            folderId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9!._,=-]{1,256}$" },
+            conflict: { kind: "enum", required: false, values: ["rename", "replace", "fail"], default: "rename" },
+        },
+    },
     "warehouse.view.read": {
         idempotencyKey: false,
         fields: {
@@ -223,17 +292,22 @@ function matches(pattern, value) {
     return compiled.test(value);
 }
 function refuse(field, message) { return { ok: false, problem: { field, message } }; }
-const valueNouns = { string: ['a string', 'strings'], number: ['a number', 'numbers'], boolean: ['a boolean', 'booleans'] };
+const valueNouns = { string: ['a string', 'strings'], number: ['a number', 'numbers'], boolean: ['a boolean', 'booleans'], null: ['null', 'nulls'] };
 function either(parts) {
     return parts.length > 1 ? `${parts.slice(0, -1).join(', ')} or ${parts[parts.length - 1]}` : parts.join('');
 }
 function isScalar(types, maxLength, value) {
+    if (value === null)
+        return types.includes('null');
     if (typeof value === 'string')
         return types.includes('string') && (maxLength === undefined || value.length <= maxLength);
     if (typeof value === 'number')
         return types.includes('number') && Number.isFinite(value);
     return typeof value === 'boolean' && types.includes('boolean');
 }
+function scalarShapes(types, maxLength) {
+    return types.map(type => (type === 'string' && maxLength !== undefined ? `a string of at most ${maxLength} characters` : valueNouns[type][0]));
+}
 /**
  * Checks one object's fields in rule order and applies defaults: the input
  * itself (where null counts as absent), or one entry of an object[] input
@@ -273,6 +347,18 @@ function checkField(operation, path, name, field, value) {
             if (typeof value !== 'boolean')
                 return refuse(path, `${path} must be a boolean`);
             return { ok: true, value };
+        case 'record': {
+            if (value === null || typeof value !== 'object' || Array.isArray(value))
+                return refuse(path, `${path} must be a JSON object`);
+            const keys = Object.keys(value);
+            if (keys.length < field.minProperties || keys.length > field.maxProperties)
+                return refuse(path, `${path} must have ${field.minProperties} to ${field.maxProperties} properties`);
+            for (const key of keys) {
+                if (!isScalar(field.types, field.maxLength, value[key]))
+                    return refuse(`${path}.${key}`, `${path}.${key} must be ${either(scalarShapes(field.types, field.maxLength))}`);
+            }
+            return { ok: true, value };
+        }
         case 'integer':
             if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum)
                 return refuse(path, `${path} must be an integer between ${field.minimum} and ${field.maximum}`);
@@ -318,7 +404,7 @@ function checkField(operation, path, name, field, value) {
             const { types, maxLength, list } = field;
             if (isScalar(types, maxLength, value) || (list !== undefined && Array.isArray(value) && value.length >= list.minItems && value.length <= list.maxItems && value.every(item => isScalar(list.types, maxLength, item))))
                 return { ok: true, value };
-            const shapes = types.map(type => (type === 'string' && maxLength !== undefined ? `a string of at most ${maxLength} characters` : valueNouns[type][0]));
+            const shapes = scalarShapes(types, maxLength);
             if (list !== undefined)
                 shapes.push(`a list of ${list.minItems} to ${list.maxItems} ${either(list.types.map(type => valueNouns[type][1]))}`);
             return refuse(path, `${path} must be ${either(shapes)}`);

package/dist/integration-operations.d.ts

@@ -154,6 +154,69 @@ export declare const IntegrationOperations: {
         readonly declaredMode: false;
         readonly idempotencyKey: false;
     };
+    readonly "sharepoint.list.list": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.item.list": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.item.create": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: false;
+        readonly declaredMode: false;
+        readonly idempotencyKey: true;
+    };
+    readonly "sharepoint.item.update": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: false;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.drive.list": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.file.list": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.file.search": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.file.read": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: true;
+        readonly declaredMode: false;
+        readonly idempotencyKey: false;
+    };
+    readonly "sharepoint.file.upload": {
+        readonly kind: "saas";
+        readonly identities: readonly ["user"];
+        readonly readOnly: false;
+        readonly declaredMode: false;
+        readonly idempotencyKey: true;
+    };
     readonly "warehouse.view.read": {
         readonly kind: "database";
         readonly identities: readonly ["app"];

package/dist/integration-operations.js

@@ -204,6 +204,87 @@ export const IntegrationOperations = {
         "declaredMode": false,
         "idempotencyKey": false
     },
+    "sharepoint.list.list": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.item.list": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.item.create": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": true
+    },
+    "sharepoint.item.update": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.drive.list": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.file.list": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.file.search": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.file.read": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "sharepoint.file.upload": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": true
+    },
     "warehouse.view.read": {
         "kind": "database",
         "identities": [

package/dist/runtime.d.ts

@@ -11,7 +11,7 @@ export declare const GET_RUN_ACTION = "isomorph-jobs-get";
 export declare const CANCEL_RUN_ACTION = "isomorph-jobs-cancel";
 export interface ActionContext {
     signal: AbortSignal;
-    user: Pick<IsomorphUser, 'id' | 'email' | 'groups' | 'role'>;
+    user: IsomorphUser;
     tenant: string;
     app: string;
     requestId: string;

package/dist/runtime.js

@@ -489,11 +489,16 @@ export class Runtime {
         const controller = new AbortController();
         const abort = () => controller.abort();
         response.once('close', abort);
+        const directory = header(request, 'X-Harbour-Verified-Directory');
         const user = {
             id: header(request, 'X-Harbour-Verified-User-ID'),
             email: header(request, 'X-Harbour-Verified-User-Email'),
             groups: userGroupsFromHeader(header(request, 'X-Harbour-Verified-User-Groups')),
             role: userRole(header(request, 'X-Harbour-Verified-User-Role')),
+            ...(directory === 'company' || directory === 'external' ? { directory } : {}),
+            ...(header(request, 'X-Harbour-Verified-User-Name') ? { name: header(request, 'X-Harbour-Verified-User-Name') } : {}),
+            ...(header(request, 'X-Harbour-Verified-User-Phone') ? { phone: header(request, 'X-Harbour-Verified-User-Phone') } : {}),
+            ...(directory === 'external' ? { emailVerified: header(request, 'X-Harbour-Verified-Email-Verified') === 'true', phoneVerified: header(request, 'X-Harbour-Verified-Phone-Verified') === 'true' } : {}),
         };
         const streams = header(request, 'accept').toLowerCase().includes(PROGRESS_MEDIA_TYPE);
         let steps = 0;

package/dist/supabase-compat.d.ts

@@ -130,7 +130,7 @@ export declare class SupabaseCompatQueryBuilder<T, Result = T[], Head extends bo
 }
 export interface SupabaseCompatUser {
     id: string;
-    email: string;
+    email?: string;
     app_metadata: Record<string, unknown>;
     /** Isomorph's per-app user record (`IsomorphUser.appUser`) when it is an object. */
     user_metadata: Record<string, unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "type": "module",
   "repository": {
     "type": "git",