@isomorph.ai/app-sdk 1.9.0 → 1.10.0

package/dist/index.d.ts

@@ -1,3 +1,5 @@
+import { type IsomorphUserRole } from './user-role.js';
+export type { IsomorphUserRole } from './user-role.js';
 export type IsomorphErrorCategory = 'AUTH_REQUIRED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'VALIDATION_FAILED' | 'RATE_LIMITED' | 'UNAVAILABLE' | 'INTERNAL';
 export declare class IsomorphError extends Error {
     readonly category: IsomorphErrorCategory;
@@ -18,6 +20,14 @@ export interface IsomorphUser {
      * enforced before your code runs.
      */
     groups: string[];
+    /**
+     * What the person may do on the company's app platform: a `'builder'`
+     * builds and deploys apps, a `'member'` uses them. Show builders what only
+     * they need (a debug panel, a "deploy" hint); never gate data on it — that
+     * is a row rule's job, where `current_setting('harbour.user_role', true)`
+     * carries the same value.
+     */
+    role: IsomorphUserRole;
     appUser?: unknown;
 }
 export interface IsomorphResult<T> {

package/dist/index.js

@@ -1,5 +1,6 @@
 import { validateIntegrationExecuteInput } from './integration-execute-input-rules.js';
 import { userGroups } from './user-groups.js';
+import { userRole } from './user-role.js';
 export class IsomorphError extends Error {
     category;
     requestId;
@@ -417,8 +418,9 @@ export function createClient(options = {}) {
     };
     // The gateway's answer becomes an IsomorphUser in place: the same object
     // must reach every caller (the API-host refresh below relies on it).
-    const withGroups = (user) => {
+    const normalizeUser = (user) => {
         user.groups = userGroups(user.groups);
+        user.role = userRole(user.role);
         return user;
     };
     const transport = new Transport(options, () => notifyIdentity(null));
@@ -429,7 +431,7 @@ export function createClient(options = {}) {
         refreshesStarted += 1;
         refreshInFlight = transport.json(IDENTITY_PATH)
             .then((answer) => {
-            const user = answer === null ? null : withGroups(answer);
+            const user = answer === null ? null : normalizeUser(answer);
             // A user answered by the API host's context refresh was announced by
             // that refresh already (it is the same object): once is enough.
             if (user === null || user !== currentUser)
@@ -480,7 +482,7 @@ export function createClient(options = {}) {
                 const user = (await response.json())?.data;
                 if (typeof user?.id !== 'string')
                     return false;
-                notifyIdentity(withGroups(user), true);
+                notifyIdentity(normalizeUser(user), true);
                 return user;
             })
                 .catch(() => false)

package/dist/runtime.d.ts

@@ -10,7 +10,7 @@ export declare const GET_RUN_ACTION = "isomorph-jobs-get";
 export declare const CANCEL_RUN_ACTION = "isomorph-jobs-cancel";
 export interface ActionContext {
     signal: AbortSignal;
-    user: Pick<IsomorphUser, 'id' | 'email' | 'groups'>;
+    user: Pick<IsomorphUser, 'id' | 'email' | 'groups' | 'role'>;
     tenant: string;
     app: string;
     requestId: string;

package/dist/runtime.js

@@ -57,6 +57,7 @@ import { join, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { createClient, IsomorphError } from './index.js';
 import { userGroupsFromHeader } from './user-groups.js';
+import { userRole } from './user-role.js';
 const actionIdentity = new AsyncLocalStorage();
 const identityKey = Symbol.for('isomorph.actionIdentity');
 globalThis[identityKey] = () => actionIdentity.getStore();
@@ -515,6 +516,7 @@ export class Runtime {
             id: header(request, 'X-Harbour-Verified-User-ID'),
             email: header(request, 'X-Harbour-Verified-User-Email'),
             groups: userGroupsFromHeader(header(request, 'X-Harbour-Verified-User-Groups')),
+            role: userRole(header(request, 'X-Harbour-Verified-User-Role')),
         };
         const streams = header(request, 'accept').toLowerCase().includes(PROGRESS_MEDIA_TYPE);
         let steps = 0;

package/dist/user-role.d.ts

@@ -0,0 +1,2 @@
+export type IsomorphUserRole = 'builder' | 'member';
+export declare function userRole(value: unknown): IsomorphUserRole;

package/dist/user-role.js

@@ -0,0 +1,3 @@
+export function userRole(value) {
+    return value === 'builder' ? 'builder' : 'member';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "type": "module",
   "repository": {
     "type": "git",