@lessly/sdk-app 63.0.0 → 63.2.0

package/dist/_types/index.d.ts

@@ -3,6 +3,7 @@ export type { LesslyClientBase } from './runtime/createLesslyApp.js';
 export { connectStream } from './runtime/connectStream.js';
 export { LesslyApiError, isAccessDenied } from './runtime/errors.js';
 export { accessReason } from './runtime/access-reason.js';
+export { operations } from './runtime/operations.js';
 export type { LesslyAppOptions, HttpMethod, Binding, BindingsMap, ParamSpec, ParamIn, ToolLevel, Operation, } from './runtime/types.js';
 export type { WsBinding, WsBindingsMap, LesslyStream, LesslyStreamOpener, StreamCloseInfo, StreamData, WebSocketCtor, WebSocketLike, } from './runtime/types.js';
 export type { Access, AccessState, AccessApi } from './runtime/access.js';

package/dist/_types/runtime/operations.d.ts

@@ -0,0 +1,13 @@
+import type { ToolLevel } from './types.js';
+/**
+ * Every operation key the catalog knows, with the level it requires.
+ *
+ * The generated file is regenerated at publish time from the live catalog, so this map re-levels
+ * with the platform rather than with anyone's memory. Read a level from here when there is no
+ * generated method to read `op.level` from — a test double, a runtime probe — instead of typing
+ * the level as a literal or keeping a lookup table in the App (APP-012).
+ *
+ * Only a re-export: the generated file stays the single source, this narrows it to `Readonly` so
+ * a consumer cannot write into the shared object.
+ */
+export declare const operations: Readonly<Record<string, ToolLevel>>;

package/dist/index.cjs

@@ -11134,7 +11134,7 @@ function normalize(raw) {
     deny: asStringArray(r.deny)
   };
 }
-function createAccess(opts, bindings2, operations2) {
+function createAccess(opts, bindings2, operations3) {
   let snapshot;
   let inflight;
   let state = "idle";
@@ -11171,7 +11171,7 @@ function createAccess(opts, bindings2, operations2) {
       if (state !== "ready" || !snapshot) return false;
       if (ELEVATED_ROLES.has(snapshot.role)) return true;
       const key = typeof op === "string" ? op : op.operationKey;
-      const level = typeof op === "string" ? operations2[key] : op.level;
+      const level = typeof op === "string" ? operations3[key] : op.level;
       const subject = level === void 0 ? { key } : { key, level };
       return evaluate(subject, { allow: snapshot.allow, deny: snapshot.deny });
     },
@@ -11267,10 +11267,14 @@ function accessReason(op) {
   return typeof op === "string" ? `Requires access to ${op}. Ask an admin of this product.` : `Requires level:${op.level} (${op.operationKey}). Ask an admin of this product.`;
 }
 
+// src/runtime/operations.ts
+var operations2 = operations;
+
 exports.LesslyApiError = LesslyApiError;
 exports.accessReason = accessReason;
 exports.connectStream = connectStream;
 exports.createLesslyApp = createLesslyApp;
 exports.isAccessDenied = isAccessDenied;
+exports.operations = operations2;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map