@lotics/app-sdk 0.10.0 → 0.11.1

package/dist/src/index.d.ts

@@ -16,5 +16,7 @@ export type { UploadedFile } from "./hooks.js";
 export { downloadFileFromUrl } from "./download.js";
 export { rpc } from "./rpc.js";
 export type { RpcOp } from "./rpc.js";
+export { readMembers } from "./members.js";
+export type { ResolvedMember } from "./members.js";
 export type { AppFixture } from "./mock.js";
 export type { AppWorkflows, AppQueries } from "./types.js";

package/dist/src/index.js

@@ -13,3 +13,4 @@ export { mount } from "./mount.js";
 export { useWorkflow, useQuery, useFileUpload } from "./hooks.js";
 export { downloadFileFromUrl } from "./download.js";
 export { rpc } from "./rpc.js";
+export { readMembers } from "./members.js";

package/dist/src/members.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Reader for `select_member` cells in `useQuery` rows.
+ *
+ * The server (`backend/lib/select_member_resolver.ts`) rewrites every
+ * `select_member` column from its storage shape (`string[]` of bare member
+ * IDs) into `ResolvedMember[]` before the row reaches the app. Apps used to
+ * hardcode an id→name fallback map because the SDK didn't expose the
+ * resolved shape; this helper makes the right shape the obvious one.
+ *
+ * If the wire format changes, the resolver and this reader move together.
+ */
+export interface ResolvedMember {
+    id: string;
+    /** `null` when the id resolves outside the app's org (e.g. removed
+     *  member) — surfaces the missing state explicitly instead of an
+     *  empty string. */
+    name: string | null;
+    /** Present only on authenticated responses. Omitted on public-app
+     *  responses (no PII exposure to anonymous visitors). */
+    email?: string | null;
+}
+/**
+ * Parse a `useQuery` cell value into `ResolvedMember[]`. Returns `[]` for
+ * null/undefined/empty cells and for any unexpected shape — callers iterate
+ * uniformly without null-checks. Entries that fail the shape check are
+ * dropped silently rather than corrupting the array with partial data.
+ */
+export declare function readMembers(value: unknown): ResolvedMember[];

package/dist/src/members.js

@@ -0,0 +1,42 @@
+/**
+ * Reader for `select_member` cells in `useQuery` rows.
+ *
+ * The server (`backend/lib/select_member_resolver.ts`) rewrites every
+ * `select_member` column from its storage shape (`string[]` of bare member
+ * IDs) into `ResolvedMember[]` before the row reaches the app. Apps used to
+ * hardcode an id→name fallback map because the SDK didn't expose the
+ * resolved shape; this helper makes the right shape the obvious one.
+ *
+ * If the wire format changes, the resolver and this reader move together.
+ */
+/**
+ * Parse a `useQuery` cell value into `ResolvedMember[]`. Returns `[]` for
+ * null/undefined/empty cells and for any unexpected shape — callers iterate
+ * uniformly without null-checks. Entries that fail the shape check are
+ * dropped silently rather than corrupting the array with partial data.
+ */
+export function readMembers(value) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const entry of value) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const obj = entry;
+        const id = obj.id;
+        if (typeof id !== "string" || id === "")
+            continue;
+        const name = typeof obj.name === "string" ? obj.name : obj.name === null ? null : null;
+        const m = { id, name };
+        if ("email" in obj) {
+            m.email =
+                typeof obj.email === "string"
+                    ? obj.email
+                    : obj.email === null
+                        ? null
+                        : null;
+        }
+        out.push(m);
+    }
+    return out;
+}

package/dist/src/rpc.js

@@ -1,8 +1,25 @@
 import { promptForPassword } from "./password_gate.js";
 import { runUploadPipeline } from "./upload/pipeline.js";
-/** The embedding Lotics host's origin — present iff the app is bridged. */
-const hostOrigin = new URLSearchParams(window.location.search).get("lotics_host");
+/**
+ * The embedding Lotics host's origin — present iff the app is bridged.
+ *
+ * Lazy + memoized so the module's top level doesn't touch `window`. The SDK
+ * gets imported by `frontend/lib/download.ts`, which Jest pulls in at module
+ * evaluation time before its jsdom environment finishes setting up
+ * `window.location` — eager reads crash every test suite that transitively
+ * imports the SDK.
+ *
+ * `undefined` = not yet computed; `string | null` = computed result.
+ */
+let hostOriginCache;
+function getHostOrigin() {
+    if (hostOriginCache === undefined) {
+        hostOriginCache = new URLSearchParams(window.location.search).get("lotics_host");
+    }
+    return hostOriginCache;
+}
 export function rpc(op, payload) {
+    const hostOrigin = getHostOrigin();
     return hostOrigin
         ? rpcBridged(op, payload, hostOrigin)
         : rpcStandalone(op, payload);
@@ -16,7 +33,7 @@ function ensureListener() {
     listenerInstalled = true;
     window.addEventListener("message", (event) => {
         // Accept only messages from the parent window, at the host origin.
-        if (event.source !== window.parent || event.origin !== hostOrigin)
+        if (event.source !== window.parent || event.origin !== getHostOrigin())
             return;
         const msg = event.data;
         if (!msg || typeof msg.id !== "number")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/app-sdk",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "description": "Runtime SDK for Lotics custom-code apps — typed hooks, postMessage bridge, mount entry point",
   "type": "module",
   "exports": {