@lotics/app-sdk 0.20.0 → 0.21.0

package/dist/src/hooks.d.ts

@@ -130,21 +130,33 @@ interface MembersState {
     loading: boolean;
     error: string | null;
 }
+/** Options for `useMembers`. */
+export interface MembersOptions {
+    /**
+     * Restrict to one member group (a group ID). The group must be declared on a
+     * `member` workflow input's `group` — listing an undeclared group errors. Omit
+     * to list the whole org roster.
+     */
+    group?: string;
+}
 /**
  * List the members of the app's organization — the candidate set for an
- * "assign to a member" picker. Resolves through the host (member-only; an
- * anonymous public visitor gets an error). Names may be empty for members
+ * "assign to a member" picker. Each member is `{ id, name, email, image }`
+ * (`image` = avatar URL, may be null). Resolves through the host (member-only;
+ * an anonymous public visitor gets an error). Names may be empty for members
  * without a display name set — fall back to `email`.
  *
  * Gated: the app must DECLARE that it works with members — it needs a workflow
- * whose manifest declares a `member`-typed input (i.e. it assigns members).
- * Without one the host returns an error, so member access stays a declared,
- * auditable surface rather than something any app can read ambiently.
+ * whose manifest declares a `member`-typed input. Passing `{ group }` restricts
+ * to that group, and is only honored if some member input declares that
+ * `group` — so an app can only list (and assign into) groups it declares.
  *
  * ```tsx
- * const { members } = useMembers();
- * // <Picker options={members.map((m) => ({ value: m.id, label: m.name || m.email || m.id }))} />
+ * const { members } = useMembers({ group: "grp_..." });
+ * // <Picker options={members.map((m) => ({
+ * //   value: m.id, label: m.name || m.email || m.id, image: m.image,
+ * // }))} />
  * ```
  */
-export declare function useMembers(): MembersState;
+export declare function useMembers(opts?: MembersOptions): MembersState;
 export {};

package/dist/src/hooks.js

@@ -187,21 +187,25 @@ export function useFileUpload() {
 }
 /**
  * List the members of the app's organization — the candidate set for an
- * "assign to a member" picker. Resolves through the host (member-only; an
- * anonymous public visitor gets an error). Names may be empty for members
+ * "assign to a member" picker. Each member is `{ id, name, email, image }`
+ * (`image` = avatar URL, may be null). Resolves through the host (member-only;
+ * an anonymous public visitor gets an error). Names may be empty for members
  * without a display name set — fall back to `email`.
  *
  * Gated: the app must DECLARE that it works with members — it needs a workflow
- * whose manifest declares a `member`-typed input (i.e. it assigns members).
- * Without one the host returns an error, so member access stays a declared,
- * auditable surface rather than something any app can read ambiently.
+ * whose manifest declares a `member`-typed input. Passing `{ group }` restricts
+ * to that group, and is only honored if some member input declares that
+ * `group` — so an app can only list (and assign into) groups it declares.
  *
  * ```tsx
- * const { members } = useMembers();
- * // <Picker options={members.map((m) => ({ value: m.id, label: m.name || m.email || m.id }))} />
+ * const { members } = useMembers({ group: "grp_..." });
+ * // <Picker options={members.map((m) => ({
+ * //   value: m.id, label: m.name || m.email || m.id, image: m.image,
+ * // }))} />
  * ```
  */
-export function useMembers() {
+export function useMembers(opts) {
+    const group = opts?.group;
     const [state, setState] = useState({
         members: [],
         loading: true,
@@ -210,7 +214,7 @@ export function useMembers() {
     useEffect(() => {
         let cancelled = false;
         setState((s) => ({ ...s, loading: true, error: null }));
-        rpc("members", {})
+        rpc("members", { group })
             .then((r) => {
             if (!cancelled)
                 setState({ members: r.members ?? [], loading: false, error: null });
@@ -222,6 +226,6 @@ export function useMembers() {
         return () => {
             cancelled = true;
         };
-    }, []);
+    }, [group]);
     return state;
 }

package/dist/src/index.d.ts

@@ -17,7 +17,7 @@
 export { mount } from "./mount.js";
 export type { MountOptions } from "./mount.js";
 export { useWorkflow, useQuery, useFileUpload, useMembers } from "./hooks.js";
-export type { UploadedFile, QueryOptions, WorkflowResult } from "./hooks.js";
+export type { UploadedFile, QueryOptions, WorkflowResult, MembersOptions } from "./hooks.js";
 export { rpc } from "./rpc.js";
 export type { RpcOp } from "./rpc.js";
 export { openExternal } from "./open_external.js";

package/dist/src/members.d.ts

@@ -18,6 +18,9 @@ export interface ResolvedMember {
     /** Present only on authenticated responses. Omitted on public-app
      *  responses (no PII exposure to anonymous visitors). */
     email?: string | null;
+    /** Avatar URL. Present on the `useMembers` roster (may be null when the
+     *  member has no profile image); absent on resolved `select_member` cells. */
+    image?: string | null;
 }
 /**
  * Parse a `useQuery` cell value into `ResolvedMember[]`. Returns `[]` for

package/dist/src/rpc.js

@@ -218,16 +218,17 @@ function rpcStandalone(op, payload) {
         case "upload":
             return standaloneUpload(payload.file);
         case "members":
-            return standaloneMembers();
+            return standaloneMembers(payload);
         case "context":
             return standaloneContext();
         case "openExternal":
             return standaloneOpenExternal(payload);
     }
 }
-async function standaloneMembers() {
+async function standaloneMembers(p) {
     const { app_id } = await boot();
-    const r = (await apiCall("GET", `/v1/apps/${app_id}/members`, undefined, {
+    const qs = p.group ? `?group_id=${encodeURIComponent(p.group)}` : "";
+    const r = (await apiCall("GET", `/v1/apps/${app_id}/members${qs}`, undefined, {
         appId: app_id,
     }));
     return { members: r.members ?? [] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/app-sdk",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Runtime SDK for Lotics custom-code apps — typed hooks, postMessage bridge, mount entry point",
   "type": "module",
   "exports": {