@parall/sdk 1.53.0 → 1.55.0

package/src/types.ts

@@ -1,3 +1,10 @@
+import type {
+  Label,
+  LabelCreatedData,
+  LabelDeletedData,
+  LabelUpdatedData,
+} from './task-label-types.js';
+
 // ============================================================
 // Entity Types — mirror server data model
 // ============================================================
@@ -94,6 +101,8 @@ export interface ChatMember {
   pinned: boolean;
   hidden: boolean;
   joined_at: string;
+  /** Org-scoped public title. Omitted by older servers and for former DM peers. */
+  title?: string;
   user?: User;
 }
 
@@ -478,6 +487,8 @@ export interface UpdateAgentInstructionsRequest {
 }
 
 // Team — a named group of org members, referenced in wiki ACLs as `@slug`.
+export type TeamRole = 'member' | 'manager';
+
 export interface Team {
   id: string;
   org_id: string;
@@ -488,6 +499,51 @@ export interface Team {
   updated_at: string;
 }
 
+/**
+ * Display fields a roster listing carries for each member. The server projects
+ * only these columns, so this is deliberately narrower than `User`: no email,
+ * phone, or last_seen_at reaches a roster response.
+ *
+ * `avatar_url` is optional rather than nullable because the server omits the
+ * field when unset.
+ */
+export interface RosterUser {
+  id: string;
+  type: UserType;
+  display_name: string;
+  avatar_url?: string;
+  status: UserStatus;
+}
+
+export interface TeamMember {
+  team_id: string;
+  user_id: string;
+  role: TeamRole;
+  added_by: string;
+  added_at: string;
+  user?: RosterUser;
+}
+
+export interface CreateTeamRequest {
+  name: string;
+  slug: string;
+}
+
+export interface UpdateTeamRequest {
+  name: string;
+  /** Team slugs are immutable because wiki ACL rows store them as @slug. */
+  slug?: never;
+}
+
+export interface AddTeamMemberRequest {
+  user_id: string;
+  role?: TeamRole;
+}
+
+export interface UpdateTeamMemberRequest {
+  role: TeamRole;
+}
+
 // Invitation
 
 export type InvitationStatus = 'pending' | 'accepted' | 'declined' | 'revoked';
@@ -751,8 +807,23 @@ export interface DeployTemplateRequest {
   /** Hire-time per-agent adjustments (onboarding wizard S2). Keys are the
    *  template's agent keys; omitted agents keep template defaults. */
   agent_overrides?: Record<string, DeployAgentOverride>;
+  /** Explicit onboarding S4 intent. Each ref must be an effective dependency
+   * of this team whose selected_agents restriction was established in S3.
+   * Deploy additively grants only the newly-created Agents that declare it. */
+  dependency_access_refs?: string[];
 }
 
+export interface TemplateDeploymentStatus {
+  deployment_id: string;
+  status: 'queued' | 'deploying' | 'failed';
+  error?: {
+    code: string;
+    message: string;
+  };
+}
+
+export type TemplateDeploymentResult = TemplateDeploymentReport | TemplateDeploymentStatus;
+
 /** Per-agent hire-time override. Substitutes values within the platform-legal
  *  surface; never adds capability. Dependencies may only disable (false)
  *  declared optional deps — required deps and undeclared refs are rejected. */
@@ -1517,6 +1588,11 @@ export interface Task {
    * gate subscriber-management UI — do not re-derive the rule client-side.
    */
   can_manage_subscribers?: boolean;
+  /**
+   * Always present on label-aware HTTP/WS responses. Optional here only so
+   * persisted Task rows from older clients can be read during migration.
+   */
+  labels?: Label[];
 }
 
 export interface TaskWatcher {
@@ -1590,6 +1666,7 @@ export interface CreateTaskRequest {
   planned_start_date?: string;
   /** Planned completion date, YYYY-MM-DD. */
   due_date?: string;
+  label_ids?: string[];
 }
 
 export interface UpdateTaskRequest {
@@ -1616,6 +1693,11 @@ export interface UpdateTaskRequest {
   planned_start_date?: string | null;
   /** Planned completion date, YYYY-MM-DD; explicit null clears it. */
   due_date?: string | null;
+  /**
+   * Full-set replacement: absent leaves labels unchanged; [] or null clears.
+   * Concurrent writers should prefer addTaskLabels/removeTaskLabel.
+   */
+  label_ids?: string[] | null;
   /**
    * Dispatch lane binding (agent senders during a typed dispatch turn).
    * dispatch_lane + dispatch_event_id bind the update to the claimed typed
@@ -1673,6 +1755,40 @@ export interface UpdateProjectRequest {
   sort_order?: number;
 }
 
+export interface ProjectTaskStatusCounts {
+  todo: number;
+  in_progress: number;
+  in_review: number;
+  done: number;
+  canceled: number;
+}
+
+export interface ProjectTaskSummary {
+  project_id: string;
+  status_counts: ProjectTaskStatusCounts;
+  completed_series: number[];
+}
+
+export interface ProjectTaskSummaryResponse {
+  workspace_counts: {
+    all_issues: number;
+    my_issues: number;
+    no_project: number;
+    my_status_counts: ProjectTaskStatusCounts;
+  };
+  projects: ProjectTaskSummary[];
+}
+
+export interface TaskSubtaskSummary {
+  task_id: string;
+  total: number;
+  done: number;
+}
+
+export interface TaskSubtaskSummaryResponse {
+  data: TaskSubtaskSummary[];
+}
+
 // ============================================================
 // Schedule Types
 // ============================================================
@@ -2616,6 +2732,13 @@ export interface OrgMemberRemovedData {
   user_id: string;
 }
 
+/** An org-scoped public member profile changed. */
+export interface OrgMemberProfileUpdatedData {
+  org_id: string;
+  user_id: string;
+  profile_version: number;
+}
+
 // ---- Task Comment & Activity Types ----
 
 export type TaskActivityAction = 'created' | 'field_changed' | 'commented';
@@ -3121,13 +3244,53 @@ export interface SlackChannelsPage {
   next_cursor?: string;
 }
 
-/** WeChat address book (id lists only — the vendor returns no names). */
+/** One WeChat friend resolved with its display name. */
+export interface WechatContactName {
+  wxid: string;
+  nick_name?: string;
+  remark?: string;
+  alias?: string;
+  /** The label the WeChat app would show: remark > nickName > alias > wxid. */
+  display: string;
+}
+
+/** One WeChat saved chatroom with its display name. */
+export interface WechatChatroomEntry {
+  chatroom_id: string;
+  nick_name?: string;
+  remark?: string;
+  display: string;
+}
+
+/**
+ * WeChat address book — the vendor's id-only lists enriched with display
+ * names (getBriefInfo for friends, getChatroomInfo per chatroom). System
+ * ids (weixin/fmessage/medianote) are filtered out.
+ */
 export interface WechatContactsPage {
-  friends: string[];
-  chatrooms: string[];
+  friends: WechatContactName[];
+  chatrooms: WechatChatroomEntry[];
   ghs: string[];
 }
 
+/** The connected WeChat account's identity (getProfile + stored app id). */
+export interface WechatProfileView {
+  wxid: string;
+  alias?: string;
+  nick_name?: string;
+  app_id: string;
+}
+
+/** WeChat connection health: live online probe + identity + offline record. */
+export interface WechatStatusView {
+  online: boolean;
+  wxid: string;
+  alias?: string;
+  nick_name?: string;
+  app_id: string;
+  last_offline_at?: string;
+}
+
 export interface SlackUserInfo {
   id: string;
   name: string;
@@ -3554,6 +3717,9 @@ export type WsEventMap = {
   'task.created': TaskCreatedData;
   'task.updated': TaskUpdatedData;
   'task.deleted': TaskDeletedData;
+  'label.created': LabelCreatedData;
+  'label.updated': LabelUpdatedData;
+  'label.deleted': LabelDeletedData;
   'task.assigned': TaskAssignedData;
   'task.comment.created': TaskCommentCreatedData;
   'task.comment.updated': TaskCommentUpdatedData;
@@ -3571,6 +3737,7 @@ export type WsEventMap = {
   'org.join_request.new': OrgJoinRequestNewEventData;
   'org.invite_link.joined': OrgInviteLinkJoinedEventData;
   'org.member.removed': OrgMemberRemovedData;
+  'org.member.profile.updated': OrgMemberProfileUpdatedData;
   'agent_config.update': AgentConfigUpdateData;
   'presence.update': PresenceUpdateData;
   'wiki.changeset.created': WikiChangesetCreatedData;
@@ -4775,6 +4942,10 @@ export type MCPOAuthStatus = 'connected' | 'needs_reauth' | 'disconnected';
 export interface MCPOAuthInitiateRequest {
   server_url: string;
   auth_type: 'oauth';
+  /** New-connection creates only (POST …/mcp-configs): names the connection. */
+  alias?: string;
+  /** Bring-your-own provider app (see MCPOAuthClientParams). */
+  oauth_client?: MCPOAuthClientParams;
 }
 
 /**
@@ -4812,14 +4983,37 @@ export interface MCPToolInfo {
   [key: string]: unknown;
 }
 
+/**
+ * Which registration arm produced an oauth config's client identity
+ * (multi-connection model): `preregistered` = an admin-supplied provider app
+ * (e.g. Google Cloud Console), `cimd` = our self-served client metadata
+ * document, `dcr` = RFC 7591 dynamic registration.
+ */
+export type MCPClientMode = 'preregistered' | 'cimd' | 'dcr';
+
+/** Where the OAuth client identity is owned. `platform` references a
+ * deployment App; its shared secret is never copied into the org grant. */
+export type MCPOAuthClientSource = 'embedded' | 'platform';
+
 /**
  * Redacted MCP server config of an MCP clip
- * (`GET /orgs/{orgId}/clip-registry/{clipId}/mcp-config`). The whole
- * mcp-config family is publisher-org only: cross-org installs get
- * `403 MCP_CROSS_ORG_DISABLED`, reads included. The stored credential NEVER
+ * (`GET /orgs/{orgId}/clip-registry/{clipId}/mcp-config` — the org's DEFAULT
+ * connection — or `GET …/mcp-configs/{configId}`). The whole mcp-config
+ * family also accepts an installed reviewed Official OAuth Clip across orgs;
+ * every other cross-org Clip gets `403 MCP_CROSS_ORG_DISABLED`. The stored credential NEVER
  * appears in any response — `credential_set` is the only credential fact.
+ *
+ * Multi-connection model: a clip holds one config row (credential slot) PER
+ * connection. `config_id`/`connection_id`/`alias`/`is_default` identify this
+ * slot's connection — the thing `clip exec --connection` addresses. The
+ * fields are additive; a pre-multi-connection server simply omits them.
  */
 export interface MCPConfigResponse {
+  config_id?: string;
+  /** Empty/absent = a legacy orphan config whose connection was deleted. */
+  connection_id?: string;
+  alias?: string;
+  is_default?: boolean;
   server_url: string;
   auth_type: MCPConfigAuthType;
   /** Whether a credential is stored (write-only; the value is never returned). */
@@ -4829,6 +5023,12 @@ export interface MCPConfigResponse {
   tools_refreshed_at?: string;
   /** Present only when `auth_type` is `oauth`. */
   oauth_status?: MCPOAuthStatus;
+  /** Present while an oauth config holds a stored client identity
+   *  (connected or needs_reauth); absent once disconnected. */
+  client_mode?: MCPClientMode;
+  client_source?: MCPOAuthClientSource;
+  /** True only when this grant uses the reviewed platform-owned OAuth App. */
+  official_oauth?: boolean;
   /**
    * Opaque CAS token for If-Match on PUT/DELETE (lost-update protection).
    * Version mismatch answers `409 MCP_CONFIG_STALE`.
@@ -4849,6 +5049,82 @@ export interface MCPConfigPutRequest {
   credential?: string;
 }
 
+/**
+ * POST body of `…/clip-registry/{clipId}/mcp-configs` — a NEW connection
+ * (credential slot) for the clip. `alias` names it for `clip exec
+ * --connection` (exec always names its MCP connection explicitly — the
+ * legacy connection-less form never routes to MCP); a collision falls back
+ * to no alias (rename later via `PATCH /clip-connections/{connId}`). The new
+ * connection becomes the org default only when no default exists — adding an
+ * account never rewrites which connection the singular config surface (and
+ * the Console lead card) addresses. No If-Match (creation is additive). Flat
+ * auth types answer 201 with MCPConfigResponse; `auth_type: 'oauth'` answers
+ * MCPOAuthInitiateResponse and commits nothing until the browser callback.
+ */
+export interface MCPConfigCreateRequest {
+  server_url?: string;
+  auth_type: MCPAuthType | 'oauth';
+  credential?: string;
+  alias?: string;
+  oauth_client?: MCPOAuthClientParams;
+}
+
+/**
+ * A manually pre-registered OAuth client identity (§4 ladder level 1 — e.g. a
+ * Google Cloud Console app). Required when the provider's AS supports neither
+ * CIMD nor dynamic registration (the server answers
+ * `422 MCP_OAUTH_PREREGISTERED_REQUIRED`, whose `details` carry
+ * `authorization_server` + `redirect_uri` for registering the app); always
+ * allowed as an explicit bring-your-own-app choice. The secret is write-only.
+ */
+export interface MCPOAuthClientParams {
+  client_id: string;
+  client_secret?: string;
+}
+
+/**
+ * One row of `GET …/clip-registry/{clipId}/mcp-configs` — the org's MCP
+ * connections for the clip, default first. Deliberately WITHOUT the tools
+ * snapshot (bounded at 1MiB per config); `tool_count` summarizes it and the
+ * per-config GET carries the full snapshot.
+ */
+export interface MCPConnectionSummary {
+  connection_id: string;
+  config_id: string;
+  alias?: string;
+  is_default: boolean;
+  server_url: string;
+  auth_type: MCPConfigAuthType;
+  credential_set: boolean;
+  tool_count?: number;
+  tools_refreshed_at?: string;
+  oauth_status?: MCPOAuthStatus;
+  client_mode?: MCPClientMode;
+  client_source?: MCPOAuthClientSource;
+  official_oauth?: boolean;
+  version: string;
+}
+
+/** Result of the server-orchestrated Official MCP Clip removal. Local rows
+ * are always removed on success; `revoked: false` warns that the provider may
+ * still hold a grant requiring manual cleanup. */
+export interface MCPOfficialClipRemovalResponse {
+  removed: boolean;
+  revoked: boolean;
+}
+
+/**
+ * PATCH body of `/clip-connections/{connId}` (MCP connections only, human
+ * org-admin JWT): rename the slot and/or promote it to the org default
+ * (atomic swap with the current default). `is_default: false` is refused —
+ * promote another connection instead. Alias collision answers
+ * `409 ALIAS_TAKEN`.
+ */
+export interface UpdateClipConnectionRequest {
+  alias?: string | null;
+  is_default?: true;
+}
+
 /**
  * A clip in the api-server org registry (`crg_…`, table `clip_registry`) — the
  * v3 registry that publish, install, and clip connections operate on.