@proteos/sdk 0.58.0 → 0.59.0

package/dist/index.d.cts

@@ -4398,6 +4398,11 @@ interface ListConnectionsQuery extends PaginationQuery {
      */
     owner_id?: string;
     status?: string;
+    /**
+     * The caller's intent: `read` (default) lists every connection they reach;
+     * `write` only those they may send through — the compose picker's question.
+     */
+    permission?: 'read' | 'write';
 }
 /**
  * The delete's escape hatch. A connection delete makes the connector release
@@ -4487,7 +4492,13 @@ interface ListAgentListenersQuery extends PaginationQuery {
  * inert where their facts are missing.
  */
 type ConversationFilterType = 'address' | 'domain' | 'title_keyword' | 'role_based' | 'automated' | 'self_originated' | 'internal_participant' | 'internal_conversations' | 'all';
-type ConversationFilterAction = 'block' | 'allow';
+/**
+ * block drops the message; allow keeps it. restrict and share keep it too
+ * (they rank as allow) and decide who sees the thread the message CREATES:
+ * restrict writes only the rule's principals onto the new thread, share adds
+ * them on top of what the thread inherits. Applied once, at creation.
+ */
+type ConversationFilterAction = 'block' | 'allow' | 'restrict' | 'share';
 /** Which side of the message address/domain rules test (default: sender). */
 type FilterMatchOn = 'sender' | 'any_participant';
 /** Deterministic machine-mail header signals the automated filter matches. */
@@ -4537,7 +4548,11 @@ interface ConversationFilter {
     action: ConversationFilterAction;
     filter_config?: ConversationFilterConfig;
     is_enabled: boolean;
-    /** Read-only rollup: messages this rule dropped in the last 30 days. */
+    /** restrict / share only: who the created thread is opened to. */
+    principals?: PrincipalRef[];
+    /** restrict / share only: read or write (write implies read; the default). */
+    permission?: 'read' | 'write';
+    /** Read-only rollup: messages this rule matched in the last 30 days. */
     recent_event_count?: number;
     created_at: string;
     created_by: UserRef;
@@ -4555,6 +4570,8 @@ interface ConversationFilterEvent {
     sender_kind?: ContactAddressKind;
     sender_value?: string;
     external_message_id?: string;
+    /** The thread a restrict / share match applied to; empty on a drop. */
+    conversation_id?: string;
     occurred_at: string;
 }
 interface CreateConversationFilterRequest {
@@ -4563,6 +4580,9 @@ interface CreateConversationFilterRequest {
     action: ConversationFilterAction;
     filter_config?: Record<string, unknown>;
     is_enabled?: boolean;
+    /** Required for restrict / share, empty otherwise. */
+    principals?: PrincipalRef[];
+    permission?: 'read' | 'write';
     /** Opts past the own-domain guard (self_domain_block). */
     is_self_domain_acknowledged?: boolean;
 }
@@ -4572,6 +4592,8 @@ interface UpdateConversationFilterRequest {
     action?: ConversationFilterAction;
     filter_config?: Record<string, unknown>;
     is_enabled?: boolean;
+    principals?: PrincipalRef[];
+    permission?: 'read' | 'write';
     is_self_domain_acknowledged?: boolean;
 }
 interface ListConversationFiltersQuery extends PaginationQuery {

package/dist/index.d.ts

@@ -4398,6 +4398,11 @@ interface ListConnectionsQuery extends PaginationQuery {
      */
     owner_id?: string;
     status?: string;
+    /**
+     * The caller's intent: `read` (default) lists every connection they reach;
+     * `write` only those they may send through — the compose picker's question.
+     */
+    permission?: 'read' | 'write';
 }
 /**
  * The delete's escape hatch. A connection delete makes the connector release
@@ -4487,7 +4492,13 @@ interface ListAgentListenersQuery extends PaginationQuery {
  * inert where their facts are missing.
  */
 type ConversationFilterType = 'address' | 'domain' | 'title_keyword' | 'role_based' | 'automated' | 'self_originated' | 'internal_participant' | 'internal_conversations' | 'all';
-type ConversationFilterAction = 'block' | 'allow';
+/**
+ * block drops the message; allow keeps it. restrict and share keep it too
+ * (they rank as allow) and decide who sees the thread the message CREATES:
+ * restrict writes only the rule's principals onto the new thread, share adds
+ * them on top of what the thread inherits. Applied once, at creation.
+ */
+type ConversationFilterAction = 'block' | 'allow' | 'restrict' | 'share';
 /** Which side of the message address/domain rules test (default: sender). */
 type FilterMatchOn = 'sender' | 'any_participant';
 /** Deterministic machine-mail header signals the automated filter matches. */
@@ -4537,7 +4548,11 @@ interface ConversationFilter {
     action: ConversationFilterAction;
     filter_config?: ConversationFilterConfig;
     is_enabled: boolean;
-    /** Read-only rollup: messages this rule dropped in the last 30 days. */
+    /** restrict / share only: who the created thread is opened to. */
+    principals?: PrincipalRef[];
+    /** restrict / share only: read or write (write implies read; the default). */
+    permission?: 'read' | 'write';
+    /** Read-only rollup: messages this rule matched in the last 30 days. */
     recent_event_count?: number;
     created_at: string;
     created_by: UserRef;
@@ -4555,6 +4570,8 @@ interface ConversationFilterEvent {
     sender_kind?: ContactAddressKind;
     sender_value?: string;
     external_message_id?: string;
+    /** The thread a restrict / share match applied to; empty on a drop. */
+    conversation_id?: string;
     occurred_at: string;
 }
 interface CreateConversationFilterRequest {
@@ -4563,6 +4580,9 @@ interface CreateConversationFilterRequest {
     action: ConversationFilterAction;
     filter_config?: Record<string, unknown>;
     is_enabled?: boolean;
+    /** Required for restrict / share, empty otherwise. */
+    principals?: PrincipalRef[];
+    permission?: 'read' | 'write';
     /** Opts past the own-domain guard (self_domain_block). */
     is_self_domain_acknowledged?: boolean;
 }
@@ -4572,6 +4592,8 @@ interface UpdateConversationFilterRequest {
     action?: ConversationFilterAction;
     filter_config?: Record<string, unknown>;
     is_enabled?: boolean;
+    principals?: PrincipalRef[];
+    permission?: 'read' | 'write';
     is_self_domain_acknowledged?: boolean;
 }
 interface ListConversationFiltersQuery extends PaginationQuery {

package/dist/index.js

@@ -683,6 +683,7 @@ var PLATFORM_ENTITY_SERVICE = {
   tools: "/agents",
   toolsets: "/agents",
   "mcp-servers": "/agents",
+  "agent-sessions": "/agents",
   // Knowledge (knowledge-service)
   "knowledge-spaces": "/knowledge",
   "knowledge-nodes": "/knowledge",
@@ -690,7 +691,7 @@ var PLATFORM_ENTITY_SERVICE = {
   conversations: "/conversations",
   connections: "/conversations"
 };
-var SERVICES_WITH_SHARING = /* @__PURE__ */ new Set(["/data", "/knowledge"]);
+var SERVICES_WITH_SHARING = /* @__PURE__ */ new Set(["/data", "/knowledge", "/agents", "/conversations"]);
 var DEFAULT_SERVICE = "/data";
 function shareRouteFor(entitySlug) {
   const service = PLATFORM_ENTITY_SERVICE[entitySlug] ?? DEFAULT_SERVICE;
@@ -962,6 +963,8 @@ var PLATFORM_ENTITIES = [
   { slug: "glossary-terms", name: "Glossary Terms" },
   // Mistranscribed terms proposed by the post-transcription review pass.
   { slug: "mistranscribed-terms", name: "Mistranscribed Terms" },
+  // Live speech-to-text (the dictation stream) — `read` opens a stream.
+  { slug: "voice", name: "Voice" },
   // The person-level identity layer (contacts + addresses + merges + consent +
   // erasure) — one grant governs the whole aggregate.
   { slug: "contacts", name: "Contacts" },
@@ -1005,7 +1008,25 @@ var PLATFORM_ENTITIES = [
 var PLATFORM_ENTITY_SLUGS = PLATFORM_ENTITIES.map(
   (entity) => entity.slug
 );
-var SCOPED_PLATFORM_ENTITY_SLUGS = ["knowledge-nodes"];
+var SCOPED_PLATFORM_ENTITY_SLUGS = [
+  "knowledge-nodes",
+  // agent-service: sessions are owned by their starter; the six config
+  // resources by their creator. Scoped lists + /agents/v1/shares.
+  "agent-sessions",
+  "agents",
+  "prompts",
+  "skills",
+  "tools",
+  "toolsets",
+  "mcp-servers",
+  // conversation-service: a connection is owned by its owner (user-scoped) or
+  // open to the org through its org share (org-scoped); a conversation's rows
+  // are stamped once at creation from its connection / parent and extended by
+  // shares; messages inherit their conversation. /conversations/v1/shares.
+  "connections",
+  "conversations",
+  "messages"
+];
 function isPlatformEntity(slug) {
   return PLATFORM_ENTITY_SLUGS.includes(slug);
 }