@proteos/sdk 0.58.0 → 0.59.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proteos/sdk",
-  "version": "0.58.0",
+  "version": "0.59.1",
   "license": "Apache-2.0",
   "description": "TypeScript SDK for the Proteos platform",
   "repository": {

package/src/auth/platform-entities.ts

@@ -83,6 +83,8 @@ export const PLATFORM_ENTITIES: readonly PlatformEntity[] = [
   { slug: 'glossary-terms', name: 'Glossary Terms' },
   // Mistranscribed terms proposed by the post-transcription review pass.
   { slug: 'mistranscribed-terms', name: 'Mistranscribed Terms' },
+  // Live speech-to-text (the dictation stream) — `read` opens a stream.
+  { slug: 'voice', name: 'Voice' },
   // The person-level identity layer (contacts + addresses + merges + consent +
   // erasure) — one grant governs the whole aggregate.
   { slug: 'contacts', name: 'Contacts' },
@@ -136,7 +138,25 @@ export const PLATFORM_ENTITY_SLUGS: readonly string[] = PLATFORM_ENTITIES.map(
  * by it — so permission UIs only offer the scoped column for these. Extend as
  * services adopt scoped enforcement.
  */
-export const SCOPED_PLATFORM_ENTITY_SLUGS: readonly string[] = ['knowledge-nodes']
+export const SCOPED_PLATFORM_ENTITY_SLUGS: readonly string[] = [
+  'knowledge-nodes',
+  // agent-service: sessions are owned by their starter; the six config
+  // resources by their creator. Scoped lists + /agents/v1/shares.
+  'agent-sessions',
+  'agents',
+  'prompts',
+  'skills',
+  'tools',
+  'toolsets',
+  'mcp-servers',
+  // conversation-service: a connection is owned by its owner (user-scoped) or
+  // open to the org through its org share (org-scoped); a conversation's rows
+  // are stamped once at creation from its connection / parent and extended by
+  // shares; messages inherit their conversation. /conversations/v1/shares.
+  'connections',
+  'conversations',
+  'messages',
+]
 
 /** True when `slug` belongs to a platform entity (reserved; can't be user-created). */
 export function isPlatformEntity(slug: string): boolean {

package/src/auth/shares.ts

@@ -27,6 +27,7 @@ const PLATFORM_ENTITY_SERVICE: Readonly<Record<string, string>> = {
   tools: '/agents',
   toolsets: '/agents',
   'mcp-servers': '/agents',
+  'agent-sessions': '/agents',
   // Knowledge (knowledge-service)
   'knowledge-spaces': '/knowledge',
   'knowledge-nodes': '/knowledge',
@@ -38,11 +39,11 @@ const PLATFORM_ENTITY_SERVICE: Readonly<Record<string, string>> = {
 /**
  * The services that actually serve `/v1/shares` today.
  *
- * Deliberately separate from the map above: the other services get the endpoint
- * in later phases, and until then a share must fail with a clear message rather
- * than a bare 404 that reads like the record does not exist.
+ * Deliberately separate from the map above: a service that has not adopted
+ * the endpoint yet must fail with a clear message rather than a bare 404 that
+ * reads like the record does not exist.
  */
-const SERVICES_WITH_SHARING: ReadonlySet<string> = new Set(['/data', '/knowledge'])
+const SERVICES_WITH_SHARING: ReadonlySet<string> = new Set(['/data', '/knowledge', '/agents', '/conversations'])
 
 /** Records live in data-service; user-defined entities are the unlisted majority. */
 const DEFAULT_SERVICE = '/data'

package/src/conversation/types.ts

@@ -3,6 +3,7 @@
  * mirror of packages/go/model/conversation (snake_case, Is-prefixed booleans).
  */
 
+import type { PrincipalRef } from '../meta/types.js'
 import type { FileRef } from '../types/common.js'
 
 /**
@@ -1612,6 +1613,11 @@ export interface ListConnectionsQuery extends PaginationQuery {
    */
   owner_id?: string
   status?: string
+  /**
+   * The caller's intent: `read` (default) lists every connection they reach;
+   * `write` only those they may send through — the compose picker's question.
+   */
+  permission?: 'read' | 'write'
 }
 
 /**
@@ -1716,7 +1722,13 @@ export type ConversationFilterType =
   | 'internal_participant'
   | 'internal_conversations'
   | 'all'
-export type ConversationFilterAction = 'block' | 'allow'
+/**
+ * block drops the message; allow keeps it. restrict and share keep it too
+ * (they rank as allow) and decide who sees the thread the message CREATES:
+ * restrict writes only the rule's principals onto the new thread, share adds
+ * them on top of what the thread inherits. Applied once, at creation.
+ */
+export type ConversationFilterAction = 'block' | 'allow' | 'restrict' | 'share'
 /** Which side of the message address/domain rules test (default: sender). */
 export type FilterMatchOn = 'sender' | 'any_participant'
 /** Deterministic machine-mail header signals the automated filter matches. */
@@ -1783,7 +1795,11 @@ export interface ConversationFilter {
   action: ConversationFilterAction
   filter_config?: ConversationFilterConfig
   is_enabled: boolean
-  /** Read-only rollup: messages this rule dropped in the last 30 days. */
+  /** restrict / share only: who the created thread is opened to. */
+  principals?: PrincipalRef[]
+  /** restrict / share only: read or write (write implies read; the default). */
+  permission?: 'read' | 'write'
+  /** Read-only rollup: messages this rule matched in the last 30 days. */
   recent_event_count?: number
   created_at: string
   created_by: UserRef
@@ -1802,6 +1818,8 @@ export interface ConversationFilterEvent {
   sender_kind?: ContactAddressKind
   sender_value?: string
   external_message_id?: string
+  /** The thread a restrict / share match applied to; empty on a drop. */
+  conversation_id?: string
   occurred_at: string
 }
 
@@ -1811,6 +1829,9 @@ export interface CreateConversationFilterRequest {
   action: ConversationFilterAction
   filter_config?: Record<string, unknown>
   is_enabled?: boolean
+  /** Required for restrict / share, empty otherwise. */
+  principals?: PrincipalRef[]
+  permission?: 'read' | 'write'
   /** Opts past the own-domain guard (self_domain_block). */
   is_self_domain_acknowledged?: boolean
 }
@@ -1821,6 +1842,8 @@ export interface UpdateConversationFilterRequest {
   action?: ConversationFilterAction
   filter_config?: Record<string, unknown>
   is_enabled?: boolean
+  principals?: PrincipalRef[]
+  permission?: 'read' | 'write'
   is_self_domain_acknowledged?: boolean
 }