@ptkl/sdk 1.13.0 → 1.15.0

package/dist/v0.9/index.cjs.js

@@ -19550,11 +19550,32 @@ class Users extends PlatformBaseClient {
     }
     // Permissions & Roles
     /**
-     * Get user permissions
+     * Get the current token's permissions.
+     *
+     * Returns the resolved permission set carried by the calling token. For a
+     * forge actor token this is the scoped intersection minted at launch time —
+     * see `getPrincipalPermissions()` for the underlying user's full set.
      */
     async getPermissions() {
         return await this.client.get("/v1/user/role/permissions");
     }
+    /**
+     * Get the FULL permissions of the user the current token is acting on behalf
+     * of (the "principal").
+     *
+     * When a forge app runs under an actor token, `getPermissions()` returns only
+     * the token's scoped permissions — the intersection of the app's declared
+     * runtime permissions and the user's permissions. This instead returns the
+     * complete permission set of the underlying user, so the app can check what
+     * that user is actually allowed to do, independent of what the app itself was
+     * granted. The token scope is unchanged: this exposes knowledge, not capability.
+     *
+     * For a normal user session (no actor token) it returns the caller's own
+     * permissions, identical to `getPermissions()`'s scope.
+     */
+    async getPrincipalPermissions() {
+        return await this.client.get("/v1/user/role/principal-permissions");
+    }
     /**
      * Get list of available permissions
      */

package/dist/v0.9/index.esm.js

@@ -581,11 +581,32 @@ class Users extends PlatformBaseClient {
     }
     // Permissions & Roles
     /**
-     * Get user permissions
+     * Get the current token's permissions.
+     *
+     * Returns the resolved permission set carried by the calling token. For a
+     * forge actor token this is the scoped intersection minted at launch time —
+     * see `getPrincipalPermissions()` for the underlying user's full set.
      */
     async getPermissions() {
         return await this.client.get("/v1/user/role/permissions");
     }
+    /**
+     * Get the FULL permissions of the user the current token is acting on behalf
+     * of (the "principal").
+     *
+     * When a forge app runs under an actor token, `getPermissions()` returns only
+     * the token's scoped permissions — the intersection of the app's declared
+     * runtime permissions and the user's permissions. This instead returns the
+     * complete permission set of the underlying user, so the app can check what
+     * that user is actually allowed to do, independent of what the app itself was
+     * granted. The token scope is unchanged: this exposes knowledge, not capability.
+     *
+     * For a normal user session (no actor token) it returns the caller's own
+     * permissions, identical to `getPermissions()`'s scope.
+     */
+    async getPrincipalPermissions() {
+        return await this.client.get("/v1/user/role/principal-permissions");
+    }
     /**
      * Get list of available permissions
      */

package/dist/v0.9/types/component.d.ts

@@ -409,6 +409,7 @@ type SetupData = {
     is_public?: boolean;
     icon?: string;
     settings?: Settings;
+    force_override?: boolean;
 };
 type ComponentCreateResponse = ComponentListItem;
 export { FindParams, FindOptions, FindResponse, FindAdvancedParams, FindAggregateParams, Model, UpdateOptions, ModifyOptions, UpdateOperators, UpdateAggregate, ModelUpdateData, ComponentOptions, ComponentListResponse, ComponentListItem, ComponentLabel, ComponentWorkspace, StreamCallback, StreamHandler, AggregateChainable, UpdateManyOptions, CreateManyOptions, Settings, SettingsField, FieldRoles, FieldConstraints, Context, Preset, PresetContext, Filters, Function, Extension, Policy, FieldAccessConfig, TemplatesDist, SetupData, ComponentCreateResponse, };

package/dist/v0.9/types/users.d.ts

@@ -65,3 +65,13 @@ export interface Permission {
     action: string;
     role_uuid: string;
 }
+/**
+ * Resolved RBAC permission set for a user on the current project.
+ * Matches the dashboard `models.Permissions` response shape returned by
+ * `GET /v1/user/role/permissions` and `GET /v1/user/role/principal-permissions`.
+ */
+export interface Permissions {
+    is_admin: boolean;
+    roles: string[];
+    permissions: string[];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ptkl/sdk",
-  "version": "1.13.0",
+  "version": "1.15.0",
   "scripts": {
     "build": "rollup -c",
     "build:monaco": "npm run build && node scripts/generate-monaco-types.cjs",