@withloops.ai/contracts 0.1.0 → 0.2.1

package/dist/scopes.d.ts

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+/**
+ * Every permission an app can ask for. One list for REST, MCP, events and LoopKit (skill §8 "one scope list").
+ * Only ever ADD to this list (versioning promise). `consent` is the plain-words line on the install sheet
+ * ("<App> can …"), sentence case.
+ */
+export declare const SCOPES: {
+    readonly 'contacts:read': "See contacts: names, emails, phone numbers and their company";
+    readonly 'contacts:write': "Add and change contacts";
+    readonly 'companies:read': "See companies";
+    readonly 'companies:write': "Add and change companies";
+    readonly 'leads:read': "See leads";
+    readonly 'leads:write': "Add and change leads";
+    readonly 'deals:read': "See deals and the people on them";
+    readonly 'deals:write': "Add and change deals";
+    readonly 'notes:write': "Write notes on records, marked with the app’s name";
+    readonly 'actions:write': "Add Actions for people in your workspace";
+    readonly 'loops:read': "Read messages in loops the app is added to";
+    readonly 'loops:write': "Post in loops the app is added to, marked with the app’s name";
+    readonly 'calls:read': "See calls and their transcripts";
+    readonly 'meetings:read': "See meetings and their notes";
+    readonly 'webhooks:manage': "Send events from your workspace to the app";
+};
+export type Scope = keyof typeof SCOPES;
+export declare const SCOPE_NAMES: [Scope, ...Scope[]];
+export declare const ScopeSchema: z.ZodEnum<{
+    "contacts:read": "contacts:read";
+    "contacts:write": "contacts:write";
+    "companies:read": "companies:read";
+    "companies:write": "companies:write";
+    "leads:read": "leads:read";
+    "leads:write": "leads:write";
+    "deals:read": "deals:read";
+    "deals:write": "deals:write";
+    "notes:write": "notes:write";
+    "actions:write": "actions:write";
+    "loops:read": "loops:read";
+    "loops:write": "loops:write";
+    "calls:read": "calls:read";
+    "meetings:read": "meetings:read";
+    "webhooks:manage": "webhooks:manage";
+}>;
+/** The consent line for a scope, e.g. on the install sheet. */
+export declare function consentLine(scope: Scope): string;
+/** A `write` scope implies its `read` (asking for contacts:write shows both lines). */
+export declare function expandScopes(scopes: readonly Scope[]): Scope[];

package/dist/scopes.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+/**
+ * Every permission an app can ask for. One list for REST, MCP, events and LoopKit (skill §8 "one scope list").
+ * Only ever ADD to this list (versioning promise). `consent` is the plain-words line on the install sheet
+ * ("<App> can …"), sentence case.
+ */
+export const SCOPES = {
+    'contacts:read': 'See contacts: names, emails, phone numbers and their company',
+    'contacts:write': 'Add and change contacts',
+    'companies:read': 'See companies',
+    'companies:write': 'Add and change companies',
+    'leads:read': 'See leads',
+    'leads:write': 'Add and change leads',
+    'deals:read': 'See deals and the people on them',
+    'deals:write': 'Add and change deals',
+    'notes:write': 'Write notes on records, marked with the app’s name',
+    'actions:write': 'Add Actions for people in your workspace',
+    'loops:read': 'Read messages in loops the app is added to',
+    'loops:write': 'Post in loops the app is added to, marked with the app’s name',
+    'calls:read': 'See calls and their transcripts',
+    'meetings:read': 'See meetings and their notes',
+    'webhooks:manage': 'Send events from your workspace to the app',
+};
+export const SCOPE_NAMES = Object.keys(SCOPES);
+export const ScopeSchema = z.enum(SCOPE_NAMES);
+/** The consent line for a scope, e.g. on the install sheet. */
+export function consentLine(scope) {
+    return SCOPES[scope];
+}
+/** A `write` scope implies its `read` (asking for contacts:write shows both lines). */
+export function expandScopes(scopes) {
+    const out = new Set(scopes);
+    for (const s of scopes) {
+        const [res, op] = s.split(':');
+        const read = `${res}:read`;
+        if (op === 'write' && read in SCOPES)
+            out.add(read);
+    }
+    return SCOPE_NAMES.filter((s) => out.has(s));
+}

package/package.json

@@ -1,29 +1,35 @@
 {
   "name": "@withloops.ai/contracts",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "The Loops developer platform contracts (zod): app manifest v1, scopes, events, the /v1 API envelope and registry records. Everything else builds on these.",
   "type": "module",
   "license": "UNLICENSED",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
   },
   "files": [
+    "dist",
     "src",
     "examples"
   ],
   "engines": {
-    "node": ">=22.18"
+    "node": ">=26"
   },
   "scripts": {
     "test": "node --test \"test/*.test.ts\"",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "typescript": "^5.9.3",
-    "@types/node": "^24.0.0"
+    "@types/node": "^26.0.0"
   },
   "homepage": "https://withloops.ai",
   "keywords": [
@@ -31,5 +37,7 @@
     "withloops",
     "sdk",
     "contracts"
-  ]
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
 }

package/src/registry.ts

@@ -111,6 +111,8 @@ export type Caller = z.infer<typeof Caller>;
 export interface RegistryRpc {
   submit(caller: Caller, manifest: unknown): Promise<{ ok: true; version: AppVersionRecord } | { ok: false; errors: string[] }>;
   listMarketplace(caller: Caller): Promise<Listing[]>;
+  /** Apps owned by the caller's workspace (`GET /v1/developer/apps`). Added in 0.2.0. */
+  listApps(caller: Caller): Promise<AppRecord[]>;
   getApp(caller: Caller, appId: string): Promise<{ app: AppRecord; versions: AppVersionRecord[] } | null>;
   install(caller: Caller, appId: string, grantedScopes: string[]): Promise<{ ok: true; install: InstallRecord } | { ok: false; error: string }>;
   uninstall(caller: Caller, installId: string): Promise<{ ok: boolean }>;