js-bao-wss-client 2.0.4 → 2.0.6

package/dist/api/notificationsApi.js

@@ -0,0 +1,52 @@
+// ── API ──
+/**
+ * Sub-API for the notification inbox (`client.notifications.*`).
+ *
+ * Inbox reads/writes act on the signed-in user's own notifications. `send()`
+ * requires app admin permission. Live updates arrive as the `notification`
+ * client event (`client.on("notification", ...)`).
+ */
+export class NotificationsAPI {
+    constructor(client) {
+        this.client = client;
+    }
+    /** List the caller's notifications, newest first. */
+    async list(options) {
+        const params = new URLSearchParams();
+        if (options?.limit !== undefined)
+            params.set("limit", String(options.limit));
+        if (options?.cursor)
+            params.set("cursor", options.cursor);
+        const query = params.toString() ? `?${params.toString()}` : "";
+        return this.client.makeRequest("GET", `/notifications${query}`);
+    }
+    /** Count the caller's unread notifications. */
+    async unreadCount() {
+        return this.client.makeRequest("GET", "/notifications/unread-count");
+    }
+    /** Mark one of the caller's notifications as read. */
+    async markRead(notificationId) {
+        return this.client.makeRequest("PATCH", `/notifications/${encodeURIComponent(notificationId)}/read`, {});
+    }
+    /** Mark all of the caller's notifications as read. */
+    async markAllRead() {
+        return this.client.makeRequest("POST", "/notifications/read-all", {});
+    }
+    /** Send a notification to an app user (requires app admin permission). */
+    async send(params) {
+        return this.client.makeRequest("POST", "/notifications/send", params);
+    }
+    /** Register (upsert) the calling user's device push token. */
+    async registerDevice(params) {
+        return this.client.makeRequest("POST", "/me/push-tokens", params);
+    }
+    /** List the calling user's registered push devices. */
+    async listDevices() {
+        return this.client.makeRequest("GET", "/me/push-tokens");
+    }
+    /** Unregister one of the calling user's device push tokens (e.g. on logout). */
+    async unregisterDevice(token) {
+        return this.client.makeRequest("DELETE", `/me/push-tokens/${encodeURIComponent(token)}`);
+    }
+}
+//# sourceMappingURL=notificationsApi.js.map

package/dist/api/notificationsApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notificationsApi.js","sourceRoot":"","sources":["../../api/notificationsApi.ts"],"names":[],"mappings":"AAuGA,YAAY;AAEZ;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAC3B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,qDAAqD;IACrD,KAAK,CAAC,IAAI,CACR,OAAiC;QAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,KAAK,EACL,iBAAiB,KAAK,EAAE,CACU,CAAC;IACvC,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,KAAK,EACL,6BAA6B,CACM,CAAC;IACxC,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,QAAQ,CAAC,cAAsB;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,OAAO,EACP,kBAAkB,kBAAkB,CAAC,cAAc,CAAC,OAAO,EAC3D,EAAE,CAC0B,CAAC;IACjC,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,MAAM,EACN,yBAAyB,EACzB,EAAE,CAC6B,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI,CAAC,MAA8B;QAOvC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,qBAAqB,EAAE,MAAM,CAIlE,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,cAAc,CAClB,MAAgC;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,MAAM,EACN,iBAAiB,EACjB,MAAM,CACoB,CAAC;IAC/B,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAErD,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,QAAQ,EACR,mBAAmB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACd,CAAC;IACrC,CAAC;CACF"}

package/dist/api/operationDefinition.d.ts

@@ -0,0 +1,279 @@
+/**
+ * Typed database operation definitions (issue #1544).
+ *
+ * These types replace the previous `definition: Record<string, any>` on
+ * `createOperation` / `updateOperation` / `DatabaseOperationInfo`. They are
+ * hand-authored to mirror the server validator
+ * (`validateDefinition` in `database-type-operations-controller.ts`), whose
+ * declarative allow-lists live in the dependency-free descriptor
+ * `src/app-api/controllers/operation-definition-descriptor.ts`. A key-parity
+ * test (`cli/tests/unit/operation-def-client-types.test.ts`) asserts that each
+ * member below carries exactly the keys the descriptor allows, and a byte-copy
+ * drift guard keeps the vendored descriptor in step with the server — so these
+ * types can never silently diverge from what the server enforces.
+ *
+ * The discriminated union lives at the PARAMS level, not on `definition` alone:
+ * the op `type` is a sibling of `definition`, so `CreateOperationParams` and
+ * `DatabaseOperationInfo` are unions keyed on `type` that bind the matching
+ * definition shape. `updateOperation` takes the plain `OperationDefinition`
+ * union (a partial update can change `type` and definition independently, so it
+ * makes no per-type narrowing claim).
+ *
+ * The leaf value shapes (filter objects, CEL expression strings, `$params`
+ * references) stay permissive on purpose — the server is the authoritative
+ * runtime boundary for those; these types describe the STRUCTURE (which op
+ * types exist and which keys each definition allows) that the audit found
+ * untyped, without over-promising the contents of a filter or a CEL string.
+ *
+ * This module is deliberately dependency-free (only `import type` for the
+ * runtime-key self-check helper is inlined below) so it can be imported by the
+ * codegen key-parity test without dragging in the full client graph.
+ */
+/** The operation kinds accepted by `createOperation` / `updateOperation`. */
+export type OperationType = "query" | "mutation" | "count" | "aggregate" | "pipeline" | "applyToQuery";
+/**
+ * A filter is a structured query object or a `$params.<name>` reference string
+ * resolved at execution time. The server validates its contents; the client
+ * keeps it permissive.
+ */
+export type OperationFilter = Record<string, any> | string;
+/** An object literal or a `$params.<name>` reference string. */
+export type ObjectOrParamsRef = Record<string, any> | string;
+/** A `query` operation definition. Keys: filter, sort, limit, projection, include, cache. */
+export interface QueryDefinition {
+    /** Structured filter object, or a `$params` reference. Required. */
+    filter: OperationFilter;
+    /** Field → sort direction (`1` ascending, `-1` descending). */
+    sort?: Record<string, 1 | -1>;
+    /** Maximum records to return (server caps at 1000). */
+    limit?: number;
+    /**
+     * Field projection: an include map (`{ field: 1 }`) or an exclude map
+     * (`{ field: 0 }`). The server's `validateProjectionAndSort` accepts only a
+     * plain object whose values are exactly `0` or `1` — arrays and boolean
+     * values are rejected with a 400.
+     */
+    projection?: Record<string, 0 | 1>;
+    /** Related records to include in the result. */
+    include?: Record<string, any>;
+    /** Opt-in result-cache configuration (#1247); query definitions only. */
+    cache?: Record<string, any>;
+}
+/** A single write inside a `mutation` definition's `operations` array. */
+export interface MutationOperation {
+    op: "save" | "patch" | "delete" | "increment" | "addToSet" | "removeFromSet";
+    /** Target record id (required for patch/delete/increment/addToSet/removeFromSet). */
+    id?: string;
+    /** Record data for save/patch (object or `$params` reference). */
+    data?: ObjectOrParamsRef;
+    /** Field → increment amount for `increment` (object or `$params` reference). */
+    fields?: ObjectOrParamsRef;
+    /** Field → string-set members for addToSet/removeFromSet (object or `$params`). */
+    stringSets?: ObjectOrParamsRef;
+    /** `save` only: skip when the record already exists. */
+    ifNotExists?: boolean;
+    /** `save` only: a CEL condition (or `$params` reference) gating the write. */
+    condition?: string;
+    /** `save` only: field name (or `$params` reference) to upsert on. */
+    upsertOn?: string;
+}
+/** A `mutation` operation definition. Keys: operations. */
+export interface MutationDefinition {
+    operations: MutationOperation[];
+}
+/** A `count` operation definition. Keys: filter. */
+export interface CountDefinition {
+    filter: OperationFilter;
+}
+/** A single aggregation inside an `aggregate` definition's `operations` array. */
+export interface AggregateOperation {
+    type: "count" | "sum" | "avg" | "min" | "max";
+    /** Field to aggregate. Required for every op except `count`. */
+    field?: string;
+}
+/** A `groupBy` entry: a field name or a StringSet-membership descriptor. */
+export type AggregateGroupByEntry = string | {
+    field: string;
+    contains: string;
+};
+/** An `aggregate` operation definition. Keys: groupBy, operations, filter, limit, sort. */
+export interface AggregateDefinition {
+    groupBy: AggregateGroupByEntry[] | string;
+    operations: AggregateOperation[] | string;
+    filter?: OperationFilter;
+    limit?: number;
+    sort?: {
+        field: string;
+        direction: 1 | -1;
+    };
+}
+/**
+ * A `query` step inside a `pipeline` definition's `steps` array. Keys:
+ * name, type, modelName, filter, sort, limit, projection, include.
+ */
+export interface PipelineQueryStep {
+    /** Unique step name (referenced by later steps as `$steps.<name>`). */
+    name: string;
+    type: "query";
+    modelName: string;
+    /** Structured filter object, or a `$params`/`$steps` reference. Required. */
+    filter: OperationFilter;
+    /** Field → sort direction (`1` ascending, `-1` descending). */
+    sort?: Record<string, 1 | -1>;
+    limit?: number;
+    /** Field projection: an include (`1`) or exclude (`0`) map. Object only. */
+    projection?: Record<string, 0 | 1>;
+    include?: Record<string, any>;
+}
+/**
+ * A `count` step inside a `pipeline` definition's `steps` array. Keys:
+ * name, type, modelName, filter. A count step takes no sort/limit/projection.
+ */
+export interface PipelineCountStep {
+    /** Unique step name (referenced by later steps as `$steps.<name>`). */
+    name: string;
+    type: "count";
+    modelName: string;
+    /** Structured filter object, or a `$params`/`$steps` reference. Required. */
+    filter: OperationFilter;
+}
+/**
+ * An `aggregate` step inside a `pipeline` definition's `steps` array. Keys:
+ * name, type, modelName, groupBy, operations, filter, limit, sort. The step's
+ * `sort` is the aggregate `{ field, direction }` shape, not the query
+ * field→direction map.
+ */
+export interface PipelineAggregateStep {
+    /** Unique step name (referenced by later steps as `$steps.<name>`). */
+    name: string;
+    type: "aggregate";
+    modelName: string;
+    groupBy: AggregateGroupByEntry[] | string;
+    operations: AggregateOperation[] | string;
+    filter?: OperationFilter;
+    limit?: number;
+    sort?: {
+        field: string;
+        direction: 1 | -1;
+    };
+}
+/**
+ * A single step inside a `pipeline` definition's `steps` array, discriminated
+ * on `type` so only the keys the server accepts for that step type compile
+ * (e.g. a `count` step carrying `projection`, or an `aggregate` step carrying a
+ * query-shaped `sort: { name: 1 }`, is a compile error — both are 400s at
+ * runtime). The per-type key sets mirror `PIPELINE_*_STEP_KEYS` in the server
+ * descriptor.
+ */
+export type PipelineStep = PipelineQueryStep | PipelineCountStep | PipelineAggregateStep;
+/** A `pipeline` operation definition. Keys: steps, return. */
+export interface PipelineDefinition {
+    steps: PipelineStep[];
+    /** `"all"` or the name of a step whose result to return. */
+    return?: string;
+}
+/** The `source` (query) block of an `applyToQuery` definition. Keys: filter, sort, limit. */
+export interface ApplyToQuerySource {
+    filter: OperationFilter;
+    sort?: Record<string, 1 | -1>;
+    limit?: number;
+}
+/** The `action` (mutation) block of an `applyToQuery` definition. Keys: op, data, fields, stringSets. */
+export interface ApplyToQueryAction {
+    op: "delete" | "patch" | "increment" | "addToSet" | "removeFromSet";
+    data?: ObjectOrParamsRef;
+    fields?: ObjectOrParamsRef;
+    stringSets?: ObjectOrParamsRef;
+}
+/** An `applyToQuery` operation definition. Keys: source, action. */
+export interface ApplyToQueryDefinition {
+    source: ApplyToQuerySource;
+    action: ApplyToQueryAction;
+}
+/**
+ * The plain union of every operation-definition shape. Used by `updateOperation`
+ * (a partial update makes no per-type narrowing claim) and as the building block
+ * of the discriminated params/info unions below.
+ */
+export type OperationDefinition = QueryDefinition | MutationDefinition | CountDefinition | AggregateDefinition | PipelineDefinition | ApplyToQueryDefinition;
+/** Maps each op `type` to its definition shape (for the discriminated unions). */
+export interface OperationDefinitionByType {
+    query: QueryDefinition;
+    mutation: MutationDefinition;
+    count: CountDefinition;
+    aggregate: AggregateDefinition;
+    pipeline: PipelineDefinition;
+    applyToQuery: ApplyToQueryDefinition;
+}
+/** One member of the {@link CreateOperationParams} discriminated union. */
+export interface CreateOperationParamsOf<T extends OperationType> {
+    /** Unique name used to reference this operation. */
+    name: string;
+    /** The operation kind — discriminates the `definition` shape. */
+    type: T;
+    /** The model (table) this operation acts on. */
+    modelName: string;
+    /** Who can execute this operation (e.g. "public", "owner", "authenticated"). */
+    access: string;
+    /** The operation logic, typed to the `type` above. */
+    definition: OperationDefinitionByType[T];
+    /** Schema describing the runtime parameters this operation accepts. */
+    params?: Record<string, any>;
+}
+/**
+ * Parameters for `createOperation`, discriminated on `type` so `definition` is
+ * bound to the matching shape (a `type: "query"` requires a {@link QueryDefinition},
+ * and an unknown `type` or a stray definition key is a compile error).
+ */
+export type CreateOperationParams = CreateOperationParamsOf<"query"> | CreateOperationParamsOf<"mutation"> | CreateOperationParamsOf<"count"> | CreateOperationParamsOf<"aggregate"> | CreateOperationParamsOf<"pipeline"> | CreateOperationParamsOf<"applyToQuery">;
+/**
+ * Parameters for `updateOperation`. `definition` is the plain
+ * {@link OperationDefinition} union — a partial update can change `type` and
+ * `definition` independently, so no per-type correlation is claimed.
+ */
+export interface UpdateOperationParams {
+    /** Change the model this operation acts on. */
+    modelName?: string;
+    /** Change who can execute this operation. */
+    access?: string;
+    /** Replace the operation's query/mutation logic. */
+    definition?: OperationDefinition;
+    /** Replace the runtime parameter schema, or null to remove it. */
+    params?: Record<string, any> | null;
+}
+/** One member of the {@link DatabaseOperationInfo} discriminated union. */
+export interface DatabaseOperationInfoOf<T extends OperationType> {
+    databaseId: string;
+    name: string;
+    /** The operation kind — discriminates the `definition` shape. */
+    type: T;
+    modelName: string;
+    access: string;
+    /** The stored operation logic, typed to the `type` above. */
+    definition: OperationDefinitionByType[T];
+    params: Record<string, any> | null;
+    createdBy: string;
+    createdAt: string;
+    modifiedAt: string;
+}
+/**
+ * A stored operation, as returned by the `databases/:id/operations` endpoints.
+ * Discriminated on `type` so `definition` narrows to the matching shape.
+ */
+export type DatabaseOperationInfo = DatabaseOperationInfoOf<"query"> | DatabaseOperationInfoOf<"mutation"> | DatabaseOperationInfoOf<"count"> | DatabaseOperationInfoOf<"aggregate"> | DatabaseOperationInfoOf<"pipeline"> | DatabaseOperationInfoOf<"applyToQuery">;
+/**
+ * The allowed top-level keys of each definition shape, as a runtime constant.
+ * The codegen key-parity test compares this against the vendored server
+ * descriptor's per-type allow-lists, and the type-level self-checks below assert
+ * each array equals `keyof <Definition>` — so the runtime constant, the authored
+ * types, and the server descriptor stay in lockstep.
+ */
+export declare const OPERATION_DEFINITION_KEY_SETS: {
+    readonly query: readonly ["filter", "sort", "limit", "projection", "include", "cache"];
+    readonly mutation: readonly ["operations"];
+    readonly count: readonly ["filter"];
+    readonly aggregate: readonly ["groupBy", "operations", "filter", "limit", "sort"];
+    readonly pipeline: readonly ["steps", "return"];
+    readonly applyToQuery: readonly ["source", "action"];
+};
+//# sourceMappingURL=operationDefinition.d.ts.map

package/dist/api/operationDefinition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationDefinition.d.ts","sourceRoot":"","sources":["../../api/operationDefinition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,UAAU,GACV,OAAO,GACP,WAAW,GACX,UAAU,GACV,cAAc,CAAC;AAEnB;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;AAE3D,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;AAI7D,6FAA6F;AAC7F,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,MAAM,EAAE,eAAe,CAAC;IACxB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9B,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC7B;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;IAC7E,qFAAqF;IACrF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,mFAAmF;IACnF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,wDAAwD;IACxD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC9C,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;IAC1C,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;KAAE,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,EAAE,eAAe,CAAC;IACxB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;IAC1C,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;KAAE,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yGAAyG;AACzG,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;IACpE,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,CAAC;AAE3B,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,EAAE,sBAAsB,CAAC;CACtC;AAID,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,aAAa;IAC9D,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,CAAC,CAAC;IACR,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,UAAU,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACzC,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B,uBAAuB,CAAC,OAAO,CAAC,GAChC,uBAAuB,CAAC,UAAU,CAAC,GACnC,uBAAuB,CAAC,OAAO,CAAC,GAChC,uBAAuB,CAAC,WAAW,CAAC,GACpC,uBAAuB,CAAC,UAAU,CAAC,GACnC,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,aAAa;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,CAAC,CAAC;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,UAAU,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC7B,uBAAuB,CAAC,OAAO,CAAC,GAChC,uBAAuB,CAAC,UAAU,CAAC,GACnC,uBAAuB,CAAC,OAAO,CAAC,GAChC,uBAAuB,CAAC,WAAW,CAAC,GACpC,uBAAuB,CAAC,UAAU,CAAC,GACnC,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAE5C;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B;;;;;;;CAOmB,CAAC"}

package/dist/api/operationDefinition.js

@@ -0,0 +1,47 @@
+/**
+ * Typed database operation definitions (issue #1544).
+ *
+ * These types replace the previous `definition: Record<string, any>` on
+ * `createOperation` / `updateOperation` / `DatabaseOperationInfo`. They are
+ * hand-authored to mirror the server validator
+ * (`validateDefinition` in `database-type-operations-controller.ts`), whose
+ * declarative allow-lists live in the dependency-free descriptor
+ * `src/app-api/controllers/operation-definition-descriptor.ts`. A key-parity
+ * test (`cli/tests/unit/operation-def-client-types.test.ts`) asserts that each
+ * member below carries exactly the keys the descriptor allows, and a byte-copy
+ * drift guard keeps the vendored descriptor in step with the server — so these
+ * types can never silently diverge from what the server enforces.
+ *
+ * The discriminated union lives at the PARAMS level, not on `definition` alone:
+ * the op `type` is a sibling of `definition`, so `CreateOperationParams` and
+ * `DatabaseOperationInfo` are unions keyed on `type` that bind the matching
+ * definition shape. `updateOperation` takes the plain `OperationDefinition`
+ * union (a partial update can change `type` and definition independently, so it
+ * makes no per-type narrowing claim).
+ *
+ * The leaf value shapes (filter objects, CEL expression strings, `$params`
+ * references) stay permissive on purpose — the server is the authoritative
+ * runtime boundary for those; these types describe the STRUCTURE (which op
+ * types exist and which keys each definition allows) that the audit found
+ * untyped, without over-promising the contents of a filter or a CEL string.
+ *
+ * This module is deliberately dependency-free (only `import type` for the
+ * runtime-key self-check helper is inlined below) so it can be imported by the
+ * codegen key-parity test without dragging in the full client graph.
+ */
+/**
+ * The allowed top-level keys of each definition shape, as a runtime constant.
+ * The codegen key-parity test compares this against the vendored server
+ * descriptor's per-type allow-lists, and the type-level self-checks below assert
+ * each array equals `keyof <Definition>` — so the runtime constant, the authored
+ * types, and the server descriptor stay in lockstep.
+ */
+export const OPERATION_DEFINITION_KEY_SETS = {
+    query: ["filter", "sort", "limit", "projection", "include", "cache"],
+    mutation: ["operations"],
+    count: ["filter"],
+    aggregate: ["groupBy", "operations", "filter", "limit", "sort"],
+    pipeline: ["steps", "return"],
+    applyToQuery: ["source", "action"],
+};
+//# sourceMappingURL=operationDefinition.js.map

package/dist/api/operationDefinition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationDefinition.js","sourceRoot":"","sources":["../../api/operationDefinition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAyRH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC;IACpE,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,SAAS,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;IAC/D,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC7B,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;CACyB,CAAC"}

package/dist/api/resourceMetadataApi.d.ts

@@ -0,0 +1,182 @@
+import type { JsBaoClient } from "../JsBaoClient";
+/**
+ * Result of a single-category metadata read (`resourceMetadata.get`). A
+ * discriminated union on `exists`: when a row was written the read carries the
+ * typed `data` and its `schemaVersion`; when no row exists yet the read still
+ * succeeds but `data` is an empty object and `schemaVersion` is `null`. Narrow
+ * on `exists` before reading `data` — the empty branch does not carry `T`, so a
+ * typed caller cannot access `T`'s fields without checking first.
+ */
+export type ResourceMetadataReadResult<T extends object = Record<string, unknown>> = {
+    resourceType: string;
+    resourceId: string;
+    category: string;
+    /** The stored metadata object. */
+    data: T;
+    /** Schema version the stored data was validated against. */
+    schemaVersion: number;
+    /** A stored row exists for this resource and category. */
+    exists: true;
+} | {
+    resourceType: string;
+    resourceId: string;
+    category: string;
+    /**
+     * No row has been written yet, so this is an empty object. Typed as an
+     * object with no keys (not `Record<string, never>`, which declares every
+     * key as `never` and lets `data.field` collapse to the true branch's type
+     * — defeating the narrowing). A caller must check `exists` before reading
+     * `T`'s fields.
+     */
+    data: Record<never, never>;
+    /** No stored row, so there is no schema version. */
+    schemaVersion: null;
+    /** No stored row exists for this resource and category. */
+    exists: false;
+};
+/** Result of a metadata write (`resourceMetadata.set` — a full replace). */
+export interface ResourceMetadataWriteResult<T extends object = Record<string, unknown>> {
+    resourceType: string;
+    resourceId: string;
+    category: string;
+    /** The stored metadata object as validated and persisted. */
+    data: T;
+    /** Schema version the write was validated against. */
+    schemaVersion: number;
+    /** Stored size of the serialized data, in bytes. */
+    size: number;
+}
+/**
+ * One item of a batch read request. `categories` is required and must be
+ * non-empty — there is no expand-to-all; an item that omits it comes back as a
+ * per-item error with `status: 400`.
+ */
+export interface ResourceMetadataBatchRequestItem {
+    resourceType: string;
+    resourceId: string;
+    /** Explicit categories to read for this resource. */
+    categories: string[];
+}
+/** Parameters for `resourceMetadata.getBatch`. */
+export interface ResourceMetadataBatchParams {
+    /**
+     * Up to 50 resource entries, and up to 200 expanded resource/category pairs
+     * per call. Exceeding either limit fails the whole call with `400
+     * BATCH_TOO_LARGE`.
+     */
+    requests: ResourceMetadataBatchRequestItem[];
+}
+/**
+ * Per-category result inside a batch read — a discriminated union on `ok`. A
+ * success carries the same fields as the single read (`data`, `schemaVersion`,
+ * `exists`); a failure carries `status`/`code`/`message` and never `data`.
+ */
+export type ResourceMetadataBatchCategoryResult = {
+    ok: true;
+    data: Record<string, unknown>;
+    schemaVersion: number | null;
+    exists: boolean;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+};
+/**
+ * Per-resource result inside a batch read. `ok: true` carries a per-category
+ * map; `ok: false` is an item-level fault (malformed segment, or missing
+ * `categories`) that applies to the whole item.
+ */
+export type ResourceMetadataBatchResourceResult = {
+    resourceType: string;
+    resourceId: string;
+    ok: true;
+    categories: Record<string, ResourceMetadataBatchCategoryResult>;
+} | {
+    resourceType: string;
+    resourceId: string;
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+};
+/**
+ * Result of `resourceMetadata.getBatch`. The call itself succeeds (HTTP 200)
+ * even when individual items fail — check each entry's `ok` discriminant.
+ */
+export interface ResourceMetadataBatchResult {
+    /** One entry per request item, in request order. */
+    results: ResourceMetadataBatchResourceResult[];
+}
+/** One stored category in a resource metadata listing (`resourceMetadata.list`). */
+export interface ResourceMetadataListEntry {
+    category: string;
+    /** The stored metadata object for this category. */
+    data: Record<string, unknown>;
+    /** Schema version the stored data was validated against (`null` if unknown). */
+    schemaVersion: number | null;
+}
+/**
+ * Result of `resourceMetadata.list`. Only categories the caller may read are
+ * returned: each is gated by its `readRule` with the app-level owner/admin
+ * bypass, so an admin sees every category while a plain member sees only the
+ * ones their rule permits. A resource with no metadata returns an empty list.
+ */
+export interface ResourceMetadataListResult {
+    resourceType: string;
+    resourceId: string;
+    categories: ResourceMetadataListEntry[];
+}
+/** Result of `resourceMetadata.delete` (idempotent — an absent item is not an error). */
+export interface ResourceMetadataDeleteResult {
+    resourceType: string;
+    resourceId: string;
+    category: string;
+    /** `false` when no stored item existed (still a success, not a 404). */
+    deleted: boolean;
+}
+/**
+ * Sub-API for reading and writing typed resource metadata (values only —
+ * category definitions are managed by app admins, not through this client).
+ * Reads are gated per category by its `readRule` and writes by its
+ * `writeRule`, with an app-level owner/admin bypass; a resource-level
+ * permission never bypasses. A denial surfaces as an HTTP 403
+ * error on the single calls and as a per-item `ok: false` entry in the batch.
+ */
+export declare class ResourceMetadataAPI {
+    private client;
+    constructor(client: JsBaoClient);
+    /**
+     * Read one resource's metadata for one category. Succeeds with
+     * `exists: false` and empty `data` when nothing has been written yet;
+     * fails with 404 when the category is not defined for the resource type,
+     * or 403 when the category's `readRule` denies the caller.
+     */
+    get<T extends object = Record<string, unknown>>(resourceType: string, resourceId: string, category: string): Promise<ResourceMetadataReadResult<T>>;
+    /**
+     * Write (full replace) one resource's metadata for one category. The data
+     * is validated against the category's schema; the category's `writeRule`
+     * gates the write (403 on denial).
+     */
+    set<T extends object = Record<string, unknown>>(resourceType: string, resourceId: string, category: string, data: T): Promise<ResourceMetadataWriteResult<T>>;
+    /**
+     * Read metadata for many resources in one call (bounded: 50 resources /
+     * 200 resource-category pairs). Partial success: per-item 403/404 errors
+     * are returned as structured entries and do not fail the call.
+     */
+    getBatch(params: ResourceMetadataBatchParams): Promise<ResourceMetadataBatchResult>;
+    /**
+     * List every stored metadata category on one resource. Only categories the
+     * caller may read are returned (each gated by its `readRule`, with the
+     * app-level owner/admin bypass); a resource with no metadata comes back with
+     * an empty `categories` array.
+     */
+    list(resourceType: string, resourceId: string): Promise<ResourceMetadataListResult>;
+    /**
+     * Delete one resource's metadata for one category. The category's `writeRule`
+     * gates the delete (403 on denial). Idempotent: deleting an item that does
+     * not exist succeeds with `deleted: false` rather than failing with 404.
+     */
+    delete(resourceType: string, resourceId: string, category: string): Promise<ResourceMetadataDeleteResult>;
+}
+//# sourceMappingURL=resourceMetadataApi.d.ts.map

package/dist/api/resourceMetadataApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceMetadataApi.d.ts","sourceRoot":"","sources":["../../api/resourceMetadataApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,MAAM,0BAA0B,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAC7E;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,IAAI,EAAE,CAAC,CAAC;IACR,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,MAAM,EAAE,IAAI,CAAC;CACd,GACD;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,oDAAoD;IACpD,aAAa,EAAE,IAAI,CAAC;IACpB,2DAA2D;IAC3D,MAAM,EAAE,KAAK,CAAC;CACf,CAAC;AAEN,4EAA4E;AAC5E,MAAM,WAAW,2BAA2B,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,IAAI,EAAE,CAAC,CAAC;IACR,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,QAAQ,EAAE,gCAAgC,EAAE,CAAC;CAC9C;AAED;;;;GAIG;AACH,MAAM,MAAM,mCAAmC,GAC3C;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;GAIG;AACH,MAAM,MAAM,mCAAmC,GAC3C;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;CACjE,GACD;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,OAAO,EAAE,mCAAmC,EAAE,CAAC;CAChD;AAED,oFAAoF;AACpF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,gFAAgF;IAChF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,yBAAyB,EAAE,CAAC;CACzC;AAED,yFAAyF;AACzF,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAClB,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEvC;;;;;OAKG;IACG,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IASzC;;;;OAIG;IACG,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;IAU1C;;;;OAIG;IACG,QAAQ,CACZ,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,2BAA2B,CAAC;IAQvC;;;;;OAKG;IACG,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC;IAStC;;;;OAIG;IACG,MAAM,CACV,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,4BAA4B,CAAC;CAQzC"}

package/dist/api/resourceMetadataApi.js

@@ -0,0 +1,56 @@
+/**
+ * Sub-API for reading and writing typed resource metadata (values only —
+ * category definitions are managed by app admins, not through this client).
+ * Reads are gated per category by its `readRule` and writes by its
+ * `writeRule`, with an app-level owner/admin bypass; a resource-level
+ * permission never bypasses. A denial surfaces as an HTTP 403
+ * error on the single calls and as a per-item `ok: false` entry in the batch.
+ */
+export class ResourceMetadataAPI {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * Read one resource's metadata for one category. Succeeds with
+     * `exists: false` and empty `data` when nothing has been written yet;
+     * fails with 404 when the category is not defined for the resource type,
+     * or 403 when the category's `readRule` denies the caller.
+     */
+    async get(resourceType, resourceId, category) {
+        return this.client.makeRequest("GET", `/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`);
+    }
+    /**
+     * Write (full replace) one resource's metadata for one category. The data
+     * is validated against the category's schema; the category's `writeRule`
+     * gates the write (403 on denial).
+     */
+    async set(resourceType, resourceId, category, data) {
+        return this.client.makeRequest("PUT", `/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`, { data });
+    }
+    /**
+     * Read metadata for many resources in one call (bounded: 50 resources /
+     * 200 resource-category pairs). Partial success: per-item 403/404 errors
+     * are returned as structured entries and do not fail the call.
+     */
+    async getBatch(params) {
+        return this.client.makeRequest("POST", "/resources/metadata/batch", params);
+    }
+    /**
+     * List every stored metadata category on one resource. Only categories the
+     * caller may read are returned (each gated by its `readRule`, with the
+     * app-level owner/admin bypass); a resource with no metadata comes back with
+     * an empty `categories` array.
+     */
+    async list(resourceType, resourceId) {
+        return this.client.makeRequest("GET", `/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata`);
+    }
+    /**
+     * Delete one resource's metadata for one category. The category's `writeRule`
+     * gates the delete (403 on denial). Idempotent: deleting an item that does
+     * not exist succeeds with `deleted: false` rather than failing with 404.
+     */
+    async delete(resourceType, resourceId, category) {
+        return this.client.makeRequest("DELETE", `/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`);
+    }
+}
+//# sourceMappingURL=resourceMetadataApi.js.map

package/dist/api/resourceMetadataApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceMetadataApi.js","sourceRoot":"","sources":["../../api/resourceMetadataApi.ts"],"names":[],"mappings":"AAqJA;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IAC9B,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE3C;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,YAAoB,EACpB,UAAkB,EAClB,QAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,KAAK,EACL,cAAc,kBAAkB,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAClE,UAAU,CACX,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,YAAoB,EACpB,UAAkB,EAClB,QAAgB,EAChB,IAAO;QAEP,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,KAAK,EACL,cAAc,kBAAkB,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAClE,UAAU,CACX,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAC5C,EAAE,IAAI,EAAE,CACT,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAmC;QAEnC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,MAAM,EACN,2BAA2B,EAC3B,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,UAAkB;QAElB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,KAAK,EACL,cAAc,kBAAkB,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAClE,UAAU,CACX,WAAW,CACb,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,YAAoB,EACpB,UAAkB,EAClB,QAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAC5B,QAAQ,EACR,cAAc,kBAAkB,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAClE,UAAU,CACX,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC7C,CAAC;IACJ,CAAC;CACF"}