lumiverse-spindle-types 0.4.72 → 0.4.73

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lumiverse-spindle-types",
-  "version": "0.4.72",
+  "version": "0.4.73",
   "types": "./src/index.ts",
   "keywords": [
     "lumiverse",

package/src/api.ts

@@ -1822,6 +1822,14 @@ export interface SharedRpcRequestContextDTO {
   endpoint: string;
   /** Identifier of the extension requesting the value. */
   requesterExtensionId: string;
+  /** Gated permissions available while this delegated handler request is running. */
+  effectivePermissions: readonly string[];
+}
+
+/** Optional read policy for a shared RPC endpoint. Omit to require legacy owner-permission inheritance. */
+export interface SharedRpcEndpointPolicyDTO {
+  /** Gated permissions both owner and requester must have; `[]` means no gated permissions are delegated. */
+  requires?: readonly string[];
 }
 
 // ─── Worker → Host messages ──────────────────────────────────────────────
@@ -1906,15 +1914,16 @@ export type WorkerToHost =
       reservationId: string;
     }
   | { type: "permissions_get_granted"; requestId: string }
-  | { type: "rpc_pool_sync"; endpoint: string; value: unknown }
-  | { type: "rpc_pool_register_handler"; endpoint: string }
+  | { type: "rpc_pool_sync"; endpoint: string; value: unknown; policy?: SharedRpcEndpointPolicyDTO; rpcPermissionScopeId?: string }
+  | { type: "rpc_pool_register_handler"; endpoint: string; policy?: SharedRpcEndpointPolicyDTO; rpcPermissionScopeId?: string }
   | { type: "rpc_pool_unregister"; endpoint: string }
-  | { type: "rpc_pool_read"; requestId: string; endpoint: string }
+  | { type: "rpc_pool_read"; requestId: string; endpoint: string; rpcPermissionScopeId?: string }
   | {
       type: "rpc_pool_handler_result";
       requestId: string;
       result?: unknown;
       error?: string;
+      rpcPermissionScopeId?: string;
     }
   | { type: "connections_list"; requestId: string; userId?: string }
   | { type: "connections_get"; requestId: string; connectionId: string; userId?: string }
@@ -2284,6 +2293,8 @@ export type HostToWorker =
       requestId: string;
       endpoint: string;
       requesterExtensionId: string;
+      rpcPermissionScopeId: string;
+      effectivePermissions: string[];
     }
   | {
       type: "intercept_request";

package/src/events.ts

@@ -38,6 +38,10 @@ export enum CoreEventType {
   WORLD_INFO_ACTIVATED = "WORLD_INFO_ACTIVATED",
   REGEX_SCRIPT_CHANGED = "REGEX_SCRIPT_CHANGED",
   REGEX_SCRIPT_DELETED = "REGEX_SCRIPT_DELETED",
+  WORLD_BOOK_CHANGED = "WORLD_BOOK_CHANGED",
+  WORLD_BOOK_DELETED = "WORLD_BOOK_DELETED",
+  WORLD_BOOK_ENTRY_CHANGED = "WORLD_BOOK_ENTRY_CHANGED",
+  WORLD_BOOK_ENTRY_DELETED = "WORLD_BOOK_ENTRY_DELETED",
   MESSAGE_TAG_INTERCEPTED = "MESSAGE_TAG_INTERCEPTED",
   TOOL_INVOCATION = "TOOL_INVOCATION",
 }

package/src/index.ts

@@ -130,6 +130,7 @@ export type {
   TokenCountOptionsDTO,
   TokenCountResultDTO,
   SharedRpcRequestContextDTO,
+  SharedRpcEndpointPolicyDTO,
   MacroInterceptorPhase,
   MacroInterceptorEnvDTO,
   MacroInterceptorCtxDTO,

package/src/spindle-api.ts

@@ -95,6 +95,7 @@ import type {
   MessageContentProcessorCtxDTO,
   MessageContentProcessorResultDTO,
   SharedRpcRequestContextDTO,
+  SharedRpcEndpointPolicyDTO,
 } from "./api";
 
 export interface FrontendProcessHandle {
@@ -860,7 +861,7 @@ export interface SpindleAPI {
      *
      * Returns the fully-qualified endpoint name.
      */
-    sync(endpoint: string, value: unknown): string;
+    sync(endpoint: string, value: unknown, policy?: SharedRpcEndpointPolicyDTO): string;
     /**
      * Register an on-demand endpoint handler. Replaces any previously synced
      * value or handler for the same endpoint.
@@ -869,7 +870,8 @@ export interface SpindleAPI {
      */
     handle(
       endpoint: string,
-      handler: (ctx: SharedRpcRequestContextDTO) => unknown | Promise<unknown>
+      handler: (ctx: SharedRpcRequestContextDTO) => unknown | Promise<unknown>,
+      policy?: SharedRpcEndpointPolicyDTO
     ): string;
     /** Read the latest value from another extension's fully-qualified endpoint. */
     read<T = unknown>(endpoint: string): Promise<T>;