mirror of
https://github.com/alkimake/paperclip.git
synced 2026-06-14 10:00:38 +09:00
e2c5b6698c
Add secure claim secret flow for agent join requests with timing-safe comparison, expiry, and one-time use. Expose machine-readable onboarding manifests and skill index API endpoints. Add company brand color with hex validation, pattern icon generation, and settings page integration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
91 lines
2.9 KiB
TypeScript
91 lines
2.9 KiB
TypeScript
import type { AgentAdapterType, JoinRequest } from "@paperclip/shared";
|
|
import { api } from "./client";
|
|
|
|
type InviteSummary = {
|
|
id: string;
|
|
companyId: string | null;
|
|
inviteType: "company_join" | "bootstrap_ceo";
|
|
allowedJoinTypes: "human" | "agent" | "both";
|
|
expiresAt: string;
|
|
onboardingPath?: string;
|
|
onboardingUrl?: string;
|
|
skillIndexPath?: string;
|
|
skillIndexUrl?: string;
|
|
};
|
|
|
|
type AcceptInviteInput =
|
|
| { requestType: "human" }
|
|
| {
|
|
requestType: "agent";
|
|
agentName: string;
|
|
adapterType?: AgentAdapterType;
|
|
capabilities?: string | null;
|
|
agentDefaultsPayload?: Record<string, unknown> | null;
|
|
};
|
|
|
|
type AgentJoinRequestAccepted = JoinRequest & {
|
|
claimSecret: string;
|
|
claimApiKeyPath: string;
|
|
onboarding?: Record<string, unknown>;
|
|
};
|
|
|
|
type InviteOnboardingManifest = {
|
|
invite: InviteSummary;
|
|
onboarding: Record<string, unknown>;
|
|
};
|
|
|
|
type BoardClaimStatus = {
|
|
status: "available" | "claimed" | "expired";
|
|
requiresSignIn: boolean;
|
|
expiresAt: string | null;
|
|
claimedByUserId: string | null;
|
|
};
|
|
|
|
export const accessApi = {
|
|
createCompanyInvite: (
|
|
companyId: string,
|
|
input: {
|
|
allowedJoinTypes?: "human" | "agent" | "both";
|
|
expiresInHours?: number;
|
|
defaultsPayload?: Record<string, unknown> | null;
|
|
} = {},
|
|
) =>
|
|
api.post<{
|
|
id: string;
|
|
token: string;
|
|
inviteUrl: string;
|
|
expiresAt: string;
|
|
allowedJoinTypes: "human" | "agent" | "both";
|
|
}>(`/companies/${companyId}/invites`, input),
|
|
|
|
getInvite: (token: string) => api.get<InviteSummary>(`/invites/${token}`),
|
|
getInviteOnboarding: (token: string) =>
|
|
api.get<InviteOnboardingManifest>(`/invites/${token}/onboarding`),
|
|
|
|
acceptInvite: (token: string, input: AcceptInviteInput) =>
|
|
api.post<AgentJoinRequestAccepted | JoinRequest | { bootstrapAccepted: true; userId: string }>(
|
|
`/invites/${token}/accept`,
|
|
input,
|
|
),
|
|
|
|
listJoinRequests: (companyId: string, status: "pending_approval" | "approved" | "rejected" = "pending_approval") =>
|
|
api.get<JoinRequest[]>(`/companies/${companyId}/join-requests?status=${status}`),
|
|
|
|
approveJoinRequest: (companyId: string, requestId: string) =>
|
|
api.post<JoinRequest>(`/companies/${companyId}/join-requests/${requestId}/approve`, {}),
|
|
|
|
rejectJoinRequest: (companyId: string, requestId: string) =>
|
|
api.post<JoinRequest>(`/companies/${companyId}/join-requests/${requestId}/reject`, {}),
|
|
|
|
claimJoinRequestApiKey: (requestId: string, claimSecret: string) =>
|
|
api.post<{ keyId: string; token: string; agentId: string; createdAt: string }>(
|
|
`/join-requests/${requestId}/claim-api-key`,
|
|
{ claimSecret },
|
|
),
|
|
|
|
getBoardClaimStatus: (token: string, code: string) =>
|
|
api.get<BoardClaimStatus>(`/board-claim/${token}?code=${encodeURIComponent(code)}`),
|
|
|
|
claimBoard: (token: string, code: string) =>
|
|
api.post<{ claimed: true; userId: string }>(`/board-claim/${token}/claim`, { code }),
|
|
};
|