chore: consolidate local integration changes

devfront/src/lib/devApi.test.ts

@@ -29,6 +29,7 @@ describe("devApi", () => {
       fetchTenants,
       fetchClient,
       fetchClientRelations,
+      fetchRPUserMetadata,
       fetchDevUsers,
       fetchConsents,
       fetchDevAuditLogs,
@@ -45,6 +46,7 @@ describe("devApi", () => {
     await fetchTenants(25, 50, "tenant-parent");
     await fetchClient("client-a");
     await fetchClientRelations("client-a");
+    await fetchRPUserMetadata("client-a", "user-a");
     await fetchDevUsers("admin", 5, "client-a");
     await fetchConsents("user-a", "client-a", "active");
     await fetchDevAuditLogs(10, "cursor-a", {
@@ -70,6 +72,9 @@ describe("devApi", () => {
     expect(apiClient.get).toHaveBeenCalledWith(
       "/dev/clients/client-a/relations",
     );
+    expect(apiClient.get).toHaveBeenCalledWith(
+      "/dev/clients/client-a/users/user-a/metadata",
+    );
     expect(apiClient.get).toHaveBeenCalledWith("/dev/users", {
       params: { search: "admin", limit: 5, clientId: "client-a" },
     });
@@ -119,6 +124,7 @@ describe("devApi", () => {
     const {
       addClientRelation,
       removeClientRelation,
+      updateRPUserMetadata,
       updateClientStatus,
       createClient,
       updateClient,
@@ -145,6 +151,7 @@ describe("devApi", () => {
       userId: "user-a",
     });
     await removeClientRelation("client-a", "admins", "User:user-a");
+    await updateRPUserMetadata("client-a", "user-a", { approvalLevel: "A" });
     await updateClientStatus("client-a", "inactive");
     await createClient({ id: "client-a", name: "Console App" });
     await updateClient("client-a", { name: "Console App Updated" });
@@ -181,6 +188,10 @@ describe("devApi", () => {
         params: { relation: "admins", subject: "User:user-a" },
       },
     );
+    expect(apiClient.put).toHaveBeenCalledWith(
+      "/dev/clients/client-a/users/user-a/metadata",
+      { metadata: { approvalLevel: "A" } },
+    );
     expect(apiClient.patch).toHaveBeenCalledWith(
       "/dev/clients/client-a/status",
       {

devfront/src/lib/devApi.ts

@@ -210,12 +210,19 @@ export type ConsentSummary = {
   status: "active" | "revoked";
   tenantId?: string;
   tenantName?: string;
+  rpMetadata?: Record<string, unknown>;
 };
 
 export type ConsentListResponse = {
   items: ConsentSummary[];
 };
 
+export type RPUserMetadataResponse = {
+  clientId: string;
+  userId: string;
+  metadata: Record<string, unknown>;
+};
+
 // --- Federation / IdP Config Types ---
 export type ProviderType = "oidc" | "saml";
 
@@ -297,6 +304,25 @@ export async function fetchClientRelations(clientId: string) {
   return data;
 }
 
+export async function fetchRPUserMetadata(clientId: string, userId: string) {
+  const { data } = await apiClient.get<RPUserMetadataResponse>(
+    `/dev/clients/${clientId}/users/${userId}/metadata`,
+  );
+  return data;
+}
+
+export async function updateRPUserMetadata(
+  clientId: string,
+  userId: string,
+  metadata: Record<string, unknown>,
+) {
+  const { data } = await apiClient.put<RPUserMetadataResponse>(
+    `/dev/clients/${clientId}/users/${userId}/metadata`,
+    { metadata },
+  );
+  return data;
+}
+
 export async function fetchDevUsers(
   search: string,
   limit = 10,