@calimero-network/mero-js 29.7.7 → 29.8.0

package/dist/index.mjs

@@ -3064,16 +3064,33 @@ var CalimeroClient = class _CalimeroClient {
   }
   /**
    * Set capability bits ({@link ORG_CAPABILITIES}): for a member (`account`),
-   * for a member of one team (`account` and `team`), or the organization's
-   * default (neither). Approved with the caller's `passkey`.
+   * for a member of one team (`account` and `team`), a team's default
+   * (`team` alone, {@link setTeamDefaultCapabilities}), or the
+   * organization's default (neither). Approved with the caller's `passkey`.
    */
   async setCapabilities(org, capabilities, passkey, at = {}) {
     await this.postConfirmed(`orgs/${seg(org)}/capabilities`, { capabilities, ...at }, passkey);
   }
+  /**
+   * Set the capability bits everyone in `team` holds there on top of their
+   * own, unless their row sets its own (`POST /orgs/{org}/capabilities` with
+   * `team` and no `account`): `ORG_CAPABILITIES.INVITE_MEMBERS` is "members
+   * may invite others to this app". The team's managers, or whoever holds
+   * `MANAGE_MEMBERS` on it; approved with the caller's `passkey`
+   * (`__set_default_capabilities { team, capabilities }`).
+   */
+  async setTeamDefaultCapabilities(org, team, capabilities, passkey) {
+    await this.postConfirmed(`orgs/${seg(org)}/capabilities`, { team, capabilities }, passkey);
+  }
   async createTeam(org, name, join, parent) {
     const { teamId } = await this.post(`orgs/${seg(org)}/teams`, { name, join, parent });
     return teamId;
   }
+  /**
+   * A team the caller sees: its rows (each with its effective capabilities),
+   * children, apps, the package it is the app team of and its default
+   * capabilities.
+   */
   getTeam(org, team) {
     return this.get(`orgs/${seg(org)}/teams/${seg(team)}`);
   }
@@ -3115,6 +3132,48 @@ var CalimeroClient = class _CalimeroClient {
   redeemInvite(token) {
     return this.post(`invites/${seg(token)}/redeem`);
   }
+  /**
+   * The organization's pending invites the caller may see (never a token):
+   * every one for an owner or admin, their own, and those naming only teams
+   * they manage. Expired ones are listed (`expired: true`) until revoked. A
+   * caller outside the organization: {@link NotFound}.
+   */
+  async listInvites(org) {
+    const { invites } = await this.get(`orgs/${seg(org)}/invites`);
+    return invites;
+  }
+  /**
+   * Withdraw an invite by its key ({@link listInvites}), approved with the
+   * caller's `passkey` (`__revoke_invite { inviteKey }`). One the caller may
+   * not see: {@link NotFound}.
+   */
+  async revokeInvite(org, inviteKey, passkey) {
+    await this.deleteConfirmed(`orgs/${seg(org)}/invites/${seg(inviteKey)}`, passkey);
+  }
+  // ---------------------------------------------------------------- app teams
+  /**
+   * The organization's mode and its app teams (one per package), for any
+   * member; a guest sees only those they are in. A caller outside the
+   * organization: {@link NotFound}.
+   */
+  listAppTeams(org) {
+    return this.get(`orgs/${seg(org)}/app-teams`);
+  }
+  /**
+   * Give apps their own access lists in one step (owner or admin): find or
+   * make each package's app team, add everyone who reaches its instances now,
+   * and move those instances onto it; with `shared`, close every app team.
+   * Idempotent per package. Approved with the caller's `passkey`
+   * (`__scope_apps { apps, shared }`); a refusal is `400 REJECTED` with the
+   * node's reason. For a fresh standalone install pass
+   * `{ apps: [{ package, name, instances: [] }] }`.
+   */
+  scopeApps(org, passkey, options = {}) {
+    const body = {};
+    if (options.apps !== void 0) body.apps = options.apps;
+    if (options.shared !== void 0) body.shared = options.shared;
+    return this.postConfirmed(`orgs/${seg(org)}/app-teams`, body, passkey);
+  }
   // ---------------------------------------------------------------- deployers
   /**
    * Let an account or organization install apps where the cluster's