@calimero-network/mero-js 29.8.0 → 29.9.0

package/dist/index.mjs

@@ -2369,6 +2369,29 @@ var CalimeroClient = class _CalimeroClient {
   async signOutEverywhere() {
     await this.signingOut("auth/logout-all");
   }
+  /**
+   * The signed-in account's live sessions, latest active first (at most 256,
+   * `GET /auth/sessions`); `current` marks this one. The account holder's own
+   * session on the cluster's origin only: an API key or a package-bound
+   * session is refused (`403`). A node before core #4894 has no such route
+   * ({@link NotFound}).
+   */
+  async listSessions() {
+    const { sessions } = await this.get("auth/sessions");
+    return sessions;
+  }
+  /**
+   * End one of the signed-in account's sessions (`DELETE
+   * /auth/sessions/{session}`), say a lost phone's, from another; no passkey
+   * is asked. A session the account does not hold live (ended already, or
+   * another account's) is {@link NotFound}; gated as {@link listSessions}.
+   * To end this client's own session ({@link AccountSession.current}) use
+   * {@link signOut}, which also drops its tokens: ended here, they stay
+   * held and the next request or refresh is {@link LoginRequired}.
+   */
+  async revokeSession(session) {
+    await this.delete(`auth/sessions/${seg(session)}`);
+  }
   async signingOut(path) {
     try {
       await this.post(path);
@@ -2628,7 +2651,10 @@ var CalimeroClient = class _CalimeroClient {
   }
   /**
    * Hand the app to another account (an organization's app only to one of its
-   * members). The owner approves with `passkey`.
+   * members), approved with `passkey`. The app's owner may; for an
+   * organization's app, its owner only while a member of the organization
+   * (`member` or above), and the organization's admins (`admin`, `owner`)
+   * too, so an organization can hand on an app whose owner left (core #4893).
    */
   async transferApp(app, to, passkey) {
     await this.postConfirmed(`apps/${seg(app)}/transfer`, { to }, passkey);
@@ -3101,9 +3127,17 @@ var CalimeroClient = class _CalimeroClient {
   async updateTeam(org, team, update) {
     await this.post(`orgs/${seg(org)}/teams/${seg(team)}`, update);
   }
-  /** Delete a team, the teams below it and their apps. */
-  async deleteTeam(org, team) {
-    await this.delete(`orgs/${seg(org)}/teams/${seg(team)}`);
+  /**
+   * Delete a team, the teams below it and their apps. When any of those
+   * teams holds apps the node asks for the caller's passkey (`412
+   * CONFIRM_REQUIRED`, its details listing the `apps` that go, which the
+   * approval names; an app added after it is refused), which `passkey` gives.
+   * Without one that `412` reaches the caller as {@link ConfirmRequired}. A
+   * team with no apps is deleted without a passkey.
+   */
+  async deleteTeam(org, team, passkey) {
+    const path = `orgs/${seg(org)}/teams/${seg(team)}`;
+    await (passkey ? this.deleteConfirmed(path, passkey) : this.delete(path));
   }
   /**
    * Add a member to a team, or change their row: role, lead, capability bits.