@calimero-network/mero-js 29.8.1 → 29.9.0

package/dist/index.mjs

@@ -2369,6 +2369,29 @@ var CalimeroClient = class _CalimeroClient {
   async signOutEverywhere() {
     await this.signingOut("auth/logout-all");
   }
+  /**
+   * The signed-in account's live sessions, latest active first (at most 256,
+   * `GET /auth/sessions`); `current` marks this one. The account holder's own
+   * session on the cluster's origin only: an API key or a package-bound
+   * session is refused (`403`). A node before core #4894 has no such route
+   * ({@link NotFound}).
+   */
+  async listSessions() {
+    const { sessions } = await this.get("auth/sessions");
+    return sessions;
+  }
+  /**
+   * End one of the signed-in account's sessions (`DELETE
+   * /auth/sessions/{session}`), say a lost phone's, from another; no passkey
+   * is asked. A session the account does not hold live (ended already, or
+   * another account's) is {@link NotFound}; gated as {@link listSessions}.
+   * To end this client's own session ({@link AccountSession.current}) use
+   * {@link signOut}, which also drops its tokens: ended here, they stay
+   * held and the next request or refresh is {@link LoginRequired}.
+   */
+  async revokeSession(session) {
+    await this.delete(`auth/sessions/${seg(session)}`);
+  }
   async signingOut(path) {
     try {
       await this.post(path);
@@ -2628,7 +2651,10 @@ var CalimeroClient = class _CalimeroClient {
   }
   /**
    * Hand the app to another account (an organization's app only to one of its
-   * members). The owner approves with `passkey`.
+   * members), approved with `passkey`. The app's owner may; for an
+   * organization's app, its owner only while a member of the organization
+   * (`member` or above), and the organization's admins (`admin`, `owner`)
+   * too, so an organization can hand on an app whose owner left (core #4893).
    */
   async transferApp(app, to, passkey) {
     await this.postConfirmed(`apps/${seg(app)}/transfer`, { to }, passkey);