@canopy-io/node 0.11.0 → 0.12.0

package/dist/index.js

@@ -471,6 +471,14 @@ function paginate(fetchPage, initial = {}, options = {}) {
   return new Paginator(fetchPage, initial, options);
 }
 
+// src/schema.ts
+function withConcurrency(options = {}) {
+  if (options.ifMatch === void 0) {
+    return {};
+  }
+  return { headers: { "If-Match": options.ifMatch } };
+}
+
 // src/resources/assignments.ts
 var Assignments = class {
   constructor(client) {
@@ -496,11 +504,16 @@ var Assignments = class {
   create(input) {
     return this.client.request("POST", "/api/v1/assignments", { body: input });
   }
-  update(id, input) {
+  /**
+   * Change the role or the window of a grant. Pass the `version` the
+   * assignment was read with as `ifMatch`; a stale one answers 409
+   * `assignment.version_mismatch` rather than overwriting a newer change.
+   */
+  update(id, input, options = {}) {
     return this.client.request(
       "PATCH",
       `/api/v1/assignments/${encodeURIComponent(id)}`,
-      { body: input }
+      { body: input, ...withConcurrency(options) }
     );
   }
   delete(id) {
@@ -675,14 +688,6 @@ var Identities = class {
   }
 };
 
-// src/schema.ts
-function withConcurrency(options = {}) {
-  if (options.ifMatch === void 0) {
-    return {};
-  }
-  return { headers: { "If-Match": options.ifMatch } };
-}
-
 // src/resources/organizations.ts
 var Organizations = class {
   constructor(client) {
@@ -732,7 +737,7 @@ var Organizations = class {
   deleteAll() {
     return this.client.request("DELETE", "/api/v1/organizations");
   }
-  // ── Members: one role per member, held inside the organization only ──
+  // ── Members: admission to the organization, apart from the roles held in it ──
   listMembers(id, query = {}) {
     return paginate(
       (params) => this.client.request("GET", `/api/v1/organizations/${enc(id)}/members`, {
@@ -748,14 +753,12 @@ var Organizations = class {
       { body: input }
     );
   }
-  changeMemberRole(id, identityId, input) {
-    return this.client.request(
-      "PATCH",
-      `/api/v1/organizations/${enc(id)}/members/${enc(identityId)}`,
-      { body: input }
-    );
-  }
-  /** Revokes that organization's one role; the identity and its other memberships are untouched. */
+  /**
+   * Deactivates the membership and revokes every role the member holds at
+   * the organization's nodes; the identity and its other memberships are
+   * untouched. A role in the organization is changed through the
+   * organization's assignment routes, not here.
+   */
   removeMember(id, identityId) {
     return this.client.request(
       "DELETE",
@@ -1769,11 +1772,11 @@ function resolveIssuer(options) {
   );
 }
 function orgContext(claims) {
-  const { org_id, org_role } = claims;
-  if (typeof org_id !== "string" || org_id === "" || typeof org_role !== "string" || org_role === "") {
+  const { org_id, org_roles } = claims;
+  if (typeof org_id !== "string" || org_id === "" || !Array.isArray(org_roles) || org_roles.some((role) => typeof role !== "string" || role === "")) {
     return null;
   }
-  return { orgId: org_id, orgRole: org_role };
+  return { orgId: org_id, orgRoles: [...org_roles] };
 }
 function decodeBase64Url(value) {
   const padded = value.replace(/-/g, "+").replace(/_/g, "/");