@corvushold/guard-sdk 0.13.3 → 0.14.0

package/dist/index.cjs

@@ -279,7 +279,7 @@ var HttpClient = class {
 
 // package.json
 var package_default = {
-  version: "0.13.3"};
+  version: "0.14.0"};
 
 // src/client.ts
 function isTenantSelectionRequired(data) {
@@ -303,6 +303,7 @@ var GuardClient = class {
     const authHeaderInterceptor = async (input, init) => {
       const headers = new Headers(init.headers || {});
       if (mode === "bearer") {
+        headers.set("X-Auth-Mode", "bearer");
         const token = await Promise.resolve(this.storage.getAccessToken());
         if (token && !headers.has("authorization")) {
           headers.set("authorization", `Bearer ${token}`);
@@ -310,6 +311,9 @@ var GuardClient = class {
       } else if (mode === "cookie") {
         headers.set("X-Auth-Mode", "cookie");
       }
+      if (this.tenantId && !headers.has("X-Tenant-ID")) {
+        headers.set("X-Tenant-ID", String(this.tenantId));
+      }
       return [input, { ...init, headers }];
     };
     const defaultHeaders = { ...opts.defaultHeaders ?? {} };
@@ -554,6 +558,55 @@ var GuardClient = class {
   async unverifyUserEmail(id) {
     return this.request(`/api/v1/auth/admin/users/${encodeURIComponent(id)}/unverify-email`, { method: "POST" });
   }
+  // ==============================
+  // Invitations (Admin-only endpoints)
+  // ==============================
+  // Admin: List invitations for a tenant
+  async listInvitations(params = {}) {
+    const tenant = params.tenant_id ?? this.tenantId;
+    const qs = this.buildQuery({ tenant_id: tenant, status: params.status });
+    return this.request(`/api/v1/auth/admin/invitations${qs}`, { method: "GET" });
+  }
+  // Admin: Create invitation
+  async createInvitation(body) {
+    const tenant = body.tenant_id ?? this.tenantId;
+    const payload = { ...body, tenant_id: tenant };
+    return this.request("/api/v1/auth/admin/invitations", {
+      method: "POST",
+      body: JSON.stringify(payload)
+    });
+  }
+  // Admin: Revoke invitation
+  async revokeInvitation(id) {
+    return this.request(`/api/v1/auth/admin/invitations/${encodeURIComponent(id)}/revoke`, { method: "POST" });
+  }
+  // Admin: Delete invitation
+  async deleteInvitation(id) {
+    return this.request(`/api/v1/auth/admin/invitations/${encodeURIComponent(id)}`, { method: "DELETE" });
+  }
+  // Public: Get invitation by token (for accept flow)
+  async getInvitation(params) {
+    const qs = this.buildQuery({ token: params.token });
+    return this.request(`/api/v1/auth/invitations${qs}`, { method: "GET" });
+  }
+  // Public: Accept invitation
+  async acceptInvitation(body) {
+    const res = await this.request("/api/v1/auth/invitations/accept", {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+    if (res.meta.status === 200 || res.meta.status === 201) this.persistTokensFrom(res.data);
+    return res;
+  }
+  // Admin: Create user directly
+  async adminCreateUser(body) {
+    const tenant = body.tenant_id ?? this.tenantId;
+    const payload = { ...body, tenant_id: tenant };
+    return this.request("/api/v1/auth/admin/users", {
+      method: "POST",
+      body: JSON.stringify(payload)
+    });
+  }
   // Sessions: List sessions. When includeAll=false, filter to active (non-revoked, not expired) client-side to match example app UX.
   async listSessions(options = {}) {
     const res = await this.request("/api/v1/auth/sessions", { method: "GET", cache: "no-store" });
@@ -971,6 +1024,30 @@ var GuardClient = class {
     return this.request(`/api/v1/auth/admin/fga/acl/tuples`, { method: "DELETE", body: JSON.stringify(payload) });
   }
   // ==============================
+  // OAuth Client Management (Admin)
+  // ==============================
+  async listOAuthClients() {
+    return this.request("/api/v1/auth/admin/oauth-clients", { method: "GET" });
+  }
+  async createOAuthClient(body) {
+    return this.request("/api/v1/auth/admin/oauth-clients", {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  }
+  async getOAuthClient(id) {
+    return this.request(`/api/v1/auth/admin/oauth-clients/${encodeURIComponent(id)}`, { method: "GET" });
+  }
+  async updateOAuthClient(id, body) {
+    return this.request(`/api/v1/auth/admin/oauth-clients/${encodeURIComponent(id)}`, {
+      method: "PATCH",
+      body: JSON.stringify(body)
+    });
+  }
+  async deleteOAuthClient(id) {
+    return this.request(`/api/v1/auth/admin/oauth-clients/${encodeURIComponent(id)}`, { method: "DELETE" });
+  }
+  // ==============================
   // OAuth2 Discovery (RFC 8414)
   // ==============================
   /**