@delopay/sdk 0.22.0 → 0.24.0

package/dist/index.cjs

@@ -2026,6 +2026,21 @@ var Users = class {
   async update(params) {
     return this.request("POST", "/user/update", { body: params });
   }
+  /**
+   * Permanently delete the caller's account. Requires a fresh password
+   * (and a current 6-digit TOTP code if the user has TOTP enrolled). The
+   * backend hard-deletes every `user_roles` row for the caller and soft-
+   * deletes the user record itself (`is_active = false`, password / TOTP
+   * wiped). On success all in-flight sessions are blacklisted, so the
+   * caller should clear local credentials and route to the login page.
+   *
+   * Refuses (`InvalidDeleteOperation`) when the caller is the sole
+   * owner-level admin of an org / merchant / profile — they must transfer
+   * ownership first.
+   */
+  async deleteAccount(params) {
+    return this.request("DELETE", "/user/account", { body: params });
+  }
   async changePassword(params) {
     return this.request("POST", "/user/change_password", { body: params });
   }
@@ -2086,6 +2101,19 @@ var Users = class {
   async acceptInvitation(params) {
     return this.request("POST", "/user/user/invite/accept", { body: params });
   }
+  /**
+   * Accept an invitation via the email-link flow.
+   *
+   * Caller must already hold a `SinglePurposeToken` with
+   * `purpose: accept_invitation_from_email` (obtained via `fromEmail` + any
+   * required TOTP step) and have set it on the client via `setJwtToken`.
+   * `body.token` must still be the original `EmailToken` from the
+   * invite-link URL — the handler decodes it a second time to find the
+   * invitee and the entity lineage.
+   */
+  async acceptInviteFromEmail(params) {
+    return this.request("POST", "/user/accept_invite_from_email", { body: params });
+  }
   /**
    * Start TOTP setup (or no-op if already set).
    *