@dropthis/cli 0.30.1 → 0.33.0

package/node_modules/@dropthis/node/dist/{workspaces-BXW942z-.d.cts → workspaces-CebiV4DS.d.cts}

@@ -30,6 +30,20 @@ type DropthisErrorResponse = {
     requestId?: string | null;
     suggestion?: string | null;
     retryable?: boolean | null;
+    /** The gated capability (on `feature_not_in_plan`), e.g. `password_protect`. */
+    feature?: string | null;
+    /** The caller's current plan (on `feature_not_in_plan` / `quota_exceeded`). */
+    currentPlan?: string | null;
+    /** The lowest plan that unlocks the feature (on `feature_not_in_plan`). */
+    requiredPlan?: string | null;
+    /** The pricing/upgrade URL to hand a human (on a plan gate). */
+    upgradeUrl?: string | null;
+    /** Numeric ceiling that was hit (on `quota_exceeded`). */
+    limit?: number | null;
+    /** Amount already used toward the ceiling (on `quota_exceeded`). */
+    used?: number | null;
+    /** Amount the request asked for (on `quota_exceeded`). */
+    requested?: number | null;
     body?: unknown;
 };
 type DropthisResult<T> = {
@@ -211,25 +225,48 @@ type ApiKeyCreatedResponse = ApiKeyResponse & {
     accountId?: string | null;
     isNewAccount?: boolean;
 };
-/** Active plan tier limits — use these to size a publish before uploading. */
-type AccountLimits = {
-    /** Plan tier the limits apply to. */
-    name: string;
+/** Numeric limits for the active plan — use these to size a publish before uploading. */
+type EntitlementLimits = {
     /** Maximum size of a single drop in bytes. */
     maxSizeBytes: number;
-    /** Drop lifetime in seconds before expiry; null means drops are permanent. */
-    defaultTtlSeconds: number | null;
     /** Total account storage cap in bytes; null means no account-level cap. */
     maxStorageBytes: number | null;
-    /** Maximum number of custom hostnames allowed on this plan. */
+    /** Drop lifetime in seconds before expiry; null means drops are permanent. */
+    defaultTtlSeconds: number | null;
+    /** Maximum number of custom hostnames the workspace may connect. */
     maxCustomHostnames: number;
+    /** Maximum members the workspace may hold (owner included). */
+    seatLimit: number;
+    /** Maximum concurrent in-flight upload sessions (a transient concurrency cap). */
+    maxActiveUploadSessions: number;
+};
+/**
+ * The full capability matrix for the active plan — the single read to pre-check a
+ * feature gate before attempting an operation.
+ */
+type Entitlements = {
+    /**
+     * Per-capability state for the active plan. Boolean caps are `true`/`false`;
+     * enum caps (`ogPreview`, `analytics`) carry a value — compare by value, never
+     * truthiness (`"none"` is truthy).
+     */
+    capabilities: Record<string, boolean | string>;
+    /**
+     * The lowest plan that unlocks each gated capability — drives the upgrade nudge.
+     * Enum sub-values are keyed `ogPreview.customImage` / `analytics.full`.
+     */
+    requiredPlan: Record<string, string>;
+    /** Numeric limits for the active plan. */
+    limits: EntitlementLimits;
 };
-/** Current resource usage for the account. */
+/** Current resource usage for the account's active workspace. */
 type AccountUsage = {
     /** Total bytes consumed across all active drops. */
     storageUsedBytes: number;
     /** Number of custom domain hostnames currently in use. */
     customDomainsUsed: number;
+    /** Members currently in the workspace (owner included). */
+    seatsUsed: number;
 };
 /** The workspace a principal acts within (ADR 0066). For an sk_ API key, the workspace the key is bound to. */
 type AccountWorkspace = {
@@ -257,6 +294,43 @@ type Workspace = {
     plan: string;
     /** Whether this workspace is currently the caller's active workspace. */
     isActive: boolean;
+    /**
+     * On CREATE only (null otherwise): whether the credential that created this workspace can act
+     * in it. `false` means an allowlist-restricted key created a workspace outside its allowlist —
+     * it will be denied on the next write; re-authenticate to obtain a credential that reaches it.
+     */
+    creatorCanReach?: boolean | null;
+};
+/** A role grantable via invite or a member role-change (owner is transferred, never granted). */
+type WorkspaceRole = "owner" | "admin" | "member";
+type InvitableRole = "admin" | "member";
+/** A member of a team workspace. */
+type Member = {
+    accountId: string;
+    /** The member's email, or null if their account was deleted. */
+    email: string | null;
+    role: WorkspaceRole;
+    /** Whether this row is the calling account. */
+    isYou: boolean;
+    joinedAt: string;
+};
+type MemberListResponse = {
+    members: Member[];
+};
+/** An invitation to join a team workspace. */
+type Invitation = {
+    id: string;
+    workspaceId: string;
+    email: string;
+    role: WorkspaceRole;
+    /** `pending`, `accepted`, or `revoked`. */
+    status: string;
+    expiresAt: string;
+    createdAt: string;
+    acceptedAt?: string | null;
+};
+type InvitationListResponse = {
+    invitations: Invitation[];
 };
 type AccountResponse = {
     id: string;
@@ -265,10 +339,11 @@ type AccountResponse = {
     plan: string;
     status: string;
     createdAt: string;
-    limits: AccountLimits;
+    /** The full capability matrix + numeric limits for the active plan. */
+    entitlements: Entitlements;
     usage: AccountUsage;
     workspace: AccountWorkspace;
-    /** URL to upgrade the account; null if already on the highest tier. */
+    /** URL to upgrade; present on every plan below Business, null on the top tier. */
     upgradeUrl: string | null;
 };
 type ListDropsParams = {
@@ -747,6 +822,14 @@ declare class ApiKeysResource {
         workspace?: string;
         /** Restrict a `delegated` key to these workspace slugs or ids. */
         allowedWorkspaces?: string[];
+        /**
+         * Request the credential's capability scopes (ADR 0068). Each entry is a bundle
+         * name (`publish`, `team`, `team-admin`) or a fine-grained scope (`members:admin`).
+         * The minted key gets the requested set intersected with your own scopes
+         * (downscope-only). Omit for the default `publish` bundle; pass `["team"]` to mint
+         * a credential that can create + manage teams (`login --scope team`).
+         */
+        scopes?: string[];
     }): Promise<DropthisResult<ApiKeyCreatedResponse>>;
     /** Revoke an API key. 204 No Content — data is null on success. */
     delete(keyId: string): Promise<DropthisResult<null>>;
@@ -920,8 +1003,21 @@ declare class WorkspacesResource {
     list(): Promise<DropthisResult<{
         workspaces: Workspace[];
     }>>;
+    /** Create a team workspace (the caller becomes its sole owner). Needs `workspaces:write`. */
+    create(input: {
+        name: string;
+        /** URL-safe slug; derived from the name when omitted. A clash on an explicit slug → 409. */
+        slug?: string;
+    }): Promise<DropthisResult<Workspace>>;
+    /** Rename a team workspace (owner/admin). Needs `workspaces:write`. */
+    rename(workspaceId: string, input: {
+        name?: string;
+        slug?: string;
+    }): Promise<DropthisResult<Workspace>>;
+    /** Delete a team workspace (owner only). Needs `workspaces:admin`. 204 — data is null. */
+    delete(workspaceId: string): Promise<DropthisResult<null>>;
     use(workspace: string): Promise<DropthisResult<Workspace>>;
     active(): Promise<DropthisResult<Workspace | null>>;
 }
 
-export { type UploadTarget as $, type AccountLimits as A, type ListPage as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PreparedPublishRequest as F, type GetContentOptions as G, type PreparedUploadFile as H, type InMemoryPublishInput as I, type PublishFileInput as J, type KeyType as K, type Limitations as L, type PublishInput as M, type NextHint as N, type PublishOptions as O, type PrepareOptions as P, type RequestOptions as Q, type RequestControls as R, type RevokeImpact as S, SHARED_POOL as T, type SessionResponse as U, type TierInfo as V, Transport as W, type UpdateContentOptions as X, type UploadManifestFile as Y, type UploadSessionFileResponse as Z, type UploadSessionResponse as _, AccountResource as a, type Workspace as a0, WorkspacesResource as a1, type AccountResponse as b, type AccountWorkspace as c, type ActionResolve as d, ApiKeysResource as e, type CreateUploadSessionResponse as f, CursorPage as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, type DropWorkspace as t, DropsResource as u, type DropthisClientOptions as v, type DropthisErrorResponse as w, type DropthisResult as x, type ListDeploymentsParams as y, type ListDeploymentsResponse as z };
+export { type SessionResponse as $, AccountResource as A, type InvitableRole as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type Invitation as F, type GetContentOptions as G, type InvitationListResponse as H, type InMemoryPublishInput as I, type ListDeploymentsParams as J, type KeyType as K, type Limitations as L, type ListDeploymentsResponse as M, type ListPage as N, type Member as O, type MemberListResponse as P, type NextHint as Q, type PrepareOptions as R, type PreparedPublishRequest as S, type PreparedUploadFile as T, type PublishFileInput as U, type PublishInput as V, type PublishOptions as W, type RequestControls as X, type RequestOptions as Y, type RevokeImpact as Z, SHARED_POOL as _, type AccountResponse as a, type TierInfo as a0, Transport as a1, type UpdateContentOptions as a2, type UploadManifestFile as a3, type UploadSessionFileResponse as a4, type UploadSessionResponse as a5, type UploadTarget as a6, type Workspace as a7, type WorkspaceRole as a8, WorkspacesResource as a9, type AccountUsage as b, type AccountWorkspace as c, type ActionResolve as d, ApiKeysResource as e, type CreateUploadSessionResponse as f, CursorPage as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, type DropWorkspace as t, DropsResource as u, type DropthisClientOptions as v, type DropthisErrorResponse as w, type DropthisResult as x, type EntitlementLimits as y, type Entitlements as z };

package/node_modules/@dropthis/node/dist/{workspaces-BXW942z-.d.ts → workspaces-CebiV4DS.d.ts}

@@ -30,6 +30,20 @@ type DropthisErrorResponse = {
     requestId?: string | null;
     suggestion?: string | null;
     retryable?: boolean | null;
+    /** The gated capability (on `feature_not_in_plan`), e.g. `password_protect`. */
+    feature?: string | null;
+    /** The caller's current plan (on `feature_not_in_plan` / `quota_exceeded`). */
+    currentPlan?: string | null;
+    /** The lowest plan that unlocks the feature (on `feature_not_in_plan`). */
+    requiredPlan?: string | null;
+    /** The pricing/upgrade URL to hand a human (on a plan gate). */
+    upgradeUrl?: string | null;
+    /** Numeric ceiling that was hit (on `quota_exceeded`). */
+    limit?: number | null;
+    /** Amount already used toward the ceiling (on `quota_exceeded`). */
+    used?: number | null;
+    /** Amount the request asked for (on `quota_exceeded`). */
+    requested?: number | null;
     body?: unknown;
 };
 type DropthisResult<T> = {
@@ -211,25 +225,48 @@ type ApiKeyCreatedResponse = ApiKeyResponse & {
     accountId?: string | null;
     isNewAccount?: boolean;
 };
-/** Active plan tier limits — use these to size a publish before uploading. */
-type AccountLimits = {
-    /** Plan tier the limits apply to. */
-    name: string;
+/** Numeric limits for the active plan — use these to size a publish before uploading. */
+type EntitlementLimits = {
     /** Maximum size of a single drop in bytes. */
     maxSizeBytes: number;
-    /** Drop lifetime in seconds before expiry; null means drops are permanent. */
-    defaultTtlSeconds: number | null;
     /** Total account storage cap in bytes; null means no account-level cap. */
     maxStorageBytes: number | null;
-    /** Maximum number of custom hostnames allowed on this plan. */
+    /** Drop lifetime in seconds before expiry; null means drops are permanent. */
+    defaultTtlSeconds: number | null;
+    /** Maximum number of custom hostnames the workspace may connect. */
     maxCustomHostnames: number;
+    /** Maximum members the workspace may hold (owner included). */
+    seatLimit: number;
+    /** Maximum concurrent in-flight upload sessions (a transient concurrency cap). */
+    maxActiveUploadSessions: number;
+};
+/**
+ * The full capability matrix for the active plan — the single read to pre-check a
+ * feature gate before attempting an operation.
+ */
+type Entitlements = {
+    /**
+     * Per-capability state for the active plan. Boolean caps are `true`/`false`;
+     * enum caps (`ogPreview`, `analytics`) carry a value — compare by value, never
+     * truthiness (`"none"` is truthy).
+     */
+    capabilities: Record<string, boolean | string>;
+    /**
+     * The lowest plan that unlocks each gated capability — drives the upgrade nudge.
+     * Enum sub-values are keyed `ogPreview.customImage` / `analytics.full`.
+     */
+    requiredPlan: Record<string, string>;
+    /** Numeric limits for the active plan. */
+    limits: EntitlementLimits;
 };
-/** Current resource usage for the account. */
+/** Current resource usage for the account's active workspace. */
 type AccountUsage = {
     /** Total bytes consumed across all active drops. */
     storageUsedBytes: number;
     /** Number of custom domain hostnames currently in use. */
     customDomainsUsed: number;
+    /** Members currently in the workspace (owner included). */
+    seatsUsed: number;
 };
 /** The workspace a principal acts within (ADR 0066). For an sk_ API key, the workspace the key is bound to. */
 type AccountWorkspace = {
@@ -257,6 +294,43 @@ type Workspace = {
     plan: string;
     /** Whether this workspace is currently the caller's active workspace. */
     isActive: boolean;
+    /**
+     * On CREATE only (null otherwise): whether the credential that created this workspace can act
+     * in it. `false` means an allowlist-restricted key created a workspace outside its allowlist —
+     * it will be denied on the next write; re-authenticate to obtain a credential that reaches it.
+     */
+    creatorCanReach?: boolean | null;
+};
+/** A role grantable via invite or a member role-change (owner is transferred, never granted). */
+type WorkspaceRole = "owner" | "admin" | "member";
+type InvitableRole = "admin" | "member";
+/** A member of a team workspace. */
+type Member = {
+    accountId: string;
+    /** The member's email, or null if their account was deleted. */
+    email: string | null;
+    role: WorkspaceRole;
+    /** Whether this row is the calling account. */
+    isYou: boolean;
+    joinedAt: string;
+};
+type MemberListResponse = {
+    members: Member[];
+};
+/** An invitation to join a team workspace. */
+type Invitation = {
+    id: string;
+    workspaceId: string;
+    email: string;
+    role: WorkspaceRole;
+    /** `pending`, `accepted`, or `revoked`. */
+    status: string;
+    expiresAt: string;
+    createdAt: string;
+    acceptedAt?: string | null;
+};
+type InvitationListResponse = {
+    invitations: Invitation[];
 };
 type AccountResponse = {
     id: string;
@@ -265,10 +339,11 @@ type AccountResponse = {
     plan: string;
     status: string;
     createdAt: string;
-    limits: AccountLimits;
+    /** The full capability matrix + numeric limits for the active plan. */
+    entitlements: Entitlements;
     usage: AccountUsage;
     workspace: AccountWorkspace;
-    /** URL to upgrade the account; null if already on the highest tier. */
+    /** URL to upgrade; present on every plan below Business, null on the top tier. */
     upgradeUrl: string | null;
 };
 type ListDropsParams = {
@@ -747,6 +822,14 @@ declare class ApiKeysResource {
         workspace?: string;
         /** Restrict a `delegated` key to these workspace slugs or ids. */
         allowedWorkspaces?: string[];
+        /**
+         * Request the credential's capability scopes (ADR 0068). Each entry is a bundle
+         * name (`publish`, `team`, `team-admin`) or a fine-grained scope (`members:admin`).
+         * The minted key gets the requested set intersected with your own scopes
+         * (downscope-only). Omit for the default `publish` bundle; pass `["team"]` to mint
+         * a credential that can create + manage teams (`login --scope team`).
+         */
+        scopes?: string[];
     }): Promise<DropthisResult<ApiKeyCreatedResponse>>;
     /** Revoke an API key. 204 No Content — data is null on success. */
     delete(keyId: string): Promise<DropthisResult<null>>;
@@ -920,8 +1003,21 @@ declare class WorkspacesResource {
     list(): Promise<DropthisResult<{
         workspaces: Workspace[];
     }>>;
+    /** Create a team workspace (the caller becomes its sole owner). Needs `workspaces:write`. */
+    create(input: {
+        name: string;
+        /** URL-safe slug; derived from the name when omitted. A clash on an explicit slug → 409. */
+        slug?: string;
+    }): Promise<DropthisResult<Workspace>>;
+    /** Rename a team workspace (owner/admin). Needs `workspaces:write`. */
+    rename(workspaceId: string, input: {
+        name?: string;
+        slug?: string;
+    }): Promise<DropthisResult<Workspace>>;
+    /** Delete a team workspace (owner only). Needs `workspaces:admin`. 204 — data is null. */
+    delete(workspaceId: string): Promise<DropthisResult<null>>;
     use(workspace: string): Promise<DropthisResult<Workspace>>;
     active(): Promise<DropthisResult<Workspace | null>>;
 }
 
-export { type UploadTarget as $, type AccountLimits as A, type ListPage as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type PreparedPublishRequest as F, type GetContentOptions as G, type PreparedUploadFile as H, type InMemoryPublishInput as I, type PublishFileInput as J, type KeyType as K, type Limitations as L, type PublishInput as M, type NextHint as N, type PublishOptions as O, type PrepareOptions as P, type RequestOptions as Q, type RequestControls as R, type RevokeImpact as S, SHARED_POOL as T, type SessionResponse as U, type TierInfo as V, Transport as W, type UpdateContentOptions as X, type UploadManifestFile as Y, type UploadSessionFileResponse as Z, type UploadSessionResponse as _, AccountResource as a, type Workspace as a0, WorkspacesResource as a1, type AccountResponse as b, type AccountWorkspace as c, type ActionResolve as d, ApiKeysResource as e, type CreateUploadSessionResponse as f, CursorPage as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, type DropWorkspace as t, DropsResource as u, type DropthisClientOptions as v, type DropthisErrorResponse as w, type DropthisResult as x, type ListDeploymentsParams as y, type ListDeploymentsResponse as z };
+export { type SessionResponse as $, AccountResource as A, type InvitableRole as B, type CreateUploadSessionRequest as C, type DeploymentContentFile as D, type EmailOtpResponse as E, type Invitation as F, type GetContentOptions as G, type InvitationListResponse as H, type InMemoryPublishInput as I, type ListDeploymentsParams as J, type KeyType as K, type Limitations as L, type ListDeploymentsResponse as M, type ListPage as N, type Member as O, type MemberListResponse as P, type NextHint as Q, type PrepareOptions as R, type PreparedPublishRequest as S, type PreparedUploadFile as T, type PublishFileInput as U, type PublishInput as V, type PublishOptions as W, type RequestControls as X, type RequestOptions as Y, type RevokeImpact as Z, SHARED_POOL as _, type AccountResponse as a, type TierInfo as a0, Transport as a1, type UpdateContentOptions as a2, type UploadManifestFile as a3, type UploadSessionFileResponse as a4, type UploadSessionResponse as a5, type UploadTarget as a6, type Workspace as a7, type WorkspaceRole as a8, WorkspacesResource as a9, type AccountUsage as b, type AccountWorkspace as c, type ActionResolve as d, ApiKeysResource as e, type CreateUploadSessionResponse as f, CursorPage as g, type DeploymentContentManifest as h, DeploymentsResource as i, type DnsRecord as j, type DomainDeletedResponse as k, type DomainListResponse as l, type DomainResponse as m, DomainsResource as n, type DropAction as o, type DropContentFile as p, type DropDeploymentResponse as q, type DropOptions as r, type DropResponse as s, type DropWorkspace as t, DropsResource as u, type DropthisClientOptions as v, type DropthisErrorResponse as w, type DropthisResult as x, type EntitlementLimits as y, type Entitlements as z };

package/node_modules/@dropthis/node/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@dropthis/node",
-	"version": "0.26.0",
+	"version": "0.29.0",
 	"description": "Official Node.js SDK for Dropthis.",
 	"license": "MIT",
 	"repository": {

package/package.json

@@ -1,51 +1,51 @@
 {
-  "name": "@dropthis/cli",
-  "version": "0.30.1",
-  "description": "Official CLI for Dropthis.",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/dropthis-dev/dropthis-cli"
-  },
-  "type": "module",
-  "bin": {
-    "dropthis": "./dist/cli.cjs"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "bundledDependencies": [
-    "@dropthis/node"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsx src/cli.ts",
-    "format": "biome check --vcs-enabled=true --vcs-client-kind=git --vcs-use-ignore-file=true --write .",
-    "lint": "biome check --vcs-enabled=true --vcs-client-kind=git --vcs-use-ignore-file=true .",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "pack:dry": "npm pack --dry-run"
-  },
-  "dependencies": {
-    "@clack/prompts": "1.4.0",
-    "@dropthis/node": "^0.26.0",
-    "@napi-rs/keyring": "1.3.0",
-    "commander": "14.0.3",
-    "picocolors": "1.1.1"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "2.4.11",
-    "@types/node": "24.0.0",
-    "tsup": "8.5.1",
-    "tsx": "4.20.0",
-    "typescript": "5.9.3",
-    "vitest": "4.1.7"
-  },
-  "bundleDependencies": [
-    "@dropthis/node"
-  ]
+	"name": "@dropthis/cli",
+	"version": "0.33.0",
+	"description": "Official CLI for Dropthis.",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/dropthis-dev/dropthis-cli"
+	},
+	"type": "module",
+	"bin": {
+		"dropthis": "./dist/cli.cjs"
+	},
+	"files": [
+		"dist",
+		"README.md"
+	],
+	"bundledDependencies": [
+		"@dropthis/node"
+	],
+	"engines": {
+		"node": ">=20"
+	},
+	"scripts": {
+		"build": "tsup",
+		"dev": "tsx src/cli.ts",
+		"format": "biome check --vcs-enabled=true --vcs-client-kind=git --vcs-use-ignore-file=true --write .",
+		"lint": "biome check --vcs-enabled=true --vcs-client-kind=git --vcs-use-ignore-file=true .",
+		"typecheck": "tsc --noEmit",
+		"test": "vitest run",
+		"pack:dry": "npm pack --dry-run"
+	},
+	"dependencies": {
+		"@clack/prompts": "1.4.0",
+		"@dropthis/node": "^0.29.0",
+		"@napi-rs/keyring": "1.3.0",
+		"commander": "14.0.3",
+		"picocolors": "1.1.1"
+	},
+	"devDependencies": {
+		"@biomejs/biome": "2.4.11",
+		"@types/node": "24.0.0",
+		"tsup": "8.5.1",
+		"tsx": "4.20.0",
+		"typescript": "5.9.3",
+		"vitest": "4.1.7"
+	},
+	"bundleDependencies": [
+		"@dropthis/node"
+	]
 }