@endorr/core-sdk 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,27 @@
+# @endorr/core-sdk
+
+## 0.2.0 — 2026-09-11
+
+- Billing: `client.billing.{catalogue, plans, entitlements, overview, checkout, payments, subscription, changePlan, cancel, resume, refresh, claimable, claim}` (needs the new `billing` scope; managing needs organisation owner/admin). `checkout` takes a plan (`studio`, `studio_plus`) or the `printreadysheets` add-on.
+- Tokens: `client.billing.{wallet, spend, refund, buyTokens, refreshPayment}`. Denied spends throw `EndorrEntitlementError` (402 `not_entitled` / `insufficient_tokens`) carrying the access check.
+- Access checks: `client.billing.check` (product, feature or action), `canUse`, `require`; offline `hasProduct`, `hasFeature`, `describeDenial`, `assertAllowed`.
+- `EndorrBillingSync`: a product's server-side client — check, spend and refund for a connected user with client credentials, and report subscriptions the product still bills itself.
+- `EndorrBillingSync.payments({ since, limit })`: paid charges of the add-ons that unlock your product, oldest first (for dealer commission and revenue reports once your billing runs through Endorr).
+- `spend` (both clients) takes `product` when your app runs another product's tools (PrintReadySheets hosting FileFixer), so Core checks that product's entitlement.
+- Next.js: `requireEntitlement`, `withEntitlement`, `entitlementErrorResponse`. React: `useEntitlements`, `useAccess`, `useWallet`, `<Entitled>`.
+- `EndorrApiError.isPaymentRequired`; `StorageUsage` gains `permanent_quota_bytes` and `plan`.
+- Types: `Catalogue`, `Plan`, `Addon`, `TokenPack`, `Entitlements`, `AccessCheck`, `Wallet`, `TokenTransaction`, `TokenSpend`, `Subscription`, `BillingOverview`, `BillingPayment`, `CheckoutSession`, `TokenCheckout`, `PlanChange`, `ExternalSubscriptionInput`, `Money`, `ProductKey`, `FeatureKey`, `TokenAction`.
+
+## 0.1.1 — 2026-09-10
+
+- Fix: token-endpoint failures that carry Core's generic API error envelope (`{ error: { code, message } }`, e.g. rate limits) now produce a readable `EndorrOAuthError` with `error = code` instead of the message `[object Object]`. RFC 6749 `{ error, error_description }` bodies are unchanged.
+- Fix: non-JSON or empty error bodies map to `server_error` with the HTTP status.
+- Added since 0.1.0: `files.trash`, `files.restore`, paginated `files.recent` and `folders.children` (`{ items | folders/files, next_cursor }`), `organizations.audit`, `organizations.delete`, `organizations.resendInvite`, `teams.rename`, `me.requestEmailChange`, `me.deleteAccount`, `oauth.endSessionUrl`.
+
+### Breaking versus 0.1.0
+- `files.recent()` returns `{ items, next_cursor }` instead of an array. Use `(await core.files.recent()).items`.
+- `folders.children()` response gains `next_cursor`; existing fields are unchanged.
+
+## 0.1.0 — 2026-09-09
+
+Initial release: OAuth/PKCE + token endpoints + ID-token verification, typed `/v1` client, browser uploads, Next.js login/callback handlers, React provider and hooks.

package/README.md

@@ -77,3 +77,79 @@ await sessions.update({ accessToken: next.access_token, refreshToken: next.refre
 
 A `401` from the API or `invalid_grant` on refresh means the user disconnected your product in
 Endorr or reuse detection fired: drop your session and send them through login again.
+
+## Billing
+
+Request the `billing` scope. Any member can read entitlements and check access; owners and admins manage subscriptions.
+Every organisation is on Studio Free unless it pays for Studio or Studio+; PrintReadySheets is an add-on (included in Studio+).
+
+```ts
+import { EndorrEntitlementError, hasProduct, hasFeature } from '@endorr/core-sdk';
+
+const ent = await core.billing.entitlements();                 // token's organisation
+ent.plan.key;                                                   // 'free' | 'studio' | 'studio_plus'
+hasProduct(ent, 'printreadysheets'); hasFeature(ent, 'batch_workflows');   // offline, for rendering
+
+// Live check: a denial is an answer, with what fixes it.
+const access = await core.billing.check({ product: 'printreadysheets' }); // or { feature } or { action, quantity }
+if (!access.allowed) showUpgrade(access.addon ?? access.upgrade);        // reason: not_in_plan | addon_required | insufficient_tokens
+await core.billing.canUse('pixlpilot');                                  // boolean
+await core.billing.require({ feature: 'permissions' });                  // throws EndorrEntitlementError (402)
+
+const { checkout_url, subscription } = await core.billing.checkout(orgId, { plan: 'studio', redirect_url: 'https://endorr.com/studio/settings/billing' });
+// …redirect to checkout_url; on return:
+await core.billing.refresh(subscription.id);
+await core.billing.checkout(orgId, { plan: 'printreadysheets' });       // the add-on
+await core.billing.buyTokens(orgId, { pack: 'tokens_250' });
+```
+
+### Tokens
+
+```ts
+// Pay before doing the work (the wallet is locked, so jobs never overdraw it); refund if the work fails.
+const { transaction } = await core.billing.spend({ action: 'upscale', idempotency_key: job.id });
+try { await runUpscale(job); } catch (e) { await core.billing.refund(transaction.id); throw e; }
+
+try { await core.billing.spend({ action: 'repair' }); }
+catch (e) { if (e instanceof EndorrEntitlementError) return showTopUp(e.check.top_up, e.message); throw e; }
+
+await core.billing.wallet();   // { balance, free_balance, paid_balance, free_resets_at, transactions }
+```
+
+Core owns the prices (`upscale` 2, `repair` 1, `vectorize` 1; see `core.billing.catalogue()`). Only Endorr apps spend,
+and only for organisations that may use them. From a back end without a user token, use the same calls on
+`EndorrBillingSync` with the user's Endorr id: `sync.canUse(userId, 'filefixer')`, `sync.spend(userId, { action })`,
+`sync.refund(userId, transactionId)`.
+
+### Subscriptions your product still bills
+
+```ts
+import { EndorrBillingSync } from '@endorr/core-sdk';
+const sync = new EndorrBillingSync({ baseUrl: 'https://auth.endorr.com', clientId: 'printreadysheets', clientSecret: process.env.ENDORR_CLIENT_SECRET! });
+
+await sync.upsert(local.id, {
+  user_id: local.endorrUserId ?? null,                     // Endorr `sub` if the customer connected Endorr…
+  customer_email: local.endorrUserId ? null : user.email,  // …otherwise their email; they claim it in Endorr
+  plan_key: 'prs_shopify', plan_name: 'PrintReadySheets via Shopify', status: 'active',
+  provider: 'shopify', amount: { value: '79.00', currency: 'USD' }, current_period_end: local.currentPeriodEnd.toISOString(),
+  manage_url: 'https://printreadysheets.com/en/dashboard/billing',
+});
+```
+
+Send the full state after every change (paid, renewed, failed, cancelled). Core never charges or cancels these.
+
+### Next.js and React
+
+```ts
+import { withEntitlement, requireEntitlement, entitlementErrorResponse } from '@endorr/core-sdk/nextjs';
+export const POST = withEntitlement((req) => coreFor(req), { product: 'printreadysheets' }, async (req, access) => Response.json({ ok: true }));
+```
+
+```tsx
+import { Entitled, useAccess, useEntitlements, useWallet } from '@endorr/core-sdk/react';
+<Entitled product="printreadysheets" fallback={(c) => <UpgradeCard addon={c.addon} plan={c.upgrade} />}>
+  <SheetBuilder />
+</Entitled>
+```
+
+`<Entitled>` only hides UI; the server-side check or `spend` is what enforces.

package/dist/billing-sync.d.ts

@@ -0,0 +1,74 @@
+import type { AccessCheck, Entitlements, ExternalSubscriptionInput, ExternalSubscriptionResult, FeatureKey, ProductKey, ProductPaymentsPage, TokenAction, TokenSpend, Wallet } from './types';
+export interface BillingSyncConfig {
+    /** Core origin, e.g. https://auth.endorr.com */
+    baseUrl: string;
+    /** Your OAuth client id, e.g. "printreadysheets". */
+    clientId: string;
+    clientSecret: string;
+    fetch?: typeof fetch;
+}
+type Check = {
+    product?: ProductKey;
+    feature?: FeatureKey;
+    action?: TokenAction;
+    quantity?: number;
+    organizationId?: string;
+};
+/**
+ * An app's server-side billing client. Authenticates as your OAuth client (never as a user), so keep
+ * it on the server. Every call about a person takes their Endorr user id (`sub`) and is accepted only
+ * for people who connected your app.
+ *
+ * 1. Check access and pay for work in tokens from a back-end job with no user token at hand:
+ *
+ *      if (!(await sync.canUse(userId, 'printreadysheets'))) …
+ *      const { transaction } = await sync.spend(userId, { action: 'upscale', idempotency_key: job.id });
+ *
+ * 2. Report subscriptions you still bill yourself (Shopify merchants, for example), so they appear in
+ *    the customer's Endorr account. Needs a client enabled for billing sync. Send the complete current
+ *    state whenever it changes; omitted fields are cleared, except the organisation link, which sticks.
+ */
+export declare class EndorrBillingSync {
+    private readonly base;
+    private readonly f;
+    private readonly authorization;
+    constructor(cfg: BillingSyncConfig);
+    entitlements(userId: string, opts?: {
+        organizationId?: string;
+    }): Promise<Entitlements>;
+    check(userId: string, q: Check): Promise<AccessCheck>;
+    canUse(userId: string, product: ProductKey, q?: Omit<Check, 'product'>): Promise<boolean>;
+    /** Throws EndorrEntitlementError (402) when denied. */
+    require(userId: string, q: Check): Promise<AccessCheck>;
+    wallet(userId: string, opts?: {
+        organizationId?: string;
+    }): Promise<Wallet>;
+    /**
+     * Pay for work in tokens; throws EndorrEntitlementError (402 not_entitled / insufficient_tokens) when
+     * it may not. `product` names the product the work belongs to when your app runs another product's
+     * tools (PrintReadySheets hosts FileFixer): Core then checks that product instead of your own.
+     */
+    spend(userId: string, input: {
+        action: TokenAction;
+        quantity?: number;
+        idempotency_key?: string;
+        organization_id?: string;
+        product?: ProductKey;
+    }): Promise<TokenSpend>;
+    refund(userId: string, transactionId: string): Promise<TokenSpend>;
+    /**
+     * Paid charges of the add-ons that unlock your product, oldest first — for your own books once your
+     * billing runs through Endorr (dealer commission, revenue reports). Pass `next_since` back as
+     * `since` to page; replays are safe to skip by `id`.
+     */
+    payments(opts?: {
+        since?: string | Date;
+        limit?: number;
+    }): Promise<ProductPaymentsPage>;
+    /** Create or replace the subscription Core holds under your id. */
+    upsert(externalId: string, input: ExternalSubscriptionInput): Promise<ExternalSubscriptionResult>;
+    get(externalId: string): Promise<ExternalSubscriptionResult>;
+    private request;
+}
+export {};
+//# sourceMappingURL=billing-sync.d.ts.map

package/dist/billing-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-sync.d.ts","sourceRoot":"","sources":["../src/billing-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EAAE,YAAY,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAC/J,MAAM,SAAS,CAAC;AAIjB,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAGD,KAAK,KAAK,GAAG;IAAE,OAAO,CAAC,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9H;;;;;;;;;;;;;GAaG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAe;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,GAAG,EAAE,iBAAiB;IAMlC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAK3F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;IAM/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAE,IAAI,CAAC,KAAK,EAAE,SAAS,CAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAInG,uDAAuD;IACjD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;IAI7D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;;;;OAIG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAIvK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIlE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAK5F,mEAAmE;IACnE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAIjG,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;YAI9C,OAAO;CAStB"}

package/dist/billing-sync.js

@@ -0,0 +1,86 @@
+import { throwForResponse } from './errors';
+import { assertAllowed } from './entitlements';
+/**
+ * An app's server-side billing client. Authenticates as your OAuth client (never as a user), so keep
+ * it on the server. Every call about a person takes their Endorr user id (`sub`) and is accepted only
+ * for people who connected your app.
+ *
+ * 1. Check access and pay for work in tokens from a back-end job with no user token at hand:
+ *
+ *      if (!(await sync.canUse(userId, 'printreadysheets'))) …
+ *      const { transaction } = await sync.spend(userId, { action: 'upscale', idempotency_key: job.id });
+ *
+ * 2. Report subscriptions you still bill yourself (Shopify merchants, for example), so they appear in
+ *    the customer's Endorr account. Needs a client enabled for billing sync. Send the complete current
+ *    state whenever it changes; omitted fields are cleared, except the organisation link, which sticks.
+ */
+export class EndorrBillingSync {
+    base;
+    f;
+    authorization;
+    constructor(cfg) {
+        this.base = cfg.baseUrl.replace(/\/$/, '');
+        this.f = cfg.fetch ?? ((input, init) => fetch(input, init));
+        this.authorization = 'Basic ' + btoa(`${encodeURIComponent(cfg.clientId)}:${encodeURIComponent(cfg.clientSecret)}`);
+    }
+    entitlements(userId, opts = {}) {
+        return this.request('GET', '/v1/billing/entitlements', { user_id: userId, organization_id: opts.organizationId })
+            .then((r) => r.entitlements);
+    }
+    check(userId, q) {
+        return this.request('GET', '/v1/billing/entitlements/check', {
+            user_id: userId, product: q.product, feature: q.feature, action: q.action, quantity: q.quantity, organization_id: q.organizationId,
+        }).then((r) => r.access);
+    }
+    async canUse(userId, product, q = {}) {
+        return (await this.check(userId, { ...q, product })).allowed;
+    }
+    /** Throws EndorrEntitlementError (402) when denied. */
+    async require(userId, q) {
+        return assertAllowed(await this.check(userId, q));
+    }
+    wallet(userId, opts = {}) {
+        return this.request('GET', '/v1/billing/tokens', { user_id: userId, organization_id: opts.organizationId }).then((r) => r.wallet);
+    }
+    /**
+     * Pay for work in tokens; throws EndorrEntitlementError (402 not_entitled / insufficient_tokens) when
+     * it may not. `product` names the product the work belongs to when your app runs another product's
+     * tools (PrintReadySheets hosts FileFixer): Core then checks that product instead of your own.
+     */
+    spend(userId, input) {
+        return this.request('POST', '/v1/billing/tokens/spend', {}, { ...input, user_id: userId });
+    }
+    refund(userId, transactionId) {
+        return this.request('DELETE', `/v1/billing/tokens/spend/${encodeURIComponent(transactionId)}`, { user_id: userId });
+    }
+    /**
+     * Paid charges of the add-ons that unlock your product, oldest first — for your own books once your
+     * billing runs through Endorr (dealer commission, revenue reports). Pass `next_since` back as
+     * `since` to page; replays are safe to skip by `id`.
+     */
+    payments(opts = {}) {
+        const since = opts.since instanceof Date ? opts.since.toISOString() : opts.since;
+        return this.request('GET', '/v1/billing/product-payments', { since, limit: opts.limit });
+    }
+    /** Create or replace the subscription Core holds under your id. */
+    upsert(externalId, input) {
+        return this.request('PUT', `/v1/billing/external-subscriptions/${encodeURIComponent(externalId)}`, {}, input);
+    }
+    get(externalId) {
+        return this.request('GET', `/v1/billing/external-subscriptions/${encodeURIComponent(externalId)}`);
+    }
+    async request(method, path, query = {}, body) {
+        const url = new URL(this.base + path);
+        for (const [k, v] of Object.entries(query))
+            if (v !== undefined && v !== null)
+                url.searchParams.set(k, String(v));
+        const headers = { accept: 'application/json', authorization: this.authorization };
+        if (body !== undefined)
+            headers['content-type'] = 'application/json';
+        const res = await this.f(url.toString(), { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined });
+        if (!res.ok)
+            await throwForResponse(res);
+        return (await res.json());
+    }
+}
+//# sourceMappingURL=billing-sync.js.map

package/dist/billing-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-sync.js","sourceRoot":"","sources":["../src/billing-sync.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAc/C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAS;IACb,CAAC,CAAe;IAChB,aAAa,CAAS;IAEvC,YAAY,GAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,OAAoC,EAAE;QACjE,OAAO,IAAI,CAAC,OAAO,CAAiC,KAAK,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;aAC9I,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,CAAQ;QAC5B,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,gCAAgC,EAAE;YACpF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,cAAc;SACnI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,OAAmB,EAAE,IAA4B,EAAE;QAC9E,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,CAAQ;QACpC,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,OAAoC,EAAE;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAqB,KAAK,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAc,EAAE,KAA2H;QAC/I,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,aAAqB;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,kBAAkB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,OAAkD,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACjF,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,UAAkB,EAAE,KAAgC;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,sCAAsC,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAChH,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,sCAAsC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,QAAe,EAAE,EAAE,IAAc;QACtF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1G,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3H,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF"}

package/dist/client.d.ts

@@ -1,4 +1,14 @@
-import type { Me, EndorrUser, OrganizationSummary, SessionInfo, ConnectedApp, Member, Invite, Team, EndorrFile, EndorrFolder, UploadTicket, DownloadTicket, Grant, ShareLink, StorageUsage, OrgRole, ResourceRole, PrincipalType, StorageClass, ResourceType } from './types';
+import type { Me, EndorrUser, OrganizationSummary, SessionInfo, ConnectedApp, Member, Invite, Team, EndorrFile, EndorrFolder, UploadTicket, DownloadTicket, Grant, ShareLink, StorageUsage, OrgRole, ResourceRole, PrincipalType, StorageClass, ResourceType, AuditEvent, Page, Plan, PlanKey, Entitlements, BillingOverview, BillingPayment, CheckoutSession, PlanChange, Subscription, AccessCheck, AddonKey, Catalogue, FeatureKey, ProductKey, TokenAction, TokenCheckout, TokenSpend, Wallet } from './types';
+/** What to check: a product, a plan feature, or whether the wallet affords `quantity` × `action`. */
+export interface AccessQuery {
+    product?: ProductKey;
+    feature?: FeatureKey;
+    action?: TokenAction;
+    /** Units of `action`; default 1. */
+    quantity?: number;
+    /** Defaults to the token's organisation. */
+    organizationId?: string;
+}
 export interface ClientConfig {
     /** Core origin, e.g. https://auth.endorr.com */
     baseUrl: string;
@@ -42,6 +52,20 @@ export declare class EndorrClient {
         resendVerification: () => Promise<{
             ok: true;
         }>;
+        /** Starts an email change; the new address must open the verification link. */
+        requestEmailChange: (input: {
+            email: string;
+            current_password: string;
+        }) => Promise<{
+            ok: true;
+            pending_email: string;
+        }>;
+        /** Deletes the account (password confirmation). Refused while sole owner of a shared organisation. */
+        deleteAccount: (input: {
+            current_password: string;
+        }) => Promise<{
+            ok: true;
+        }>;
         organizations: () => Promise<OrganizationSummary[]>;
         createOrganization: (input: {
             name: string;
@@ -71,6 +95,16 @@ export declare class EndorrClient {
         update: (id: string, input: {
             name?: string;
         }) => Promise<OrganizationSummary>;
+        /** Owner only. Soft-deletes the organisation and its files. */
+        delete: (id: string) => Promise<{
+            ok: true;
+        }>;
+        /** Admin: privileged-activity log, newest first. */
+        audit: (id: string, opts?: {
+            limit?: number;
+            cursor?: string | null;
+            types?: string[];
+        }) => Promise<Page<AuditEvent>>;
         members: (id: string) => Promise<Member[]>;
         setMemberRole: (id: string, userId: string, role: OrgRole) => Promise<{
             ok: true;
@@ -86,12 +120,19 @@ export declare class EndorrClient {
         revokeInvite: (id: string, inviteId: string) => Promise<{
             ok: true;
         }>;
+        resendInvite: (id: string, inviteId: string) => Promise<{
+            ok: true;
+        }>;
         teams: (id: string) => Promise<Team[]>;
         createTeam: (id: string, input: {
             name: string;
         }) => Promise<Team>;
     };
     teams: {
+        rename: (teamId: string, name: string) => Promise<{
+            id: string;
+            name: string;
+        }>;
         delete: (teamId: string) => Promise<{
             ok: true;
         }>;
@@ -126,7 +167,16 @@ export declare class EndorrClient {
         delete: (fileId: string) => Promise<{
             ok: true;
         }>;
-        recent: (limit?: number) => Promise<EndorrFile[]>;
+        recent: (opts?: {
+            limit?: number;
+            cursor?: string | null;
+        }) => Promise<Page<EndorrFile>>;
+        /** Soft-deleted files still recoverable. */
+        trash: (opts?: {
+            limit?: number;
+            cursor?: string | null;
+        }) => Promise<Page<EndorrFile>>;
+        restore: (fileId: string) => Promise<EndorrFile>;
         addRelationship: (sourceFileId: string, input: {
             derived_file_id: string;
             relationship_type: string;
@@ -145,10 +195,14 @@ export declare class EndorrClient {
         }) => Promise<EndorrFolder>;
         get: (folderId: string) => Promise<EndorrFolder>;
         /** `null` lists the organisation root. */
-        children: (folderId: string | null) => Promise<{
+        children: (folderId: string | null, opts?: {
+            limit?: number;
+            cursor?: string | null;
+        }) => Promise<{
             folder_id: string | null;
             folders: EndorrFolder[];
             files: EndorrFile[];
+            next_cursor: string | null;
         }>;
         update: (folderId: string, input: {
             name?: string;
@@ -197,6 +251,60 @@ export declare class EndorrClient {
     storage: {
         usage: () => Promise<StorageUsage>;
     };
+    billing: {
+        /** Public catalogue: plans, add-ons, token packs and what each action costs. */
+        catalogue: () => Promise<Catalogue>;
+        plans: () => Promise<Plan[]>;
+        /** Plan, add-ons, products, features, storage and monthly tokens. Defaults to the token's organisation. */
+        entitlements: (organizationId?: string) => Promise<Entitlements>;
+        /** Entitlements, subscriptions, wallet and storage in one call, for an account page. */
+        overview: (organizationId: string) => Promise<BillingOverview>;
+        /** Subscribe to a plan (studio, studio_plus) or add an add-on (printreadysheets). Send the browser to `checkout_url`. */
+        checkout: (organizationId: string, input: {
+            plan: Exclude<PlanKey, "free"> | AddonKey;
+            redirect_url?: string | null;
+        }) => Promise<CheckoutSession>;
+        payments: (organizationId: string) => Promise<BillingPayment[]>;
+        subscription: (id: string) => Promise<Subscription>;
+        /** Studio ↔ Studio+. Upgrades apply once the prorated charge is paid; downgrades at the next renewal. */
+        changePlan: (id: string, plan: Exclude<PlanKey, "free">) => Promise<PlanChange>;
+        cancel: (id: string) => Promise<Subscription>;
+        resume: (id: string) => Promise<Subscription>;
+        /** Reconcile with Mollie, e.g. on the checkout return page. */
+        refresh: (id: string) => Promise<Subscription>;
+        /** Product subscriptions reported for the caller's verified email, waiting to be attached. */
+        claimable: () => Promise<Subscription[]>;
+        claim: (id: string, organizationId: string) => Promise<Subscription>;
+        /** Live access check. A denial is an answer, not an error: read `allowed`, `reason`, and `addon` / `upgrade` / `top_up`. */
+        check: (q: AccessQuery) => Promise<AccessCheck>;
+        /** `true` when the organisation may use the product (and afford `quantity` × `action`, if given). */
+        canUse: (product: ProductKey, q?: Omit<AccessQuery, "product">) => Promise<boolean>;
+        /** Like `check`, but throws EndorrEntitlementError (402) when denied. Use it to gate a handler. */
+        require: (q: AccessQuery) => Promise<AccessCheck>;
+        /** The token wallet: balances and the latest movements. */
+        wallet: (organizationId?: string) => Promise<Wallet>;
+        /**
+         * Pay for metered work in tokens (Endorr apps only). Spend before the work and `refund` if it fails;
+         * an idempotency key makes retries count once. Throws EndorrEntitlementError (402 not_entitled /
+         * insufficient_tokens) when it may not. `product` names the product the work belongs to when your
+         * app runs another product's tools.
+         */
+        spend: (input: {
+            action: TokenAction;
+            quantity?: number;
+            idempotency_key?: string;
+            organization_id?: string;
+            product?: ProductKey;
+        }) => Promise<TokenSpend>;
+        refund: (transactionId: string) => Promise<TokenSpend>;
+        /** Admin: buy a token pack; the tokens land once Mollie reports it paid. */
+        buyTokens: (organizationId: string, input: {
+            pack: string;
+            redirect_url?: string | null;
+        }) => Promise<TokenCheckout>;
+        /** Reconcile one payment with Mollie (a token pack's return page). */
+        refreshPayment: (paymentId: string) => Promise<BillingPayment>;
+    };
 }
 export {};
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAC9G,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAC/H,MAAM,SAAS,CAAC;AAGjB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,yFAAyF;IACzF,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AAE1E;;;GAGG;AACH,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAe;gBAEJ,GAAG,EAAE,YAAY;IAK9C,+FAA+F;IAC/F,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY;IAItC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAcxG,EAAE;;+BAEuB;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;kBAA0B,UAAU;;gCACpD;YAAE,gBAAgB,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE;gBAAwB,IAAI;;;gBACzD,IAAI;;;oCAErB;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;;;yBAG7B,MAAM;oBAAwB,IAAI;oCAAsB,OAAO;;;oBACrC,IAAI;yBAAW,MAAM;;;;;mCAIrC,MAAM;oBAAwB,IAAI;;;MAE3D;IAGF,aAAa;kBACD,MAAM;wBAAsE,MAAM;;qBAC/E,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;sBAC/B,MAAM;4BACA,MAAM,UAAU,MAAM,QAAQ,OAAO;gBAAwB,IAAI;;2BAClE,MAAM,UAAU,MAAM;gBAAwB,IAAI;;sBACvD,MAAM;qBACP,MAAM,SAAS;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;SAAE;2BACrD,MAAM,YAAY,MAAM;gBAAwB,IAAI;;oBAC3D,MAAM;yBACD,MAAM,SAAS;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;MAChD;IAEF,KAAK;yBACc,MAAM;gBAAwB,IAAI;;4BAC/B,MAAM,UAAU,MAAM;gBAAwB,IAAI;;+BAC/C,MAAM,UAAU,MAAM;gBAAwB,IAAI;;MACzE;IAGF,KAAK;8BACmB;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;2BAEtJ,MAAM,UAAS;YAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;sBAE1E,MAAM;2BACD,MAAM;yBACR,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;kCAEhF,MAAM;yBACf,MAAM;gBAAwB,IAAI;;;wCAEnB,MAAM,SAAS;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE;gBAChE,MAAM;4BAAkB,MAAM;6BAAmB,MAAM;+BAAqB,MAAM;;MACvH;IAEF,OAAO;wBACW;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;wBAEnF,MAAM;QACtB,0CAA0C;6BACrB,MAAM,GAAG,IAAI;uBAA+B,MAAM,GAAG,IAAI;qBAAW,YAAY,EAAE;mBAAS,UAAU,EAAE;;2BACzG,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;2BAElE,MAAM;gBAAwB,IAAI;;MACrD;IAEF,WAAW;qBACI,YAAY,MAAM,MAAM;sBACvB,YAAY,MAAM,MAAM,SAAS;YAAE,cAAc,EAAE,aAAa,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,YAAY,CAAA;SAAE;uBAE3G,YAAY,MAAM,MAAM,WAAW,MAAM;gBAAwB,IAAI;;MACpF;IAEF,MAAM;uBACW,YAAY,MAAM,MAAM,UAAS;YAAE,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE;0BAElF,MAAM;gBAAwB,IAAI;;QACpD,iEAAiE;yBAChD,MAAM;kBAA0B,MAAM;kBAAQ,UAAU;sBAAY;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE;;kBAAa,QAAQ;oBAAU;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE;mBAAS,UAAU,EAAE;;MACxM;IAEF,OAAO;;MAEL;CACH"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAC9G,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAChJ,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EACvG,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EACzG,MAAM,SAAS,CAAC;AAIjB,qGAAqG;AACrG,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,yFAAyF;IACzF,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;AAE1E;;;GAGG;AACH,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAe;gBAEJ,GAAG,EAAE,YAAY;IAK9C,+FAA+F;IAC/F,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY;IAItC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAcxG,EAAE;;+BAEuB;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;kBAA0B,UAAU;;gCACpD;YAAE,gBAAgB,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE;gBAAwB,IAAI;;;gBACzD,IAAI;;QACjD,+EAA+E;oCACnD;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE;gBAAwB,IAAI;2BAAiB,MAAM;;QAC1H,sGAAsG;+BAC/E;YAAE,gBAAgB,EAAE,MAAM,CAAA;SAAE;gBAAwB,IAAI;;;oCAEnD;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;;;yBAG7B,MAAM;oBAAwB,IAAI;oCAAsB,OAAO;;;oBACrC,IAAI;yBAAW,MAAM;;;;;mCAIrC,MAAM;oBAAwB,IAAI;;;MAE3D;IAGF,aAAa;kBACD,MAAM;wBAAsE,MAAM;;qBAC/E,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE;QAC7C,+DAA+D;qBAClD,MAAM;gBAAwB,IAAI;;QAC/C,oDAAoD;oBACxC,MAAM,SAAQ;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE;sBAExE,MAAM;4BACA,MAAM,UAAU,MAAM,QAAQ,OAAO;gBAAwB,IAAI;;2BAClE,MAAM,UAAU,MAAM;gBAAwB,IAAI;;sBACvD,MAAM;qBACP,MAAM,SAAS;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;SAAE;2BACrD,MAAM,YAAY,MAAM;gBAAwB,IAAI;;2BACpD,MAAM,YAAY,MAAM;gBAAwB,IAAI;;oBAC3D,MAAM;yBACD,MAAM,SAAS;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE;MAChD;IAEF,KAAK;yBACc,MAAM,QAAQ,MAAM;gBAAgC,MAAM;kBAAQ,MAAM;;yBACxE,MAAM;gBAAwB,IAAI;;4BAC/B,MAAM,UAAU,MAAM;gBAAwB,IAAI;;+BAC/C,MAAM,UAAU,MAAM;gBAAwB,IAAI;;MACzE;IAGF,KAAK;8BACmB;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;2BAEtJ,MAAM,UAAS;YAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;sBAE1E,MAAM;2BACD,MAAM;yBACR,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,YAAY,CAAA;SAAE;kCAEhF,MAAM;yBACf,MAAM;gBAAwB,IAAI;;wBACpC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;QACzD,4CAA4C;uBAC9B;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;0BACtC,MAAM;wCACQ,MAAM,SAAS;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE;gBAChE,MAAM;4BAAkB,MAAM;6BAAmB,MAAM;+BAAqB,MAAM;;MACvH;IAEF,OAAO;wBACW;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;wBAEnF,MAAM;QACtB,0CAA0C;6BACrB,MAAM,GAAG,IAAI,SAAQ;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;uBAAoC,MAAM,GAAG,IAAI;qBAAW,YAAY,EAAE;mBAAS,UAAU,EAAE;yBAAe,MAAM,GAAG,IAAI;;2BAC5L,MAAM,SAAS;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;2BAElE,MAAM;gBAAwB,IAAI;;MACrD;IAEF,WAAW;qBACI,YAAY,MAAM,MAAM;sBACvB,YAAY,MAAM,MAAM,SAAS;YAAE,cAAc,EAAE,aAAa,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,YAAY,CAAA;SAAE;uBAE3G,YAAY,MAAM,MAAM,WAAW,MAAM;gBAAwB,IAAI;;MACpF;IAEF,MAAM;uBACW,YAAY,MAAM,MAAM,UAAS;YAAE,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE;0BAElF,MAAM;gBAAwB,IAAI;;QACpD,iEAAiE;yBAChD,MAAM;kBAA0B,MAAM;kBAAQ,UAAU;sBAAY;gBAAE,GAAG,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE;;kBAAa,QAAQ;oBAAU;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE;mBAAS,UAAU,EAAE;;MACxM;IAEF,OAAO;;MAEL;IAGF,OAAO;QACL,gFAAgF;;;QAGhF,2GAA2G;wCAC3E,MAAM;QAEtC,wFAAwF;mCAC7D,MAAM;QACjC,yHAAyH;mCAC9F,MAAM,SAAS;YAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;mCAE1F,MAAM;2BAEd,MAAM;QACzB,yGAAyG;yBACxF,MAAM,QAAQ,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;qBAC1C,MAAM;qBACN,MAAM;QACnB,+DAA+D;sBACjD,MAAM;QACpB,8FAA8F;;oBAElF,MAAM,kBAAkB,MAAM;QAG1C,4HAA4H;mBACjH,WAAW;QAItB,qGAAqG;0BAC7E,UAAU,MAAK,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;QACnE,mGAAmG;qBAChF,WAAW;QAE9B,2DAA2D;kCACjC,MAAM;QAEhC;;;;;WAKG;uBACY;YAAE,MAAM,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,UAAU,CAAA;SAAE;gCAE3G,MAAM;QAC9B,4EAA4E;oCAChD,MAAM,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE;QAEzF,sEAAsE;oCAC1C,MAAM;MAElC;CACH"}

package/dist/client.js

@@ -1,4 +1,5 @@
 import { throwForResponse } from './errors';
+import { assertAllowed } from './entitlements';
 /**
  * Typed client for the Endorr Core /v1 API. Every method throws EndorrApiError with the server's
  * stable `code`, so callers can branch on 403 (needs a role) vs 404 (not yours / gone).
@@ -39,6 +40,10 @@ export class EndorrClient {
         updateProfile: (input) => this.request('PATCH', '/v1/me', { body: input }),
         changePassword: (input) => this.request('POST', '/v1/me/password', { body: input }),
         resendVerification: () => this.request('POST', '/v1/me/verification/resend', { body: {} }),
+        /** Starts an email change; the new address must open the verification link. */
+        requestEmailChange: (input) => this.request('POST', '/v1/me/email', { body: input }),
+        /** Deletes the account (password confirmation). Refused while sole owner of a shared organisation. */
+        deleteAccount: (input) => this.request('DELETE', '/v1/me', { body: input }),
         organizations: () => this.request('GET', '/v1/me/organizations').then((r) => r.organizations),
         createOrganization: (input) => this.request('POST', '/v1/me/organizations', { body: input }).then((r) => r.organization),
         sessions: {
@@ -55,16 +60,22 @@ export class EndorrClient {
     organizations = {
         get: (id) => this.request('GET', `/v1/organizations/${enc(id)}`).then((r) => r.organization),
         update: (id, input) => this.request('PATCH', `/v1/organizations/${enc(id)}`, { body: input }).then((r) => r.organization),
+        /** Owner only. Soft-deletes the organisation and its files. */
+        delete: (id) => this.request('DELETE', `/v1/organizations/${enc(id)}`),
+        /** Admin: privileged-activity log, newest first. */
+        audit: (id, opts = {}) => this.request('GET', `/v1/organizations/${enc(id)}/audit`, { query: { limit: opts.limit, cursor: opts.cursor, types: opts.types?.join(',') } }).then((r) => ({ items: r.events, next_cursor: r.next_cursor })),
         members: (id) => this.request('GET', `/v1/organizations/${enc(id)}/members`).then((r) => r.members),
         setMemberRole: (id, userId, role) => this.request('PATCH', `/v1/organizations/${enc(id)}/members/${enc(userId)}`, { body: { role } }),
         removeMember: (id, userId) => this.request('DELETE', `/v1/organizations/${enc(id)}/members/${enc(userId)}`),
         invites: (id) => this.request('GET', `/v1/organizations/${enc(id)}/invites`).then((r) => r.invites),
         invite: (id, input) => this.request('POST', `/v1/organizations/${enc(id)}/invites`, { body: input }).then((r) => r.invite),
         revokeInvite: (id, inviteId) => this.request('DELETE', `/v1/organizations/${enc(id)}/invites/${enc(inviteId)}`),
+        resendInvite: (id, inviteId) => this.request('POST', `/v1/organizations/${enc(id)}/invites/${enc(inviteId)}/resend`, { body: {} }),
         teams: (id) => this.request('GET', `/v1/organizations/${enc(id)}/teams`).then((r) => r.teams),
         createTeam: (id, input) => this.request('POST', `/v1/organizations/${enc(id)}/teams`, { body: input }).then((r) => r.team),
     };
     teams = {
+        rename: (teamId, name) => this.request('PATCH', `/v1/teams/${enc(teamId)}`, { body: { name } }).then((r) => r.team),
         delete: (teamId) => this.request('DELETE', `/v1/teams/${enc(teamId)}`),
         addMember: (teamId, userId) => this.request('PUT', `/v1/teams/${enc(teamId)}/members/${enc(userId)}`, { body: {} }),
         removeMember: (teamId, userId) => this.request('DELETE', `/v1/teams/${enc(teamId)}/members/${enc(userId)}`),
@@ -78,14 +89,17 @@ export class EndorrClient {
         update: (fileId, input) => this.request('PATCH', `/v1/files/${enc(fileId)}`, { body: input }).then((r) => r.file),
         keepPermanently: (fileId) => this.files.update(fileId, { storage_class: 'permanent' }),
         delete: (fileId) => this.request('DELETE', `/v1/files/${enc(fileId)}`),
-        recent: (limit = 20) => this.request('GET', '/v1/files/recent', { query: { limit } }).then((r) => r.files),
+        recent: (opts = {}) => this.request('GET', '/v1/files/recent', { query: { limit: opts.limit, cursor: opts.cursor } }).then((r) => ({ items: r.files, next_cursor: r.next_cursor })),
+        /** Soft-deleted files still recoverable. */
+        trash: (opts = {}) => this.request('GET', '/v1/files/trash', { query: { limit: opts.limit, cursor: opts.cursor } }).then((r) => ({ items: r.files, next_cursor: r.next_cursor })),
+        restore: (fileId) => this.request('POST', `/v1/files/${enc(fileId)}/restore`, { body: {} }).then((r) => r.file),
         addRelationship: (sourceFileId, input) => this.request('POST', `/v1/files/${enc(sourceFileId)}/relationships`, { body: input }).then((r) => r.relationship),
     };
     folders = {
         create: (input) => this.request('POST', '/v1/folders', { body: input }).then((r) => r.folder),
         get: (folderId) => this.request('GET', `/v1/folders/${enc(folderId)}`).then((r) => r.folder),
         /** `null` lists the organisation root. */
-        children: (folderId) => this.request('GET', `/v1/folders/${folderId ? enc(folderId) : 'root'}/children`),
+        children: (folderId, opts = {}) => this.request('GET', `/v1/folders/${folderId ? enc(folderId) : 'root'}/children`, { query: { limit: opts.limit, cursor: opts.cursor } }),
         update: (folderId, input) => this.request('PATCH', `/v1/folders/${enc(folderId)}`, { body: input }).then((r) => r.folder),
         delete: (folderId) => this.request('DELETE', `/v1/folders/${enc(folderId)}`),
     };
@@ -103,6 +117,51 @@ export class EndorrClient {
     storage = {
         usage: () => this.request('GET', '/v1/storage/usage'),
     };
+    /* ── Billing (billing scope; managing needs organisation owner/admin) ───────────── */
+    billing = {
+        /** Public catalogue: plans, add-ons, token packs and what each action costs. */
+        catalogue: () => this.request('GET', '/v1/billing/plans'),
+        plans: () => this.billing.catalogue().then((c) => c.plans),
+        /** Plan, add-ons, products, features, storage and monthly tokens. Defaults to the token's organisation. */
+        entitlements: (organizationId) => this.request('GET', '/v1/billing/entitlements', { query: { organization_id: organizationId } }).then((r) => r.entitlements),
+        /** Entitlements, subscriptions, wallet and storage in one call, for an account page. */
+        overview: (organizationId) => this.request('GET', `/v1/organizations/${enc(organizationId)}/billing`),
+        /** Subscribe to a plan (studio, studio_plus) or add an add-on (printreadysheets). Send the browser to `checkout_url`. */
+        checkout: (organizationId, input) => this.request('POST', `/v1/organizations/${enc(organizationId)}/billing/checkout`, { body: input }),
+        payments: (organizationId) => this.request('GET', `/v1/organizations/${enc(organizationId)}/billing/payments`).then((r) => r.payments),
+        subscription: (id) => this.request('GET', `/v1/billing/subscriptions/${enc(id)}`).then((r) => r.subscription),
+        /** Studio ↔ Studio+. Upgrades apply once the prorated charge is paid; downgrades at the next renewal. */
+        changePlan: (id, plan) => this.request('POST', `/v1/billing/subscriptions/${enc(id)}/change-plan`, { body: { plan } }),
+        cancel: (id) => this.request('POST', `/v1/billing/subscriptions/${enc(id)}/cancel`, { body: {} }).then((r) => r.subscription),
+        resume: (id) => this.request('POST', `/v1/billing/subscriptions/${enc(id)}/resume`, { body: {} }).then((r) => r.subscription),
+        /** Reconcile with Mollie, e.g. on the checkout return page. */
+        refresh: (id) => this.request('POST', `/v1/billing/subscriptions/${enc(id)}/refresh`, { body: {} }).then((r) => r.subscription),
+        /** Product subscriptions reported for the caller's verified email, waiting to be attached. */
+        claimable: () => this.request('GET', '/v1/billing/claimable').then((r) => r.subscriptions),
+        claim: (id, organizationId) => this.request('POST', `/v1/billing/subscriptions/${enc(id)}/claim`, { body: { organization_id: organizationId } }).then((r) => r.subscription),
+        /** Live access check. A denial is an answer, not an error: read `allowed`, `reason`, and `addon` / `upgrade` / `top_up`. */
+        check: (q) => this.request('GET', '/v1/billing/entitlements/check', {
+            query: { product: q.product, feature: q.feature, action: q.action, quantity: q.quantity, organization_id: q.organizationId },
+        }).then((r) => r.access),
+        /** `true` when the organisation may use the product (and afford `quantity` × `action`, if given). */
+        canUse: async (product, q = {}) => (await this.billing.check({ ...q, product })).allowed,
+        /** Like `check`, but throws EndorrEntitlementError (402) when denied. Use it to gate a handler. */
+        require: async (q) => assertAllowed(await this.billing.check(q)),
+        /** The token wallet: balances and the latest movements. */
+        wallet: (organizationId) => this.request('GET', '/v1/billing/tokens', { query: { organization_id: organizationId } }).then((r) => r.wallet),
+        /**
+         * Pay for metered work in tokens (Endorr apps only). Spend before the work and `refund` if it fails;
+         * an idempotency key makes retries count once. Throws EndorrEntitlementError (402 not_entitled /
+         * insufficient_tokens) when it may not. `product` names the product the work belongs to when your
+         * app runs another product's tools.
+         */
+        spend: (input) => this.request('POST', '/v1/billing/tokens/spend', { body: input }),
+        refund: (transactionId) => this.request('DELETE', `/v1/billing/tokens/spend/${enc(transactionId)}`),
+        /** Admin: buy a token pack; the tokens land once Mollie reports it paid. */
+        buyTokens: (organizationId, input) => this.request('POST', `/v1/organizations/${enc(organizationId)}/billing/tokens/checkout`, { body: input }),
+        /** Reconcile one payment with Mollie (a token pack's return page). */
+        refreshPayment: (paymentId) => this.request('POST', `/v1/billing/payments/${enc(paymentId)}/refresh`, { body: {} }).then((r) => r.payment),
+    };
 }
 function enc(s) { return encodeURIComponent(s); }
 //# sourceMappingURL=client.js.map