@fluxfiles/node 0.1.15 → 0.1.17

package/dist/index.d.mts

@@ -96,6 +96,10 @@ interface BaseTokenOptions {
     /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
      *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
     allowCodeEdit?: boolean;
+    /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+     *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+     *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+    allowTerminal?: boolean;
     /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
      *  Even when true, the optimize module must be installed + licensed on the server. */
     allowOptimize?: boolean;
@@ -124,6 +128,17 @@ interface BaseTokenOptions {
      *  identical re-upload is kept as a copy (like Finder / Drive / Dropbox); set true
      *  to save storage by blocking duplicates. */
     dedupeUploads?: boolean;
+    /** Edition preset that defaults a tier's claims (`pro`/`agency`/`enterprise`).
+     *  DX sugar — explicit claim options still win, and the license gates the code. */
+    edition?: 'free' | 'pro' | 'agency' | 'enterprise';
+    /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
+     *  All default off; inert unless the module is installed & licensed on the server. */
+    allowShare?: boolean;
+    allowAiVision?: boolean;
+    allowOcr?: boolean;
+    allowVirusScan?: boolean;
+    allowBackup?: boolean;
+    allowC2pa?: boolean;
     /** Allow downloading a multi-file/-folder selection as a zip (POST /api/fm/zip). Default true. */
     allowZip?: boolean;
     /** Allow extracting a zip in place (POST /api/fm/extract). Default true. */

package/dist/index.d.ts

@@ -96,6 +96,10 @@ interface BaseTokenOptions {
     /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
      *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
     allowCodeEdit?: boolean;
+    /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+     *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+     *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+    allowTerminal?: boolean;
     /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
      *  Even when true, the optimize module must be installed + licensed on the server. */
     allowOptimize?: boolean;
@@ -124,6 +128,17 @@ interface BaseTokenOptions {
      *  identical re-upload is kept as a copy (like Finder / Drive / Dropbox); set true
      *  to save storage by blocking duplicates. */
     dedupeUploads?: boolean;
+    /** Edition preset that defaults a tier's claims (`pro`/`agency`/`enterprise`).
+     *  DX sugar — explicit claim options still win, and the license gates the code. */
+    edition?: 'free' | 'pro' | 'agency' | 'enterprise';
+    /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
+     *  All default off; inert unless the module is installed & licensed on the server. */
+    allowShare?: boolean;
+    allowAiVision?: boolean;
+    allowOcr?: boolean;
+    allowVirusScan?: boolean;
+    allowBackup?: boolean;
+    allowC2pa?: boolean;
     /** Allow downloading a multi-file/-folder selection as a zip (POST /api/fm/zip). Default true. */
     allowZip?: boolean;
     /** Allow extracting a zip in place (POST /api/fm/extract). Default true. */

package/dist/index.js

@@ -136,7 +136,16 @@ function sanitizeVariants(v) {
   }
   return Object.keys(out).length ? out : null;
 }
+var EDITION_PRESETS = {
+  pro: { allow_optimize: true, allow_share: true },
+  agency: { allow_optimize: true, allow_share: true },
+  enterprise: { allow_optimize: true, allow_share: true, allow_virus_scan: true }
+};
 function applyTenantOverrides(payload, opts) {
+  const preset = opts.edition ? EDITION_PRESETS[String(opts.edition).toLowerCase()] : void 0;
+  if (preset) {
+    for (const [k, v] of Object.entries(preset)) if (!(k in payload)) payload[k] = v;
+  }
   if (opts.aiAutoTag !== void 0) payload.ai_auto_tag = !!opts.aiAutoTag;
   if (opts.rateRead && opts.rateRead > 0) payload.rate_read = Math.trunc(opts.rateRead);
   if (opts.rateWrite && opts.rateWrite > 0) payload.rate_write = Math.trunc(opts.rateWrite);
@@ -162,7 +171,14 @@ function applyTenantOverrides(payload, opts) {
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
+  if (opts.allowTerminal !== void 0) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
+  if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
+  if (opts.allowAiVision !== void 0) payload.allow_ai_vision = !!opts.allowAiVision;
+  if (opts.allowOcr !== void 0) payload.allow_ocr = !!opts.allowOcr;
+  if (opts.allowVirusScan !== void 0) payload.allow_virus_scan = !!opts.allowVirusScan;
+  if (opts.allowBackup !== void 0) payload.allow_backup = !!opts.allowBackup;
+  if (opts.allowC2pa !== void 0) payload.allow_c2pa = !!opts.allowC2pa;
   if (opts.autoOptimize !== void 0) payload.auto_optimize = !!opts.autoOptimize;
   if (opts.optimizeQuality && opts.optimizeQuality > 0) payload.optimize_quality = Math.trunc(opts.optimizeQuality);
   if (opts.optimizeFormat === "avif") payload.optimize_format = "avif";

package/dist/index.mjs

@@ -114,7 +114,16 @@ function sanitizeVariants(v) {
   }
   return Object.keys(out).length ? out : null;
 }
+var EDITION_PRESETS = {
+  pro: { allow_optimize: true, allow_share: true },
+  agency: { allow_optimize: true, allow_share: true },
+  enterprise: { allow_optimize: true, allow_share: true, allow_virus_scan: true }
+};
 function applyTenantOverrides(payload, opts) {
+  const preset = opts.edition ? EDITION_PRESETS[String(opts.edition).toLowerCase()] : void 0;
+  if (preset) {
+    for (const [k, v] of Object.entries(preset)) if (!(k in payload)) payload[k] = v;
+  }
   if (opts.aiAutoTag !== void 0) payload.ai_auto_tag = !!opts.aiAutoTag;
   if (opts.rateRead && opts.rateRead > 0) payload.rate_read = Math.trunc(opts.rateRead);
   if (opts.rateWrite && opts.rateWrite > 0) payload.rate_write = Math.trunc(opts.rateWrite);
@@ -140,7 +149,14 @@ function applyTenantOverrides(payload, opts) {
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
+  if (opts.allowTerminal !== void 0) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
+  if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
+  if (opts.allowAiVision !== void 0) payload.allow_ai_vision = !!opts.allowAiVision;
+  if (opts.allowOcr !== void 0) payload.allow_ocr = !!opts.allowOcr;
+  if (opts.allowVirusScan !== void 0) payload.allow_virus_scan = !!opts.allowVirusScan;
+  if (opts.allowBackup !== void 0) payload.allow_backup = !!opts.allowBackup;
+  if (opts.allowC2pa !== void 0) payload.allow_c2pa = !!opts.allowC2pa;
   if (opts.autoOptimize !== void 0) payload.auto_optimize = !!opts.autoOptimize;
   if (opts.optimizeQuality && opts.optimizeQuality > 0) payload.optimize_quality = Math.trunc(opts.optimizeQuality);
   if (opts.optimizeFormat === "avif") payload.optimize_format = "avif";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluxfiles/node",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Server-side Node/TypeScript SDK for minting FluxFiles JWTs (plain + BYOB), byte-compatible with the PHP core",
   "license": "MIT",
   "sideEffects": false,

package/src/token.ts

@@ -97,8 +97,17 @@ function sanitizeVariants(v: BaseTokenOptions['variants']): Record<string, numbe
   return Object.keys(out).length ? out : null;
 }
 
+/** Edition preset (DX sugar): default a tier's claims; explicit opts below win. */
+const EDITION_PRESETS: Record<string, Record<string, boolean>> = {
+  pro: { allow_optimize: true, allow_share: true },
+  agency: { allow_optimize: true, allow_share: true },
+  enterprise: { allow_optimize: true, allow_share: true, allow_virus_scan: true },
+};
+
 /** Copy the optional per-tenant override claims into a payload when set. */
 function applyTenantOverrides(payload: Record<string, unknown>, opts: BaseTokenOptions): void {
+  const preset = opts.edition ? EDITION_PRESETS[String(opts.edition).toLowerCase()] : undefined;
+  if (preset) for (const [k, v] of Object.entries(preset)) if (!(k in payload)) payload[k] = v;
   if (opts.aiAutoTag !== undefined) payload.ai_auto_tag = !!opts.aiAutoTag;
   if (opts.rateRead && opts.rateRead > 0) payload.rate_read = Math.trunc(opts.rateRead);
   if (opts.rateWrite && opts.rateWrite > 0) payload.rate_write = Math.trunc(opts.rateWrite);
@@ -132,7 +141,17 @@ function applyTenantOverrides(payload: Record<string, unknown>, opts: BaseTokenO
   if (opts.allowDownload !== undefined) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== undefined) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== undefined) payload.allow_code_edit = !!opts.allowCodeEdit;
+  // SSH terminal (SFTP disks). Core-standalone — the token must target a real core
+  // (Node mints for one), not a proxy adapter that doesn't serve /api/fm/terminal.
+  if (opts.allowTerminal !== undefined) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== undefined) payload.allow_optimize = !!opts.allowOptimize;
+  // Other paid-module claims (inert unless the module is installed + licensed).
+  if (opts.allowShare !== undefined) payload.allow_share = !!opts.allowShare;
+  if (opts.allowAiVision !== undefined) payload.allow_ai_vision = !!opts.allowAiVision;
+  if (opts.allowOcr !== undefined) payload.allow_ocr = !!opts.allowOcr;
+  if (opts.allowVirusScan !== undefined) payload.allow_virus_scan = !!opts.allowVirusScan;
+  if (opts.allowBackup !== undefined) payload.allow_backup = !!opts.allowBackup;
+  if (opts.allowC2pa !== undefined) payload.allow_c2pa = !!opts.allowC2pa;
   if (opts.autoOptimize !== undefined) payload.auto_optimize = !!opts.autoOptimize;
   if (opts.optimizeQuality && opts.optimizeQuality > 0) payload.optimize_quality = Math.trunc(opts.optimizeQuality);
   if (opts.optimizeFormat === 'avif') payload.optimize_format = 'avif';

package/src/types.ts

@@ -100,6 +100,10 @@ export interface BaseTokenOptions {
   /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
    *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
   allowCodeEdit?: boolean;
+  /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+   *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+   *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+  allowTerminal?: boolean;
   /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
    *  Even when true, the optimize module must be installed + licensed on the server. */
   allowOptimize?: boolean;
@@ -128,6 +132,17 @@ export interface BaseTokenOptions {
    *  identical re-upload is kept as a copy (like Finder / Drive / Dropbox); set true
    *  to save storage by blocking duplicates. */
   dedupeUploads?: boolean;
+  /** Edition preset that defaults a tier's claims (`pro`/`agency`/`enterprise`).
+   *  DX sugar — explicit claim options still win, and the license gates the code. */
+  edition?: 'free' | 'pro' | 'agency' | 'enterprise';
+  /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
+   *  All default off; inert unless the module is installed & licensed on the server. */
+  allowShare?: boolean;
+  allowAiVision?: boolean;
+  allowOcr?: boolean;
+  allowVirusScan?: boolean;
+  allowBackup?: boolean;
+  allowC2pa?: boolean;
   /** Allow downloading a multi-file/-folder selection as a zip (POST /api/fm/zip). Default true. */
   allowZip?: boolean;
   /** Allow extracting a zip in place (POST /api/fm/extract). Default true. */