@fluxfiles/node 0.1.16 → 0.1.17

package/dist/index.d.mts

@@ -96,6 +96,10 @@ interface BaseTokenOptions {
     /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
      *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
     allowCodeEdit?: boolean;
+    /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+     *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+     *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+    allowTerminal?: boolean;
     /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
      *  Even when true, the optimize module must be installed + licensed on the server. */
     allowOptimize?: boolean;

package/dist/index.d.ts

@@ -96,6 +96,10 @@ interface BaseTokenOptions {
     /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
      *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
     allowCodeEdit?: boolean;
+    /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+     *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+     *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+    allowTerminal?: boolean;
     /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
      *  Even when true, the optimize module must be installed + licensed on the server. */
     allowOptimize?: boolean;

package/dist/index.js

@@ -171,6 +171,7 @@ function applyTenantOverrides(payload, opts) {
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
+  if (opts.allowTerminal !== void 0) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
   if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
   if (opts.allowAiVision !== void 0) payload.allow_ai_vision = !!opts.allowAiVision;

package/dist/index.mjs

@@ -149,6 +149,7 @@ function applyTenantOverrides(payload, opts) {
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
+  if (opts.allowTerminal !== void 0) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
   if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
   if (opts.allowAiVision !== void 0) payload.allow_ai_vision = !!opts.allowAiVision;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluxfiles/node",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Server-side Node/TypeScript SDK for minting FluxFiles JWTs (plain + BYOB), byte-compatible with the PHP core",
   "license": "MIT",
   "sideEffects": false,

package/src/token.ts

@@ -141,6 +141,9 @@ function applyTenantOverrides(payload: Record<string, unknown>, opts: BaseTokenO
   if (opts.allowDownload !== undefined) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== undefined) payload.allow_chmod = !!opts.allowChmod;
   if (opts.allowCodeEdit !== undefined) payload.allow_code_edit = !!opts.allowCodeEdit;
+  // SSH terminal (SFTP disks). Core-standalone — the token must target a real core
+  // (Node mints for one), not a proxy adapter that doesn't serve /api/fm/terminal.
+  if (opts.allowTerminal !== undefined) payload.allow_terminal = !!opts.allowTerminal;
   if (opts.allowOptimize !== undefined) payload.allow_optimize = !!opts.allowOptimize;
   // Other paid-module claims (inert unless the module is installed + licensed).
   if (opts.allowShare !== undefined) payload.allow_share = !!opts.allowShare;

package/src/types.ts

@@ -100,6 +100,10 @@ export interface BaseTokenOptions {
   /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
    *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
   allowCodeEdit?: boolean;
+  /** Allow the SSH terminal (POST /api/fm/terminal) on an SFTP disk. Default **false** — grants shell
+   *  access as the SSH user, so it's opt-in. Core-standalone: the token must target a real core
+   *  (this SDK does), not a proxy adapter that doesn't serve /api/fm/terminal. */
+  allowTerminal?: boolean;
   /** Allow the paid Optimization module (POST /api/fm/optimize). Default **false** — opt-in.
    *  Even when true, the optimize module must be installed + licensed on the server. */
   allowOptimize?: boolean;