@insignia-education/api-sdk-js 0.15.87 → 0.15.92

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insignia-education/api-sdk-js",
-  "version": "0.15.87",
+  "version": "0.15.92",
   "description": "JavaScript SDK for the Insignia Education API",
   "main": "index.js",
   "type": "module",

package/src/Client.js

@@ -127,5 +127,5 @@ export default class InsigniaClient {
     post(path, body = null) { return this.#request('POST',   path, body); }
     put(path, body = null)  { return this.#request('PUT',    path, body); }
     patch(path, body = null){ return this.#request('PATCH',  path, body); }
-    del(path)               { return this.#request('DELETE', path); }
+    del(path, body = null)  { return this.#request('DELETE', path, body); }
 }

package/src/api/v1/Auth.js

@@ -21,4 +21,6 @@ export default class Auth {
     emailVerify(data)           { return this.#client.post('/auth/email-verify', data); }
     /** Second login step when two_factor_required: exchange { pin } for a session. */
     twoFactor(data)             { return this.#client.post('/auth/2fa', data); }
+    /** GDPR Art. 8 — clicked by the guardian from the consent email, not the account holder; no session is created. */
+    guardianConsentConfirm(hash) { return this.#client.post(`/guardian-consent/${hash}`); }
 }

package/src/api/v1/Blocks.js

@@ -0,0 +1,12 @@
+/** Admin-only: IP blocks (the blocks table — ip-scoped only, see App\Models\Block). */
+export default class Blocks {
+    #client;
+
+    constructor(client) {
+        this.#client = client;
+    }
+
+    get(id = null)  { return id ? this.#client.get(`/blocks/${id}`) : this.#client.get('/blocks'); }
+    create(data)    { return this.#client.put('/blocks', data); }
+    delete(id)      { return this.#client.del(`/blocks/${id}`); }
+}

package/src/api/v1/Employee.js

@@ -27,6 +27,9 @@ export default class Employee {
             /** Reassign a single session's teacher (not the whole course_date — that's a course-config action). */
             changeSessionTeacher: (sessionId, teacherId) =>
                 this.#client.patch(`${base}/sessions/${sessionId}/teacher`, { teacher_id: teacherId }),
+            /** Freeform Zoom meeting for the requesting employee (no course, no student roster). time is "HH:mm". */
+            createCustomMeeting: (topic, date, time, duration) =>
+                this.#client.post(`${base}/custom-meeting`, { topic, date, time, duration }),
         };
     }
 }

package/src/api/v1/Users.js

@@ -217,6 +217,18 @@ export default class Users {
     /** Sales-and-above: re-run the course/individual-session access reconciliation for this user on demand. */
     syncAccess(userId) { return this.#client.post(`/users/${userId}/sync-access`); }
 
+    /** Admin-only: total blockade — enforced on every authenticated route, not just new logins. */
+    block(userId, reason) { return this.#client.post(`/users/${userId}/block`, { reason }); }
+
+    /** Admin-only: lifts a hard block. */
+    unblock(userId) { return this.#client.post(`/users/${userId}/unblock`); }
+
+    /** GDPR erasure request — self-service or sales-and-above, always confirmed with the ACTOR's own current password. Soft-deletes now; the API permanently purges it after a 1-year retention window. */
+    delete(userId, password) { return this.#client.del(`/users/${userId}`, { password }); }
+
+    /** GDPR access/portability request (Art. 15/20) — self-service or sales-and-above. Runs synchronously and returns the DataRequest with `pdf_url`/`json_url` already populated. */
+    exportData(userId) { return this.#client.post(`/users/${userId}/data-export`); }
+
     /** Notifications are created by internal services, not over the API — `resend()` is the one exception (sales-and-above). */
     notifications(userId) {
         const base = `/users/${userId}/notifications`;

package/src/api/v1/index.js

@@ -19,6 +19,7 @@ import Forums from './Forums.js';
 import Hashes from './Hashes.js';
 import Insignias from './Insignias.js';
 import Languages from './Languages.js';
+import Blocks from './Blocks.js';
 import MailBlacklist from './MailBlacklist.js';
 import MailingLists from './MailingLists.js';
 import Offers from './Offers.js';
@@ -75,6 +76,7 @@ export default class InsigniaApiV1 extends InsigniaApi {
         this.insignias            = new Insignias(this);
         this.languages            = new Languages(this);
         this.mailBlacklist        = new MailBlacklist(this);
+        this.blocks               = new Blocks(this);
         this.mailingLists         = new MailingLists(this);
         this.offers               = new Offers(this);
         this.organizations        = new Organizations(this);