@insignia-education/api-sdk-js 0.17.2 → 0.18.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insignia-education/api-sdk-js",
-  "version": "0.17.2",
+  "version": "0.18.0",
   "description": "JavaScript SDK for the Insignia Education API",
   "main": "index.js",
   "type": "module",

package/src/api/v1/Users.js

@@ -17,6 +17,8 @@ export default class Users {
     assignable()              { return this.#client.get('/users/assignable'); }
     /** Employee-only: users assignable as a course teacher (super-admins, admins, employees, teachers). */
     assignableTeachers()      { return this.#client.get('/users/assignable-teachers'); }
+    /** Employee-only: employee-tier users (super-admins, admins, employees), for the bug report "assign to" picker. */
+    assignableEmployees()     { return this.#client.get('/users/assignable-employees'); }
     /** Employee-only: paginated list of teacher-type users, for the admin Teachers view. */
     teachers({ page = 1, perPage = 15 } = {}) {
         return this.#client.get('/users/teachers', { page, per_page: perPage });
@@ -202,6 +204,22 @@ export default class Users {
         };
     }
 
+    /**
+     * Logged-in devices/sessions. Rows are only ever created by the auth flow
+     * itself (a real login/refresh) — this is read + revoke, never create.
+     */
+    devices(userId) {
+        const base = `/users/${userId}/devices`;
+        const client = this.#client;
+        return {
+            get: () => client.get(base),
+            /** Revoke one device by its id — that device's token stops being accepted immediately. */
+            delete: (id) => client.del(`${base}/${id}`),
+            /** "Log out all other devices" — keeps the caller's own current session intact. */
+            deleteAll: () => client.del(base),
+        };
+    }
+
     experiences(userId) {
         const base = `/users/${userId}/experiences`;
         const client = this.#client;