@iteradian-rpc/sdk 1.0.1 → 1.1.1

package/README.md

@@ -166,11 +166,15 @@ client.clearAccessToken();
 // Login (token set automatically)
 const tokens = await client.auth.login({ email: "...", password: "..." });
 
-// Register
-const tokens = await client.auth.register({
+// Register — does NOT sign in. Answers { message, email } and emails a
+// confirmation link; log in once the address is confirmed.
+// acceptedTerms is required: pass true only after the user agreed to the
+// Terms of Service, Privacy Policy and DPA (https://iteradian.com/terms,
+// /privacy, /dpa). The server rejects registration (400) otherwise.
+const { message } = await client.auth.register({
   email: "...",
   password: "...",
-  name: "...",
+  acceptedTerms: true,
 });
 
 // Refresh token
@@ -184,7 +188,7 @@ const setup = await client.auth.enable2FA({ password: "..." });
 console.log(`Secret: ${setup.secret}`);
 console.log(`QR Code: ${setup.qrCode}`);
 await client.auth.verify2FA({ code: "123456" });
-await client.auth.disable2FA({ password: "...", code: "123456" });
+await client.auth.disable2FA("password", "123456"); // password + current 6-digit TOTP code
 
 // Magic Link
 await client.auth.sendMagicLink({ email: "user@example.com" });
@@ -208,11 +212,23 @@ await client.organizations.delete(orgId);
 
 // Members
 const members = await client.organizations.listMembers(orgId);
-const member = await client.organizations.inviteMember(orgId, {
-  email: "user@example.com",
-  role: "member",
-});
 await client.organizations.removeMember(orgId, memberId);
+
+// Invitations — inviting creates a pending invite; the invitee becomes a
+// member only after accepting it (signed in, verified email).
+const invite = await client.organizations.inviteMember(orgId, {
+  email: "user@example.com",
+  role: "developer",
+}); // { id, email, role, status: "pending", expiresAt, createdAt }
+const open = await client.organizations.listInvites(orgId);
+await client.organizations.revokeInvite(orgId, invite.id);
+
+// As the invitee
+const { invites } = await client.organizations.listMyInvites();
+await client.organizations.acceptInvite(invites[0].id); // or declineInvite()
+// A user who has not accepted the current terms version gets 403
+// (TERMS_ACCEPTANCE_REQUIRED); once they agree, accept with:
+await client.organizations.acceptInvite(invites[0].id, { acceptedTerms: true });
 ```
 
 ### API Keys (`client.apiKeys`)
@@ -321,7 +337,11 @@ const stats = await client.logs.getStats(orgId, { period: "24h" });
 
 ```typescript
 const sub = await client.subscriptions.get(orgId);
-const updated = await client.subscriptions.changePlan(orgId, { planId: "pro" });
+// The caller confirms the user accepted the plan-change billing terms; the
+// server rejects the change (400) unless acceptedTerms is true.
+const updated = await client.subscriptions.changePlan(orgId, "pro", {
+  acceptedTerms: true,
+});
 const cancelled = await client.subscriptions.cancel(orgId);
 const reactivated = await client.subscriptions.reactivate(orgId);
 const invoices = await client.subscriptions.getInvoices(orgId);
@@ -365,7 +385,8 @@ All types are exported from the package and defined in `src/types.ts` (538 lines
 | Type              | Fields                                |
 | ----------------- | ------------------------------------- |
 | `LoginRequest`    | `email`, `password`, `twoFactorCode?` |
-| `RegisterRequest` | `email`, `password`, `name`           |
+| `RegisterRequest` | `email`, `password`                   |
+| `RegisterResponse` | `message`, `email` (no tokens)       |
 | `AuthTokens`      | `accessToken`, `refreshToken`, `user` |
 | `TwoFASetup`      | `secret`, `qrCode`                    |
 
@@ -377,6 +398,9 @@ All types are exported from the package and defined in `src/types.ts` (538 lines
 | `OrgMember`           | `id`, `userId`, `email`, `role`, `joinedAt`    |
 | `CreateOrgRequest`    | `name`, `slug`                                 |
 | `InviteMemberRequest` | `email`, `role`                                |
+| `OrgInvite`           | `id`, `email`, `role`, `status`, `expiresAt`, `createdAt`, `invitedBy?` |
+| `MyInvites`           | `emailVerified`, `invites` (`MyInvite[]`)      |
+| `InviteAcceptance`    | `organizationId`, `membershipId`, `role`       |
 
 ### API Key Types
 
@@ -449,6 +473,16 @@ try {
 }
 ```
 
+### Terms acceptance (403 `TERMS_ACCEPTANCE_REQUIRED`)
+
+After Iteradian publishes a new version of the Terms of Service, Privacy
+Policy or DPA, any write (POST/PUT/PATCH/DELETE) made with a user JWT may
+answer `IteradianError` with `statusCode` 403 until the user accepts the new
+version in the dashboard (the response body carries
+`code: "TERMS_ACCEPTANCE_REQUIRED"`, `termsVersion` and `termsUrl`). API keys
+and agent tokens are unaffected. `organizations.acceptInvite(id, {
+acceptedTerms: true })` records the acceptance as part of joining.
+
 On a gateway call the same error also carries the JSON-RPC detail, which is how
 you tell "wait a second" from "you are out of quota until the period rolls
 over":
@@ -465,6 +499,9 @@ try {
   if (err instanceof IteradianError) {
     if (err.isRateLimited) {
       // -32005. Wait err.retryAfter seconds and try again.
+    } else if (err.isDailyLimitReached) {
+      // -32008. This API key's daily limit is used up. err.data carries
+      // { dailyLimit, used, cost, resetsAt }; resetsAt is the next 00:00 UTC.
     } else if (err.isQuotaExhausted) {
       // -32006 or -32007. Retrying will not help: err.data.resetsAt says when
       // the allowance returns, and the cap needs a plan change.
@@ -489,8 +526,9 @@ The SDK automatically retries:
 - **5xx Server Errors** — with exponential backoff
 - **429 Too Many Requests**, but **only** `-32005` (rate or concurrency limit).
   `-32006` (monthly quota exhausted) and `-32007` (overage spend cap) do not
-  recover until the billing period rolls over, so retrying them burns your time
-  for a guaranteed 429.
+  recover until the billing period rolls over, and `-32008` (per-API-key daily
+  limit) not until `error.data.resetsAt` (the next 00:00 UTC), so retrying
+  them burns your time for a guaranteed 429.
 
 Backoff formula: `min(1000 * 2^(attempt-1), 10000)` ms, or the gateway's own
 `retryAfter` hint when it gives one — capped at 30 seconds either way.
@@ -622,10 +660,61 @@ This SDK takes both, and defaults the gateway to `https://rpc.iteradian.com`.
   organization holds. Creating more keys does not raise them.
 - The gateway returns HTTP 429 with a JSON-RPC error body:
   `-32005` rate limited (retry after `error.data.retryAfter`), `-32006` monthly
-  quota exhausted, `-32007` overage spend cap reached. The last two do not
-  recover until the billing period rolls over, so retrying them is wasted work.
+  quota exhausted, `-32007` overage spend cap reached, `-32008` the API key's
+  own daily limit reached (`error.data = { dailyLimit, used, cost, resetsAt }`).
+  None of the last three recover before `resetsAt` (the billing period roll-over,
+  or the next 00:00 UTC for `-32008`), so retrying them is wasted work.
+
+Plans (defaults; an admin can change them): Free 25 rps / 3M per month with no
+overage (requests stop at the quota, no card needed), Developer 100 rps / 5M
+with overage at $6 per million, Professional 500 rps / 30M at $4.50 per million,
+Dedicated per contract from $4 per million. Trials are offered on Developer
+only; a trial that ends unpaid falls back to Free. See `sdks/SDK_CONTRACT.md`
+for the full table.
+
+### WebSocket
+
+The gateway also serves JSON-RPC over WebSocket at
+`wss://rpc.iteradian.com/ws/v1/{network}`. This SDK does not wrap it on
+purpose: connect with any WebSocket client, such as ethers
+`WebSocketProvider`, viem's `webSocket()` transport, or the built-in
+`WebSocket` in browsers and Node 22+. Authenticate with the
+`X-Api-Key` header, `Authorization: Bearer <key>`, or `?apiKey=<key>` on the
+URL (browsers cannot set headers on a WebSocket).
 
-Plans: Developer 20 rps / 5M per month, Professional 100 rps / 30M, Dedicated
-per contract. See `sdks/SDK_CONTRACT.md` for the full table.
+```typescript
+const ws = new WebSocket(
+  "wss://rpc.iteradian.com/ws/v1/eth-mainnet?apiKey=itrd_live_...",
+);
+
+ws.addEventListener("open", () => {
+  ws.send(JSON.stringify({
+    jsonrpc: "2.0", id: 1, method: "eth_subscribe", params: ["newHeads"],
+  }));
+});
+
+ws.addEventListener("message", (event) => {
+  const msg = JSON.parse(event.data);
+  if (msg.method === "eth_subscription") {
+    console.log("new head", msg.params.result.number);
+  }
+});
+
+ws.addEventListener("close", (event) => {
+  // 1012: node restarted, reconnect and re-subscribe. 4003: key revoked, stop.
+  console.log("closed", event.code);
+});
+```
 
-**WebSocket is not available.** The gateway serves HTTPS JSON-RPC only.
+- Each message you send is charged like an HTTP request (a batch of N costs N).
+  Subscription notifications pushed to you are not charged.
+- A message refused by a limit gets an ordinary JSON-RPC error under that
+  call's `id`, with the same codes as above (`-32005` to `-32008`). The socket
+  stays open.
+- An organization can hold `max(5, floor(concurrency / 4))` streams at once;
+  past that the upgrade is refused with HTTP 429. Other upgrade failures: 400
+  bad path, 401/403 bad key, 404 unknown network, 503 no WebSocket-capable node.
+- Close code `1012` means the upstream node restarted: reconnect and
+  re-subscribe. `4003` means the key was revoked or the organization suspended
+  (keys are re-checked every 60 s): do not reconnect.
+- The server pings every 30 s. Messages are limited to 1 MB.

package/dist/index.d.mts

@@ -1,6 +1,13 @@
 interface RegisterRequest {
     email: string;
     password: string;
+    /**
+     * The caller confirms the user agreed to the Terms of Service, Privacy
+     * Policy and DPA (https://iteradian.com/terms, /privacy, /dpa). Always
+     * sent; the server rejects registration (400) unless this is `true`.
+     */
+    acceptedTerms: boolean;
+    /** @deprecated Ignored by the API. */
     organizationName?: string;
 }
 interface LoginRequest {
@@ -9,6 +16,15 @@ interface LoginRequest {
     twoFactorCode?: string;
     backupCode?: string;
 }
+/**
+ * What `POST /auth/register` answers — whether or not the address already has
+ * an account (so it cannot be used to probe for accounts). No session is
+ * created: the user confirms their address from the email, then logs in.
+ */
+interface RegisterResponse {
+    message: string;
+    email: string;
+}
 interface AuthTokens {
     accessToken: string;
     refreshToken: string;
@@ -49,6 +65,53 @@ interface OrgMember {
     role: OrgRole;
     joinedAt: string;
 }
+/** An invitation to join an organization, as its owners/admins see it. */
+interface OrgInvite {
+    id: string;
+    email: string;
+    role: OrgRole;
+    /** "expired" invitations stay listed until revoked or re-sent. */
+    status: "pending" | "expired";
+    expiresAt: string;
+    createdAt: string;
+    /** Email of the member who sent it. */
+    invitedBy?: string | null;
+}
+/** An invitation addressed to the signed-in user. */
+interface MyInvite {
+    id: string;
+    role: OrgRole;
+    expiresAt: string;
+    createdAt: string;
+    invitedBy: string | null;
+    organization: {
+        id: string;
+        name: string;
+        avatarUrl?: string | null;
+        avatarUrlDark?: string | null;
+    };
+}
+interface MyInvites {
+    /** Invitations can only be accepted once the user's email is verified. */
+    emailVerified: boolean;
+    invites: MyInvite[];
+}
+/** The membership created by accepting an invitation. */
+/** Options for `organizations.acceptInvite`. */
+interface AcceptInviteOptions {
+    /**
+     * The caller confirms the user agreed to the current Terms of Service,
+     * Privacy Policy and DPA. Only needed when the user has not accepted the
+     * current terms version yet; without it the API answers 403
+     * `TERMS_ACCEPTANCE_REQUIRED`. Sent only when given.
+     */
+    acceptedTerms?: boolean;
+}
+interface InviteAcceptance {
+    organizationId: string;
+    membershipId: string;
+    role: OrgRole;
+}
 interface UserPermissions {
     role: OrgRole;
     roleLabel: string;
@@ -349,6 +412,14 @@ interface LogQueryParams {
     sortBy?: "timestamp" | "latencyMs" | "statusCode";
     sortOrder?: "asc" | "desc";
 }
+/** Options for `subscriptions.changePlan`. */
+interface ChangePlanOptions {
+    /**
+     * The caller confirms the user accepted the plan-change billing terms.
+     * The server rejects the change (400) unless this is `true`.
+     */
+    acceptedTerms: boolean;
+}
 interface Subscription {
     id: string;
     organizationId: string;
@@ -377,7 +448,21 @@ interface PlanLimits {
     endpoints: number;
     teamMembers: number;
     logRetentionDays: number;
-}
+    /**
+     * Limits sold as something other than a plain number, keyed by the API's
+     * limit name (`rps`, `concurrency`, `maxApiKeys`, `monthlyRequests`,
+     * `overageRatePer1k`, `overageCapUsd`). `"unlimited"`: not enforced per
+     * plan. `"custom"`: negotiated per contract. Such a limit carries no number.
+     * Absent on plans where every limit is a number.
+     */
+    limitModes?: Partial<Record<PlanLimitKey, PlanLimitMode>>;
+    /** Display text for those limits, e.g. "Quoted per contract". */
+    limitLabels?: Partial<Record<PlanLimitKey, string>>;
+}
+/** How a plan limit is sold. Absent from `limitModes` means a plain number. */
+type PlanLimitMode = "unlimited" | "custom";
+/** Limit names that may appear in `PlanLimits.limitModes`. */
+type PlanLimitKey = "rps" | "concurrency" | "maxApiKeys" | "monthlyRequests" | "overageRatePer1k" | "overageCapUsd";
 interface Invoice {
     id: string;
     amount: number;
@@ -482,6 +567,8 @@ declare class IteradianError extends Error {
      *   -32005  rate limit or concurrency limit exceeded (retry shortly)
      *   -32006  monthly quota exhausted (retrying will not help until `resetsAt`)
      *   -32007  overage spend limit reached (same — needs a plan change)
+     *   -32008  per-API-key daily limit reached (no retry until `data.resetsAt`,
+     *           the next 00:00 UTC)
      */
     readonly rpcCode?: number;
     /** Seconds to wait before retrying, when the gateway supplied one. */
@@ -493,8 +580,18 @@ declare class IteradianError extends Error {
         retryAfter?: number;
         data?: Record<string, unknown>;
     });
-    /** True when the request failed because the subscription is out of allowance. */
+    /**
+     * True when the request failed because an allowance is used up and retrying
+     * will not help until it resets: the subscription quota (-32006), the
+     * overage spend cap (-32007) or the API key's daily limit (-32008).
+     */
     get isQuotaExhausted(): boolean;
+    /**
+     * True when the API key's own daily limit is reached (-32008). `data` then
+     * carries `{ dailyLimit, used, cost, resetsAt }`; `resetsAt` is the next
+     * 00:00 UTC.
+     */
+    get isDailyLimitReached(): boolean;
     /** True when the request was throttled and is worth retrying. */
     get isRateLimited(): boolean;
 }
@@ -530,8 +627,18 @@ declare class HttpClient {
 declare class AuthResource {
     private http;
     constructor(http: HttpClient);
-    /** Register a new user account */
-    register(data: RegisterRequest): Promise<AuthTokens>;
+    /**
+     * Register a new user account. Does not sign in: the API answers
+     * `{ message, email }` (the same for an address that already has an
+     * account) and emails a confirmation link. Call `login()` once the address
+     * is confirmed.
+     *
+     * The server rejects registration (400) unless the user agreed to the
+     * Terms of Service, Privacy Policy and DPA, so `data.acceptedTerms` is
+     * required and always sent. Pass `acceptedTerms: true` only after the user
+     * has ticked the agreement.
+     */
+    register(data: RegisterRequest): Promise<RegisterResponse>;
     /** Login with email/password (optionally with 2FA code) */
     login(data: LoginRequest): Promise<AuthTokens>;
     /** Logout current session */
@@ -587,11 +694,37 @@ declare class OrganizationsResource {
     leave(orgId: string): Promise<void>;
     /** List organization members */
     listMembers(orgId: string): Promise<OrgMember[]>;
-    /** Invite a member to the organization */
+    /**
+     * Invite someone to the organization by email. Creates (or refreshes) a
+     * pending invitation — nobody becomes a member until the invitee accepts
+     * it while signed in with a verified address.
+     */
     inviteMember(orgId: string, data: {
         email: string;
         role: string;
-    }): Promise<OrgMember>;
+    }): Promise<OrgInvite>;
+    /** Open invitations of the organization (owner/admin) */
+    listInvites(orgId: string): Promise<OrgInvite[]>;
+    /** Revoke an open invitation (owner/admin) */
+    revokeInvite(orgId: string, inviteId: string): Promise<{
+        message: string;
+    }>;
+    /** Invitations addressed to the signed-in user */
+    listMyInvites(): Promise<MyInvites>;
+    /**
+     * Accept an invitation addressed to the signed-in user.
+     *
+     * If the user has not accepted the current terms version yet, the API
+     * answers 403 (`TERMS_ACCEPTANCE_REQUIRED`) unless
+     * `{ acceptedTerms: true }` is passed — only after the user agreed to the
+     * Terms of Service, Privacy Policy and DPA. `acceptedTerms` is sent only
+     * when given.
+     */
+    acceptInvite(inviteId: string, options?: AcceptInviteOptions): Promise<InviteAcceptance>;
+    /** Decline an invitation addressed to the signed-in user */
+    declineInvite(inviteId: string): Promise<{
+        message: string;
+    }>;
     /** Update a member's role */
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<OrgMember>;
     /** Remove a member from the organization */
@@ -741,8 +874,15 @@ declare class SubscriptionsResource {
     constructor(http: HttpClient);
     /** Get current subscription */
     get(orgId: string): Promise<Subscription>;
-    /** Change subscription plan */
-    changePlan(orgId: string, planId: string): Promise<Subscription>;
+    /**
+     * Change subscription plan.
+     *
+     * The server rejects a plan change unless the caller confirms the
+     * plan-change billing terms, so `options.acceptedTerms` is required and
+     * always sent. Pass `{ acceptedTerms: true }` only after the user has
+     * accepted the terms.
+     */
+    changePlan(orgId: string, planId: string, options: ChangePlanOptions): Promise<Subscription>;
     /** Cancel subscription */
     cancel(orgId: string): Promise<Subscription>;
     /** Reactivate a cancelled subscription */
@@ -837,7 +977,7 @@ declare class RpcResource {
  *
  * @example
  * ```typescript
- * import { IteradianClient } from '@iteradian/sdk';
+ * import { IteradianClient } from '@iteradian-rpc/sdk';
  *
  * const client = new IteradianClient({
  *   baseUrl: 'https://api.iteradian.com/api/v1',
@@ -890,4 +1030,5 @@ declare class IteradianClient {
     clearAccessToken(): void;
 }
 
-export { type Alert, type AlertChannel, type AlertCondition, type AlertMetric, type AlertRule, type AlertSeverity, type AlertStatus, AlertsResource, type ApiError, type ApiKey, type ApiKeyAnalytics, type ApiKeyWithSecret, ApiKeysResource, type ApiResponse, AuthResource, type AuthTokens, type CreateAlertChannelRequest, type CreateAlertRuleRequest, type CreateApiKeyRequest, type CreateEndpointRequest, type CreateTicketRequest, type DailyUsage, type DashboardData, DashboardResource, type DataPoint, type Endpoint, type EndpointMetric, type EndpointRegion, type EndpointStatus, EndpointsResource, type HealthStatus, type Invoice, IteradianClient, type IteradianConfig, IteradianError, type JsonRpcError, type JsonRpcRequest, type JsonRpcResponse, type LogFilterOptions, type LogQueryParams, type LogStatus, type LoginRequest, LogsResource, type LogsResponse, type Membership, type Network, type NetworkType, type OrgMember, type OrgRole, type Organization, OrganizationsResource, type PaginatedResponse, type Plan, type PlanLimits, PlansResource, type QuickStats, type RegisterRequest, type RequestLog, RpcResource, type Subscription, SubscriptionsResource, SupportResource, type SupportTicket, type TicketCategory, type TicketMessage, type TicketPriority, type TicketStatus, type TwoFASetup, type UpdateApiKeyRequest, type UpdateEndpointRequest, type UsageByMethod, type UsageByNetwork, type UsageByRegion, UsageResource, type UsageSummary, type User, type UserPermissions };
+export { AlertsResource, ApiKeysResource, AuthResource, DashboardResource, EndpointsResource, IteradianClient, IteradianError, LogsResource, OrganizationsResource, PlansResource, RpcResource, SubscriptionsResource, SupportResource, UsageResource };
+export type { AcceptInviteOptions, Alert, AlertChannel, AlertCondition, AlertMetric, AlertRule, AlertSeverity, AlertStatus, ApiError, ApiKey, ApiKeyAnalytics, ApiKeyWithSecret, ApiResponse, AuthTokens, ChangePlanOptions, CreateAlertChannelRequest, CreateAlertRuleRequest, CreateApiKeyRequest, CreateEndpointRequest, CreateTicketRequest, DailyUsage, DashboardData, DataPoint, Endpoint, EndpointMetric, EndpointRegion, EndpointStatus, HealthStatus, InviteAcceptance, Invoice, IteradianConfig, JsonRpcError, JsonRpcRequest, JsonRpcResponse, LogFilterOptions, LogQueryParams, LogStatus, LoginRequest, LogsResponse, Membership, MyInvite, MyInvites, Network, NetworkType, OrgInvite, OrgMember, OrgRole, Organization, PaginatedResponse, Plan, PlanLimitKey, PlanLimitMode, PlanLimits, QuickStats, RegisterRequest, RegisterResponse, RequestLog, Subscription, SupportTicket, TicketCategory, TicketMessage, TicketPriority, TicketStatus, TwoFASetup, UpdateApiKeyRequest, UpdateEndpointRequest, UsageByMethod, UsageByNetwork, UsageByRegion, UsageSummary, User, UserPermissions };

package/dist/index.d.ts

@@ -1,6 +1,13 @@
 interface RegisterRequest {
     email: string;
     password: string;
+    /**
+     * The caller confirms the user agreed to the Terms of Service, Privacy
+     * Policy and DPA (https://iteradian.com/terms, /privacy, /dpa). Always
+     * sent; the server rejects registration (400) unless this is `true`.
+     */
+    acceptedTerms: boolean;
+    /** @deprecated Ignored by the API. */
     organizationName?: string;
 }
 interface LoginRequest {
@@ -9,6 +16,15 @@ interface LoginRequest {
     twoFactorCode?: string;
     backupCode?: string;
 }
+/**
+ * What `POST /auth/register` answers — whether or not the address already has
+ * an account (so it cannot be used to probe for accounts). No session is
+ * created: the user confirms their address from the email, then logs in.
+ */
+interface RegisterResponse {
+    message: string;
+    email: string;
+}
 interface AuthTokens {
     accessToken: string;
     refreshToken: string;
@@ -49,6 +65,53 @@ interface OrgMember {
     role: OrgRole;
     joinedAt: string;
 }
+/** An invitation to join an organization, as its owners/admins see it. */
+interface OrgInvite {
+    id: string;
+    email: string;
+    role: OrgRole;
+    /** "expired" invitations stay listed until revoked or re-sent. */
+    status: "pending" | "expired";
+    expiresAt: string;
+    createdAt: string;
+    /** Email of the member who sent it. */
+    invitedBy?: string | null;
+}
+/** An invitation addressed to the signed-in user. */
+interface MyInvite {
+    id: string;
+    role: OrgRole;
+    expiresAt: string;
+    createdAt: string;
+    invitedBy: string | null;
+    organization: {
+        id: string;
+        name: string;
+        avatarUrl?: string | null;
+        avatarUrlDark?: string | null;
+    };
+}
+interface MyInvites {
+    /** Invitations can only be accepted once the user's email is verified. */
+    emailVerified: boolean;
+    invites: MyInvite[];
+}
+/** The membership created by accepting an invitation. */
+/** Options for `organizations.acceptInvite`. */
+interface AcceptInviteOptions {
+    /**
+     * The caller confirms the user agreed to the current Terms of Service,
+     * Privacy Policy and DPA. Only needed when the user has not accepted the
+     * current terms version yet; without it the API answers 403
+     * `TERMS_ACCEPTANCE_REQUIRED`. Sent only when given.
+     */
+    acceptedTerms?: boolean;
+}
+interface InviteAcceptance {
+    organizationId: string;
+    membershipId: string;
+    role: OrgRole;
+}
 interface UserPermissions {
     role: OrgRole;
     roleLabel: string;
@@ -349,6 +412,14 @@ interface LogQueryParams {
     sortBy?: "timestamp" | "latencyMs" | "statusCode";
     sortOrder?: "asc" | "desc";
 }
+/** Options for `subscriptions.changePlan`. */
+interface ChangePlanOptions {
+    /**
+     * The caller confirms the user accepted the plan-change billing terms.
+     * The server rejects the change (400) unless this is `true`.
+     */
+    acceptedTerms: boolean;
+}
 interface Subscription {
     id: string;
     organizationId: string;
@@ -377,7 +448,21 @@ interface PlanLimits {
     endpoints: number;
     teamMembers: number;
     logRetentionDays: number;
-}
+    /**
+     * Limits sold as something other than a plain number, keyed by the API's
+     * limit name (`rps`, `concurrency`, `maxApiKeys`, `monthlyRequests`,
+     * `overageRatePer1k`, `overageCapUsd`). `"unlimited"`: not enforced per
+     * plan. `"custom"`: negotiated per contract. Such a limit carries no number.
+     * Absent on plans where every limit is a number.
+     */
+    limitModes?: Partial<Record<PlanLimitKey, PlanLimitMode>>;
+    /** Display text for those limits, e.g. "Quoted per contract". */
+    limitLabels?: Partial<Record<PlanLimitKey, string>>;
+}
+/** How a plan limit is sold. Absent from `limitModes` means a plain number. */
+type PlanLimitMode = "unlimited" | "custom";
+/** Limit names that may appear in `PlanLimits.limitModes`. */
+type PlanLimitKey = "rps" | "concurrency" | "maxApiKeys" | "monthlyRequests" | "overageRatePer1k" | "overageCapUsd";
 interface Invoice {
     id: string;
     amount: number;
@@ -482,6 +567,8 @@ declare class IteradianError extends Error {
      *   -32005  rate limit or concurrency limit exceeded (retry shortly)
      *   -32006  monthly quota exhausted (retrying will not help until `resetsAt`)
      *   -32007  overage spend limit reached (same — needs a plan change)
+     *   -32008  per-API-key daily limit reached (no retry until `data.resetsAt`,
+     *           the next 00:00 UTC)
      */
     readonly rpcCode?: number;
     /** Seconds to wait before retrying, when the gateway supplied one. */
@@ -493,8 +580,18 @@ declare class IteradianError extends Error {
         retryAfter?: number;
         data?: Record<string, unknown>;
     });
-    /** True when the request failed because the subscription is out of allowance. */
+    /**
+     * True when the request failed because an allowance is used up and retrying
+     * will not help until it resets: the subscription quota (-32006), the
+     * overage spend cap (-32007) or the API key's daily limit (-32008).
+     */
     get isQuotaExhausted(): boolean;
+    /**
+     * True when the API key's own daily limit is reached (-32008). `data` then
+     * carries `{ dailyLimit, used, cost, resetsAt }`; `resetsAt` is the next
+     * 00:00 UTC.
+     */
+    get isDailyLimitReached(): boolean;
     /** True when the request was throttled and is worth retrying. */
     get isRateLimited(): boolean;
 }
@@ -530,8 +627,18 @@ declare class HttpClient {
 declare class AuthResource {
     private http;
     constructor(http: HttpClient);
-    /** Register a new user account */
-    register(data: RegisterRequest): Promise<AuthTokens>;
+    /**
+     * Register a new user account. Does not sign in: the API answers
+     * `{ message, email }` (the same for an address that already has an
+     * account) and emails a confirmation link. Call `login()` once the address
+     * is confirmed.
+     *
+     * The server rejects registration (400) unless the user agreed to the
+     * Terms of Service, Privacy Policy and DPA, so `data.acceptedTerms` is
+     * required and always sent. Pass `acceptedTerms: true` only after the user
+     * has ticked the agreement.
+     */
+    register(data: RegisterRequest): Promise<RegisterResponse>;
     /** Login with email/password (optionally with 2FA code) */
     login(data: LoginRequest): Promise<AuthTokens>;
     /** Logout current session */
@@ -587,11 +694,37 @@ declare class OrganizationsResource {
     leave(orgId: string): Promise<void>;
     /** List organization members */
     listMembers(orgId: string): Promise<OrgMember[]>;
-    /** Invite a member to the organization */
+    /**
+     * Invite someone to the organization by email. Creates (or refreshes) a
+     * pending invitation — nobody becomes a member until the invitee accepts
+     * it while signed in with a verified address.
+     */
     inviteMember(orgId: string, data: {
         email: string;
         role: string;
-    }): Promise<OrgMember>;
+    }): Promise<OrgInvite>;
+    /** Open invitations of the organization (owner/admin) */
+    listInvites(orgId: string): Promise<OrgInvite[]>;
+    /** Revoke an open invitation (owner/admin) */
+    revokeInvite(orgId: string, inviteId: string): Promise<{
+        message: string;
+    }>;
+    /** Invitations addressed to the signed-in user */
+    listMyInvites(): Promise<MyInvites>;
+    /**
+     * Accept an invitation addressed to the signed-in user.
+     *
+     * If the user has not accepted the current terms version yet, the API
+     * answers 403 (`TERMS_ACCEPTANCE_REQUIRED`) unless
+     * `{ acceptedTerms: true }` is passed — only after the user agreed to the
+     * Terms of Service, Privacy Policy and DPA. `acceptedTerms` is sent only
+     * when given.
+     */
+    acceptInvite(inviteId: string, options?: AcceptInviteOptions): Promise<InviteAcceptance>;
+    /** Decline an invitation addressed to the signed-in user */
+    declineInvite(inviteId: string): Promise<{
+        message: string;
+    }>;
     /** Update a member's role */
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<OrgMember>;
     /** Remove a member from the organization */
@@ -741,8 +874,15 @@ declare class SubscriptionsResource {
     constructor(http: HttpClient);
     /** Get current subscription */
     get(orgId: string): Promise<Subscription>;
-    /** Change subscription plan */
-    changePlan(orgId: string, planId: string): Promise<Subscription>;
+    /**
+     * Change subscription plan.
+     *
+     * The server rejects a plan change unless the caller confirms the
+     * plan-change billing terms, so `options.acceptedTerms` is required and
+     * always sent. Pass `{ acceptedTerms: true }` only after the user has
+     * accepted the terms.
+     */
+    changePlan(orgId: string, planId: string, options: ChangePlanOptions): Promise<Subscription>;
     /** Cancel subscription */
     cancel(orgId: string): Promise<Subscription>;
     /** Reactivate a cancelled subscription */
@@ -837,7 +977,7 @@ declare class RpcResource {
  *
  * @example
  * ```typescript
- * import { IteradianClient } from '@iteradian/sdk';
+ * import { IteradianClient } from '@iteradian-rpc/sdk';
  *
  * const client = new IteradianClient({
  *   baseUrl: 'https://api.iteradian.com/api/v1',
@@ -890,4 +1030,5 @@ declare class IteradianClient {
     clearAccessToken(): void;
 }
 
-export { type Alert, type AlertChannel, type AlertCondition, type AlertMetric, type AlertRule, type AlertSeverity, type AlertStatus, AlertsResource, type ApiError, type ApiKey, type ApiKeyAnalytics, type ApiKeyWithSecret, ApiKeysResource, type ApiResponse, AuthResource, type AuthTokens, type CreateAlertChannelRequest, type CreateAlertRuleRequest, type CreateApiKeyRequest, type CreateEndpointRequest, type CreateTicketRequest, type DailyUsage, type DashboardData, DashboardResource, type DataPoint, type Endpoint, type EndpointMetric, type EndpointRegion, type EndpointStatus, EndpointsResource, type HealthStatus, type Invoice, IteradianClient, type IteradianConfig, IteradianError, type JsonRpcError, type JsonRpcRequest, type JsonRpcResponse, type LogFilterOptions, type LogQueryParams, type LogStatus, type LoginRequest, LogsResource, type LogsResponse, type Membership, type Network, type NetworkType, type OrgMember, type OrgRole, type Organization, OrganizationsResource, type PaginatedResponse, type Plan, type PlanLimits, PlansResource, type QuickStats, type RegisterRequest, type RequestLog, RpcResource, type Subscription, SubscriptionsResource, SupportResource, type SupportTicket, type TicketCategory, type TicketMessage, type TicketPriority, type TicketStatus, type TwoFASetup, type UpdateApiKeyRequest, type UpdateEndpointRequest, type UsageByMethod, type UsageByNetwork, type UsageByRegion, UsageResource, type UsageSummary, type User, type UserPermissions };
+export { AlertsResource, ApiKeysResource, AuthResource, DashboardResource, EndpointsResource, IteradianClient, IteradianError, LogsResource, OrganizationsResource, PlansResource, RpcResource, SubscriptionsResource, SupportResource, UsageResource };
+export type { AcceptInviteOptions, Alert, AlertChannel, AlertCondition, AlertMetric, AlertRule, AlertSeverity, AlertStatus, ApiError, ApiKey, ApiKeyAnalytics, ApiKeyWithSecret, ApiResponse, AuthTokens, ChangePlanOptions, CreateAlertChannelRequest, CreateAlertRuleRequest, CreateApiKeyRequest, CreateEndpointRequest, CreateTicketRequest, DailyUsage, DashboardData, DataPoint, Endpoint, EndpointMetric, EndpointRegion, EndpointStatus, HealthStatus, InviteAcceptance, Invoice, IteradianConfig, JsonRpcError, JsonRpcRequest, JsonRpcResponse, LogFilterOptions, LogQueryParams, LogStatus, LoginRequest, LogsResponse, Membership, MyInvite, MyInvites, Network, NetworkType, OrgInvite, OrgMember, OrgRole, Organization, PaginatedResponse, Plan, PlanLimitKey, PlanLimitMode, PlanLimits, QuickStats, RegisterRequest, RegisterResponse, RequestLog, Subscription, SupportTicket, TicketCategory, TicketMessage, TicketPriority, TicketStatus, TwoFASetup, UpdateApiKeyRequest, UpdateEndpointRequest, UsageByMethod, UsageByNetwork, UsageByRegion, UsageSummary, User, UserPermissions };

package/dist/index.js

@@ -48,9 +48,21 @@ var IteradianError = class extends Error {
     this.retryAfter = rpc?.retryAfter;
     this.data = rpc?.data;
   }
-  /** True when the request failed because the subscription is out of allowance. */
+  /**
+   * True when the request failed because an allowance is used up and retrying
+   * will not help until it resets: the subscription quota (-32006), the
+   * overage spend cap (-32007) or the API key's daily limit (-32008).
+   */
   get isQuotaExhausted() {
-    return this.rpcCode === -32006 || this.rpcCode === -32007;
+    return this.rpcCode === -32006 || this.rpcCode === -32007 || this.rpcCode === -32008;
+  }
+  /**
+   * True when the API key's own daily limit is reached (-32008). `data` then
+   * carries `{ dailyLimit, used, cost, resetsAt }`; `resetsAt` is the next
+   * 00:00 UTC.
+   */
+  get isDailyLimitReached() {
+    return this.rpcCode === -32008;
   }
   /** True when the request was throttled and is worth retrying. */
   get isRateLimited() {
@@ -150,7 +162,7 @@ var HttpClient = class {
         const rpc = errorBody?.error;
         const rpcCode = typeof rpc?.code === "number" ? rpc.code : void 0;
         const retryAfter = typeof rpc?.data?.retryAfter === "number" ? rpc.data.retryAfter : void 0;
-        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007;
+        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007 && rpcCode !== -32008;
         if (this.retry && attempt < this.maxRetries && worthRetrying && isReplayableBody(body) && !controller.signal.aborted) {
           const backoff = Math.min(1e3 * 2 ** (attempt - 1), 1e4);
           const delay = Math.min(
@@ -236,9 +248,22 @@ var AuthResource = class {
   constructor(http) {
     this.http = http;
   }
-  /** Register a new user account */
+  /**
+   * Register a new user account. Does not sign in: the API answers
+   * `{ message, email }` (the same for an address that already has an
+   * account) and emails a confirmation link. Call `login()` once the address
+   * is confirmed.
+   *
+   * The server rejects registration (400) unless the user agreed to the
+   * Terms of Service, Privacy Policy and DPA, so `data.acceptedTerms` is
+   * required and always sent. Pass `acceptedTerms: true` only after the user
+   * has ticked the agreement.
+   */
   register(data) {
-    return this.http.post("/auth/register", data);
+    return this.http.post("/auth/register", {
+      ...data,
+      acceptedTerms: data?.acceptedTerms === true
+    });
   }
   /** Login with email/password (optionally with 2FA code) */
   async login(data) {
@@ -337,10 +362,47 @@ var OrganizationsResource = class {
   listMembers(orgId) {
     return this.http.get(`/orgs/${orgId}/members`);
   }
-  /** Invite a member to the organization */
+  /**
+   * Invite someone to the organization by email. Creates (or refreshes) a
+   * pending invitation — nobody becomes a member until the invitee accepts
+   * it while signed in with a verified address.
+   */
   inviteMember(orgId, data) {
     return this.http.post(`/orgs/${orgId}/members`, data);
   }
+  /** Open invitations of the organization (owner/admin) */
+  listInvites(orgId) {
+    return this.http.get(`/orgs/${orgId}/invites`);
+  }
+  /** Revoke an open invitation (owner/admin) */
+  revokeInvite(orgId, inviteId) {
+    return this.http.delete(`/orgs/${orgId}/invites/${inviteId}`);
+  }
+  /** Invitations addressed to the signed-in user */
+  listMyInvites() {
+    return this.http.get("/invites");
+  }
+  /**
+   * Accept an invitation addressed to the signed-in user.
+   *
+   * If the user has not accepted the current terms version yet, the API
+   * answers 403 (`TERMS_ACCEPTANCE_REQUIRED`) unless
+   * `{ acceptedTerms: true }` is passed — only after the user agreed to the
+   * Terms of Service, Privacy Policy and DPA. `acceptedTerms` is sent only
+   * when given.
+   */
+  acceptInvite(inviteId, options) {
+    if (options?.acceptedTerms !== void 0) {
+      return this.http.post(`/invites/${inviteId}/accept`, {
+        acceptedTerms: options.acceptedTerms === true
+      });
+    }
+    return this.http.post(`/invites/${inviteId}/accept`);
+  }
+  /** Decline an invitation addressed to the signed-in user */
+  declineInvite(inviteId) {
+    return this.http.post(`/invites/${inviteId}/decline`);
+  }
   /** Update a member's role */
   updateMemberRole(orgId, memberId, role) {
     return this.http.put(`/orgs/${orgId}/members/${memberId}`, { role });
@@ -638,9 +700,19 @@ var SubscriptionsResource = class {
   get(orgId) {
     return this.http.get(`/orgs/${orgId}/subscription`);
   }
-  /** Change subscription plan */
-  changePlan(orgId, planId) {
-    return this.http.put(`/orgs/${orgId}/subscription/plan`, { planId });
+  /**
+   * Change subscription plan.
+   *
+   * The server rejects a plan change unless the caller confirms the
+   * plan-change billing terms, so `options.acceptedTerms` is required and
+   * always sent. Pass `{ acceptedTerms: true }` only after the user has
+   * accepted the terms.
+   */
+  changePlan(orgId, planId, options) {
+    return this.http.put(`/orgs/${orgId}/subscription/plan`, {
+      planId,
+      acceptedTerms: options?.acceptedTerms === true
+    });
   }
   /** Cancel subscription */
   cancel(orgId) {

package/dist/index.mjs

@@ -9,9 +9,21 @@ var IteradianError = class extends Error {
     this.retryAfter = rpc?.retryAfter;
     this.data = rpc?.data;
   }
-  /** True when the request failed because the subscription is out of allowance. */
+  /**
+   * True when the request failed because an allowance is used up and retrying
+   * will not help until it resets: the subscription quota (-32006), the
+   * overage spend cap (-32007) or the API key's daily limit (-32008).
+   */
   get isQuotaExhausted() {
-    return this.rpcCode === -32006 || this.rpcCode === -32007;
+    return this.rpcCode === -32006 || this.rpcCode === -32007 || this.rpcCode === -32008;
+  }
+  /**
+   * True when the API key's own daily limit is reached (-32008). `data` then
+   * carries `{ dailyLimit, used, cost, resetsAt }`; `resetsAt` is the next
+   * 00:00 UTC.
+   */
+  get isDailyLimitReached() {
+    return this.rpcCode === -32008;
   }
   /** True when the request was throttled and is worth retrying. */
   get isRateLimited() {
@@ -111,7 +123,7 @@ var HttpClient = class {
         const rpc = errorBody?.error;
         const rpcCode = typeof rpc?.code === "number" ? rpc.code : void 0;
         const retryAfter = typeof rpc?.data?.retryAfter === "number" ? rpc.data.retryAfter : void 0;
-        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007;
+        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007 && rpcCode !== -32008;
         if (this.retry && attempt < this.maxRetries && worthRetrying && isReplayableBody(body) && !controller.signal.aborted) {
           const backoff = Math.min(1e3 * 2 ** (attempt - 1), 1e4);
           const delay = Math.min(
@@ -197,9 +209,22 @@ var AuthResource = class {
   constructor(http) {
     this.http = http;
   }
-  /** Register a new user account */
+  /**
+   * Register a new user account. Does not sign in: the API answers
+   * `{ message, email }` (the same for an address that already has an
+   * account) and emails a confirmation link. Call `login()` once the address
+   * is confirmed.
+   *
+   * The server rejects registration (400) unless the user agreed to the
+   * Terms of Service, Privacy Policy and DPA, so `data.acceptedTerms` is
+   * required and always sent. Pass `acceptedTerms: true` only after the user
+   * has ticked the agreement.
+   */
   register(data) {
-    return this.http.post("/auth/register", data);
+    return this.http.post("/auth/register", {
+      ...data,
+      acceptedTerms: data?.acceptedTerms === true
+    });
   }
   /** Login with email/password (optionally with 2FA code) */
   async login(data) {
@@ -298,10 +323,47 @@ var OrganizationsResource = class {
   listMembers(orgId) {
     return this.http.get(`/orgs/${orgId}/members`);
   }
-  /** Invite a member to the organization */
+  /**
+   * Invite someone to the organization by email. Creates (or refreshes) a
+   * pending invitation — nobody becomes a member until the invitee accepts
+   * it while signed in with a verified address.
+   */
   inviteMember(orgId, data) {
     return this.http.post(`/orgs/${orgId}/members`, data);
   }
+  /** Open invitations of the organization (owner/admin) */
+  listInvites(orgId) {
+    return this.http.get(`/orgs/${orgId}/invites`);
+  }
+  /** Revoke an open invitation (owner/admin) */
+  revokeInvite(orgId, inviteId) {
+    return this.http.delete(`/orgs/${orgId}/invites/${inviteId}`);
+  }
+  /** Invitations addressed to the signed-in user */
+  listMyInvites() {
+    return this.http.get("/invites");
+  }
+  /**
+   * Accept an invitation addressed to the signed-in user.
+   *
+   * If the user has not accepted the current terms version yet, the API
+   * answers 403 (`TERMS_ACCEPTANCE_REQUIRED`) unless
+   * `{ acceptedTerms: true }` is passed — only after the user agreed to the
+   * Terms of Service, Privacy Policy and DPA. `acceptedTerms` is sent only
+   * when given.
+   */
+  acceptInvite(inviteId, options) {
+    if (options?.acceptedTerms !== void 0) {
+      return this.http.post(`/invites/${inviteId}/accept`, {
+        acceptedTerms: options.acceptedTerms === true
+      });
+    }
+    return this.http.post(`/invites/${inviteId}/accept`);
+  }
+  /** Decline an invitation addressed to the signed-in user */
+  declineInvite(inviteId) {
+    return this.http.post(`/invites/${inviteId}/decline`);
+  }
   /** Update a member's role */
   updateMemberRole(orgId, memberId, role) {
     return this.http.put(`/orgs/${orgId}/members/${memberId}`, { role });
@@ -599,9 +661,19 @@ var SubscriptionsResource = class {
   get(orgId) {
     return this.http.get(`/orgs/${orgId}/subscription`);
   }
-  /** Change subscription plan */
-  changePlan(orgId, planId) {
-    return this.http.put(`/orgs/${orgId}/subscription/plan`, { planId });
+  /**
+   * Change subscription plan.
+   *
+   * The server rejects a plan change unless the caller confirms the
+   * plan-change billing terms, so `options.acceptedTerms` is required and
+   * always sent. Pass `{ acceptedTerms: true }` only after the user has
+   * accepted the terms.
+   */
+  changePlan(orgId, planId, options) {
+    return this.http.put(`/orgs/${orgId}/subscription/plan`, {
+      planId,
+      acceptedTerms: options?.acceptedTerms === true
+    });
   }
   /** Cancel subscription */
   cancel(orgId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iteradian-rpc/sdk",
-  "version": "1.0.1",
+  "version": "1.1.1",
   "description": "Official Iteradian Control Plane SDK for JavaScript/TypeScript",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -20,7 +20,7 @@
     "build": "tsup src/index.ts --format cjs,esm --dts",
     "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
     "lint": "tsc --noEmit",
-    "test": "jest"
+    "test": "node --test test/account.test.mjs"
   },
   "keywords": [
     "iteradian",
@@ -33,22 +33,14 @@
   "author": "Iteradian",
   "license": "MIT",
   "devDependencies": {
-    "tsup": "^8.5.1",
+    "tsup": "^9.0.0",
     "typescript": "^6.0.3",
-    "@types/node": "^25.6.0"
+    "@types/node": "^26.6.5"
   },
   "engines": {
     "node": ">=16.0.0"
   },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/IteRaDian-RPC/iteradian-control-plane.git",
-    "directory": "sdks/typescript"
-  },
-  "homepage": "https://github.com/IteRaDian-RPC/iteradian-control-plane/tree/main/sdks/typescript#readme",
-  "bugs": {
-    "url": "https://github.com/IteRaDian-RPC/iteradian-control-plane/issues"
-  },
+  "homepage": "https://iteradian.com",
   "publishConfig": {
     "access": "public"
   }