@iteradian-rpc/sdk 1.0.1 → 1.2.0

package/dist/index.js

@@ -48,9 +48,21 @@ var IteradianError = class extends Error {
     this.retryAfter = rpc?.retryAfter;
     this.data = rpc?.data;
   }
-  /** True when the request failed because the subscription is out of allowance. */
+  /**
+   * True when the request failed because an allowance is used up and retrying
+   * will not help until it resets: the subscription quota (-32006), the
+   * overage spend cap (-32007) or the API key's daily limit (-32008).
+   */
   get isQuotaExhausted() {
-    return this.rpcCode === -32006 || this.rpcCode === -32007;
+    return this.rpcCode === -32006 || this.rpcCode === -32007 || this.rpcCode === -32008;
+  }
+  /**
+   * True when the API key's own daily limit is reached (-32008). `data` then
+   * carries `{ dailyLimit, used, cost, resetsAt }`; `resetsAt` is the next
+   * 00:00 UTC.
+   */
+  get isDailyLimitReached() {
+    return this.rpcCode === -32008;
   }
   /** True when the request was throttled and is worth retrying. */
   get isRateLimited() {
@@ -140,7 +152,11 @@ var HttpClient = class {
       if (!response.ok) {
         let errorBody;
         try {
-          errorBody = await response.json();
+          const parsed = await response.json();
+          if (parsed === null || typeof parsed !== "object") {
+            throw new Error("error body is not an object");
+          }
+          errorBody = parsed;
         } catch {
           errorBody = {
             message: response.statusText || "Unknown error",
@@ -150,7 +166,7 @@ var HttpClient = class {
         const rpc = errorBody?.error;
         const rpcCode = typeof rpc?.code === "number" ? rpc.code : void 0;
         const retryAfter = typeof rpc?.data?.retryAfter === "number" ? rpc.data.retryAfter : void 0;
-        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007;
+        const worthRetrying = response.status >= 500 || response.status === 429 && rpcCode !== -32006 && rpcCode !== -32007 && rpcCode !== -32008;
         if (this.retry && attempt < this.maxRetries && worthRetrying && isReplayableBody(body) && !controller.signal.aborted) {
           const backoff = Math.min(1e3 * 2 ** (attempt - 1), 1e4);
           const delay = Math.min(
@@ -160,10 +176,14 @@ var HttpClient = class {
           await new Promise((r) => setTimeout(r, delay));
           return this.request(method, path, body, attempt + 1, base, signal);
         }
+        const rawMessage = errorBody.message;
+        const bodyMessage = Array.isArray(rawMessage) ? rawMessage.map(String).join(", ") : typeof rawMessage === "string" ? rawMessage : "";
+        const rpcMessage = typeof rpc?.message === "string" ? rpc.message : "";
+        const errorLabel = errorBody.error;
         throw new IteradianError(
-          rpc?.message || errorBody.message || response.statusText,
-          errorBody.statusCode || response.status,
-          errorBody.error,
+          rpcMessage || bodyMessage || response.statusText || `HTTP ${response.status}`,
+          typeof errorBody.statusCode === "number" ? errorBody.statusCode : response.status,
+          typeof errorLabel === "string" ? errorLabel : void 0,
           { code: rpcCode, retryAfter, data: rpc?.data }
         );
       }
@@ -236,15 +256,40 @@ var AuthResource = class {
   constructor(http) {
     this.http = http;
   }
-  /** Register a new user account */
+  /**
+   * Register a new user account. Does not sign in: the API answers
+   * `{ message, email }` (the same for an address that already has an
+   * account) and emails a confirmation link. Call `login()` once the address
+   * is confirmed.
+   *
+   * The server rejects registration (400) unless the user agreed to the
+   * Terms of Service, Privacy Policy and DPA, so `data.acceptedTerms` is
+   * required and always sent. Pass `acceptedTerms: true` only after the user
+   * has ticked the agreement.
+   */
   register(data) {
-    return this.http.post("/auth/register", data);
+    return this.http.post("/auth/register", {
+      ...data,
+      acceptedTerms: data?.acceptedTerms === true
+    });
   }
-  /** Login with email/password (optionally with 2FA code) */
+  /**
+   * Login with email/password (optionally with a 2FA code or a backup code).
+   *
+   * When two-factor auth is on and no code was sent, the API answers
+   * `{ requires2FA: true }` with no tokens. Check `requires2FA` and call
+   * again with `twoFactorCode` or `backupCode`. The stored access token is
+   * only replaced when the answer carries one.
+   */
   async login(data) {
-    const tokens = await this.http.post("/auth/login", data);
-    this.http.setAccessToken(tokens.accessToken);
-    return tokens;
+    const result = await this.http.post("/auth/login", data);
+    this.storeToken(result);
+    return result;
+  }
+  storeToken(result) {
+    if (result && typeof result.accessToken === "string" && result.accessToken) {
+      this.http.setAccessToken(result.accessToken);
+    }
   }
   /** Logout current session */
   logout() {
@@ -255,7 +300,7 @@ var AuthResource = class {
     const tokens = await this.http.post("/auth/refresh", {
       refreshToken
     });
-    this.http.setAccessToken(tokens.accessToken);
+    this.storeToken(tokens);
     return tokens;
   }
   /** Verify email with token */
@@ -280,11 +325,11 @@ var AuthResource = class {
   }
   /** Login via magic link token */
   async loginWithMagicLink(token) {
-    const tokens = await this.http.post("/auth/magic-login", {
+    const result = await this.http.post("/auth/magic-login", {
       token
     });
-    this.http.setAccessToken(tokens.accessToken);
-    return tokens;
+    this.storeToken(result);
+    return result;
   }
   /** Enable 2FA – returns QR code image and secret */
   enable2FA(password) {
@@ -313,7 +358,11 @@ var OrganizationsResource = class {
   list() {
     return this.http.get("/orgs");
   }
-  /** Create a new organization */
+  /**
+   * Create a new organization. `name`, `planId` and `acceptedTerms` are
+   * required by the API; pass `acceptedTerms: true` only after the user
+   * agreed to the terms.
+   */
   create(data) {
     return this.http.post("/orgs", data);
   }
@@ -337,10 +386,47 @@ var OrganizationsResource = class {
   listMembers(orgId) {
     return this.http.get(`/orgs/${orgId}/members`);
   }
-  /** Invite a member to the organization */
+  /**
+   * Invite someone to the organization by email. Creates (or refreshes) a
+   * pending invitation — nobody becomes a member until the invitee accepts
+   * it while signed in with a verified address.
+   */
   inviteMember(orgId, data) {
     return this.http.post(`/orgs/${orgId}/members`, data);
   }
+  /** Open invitations of the organization (owner/admin) */
+  listInvites(orgId) {
+    return this.http.get(`/orgs/${orgId}/invites`);
+  }
+  /** Revoke an open invitation (owner/admin) */
+  revokeInvite(orgId, inviteId) {
+    return this.http.delete(`/orgs/${orgId}/invites/${inviteId}`);
+  }
+  /** Invitations addressed to the signed-in user */
+  listMyInvites() {
+    return this.http.get("/invites");
+  }
+  /**
+   * Accept an invitation addressed to the signed-in user.
+   *
+   * If the user has not accepted the current terms version yet, the API
+   * answers 403 (`TERMS_ACCEPTANCE_REQUIRED`) unless
+   * `{ acceptedTerms: true }` is passed — only after the user agreed to the
+   * Terms of Service, Privacy Policy and DPA. `acceptedTerms` is sent only
+   * when given.
+   */
+  acceptInvite(inviteId, options) {
+    if (options?.acceptedTerms !== void 0) {
+      return this.http.post(`/invites/${inviteId}/accept`, {
+        acceptedTerms: options.acceptedTerms === true
+      });
+    }
+    return this.http.post(`/invites/${inviteId}/accept`);
+  }
+  /** Decline an invitation addressed to the signed-in user */
+  declineInvite(inviteId) {
+    return this.http.post(`/invites/${inviteId}/decline`);
+  }
   /** Update a member's role */
   updateMemberRole(orgId, memberId, role) {
     return this.http.put(`/orgs/${orgId}/members/${memberId}`, { role });
@@ -356,6 +442,12 @@ var OrganizationsResource = class {
 };
 
 // src/resources/api-keys.ts
+function withKeyAlias(k) {
+  if (k && typeof k === "object" && typeof k.secret === "string") {
+    k.key = k.secret;
+  }
+  return k;
+}
 var ApiKeysResource = class {
   constructor(http) {
     this.http = http;
@@ -368,9 +460,16 @@ var ApiKeysResource = class {
   get(orgId, keyId) {
     return this.http.get(`/orgs/${orgId}/keys/${keyId}`);
   }
-  /** Create a new API key (returns the full key only once) */
-  create(orgId, data) {
-    return this.http.post(`/orgs/${orgId}/keys`, data);
+  /**
+   * Create a new API key. The full key comes back once, in `secret`
+   * (`key` is a deprecated alias with the same value).
+   */
+  async create(orgId, data) {
+    const created = await this.http.post(
+      `/orgs/${orgId}/keys`,
+      data
+    );
+    return withKeyAlias(created);
   }
   /** Update an API key */
   update(orgId, keyId, data) {
@@ -380,9 +479,15 @@ var ApiKeysResource = class {
   revoke(orgId, keyId) {
     return this.http.delete(`/orgs/${orgId}/keys/${keyId}`);
   }
-  /** Rotate an API key (revoke old, create new) */
-  rotate(orgId, keyId) {
-    return this.http.post(`/orgs/${orgId}/keys/${keyId}/rotate`);
+  /**
+   * Rotate an API key (revoke old, create new). The new full key is in
+   * `secret`; `key` is a deprecated alias.
+   */
+  async rotate(orgId, keyId) {
+    const rotated = await this.http.post(
+      `/orgs/${orgId}/keys/${keyId}/rotate`
+    );
+    return withKeyAlias(rotated);
   }
   /** Get analytics for an API key */
   getAnalytics(orgId, keyId, timeRange = "7d") {
@@ -437,12 +542,16 @@ var EndpointsResource = class {
     return this.http.post(`/orgs/${orgId}/endpoints/${endpointId}/resume`);
   }
   // ==================== Health & Metrics ====================
-  /** Trigger a health check */
+  /** Trigger a health check (POST .../health-check) */
   checkHealth(orgId, endpointId) {
     return this.http.post(
       `/orgs/${orgId}/endpoints/${endpointId}/health-check`
     );
   }
+  /** Get the current health of an endpoint (GET .../health) */
+  getHealth(orgId, endpointId) {
+    return this.http.get(`/orgs/${orgId}/endpoints/${endpointId}/health`);
+  }
   /** Get endpoint health summary */
   getHealthOverview(orgId) {
     return this.http.get(`/orgs/${orgId}/endpoints/summary`);
@@ -452,8 +561,9 @@ var EndpointsResource = class {
     const params = new URLSearchParams();
     if (from) params.append("from", from);
     if (to) params.append("to", to);
+    const qs = params.toString();
     return this.http.get(
-      `/orgs/${orgId}/endpoints/${endpointId}/metrics?${params.toString()}`
+      `/orgs/${orgId}/endpoints/${endpointId}/metrics${qs ? `?${qs}` : ""}`
     );
   }
   /** Update endpoint priorities */
@@ -469,9 +579,13 @@ var UsageResource = class {
   constructor(http) {
     this.http = http;
   }
-  /** Get usage analytics for a date range */
+  /**
+   * Get usage rows (one per key per day) for a date range. `from` and `to`
+   * are ISO dates, e.g. `2026-01-31`.
+   */
   get(orgId, from, to) {
-    return this.http.get(`/orgs/${orgId}/usage?from=${from}&to=${to}`);
+    const qs = new URLSearchParams({ from, to }).toString();
+    return this.http.get(`/orgs/${orgId}/usage?${qs}`);
   }
   /** Get usage summary */
   getSummary(orgId) {
@@ -480,13 +594,27 @@ var UsageResource = class {
 };
 
 // src/resources/dashboard.ts
+var TIME_RANGES = {
+  "1h": "last_hour",
+  "24h": "last_24_hours",
+  "7d": "last_7_days",
+  "30d": "last_30_days"
+};
+function rangeQuery(timeRange, custom) {
+  const qs = new URLSearchParams();
+  if (timeRange) qs.set("timeRange", TIME_RANGES[timeRange] ?? timeRange);
+  if (custom?.from) qs.set("from", custom.from);
+  if (custom?.to) qs.set("to", custom.to);
+  const s = qs.toString();
+  return s ? `?${s}` : "";
+}
 var DashboardResource = class {
   constructor(http) {
     this.http = http;
   }
   /** Get full dashboard data */
-  get(orgId, period) {
-    const params = period ? `?period=${period}` : "";
+  get(orgId, timeRange, custom) {
+    const params = rangeQuery(timeRange, custom);
     return this.http.get(`/orgs/${orgId}/dashboard${params}`);
   }
   /** Get system health overview */
@@ -494,23 +622,23 @@ var DashboardResource = class {
     return this.http.get(`/orgs/${orgId}/dashboard/health`);
   }
   /** Get quick stats */
-  getQuickStats(orgId, period) {
-    const params = period ? `?period=${period}` : "";
+  getQuickStats(orgId, timeRange, custom) {
+    const params = rangeQuery(timeRange, custom);
     return this.http.get(`/orgs/${orgId}/dashboard/quick-stats${params}`);
   }
   /** Get request rate time series */
-  getRequestRate(orgId, period) {
-    const params = period ? `?period=${period}` : "";
+  getRequestRate(orgId, timeRange, custom) {
+    const params = rangeQuery(timeRange, custom);
     return this.http.get(`/orgs/${orgId}/dashboard/request-rate${params}`);
   }
   /** Get error rate time series */
-  getErrorRate(orgId, period) {
-    const params = period ? `?period=${period}` : "";
+  getErrorRate(orgId, timeRange, custom) {
+    const params = rangeQuery(timeRange, custom);
     return this.http.get(`/orgs/${orgId}/dashboard/error-rate${params}`);
   }
   /** Get latency metrics */
-  getLatency(orgId, period) {
-    const params = period ? `?period=${period}` : "";
+  getLatency(orgId, timeRange, custom) {
+    const params = rangeQuery(timeRange, custom);
     return this.http.get(`/orgs/${orgId}/dashboard/latency${params}`);
   }
   /** Get performance metrics */
@@ -525,8 +653,17 @@ var AlertsResource = class {
     this.http = http;
   }
   // ==================== Alerts ====================
-  /** List alerts for an organization */
-  list(orgId) {
+  /**
+   * List alerts for an organization. The API answers an overview object
+   * (`alerts`, counters, rules, channels); this returns just the alerts.
+   * Use `overview()` for the rest.
+   */
+  async list(orgId) {
+    const overview = await this.overview(orgId);
+    return Array.isArray(overview?.alerts) ? overview.alerts : [];
+  }
+  /** The full alerts overview: alerts, counters, rules and channels. */
+  overview(orgId) {
     return this.http.get(`/orgs/${orgId}/alerts`);
   }
   /** Acknowledge an alert */
@@ -602,7 +739,7 @@ var LogsResource = class {
   constructor(http) {
     this.http = http;
   }
-  /** Query request logs with filters and pagination */
+  /** Query request logs with filters (`limit` / `offset` paginate) */
   query(orgId, params) {
     const searchParams = new URLSearchParams();
     if (params) {
@@ -638,9 +775,19 @@ var SubscriptionsResource = class {
   get(orgId) {
     return this.http.get(`/orgs/${orgId}/subscription`);
   }
-  /** Change subscription plan */
-  changePlan(orgId, planId) {
-    return this.http.put(`/orgs/${orgId}/subscription/plan`, { planId });
+  /**
+   * Change subscription plan.
+   *
+   * The server rejects a plan change unless the caller confirms the
+   * plan-change billing terms, so `options.acceptedTerms` is required and
+   * always sent. Pass `{ acceptedTerms: true }` only after the user has
+   * accepted the terms.
+   */
+  changePlan(orgId, planId, options) {
+    return this.http.put(`/orgs/${orgId}/subscription/plan`, {
+      planId,
+      acceptedTerms: options?.acceptedTerms === true
+    });
   }
   /** Cancel subscription */
   cancel(orgId) {
@@ -681,8 +828,16 @@ var SupportResource = class {
   createTicket(orgId, data) {
     return this.http.post(`/orgs/${orgId}/support/tickets`, data);
   }
-  /** List support tickets */
-  listTickets(orgId) {
+  /**
+   * List support tickets. The API answers `{ tickets, total }`; this
+   * returns the tickets. Use `listTicketsWithTotal()` for the total.
+   */
+  async listTickets(orgId) {
+    const res = await this.listTicketsWithTotal(orgId);
+    return Array.isArray(res?.tickets) ? res.tickets : [];
+  }
+  /** List support tickets with the total count. */
+  listTicketsWithTotal(orgId) {
     return this.http.get(`/orgs/${orgId}/support/tickets`);
   }
   /** Get ticket statistics */