@nodaro/sdk 1.17.0 → 1.20.0

package/dist/index.js

@@ -1,6 +1,7 @@
 import { buildPersonHints } from '@nodaro/prompts';
 export { PEOPLE, PERSON_DIMENSION_LABELS, PERSON_DIMENSION_ORDER, buildPersonHints } from '@nodaro/prompts';
-export { CHARACTER_ASPECT_DEFAULTS, CHARACTER_ASPECT_OPTIONS, CHARACTER_STYLES, OBJECT_ASPECT_DEFAULTS as CREATURE_ASPECT_DEFAULTS, OBJECT_ASPECT_OPTIONS as CREATURE_ASPECT_OPTIONS, CREATURE_ATTACH_COLUMNS, LOCATION_ASSET_TYPES, LOCATION_ATTACH_COLUMNS, OBJECT_ASPECT_DEFAULTS, OBJECT_ASPECT_OPTIONS, OBJECT_ASSET_TYPES, OBJECT_ATTACH_COLUMNS, SURROUND_DIRECTIONS } from '@nodaro/shared';
+import { WORKSPACE_HEADER } from '@nodaro/shared';
+export { CHARACTER_ASPECT_DEFAULTS, CHARACTER_ASPECT_OPTIONS, CHARACTER_STYLES, OBJECT_ASPECT_DEFAULTS as CREATURE_ASPECT_DEFAULTS, OBJECT_ASPECT_OPTIONS as CREATURE_ASPECT_OPTIONS, CREATURE_ATTACH_COLUMNS, LOCATION_ASSET_TYPES, LOCATION_ATTACH_COLUMNS, OBJECT_ASPECT_DEFAULTS, OBJECT_ASPECT_OPTIONS, OBJECT_ASSET_TYPES, OBJECT_ATTACH_COLUMNS, SURROUND_DIRECTIONS, WORKSPACE_HEADER } from '@nodaro/shared';
 
 // src/errors.ts
 var NodaroError = class extends Error {
@@ -123,11 +124,50 @@ function throwFromResponse(status, body) {
 }
 
 // src/resources/workflows.ts
+var WorkflowCollaboratorsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** List a workflow's collaborators (id, name, avatar, role — never email). */
+  list(workflowId) {
+    return this.client.request(
+      "GET",
+      `/v1/workflows/${encodeURIComponent(workflowId)}/collaborators`
+    );
+  }
+  /** Add a collaborator by `userId` OR `email` (exactly one), at the given role. */
+  add(workflowId, input) {
+    return this.client.request(
+      "POST",
+      `/v1/workflows/${encodeURIComponent(workflowId)}/collaborators`,
+      { body: input }
+    );
+  }
+  /** Change a collaborator's role. */
+  update(workflowId, userId, input) {
+    return this.client.request(
+      "PATCH",
+      `/v1/workflows/${encodeURIComponent(workflowId)}/collaborators/${encodeURIComponent(userId)}`,
+      { body: input }
+    );
+  }
+  /** Remove a collaborator — or yourself. Returns `{ success: true }`. */
+  remove(workflowId, userId) {
+    return this.client.request(
+      "DELETE",
+      `/v1/workflows/${encodeURIComponent(workflowId)}/collaborators/${encodeURIComponent(userId)}`
+    );
+  }
+};
 var WorkflowsResource = class {
   constructor(client) {
     this.client = client;
+    this.collaborators = new WorkflowCollaboratorsResource(client);
   }
   client;
+  /** The people this workflow is shared with. See {@link WorkflowCollaboratorsResource}. */
+  collaborators;
   /** List workflows for a project. Returns metadata only — `nodes`/`edges` are not included. */
   list(params) {
     return this.client.request(
@@ -199,6 +239,9 @@ var WorkflowsResource = class {
   /**
    * Import a `WorkflowExport` bundle into the specified project.
    * Re-creates any bundled assets (characters, objects, locations) under your account.
+   * Media the bundle references on other hosts is copied onto this instance's
+   * storage where reachable; `importReport` says what was copied, what could
+   * not be reached, and what was skipped (and why).
    */
   import(input) {
     const { projectId, ...workflowJson } = input;
@@ -206,6 +249,37 @@ var WorkflowsResource = class {
       body: { projectId, workflow_json: workflowJson }
     });
   }
+  /**
+   * Set a workflow's visibility — `"private"` (creator + explicit collaborators)
+   * or `"workspace"` (everyone in its workspace). Only the creator or a workspace
+   * admin may change it; anyone else gets HTTP 403. Thin wrapper over `update()`:
+   * the visibility lever lives on `PATCH /v1/workflows/:id`.
+   */
+  setVisibility(id, visibility) {
+    return this.client.request("PATCH", `/v1/workflows/${encodeURIComponent(id)}`, {
+      body: { visibility }
+    });
+  }
+  /**
+   * Move a workflow to another project (`POST /v1/workflows/:id/move`); its folder
+   * is cleared. When the move takes the workflow out of a workspace, collaborator
+   * grants that came from that workspace are dropped and returned as
+   * `droppedCollaborators`.
+   */
+  move(id, params) {
+    return this.client.request("POST", `/v1/workflows/${encodeURIComponent(id)}/move`, {
+      body: params
+    });
+  }
+  /**
+   * Workflows other people shared with you (`GET /v1/workflows/shared-with-me`) —
+   * grants on work that is NOT in a workspace you belong to (workspace work already
+   * shows in that workspace's own lists). Each carries the `grantedRole` you hold.
+   * Empty when the organizations feature is off server-side.
+   */
+  sharedWithMe() {
+    return this.client.request("GET", "/v1/workflows/shared-with-me");
+  }
 };
 
 // src/resources/projects.ts
@@ -758,6 +832,8 @@ var LocationsResource = class {
   list(params = {}) {
     const query = {};
     if (params.archived) query.archived = "true";
+    if (params.limit !== void 0) query.limit = String(params.limit);
+    if (params.cursor) query.cursor = params.cursor;
     return this.client.request("GET", "/v1/locations", { query });
   }
   /**
@@ -935,6 +1011,8 @@ var ObjectsResource = class {
     const query = {};
     if (params.archived) query.archived = "true";
     if (params.projectId) query.projectId = params.projectId;
+    if (params.limit !== void 0) query.limit = String(params.limit);
+    if (params.cursor) query.cursor = params.cursor;
     return this.client.request("GET", "/v1/objects", { query });
   }
   /**
@@ -1119,6 +1197,8 @@ var CreaturesResource = class {
     const query = {};
     if (params.archived) query.archived = "true";
     if (params.projectId) query.projectId = params.projectId;
+    if (params.limit !== void 0) query.limit = String(params.limit);
+    if (params.cursor) query.cursor = params.cursor;
     return this.client.request("GET", "/v1/creatures", { query });
   }
   /**
@@ -1803,6 +1883,30 @@ var MediaResource = class {
   trimAudio(input) {
     return this.client.request("POST", "/v1/trim-audio", { body: input });
   }
+  /**
+   * Turn one still image + one audio track into an MP4
+   * (`POST /v1/still-to-video`) — locally rendered (FFmpeg), no AI model,
+   * zero credits. The output duration IS the audio's duration; there is no
+   * duration field. Optional `motion` animates the still (zoom / pan /
+   * ken-burns) at `intensity` 1–10. `fit: "contain"` letterboxes with
+   * `padColor` instead of cropping. Poll `jobs.get(jobId)`.
+   */
+  stillToVideo(input) {
+    return this.client.request("POST", "/v1/still-to-video", { body: input });
+  }
+  /**
+   * Turn 2–100 images + one optional audio track into an MP4 slideshow
+   * (`POST /v1/slideshow`) — locally rendered (FFmpeg), zero credits. With
+   * audio, the output duration IS the audio's duration (equal split unless
+   * `imageDurations` pins rows — null entries = auto; mismatched pinned sums
+   * scale proportionally and the factor is disclosed in the job output).
+   * Without audio: N × `perImageDuration`, silent output. Transitions
+   * consume the outgoing slide, so totals stay exact. For a single image use
+   * `stillToVideo`. Poll `jobs.get(jobId)`.
+   */
+  slideshow(input) {
+    return this.client.request("POST", "/v1/slideshow", { body: input });
+  }
   /**
    * Probe a social video's metadata (`POST /v1/video-metadata`) — duration,
    * dimensions, title, live status — WITHOUT downloading it. A direct read, not a
@@ -2023,6 +2127,20 @@ var PickerCatalogsResource = class {
   }
 };
 
+// src/resources/catalogs.ts
+var CatalogsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** Every catalog, projected & pack-composed (honors the deployment's
+   *  registered vendored packs). Cached publicly 5 min. */
+  list(opts = {}) {
+    const qs = opts.detail ? `?detail=${opts.detail}` : "";
+    return this.client.request("GET", `/v1/catalogs${qs}`);
+  }
+};
+
 // src/resources/models.ts
 var ModelsResource = class {
   constructor(client) {
@@ -2114,6 +2232,22 @@ var RecastResource = class {
   get(recastId) {
     return this.client.request("GET", `/v1/recast/${encodeURIComponent(recastId)}`);
   }
+  /** Quote a revisioned Music replacement and/or complete desired mix. Free. */
+  estimateRescore(recastId, input) {
+    return this.client.request(
+      "POST",
+      `/v1/recast/${encodeURIComponent(recastId)}/estimate-rescore`,
+      { body: input }
+    );
+  }
+  /** Apply a quoted audio operation. Reuse its request id only for a transport retry. */
+  rescore(recastId, input) {
+    return this.client.request(
+      "POST",
+      `/v1/recast/${encodeURIComponent(recastId)}/rescore`,
+      { body: input }
+    );
+  }
   /** Start rendering a `planned` run. Idempotent server-side. */
   start(recastId, opts = {}) {
     return this.client.request("POST", `/v1/recast/${encodeURIComponent(recastId)}/start`, {
@@ -2280,11 +2414,204 @@ var TutorialsResource = class {
   }
 };
 
-// src/client.ts
-var SDK_VERSION = "1.17.0" ;
+// src/resources/organizations.ts
+var OrganizationsResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** The organizations this account belongs to. */
+  list() {
+    return this.client.request("GET", "/v1/orgs");
+  }
+  get(id) {
+    return this.client.request("GET", `/v1/orgs/${encodeURIComponent(id)}`);
+  }
+  /**
+   * Create an organization. On instances that require it, `acceptTerms` must
+   * be true or the server answers `terms_required` — the SDK does not decide
+   * whether terms apply, because only the instance knows.
+   *
+   * A new organization may come back `pending`: some instances hold new
+   * organizations for a platform admin to approve, and a pending one grants
+   * nothing until it is active.
+   */
+  create(input) {
+    return this.client.request("POST", "/v1/orgs", { body: input });
+  }
+  update(id, input) {
+    return this.client.request("PATCH", `/v1/orgs/${encodeURIComponent(id)}`, { body: input });
+  }
+  /** Soft-delete. The organization stops granting context; nothing is destroyed. */
+  delete(id) {
+    return this.client.request("DELETE", `/v1/orgs/${encodeURIComponent(id)}`);
+  }
+  /** Hand the organization to another member. The caller becomes an admin. */
+  transferOwnership(id, userId) {
+    return this.client.request("POST", `/v1/orgs/${encodeURIComponent(id)}/transfer-ownership`, {
+      body: { userId }
+    });
+  }
+  /** Leave. An owner cannot — transfer ownership first (`owner_cannot_leave`). */
+  leave(id) {
+    return this.client.request("POST", `/v1/orgs/${encodeURIComponent(id)}/leave`);
+  }
+  // -- members --------------------------------------------------------------
+  listMembers(orgId, opts = {}) {
+    return this.client.request("GET", `/v1/orgs/${encodeURIComponent(orgId)}/members`, { query: { ...opts } });
+  }
+  updateMember(orgId, userId, input) {
+    return this.client.request(
+      "PATCH",
+      `/v1/orgs/${encodeURIComponent(orgId)}/members/${encodeURIComponent(userId)}`,
+      { body: input }
+    );
+  }
+  removeMember(orgId, userId) {
+    return this.client.request(
+      "DELETE",
+      `/v1/orgs/${encodeURIComponent(orgId)}/members/${encodeURIComponent(userId)}`
+    );
+  }
+  // -- invitations ----------------------------------------------------------
+  /**
+   * Invite by email. Returns ONE ROW PER ADDRESS, and a row whose `status` is
+   * not `sent` carries a `link` instead.
+   *
+   * Surface that link. An install with no mail provider — every fresh
+   * self-host — delivers nothing, and an integration that reports "invited"
+   * without showing the link creates invitations nobody can ever reach.
+   */
+  invite(orgId, input) {
+    return this.client.request("POST", `/v1/orgs/${encodeURIComponent(orgId)}/invitations`, { body: input });
+  }
+  listInvitations(orgId, opts = {}) {
+    return this.client.request("GET", `/v1/orgs/${encodeURIComponent(orgId)}/invitations`, {
+      query: { ...opts }
+    });
+  }
+  revokeInvitation(id) {
+    return this.client.request("DELETE", `/v1/invitations/${encodeURIComponent(id)}`);
+  }
+  resendInvitation(id) {
+    return this.client.request("POST", `/v1/invitations/${encodeURIComponent(id)}/resend`);
+  }
+  /**
+   * What an invitee sees before signing in — the one organization read that
+   * needs no token, so it works while the recipient is still signed out.
+   */
+  previewInvitation(token) {
+    return this.client.request("GET", `/v1/invitations/by-token/${encodeURIComponent(token)}`);
+  }
+  /** Accept. Requires an authenticated caller whose email matches the invite. */
+  acceptInvitation(token) {
+    return this.client.request("POST", `/v1/invitations/${encodeURIComponent(token)}/accept`);
+  }
+  // -- audit ----------------------------------------------------------------
+  /**
+   * The organization's audit log, newest first. Owner and admins only, and
+   * readable while the organization is suspended — the record of what
+   * happened is exactly what someone needs when things have gone wrong.
+   */
+  audit(orgId, opts = {}) {
+    return this.client.request("GET", `/v1/orgs/${encodeURIComponent(orgId)}/audit`, { query: { ...opts } });
+  }
+};
+
+// src/resources/workspaces.ts
+var WorkspacesResource = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * Every workspace this account belongs to, across all its organizations.
+   *
+   * An identity read: a stale workspace binding cannot lock a caller out of
+   * it, which is what makes it safe to call when a selection has gone bad.
+   *
+   * Byte-for-byte the list `GET /v1/me` carries, so a client reconciles
+   * against one truth rather than two. That is why these are SUMMARIES —
+   * enough to render a switcher, not the full view; use {@link get} for that.
+   */
+  list() {
+    return this.client.request("GET", "/v1/workspaces");
+  }
+  listForOrg(orgId, opts = {}) {
+    return this.client.request("GET", `/v1/orgs/${encodeURIComponent(orgId)}/workspaces`, {
+      query: { includeArchived: opts.includeArchived }
+    });
+  }
+  get(id) {
+    return this.client.request("GET", `/v1/workspaces/${encodeURIComponent(id)}`);
+  }
+  create(orgId, input) {
+    return this.client.request("POST", `/v1/orgs/${encodeURIComponent(orgId)}/workspaces`, { body: input });
+  }
+  update(id, input) {
+    return this.client.request("PATCH", `/v1/workspaces/${encodeURIComponent(id)}`, { body: input });
+  }
+  /**
+   * Archive or restore. Archiving is REVERSIBLE and destroys nothing: the
+   * workspace stops accepting new work and stays fully readable, which is
+   * what a finished class term needs and a delete would not survive.
+   */
+  setArchived(id, archived) {
+    return this.client.request(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(id)}/${archived ? "archive" : "unarchive"}`
+    );
+  }
+  // -- members --------------------------------------------------------------
+  listMembers(id, opts = {}) {
+    return this.client.request("GET", `/v1/workspaces/${encodeURIComponent(id)}/members`, {
+      query: { ...opts }
+    });
+  }
+  /** Add someone who is ALREADY in the organization. To bring in a new person, invite them. */
+  addMember(id, input) {
+    return this.client.request("POST", `/v1/workspaces/${encodeURIComponent(id)}/members`, { body: input });
+  }
+  updateMember(id, userId, input) {
+    return this.client.request(
+      "PATCH",
+      `/v1/workspaces/${encodeURIComponent(id)}/members/${encodeURIComponent(userId)}`,
+      { body: input }
+    );
+  }
+  removeMember(id, userId) {
+    return this.client.request(
+      "DELETE",
+      `/v1/workspaces/${encodeURIComponent(id)}/members/${encodeURIComponent(userId)}`
+    );
+  }
+  // -- join codes -----------------------------------------------------------
+  /** The workspace's join code, or `null` if none has been created. Admins only. */
+  getJoinCode(id) {
+    return this.client.request("GET", `/v1/workspaces/${encodeURIComponent(id)}/join-code`);
+  }
+  /**
+   * Rotate, enable or disable the code. Rotating invalidates the old one
+   * immediately — that is the point of it, and anyone still holding a link
+   * with the old code will be refused.
+   */
+  actOnJoinCode(id, action) {
+    return this.client.request("POST", `/v1/workspaces/${encodeURIComponent(id)}/join-code`, {
+      body: { action }
+    });
+  }
+  /**
+   * Join by code. Another way IN, so a stale workspace binding must not block
+   * it — the server treats this as an identity route for that reason.
+   */
+  join(code) {
+    return this.client.request("POST", "/v1/workspaces/join", { body: { code } });
+  }
+};
+var SDK_VERSION = "1.20.0" ;
 var CLIENT_HEADER = "X-Nodaro-Client";
 var isBrowser = () => typeof window !== "undefined" && typeof window.document !== "undefined";
-var NodaroClient = class {
+var NodaroClient = class _NodaroClient {
   baseUrl;
   auth;
   timeoutMs;
@@ -2326,18 +2653,24 @@ var NodaroClient = class {
   library;
   presets;
   pickerCatalogs;
+  catalogs;
   models;
   shots;
   recast;
   community;
   templates;
   tutorials;
+  organizations;
+  workspaces;
+  /** The workspace this client acts in; undefined = the personal space. */
+  workspaceId;
   constructor(opts) {
     this.baseUrl = opts.baseUrl.replace(/\/$/, "");
     this.auth = opts.auth;
     this.fetchOverride = opts.fetch;
     this.timeoutMs = opts.timeoutMs ?? 6e4;
     this.clientLabel = opts.clientLabel ?? `sdk/${SDK_VERSION}`;
+    this.workspaceId = opts.workspaceId;
     this.sendClientHeader = opts.clientLabel !== void 0 || !isBrowser();
     this.workflows = new WorkflowsResource(this);
     this.projects = new ProjectsResource(this);
@@ -2363,12 +2696,36 @@ var NodaroClient = class {
     this.library = new LibraryResource(this);
     this.presets = new PresetsResource(this);
     this.pickerCatalogs = new PickerCatalogsResource(this);
+    this.catalogs = new CatalogsResource(this);
     this.models = new ModelsResource(this);
     this.shots = new ShotsResource(this);
     this.recast = new RecastResource(this);
     this.community = new CommunityResource(this);
     this.templates = new TemplatesResource(this);
     this.tutorials = new TutorialsResource(this);
+    this.organizations = new OrganizationsResource(this);
+    this.workspaces = new WorkspacesResource(this);
+  }
+  /**
+   * A client that acts in `workspaceId`, sharing this one's auth and config.
+   *
+   * A NEW client rather than a setter, deliberately. A mutable selection is
+   * the bug this whole axis exists to prevent: two concurrent operations
+   * against one client would race over which workspace they were in, and the
+   * loser would create work in the wrong place with nothing failing. A
+   * per-workspace client cannot be raced.
+   *
+   * Pass `null` for the personal space.
+   */
+  withWorkspace(workspaceId) {
+    return new _NodaroClient({
+      baseUrl: this.baseUrl,
+      auth: this.auth,
+      timeoutMs: this.timeoutMs,
+      ...this.fetchOverride ? { fetch: this.fetchOverride } : {},
+      ...this.sendClientHeader ? { clientLabel: this.clientLabel } : {},
+      ...workspaceId ? { workspaceId } : {}
+    });
   }
   async request(method, path, options = {}) {
     const url = this.buildUrl(path, options.query);
@@ -2377,6 +2734,9 @@ var NodaroClient = class {
     const headers = {
       ...isFormData ? {} : { "Content-Type": "application/json" },
       ...this.sendClientHeader ? { [CLIENT_HEADER]: this.clientLabel } : {},
+      // Before per-request headers: a resource that needs to reach outside
+      // this client's workspace says so explicitly and wins.
+      ...this.workspaceId ? { [WORKSPACE_HEADER]: this.workspaceId } : {},
       ...options.headers ?? {}
     };
     if (token) headers["Authorization"] = `Bearer ${token}`;
@@ -2410,6 +2770,14 @@ var NodaroClient = class {
    * `GET /v1/me` → the authenticated user's identity (see {@link UserIdentity}).
    * Unwraps the `{ data }` envelope. Throws `UnauthorizedError` (401) when the
    * token is missing/invalid, and the SDK's other typed errors as usual.
+   *
+   * On an instance with organizations it also carries what the caller belongs
+   * to. THREE states, and collapsing them is wrong in a way users feel: the
+   * organization fields ABSENT means this instance has no organizations at
+   * all; present and empty means the account belongs to none; and
+   * `organizationsUnavailable` means the lookup failed — keep whatever
+   * selection you already had rather than concluding the person was removed
+   * from everything.
    */
   async me() {
     const res = await this.request("GET", "/v1/me");
@@ -2461,6 +2829,6 @@ function supabaseAuth(supabase) {
   };
 }
 
-export { AppsResource, AudioResource, CREATURE_ASSET_TYPES, CallbackAuth, CharactersResource, CommunityResource, CreaturesResource, CreditsResource, DeveloperAppsResource, ExecutionsResource, ForbiddenError, InsufficientCreditsError, JobAbortedError, JobFailedError, JobTimeoutError, JobsResource, LibraryResource, LocationsResource, MediaResource, ModelsResource, NodaroClient, NodaroError, NodesResource, NotFoundError, OAuthResource, ObjectsResource, PickerCatalogsResource, PipelinesResource, PresetsResource, ProjectsResource, PromptHelperResource, RateLimitedError, RecastResource, ReduceResource, ShotsResource, StaticTokenAuth, StorageExceededError, TemplatesResource, TutorialsResource, UnauthorizedError, UploadsResource, VideoProResource, VoicesResource, WorkflowConflictError, WorkflowsResource, buildPersonSeedPrompt, createClient, supabaseAuth, throwFromResponse };
+export { AppsResource, AudioResource, CREATURE_ASSET_TYPES, CallbackAuth, CatalogsResource, CharactersResource, CommunityResource, CreaturesResource, CreditsResource, DeveloperAppsResource, ExecutionsResource, ForbiddenError, InsufficientCreditsError, JobAbortedError, JobFailedError, JobTimeoutError, JobsResource, LibraryResource, LocationsResource, MediaResource, ModelsResource, NodaroClient, NodaroError, NodesResource, NotFoundError, OAuthResource, ObjectsResource, OrganizationsResource, PickerCatalogsResource, PipelinesResource, PresetsResource, ProjectsResource, PromptHelperResource, RateLimitedError, RecastResource, ReduceResource, ShotsResource, StaticTokenAuth, StorageExceededError, TemplatesResource, TutorialsResource, UnauthorizedError, UploadsResource, VideoProResource, VoicesResource, WorkflowConflictError, WorkflowsResource, WorkspacesResource, buildPersonSeedPrompt, createClient, supabaseAuth, throwFromResponse };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map