@pylonsync/client 0.3.268 → 0.3.270

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.3.268",
+  "version": "0.3.270",
   "type": "module",
   "main": "src/index.ts",
   "types": "src/index.ts",
@@ -19,8 +19,8 @@
     "check": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@pylonsync/react": "0.3.268",
-    "@pylonsync/sync": "0.3.268",
+    "@pylonsync/react": "0.3.270",
+    "@pylonsync/sync": "0.3.270",
     "clsx": "^2.1.1"
   },
   "peerDependencies": {

package/src/components/OrganizationSwitcher.tsx

@@ -27,6 +27,14 @@ export interface OrganizationSwitcherProps {
 	onSwitched?: (orgId: string | null) => void;
 	/** Called after a new org is created (post-creation, pre-switch). */
 	onCreated?: (org: OrgSummary) => void;
+	/**
+	 * Active org name resolved on the server (e.g. `serverData.get("Org", …)`
+	 * in an SSR layout). Seeds the trigger label so it renders the real name on
+	 * the first paint — no "Personal" → real-name flash, and no pop-in waiting
+	 * for `useAuth()`/`listOrgs()` to hydrate. The dropdown list still loads
+	 * client-side, but it's hidden until opened.
+	 */
+	initialActiveName?: string;
 	className?: string;
 }
 
@@ -44,6 +52,7 @@ export function OrganizationSwitcher({
 	hideCreate,
 	onSwitched,
 	onCreated,
+	initialActiveName,
 	className,
 }: OrganizationSwitcherProps) {
 	const { isSignedIn, tenantId, selectOrg, clearOrg } = useAuth();
@@ -88,10 +97,14 @@ export function OrganizationSwitcher({
 		};
 	}, [open]);
 
-	if (!isSignedIn) return null;
+	// A server-seeded active name means the SSR layout already rendered this in
+	// an authenticated shell — render immediately instead of waiting for
+	// `isSignedIn` to hydrate (which causes a pop-in).
+	if (!isSignedIn && !initialActiveName) return null;
 
 	const active = orgs?.find((o) => o.id === tenantId) ?? null;
-	const label = active?.name ?? (hidePersonal ? "Select org" : "Personal");
+	const label =
+		active?.name ?? initialActiveName ?? (hidePersonal ? "Select org" : "Personal");
 
 	async function switchTo(orgId: string | null) {
 		setSwitching(true);

package/src/index.ts

@@ -99,6 +99,8 @@ export {
 	createApiKey,
 	createInvite,
 	createOrg,
+	deleteOrg,
+	renameOrg,
 	listActiveSessions,
 	listApiKeys,
 	listAuthProviders,

package/src/lib/api.ts

@@ -30,6 +30,29 @@ class ApiError extends Error {
 	}
 }
 
+// Turn a non-2xx Response into an ApiError, pulling the stable error `code` and
+// human `message` out of Pylon's error envelope. The server returns
+// `{ "error": { "code": "...", "message": "..." } }`; older/other endpoints may
+// send a flat `{ "error": "CODE", "message": "..." }`. Handle both so callers
+// always get a real `.code` to branch on (not "Bad Request").
+async function throwApiError(res: Response): Promise<never> {
+	const payload = (await res.json().catch(() => ({}))) as {
+		error?: { code?: string; message?: string } | string;
+		code?: string;
+		message?: string;
+	};
+	const nested =
+		payload && typeof payload.error === "object" ? payload.error : null;
+	const code =
+		nested?.code ??
+		(typeof payload?.error === "string" ? payload.error : undefined) ??
+		payload?.code ??
+		`HTTP_${res.status}`;
+	const message =
+		nested?.message ?? payload?.message ?? res.statusText ?? "request failed";
+	throw new ApiError(code, message, res.status);
+}
+
 async function post<T>(path: string, body: unknown): Promise<T> {
 	const res = await fetch(`${getBaseUrl()}${path}`, {
 		method: "POST",
@@ -37,13 +60,7 @@ async function post<T>(path: string, body: unknown): Promise<T> {
 		headers: { "content-type": "application/json" },
 		body: JSON.stringify(body),
 	});
-	if (!res.ok) {
-		const payload = await res.json().catch(() => ({}) as Record<string, unknown>);
-		const code = (payload?.error as string) ?? `HTTP_${res.status}`;
-		const message =
-			(payload?.message as string) ?? res.statusText ?? "request failed";
-		throw new ApiError(code, message, res.status);
-	}
+	if (!res.ok) await throwApiError(res);
 	return res.json() as Promise<T>;
 }
 
@@ -52,7 +69,7 @@ async function get<T>(path: string): Promise<T> {
 		method: "GET",
 		credentials: "include",
 	});
-	if (!res.ok) throw new ApiError(`HTTP_${res.status}`, res.statusText, res.status);
+	if (!res.ok) await throwApiError(res);
 	return res.json() as Promise<T>;
 }
 
@@ -154,10 +171,31 @@ export async function createOrg(name: string): Promise<OrgSummary> {
 	return post<OrgSummary>("/api/auth/orgs", { name });
 }
 
+/** Rename an org. Server gates this to owners + admins (`can_manage_members`). */
+export async function renameOrg(
+	orgId: string,
+	name: string,
+): Promise<{ id: string; name: string }> {
+	return req<{ id: string; name: string }>("PATCH", `/api/auth/orgs/${orgId}`, {
+		name,
+	});
+}
+
+/** Delete an org and its memberships + invites. Server gates this to owners
+ *  (`can_delete_org`). Irreversible. */
+export async function deleteOrg(orgId: string): Promise<{ deleted: boolean }> {
+	return req<{ deleted: boolean }>("DELETE", `/api/auth/orgs/${orgId}`);
+}
+
 export interface OrgMember {
 	user_id: string;
 	role: string;
 	joined_at: number;
+	/** Member's email, joined server-side from the User entity. `null` if the
+	 *  User row is missing or has no email. */
+	email: string | null;
+	/** Member's display name (displayName / name / fullName), if set. */
+	name: string | null;
 }
 
 export async function listOrgMembers(orgId: string): Promise<OrgMember[]> {
@@ -345,7 +383,7 @@ export async function revokeApiKey(
 }
 
 async function req<T>(
-	method: "PUT" | "DELETE",
+	method: "PUT" | "PATCH" | "DELETE",
 	path: string,
 	body?: unknown,
 ): Promise<T> {
@@ -355,13 +393,7 @@ async function req<T>(
 		headers: body ? { "content-type": "application/json" } : undefined,
 		body: body ? JSON.stringify(body) : undefined,
 	});
-	if (!res.ok) {
-		const payload = await res.json().catch(() => ({}) as Record<string, unknown>);
-		const code = (payload?.error as string) ?? `HTTP_${res.status}`;
-		const message =
-			(payload?.message as string) ?? res.statusText ?? "request failed";
-		throw new ApiError(code, message, res.status);
-	}
+	if (!res.ok) await throwApiError(res);
 	return res.json() as Promise<T>;
 }