@seliseblocks/client 0.1.4 → 0.1.6

package/AI_USAGE_GUIDE.md

@@ -100,7 +100,8 @@ Data:
 - `blocks.data.collection("Name").list/get/create/update/delete`
 - `blocks.data.graphql(...)`
 - `blocks.data.files.*` for file/storage helpers
-- `blocks.data.dms.*` for DMS file/folder helpers
+- `blocks.data.directories.*` for directory create/get/update/delete/move
+- `blocks.data.objects.*` for browse/search/trash/shared/restore/share/access/inheritance
 - `blocks.data.utilities.*` for runtime utility helpers
 
 Localization:

package/README.md

@@ -118,15 +118,15 @@ is an admin concern handled by `@seliseblocks/cli-os`'s `notification *` command
 ## Common Runtime Calls
 
 ```ts
-const me = await blocks.iam.me();
-const orgs = await blocks.iam.organizations.my();
-const features = await blocks.iam.resources.features();
-```
-
-`iam.organizations.my()` returns the IAM envelope with `organizations`, not `data`.
-
-```ts
-const schemas = await blocks.data.schemas.list();
+const me = await blocks.iam.me();
+const orgs = await blocks.iam.organizations.my();
+const features = await blocks.iam.resources.features();
+```
+
+`iam.organizations.my()` returns the IAM envelope with `organizations`, not `data`.
+
+```ts
+const schemas = await blocks.data.schemas.list();
 const schemaInfo = await blocks.data.schemas.infoByName("Student");
 const schemaRules = await blocks.data.validations.bySchemaId("schema-id");
 
@@ -153,11 +153,15 @@ await blocks.data.files.uploadToUrl({
   contentType: file.type
 });
 
-const items = await blocks.data.dms.list({
-  configurationName: "default",
-  parentId: "root",
-  skip: 0,
-  take: 20
+const items = await blocks.data.objects.list({
+  parentDirectoryId: "root",
+  limit: 20
+});
+
+const directory = await blocks.data.directories.create({
+  name: "Contracts",
+  parentDirectoryId: "root",
+  allowedFileExtensions: ["pdf", "docx"]
 });
 ```
 
@@ -177,7 +181,7 @@ const selectedKeys = await blocks.localization.keysByNames({
 - `blocks.auth.idp`: hosted IdP initiate, browser redirect, callback, UI config.
 - `blocks.auth.oidc`: refresh-token and client-credentials token endpoint helpers.
 - `blocks.iam`: current user, users, roles, permissions, resources, organizations, signup settings (`blocks.iam.signupSettings`).
-- `blocks.data`: schema reads, validation reads, GraphQL gateway execution, file/storage helpers, DMS file/folder helpers, runtime collection CRUD.
+- `blocks.data`: schema reads, validation reads, GraphQL gateway execution, file/directory/object-tree storage helpers, and runtime collection CRUD.
 - `blocks.localization`: tenant language/module discovery, UILM dictionary loading, selected key lookup, simple `t()` lookup.
 - `blocks.mfa`: tenant MFA policy read/save, TOTP enrollment, OTP generate/resend/verify, method switch, disable, and backup codes.
 - `blocks.mail`: `send`/`sendToAny` transactional email through the tenant's configured mail provider.

package/dist/client.d.ts

@@ -42,6 +42,13 @@ export type BlocksClientConfig = {
      * Optional fetch-compatible function for tests, SSR, or custom runtimes.
      */
     fetch?: typeof fetch;
+    /**
+     * Caller-owned hook invoked at most once per request when a protected call comes back 401.
+     * Should resolve a fresh token (deduping concurrent callers itself, e.g. via a shared
+     * in-flight refresh promise) or `undefined` if the session cannot be recovered -- the SDK
+     * retries the request once with the returned token, or leaves the 401 to throw if none.
+     */
+    onUnauthorized?: () => Promise<string | undefined> | string | undefined;
     /**
      * Optional hosted IdP/OIDC browser-flow configuration.
      */
@@ -66,6 +73,7 @@ export type RequiredConfig = {
     accessToken?: string | (() => Promise<string | undefined> | string | undefined);
     apiUrl: string;
     appDomain?: string;
+    onUnauthorized?: () => Promise<string | undefined> | string | undefined;
     oidc?: BlocksOidcConfig & {
         redirectUri: string;
         scope: string;

package/dist/client.js

@@ -36,6 +36,7 @@ function normalizeConfig(config) {
         accessToken: config.accessToken,
         apiUrl: trimTrailingSlash(config.apiUrl),
         appDomain: config.appDomain,
+        onUnauthorized: config.onUnauthorized,
         oidc: config.oidc ? {
             ...config.oidc,
             redirectUri: config.oidc.redirectUri ?? browserRedirectUri(),

package/dist/data/data-client.d.ts

@@ -1,5 +1,5 @@
 import { BlocksHttpClient } from "../http/http-client.js";
-import { BlocksDataCollection, BlocksDataCollectionOptions, BlocksDmsCreateFolderRequest, BlocksDmsListRequest, BlocksDmsUploadRequest, BlocksFileDeleteRequest, BlocksFileGetOptions, BlocksFileInfoListRequest, BlocksDataSchema, BlocksFileListRequest, BlocksFileUpdateAdditionalInfoRequest, BlocksFileUploadRequest, BlocksFolderDeleteRequest, BlocksGraphqlRequest, BlocksLocalStorageUploadRequest, BlocksPagedResult, BlocksRegexGenerateRequest, BlocksSchemaFieldValidationOptions, BlocksSchemaListOptions, BlocksSchemaValidationListOptions, BlocksUploadToUrlRequest } from "./types.js";
+import { BlocksDataCollection, BlocksDataCollectionOptions, BlocksDirectoryCreateRequest, BlocksDirectoryDeleteRequest, BlocksDirectoryMoveRequest, BlocksDirectoryUpdateRequest, BlocksFileCopyRequest, BlocksFileCreateVersionRequest, BlocksFileDeleteRequest, BlocksFileGetOptions, BlocksFileInfoListRequest, BlocksFileMoveRequest, BlocksFileRenameRequest, BlocksFileVersionsRequest, BlocksDataSchema, BlocksFileListRequest, BlocksFileUpdateAdditionalInfoRequest, BlocksFileUploadRequest, BlocksGraphqlRequest, BlocksLocalStorageUploadRequest, BlocksPagedResult, BlocksRegexGenerateRequest, BlocksSchemaFieldValidationOptions, BlocksSchemaListOptions, BlocksSchemaValidationListOptions, BlocksStorageAccessPolicyRequest, BlocksStorageObjectListRequest, BlocksStorageObjectPageRequest, BlocksStorageObjectSearchRequest, BlocksStorageObjectsResponse, BlocksStorageResourceRequest, BlocksStorageRevokeAccessRequest, BlocksStorageShareRequest, BlocksStorageToggleInheritanceRequest, BlocksUploadToUrlRequest } from "./types.js";
 export declare class BlocksDataClient {
     private readonly http;
     constructor(http: BlocksHttpClient);
@@ -43,27 +43,27 @@ export declare class BlocksDataClient {
     };
     files: {
         /**
-         * What: reads one file record through `GET /data/v4/Files/GetFile`.
+         * What: reads one file record through the current file download operation.
          * Why: frontend views need file metadata or a downloadable reference by file id.
          * How: pass `fileId` and optional Data file configuration/version fields.
          */
         get: (fileId: string, options?: BlocksFileGetOptions) => Promise<unknown>;
         /**
-         * What: batch-reads files through `POST /data/v4/Files/GetFiles`.
+         * What: batch-reads file metadata and download URLs.
          * Why: pages with many attachments should avoid one request per file.
          * How: pass the file-list payload exactly as Data expects; the SDK does not inject project fields.
          */
         getMany: (request: BlocksFileListRequest) => Promise<unknown>;
         /**
-         * What: lists file records and metadata through `POST /data/v4/Files/GetFilesInfo`.
+         * What: lists file records and metadata.
          * Why: storage browsers and attachment managers need paged file metadata before downloading content.
          * How: pass paging, sort, and filter fields; the SDK sends your request without any `projectKey`.
          */
         info: (request: BlocksFileInfoListRequest) => Promise<unknown>;
         /**
-         * What: requests an upload URL through `POST /data/v4/Files/GetPreSignedUrlForUpload`.
+         * What: creates file/version metadata and requests a pre-signed upload URL.
          * Why: browser apps should upload binary content through the URL issued by Blocks Data.
-         * How: pass file metadata such as `name`, `contentType`, `configurationName`, and optional DMS fields.
+         * How: pass file metadata plus a parent directory id or module default.
          */
         presignedUploadUrl: (request: BlocksFileUploadRequest) => Promise<unknown>;
         /**
@@ -73,55 +73,50 @@ export declare class BlocksDataClient {
          */
         uploadToUrl: (request: BlocksUploadToUrlRequest) => Promise<unknown>;
         /**
-         * What: uploads a file through `POST /data/v4/Files/UploadFileToLocalStorage`.
+         * What: creates a file/version and uploads its bytes to local storage.
          * Why: local-storage deployments need multipart upload through Blocks Data instead of a pre-signed cloud URL.
          * How: pass a `Blob`/`File` and metadata; the SDK builds `FormData` and does not add `projectKey`.
          */
         uploadToLocalStorage: (request: BlocksLocalStorageUploadRequest) => Promise<unknown>;
         /**
-         * What: deletes a file through `POST /data/v4/Files/DeleteFile`.
+         * What: moves a file to trash or permanently deletes it.
          * Why: storage UIs need to remove files when permissions and Data rules allow it.
-         * How: pass `fileId` and optional `configurationName`; the SDK sends no project key.
+         * How: pass `fileId` and an explicit `permanent` choice; false moves to trash.
          */
         delete: (request: BlocksFileDeleteRequest) => Promise<unknown>;
         /**
-         * What: updates file additional properties through `POST /data/v4/Files/UpdateFileAdditionalInfo`.
+         * What: updates file additional properties.
          * Why: apps often need to attach searchable metadata such as agent status or business references to a file.
          * How: pass `itemId` and `additionalProperties`; the SDK forwards the request as-is except for not adding project fields.
          */
         updateAdditionalInfo: (request: BlocksFileUpdateAdditionalInfoRequest) => Promise<unknown>;
-        /**
-         * What: reads DMS file/folder entries through `POST /data/v4/Files/GetDmsFileAndFolder`.
-         * Why: document-management views need combined folder and file listings.
-         * How: pass Data's DMS listing payload exactly as your app builds it.
-         */
-        listFolder: (request: BlocksFileListRequest) => Promise<unknown>;
+        versions: (request: BlocksFileVersionsRequest) => Promise<unknown>;
+        createVersion: (request: BlocksFileCreateVersionRequest) => Promise<unknown>;
+        copy: (request: BlocksFileCopyRequest) => Promise<unknown>;
+        move: (request: BlocksFileMoveRequest) => Promise<unknown>;
+        rename: (request: BlocksFileRenameRequest) => Promise<unknown>;
     };
-    dms: {
-        /**
-         * What: lists DMS files and folders through `POST /data/v4/Files/GetDmsFileAndFolder`.
-         * Why: document-management screens need folder contents, search, skip/take paging, and file entries together.
-         * How: pass DMS listing fields such as `parentId`, `configurationName`, `searchKey`, `skip`, and `take`.
-         */
-        list: (request: BlocksDmsListRequest) => Promise<unknown>;
-        /**
-         * What: registers uploaded files in DMS through `POST /data/v4/Files/UploadFile`.
-         * Why: after binary upload, DMS needs artifact metadata so files appear in document folders.
-         * How: pass the `upload` array with file storage ids and metadata returned from the upload flow.
-         */
-        uploadFiles: (request: BlocksDmsUploadRequest) => Promise<unknown>;
-        /**
-         * What: creates a DMS folder through `POST /data/v4/Files/CreateFolder`.
-         * Why: document-management UIs need to create folder hierarchy for uploaded files.
-         * How: pass folder metadata such as `artifactName`, `parentId`, and optional `configurationName`.
-         */
-        createFolder: (request: BlocksDmsCreateFolderRequest) => Promise<unknown>;
-        /**
-         * What: deletes a DMS folder through `POST /data/v4/Files/DeleteFolder`.
-         * Why: document-management UIs need to remove empty or allowed folders.
-         * How: pass `folderId` and optional `configurationName`; the SDK sends no project key.
-         */
-        deleteFolder: (request: BlocksFolderDeleteRequest) => Promise<unknown>;
+    directories: {
+        create: (request: BlocksDirectoryCreateRequest) => Promise<unknown>;
+        get: (directoryId: string) => Promise<unknown>;
+        update: (request: BlocksDirectoryUpdateRequest) => Promise<unknown>;
+        delete: (request: BlocksDirectoryDeleteRequest) => Promise<unknown>;
+        move: (request: BlocksDirectoryMoveRequest) => Promise<unknown>;
+    };
+    objects: {
+        list: (request?: BlocksStorageObjectListRequest) => Promise<BlocksStorageObjectsResponse>;
+        search: (request: BlocksStorageObjectSearchRequest) => Promise<BlocksStorageObjectsResponse>;
+        trash: (request?: BlocksStorageObjectPageRequest) => Promise<BlocksStorageObjectsResponse>;
+        shared: (request?: BlocksStorageObjectPageRequest) => Promise<BlocksStorageObjectsResponse>;
+        restore: (request: BlocksStorageResourceRequest) => Promise<unknown>;
+        deleteFromTrash: (request: BlocksStorageResourceRequest) => Promise<unknown>;
+        accessPolicies: (resourceId: string) => Promise<unknown>;
+        grantAccess: (request: BlocksStorageAccessPolicyRequest) => Promise<unknown>;
+        updateAccess: (request: BlocksStorageAccessPolicyRequest) => Promise<unknown>;
+        revokeAccess: (request: BlocksStorageRevokeAccessRequest) => Promise<unknown>;
+        resolveAccess: (resourceId: string) => Promise<unknown>;
+        toggleInheritance: (request: BlocksStorageToggleInheritanceRequest) => Promise<unknown>;
+        share: (request: BlocksStorageShareRequest) => Promise<unknown>;
     };
     validations: {
         /**

package/dist/data/data-client.js

@@ -54,11 +54,11 @@ export class BlocksDataClient {
     };
     files = {
         /**
-         * What: reads one file record through `GET /data/v4/Files/GetFile`.
+         * What: reads one file record through the current file download operation.
          * Why: frontend views need file metadata or a downloadable reference by file id.
          * How: pass `fileId` and optional Data file configuration/version fields.
          */
-        get: (fileId, options = {}) => this.http.request(`${DATA_API}/Files/GetFile`, {
+        get: (fileId, options = {}) => this.http.request(`${DATA_API}/files/get-file`, {
             query: {
                 ConfigurationName: options.configurationName,
                 FileId: fileId,
@@ -66,27 +66,27 @@ export class BlocksDataClient {
             }
         }),
         /**
-         * What: batch-reads files through `POST /data/v4/Files/GetFiles`.
+         * What: batch-reads file metadata and download URLs.
          * Why: pages with many attachments should avoid one request per file.
          * How: pass the file-list payload exactly as Data expects; the SDK does not inject project fields.
          */
-        getMany: (request) => this.http.request(`${DATA_API}/Files/GetFiles`, {
+        getMany: (request) => this.http.request(`${DATA_API}/files/get-files`, {
             body: normalizeFileListRequest(request)
         }),
         /**
-         * What: lists file records and metadata through `POST /data/v4/Files/GetFilesInfo`.
+         * What: lists file records and metadata.
          * Why: storage browsers and attachment managers need paged file metadata before downloading content.
          * How: pass paging, sort, and filter fields; the SDK sends your request without any `projectKey`.
          */
-        info: (request) => this.http.request(`${DATA_API}/Files/GetFilesInfo`, {
+        info: (request) => this.http.request(`${DATA_API}/files/get-files-info`, {
             body: withoutProjectKey(request)
         }),
         /**
-         * What: requests an upload URL through `POST /data/v4/Files/GetPreSignedUrlForUpload`.
+         * What: creates file/version metadata and requests a pre-signed upload URL.
          * Why: browser apps should upload binary content through the URL issued by Blocks Data.
-         * How: pass file metadata such as `name`, `contentType`, `configurationName`, and optional DMS fields.
+         * How: pass file metadata plus a parent directory id or module default.
          */
-        presignedUploadUrl: (request) => this.http.request(`${DATA_API}/Files/GetPreSignedUrlForUpload`, {
+        presignedUploadUrl: (request) => this.http.request(`${DATA_API}/files/get-pre-signed-url-for-upload`, {
             body: normalizeUploadRequest(request)
         }),
         /**
@@ -107,71 +107,102 @@ export class BlocksDataClient {
             });
         },
         /**
-         * What: uploads a file through `POST /data/v4/Files/UploadFileToLocalStorage`.
+         * What: creates a file/version and uploads its bytes to local storage.
          * Why: local-storage deployments need multipart upload through Blocks Data instead of a pre-signed cloud URL.
          * How: pass a `Blob`/`File` and metadata; the SDK builds `FormData` and does not add `projectKey`.
          */
-        uploadToLocalStorage: (request) => this.http.request(`${DATA_API}/Files/UploadFileToLocalStorage`, {
+        uploadToLocalStorage: (request) => this.http.request(`${DATA_API}/files/upload-file-to-local-storage`, {
             body: toLocalStorageFormData(request),
             headers: {}
         }),
         /**
-         * What: deletes a file through `POST /data/v4/Files/DeleteFile`.
+         * What: moves a file to trash or permanently deletes it.
          * Why: storage UIs need to remove files when permissions and Data rules allow it.
-         * How: pass `fileId` and optional `configurationName`; the SDK sends no project key.
+         * How: pass `fileId` and an explicit `permanent` choice; false moves to trash.
          */
-        delete: (request) => this.http.request(`${DATA_API}/Files/DeleteFile`, {
+        delete: (request) => this.http.request(`${DATA_API}/files/delete-file`, {
             body: withoutProjectKey(request)
         }),
         /**
-         * What: updates file additional properties through `POST /data/v4/Files/UpdateFileAdditionalInfo`.
+         * What: updates file additional properties.
          * Why: apps often need to attach searchable metadata such as agent status or business references to a file.
          * How: pass `itemId` and `additionalProperties`; the SDK forwards the request as-is except for not adding project fields.
          */
-        updateAdditionalInfo: (request) => this.http.request(`${DATA_API}/Files/UpdateFileAdditionalInfo`, {
+        updateAdditionalInfo: (request) => this.http.request(`${DATA_API}/files/update-file-additional-info`, {
             body: withoutProjectKey(request)
         }),
-        /**
-         * What: reads DMS file/folder entries through `POST /data/v4/Files/GetDmsFileAndFolder`.
-         * Why: document-management views need combined folder and file listings.
-         * How: pass Data's DMS listing payload exactly as your app builds it.
-         */
-        listFolder: (request) => this.http.request(`${DATA_API}/Files/GetDmsFileAndFolder`, {
-            body: withoutProjectKey(request)
+        versions: (request) => this.http.request(`${DATA_API}/files/get-file-versions`, {
+            query: request
+        }),
+        createVersion: (request) => this.http.request(`${DATA_API}/files/create-file-version`, {
+            body: request
+        }),
+        copy: (request) => this.http.request(`${DATA_API}/files/copy-file`, {
+            body: request
+        }),
+        move: (request) => this.http.request(`${DATA_API}/files/move-file`, {
+            body: request
+        }),
+        rename: (request) => this.http.request(`${DATA_API}/files/rename-file`, {
+            body: request
         })
     };
-    dms = {
-        /**
-         * What: lists DMS files and folders through `POST /data/v4/Files/GetDmsFileAndFolder`.
-         * Why: document-management screens need folder contents, search, skip/take paging, and file entries together.
-         * How: pass DMS listing fields such as `parentId`, `configurationName`, `searchKey`, `skip`, and `take`.
-         */
-        list: (request) => this.http.request(`${DATA_API}/Files/GetDmsFileAndFolder`, {
-            body: withoutProjectKey(request)
+    directories = {
+        create: (request) => this.http.request(`${DATA_API}/directory/create-directory`, {
+            body: request
         }),
-        /**
-         * What: registers uploaded files in DMS through `POST /data/v4/Files/UploadFile`.
-         * Why: after binary upload, DMS needs artifact metadata so files appear in document folders.
-         * How: pass the `upload` array with file storage ids and metadata returned from the upload flow.
-         */
-        uploadFiles: (request) => this.http.request(`${DATA_API}/Files/UploadFile`, {
-            body: withoutProjectKey(request)
+        get: (directoryId) => this.http.request(`${DATA_API}/directory/get-directory`, {
+            query: { directoryId }
         }),
-        /**
-         * What: creates a DMS folder through `POST /data/v4/Files/CreateFolder`.
-         * Why: document-management UIs need to create folder hierarchy for uploaded files.
-         * How: pass folder metadata such as `artifactName`, `parentId`, and optional `configurationName`.
-         */
-        createFolder: (request) => this.http.request(`${DATA_API}/Files/CreateFolder`, {
-            body: withoutProjectKey(request)
+        update: (request) => this.http.request(`${DATA_API}/directory/update-directory`, {
+            body: request
         }),
-        /**
-         * What: deletes a DMS folder through `POST /data/v4/Files/DeleteFolder`.
-         * Why: document-management UIs need to remove empty or allowed folders.
-         * How: pass `folderId` and optional `configurationName`; the SDK sends no project key.
-         */
-        deleteFolder: (request) => this.http.request(`${DATA_API}/Files/DeleteFolder`, {
-            body: withoutProjectKey(request)
+        delete: (request) => this.http.request(`${DATA_API}/directory/delete-directory`, {
+            body: request
+        }),
+        move: (request) => this.http.request(`${DATA_API}/directory/move-directory`, {
+            body: request
+        })
+    };
+    objects = {
+        list: (request = {}) => this.http.request(`${DATA_API}/objects/get-objects`, {
+            query: request
+        }),
+        search: (request) => this.http.request(`${DATA_API}/objects/search-objects`, {
+            query: request
+        }),
+        trash: (request = {}) => this.http.request(`${DATA_API}/objects/get-trash`, {
+            query: request
+        }),
+        shared: (request = {}) => this.http.request(`${DATA_API}/objects/get-shared-objects`, {
+            query: request
+        }),
+        restore: (request) => this.http.request(`${DATA_API}/objects/restore-from-trash`, {
+            body: request
+        }),
+        deleteFromTrash: (request) => this.http.request(`${DATA_API}/objects/delete-from-trash`, {
+            body: request
+        }),
+        accessPolicies: (resourceId) => this.http.request(`${DATA_API}/objects/get-access-policies`, {
+            query: { resourceId }
+        }),
+        grantAccess: (request) => this.http.request(`${DATA_API}/objects/grant-access`, {
+            body: request
+        }),
+        updateAccess: (request) => this.http.request(`${DATA_API}/objects/update-access-policy`, {
+            body: request
+        }),
+        revokeAccess: (request) => this.http.request(`${DATA_API}/objects/revoke-access-policy`, {
+            body: request
+        }),
+        resolveAccess: (resourceId) => this.http.request(`${DATA_API}/objects/resolve-access`, {
+            query: { resourceId }
+        }),
+        toggleInheritance: (request) => this.http.request(`${DATA_API}/objects/toggle-inheritance`, {
+            body: request
+        }),
+        share: (request) => this.http.request(`${DATA_API}/objects/share-object`, {
+            body: request
         })
     };
     validations = {

package/dist/data/types.d.ts

@@ -101,10 +101,7 @@ export type BlocksFileDeleteRequest = Record<string, unknown> & {
     configurationName?: string;
     eventQueueName?: string;
     fileId: string;
-};
-export type BlocksFolderDeleteRequest = Record<string, unknown> & {
-    configurationName?: string;
-    folderId: string;
+    permanent: boolean;
 };
 export type BlocksFileUpdateAdditionalInfoRequest = Record<string, unknown> & {
     additionalProperties?: Record<string, string>;
@@ -127,38 +124,132 @@ export type BlocksUploadToUrlRequest = {
     headers?: HeadersInit;
     url: string;
 };
-export type BlocksDmsListRequest = Record<string, unknown> & {
-    configurationName?: string;
-    moduleName?: string;
-    parentId?: string;
-    searchKey?: string;
-    skip?: number;
-    take?: number;
-};
-export type BlocksDmsMetaDataValue = {
-    type: string;
-    value: string;
-};
-export type BlocksDmsUploadItem = Record<string, unknown> & {
-    artifactName?: string;
+export type BlocksStorageObjectType = "directory" | "file";
+export type BlocksStorageResourceType = "Directory" | "File";
+export type BlocksStoragePrincipalType = "User" | "Role" | "Everyone" | "Organization";
+export type BlocksStoragePermission = "View" | "Download" | "Edit" | "Delete" | "Manage" | "Owner";
+export type BlocksStorageEffect = "Allow" | "Deny";
+export type BlocksStoragePermissionFlags = {
+    canDelete: boolean;
+    canDownload: boolean;
+    canEdit: boolean;
+    canManage: boolean;
+    canOwner: boolean;
+    canView: boolean;
+};
+export type BlocksStorageObject = {
+    childDirectoryCount?: number;
+    childFileCount?: number;
+    contentType?: string;
+    createdBy?: string;
+    createdDate: string;
+    currentVersion?: number;
+    extension?: string;
+    isDefault: boolean;
+    itemId: string;
+    lastUpdatedDate: string;
+    name: string;
+    parentDirectoryId?: string;
+    permissions: BlocksStoragePermissionFlags;
+    sizeInBytes: number;
+    type: BlocksStorageObjectType;
+};
+export type BlocksStorageObjectsResponse = {
+    hasMore: boolean;
+    items: BlocksStorageObject[];
+    nextCursor?: string;
+    totalChildCount: number;
+};
+export type BlocksStorageObjectListRequest = {
+    cursor?: string;
+    limit?: number;
+    moduleName?: number;
+    parentDirectoryId?: string;
+    search?: string;
+    type?: BlocksStorageObjectType;
+};
+export type BlocksStorageObjectSearchRequest = {
+    cursor?: string;
+    directoryId?: string;
+    limit?: number;
+    query: string;
+    type?: BlocksStorageObjectType;
+};
+export type BlocksStorageObjectPageRequest = {
+    cursor?: string;
+    limit?: number;
+    type?: BlocksStorageObjectType;
+};
+export type BlocksDirectoryCreateRequest = {
+    allowedFileExtensions?: string[];
     configurationName?: string;
     description?: string;
-    fileStorageId: string;
-    metaData?: Record<string, BlocksDmsMetaDataValue>;
-    organizationId?: string;
-    parentId?: string;
-    tags?: string[];
+    moduleName?: number;
+    name: string;
+    parentDirectoryId?: string;
+};
+export type BlocksDirectoryUpdateRequest = {
+    description?: string;
+    directoryId: string;
+    name?: string;
+};
+export type BlocksDirectoryDeleteRequest = {
+    directoryId: string;
+    permanent: boolean;
+};
+export type BlocksDirectoryMoveRequest = {
+    directoryId: string;
+    targetDirectoryId?: string;
 };
-export type BlocksDmsUploadRequest = Record<string, unknown> & {
-    upload: BlocksDmsUploadItem[];
+export type BlocksFileVersionsRequest = {
+    cursor?: string;
+    fileId: string;
+    limit?: number;
 };
-export type BlocksDmsCreateFolderRequest = Record<string, unknown> & {
-    artifactName: string;
+export type BlocksFileCreateVersionRequest = {
     configurationName?: string;
-    description?: string;
-    fileStorageId?: string;
-    metaData?: Record<string, BlocksDmsMetaDataValue>;
-    organizationId?: string;
-    parentId?: string;
-    tags?: string[];
+    fileId: string;
+};
+export type BlocksFileCopyRequest = {
+    copyAccessPolicies?: boolean;
+    fileId: string;
+    targetDirectoryId: string;
+};
+export type BlocksFileMoveRequest = {
+    fileId: string;
+    targetDirectoryId: string;
+};
+export type BlocksFileRenameRequest = {
+    fileId: string;
+    name: string;
+};
+export type BlocksStorageResourceRequest = {
+    resourceId: string;
+};
+export type BlocksStorageAccessPolicyRequest = {
+    effect?: BlocksStorageEffect;
+    expiresAt?: string;
+    permission: BlocksStoragePermission;
+    policyItemId?: string;
+    principalId?: string;
+    principalType: BlocksStoragePrincipalType;
+    priority?: number;
+    resourceId: string;
+    resourceType: BlocksStorageResourceType;
+};
+export type BlocksStorageRevokeAccessRequest = {
+    policyItemId: string;
+    resourceId: string;
+};
+export type BlocksStorageToggleInheritanceRequest = {
+    inheritsParentAccess: boolean;
+    resourceId: string;
+};
+export type BlocksStorageShareRequest = {
+    expiresAt?: string;
+    permission: BlocksStoragePermission;
+    principalId?: string;
+    principalType: BlocksStoragePrincipalType;
+    resourceId: string;
+    resourceType: BlocksStorageResourceType;
 };

package/dist/http/http-client.js

@@ -12,26 +12,38 @@ export class BlocksHttpClient {
     }
     async request(path, options = {}) {
         const url = buildUrl(this.config.apiUrl, path, options.query);
-        const headers = new Headers(options.headers);
         const rawBody = isBodyInit(options.body) ? options.body : undefined;
-        headers.set("Accept", "application/json");
-        headers.set("x-blocks-key", this.config.xBlocksKey);
-        if (options.body !== undefined && !rawBody && !headers.has("Content-Type")) {
-            headers.set("Content-Type", "application/json");
+        const send = async (accessTokenOverride) => {
+            const headers = new Headers(options.headers);
+            headers.set("Accept", "application/json");
+            headers.set("x-blocks-key", this.config.xBlocksKey);
+            if (options.body !== undefined && !rawBody && !headers.has("Content-Type")) {
+                headers.set("Content-Type", "application/json");
+            }
+            if (options.auth !== false) {
+                const token = accessTokenOverride ?? options.accessToken ?? await this.auth.accessToken();
+                if (token)
+                    headers.set("Authorization", `Bearer ${token}`);
+            }
+            return this.fetchImpl(url, {
+                body: rawBody ?? (options.body === undefined ? undefined : JSON.stringify(options.body)),
+                // IAM's hosted IdP flow sets the session as a Secure, httpOnly cookie by default;
+                // without this the browser never sends it back on subsequent Blocks API calls.
+                credentials: "include",
+                headers,
+                method: options.method ?? (options.body === undefined ? "GET" : "POST")
+            });
+        };
+        let response = await send();
+        // A 401 on a token the caller supplied directly (options.accessToken) is the
+        // caller's problem to resolve, not ours. Otherwise, give the app one chance to
+        // recover through its own onUnauthorized hook (expected to dedupe concurrent
+        // callers behind a single refresh) and retry exactly once with what it returns.
+        if (response.status === 401 && options.auth !== false && options.accessToken === undefined && this.config.onUnauthorized) {
+            const freshToken = await this.config.onUnauthorized();
+            if (freshToken)
+                response = await send(freshToken);
         }
-        if (options.auth !== false) {
-            const token = options.accessToken ?? await this.auth.accessToken();
-            if (token)
-                headers.set("Authorization", `Bearer ${token}`);
-        }
-        const response = await this.fetchImpl(url, {
-            body: rawBody ?? (options.body === undefined ? undefined : JSON.stringify(options.body)),
-            // IAM's hosted IdP flow sets the session as a Secure, httpOnly cookie by default;
-            // without this the browser never sends it back on subsequent Blocks API calls.
-            credentials: "include",
-            headers,
-            method: options.method ?? (options.body === undefined ? "GET" : "POST")
-        });
         const body = await parseBody(response);
         if (!response.ok)
             throw new BlocksApiError(response.status, response.statusText, body);

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export { BlocksNotifierClient } from "./notifier/notifier-client.js";
 export type { BlocksAuthPassThroughResponse, BlocksAuthResponse, BlocksClientCredentialsRequest, BlocksAuthLoginRequest, BlocksIdpCallbackRequest, BlocksIdpInitiateRequest, BlocksIdpInitiateResponse, BlocksLoginOption, BlocksLogoutRequest, BlocksOidcRefreshRequest, BlocksOidcUserInfo, BlocksRefreshRequest, BlocksSocialLoginRequest, BlocksSwitchOrganizationRequest } from "./auth/auth-client.js";
 export type { BlocksRequestOptions } from "./types.js";
 export type { BlocksBaseResponse, BlocksGetMyOrganizationsResponse, BlocksGetOrganizationResponse, BlocksGetOrganizationsResponse, BlocksGetPermissionResponse, BlocksGetPermissionsResponse, BlocksGetRoleResponse, BlocksGetRolesResponse, BlocksGetUserResponse, BlocksGetUsersResponse, BlocksIamListRequest, BlocksMeResponse, BlocksOrganization, BlocksPermission, BlocksQueryListResponse, BlocksQueryResponse, BlocksRole, BlocksUser } from "./iam/types.js";
-export type { BlocksDataCollection, BlocksDataListOptions, BlocksDmsCreateFolderRequest, BlocksDmsListRequest, BlocksDmsMetaDataValue, BlocksDmsUploadItem, BlocksDmsUploadRequest, BlocksFileDeleteRequest, BlocksFileGetOptions, BlocksFileInfoListRequest, BlocksFileListRequest, BlocksFileUpdateAdditionalInfoRequest, BlocksFileUploadRequest, BlocksFolderDeleteRequest, BlocksGraphqlRequest, BlocksLocalStorageUploadRequest, BlocksPagedResult, BlocksRegexGenerateRequest, BlocksSchemaFieldValidationOptions, BlocksSchemaListOptions, BlocksSchemaValidationListOptions, BlocksUploadToUrlRequest } from "./data/types.js";
+export type { BlocksDataCollection, BlocksDataListOptions, BlocksDirectoryCreateRequest, BlocksDirectoryDeleteRequest, BlocksDirectoryMoveRequest, BlocksDirectoryUpdateRequest, BlocksFileCopyRequest, BlocksFileCreateVersionRequest, BlocksFileDeleteRequest, BlocksFileGetOptions, BlocksFileInfoListRequest, BlocksFileListRequest, BlocksFileMoveRequest, BlocksFileRenameRequest, BlocksFileUpdateAdditionalInfoRequest, BlocksFileUploadRequest, BlocksFileVersionsRequest, BlocksGraphqlRequest, BlocksLocalStorageUploadRequest, BlocksPagedResult, BlocksRegexGenerateRequest, BlocksSchemaFieldValidationOptions, BlocksSchemaListOptions, BlocksSchemaValidationListOptions, BlocksStorageAccessPolicyRequest, BlocksStorageEffect, BlocksStorageObject, BlocksStorageObjectListRequest, BlocksStorageObjectPageRequest, BlocksStorageObjectSearchRequest, BlocksStorageObjectsResponse, BlocksStorageObjectType, BlocksStoragePermission, BlocksStoragePermissionFlags, BlocksStoragePrincipalType, BlocksStorageResourceRequest, BlocksStorageResourceType, BlocksStorageRevokeAccessRequest, BlocksStorageShareRequest, BlocksStorageToggleInheritanceRequest, BlocksUploadToUrlRequest } from "./data/types.js";
 export type { BlocksLocalizationDictionary, BlocksLocalizationKey, BlocksLocalizationKeyResource, BlocksLocalizationKeysByNamesRequest, BlocksLocalizationKeysByNamesResponse, BlocksLocalizationLanguage, BlocksLocalizationModule, BlocksLocalizationTranslationOptions } from "./localization/types.js";
 export type { BlocksMfaBackupCodeUseRequest, BlocksMfaConfig, BlocksMfaConfigSaveRequest, BlocksMfaGenerateRequest, BlocksMfaPassThroughResponse, BlocksMfaResendRequest, BlocksMfaSetMethodRequest, BlocksMfaVerifyRequest, BlocksMfaVerifyTotpSetupRequest } from "./mfa/types.js";
 export type { BlocksMailPassThroughResponse, BlocksSendMailRequest, BlocksSendMailToAnyRequest } from "./mail/types.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seliseblocks/client",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Framework-neutral TypeScript client SDK for SELISE Blocks frontend applications.",
   "license": "MIT",
   "type": "module",