@sylphx/management 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @sylphx/management
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [[`03dbd29`](https://github.com/SylphxAI/platform/commit/03dbd2986024fa650378e10958890d6ac063f516)]:
+  - @sylphx/contract@0.3.0
+
 ## 0.2.0
 
 ### Minor Changes

package/dist/admin.d.ts

@@ -98,7 +98,7 @@ export declare const retireJwtKey: (client: Client, keyId: string) => Promise<{
 /**
  * Trigger a project migration between regions. Phase 4b Matrix-2 gap.
  * Underlying endpoint on the platform API is
- * `POST /admin/projects/:id/migrate` — the SDK wraps it directly rather
+ * `POST /operator/projects/:id/migrate` — the SDK wraps it directly rather
  * than going through `adminProjectsEndpoints` because migration is its
  * own operational concern (drain → cut-over → warm-up).
  */
@@ -138,4 +138,31 @@ export declare const updateUserRole: (client: Client, userId: string, body: {
 }) => Promise<{
     user: AdminUserView;
 }>;
+/**
+ * L-15 (2026-05-02): manually verify a user's email. Super-admin only on the
+ * platform tenant. The Management API endpoint exists at
+ * `POST /admin/users/users/:userId/verify-email`; the SDK helper was the
+ * missing piece blocking operators from validating the new-user E2E flow
+ * without (a) a real email inbox or (b) a forbidden direct DB UPDATE.
+ */
+export declare const verifyUserEmail: (client: Client, userId: string) => Promise<{
+    readonly id: string;
+    readonly email: string;
+}>;
+/**
+ * L-15 (2026-05-02): soft-delete a platform user. Super-admin only;
+ * cannot delete oneself. Existing sessions are revoked first.
+ */
+export declare const deleteUser: (client: Client, userId: string) => Promise<{
+    readonly id: string;
+    readonly email: string;
+}>;
+/**
+ * L-15 (2026-05-02): revoke ALL sessions for a user (force re-login).
+ * Super-admin only.
+ */
+export declare const revokeUserSessions: (client: Client, userId: string) => Promise<{
+    readonly userId: string;
+    readonly revokedCount: number;
+}>;
 //# sourceMappingURL=admin.d.ts.map

package/dist/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKzC,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC9B;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAG7C,CAAA;AAED,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGhC,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IACV,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC/F,CAGA,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KACzF,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAG7C,CAAA;AAED,eAAO,MAAM,qBAAqB,GACjC,QAAQ,MAAM,EACd,SAAS,MAAM,KACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,QAAQ;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/E,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAG5C,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAG/C,CAAA;AAID,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,eAAO,MAAM,eAAe,GAC3B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,WAAW,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC9E,OAAO,CAAC;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,CAGpC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAGzF,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,IAAI,MAAM,KACR,OAAO,CAAC;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,CAGpC,CAAA;AAID,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,eAAO,MAAM,WAAW,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAG/E,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAGxE,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAGnF,CAAA;AAID;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM;IACL,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,kBAAkB,CAAA;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CACzB,KACC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAC+C,CAAA;AAE9F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GACpC,QAAQ,MAAM,EACd,eAAe,MAAM,KACnB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGxC,CAAA;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAGrF,CAAA;AAED,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAGvF,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAC7B,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAGjC,CAAA"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKzC,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC9B;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAG7C,CAAA;AAED,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGhC,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IACV,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC/F,CAGA,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KACzF,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAG7C,CAAA;AAED,eAAO,MAAM,qBAAqB,GACjC,QAAQ,MAAM,EACd,SAAS,MAAM,KACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,QAAQ;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/E,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAG5C,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAG/C,CAAA;AAID,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,eAAO,MAAM,eAAe,GAC3B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,WAAW,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC9E,OAAO,CAAC;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,CAGpC,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAGzF,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,IAAI,MAAM,KACR,OAAO,CAAC;IAAE,UAAU,EAAE,UAAU,CAAA;CAAE,CAGpC,CAAA;AAID,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,eAAO,MAAM,WAAW,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAG/E,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAGxE,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAGnF,CAAA;AAID;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM;IACL,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,kBAAkB,CAAA;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CACzB,KACC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CACkD,CAAA;AAEjG;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GACpC,QAAQ,MAAM,EACd,eAAe,MAAM,KACnB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGxC,CAAA;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAGrF,CAAA;AAED,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAGvF,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAC7B,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAGjC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC3B,QAAQ,MAAM,EACd,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGzD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,GACtB,QAAQ,MAAM,EACd,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGzD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC9B,QAAQ,MAAM,EACd,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAGpE,CAAA"}

package/dist/admin.js

@@ -68,11 +68,11 @@ export const retireJwtKey = (client, keyId) => {
 /**
  * Trigger a project migration between regions. Phase 4b Matrix-2 gap.
  * Underlying endpoint on the platform API is
- * `POST /admin/projects/:id/migrate` — the SDK wraps it directly rather
+ * `POST /operator/projects/:id/migrate` — the SDK wraps it directly rather
  * than going through `adminProjectsEndpoints` because migration is its
  * own operational concern (drain → cut-over → warm-up).
  */
-export const migrateProject = (client, projectId, body) => request(client, 'POST', `/admin/projects/${encodeURIComponent(projectId)}/migrate`, { body });
+export const migrateProject = (client, projectId, body) => request(client, 'POST', `/operator/projects/${encodeURIComponent(projectId)}/migrate`, { body });
 /**
  * Regenerate an environment's deploy / API key. Already exposed on
  * `adminProjectsEndpoints.regenerateKey`; surfaced here under the `admin`
@@ -94,3 +94,30 @@ export const updateUserRole = (client, userId, body) => {
     const { method, path } = adminUsersEndpoints.updateRole;
     return request(client, method, interpolatePath(path, { userId }), { body });
 };
+/**
+ * L-15 (2026-05-02): manually verify a user's email. Super-admin only on the
+ * platform tenant. The Management API endpoint exists at
+ * `POST /admin/users/users/:userId/verify-email`; the SDK helper was the
+ * missing piece blocking operators from validating the new-user E2E flow
+ * without (a) a real email inbox or (b) a forbidden direct DB UPDATE.
+ */
+export const verifyUserEmail = (client, userId) => {
+    const { method, path } = adminUsersEndpoints.verifyEmail;
+    return request(client, method, interpolatePath(path, { userId }));
+};
+/**
+ * L-15 (2026-05-02): soft-delete a platform user. Super-admin only;
+ * cannot delete oneself. Existing sessions are revoked first.
+ */
+export const deleteUser = (client, userId) => {
+    const { method, path } = adminUsersEndpoints.delete;
+    return request(client, method, interpolatePath(path, { userId }));
+};
+/**
+ * L-15 (2026-05-02): revoke ALL sessions for a user (force re-login).
+ * Super-admin only.
+ */
+export const revokeUserSessions = (client, userId) => {
+    const { method, path } = adminUsersEndpoints.revokeSessions;
+    return request(client, method, interpolatePath(path, { userId }));
+};

package/dist/adminProjectCredentials.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `@sylphx/management/adminProjectCredentials` — operator BaaS credential rotation.
+ *
+ * Rotates an environment's `sk_*` / `pk_*` pair and optionally syncs the new
+ * `sk_*` into the environment-level `SYLPHX_SECRET_KEY` app secret so the
+ * reconciler updates deployed workloads through the normal desired-state path.
+ */
+import type { Client } from './client.js';
+export interface RotateEnvironmentCredentialsInput {
+    /** TypeID (`env_*`) of the target environment. */
+    readonly environmentId: string;
+    /** Audit narrative. Min 3 chars. */
+    readonly reason: string;
+    /** When true, upsert shared env var `SYLPHX_SECRET_KEY` and queue reconciliation. */
+    readonly syncDeploymentSecret?: boolean;
+}
+export interface RotateEnvironmentCredentialsBySlugInput {
+    /** Project slug, e.g. `keen-wave-x3m9p2`. */
+    readonly projectSlug: string;
+    /** Environment display name, e.g. `Production`. */
+    readonly environmentName: string;
+    /** Audit narrative. Min 3 chars. */
+    readonly reason: string;
+    /** When true, upsert shared env var `SYLPHX_SECRET_KEY` and queue reconciliation. */
+    readonly syncDeploymentSecret?: boolean;
+}
+export interface RotateEnvironmentCredentialsResult {
+    readonly environmentId: string;
+    readonly envType: 'development' | 'staging' | 'production';
+    /** Raw secret key, returned once. Do not log. */
+    readonly secretKey: string;
+    readonly publicKey: string;
+    readonly syncedDeploymentSecret: boolean;
+    readonly queued: boolean;
+    readonly generation: number;
+}
+export declare const rotateEnvironmentCredentials: (client: Client, input: RotateEnvironmentCredentialsInput) => Promise<RotateEnvironmentCredentialsResult>;
+export declare const rotateEnvironmentCredentialsBySlug: (client: Client, input: RotateEnvironmentCredentialsBySlugInput) => Promise<RotateEnvironmentCredentialsResult>;
+//# sourceMappingURL=adminProjectCredentials.d.ts.map

package/dist/adminProjectCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminProjectCredentials.d.ts","sourceRoot":"","sources":["../src/adminProjectCredentials.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,iCAAiC;IACjD,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qFAAqF;IACrF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CACvC;AAED,MAAM,WAAW,uCAAuC;IACvD,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qFAAqF;IACrF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CACvC;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAA;IAC1D,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B;AAED,eAAO,MAAM,4BAA4B,GACxC,QAAQ,MAAM,EACd,OAAO,iCAAiC,KACtC,OAAO,CAAC,kCAAkC,CAa5C,CAAA;AAED,eAAO,MAAM,kCAAkC,GAC9C,QAAQ,MAAM,EACd,OAAO,uCAAuC,KAC5C,OAAO,CAAC,kCAAkC,CAe5C,CAAA"}

package/dist/adminProjectCredentials.js

@@ -0,0 +1,29 @@
+/**
+ * `@sylphx/management/adminProjectCredentials` — operator BaaS credential rotation.
+ *
+ * Rotates an environment's `sk_*` / `pk_*` pair and optionally syncs the new
+ * `sk_*` into the environment-level `SYLPHX_SECRET_KEY` app secret so the
+ * reconciler updates deployed workloads through the normal desired-state path.
+ */
+import { adminProjectsEndpoints } from '@sylphx/contract';
+import { request } from './http.js';
+export const rotateEnvironmentCredentials = (client, input) => {
+    const { method, path } = adminProjectsEndpoints.rotateEnvironmentCredentials;
+    return request(client, method, path.replace(':environmentId', encodeURIComponent(input.environmentId)), {
+        body: {
+            reason: input.reason,
+            syncDeploymentSecret: input.syncDeploymentSecret ?? false,
+        },
+    });
+};
+export const rotateEnvironmentCredentialsBySlug = (client, input) => {
+    const { method, path } = adminProjectsEndpoints.rotateEnvironmentCredentialsBySlug;
+    return request(client, method, path
+        .replace(':projectSlug', encodeURIComponent(input.projectSlug))
+        .replace(':environmentName', encodeURIComponent(input.environmentName)), {
+        body: {
+            reason: input.reason,
+            syncDeploymentSecret: input.syncDeploymentSecret ?? false,
+        },
+    });
+};

package/dist/branchDatabases.d.ts

@@ -9,40 +9,21 @@
  * Mirrors `apps/api/src/server/platform/routes/branch-databases.ts`.
  * Route paths sourced from `@sylphx/contract` (ADR-084).
  */
+import type { BranchDatabase as ContractBranchDatabase, CreateBranchDatabaseInput as ContractCreateBranchDatabaseInput, DestroyBranchDatabaseResult, ListBranchDatabasesResult } from '@sylphx/contract';
 import type { Client } from './client.js';
-export interface BranchDatabase {
-    readonly id: string;
-    readonly projectId: string;
-    readonly envId: string;
-    readonly parentDatabaseId: string;
-    readonly branchName: string;
-    readonly connectionUrl: string | null;
-    readonly createdAt: string;
-    readonly status: 'ready' | 'provisioning' | 'failed' | 'deleting';
-}
-export interface CreateBranchDatabaseInput {
-    readonly parentDatabaseId?: string;
-    readonly branchName?: string;
-}
-export declare const list: (client: Client, projectId: string) => Promise<{
-    branches: readonly BranchDatabase[];
-}>;
-export declare const create: (client: Client, projectId: string, envId: string, body?: CreateBranchDatabaseInput) => Promise<{
-    branch: BranchDatabase;
-}>;
-export declare const get: (client: Client, projectId: string, envId: string) => Promise<{
-    branch: BranchDatabase;
-}>;
-declare const _delete: (client: Client, projectId: string, envId: string) => Promise<{
-    success: boolean;
-}>;
+export type BranchDatabase = ContractBranchDatabase;
+export type CreateBranchDatabaseInput = ContractCreateBranchDatabaseInput;
+export declare const list: (client: Client, projectId: string) => Promise<ListBranchDatabasesResult>;
+export declare const create: (client: Client, projectId: string, envId: string, body: CreateBranchDatabaseInput) => Promise<BranchDatabase>;
+export declare const get: (client: Client, projectId: string, envId: string) => Promise<BranchDatabase>;
+declare const _delete: (client: Client, projectId: string, envId: string) => Promise<DestroyBranchDatabaseResult>;
 export { _delete as delete };
 /**
- * Merge a branch database back into its parent. ADR-089 Phase 4b adds
- * the Management SDK surface; the underlying platform endpoint is wired
- * via the contract's `merge` key (Expand-and-contract safe: no-op if the
- * server hasn't shipped the route yet — it returns 404 which ApiError
- * propagates to the caller).
+ * Merge a branch database back into its parent.
+ *
+ * The current server route is not contract-backed, so callers should treat
+ * this as an experimental management helper until the merge endpoint joins
+ * the contract SSOT.
  */
 export declare const merge: (client: Client, projectId: string, envId: string, body?: {
     readonly strategy?: "fast-forward" | "squash" | "rebase";

package/dist/branchDatabases.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branchDatabases.d.ts","sourceRoot":"","sources":["../src/branchDatabases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAA;CACjE;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,CAGjD,CAAA;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,OAAM,yBAA8B,KAClC,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAGpC,CAAA;AAED,eAAO,MAAM,GAAG,GACf,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAGpC,CAAA;AAED,QAAA,MAAM,OAAO,GACZ,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AACD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5B;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,GACjB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,OAAM;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAO,KACrE,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAM/C,CAAA"}
+{"version":3,"file":"branchDatabases.d.ts","sourceRoot":"","sources":["../src/branchDatabases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACX,cAAc,IAAI,sBAAsB,EACxC,yBAAyB,IAAI,iCAAiC,EAC9D,2BAA2B,EAC3B,yBAAyB,EACzB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAA;AACnD,MAAM,MAAM,yBAAyB,GAAG,iCAAiC,CAAA;AAEzE,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,yBAAyB,CAGzF,CAAA;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,MAAM,yBAAyB,KAC7B,OAAO,CAAC,cAAc,CAGxB,CAAA;AAED,eAAO,MAAM,GAAG,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,cAAc,CAG5F,CAAA;AAED,QAAA,MAAM,OAAO,GACZ,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC,2BAA2B,CAGrC,CAAA;AACD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5B;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,GACjB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,OAAM;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAO,KACrE,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAM/C,CAAA"}

package/dist/branchDatabases.js

@@ -15,7 +15,7 @@ export const list = (client, projectId) => {
     const { method, path } = branchDatabasesEndpoints.list;
     return request(client, method, interpolatePath(path, { id: projectId }));
 };
-export const create = (client, projectId, envId, body = {}) => {
+export const create = (client, projectId, envId, body) => {
     const { method, path } = branchDatabasesEndpoints.create;
     return request(client, method, interpolatePath(path, { id: projectId, envId }), { body });
 };
@@ -29,10 +29,10 @@ const _delete = (client, projectId, envId) => {
 };
 export { _delete as delete };
 /**
- * Merge a branch database back into its parent. ADR-089 Phase 4b adds
- * the Management SDK surface; the underlying platform endpoint is wired
- * via the contract's `merge` key (Expand-and-contract safe: no-op if the
- * server hasn't shipped the route yet — it returns 404 which ApiError
- * propagates to the caller).
+ * Merge a branch database back into its parent.
+ *
+ * The current server route is not contract-backed, so callers should treat
+ * this as an experimental management helper until the merge endpoint joins
+ * the contract SSOT.
  */
 export const merge = (client, projectId, envId, body = {}) => request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/preview-envs/${encodeURIComponent(envId)}/branch-db/merge`, { body });

package/dist/client.d.ts

@@ -28,12 +28,19 @@ export interface ClientOptions {
     readonly baseUrl?: string;
     /** User-Agent header value. Default: `@sylphx/management/1.0.0`. */
     readonly userAgent?: string;
+    /**
+     * Optional organization selector for user-context Management API calls.
+     * Multi-org operators use this to scope requests without minting a separate
+     * OAuth token per org.
+     */
+    readonly preferredOrgId?: string;
 }
 export interface Client {
     readonly token: string;
     readonly baseUrl: string;
     readonly apiBase: string;
     readonly userAgent: string;
+    readonly preferredOrgId?: string;
 }
 export declare function createClient(opts: ClientOptions): Client;
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAQxD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAUxD"}

package/dist/client.js

@@ -24,10 +24,12 @@
  */
 export function createClient(opts) {
     const baseUrl = opts.baseUrl ?? 'https://api.sylphx.com';
-    return Object.freeze({
+    const client = {
         token: opts.token,
         baseUrl,
         apiBase: `${baseUrl}/v1`,
         userAgent: opts.userAgent ?? '@sylphx/management/1.0.0',
-    });
+        ...(opts.preferredOrgId ? { preferredOrgId: opts.preferredOrgId } : {}),
+    };
+    return Object.freeze(client);
 }

package/dist/http.d.ts

@@ -9,11 +9,32 @@
  *     the raw text.
  *   - Returns `undefined` for 204 No Content.
  *   - Accepts optional `body` (JSON-stringified) and `query` (URL-encoded).
+ *   - Auto-injects an `Idempotency-Key` header on every mutation
+ *     (POST / PUT / PATCH / DELETE) unless one is explicitly provided
+ *     or `idempotency: false` is set. See `RequestOptions.idempotencyKey`.
  */
 import type { Client } from './client.js';
 export interface RequestOptions {
     readonly body?: unknown;
     readonly query?: Readonly<Record<string, string | undefined>>;
+    /**
+     * Explicit Idempotency-Key. When omitted on a mutating method, the
+     * SDK auto-generates a fresh UUID v4 per call so accidental
+     * network-retries of the SAME SDK invocation are server-side
+     * dedup'd (server middleware `idempotencyMiddleware` enforces).
+     *
+     * Pass an explicit key when:
+     *   - The caller wants cross-process retry safety (e.g. a CI script
+     *     re-running on retry must produce the same logical mutation).
+     *   - The caller is replaying the SAME deterministic operation and
+     *     expects the cached response.
+     *
+     * Pass `null` to opt out entirely (the server middleware no-ops on
+     * absent header — this is the "I know what I'm doing" escape hatch
+     * for endpoints that DO accept duplicate non-idempotent submissions
+     * by design, e.g. usage-counter increments).
+     */
+    readonly idempotencyKey?: string | null;
 }
 /**
  * Substitute `:param` tokens in a contract-sourced path with URL-encoded

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;CAC7D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAO9F;AAED,wBAAsB,OAAO,CAAC,CAAC,EAC9B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,cAAc,GACnB,OAAO,CAAC,CAAC,CAAC,CA6CZ"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAMzC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC7D;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAYD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAO9F;AAED,wBAAsB,OAAO,CAAC,CAAC,EAC9B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,cAAc,GACnB,OAAO,CAAC,CAAC,CAAC,CA2DZ"}

package/dist/http.js

@@ -9,8 +9,22 @@
  *     the raw text.
  *   - Returns `undefined` for 204 No Content.
  *   - Accepts optional `body` (JSON-stringified) and `query` (URL-encoded).
+ *   - Auto-injects an `Idempotency-Key` header on every mutation
+ *     (POST / PUT / PATCH / DELETE) unless one is explicitly provided
+ *     or `idempotency: false` is set. See `RequestOptions.idempotencyKey`.
  */
 import { ApiError } from './errors.js';
+/** HTTP methods we treat as mutations for idempotency-key injection. */
+const MUTATING_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
+/**
+ * Generate a fresh idempotency key per call. We use `crypto.randomUUID`
+ * (available in Bun, Node 20+, Deno, Workers, modern browsers — all our
+ * supported runtimes). The server accepts any opaque string ≤256 chars;
+ * UUID v4 is 36 chars and collision-free at our volumes.
+ */
+function newIdempotencyKey() {
+    return crypto.randomUUID();
+}
 /**
  * Substitute `:param` tokens in a contract-sourced path with URL-encoded
  * values. Throws if any token is missing from `params` — the SDK should
@@ -41,11 +55,25 @@ export async function request(client, method, path, opts) {
         Accept: 'application/json',
         'User-Agent': client.userAgent,
     };
+    if (client.preferredOrgId)
+        headers['X-Preferred-Org-Id'] = client.preferredOrgId;
     // Only send Content-Type when we actually have a body to describe.
     // Some strict proxies (Cloudflare in non-standard modes, certain
     // WAFs) reject GET / DELETE requests carrying a bodyless Content-Type.
     if (hasBody)
         headers['Content-Type'] = 'application/json';
+    // Auto-inject Idempotency-Key on mutations. The server middleware
+    // at `apps/api/.../idempotency.ts` is mounted globally and no-ops
+    // on safe methods + on requests without the header — sending it
+    // gratuitously is harmless on routes that don't expect it. The key
+    // is ALWAYS sent for mutations unless caller passes `null` to opt
+    // out (e.g. usage-counter endpoints that want duplicate writes).
+    if (MUTATING_METHODS.has(method.toUpperCase())) {
+        const explicit = opts?.idempotencyKey;
+        if (explicit !== null) {
+            headers['Idempotency-Key'] = explicit ?? newIdempotencyKey();
+        }
+    }
     const res = await fetch(url, {
         method,
         headers,

package/dist/index.d.ts

@@ -19,6 +19,7 @@ export * as admin from './admin.js';
 export * as adminBootstrap from './adminBootstrap.js';
 export * as adminBuilds from './adminBuilds.js';
 export * as adminEnvServices from './adminEnvServices.js';
+export * as adminProjectCredentials from './adminProjectCredentials.js';
 export * as adminRateLimits from './adminRateLimits.js';
 export * as adminReconcile from './adminReconcile.js';
 export * as adminResources from './adminResources.js';
@@ -66,6 +67,7 @@ export * as referrals from './referrals.js';
 export * as refresh from './refresh.js';
 export * as remoteConfig from './remoteConfig.js';
 export * as resourceBindings from './resourceBindings.js';
+export * as resources from './resources.js';
 export * as runners from './runners.js';
 export * as saml from './saml.js';
 export * as sandboxes from './sandboxes.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,oBAAoB,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC,YAAY,EACX,GAAG,EACH,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,SAAS,EACT,GAAG,EACH,SAAS,EACT,OAAO,EACP,aAAa,EACb,eAAe,EACf,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,IAAI,EACJ,MAAM,EACN,MAAM,GACN,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,uBAAuB,MAAM,8BAA8B,CAAA;AACvE,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,eAAe,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,oBAAoB,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC,YAAY,EACX,GAAG,EACH,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,SAAS,EACT,GAAG,EACH,SAAS,EACT,OAAO,EACP,aAAa,EACb,eAAe,EACf,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,IAAI,EACJ,MAAM,EACN,MAAM,GACN,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -20,6 +20,7 @@ export * as admin from './admin.js';
 export * as adminBootstrap from './adminBootstrap.js';
 export * as adminBuilds from './adminBuilds.js';
 export * as adminEnvServices from './adminEnvServices.js';
+export * as adminProjectCredentials from './adminProjectCredentials.js';
 export * as adminRateLimits from './adminRateLimits.js';
 export * as adminReconcile from './adminReconcile.js';
 export * as adminResources from './adminResources.js';
@@ -68,6 +69,7 @@ export * as referrals from './referrals.js';
 export * as refresh from './refresh.js';
 export * as remoteConfig from './remoteConfig.js';
 export * as resourceBindings from './resourceBindings.js';
+export * as resources from './resources.js';
 export * as runners from './runners.js';
 export * as saml from './saml.js';
 export * as sandboxes from './sandboxes.js';

package/dist/organizations.d.ts

@@ -3,10 +3,11 @@
  *
  * Wire shape sourced from `@sylphx/contract` (ADR-084).
  */
-import type { Organization as Org, OrgMember, OrgMemberRole, UpdateMemberRoleResult } from '@sylphx/contract';
+import type { MyOrgResponse, OrgMember, OrgMemberRole, UpdateMemberRoleResult, UserOrganizationsResponse } from '@sylphx/contract';
 import type { Client } from './client.js';
 export type { OrgMemberRole, UpdateMemberRoleResult };
-export declare const current: (client: Client) => Promise<Org>;
+export declare const current: (client: Client) => Promise<MyOrgResponse>;
+export declare const listMemberships: (client: Client) => Promise<UserOrganizationsResponse>;
 export declare const listMembers: (client: Client, orgId: string) => Promise<OrgMember[]>;
 export declare const inviteMember: (client: Client, orgId: string, email: string, role: "admin" | "member") => Promise<void>;
 export declare const removeMember: (client: Client, orgId: string, userId: string) => Promise<void>;

package/dist/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../src/organizations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACX,YAAY,IAAI,GAAG,EACnB,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAA;AAErD,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,GAAG,CAGnD,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAQpF,CAAA;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,OAAO,MAAM,EACb,MAAM,OAAO,GAAG,QAAQ,KACtB,OAAO,CAAC,IAAI,CAKd,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAGxF,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,QAAQ,MAAM,EACd,MAAM,aAAa,KACjB,OAAO,CAAC,sBAAsB,CAKhC,CAAA"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../src/organizations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACX,aAAa,EACb,SAAS,EACT,aAAa,EACb,sBAAsB,EACtB,yBAAyB,EACzB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAA;AAErD,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,aAAa,CAG7D,CAAA;AAED,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,yBAAyB,CAGjF,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAQpF,CAAA;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,OAAO,MAAM,EACb,MAAM,OAAO,GAAG,QAAQ,KACtB,OAAO,CAAC,IAAI,CAKd,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAGxF,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,GAC5B,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,QAAQ,MAAM,EACd,MAAM,aAAa,KACjB,OAAO,CAAC,sBAAsB,CAKhC,CAAA"}

package/dist/organizations.js

@@ -9,6 +9,10 @@ export const current = (client) => {
     const { method, path } = organizationsEndpoints.current;
     return request(client, method, path);
 };
+export const listMemberships = (client) => {
+    const { method, path } = organizationsEndpoints.memberships;
+    return request(client, method, path);
+};
 export const listMembers = async (client, orgId) => {
     const { method, path } = organizationsEndpoints.listMembers;
     const res = await request(client, method, interpolatePath(path, { orgId }));

package/dist/resources.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generic managed resources — list/get across database, kv, blob, search, and
+ * volume resources through the unified `/resources` Management API.
+ */
+import type { Database as Resource } from '@sylphx/contract';
+import type { Client } from './client.js';
+export type ResourceKind = 'database' | 'kv' | 'blob' | 'search' | 'volume';
+export type { Resource };
+export declare const list: (client: Client, options?: {
+    readonly kind?: ResourceKind | string;
+}) => Promise<Resource[]>;
+export declare const get: (client: Client, id: string) => Promise<Resource>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAC3E,YAAY,EAAE,QAAQ,EAAE,CAAA;AAExB,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,UAAS;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAA;CAAO,KACrD,OAAO,CAAC,QAAQ,EAAE,CASpB,CAAA;AAED,eAAO,MAAM,GAAG,GAAI,QAAQ,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC,QAAQ,CAGhE,CAAA"}

package/dist/resources.js

@@ -0,0 +1,15 @@
+/**
+ * Generic managed resources — list/get across database, kv, blob, search, and
+ * volume resources through the unified `/resources` Management API.
+ */
+import { resourcesEndpoints } from '@sylphx/contract';
+import { interpolatePath, request } from './http.js';
+export const list = async (client, options = {}) => {
+    const { method, path } = resourcesEndpoints.list;
+    const res = await request(client, method, path, options.kind ? { query: { kind: options.kind } } : undefined);
+    return Array.isArray(res) ? res : (res.data ?? []);
+};
+export const get = (client, id) => {
+    const { method, path } = resourcesEndpoints.get;
+    return request(client, method, interpolatePath(path, { id }));
+};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sylphx/management",
-	"version": "0.2.0",
+	"version": "0.2.2",
 	"description": "Sylphx Management SDK — pure-FP Promise client for the Sylphx Platform Management API. 55+ namespaces covering the full PaaS surface (ADR-089 Phase 4b 100% coverage), types derived from @sylphx/contract (Effect Schema SSOT).",
 	"type": "module",
 	"sideEffects": false,
@@ -37,6 +37,10 @@
 			"import": "./dist/billing.js",
 			"types": "./dist/billing.d.ts"
 		},
+		"./branchDatabases": {
+			"import": "./dist/branchDatabases.js",
+			"types": "./dist/branchDatabases.d.ts"
+		},
 		"./certs": {
 			"import": "./dist/certs.js",
 			"types": "./dist/certs.d.ts"
@@ -133,6 +137,10 @@
 			"import": "./dist/resourceBindings.js",
 			"types": "./dist/resourceBindings.d.ts"
 		},
+		"./resources": {
+			"import": "./dist/resources.js",
+			"types": "./dist/resources.d.ts"
+		},
 		"./runners": {
 			"import": "./dist/runners.js",
 			"types": "./dist/runners.d.ts"
@@ -193,7 +201,7 @@
 		"prepublishOnly": "bun run build"
 	},
 	"dependencies": {
-		"@sylphx/contract": "workspace:*"
+		"@sylphx/contract": "0.3.0"
 	},
 	"files": [
 		"dist",