@sylphx/sdk 0.3.6 → 0.4.0

package/dist/index.mjs

@@ -103,6 +103,13 @@ var SylphxError = class _SylphxError extends Error {
   static isRateLimited(err) {
     return err instanceof _SylphxError && err.code === "TOO_MANY_REQUESTS";
   }
+  /**
+   * Check if error is an account lockout error (too many failed login attempts).
+   * When true, `error.data?.lockoutUntil` contains the ISO 8601 timestamp when the lockout expires.
+   */
+  static isAccountLocked(err) {
+    return err instanceof _SylphxError && err.code === "TOO_MANY_REQUESTS" && err.data?.code === "ACCOUNT_LOCKED";
+  }
   /**
    * Check if error is a quota exceeded error (plan limit reached)
    */
@@ -1314,11 +1321,14 @@ async function verifyTwoFactor(config, userId, code) {
 async function introspectToken(config, token, tokenTypeHint) {
   const response = await fetch(buildApiUrl(config, "/auth/introspect"), {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: {
+      "Content-Type": "application/json",
+      // RFC 7662 §2: server-to-server call — authenticate with secret key
+      "x-app-secret": config.secretKey ?? ""
+    },
     body: JSON.stringify({
       token,
-      token_type_hint: tokenTypeHint,
-      client_secret: config.secretKey
+      token_type_hint: tokenTypeHint
     })
   });
   if (!response.ok) {
@@ -1353,6 +1363,12 @@ async function inviteUser(config, input) {
     body: input
   });
 }
+async function switchOrg(config, orgId) {
+  return callApi(config, "/auth/switch-org", {
+    method: "POST",
+    body: JSON.stringify({ orgId })
+  });
+}
 
 // src/admin.ts
 async function listUsers(config, opts) {
@@ -2676,6 +2692,86 @@ function canDeleteOrganization(membership) {
   return hasRole(membership, "super_admin");
 }
 
+// src/permissions.ts
+async function listPermissions(config) {
+  return callApi(config, "/permissions");
+}
+async function createPermission(config, input) {
+  return callApi(config, "/permissions", {
+    method: "POST",
+    body: input
+  });
+}
+async function deletePermission(config, permissionKey) {
+  return callApi(config, `/permissions/${permissionKey}`, {
+    method: "DELETE"
+  });
+}
+async function getMemberPermissions(config, orgIdOrSlug, memberId) {
+  return callApi(
+    config,
+    `/orgs/${orgIdOrSlug}/members/${memberId}/permissions`
+  );
+}
+function hasPermission(permissions, required) {
+  return permissions.includes(required);
+}
+function hasAnyPermission(permissions, required) {
+  return required.some((perm) => permissions.includes(perm));
+}
+function hasAllPermissions(permissions, required) {
+  return required.every((perm) => permissions.includes(perm));
+}
+
+// src/roles.ts
+async function listRoles(config) {
+  return callApi(config, "/roles");
+}
+async function getRole(config, roleKey) {
+  return callApi(config, `/roles/${roleKey}`);
+}
+async function createRole(config, input) {
+  const body = {
+    key: input.key,
+    name: input.name
+  };
+  if (input.description !== void 0) body.description = input.description;
+  if (input.permissions !== void 0) body.permissionKeys = input.permissions;
+  if (input.isDefault !== void 0) body.isDefault = input.isDefault;
+  if (input.sortOrder !== void 0) body.sortOrder = input.sortOrder;
+  return callApi(config, "/roles", {
+    method: "POST",
+    body
+  });
+}
+async function updateRole(config, roleKey, input) {
+  const body = {};
+  if (input.name !== void 0) body.name = input.name;
+  if (input.description !== void 0) body.description = input.description;
+  if (input.permissions !== void 0) body.permissionKeys = input.permissions;
+  if (input.isDefault !== void 0) body.isDefault = input.isDefault;
+  if (input.sortOrder !== void 0) body.sortOrder = input.sortOrder;
+  return callApi(config, `/roles/${roleKey}`, {
+    method: "PUT",
+    body
+  });
+}
+async function deleteRole(config, roleKey) {
+  return callApi(config, `/roles/${roleKey}`, {
+    method: "DELETE"
+  });
+}
+async function assignMemberRole(config, orgIdOrSlug, memberId, roleKey) {
+  return callApi(
+    config,
+    `/orgs/${orgIdOrSlug}/members/${memberId}/assign-role`,
+    {
+      method: "PUT",
+      body: { roleKey }
+    }
+  );
+}
+
 // src/secrets.ts
 async function getSecret(config, input) {
   return callApi(config, "/secrets/get", {
@@ -3523,6 +3619,7 @@ export {
   WorkersClient,
   acceptAllConsents,
   acceptOrganizationInvitation,
+  assignMemberRole,
   batchIndex,
   canDeleteOrganization,
   canManageMembers,
@@ -3541,8 +3638,10 @@ export {
   createCron,
   createDynamicRestClient,
   createOrganization,
+  createPermission,
   createPortalSession,
   createRestClient,
+  createRole,
   createServiceWorkerScript,
   createStepContext,
   createTasksHandler,
@@ -3557,6 +3656,8 @@ export {
   deleteEnvVar,
   deleteFile,
   deleteOrganization,
+  deletePermission,
+  deleteRole,
   deleteUser,
   disableDebug,
   embed,
@@ -3590,6 +3691,7 @@ export {
   getFlagPayload,
   getFlags,
   getLeaderboard,
+  getMemberPermissions,
   getMyReferralCode,
   getOrganization,
   getOrganizationInvitations,
@@ -3601,6 +3703,7 @@ export {
   getReferralLeaderboard,
   getReferralStats,
   getRestErrorMessage,
+  getRole,
   getScheduledEmail,
   getScheduledEmailStats,
   getSearchStats,
@@ -3620,8 +3723,11 @@ export {
   getWebhookDeliveries,
   getWebhookDelivery,
   getWebhookStats,
+  hasAllPermissions,
+  hasAnyPermission,
   hasConsent,
   hasError,
+  hasPermission,
   hasRole,
   hasSecret,
   identify,
@@ -3658,6 +3764,8 @@ export {
   leaveOrganization,
   linkAnonymousConsents,
   listEnvVars,
+  listPermissions,
+  listRoles,
   listScheduledEmails,
   listSecretKeys,
   listTasks,
@@ -3699,6 +3807,7 @@ export {
   streamToString,
   submitScore,
   suspendUser,
+  switchOrg,
   toSylphxError,
   track,
   trackBatch,
@@ -3709,6 +3818,7 @@ export {
   updateOrganization,
   updateOrganizationMemberRole,
   updatePushPreferences,
+  updateRole,
   updateUser,
   updateUserMetadata,
   updateWebhookConfig,