@terrantula/sdk 0.1.0 → 0.2.0

package/dist/{audit-export-BJSNZ9ic.d.mts → audit-export-BtZTnt8a.d.mts}

@@ -13,6 +13,56 @@ declare function withSchema<S extends z.ZodObject<z.ZodRawShape>, R>(schema: S,
 /** A static token string or a (possibly async) factory that returns one. */
 type TokenSource = string | (() => string | Promise<string>);
 
+interface AdminAuditEvent {
+    id: string;
+    actorUserId: string;
+    action: string;
+    resourceKind: string;
+    resourceId: string | null;
+    metadata: unknown;
+    createdAt: string;
+}
+interface AdminAuditListResponse {
+    data: AdminAuditEvent[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+interface AdminOrgSummary {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+    suspendedAt: string | null;
+    memberCount: number;
+    projectCount: number;
+}
+interface AdminOrgMember {
+    userId: string;
+    email: string;
+    username: string | null;
+    name: string | null;
+    role: string;
+    joinedAt: string;
+}
+interface AdminOrgProject {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+}
+interface AdminOrgDetail extends AdminOrgSummary {
+    members: AdminOrgMember[];
+    projects: AdminOrgProject[];
+}
+interface AdminOrgListResponse {
+    data: AdminOrgSummary[];
+}
+interface AdminSuspendResponse {
+    id: string;
+    suspendedAt: string | null;
+}
+
 type SnapshotOp = 'created' | 'updated' | 'deleted' | 'unchanged' | 'failed';
 
 interface ExportedItem {
@@ -53,4 +103,4 @@ interface TestConnectionResponse {
     error?: string;
 }
 
-export { type AuditExportConfigResponse as A, type ExportCatalogResult as E, type SnapshotOp as S, type TokenSource as T, type SchemaFn as a, type TestConnectionResponse as b, type AuditExportRunResponse as c, TerrantulaError as d, withSchema as w };
+export { type AuditExportConfigResponse as A, type ExportCatalogResult as E, type SnapshotOp as S, type TokenSource as T, type SchemaFn as a, type TestConnectionResponse as b, type AuditExportRunResponse as c, type AdminAuditListResponse as d, type AdminOrgListResponse as e, type AdminOrgDetail as f, type AdminSuspendResponse as g, type AdminAuditEvent as h, type AdminOrgMember as i, type AdminOrgProject as j, type AdminOrgSummary as k, TerrantulaError as l, withSchema as w };

package/dist/{audit-export-BJSNZ9ic.d.ts → audit-export-BtZTnt8a.d.ts}

@@ -13,6 +13,56 @@ declare function withSchema<S extends z.ZodObject<z.ZodRawShape>, R>(schema: S,
 /** A static token string or a (possibly async) factory that returns one. */
 type TokenSource = string | (() => string | Promise<string>);
 
+interface AdminAuditEvent {
+    id: string;
+    actorUserId: string;
+    action: string;
+    resourceKind: string;
+    resourceId: string | null;
+    metadata: unknown;
+    createdAt: string;
+}
+interface AdminAuditListResponse {
+    data: AdminAuditEvent[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+interface AdminOrgSummary {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+    suspendedAt: string | null;
+    memberCount: number;
+    projectCount: number;
+}
+interface AdminOrgMember {
+    userId: string;
+    email: string;
+    username: string | null;
+    name: string | null;
+    role: string;
+    joinedAt: string;
+}
+interface AdminOrgProject {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: string;
+}
+interface AdminOrgDetail extends AdminOrgSummary {
+    members: AdminOrgMember[];
+    projects: AdminOrgProject[];
+}
+interface AdminOrgListResponse {
+    data: AdminOrgSummary[];
+}
+interface AdminSuspendResponse {
+    id: string;
+    suspendedAt: string | null;
+}
+
 type SnapshotOp = 'created' | 'updated' | 'deleted' | 'unchanged' | 'failed';
 
 interface ExportedItem {
@@ -53,4 +103,4 @@ interface TestConnectionResponse {
     error?: string;
 }
 
-export { type AuditExportConfigResponse as A, type ExportCatalogResult as E, type SnapshotOp as S, type TokenSource as T, type SchemaFn as a, type TestConnectionResponse as b, type AuditExportRunResponse as c, TerrantulaError as d, withSchema as w };
+export { type AuditExportConfigResponse as A, type ExportCatalogResult as E, type SnapshotOp as S, type TokenSource as T, type SchemaFn as a, type TestConnectionResponse as b, type AuditExportRunResponse as c, type AdminAuditListResponse as d, type AdminOrgListResponse as e, type AdminOrgDetail as f, type AdminSuspendResponse as g, type AdminAuditEvent as h, type AdminOrgMember as i, type AdminOrgProject as j, type AdminOrgSummary as k, TerrantulaError as l, withSchema as w };

package/dist/{chunk-KOGEUSRZ.mjs → chunk-WYOV3M2X.mjs}

@@ -1515,6 +1515,114 @@ function createImportSourcesClient(proj) {
   };
 }
 
+// src/admin.ts
+import { z as z18 } from "zod";
+async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
+  const fetchImpl = hcOpts?.fetch ?? fetch;
+  const rawHeaders = hcOpts?.headers;
+  const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
+  return fetchImpl(`${baseUrl}${path}`, {
+    ...init,
+    headers: {
+      ...resolvedHeaders,
+      ...init.headers
+    }
+  });
+}
+async function callRaw2(res) {
+  if (!res.ok) {
+    let message = fallbackMessage(res.status);
+    try {
+      const body = await res.json();
+      if (body.error) message = body.error;
+    } catch {
+    }
+    throw new TerrantulaError(res.status, { error: message });
+  }
+  return res.json();
+}
+function createAdminClient(baseUrl, hcOpts) {
+  return {
+    audit: {
+      /**
+       * GET /admin/audit
+       * List super-admin audit events with optional filters.
+       */
+      list: withSchema(
+        z18.object({
+          actor: z18.string().optional().describe("Filter by actor user ID"),
+          action: z18.string().optional().describe("Filter by action name"),
+          resourceKind: z18.string().optional().describe("Filter by resource kind"),
+          since: z18.string().optional().describe("ISO 8601 datetime lower bound"),
+          until: z18.string().optional().describe("ISO 8601 datetime upper bound"),
+          limit: z18.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
+          offset: z18.coerce.number().int().min(0).optional().describe("Pagination offset")
+        }),
+        async (params) => {
+          const qs = new URLSearchParams();
+          if (params.actor !== void 0) qs.set("actor", params.actor);
+          if (params.action !== void 0) qs.set("action", params.action);
+          if (params.resourceKind !== void 0) qs.set("resourceKind", params.resourceKind);
+          if (params.since !== void 0) qs.set("since", params.since);
+          if (params.until !== void 0) qs.set("until", params.until);
+          if (params.limit !== void 0) qs.set("limit", String(params.limit));
+          if (params.offset !== void 0) qs.set("offset", String(params.offset));
+          const search = qs.toString();
+          return callRaw2(
+            await rawRequest2(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
+          );
+        }
+      )
+    },
+    orgs: {
+      /**
+       * GET /admin/orgs
+       * List all organizations across tenants with member + project counts.
+       */
+      list: withSchema(
+        z18.object({}),
+        async () => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, "/admin/orgs")
+        )
+      ),
+      /**
+       * GET /admin/orgs/:id
+       * Detail view: org fields + member list + project list.
+       */
+      get: withSchema(
+        z18.object({ id: z18.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/suspend
+       * Set suspended_at = now(). Idempotent.
+       */
+      suspend: withSchema(
+        z18.object({ id: z18.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
+            method: "POST"
+          })
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/unsuspend
+       * Clear suspended_at.
+       */
+      unsuspend: withSchema(
+        z18.object({ id: z18.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
+            method: "POST"
+          })
+        )
+      )
+    }
+  };
+}
+
 // src/index.ts
 var createClient = (baseUrl, options = {}) => {
   const opts = typeof options === "string" || typeof options === "function" ? { token: options } : options;
@@ -1549,7 +1657,8 @@ var createClient = (baseUrl, options = {}) => {
     auditExport: createAuditExportClient(baseUrl, hcOpts),
     userPreferences: createUserPreferencesClient(baseUrl, hcOpts),
     importSources: createImportSourcesClient(proj),
-    exportCatalog
+    exportCatalog,
+    admin: createAdminClient(baseUrl, hcOpts)
   };
   let warnedPools = false;
   let warnedApplyRevisions = false;

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { S as SnapshotOp, T as TokenSource, a as SchemaFn, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult } from './audit-export-BJSNZ9ic.mjs';
-export { d as TerrantulaError, w as withSchema } from './audit-export-BJSNZ9ic.mjs';
+import { S as SnapshotOp, T as TokenSource, a as SchemaFn, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult, d as AdminAuditListResponse, e as AdminOrgListResponse, f as AdminOrgDetail, g as AdminSuspendResponse } from './audit-export-BtZTnt8a.mjs';
+export { h as AdminAuditEvent, i as AdminOrgMember, j as AdminOrgProject, k as AdminOrgSummary, l as TerrantulaError, w as withSchema } from './audit-export-BtZTnt8a.mjs';
 import * as _terrantula_types from '@terrantula/types';
 import * as zod from 'zod';
 import * as hono_hono_base from 'hono/hono-base';
@@ -75,6 +75,12 @@ type AppVariables = {
      * ignored (no scoping).
      */
     cellKey?: string | null;
+    /**
+     * Set by requireSuperAdmin middleware. True when the authenticated user
+     * has role='admin' (control-plane super-admin). Never set to false —
+     * absence means the check has not run or the user is not an admin.
+     */
+    isSuperAdmin?: boolean;
 };
 
 /**
@@ -4811,6 +4817,7 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 deletedAt: string | null;
                 logo: string | null;
                 metadata: string | null;
+                suspendedAt: string | null;
             };
             outputFormat: "json";
             status: 201;
@@ -4843,6 +4850,7 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 createdAt: string;
                 metadata: string | null;
                 deletedAt: string | null;
+                suspendedAt: string | null;
             };
             outputFormat: "json";
             status: hono_utils_http_status.ContentfulStatusCode;
@@ -4940,6 +4948,9 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 createdAt: string;
                 updatedAt: string;
                 deletedAt: string | null;
+                banned: boolean;
+                banReason: string | null;
+                banExpires: string | null;
             };
             outputFormat: "json";
             status: 201;
@@ -6083,6 +6094,7 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             deletedAt: string | null;
             logo: string | null;
             metadata: string | null;
+            suspendedAt: string | null;
         }>;
         get: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6100,6 +6112,7 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             createdAt: string;
             metadata: string | null;
             deletedAt: string | null;
+            suspendedAt: string | null;
         }>;
         listUsers: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6147,6 +6160,9 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             createdAt: string;
             updatedAt: string;
             deletedAt: string | null;
+            banned: boolean;
+            banReason: string | null;
+            banExpires: string | null;
         }>;
         updateUserRole: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6154,12 +6170,12 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             role: zod.ZodEnum<["owner", "admin", "member"]>;
         }, "strip", zod.ZodTypeAny, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }>, {
             error: string;
         } | {
@@ -22748,6 +22764,59 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
         projectId: string;
         envName: string;
     }>, ExportCatalogResult>;
+    admin: {
+        audit: {
+            list: SchemaFn<zod.ZodObject<{
+                actor: zod.ZodOptional<zod.ZodString>;
+                action: zod.ZodOptional<zod.ZodString>;
+                resourceKind: zod.ZodOptional<zod.ZodString>;
+                since: zod.ZodOptional<zod.ZodString>;
+                until: zod.ZodOptional<zod.ZodString>;
+                limit: zod.ZodOptional<zod.ZodNumber>;
+                offset: zod.ZodOptional<zod.ZodNumber>;
+            }, "strip", zod.ZodTypeAny, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }>, AdminAuditListResponse>;
+        };
+        orgs: {
+            list: SchemaFn<zod.ZodObject<{}, "strip", zod.ZodTypeAny, {}, {}>, AdminOrgListResponse>;
+            get: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminOrgDetail>;
+            suspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+            unsuspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+        };
+    };
 } & {
     pools: {
         list: SchemaFn<zod.ZodObject<{
@@ -23106,4 +23175,4 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
 };
 type TerrantulaCloudClient = ReturnType<typeof createClient>;
 
-export { AuditExportConfigResponse, AuditExportRunResponse, type CloudAppType, type CreateClientOptions, type ProjectAppType, SchemaFn, type TerrantulaCloudClient, TestConnectionResponse, TokenSource, createClient };
+export { AdminAuditListResponse, AdminOrgDetail, AdminOrgListResponse, AdminSuspendResponse, AuditExportConfigResponse, AuditExportRunResponse, type CloudAppType, type CreateClientOptions, type ProjectAppType, SchemaFn, type TerrantulaCloudClient, TestConnectionResponse, TokenSource, createClient };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SnapshotOp, T as TokenSource, a as SchemaFn, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult } from './audit-export-BJSNZ9ic.js';
-export { d as TerrantulaError, w as withSchema } from './audit-export-BJSNZ9ic.js';
+import { S as SnapshotOp, T as TokenSource, a as SchemaFn, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult, d as AdminAuditListResponse, e as AdminOrgListResponse, f as AdminOrgDetail, g as AdminSuspendResponse } from './audit-export-BtZTnt8a.js';
+export { h as AdminAuditEvent, i as AdminOrgMember, j as AdminOrgProject, k as AdminOrgSummary, l as TerrantulaError, w as withSchema } from './audit-export-BtZTnt8a.js';
 import * as _terrantula_types from '@terrantula/types';
 import * as zod from 'zod';
 import * as hono_hono_base from 'hono/hono-base';
@@ -75,6 +75,12 @@ type AppVariables = {
      * ignored (no scoping).
      */
     cellKey?: string | null;
+    /**
+     * Set by requireSuperAdmin middleware. True when the authenticated user
+     * has role='admin' (control-plane super-admin). Never set to false —
+     * absence means the check has not run or the user is not an admin.
+     */
+    isSuperAdmin?: boolean;
 };
 
 /**
@@ -4811,6 +4817,7 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 deletedAt: string | null;
                 logo: string | null;
                 metadata: string | null;
+                suspendedAt: string | null;
             };
             outputFormat: "json";
             status: 201;
@@ -4843,6 +4850,7 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 createdAt: string;
                 metadata: string | null;
                 deletedAt: string | null;
+                suspendedAt: string | null;
             };
             outputFormat: "json";
             status: hono_utils_http_status.ContentfulStatusCode;
@@ -4940,6 +4948,9 @@ declare function _cloudAppShape(): hono_hono_base.HonoBase<hono_types.BlankEnv,
                 createdAt: string;
                 updatedAt: string;
                 deletedAt: string | null;
+                banned: boolean;
+                banReason: string | null;
+                banExpires: string | null;
             };
             outputFormat: "json";
             status: 201;
@@ -6083,6 +6094,7 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             deletedAt: string | null;
             logo: string | null;
             metadata: string | null;
+            suspendedAt: string | null;
         }>;
         get: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6100,6 +6112,7 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             createdAt: string;
             metadata: string | null;
             deletedAt: string | null;
+            suspendedAt: string | null;
         }>;
         listUsers: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6147,6 +6160,9 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             createdAt: string;
             updatedAt: string;
             deletedAt: string | null;
+            banned: boolean;
+            banReason: string | null;
+            banExpires: string | null;
         }>;
         updateUserRole: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -6154,12 +6170,12 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
             role: zod.ZodEnum<["owner", "admin", "member"]>;
         }, "strip", zod.ZodTypeAny, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }>, {
             error: string;
         } | {
@@ -22748,6 +22764,59 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
         projectId: string;
         envName: string;
     }>, ExportCatalogResult>;
+    admin: {
+        audit: {
+            list: SchemaFn<zod.ZodObject<{
+                actor: zod.ZodOptional<zod.ZodString>;
+                action: zod.ZodOptional<zod.ZodString>;
+                resourceKind: zod.ZodOptional<zod.ZodString>;
+                since: zod.ZodOptional<zod.ZodString>;
+                until: zod.ZodOptional<zod.ZodString>;
+                limit: zod.ZodOptional<zod.ZodNumber>;
+                offset: zod.ZodOptional<zod.ZodNumber>;
+            }, "strip", zod.ZodTypeAny, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }>, AdminAuditListResponse>;
+        };
+        orgs: {
+            list: SchemaFn<zod.ZodObject<{}, "strip", zod.ZodTypeAny, {}, {}>, AdminOrgListResponse>;
+            get: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminOrgDetail>;
+            suspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+            unsuspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+        };
+    };
 } & {
     pools: {
         list: SchemaFn<zod.ZodObject<{
@@ -23106,4 +23175,4 @@ declare const createClient: (baseUrl: string, options?: CreateClientOptions | To
 };
 type TerrantulaCloudClient = ReturnType<typeof createClient>;
 
-export { AuditExportConfigResponse, AuditExportRunResponse, type CloudAppType, type CreateClientOptions, type ProjectAppType, SchemaFn, type TerrantulaCloudClient, TestConnectionResponse, TokenSource, createClient };
+export { AdminAuditListResponse, AdminOrgDetail, AdminOrgListResponse, AdminSuspendResponse, AuditExportConfigResponse, AuditExportRunResponse, type CloudAppType, type CreateClientOptions, type ProjectAppType, SchemaFn, type TerrantulaCloudClient, TestConnectionResponse, TokenSource, createClient };

package/dist/index.js

@@ -1538,6 +1538,114 @@ function createImportSourcesClient(proj) {
   };
 }
 
+// src/admin.ts
+var import_zod18 = require("zod");
+async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
+  const fetchImpl = hcOpts?.fetch ?? fetch;
+  const rawHeaders = hcOpts?.headers;
+  const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
+  return fetchImpl(`${baseUrl}${path}`, {
+    ...init,
+    headers: {
+      ...resolvedHeaders,
+      ...init.headers
+    }
+  });
+}
+async function callRaw2(res) {
+  if (!res.ok) {
+    let message = fallbackMessage(res.status);
+    try {
+      const body = await res.json();
+      if (body.error) message = body.error;
+    } catch {
+    }
+    throw new TerrantulaError(res.status, { error: message });
+  }
+  return res.json();
+}
+function createAdminClient(baseUrl, hcOpts) {
+  return {
+    audit: {
+      /**
+       * GET /admin/audit
+       * List super-admin audit events with optional filters.
+       */
+      list: withSchema(
+        import_zod18.z.object({
+          actor: import_zod18.z.string().optional().describe("Filter by actor user ID"),
+          action: import_zod18.z.string().optional().describe("Filter by action name"),
+          resourceKind: import_zod18.z.string().optional().describe("Filter by resource kind"),
+          since: import_zod18.z.string().optional().describe("ISO 8601 datetime lower bound"),
+          until: import_zod18.z.string().optional().describe("ISO 8601 datetime upper bound"),
+          limit: import_zod18.z.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
+          offset: import_zod18.z.coerce.number().int().min(0).optional().describe("Pagination offset")
+        }),
+        async (params) => {
+          const qs = new URLSearchParams();
+          if (params.actor !== void 0) qs.set("actor", params.actor);
+          if (params.action !== void 0) qs.set("action", params.action);
+          if (params.resourceKind !== void 0) qs.set("resourceKind", params.resourceKind);
+          if (params.since !== void 0) qs.set("since", params.since);
+          if (params.until !== void 0) qs.set("until", params.until);
+          if (params.limit !== void 0) qs.set("limit", String(params.limit));
+          if (params.offset !== void 0) qs.set("offset", String(params.offset));
+          const search = qs.toString();
+          return callRaw2(
+            await rawRequest2(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
+          );
+        }
+      )
+    },
+    orgs: {
+      /**
+       * GET /admin/orgs
+       * List all organizations across tenants with member + project counts.
+       */
+      list: withSchema(
+        import_zod18.z.object({}),
+        async () => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, "/admin/orgs")
+        )
+      ),
+      /**
+       * GET /admin/orgs/:id
+       * Detail view: org fields + member list + project list.
+       */
+      get: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/suspend
+       * Set suspended_at = now(). Idempotent.
+       */
+      suspend: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
+            method: "POST"
+          })
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/unsuspend
+       * Clear suspended_at.
+       */
+      unsuspend: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
+            method: "POST"
+          })
+        )
+      )
+    }
+  };
+}
+
 // src/index.ts
 var createClient = (baseUrl, options = {}) => {
   const opts = typeof options === "string" || typeof options === "function" ? { token: options } : options;
@@ -1572,7 +1680,8 @@ var createClient = (baseUrl, options = {}) => {
     auditExport: createAuditExportClient(baseUrl, hcOpts),
     userPreferences: createUserPreferencesClient(baseUrl, hcOpts),
     importSources: createImportSourcesClient(proj),
-    exportCatalog
+    exportCatalog,
+    admin: createAdminClient(baseUrl, hcOpts)
   };
   let warnedPools = false;
   let warnedApplyRevisions = false;

package/dist/index.mjs

@@ -2,7 +2,7 @@ import {
   TerrantulaError,
   createClient,
   withSchema
-} from "./chunk-KOGEUSRZ.mjs";
+} from "./chunk-WYOV3M2X.mjs";
 export {
   TerrantulaError,
   createClient,

package/dist/local.d.mts

@@ -1,4 +1,4 @@
-import { a as SchemaFn, S as SnapshotOp, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult } from './audit-export-BJSNZ9ic.mjs';
+import { a as SchemaFn, S as SnapshotOp, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult, d as AdminAuditListResponse, e as AdminOrgListResponse, f as AdminOrgDetail, g as AdminSuspendResponse } from './audit-export-BtZTnt8a.mjs';
 import * as _terrantula_types from '@terrantula/types';
 import * as hono_utils_types from 'hono/utils/types';
 import * as zod from 'zod';
@@ -26,6 +26,7 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             deletedAt: string | null;
             logo: string | null;
             metadata: string | null;
+            suspendedAt: string | null;
         }>;
         get: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -43,6 +44,7 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             createdAt: string;
             metadata: string | null;
             deletedAt: string | null;
+            suspendedAt: string | null;
         }>;
         listUsers: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -90,6 +92,9 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             createdAt: string;
             updatedAt: string;
             deletedAt: string | null;
+            banned: boolean;
+            banReason: string | null;
+            banExpires: string | null;
         }>;
         updateUserRole: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -97,12 +102,12 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             role: zod.ZodEnum<["owner", "admin", "member"]>;
         }, "strip", zod.ZodTypeAny, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }>, {
             error: string;
         } | {
@@ -16691,6 +16696,59 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
         projectId: string;
         envName: string;
     }>, ExportCatalogResult>;
+    admin: {
+        audit: {
+            list: SchemaFn<zod.ZodObject<{
+                actor: zod.ZodOptional<zod.ZodString>;
+                action: zod.ZodOptional<zod.ZodString>;
+                resourceKind: zod.ZodOptional<zod.ZodString>;
+                since: zod.ZodOptional<zod.ZodString>;
+                until: zod.ZodOptional<zod.ZodString>;
+                limit: zod.ZodOptional<zod.ZodNumber>;
+                offset: zod.ZodOptional<zod.ZodNumber>;
+            }, "strip", zod.ZodTypeAny, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }>, AdminAuditListResponse>;
+        };
+        orgs: {
+            list: SchemaFn<zod.ZodObject<{}, "strip", zod.ZodTypeAny, {}, {}>, AdminOrgListResponse>;
+            get: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminOrgDetail>;
+            suspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+            unsuspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+        };
+    };
 } & {
     pools: {
         list: SchemaFn<zod.ZodObject<{

package/dist/local.d.ts

@@ -1,4 +1,4 @@
-import { a as SchemaFn, S as SnapshotOp, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult } from './audit-export-BJSNZ9ic.js';
+import { a as SchemaFn, S as SnapshotOp, A as AuditExportConfigResponse, b as TestConnectionResponse, c as AuditExportRunResponse, E as ExportCatalogResult, d as AdminAuditListResponse, e as AdminOrgListResponse, f as AdminOrgDetail, g as AdminSuspendResponse } from './audit-export-BtZTnt8a.js';
 import * as _terrantula_types from '@terrantula/types';
 import * as hono_utils_types from 'hono/utils/types';
 import * as zod from 'zod';
@@ -26,6 +26,7 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             deletedAt: string | null;
             logo: string | null;
             metadata: string | null;
+            suspendedAt: string | null;
         }>;
         get: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -43,6 +44,7 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             createdAt: string;
             metadata: string | null;
             deletedAt: string | null;
+            suspendedAt: string | null;
         }>;
         listUsers: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -90,6 +92,9 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             createdAt: string;
             updatedAt: string;
             deletedAt: string | null;
+            banned: boolean;
+            banReason: string | null;
+            banExpires: string | null;
         }>;
         updateUserRole: SchemaFn<zod.ZodObject<{
             id: zod.ZodString;
@@ -97,12 +102,12 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
             role: zod.ZodEnum<["owner", "admin", "member"]>;
         }, "strip", zod.ZodTypeAny, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }, {
             id: string;
-            userId: string;
             role: "member" | "owner" | "admin";
+            userId: string;
         }>, {
             error: string;
         } | {
@@ -16691,6 +16696,59 @@ declare const createLocalClient: (options?: CreateLocalClientOptions) => {
         projectId: string;
         envName: string;
     }>, ExportCatalogResult>;
+    admin: {
+        audit: {
+            list: SchemaFn<zod.ZodObject<{
+                actor: zod.ZodOptional<zod.ZodString>;
+                action: zod.ZodOptional<zod.ZodString>;
+                resourceKind: zod.ZodOptional<zod.ZodString>;
+                since: zod.ZodOptional<zod.ZodString>;
+                until: zod.ZodOptional<zod.ZodString>;
+                limit: zod.ZodOptional<zod.ZodNumber>;
+                offset: zod.ZodOptional<zod.ZodNumber>;
+            }, "strip", zod.ZodTypeAny, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }, {
+                limit?: number | undefined;
+                offset?: number | undefined;
+                action?: string | undefined;
+                resourceKind?: string | undefined;
+                since?: string | undefined;
+                actor?: string | undefined;
+                until?: string | undefined;
+            }>, AdminAuditListResponse>;
+        };
+        orgs: {
+            list: SchemaFn<zod.ZodObject<{}, "strip", zod.ZodTypeAny, {}, {}>, AdminOrgListResponse>;
+            get: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminOrgDetail>;
+            suspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+            unsuspend: SchemaFn<zod.ZodObject<{
+                id: zod.ZodString;
+            }, "strip", zod.ZodTypeAny, {
+                id: string;
+            }, {
+                id: string;
+            }>, AdminSuspendResponse>;
+        };
+    };
 } & {
     pools: {
         list: SchemaFn<zod.ZodObject<{

package/dist/local.js

@@ -1538,6 +1538,114 @@ function createImportSourcesClient(proj) {
   };
 }
 
+// src/admin.ts
+var import_zod18 = require("zod");
+async function rawRequest2(baseUrl, hcOpts, path, init = {}) {
+  const fetchImpl = hcOpts?.fetch ?? fetch;
+  const rawHeaders = hcOpts?.headers;
+  const resolvedHeaders = typeof rawHeaders === "function" ? await rawHeaders() : rawHeaders ?? {};
+  return fetchImpl(`${baseUrl}${path}`, {
+    ...init,
+    headers: {
+      ...resolvedHeaders,
+      ...init.headers
+    }
+  });
+}
+async function callRaw2(res) {
+  if (!res.ok) {
+    let message = fallbackMessage(res.status);
+    try {
+      const body = await res.json();
+      if (body.error) message = body.error;
+    } catch {
+    }
+    throw new TerrantulaError(res.status, { error: message });
+  }
+  return res.json();
+}
+function createAdminClient(baseUrl, hcOpts) {
+  return {
+    audit: {
+      /**
+       * GET /admin/audit
+       * List super-admin audit events with optional filters.
+       */
+      list: withSchema(
+        import_zod18.z.object({
+          actor: import_zod18.z.string().optional().describe("Filter by actor user ID"),
+          action: import_zod18.z.string().optional().describe("Filter by action name"),
+          resourceKind: import_zod18.z.string().optional().describe("Filter by resource kind"),
+          since: import_zod18.z.string().optional().describe("ISO 8601 datetime lower bound"),
+          until: import_zod18.z.string().optional().describe("ISO 8601 datetime upper bound"),
+          limit: import_zod18.z.coerce.number().int().min(1).max(200).optional().describe("Max results (1-200)"),
+          offset: import_zod18.z.coerce.number().int().min(0).optional().describe("Pagination offset")
+        }),
+        async (params) => {
+          const qs = new URLSearchParams();
+          if (params.actor !== void 0) qs.set("actor", params.actor);
+          if (params.action !== void 0) qs.set("action", params.action);
+          if (params.resourceKind !== void 0) qs.set("resourceKind", params.resourceKind);
+          if (params.since !== void 0) qs.set("since", params.since);
+          if (params.until !== void 0) qs.set("until", params.until);
+          if (params.limit !== void 0) qs.set("limit", String(params.limit));
+          if (params.offset !== void 0) qs.set("offset", String(params.offset));
+          const search = qs.toString();
+          return callRaw2(
+            await rawRequest2(baseUrl, hcOpts, `/admin/audit${search ? `?${search}` : ""}`)
+          );
+        }
+      )
+    },
+    orgs: {
+      /**
+       * GET /admin/orgs
+       * List all organizations across tenants with member + project counts.
+       */
+      list: withSchema(
+        import_zod18.z.object({}),
+        async () => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, "/admin/orgs")
+        )
+      ),
+      /**
+       * GET /admin/orgs/:id
+       * Detail view: org fields + member list + project list.
+       */
+      get: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}`)
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/suspend
+       * Set suspended_at = now(). Idempotent.
+       */
+      suspend: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/suspend`, {
+            method: "POST"
+          })
+        )
+      ),
+      /**
+       * POST /admin/orgs/:id/unsuspend
+       * Clear suspended_at.
+       */
+      unsuspend: withSchema(
+        import_zod18.z.object({ id: import_zod18.z.string().describe("Organization ID") }),
+        async (params) => callRaw2(
+          await rawRequest2(baseUrl, hcOpts, `/admin/orgs/${params.id}/unsuspend`, {
+            method: "POST"
+          })
+        )
+      )
+    }
+  };
+}
+
 // src/index.ts
 var createClient = (baseUrl, options = {}) => {
   const opts = typeof options === "string" || typeof options === "function" ? { token: options } : options;
@@ -1572,7 +1680,8 @@ var createClient = (baseUrl, options = {}) => {
     auditExport: createAuditExportClient(baseUrl, hcOpts),
     userPreferences: createUserPreferencesClient(baseUrl, hcOpts),
     importSources: createImportSourcesClient(proj),
-    exportCatalog
+    exportCatalog,
+    admin: createAdminClient(baseUrl, hcOpts)
   };
   let warnedPools = false;
   let warnedApplyRevisions = false;

package/dist/local.mjs

@@ -1,6 +1,6 @@
 import {
   createClient
-} from "./chunk-KOGEUSRZ.mjs";
+} from "./chunk-WYOV3M2X.mjs";
 
 // src/local.ts
 import { createLocalApp, openLocalDb } from "@terrantula/local";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@terrantula/sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "TypeScript SDK for Terrantula — the multi-tenant entity-graph control plane that herds Terraform/OpenTofu cattle.",
   "keywords": [
     "terrantula",