@witnium-tech/witniumchain 0.7.0 → 0.9.0

package/dist/index.mjs

@@ -119,6 +119,8 @@ var WitniumchainClient = class {
   oauth;
   /** MFA self-management. Accessed as `client.mfa.totp.*` and `client.mfa.recoveryCodes.*`. */
   mfa;
+  /** Session-cookie team management (org-admin only). `client.orgUsers.*`. */
+  orgUsers;
   constructor(config) {
     if (!config.baseUrl) {
       throw new Error("WitniumchainClient: baseUrl is required");
@@ -142,6 +144,7 @@ var WitniumchainClient = class {
     this.keys = new SigningKeys(this);
     this.oauth = new OauthNamespace(this);
     this.mfa = new MfaNamespace(this);
+    this.orgUsers = new OrgMembers(this);
   }
   /**
    * Convenience alias for {@link getAccount} — returns the authenticated
@@ -169,6 +172,53 @@ var WitniumchainClient = class {
   createOrg(body) {
     return this.req("POST", "/v1/orgs", { auth: "Public", body });
   }
+  // ── Team management (session-cookie; org-admin only) ──────────────────────
+  // Backing methods for the `orgUsers` namespace. All resolve the caller's
+  // org + org-admin role server-side from the session — no orgId in the path.
+  listMembers() {
+    return this.req("GET", "/v1/orgs/me/members", { auth: "SessionCookie" });
+  }
+  inviteMember(body) {
+    return this.req("POST", "/v1/orgs/me/members/invite", {
+      auth: "SessionCookie",
+      body
+    });
+  }
+  suspendMember(userId) {
+    return this.req(
+      "POST",
+      `/v1/orgs/me/members/${encodeURIComponent(userId)}/suspend`,
+      { auth: "SessionCookie" }
+    );
+  }
+  unsuspendMember(userId) {
+    return this.req(
+      "POST",
+      `/v1/orgs/me/members/${encodeURIComponent(userId)}/unsuspend`,
+      { auth: "SessionCookie" }
+    );
+  }
+  setMemberRole(userId, body) {
+    return this.req(
+      "PUT",
+      `/v1/orgs/me/members/${encodeURIComponent(userId)}/role`,
+      { auth: "SessionCookie", body }
+    );
+  }
+  removeMember(userId) {
+    return this.req(
+      "DELETE",
+      `/v1/orgs/me/members/${encodeURIComponent(userId)}`,
+      { auth: "SessionCookie" }
+    );
+  }
+  resendMemberInvite(userId) {
+    return this.req(
+      "POST",
+      `/v1/orgs/me/members/${encodeURIComponent(userId)}/resend-invite`,
+      { auth: "SessionCookie" }
+    );
+  }
   verifyEmail(token) {
     return this.req("GET", "/v1/auth/verify", {
       auth: "Public",
@@ -423,6 +473,17 @@ var WitniumchainClient = class {
   deleteAccount() {
     return this.req("DELETE", "/v1/account", { auth: "SessionCookie" });
   }
+  /**
+   * Re-mint a provisioning token for a verified-but-not-yet-provisioned
+   * account. Use when the token from `verifyEmail` was lost (e.g. the verify
+   * link was opened on a different device). Throws 409 if the email isn't
+   * verified or a contract already exists; rate-limited per account.
+   */
+  reissueProvisioningToken() {
+    return this.req("POST", "/v1/account/provisioning-token/reissue", {
+      auth: "SessionCookie"
+    });
+  }
   // ────────────────────────────────────────────────────────────────────────
   // MFA (/v1/account/mfa/*)
   //
@@ -1241,6 +1302,40 @@ var MfaNamespace = class {
     this.recoveryCodes = new MfaRecoveryCodes(client);
   }
 };
+var OrgMembers = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** List the caller's org members (role, suspendedAt, isOwner, keys). */
+  list() {
+    return this.client.listMembers();
+  }
+  /** Invite a member by email (default role `member`). */
+  invite(body) {
+    return this.client.inviteMember(body);
+  }
+  /** Suspend a member (reversible). The owner cannot be suspended. */
+  suspend(userId) {
+    return this.client.suspendMember(userId);
+  }
+  /** Lift a member's suspension. */
+  unsuspend(userId) {
+    return this.client.unsuspendMember(userId);
+  }
+  /** Set a member's role. Refuses to demote the owner. */
+  setRole(userId, role) {
+    return this.client.setMemberRole(userId, { role });
+  }
+  /** Remove a member (terminal; revokes their delegated keys). Owner protected. */
+  remove(userId) {
+    return this.client.removeMember(userId);
+  }
+  /** Re-mint an email-verify token for a pending member. */
+  resendInvite(userId) {
+    return this.client.resendMemberInvite(userId);
+  }
+};
 var MfaTotp = class {
   constructor(client) {
     this.client = client;
@@ -1558,6 +1653,6 @@ function buildRevokeSigningKeyPayload(args) {
   });
 }
 
-export { DelegatedKeys, MfaNamespace, MfaRecoveryCodes, MfaTotp, OWNER_OP, OauthNamespace, OauthSessions, OrgUsers, SigningKeys, Subscriptions, WitniumchainAdminClient, WitniumchainApiError, WitniumchainChainAdminClient, WitniumchainClient, WitniumchainOrgClient, buildAddSigningKeyPayload, buildPausePayload, buildRevokeSigningKeyPayload, buildUnpausePayload, defaultVerifierStorage };
+export { DelegatedKeys, MfaNamespace, MfaRecoveryCodes, MfaTotp, OWNER_OP, OauthNamespace, OauthSessions, OrgMembers, OrgUsers, SigningKeys, Subscriptions, WitniumchainAdminClient, WitniumchainApiError, WitniumchainChainAdminClient, WitniumchainClient, WitniumchainOrgClient, buildAddSigningKeyPayload, buildPausePayload, buildRevokeSigningKeyPayload, buildUnpausePayload, defaultVerifierStorage };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map