dify/cli/src/api/members.ts

import type {
  MemberActionResponse,
  MemberInvitePayload,
  MemberInviteResponse,
  MemberListResponse,
  MemberRoleUpdatePayload,
} from '@dify/contracts/api/openapi/types.gen'
import type { OpenApiClient } from '@/http/orpc'
import type { HttpClient } from '@/http/types'
import { createOpenApiClient } from '@/http/orpc'

/**
 * Thin client for /openapi/v1/workspaces/<id>/members, over the generated oRPC contract.
 *
 * Non-2xx (400/403/404/422) surface as BaseError — the oRPC client maps them at the transport
 * seam. The CLI's AuthedCommand base layer renders those for the user; clients never swallow codes.
 */
export class MembersClient {
  private readonly orpc: OpenApiClient

  constructor(http: HttpClient) {
    this.orpc = createOpenApiClient(http)
  }

  async list(workspaceId: string, q?: { page?: number, limit?: number }): Promise<MemberListResponse> {
    return this.orpc.workspaces.byWorkspaceId.members.get({
      params: { workspace_id: workspaceId },
      query: { page: q?.page, limit: q?.limit },
    })
  }

  async invite(workspaceId: string, payload: MemberInvitePayload): Promise<MemberInviteResponse> {
    return this.orpc.workspaces.byWorkspaceId.members.post({
      params: { workspace_id: workspaceId },
      body: payload,
    })
  }

  async remove(workspaceId: string, memberId: string): Promise<MemberActionResponse> {
    return this.orpc.workspaces.byWorkspaceId.members.byMemberId.delete({
      params: { workspace_id: workspaceId, member_id: memberId },
    })
  }

  async updateRole(
    workspaceId: string,
    memberId: string,
    payload: MemberRoleUpdatePayload,
  ): Promise<MemberActionResponse> {
    return this.orpc.workspaces.byWorkspaceId.members.byMemberId.role.put({
      params: { workspace_id: workspaceId, member_id: memberId },
      body: payload,
    })
  }
}