SDK: rbac

pnpm add @startupcore/api-client @startupcore/contracts

.check(tenantId, { permissionKey })

import startupCore from '@startupcore/api-client' — requests go to same-origin /api BFF.

import startupCore from '@startupcore/api-client'; const token = await getServerToken(); await startupCore.*(tenantId, ..., token);

import { ApiError } from '@startupcore/api-client'; if (e.code === 'FEATURE_NOT_ENTITLED') { ... }