@baasix/sdk 0.1.20 → 0.1.22

package/README.md

@@ -204,14 +204,20 @@ const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
 ### Password Reset
 
 ```typescript
-// Request reset
+// Request reset (link mode: emails a clickable reset URL)
 await baasix.auth.forgotPassword({
   email: 'user@example.com',
   redirectUrl: 'https://myapp.com/reset-password',
 });
 
-// Reset password
-await baasix.auth.resetPassword('reset-token', 'newpassword123');
+// Request reset (code mode: emails a short one-time code, no redirectUrl needed)
+await baasix.auth.forgotPassword({
+  email: 'user@example.com',
+  mode: 'code',
+});
+
+// Reset password with the token or emailed code
+await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
 ```
 
 ### Change Password

package/dist/index.cjs

@@ -915,10 +915,17 @@ var AuthModule = class {
    *
    * @example
    * ```typescript
+   * // Link mode (default): emails a clickable reset URL
    * await baasix.auth.forgotPassword({
    *   email: 'user@example.com',
    *   redirectUrl: 'https://myapp.com/reset-password'
    * });
+   *
+   * // Code mode: emails a short one-time code, no redirectUrl needed
+   * await baasix.auth.forgotPassword({
+   *   email: 'user@example.com',
+   *   mode: 'code'
+   * });
    * ```
    */
   async forgotPassword(options) {
@@ -926,17 +933,18 @@ var AuthModule = class {
       "/auth/password/reset",
       {
         email: options.email,
-        link: options.redirectUrl
+        link: options.redirectUrl,
+        mode: options.mode || "link"
       },
       { skipAuth: true }
     );
   }
   /**
-   * Reset password using a reset token
+   * Reset password using a reset token or emailed one-time code
    *
    * @example
    * ```typescript
-   * await baasix.auth.resetPassword('reset-token', 'newpassword123');
+   * await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
    * ```
    */
   async resetPassword(token, newPassword) {
@@ -2710,9 +2718,21 @@ var PermissionsModule = class {
    *   action: 'update',
    *   fields: ['title', 'content', 'status'],
    *   conditions: {
-   *     author_Id: { eq: '$CURRENT_USER' }
+   *     author_Id: { eq: '$CURRENT_USER' }      // USING: which rows may be updated
+   *   },
+   *   checkConditions: {
+   *     author_Id: { eq: '$CURRENT_USER' }      // WITH CHECK: what they may become
    *   }
    * });
+   *
+   * // Create grants use checkConditions (conditions is rejected on create):
+   * await baasix.permissions.create({
+   *   role_Id: 'user-role-uuid',
+   *   collection: 'tasks',
+   *   action: 'create',
+   *   fields: ['*'],
+   *   checkConditions: { owner_Id: { eq: '$CURRENT_USER' } }
+   * });
    * ```
    */
   async create(data) {
@@ -2770,9 +2790,9 @@ var PermissionsModule = class {
    * @example
    * ```typescript
    * await baasix.permissions.createCrudPermissions('role-uuid', 'products', {
-   *   create: { fields: ['name', 'price', 'description'] },
+   *   create: { fields: ['name', 'price'], checkConditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   read: { fields: ['*'] },
-   *   update: { fields: ['name', 'price', 'description'] },
+   *   update: { fields: ['name', 'price'], conditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   delete: false
    * });
    * ```
@@ -2783,12 +2803,15 @@ var PermissionsModule = class {
     for (const action of actions) {
       const actionConfig = config[action];
       if (actionConfig === false) continue;
+      const cfg = actionConfig;
       const permission = await this.create({
         role_Id: roleId,
         collection,
         action,
-        fields: actionConfig?.fields || ["*"],
-        conditions: actionConfig?.conditions
+        fields: cfg?.fields || ["*"],
+        // `conditions` filters existing rows (USING) — never sent for create
+        conditions: action === "create" ? void 0 : cfg?.conditions,
+        checkConditions: action === "create" || action === "update" ? cfg?.checkConditions : void 0
       });
       permissions.push(permission);
     }