@baasix/sdk 0.1.20 → 0.1.22

package/dist/index.d.cts

@@ -318,9 +318,21 @@ declare class PermissionsModule {
      *   action: 'update',
      *   fields: ['title', 'content', 'status'],
      *   conditions: {
-     *     author_Id: { eq: '$CURRENT_USER' }
+     *     author_Id: { eq: '$CURRENT_USER' }      // USING: which rows may be updated
+     *   },
+     *   checkConditions: {
+     *     author_Id: { eq: '$CURRENT_USER' }      // WITH CHECK: what they may become
      *   }
      * });
+     *
+     * // Create grants use checkConditions (conditions is rejected on create):
+     * await baasix.permissions.create({
+     *   role_Id: 'user-role-uuid',
+     *   collection: 'tasks',
+     *   action: 'create',
+     *   fields: ['*'],
+     *   checkConditions: { owner_Id: { eq: '$CURRENT_USER' } }
+     * });
      * ```
      */
     create(data: CreatePermissionData): Promise<Permission>;
@@ -360,17 +372,18 @@ declare class PermissionsModule {
      * @example
      * ```typescript
      * await baasix.permissions.createCrudPermissions('role-uuid', 'products', {
-     *   create: { fields: ['name', 'price', 'description'] },
+     *   create: { fields: ['name', 'price'], checkConditions: { owner_Id: { eq: '$CURRENT_USER' } } },
      *   read: { fields: ['*'] },
-     *   update: { fields: ['name', 'price', 'description'] },
+     *   update: { fields: ['name', 'price'], conditions: { owner_Id: { eq: '$CURRENT_USER' } } },
      *   delete: false
      * });
      * ```
      */
     createCrudPermissions(roleId: string, collection: string, config: {
+        /** Create grants scope writes via checkConditions — `conditions` is rejected by the API on create. */
         create?: {
             fields?: string[];
-            conditions?: Permission["conditions"];
+            checkConditions?: Permission["checkConditions"];
         } | false;
         read?: {
             fields?: string[];
@@ -379,6 +392,7 @@ declare class PermissionsModule {
         update?: {
             fields?: string[];
             conditions?: Permission["conditions"];
+            checkConditions?: Permission["checkConditions"];
         } | false;
         delete?: {
             conditions?: Permission["conditions"];

package/dist/index.d.ts

@@ -318,9 +318,21 @@ declare class PermissionsModule {
      *   action: 'update',
      *   fields: ['title', 'content', 'status'],
      *   conditions: {
-     *     author_Id: { eq: '$CURRENT_USER' }
+     *     author_Id: { eq: '$CURRENT_USER' }      // USING: which rows may be updated
+     *   },
+     *   checkConditions: {
+     *     author_Id: { eq: '$CURRENT_USER' }      // WITH CHECK: what they may become
      *   }
      * });
+     *
+     * // Create grants use checkConditions (conditions is rejected on create):
+     * await baasix.permissions.create({
+     *   role_Id: 'user-role-uuid',
+     *   collection: 'tasks',
+     *   action: 'create',
+     *   fields: ['*'],
+     *   checkConditions: { owner_Id: { eq: '$CURRENT_USER' } }
+     * });
      * ```
      */
     create(data: CreatePermissionData): Promise<Permission>;
@@ -360,17 +372,18 @@ declare class PermissionsModule {
      * @example
      * ```typescript
      * await baasix.permissions.createCrudPermissions('role-uuid', 'products', {
-     *   create: { fields: ['name', 'price', 'description'] },
+     *   create: { fields: ['name', 'price'], checkConditions: { owner_Id: { eq: '$CURRENT_USER' } } },
      *   read: { fields: ['*'] },
-     *   update: { fields: ['name', 'price', 'description'] },
+     *   update: { fields: ['name', 'price'], conditions: { owner_Id: { eq: '$CURRENT_USER' } } },
      *   delete: false
      * });
      * ```
      */
     createCrudPermissions(roleId: string, collection: string, config: {
+        /** Create grants scope writes via checkConditions — `conditions` is rejected by the API on create. */
         create?: {
             fields?: string[];
-            conditions?: Permission["conditions"];
+            checkConditions?: Permission["checkConditions"];
         } | false;
         read?: {
             fields?: string[];
@@ -379,6 +392,7 @@ declare class PermissionsModule {
         update?: {
             fields?: string[];
             conditions?: Permission["conditions"];
+            checkConditions?: Permission["checkConditions"];
         } | false;
         delete?: {
             conditions?: Permission["conditions"];

package/dist/index.js

@@ -913,10 +913,17 @@ var AuthModule = class {
    *
    * @example
    * ```typescript
+   * // Link mode (default): emails a clickable reset URL
    * await baasix.auth.forgotPassword({
    *   email: 'user@example.com',
    *   redirectUrl: 'https://myapp.com/reset-password'
    * });
+   *
+   * // Code mode: emails a short one-time code, no redirectUrl needed
+   * await baasix.auth.forgotPassword({
+   *   email: 'user@example.com',
+   *   mode: 'code'
+   * });
    * ```
    */
   async forgotPassword(options) {
@@ -924,17 +931,18 @@ var AuthModule = class {
       "/auth/password/reset",
       {
         email: options.email,
-        link: options.redirectUrl
+        link: options.redirectUrl,
+        mode: options.mode || "link"
       },
       { skipAuth: true }
     );
   }
   /**
-   * Reset password using a reset token
+   * Reset password using a reset token or emailed one-time code
    *
    * @example
    * ```typescript
-   * await baasix.auth.resetPassword('reset-token', 'newpassword123');
+   * await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
    * ```
    */
   async resetPassword(token, newPassword) {
@@ -2708,9 +2716,21 @@ var PermissionsModule = class {
    *   action: 'update',
    *   fields: ['title', 'content', 'status'],
    *   conditions: {
-   *     author_Id: { eq: '$CURRENT_USER' }
+   *     author_Id: { eq: '$CURRENT_USER' }      // USING: which rows may be updated
+   *   },
+   *   checkConditions: {
+   *     author_Id: { eq: '$CURRENT_USER' }      // WITH CHECK: what they may become
    *   }
    * });
+   *
+   * // Create grants use checkConditions (conditions is rejected on create):
+   * await baasix.permissions.create({
+   *   role_Id: 'user-role-uuid',
+   *   collection: 'tasks',
+   *   action: 'create',
+   *   fields: ['*'],
+   *   checkConditions: { owner_Id: { eq: '$CURRENT_USER' } }
+   * });
    * ```
    */
   async create(data) {
@@ -2768,9 +2788,9 @@ var PermissionsModule = class {
    * @example
    * ```typescript
    * await baasix.permissions.createCrudPermissions('role-uuid', 'products', {
-   *   create: { fields: ['name', 'price', 'description'] },
+   *   create: { fields: ['name', 'price'], checkConditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   read: { fields: ['*'] },
-   *   update: { fields: ['name', 'price', 'description'] },
+   *   update: { fields: ['name', 'price'], conditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   delete: false
    * });
    * ```
@@ -2781,12 +2801,15 @@ var PermissionsModule = class {
     for (const action of actions) {
       const actionConfig = config[action];
       if (actionConfig === false) continue;
+      const cfg = actionConfig;
       const permission = await this.create({
         role_Id: roleId,
         collection,
         action,
-        fields: actionConfig?.fields || ["*"],
-        conditions: actionConfig?.conditions
+        fields: cfg?.fields || ["*"],
+        // `conditions` filters existing rows (USING) — never sent for create
+        conditions: action === "create" ? void 0 : cfg?.conditions,
+        checkConditions: action === "create" || action === "update" ? cfg?.checkConditions : void 0
       });
       permissions.push(permission);
     }