@doany-ai/sdk 0.2.7 → 0.2.8

package/dist/client.js

@@ -202,6 +202,9 @@ export function createClient(config) {
             return {
                 getCheckoutSession: full.getCheckoutSession.bind(full),
                 getSubscription: full.getSubscription.bind(full),
+                // Reading the products is not a decision for any browser, and a
+                // fulfilment function often needs what it just sold.
+                products: full.products,
             };
         })(),
         functions: createFunctionsModule(serviceRoleFunctionsAxiosClient, appId, {
@@ -457,6 +460,21 @@ export function createClientFromRequest(request) {
     if (runIdHeader) {
         additionalHeaders["X-Run-Id"] = runIdHeader.slice(0, 128);
     }
+    // Workflow diagnostics are separate from Annie's X-Run-Id attribution.
+    // The function proxy owns these headers; neither their presence nor their
+    // contents grant permissions or change billing. Match its bounded format.
+    if (serviceRoleToken) {
+        for (const name of [
+            "X-Doany-Workflow-Id",
+            "X-Doany-Workflow-Run-Id",
+            "X-Doany-Workflow-Step-Id",
+        ]) {
+            const value = request.headers.get(name);
+            if (value && /^[A-Za-z0-9_.:/-]{1,128}$/.test(value)) {
+                additionalHeaders[name] = value;
+            }
+        }
+    }
     return createClient({
         serverUrl: serverUrlHeader || "https://api.doany.ai",
         appId,

package/dist/client.types.d.ts

@@ -150,10 +150,11 @@ export interface DoanyClient {
          * service-role caller, so the ordinary client cannot resolve a mode and
          * the read fails whatever the function forwards.
          *
-         * Only the reads are here. There is no service-role checkout — opening one
-         * is a decision that belongs to the browser that is actually there.
+         * Only the reads are here — the two above and the products. There
+         * is no service-role checkout: opening one is a decision that belongs to
+         * the browser that is actually there.
          */
-        payments: Pick<PaymentsModule, "getCheckoutSession" | "getSubscription">;
+        payments: Pick<PaymentsModule, "getCheckoutSession" | "getSubscription" | "products">;
         /** {@link SsoModule | SSO module} for generating SSO tokens.
          * @internal
          */

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export type { FunctionsModule, FunctionName, FunctionNameRegistry, } from "./mod
 export type { AgentsModule, AgentName, AgentNameRegistry, AgentConversation, AgentMessage, AgentMessageReasoning, AgentMessageToolCall, AgentMessageUsage, AgentMessageCustomContext, AgentMessageMetadata, CreateConversationParams, } from "./modules/agents.types.js";
 export type { AiGatewayModule, AiGatewayConnection, } from "./modules/ai-gateway.types.js";
 export type { AppLogsModule } from "./modules/app-logs.types.js";
-export type { PaymentsModule, CheckoutLineItem, CreateCheckoutParams, CreateCheckoutResult, CreateEmbeddedCheckoutResult, CheckoutSession, SubscriptionState, BillingPortalParams, } from "./modules/payments.types.js";
+export type { PaymentsModule, ProductsModule, Product, ProductQuery, ProductSort, CheckoutLineItem, CreateCheckoutParams, CreateCheckoutResult, CreateEmbeddedCheckoutResult, CheckoutSession, SubscriptionState, BillingPortalParams, } from "./modules/payments.types.js";
 export type { SsoModule, SsoAccessTokenResponse } from "./modules/sso.types.js";
 export type { ConnectorsModule, UserConnectorsModule, ConnectorApiRequest, ConnectorApiResponse, ConnectorProxyRawResponse, } from "./modules/connectors.types.js";
 export type { CustomIntegrationsModule, CustomIntegrationCallParams, CustomIntegrationCallResponse, } from "./modules/custom-integrations.types.js";

package/dist/modules/payments.d.ts

@@ -1,5 +1,16 @@
 import { AxiosInstance } from "axios";
-import { PaymentsModule } from "./payments.types";
+import { PaymentsModule, ProductsModule } from "./payments.types";
+/**
+ * The product reads.
+ *
+ * Parameters go over the wire exactly as an entity's do (`sort`, `limit`,
+ * `skip`, `q` as JSON), because the point of this module is that code written
+ * against `entities.Product` moves over by renaming it — same arguments, same
+ * records back.
+ *
+ * @internal
+ */
+export declare function createProductsModule(axios: AxiosInstance, appId: string): ProductsModule;
 /**
  * Creates the payments module for the Doany SDK.
  *

package/dist/modules/payments.js

@@ -1,3 +1,42 @@
+/**
+ * The product reads.
+ *
+ * Parameters go over the wire exactly as an entity's do (`sort`, `limit`,
+ * `skip`, `q` as JSON), because the point of this module is that code written
+ * against `entities.Product` moves over by renaming it — same arguments, same
+ * records back.
+ *
+ * @internal
+ */
+export function createProductsModule(axios, appId) {
+    const baseURL = `/apps/${appId}/payments/products`;
+    function params(sort, limit, skip) {
+        const out = {};
+        if (sort)
+            out.sort = sort;
+        if (limit)
+            out.limit = limit;
+        if (skip)
+            out.skip = skip;
+        return out;
+    }
+    return {
+        async list(sort, limit, skip) {
+            const data = await axios.get(baseURL, { params: params(sort, limit, skip) });
+            return data;
+        },
+        async filter(query, sort, limit, skip) {
+            const data = await axios.get(baseURL, {
+                params: { q: JSON.stringify(query), ...params(sort, limit, skip) },
+            });
+            return data;
+        },
+        async get(id) {
+            const data = await axios.get(`${baseURL}/${encodeURIComponent(id)}`);
+            return data;
+        },
+    };
+}
 /**
  * Creates the payments module for the Doany SDK.
  *
@@ -21,6 +60,7 @@ export function createPaymentsModule(axios, appId) {
     // Axios's declared return type does not reflect that, so the results below
     // are cast through `unknown`.
     return {
+        products: createProductsModule(axios, appId),
         createCheckoutSession,
         async getSubscription(subscriptionId) {
             const data = await axios.request({

package/dist/modules/payments.types.d.ts

@@ -1,13 +1,15 @@
 /**
  * One thing being sold in a checkout.
  *
- * A line item names a record in your own app data — doany keeps your catalog
+ * A line item names a record in your own app data — doany keeps your products
  * there rather than as objects inside Stripe, which is why switching from test
  * to real payments needs no migration.
  */
 export type CheckoutLineItem = {
     /**
-     * The `id` of a record in this app's `Product` entity.
+     * The `id` of one of this app's products — a record from
+     * {@linkcode ProductsModule | doany.payments.products}, or from the `Product`
+     * entity on an app whose products predate it.
      *
      * The price, name and currency all come from that record — you cannot pass
      * a price. This endpoint is reachable by anyone (a shop has to sell to
@@ -65,7 +67,7 @@ export type CreateCheckoutResult = {
     /** `test` in the preview, `live` on a published site that has gone live. */
     mode: "test" | "live";
     /**
-     * What the customer is about to agree to, decided by the catalog.
+     * What the customer is about to agree to, decided by the product.
      *
      * `subscription` when the products carry a `recurring_interval`, `payment`
      * otherwise. Say the right word on the button: "Subscribe" over a one-off
@@ -203,17 +205,98 @@ export type CheckoutSession = {
      */
     access_token?: string;
 };
+/**
+ * One of this app's products, as {@linkcode ProductsModule} returns it.
+ *
+ * The same shape an entity record has: the platform's fields and the system
+ * fields by their entity names, and every field of the app's own (`slug`,
+ * `category`, `image_url`, …) at the top level beside them.
+ */
+export type Product = {
+    id: string;
+    name: string;
+    description: string | null;
+    /** Minor units — 2400 is 24.00. `null` for something shown but not sold. */
+    price_cents: number | null;
+    /** Lowercase ISO code, or `null` for the checkout's default. */
+    currency: string | null;
+    /** Present => a subscription billed this often. `null` => a one-off. */
+    recurring_interval: "week" | "month" | "year" | null;
+    /** `false` is off sale: still readable, cannot be bought. */
+    is_available: boolean;
+    created_date: string;
+    updated_date: string;
+    created_by: string | null;
+    created_by_id: string | null;
+    is_sample: boolean;
+    /**
+     * Only ever on {@linkcode ProductsModule.get}: the product was removed from
+     * the store. Kept readable because past orders and subscriptions name it.
+     */
+    is_deleted?: true;
+    /**
+     * The app's own fields. `any`, as on an entity record, so code that read
+     * `product.slug.toLowerCase()` off `entities.Product` still type-checks.
+     */
+    [field: string]: any;
+};
+/**
+ * A field to order by, `-` first for descending: `"price_cents"`,
+ * `"-created_date"`, or one of the app's own fields.
+ */
+export type ProductSort = string;
+/**
+ * Equality only — `{ slug: "starter" }`, `{ is_available: true }`. Several
+ * fields must all match. `{ field: null }` also matches a product that does not
+ * have the field. Operators (`$gt`, `$in`, …) are refused.
+ */
+export type ProductQuery = Record<string, string | number | boolean | null>;
+/**
+ * Read this app's products. Read-only: products are added and priced by
+ * the app owner in the Payments panel, or by asking Annie.
+ *
+ * Same methods, arguments and results as an entity's reads, so code written
+ * against `entities.Product` moves over by renaming it. Records come back in
+ * the order they were created when no `sort` is given.
+ */
+export interface ProductsModule {
+    /**
+     * @example
+     * ```typescript
+     * const products = await doany.payments.products.list();
+     * const newest = await doany.payments.products.list('-created_date', 20);
+     * ```
+     */
+    list(sort?: ProductSort, limit?: number, skip?: number): Promise<Product[]>;
+    /**
+     * @example
+     * ```typescript
+     * const [plan] = await doany.payments.products.filter({ slug: 'pro' });
+     * const onSale = await doany.payments.products.filter(
+     *   { is_available: true }, 'price_cents', 10,
+     * );
+     * ```
+     */
+    filter(query: ProductQuery, sort?: ProductSort, limit?: number, skip?: number): Promise<Product[]>;
+    /**
+     * One product by id. A removed product is still returned, with
+     * `is_deleted: true`; an id that was never a product is a 404.
+     */
+    get(id: string): Promise<Product>;
+}
 /**
  * Take card payments on your site.
  *
  * Money goes to the app owner's own Stripe account — doany never holds it and
  * takes no cut. Stripe's usual per-transaction fee applies.
  *
- * ## Prices live in your data, not in your code
+ * ## Prices live with the product, not in your code
  *
- * Sellable things are records in this app's `Product` entity, with the price in
- * an integer `price_cents` field. A checkout names the product; the server
- * looks up what it costs.
+ * Sellable things are this app's products, read with
+ * {@linkcode PaymentsModule.products}, with the price in an integer
+ * `price_cents` field. A checkout names the product; the server looks up what
+ * it costs. (An app whose products predate this keeps them in a `Product`
+ * entity; checkout reads whichever one the app uses.)
  *
  * ## Test and real payments
  *
@@ -229,12 +312,14 @@ export type CheckoutSession = {
  * The same code covers both. There is no key to configure and no mode to set.
  */
 export interface PaymentsModule {
+    /** This app's products. See {@linkcode ProductsModule}. */
+    products: ProductsModule;
     /**
      * Opens a Stripe checkout and returns the URL to send the customer to.
      *
      * @example Sell one item
      * ```typescript
-     * // The price comes from the Product record, not from this call.
+     * // The price comes from the product, not from this call.
      * const { url } = await doany.payments.createCheckoutSession({
      *   line_items: [{ product_id: product.id, quantity: 1 }],
      *   success_path: '/thanks',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@doany-ai/sdk",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "JavaScript SDK for the doany app platform (API-compatible fork of @base44/sdk)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",