@docmana/sdk 0.15.1 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.16.0
+- Scope organization document access to a specific organization: `listOrganizationDocuments`
+  now accepts an `organization` option and `downloadOrganizationDocument(s)` an optional
+  `organization` argument, both forwarded as the `?organization=` query param (relayed to
+  docmana-api as `X-Selected-Organization`). Without it, consumer-edge reads the caller's
+  default organization depot, which leaks another org's documents to callers scoping by site.
+
 ## 0.15.0
 - Expose `rejectionCode`, `rejectionMessage`, `documentTypeProximity`, and
   `documentContentNature` as optional system fields on node results instead of

package/dist/api/execution-result.d.ts

@@ -1,3 +1,3 @@
 import type { HttpClient } from "../http/http-client.js";
 import type { DocmanaExecutionResult } from "../types.js";
-export declare function getResult(http: HttpClient, executionResultId: string, signal?: AbortSignal, language?: string): Promise<DocmanaExecutionResult>;
+export declare function getResult(http: HttpClient, executionResultId: string, signal?: AbortSignal, language?: string, organization?: string): Promise<DocmanaExecutionResult>;

package/dist/api/execution-status.d.ts

@@ -1,6 +1,6 @@
 import type { HttpClient } from "../http/http-client.js";
 import type { ExecutionStatus } from "../types.js";
-export declare function getStatus(http: HttpClient, executionResultId: string, signal?: AbortSignal): Promise<{
+export declare function getStatus(http: HttpClient, executionResultId: string, signal?: AbortSignal, organization?: string): Promise<{
     status: ExecutionStatus | string;
     pollAfterMs?: number;
 }>;

package/dist/api/organization-documents.d.ts

@@ -2,6 +2,7 @@ import type { HttpClient } from "../http/http-client.js";
 import type { DownloadedOrganizationDocument, OrganizationDocumentsPayload } from "../types.js";
 export declare function listOrganizationDocuments(http: HttpClient, options?: {
     prefix?: string;
+    organization?: string;
 }): Promise<OrganizationDocumentsPayload>;
-export declare function downloadOrganizationDocument(http: HttpClient, path: string): Promise<DownloadedOrganizationDocument>;
-export declare function downloadOrganizationDocuments(http: HttpClient, paths: string[]): Promise<DownloadedOrganizationDocument[]>;
+export declare function downloadOrganizationDocument(http: HttpClient, path: string, organization?: string): Promise<DownloadedOrganizationDocument>;
+export declare function downloadOrganizationDocuments(http: HttpClient, paths: string[], organization?: string): Promise<DownloadedOrganizationDocument[]>;

package/dist/cli.mjs

@@ -298,8 +298,11 @@ function isTerminalStatus(status) {
 }
 
 // src/sdk/api/execution-status.ts
-async function getStatus(http, executionResultId, signal) {
-  const res = await http.requestRaw("GET", `/executions/${executionResultId}/status`, { signal });
+async function getStatus(http, executionResultId, signal, organization) {
+  const res = await http.requestRaw("GET", `/executions/${executionResultId}/status`, {
+    query: organization ? { organization } : void 0,
+    signal
+  });
   const text = await res.text();
   const body = text ? JSON.parse(text) : { status: "" };
   const normalizedBody = { ...body, status: normalizeStatus(body.status) };
@@ -320,9 +323,12 @@ function parsePositiveInt(value) {
 }
 
 // src/sdk/api/execution-result.ts
-async function getResult(http, executionResultId, signal, language) {
+async function getResult(http, executionResultId, signal, language, organization) {
+  const query = {};
+  if (language) query.language = language;
+  if (organization) query.organization = organization;
   return http.requestJson("GET", `/executions/${executionResultId}/result`, {
-    query: language ? { language } : void 0,
+    query: Object.keys(query).length > 0 ? query : void 0,
     signal
   });
 }
@@ -394,8 +400,11 @@ async function getFlowDefinition(http, flowId, organization) {
 
 // src/sdk/api/organization-documents.ts
 async function listOrganizationDocuments(http, options = {}) {
+  const query = {};
+  if (options.prefix) query.prefix = options.prefix;
+  if (options.organization) query.organization = options.organization;
   const result = await http.requestJson("GET", "/organization-documents", {
-    query: options.prefix ? { prefix: options.prefix } : void 0
+    query: Object.keys(query).length ? query : void 0
   });
   const value = result && typeof result === "object" ? result : {};
   return {
@@ -403,9 +412,11 @@ async function listOrganizationDocuments(http, options = {}) {
     documents: Array.isArray(value.documents) ? value.documents.map(toOrganizationDocument).filter(isOrganizationDocument) : []
   };
 }
-async function downloadOrganizationDocument(http, path) {
+async function downloadOrganizationDocument(http, path, organization) {
+  const query = { path };
+  if (organization) query.organization = organization;
   const result = await http.requestBytes("GET", "/organization-documents/download", {
-    query: { path }
+    query
   });
   return {
     bytes: result.bytes,
@@ -413,8 +424,8 @@ async function downloadOrganizationDocument(http, path) {
     contentType: result.headers.get("content-type") || void 0
   };
 }
-async function downloadOrganizationDocuments(http, paths) {
-  return Promise.all(paths.map((path) => downloadOrganizationDocument(http, path)));
+async function downloadOrganizationDocuments(http, paths, organization) {
+  return Promise.all(paths.map((path) => downloadOrganizationDocument(http, path, organization)));
 }
 function toOrganizationDocument(document) {
   const value = document && typeof document === "object" ? document : {};
@@ -524,11 +535,11 @@ var Docmana = class {
       params.organization
     );
   }
-  async getStatus(executionResultId, signal) {
-    return getStatus(this.http, executionResultId, signal);
+  async getStatus(executionResultId, signal, organization) {
+    return getStatus(this.http, executionResultId, signal, organization);
   }
-  async getResult(executionResultId, signal, language) {
-    return getResult(this.http, executionResultId, signal, language);
+  async getResult(executionResultId, signal, language, organization) {
+    return getResult(this.http, executionResultId, signal, language, organization);
   }
   async runFlow(flowId, params, options = {}) {
     const { executionResultId } = await this.runFlowAsync(flowId, params, {
@@ -540,7 +551,11 @@ var Docmana = class {
       check: async () => {
         attempt += 1;
         try {
-          const statusResult = await this.getStatus(executionResultId, options.signal);
+          const statusResult = await this.getStatus(
+            executionResultId,
+            options.signal,
+            params.organization
+          );
           const status = statusResult.status;
           const nextPollAfterMs = this.isTerminalStatus(status) ? void 0 : statusResult.pollAfterMs;
           options.onPoll?.({
@@ -568,7 +583,12 @@ var Docmana = class {
       timeoutMs: options.timeoutMs ?? this.config.timeoutMs,
       signal: options.signal
     });
-    const result = await this.getResult(executionResultId, options.signal, params.language);
+    const result = await this.getResult(
+      executionResultId,
+      options.signal,
+      params.language,
+      params.organization
+    );
     if (isFailedStatus(result.status)) {
       throw new DocmanaExecutionError(
         `Flow ${flowId} execution failed`,
@@ -593,11 +613,11 @@ var Docmana = class {
   async listOrganizationDocuments(options = {}) {
     return listOrganizationDocuments(this.http, options);
   }
-  async downloadOrganizationDocument(path) {
-    return downloadOrganizationDocument(this.http, path);
+  async downloadOrganizationDocument(path, organization) {
+    return downloadOrganizationDocument(this.http, path, organization);
   }
-  async downloadOrganizationDocuments(paths) {
-    return downloadOrganizationDocuments(this.http, paths);
+  async downloadOrganizationDocuments(paths, organization) {
+    return downloadOrganizationDocuments(this.http, paths, organization);
   }
   isTerminalStatus(status) {
     return isTerminalStatus(status);