@docmana/sdk 0.15.2 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.16.0
+- Scope organization document access to a specific organization: `listOrganizationDocuments`
+  now accepts an `organization` option and `downloadOrganizationDocument(s)` an optional
+  `organization` argument, both forwarded as the `?organization=` query param (relayed to
+  docmana-api as `X-Selected-Organization`). Without it, consumer-edge reads the caller's
+  default organization depot, which leaks another org's documents to callers scoping by site.
+
 ## 0.15.0
 - Expose `rejectionCode`, `rejectionMessage`, `documentTypeProximity`, and
   `documentContentNature` as optional system fields on node results instead of

package/dist/api/organization-documents.d.ts

@@ -2,6 +2,7 @@ import type { HttpClient } from "../http/http-client.js";
 import type { DownloadedOrganizationDocument, OrganizationDocumentsPayload } from "../types.js";
 export declare function listOrganizationDocuments(http: HttpClient, options?: {
     prefix?: string;
+    organization?: string;
 }): Promise<OrganizationDocumentsPayload>;
-export declare function downloadOrganizationDocument(http: HttpClient, path: string): Promise<DownloadedOrganizationDocument>;
-export declare function downloadOrganizationDocuments(http: HttpClient, paths: string[]): Promise<DownloadedOrganizationDocument[]>;
+export declare function downloadOrganizationDocument(http: HttpClient, path: string, organization?: string): Promise<DownloadedOrganizationDocument>;
+export declare function downloadOrganizationDocuments(http: HttpClient, paths: string[], organization?: string): Promise<DownloadedOrganizationDocument[]>;

package/dist/cli.mjs

@@ -400,8 +400,11 @@ async function getFlowDefinition(http, flowId, organization) {
 
 // src/sdk/api/organization-documents.ts
 async function listOrganizationDocuments(http, options = {}) {
+  const query = {};
+  if (options.prefix) query.prefix = options.prefix;
+  if (options.organization) query.organization = options.organization;
   const result = await http.requestJson("GET", "/organization-documents", {
-    query: options.prefix ? { prefix: options.prefix } : void 0
+    query: Object.keys(query).length ? query : void 0
   });
   const value = result && typeof result === "object" ? result : {};
   return {
@@ -409,9 +412,11 @@ async function listOrganizationDocuments(http, options = {}) {
     documents: Array.isArray(value.documents) ? value.documents.map(toOrganizationDocument).filter(isOrganizationDocument) : []
   };
 }
-async function downloadOrganizationDocument(http, path) {
+async function downloadOrganizationDocument(http, path, organization) {
+  const query = { path };
+  if (organization) query.organization = organization;
   const result = await http.requestBytes("GET", "/organization-documents/download", {
-    query: { path }
+    query
   });
   return {
     bytes: result.bytes,
@@ -419,8 +424,8 @@ async function downloadOrganizationDocument(http, path) {
     contentType: result.headers.get("content-type") || void 0
   };
 }
-async function downloadOrganizationDocuments(http, paths) {
-  return Promise.all(paths.map((path) => downloadOrganizationDocument(http, path)));
+async function downloadOrganizationDocuments(http, paths, organization) {
+  return Promise.all(paths.map((path) => downloadOrganizationDocument(http, path, organization)));
 }
 function toOrganizationDocument(document) {
   const value = document && typeof document === "object" ? document : {};
@@ -608,11 +613,11 @@ var Docmana = class {
   async listOrganizationDocuments(options = {}) {
     return listOrganizationDocuments(this.http, options);
   }
-  async downloadOrganizationDocument(path) {
-    return downloadOrganizationDocument(this.http, path);
+  async downloadOrganizationDocument(path, organization) {
+    return downloadOrganizationDocument(this.http, path, organization);
   }
-  async downloadOrganizationDocuments(paths) {
-    return downloadOrganizationDocuments(this.http, paths);
+  async downloadOrganizationDocuments(paths, organization) {
+    return downloadOrganizationDocuments(this.http, paths, organization);
   }
   isTerminalStatus(status) {
     return isTerminalStatus(status);