@minipim/sdk 0.4.0 → 0.4.1

package/dist/index.cjs

@@ -54,11 +54,15 @@ module.exports = __toCommonJS(src_exports);
 var import_openapi_fetch = __toESM(require("openapi-fetch"), 1);
 function createMinipimClient(opts) {
   const headers = {
-    "x-organization-id": opts.organizationId,
+    // Conditional rather than relying on openapi-fetch to drop the undefined.
+    // It does (mergeHeaders skips undefined values), so this is belt-and-braces
+    // for the type, not a behaviour change — but it keeps the intent local
+    // instead of depending on a transitive dependency's merge semantics.
+    ...opts.organizationId ? { "x-organization-id": opts.organizationId } : {},
     ...opts.headers ?? {}
   };
   if (opts.apiKey) headers["Authorization"] = `Bearer ${opts.apiKey}`;
-  if (opts.userId) headers["x-pim-user-id"] = opts.userId;
+  if (opts.userId) headers["x-user-id"] = opts.userId;
   return (0, import_openapi_fetch.default)({
     baseUrl: opts.baseUrl.replace(/\/$/, ""),
     fetch: opts.fetch,

package/dist/index.d.cts

@@ -18,11 +18,16 @@ interface CreateMinipimClientOptions {
      */
     baseUrl: string;
     /**
-     * Tenant the client speaks for. Required — every authenticated endpoint
-     * needs `x-organization-id`. API keys identify the principal, not the
-     * tenant.
+     * Tenant the client speaks for, sent as `x-organization-id`.
+     *
+     * Optional when `apiKey` is set: an API key carries its own tenant, and the
+     * server resolves the org from the key row and ignores this header entirely
+     * (see the api-key auth provider — it returns the key's `organizationId`,
+     * and the auth plugin short-circuits before it ever reads the header).
+     *
+     * Required for session/`header`-mode auth, where the caller asserts the org.
      */
-    organizationId: string;
+    organizationId?: string;
     /**
      * Bearer API key (e.g. `pim_abc123…`). Issue one in the admin under
      * /api-keys. If you're running in dev with `PIM_AUTH=header`, omit this
@@ -30,8 +35,10 @@ interface CreateMinipimClientOptions {
      */
     apiKey?: string;
     /**
-     * Dev-only header (`x-pim-user-id`). Only set when the deployment is in
-     * `header` auth mode. Ignored in `jwt` / `clerk` deployments.
+     * Dev-only header (`x-user-id`). Only set when the deployment is in `header`
+     * auth mode, where it must be paired with `organizationId`. Ignored in
+     * `jwt` / `clerk` deployments. The instance falls back to its own
+     * `defaultUserSubject` when this is absent.
      */
     userId?: string;
     /**

package/dist/index.d.ts

@@ -18,11 +18,16 @@ interface CreateMinipimClientOptions {
      */
     baseUrl: string;
     /**
-     * Tenant the client speaks for. Required — every authenticated endpoint
-     * needs `x-organization-id`. API keys identify the principal, not the
-     * tenant.
+     * Tenant the client speaks for, sent as `x-organization-id`.
+     *
+     * Optional when `apiKey` is set: an API key carries its own tenant, and the
+     * server resolves the org from the key row and ignores this header entirely
+     * (see the api-key auth provider — it returns the key's `organizationId`,
+     * and the auth plugin short-circuits before it ever reads the header).
+     *
+     * Required for session/`header`-mode auth, where the caller asserts the org.
      */
-    organizationId: string;
+    organizationId?: string;
     /**
      * Bearer API key (e.g. `pim_abc123…`). Issue one in the admin under
      * /api-keys. If you're running in dev with `PIM_AUTH=header`, omit this
@@ -30,8 +35,10 @@ interface CreateMinipimClientOptions {
      */
     apiKey?: string;
     /**
-     * Dev-only header (`x-pim-user-id`). Only set when the deployment is in
-     * `header` auth mode. Ignored in `jwt` / `clerk` deployments.
+     * Dev-only header (`x-user-id`). Only set when the deployment is in `header`
+     * auth mode, where it must be paired with `organizationId`. Ignored in
+     * `jwt` / `clerk` deployments. The instance falls back to its own
+     * `defaultUserSubject` when this is absent.
      */
     userId?: string;
     /**

package/dist/index.js

@@ -2,11 +2,15 @@
 import createClient from "openapi-fetch";
 function createMinipimClient(opts) {
   const headers = {
-    "x-organization-id": opts.organizationId,
+    // Conditional rather than relying on openapi-fetch to drop the undefined.
+    // It does (mergeHeaders skips undefined values), so this is belt-and-braces
+    // for the type, not a behaviour change — but it keeps the intent local
+    // instead of depending on a transitive dependency's merge semantics.
+    ...opts.organizationId ? { "x-organization-id": opts.organizationId } : {},
     ...opts.headers ?? {}
   };
   if (opts.apiKey) headers["Authorization"] = `Bearer ${opts.apiKey}`;
-  if (opts.userId) headers["x-pim-user-id"] = opts.userId;
+  if (opts.userId) headers["x-user-id"] = opts.userId;
   return createClient({
     baseUrl: opts.baseUrl.replace(/\/$/, ""),
     fetch: opts.fetch,