@minipim/sdk 0.9.0 → 0.10.0

package/dist/openapi.d.cts

@@ -1637,6 +1637,7 @@ interface paths {
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
                     brand?: string;
                     brandId?: string;
+                    ids?: string | string[];
                     /** @description Repeatable — `?tag=a&tag=b` matches records carrying ALL listed tags. Values are canonicalized exactly as writes are, so `?tag=Buying%20Guide` matches the stored `buying-guide`; you never have to pre-slugify a filter. Backed by the GIN index on `tags`. */
                     tag?: string | string[];
                     connectorId?: string;
@@ -1856,6 +1857,7 @@ interface paths {
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
                     brand?: string;
                     brandId?: string;
+                    ids?: string | string[];
                     /** @description Repeatable — `?tag=a&tag=b` matches records carrying ALL listed tags. Values are canonicalized exactly as writes are, so `?tag=Buying%20Guide` matches the stored `buying-guide`; you never have to pre-slugify a filter. Backed by the GIN index on `tags`. */
                     tag?: string | string[];
                     connectorId?: string;
@@ -1869,6 +1871,7 @@ interface paths {
                     locale?: string;
                     channel?: string;
                     facetLimit?: number;
+                    includeEmpty?: boolean | ('true' | 'false' | '1' | '0');
                 };
                 header?: never;
                 path?: never;
@@ -3639,6 +3642,7 @@ interface paths {
                     status?: 'draft' | 'active' | 'archived';
                     q?: string;
                     slug?: string;
+                    ids?: string | string[];
                     familyId?: string;
                     categoryId?: string;
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
@@ -4228,13 +4232,17 @@ interface paths {
          *     - **With `channelId`** — the channel’s own page wins; if it has none, the org-wide page is returned. That makes a channel-specific page an override of shared content rather than a separate thing to look up.
          *     - **Without `channelId`** — org-wide pages only. A caller with no channel context should never be handed one channel’s page by accident.
          *
-         *     Returns pages in ANY status, exactly like `GET /v1/content/{id}`. Check `status` before rendering — a draft is reachable here on purpose so the admin and preview tooling can use the same lookup.
+         *     **By default this returns a page in ANY status**, exactly like `GET /v1/content/{id}` — a draft is reachable here on purpose, so admin and preview tooling can share one lookup. On a public storefront route that is a disclosure risk: an unpublished page is readable by anyone who guesses its slug, and the slug is usually the title.
+         *
+         *     **Pass `?status=active` on any route a shopper can reach.** Unknown query parameters are now rejected with a 422 rather than ignored, so a filter that does not apply fails loudly instead of appearing to work.
          */
         get: {
             parameters: {
                 query?: {
                     /** @description Resolve within this channel first, falling back to the org-wide page. */
                     channelId?: string;
+                    /** @description Restrict to this status. Omit to get the page in ANY status — which is what admin and preview tooling want, and what a storefront almost certainly does not. Pass `status=active` on a public route. */
+                    status?: 'draft' | 'active' | 'archived';
                 };
                 header?: never;
                 path: {

package/dist/openapi.d.ts

@@ -1637,6 +1637,7 @@ interface paths {
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
                     brand?: string;
                     brandId?: string;
+                    ids?: string | string[];
                     /** @description Repeatable — `?tag=a&tag=b` matches records carrying ALL listed tags. Values are canonicalized exactly as writes are, so `?tag=Buying%20Guide` matches the stored `buying-guide`; you never have to pre-slugify a filter. Backed by the GIN index on `tags`. */
                     tag?: string | string[];
                     connectorId?: string;
@@ -1856,6 +1857,7 @@ interface paths {
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
                     brand?: string;
                     brandId?: string;
+                    ids?: string | string[];
                     /** @description Repeatable — `?tag=a&tag=b` matches records carrying ALL listed tags. Values are canonicalized exactly as writes are, so `?tag=Buying%20Guide` matches the stored `buying-guide`; you never have to pre-slugify a filter. Backed by the GIN index on `tags`. */
                     tag?: string | string[];
                     connectorId?: string;
@@ -1869,6 +1871,7 @@ interface paths {
                     locale?: string;
                     channel?: string;
                     facetLimit?: number;
+                    includeEmpty?: boolean | ('true' | 'false' | '1' | '0');
                 };
                 header?: never;
                 path?: never;
@@ -3639,6 +3642,7 @@ interface paths {
                     status?: 'draft' | 'active' | 'archived';
                     q?: string;
                     slug?: string;
+                    ids?: string | string[];
                     familyId?: string;
                     categoryId?: string;
                     includeDescendants?: boolean | ('true' | 'false' | '1' | '0');
@@ -4228,13 +4232,17 @@ interface paths {
          *     - **With `channelId`** — the channel’s own page wins; if it has none, the org-wide page is returned. That makes a channel-specific page an override of shared content rather than a separate thing to look up.
          *     - **Without `channelId`** — org-wide pages only. A caller with no channel context should never be handed one channel’s page by accident.
          *
-         *     Returns pages in ANY status, exactly like `GET /v1/content/{id}`. Check `status` before rendering — a draft is reachable here on purpose so the admin and preview tooling can use the same lookup.
+         *     **By default this returns a page in ANY status**, exactly like `GET /v1/content/{id}` — a draft is reachable here on purpose, so admin and preview tooling can share one lookup. On a public storefront route that is a disclosure risk: an unpublished page is readable by anyone who guesses its slug, and the slug is usually the title.
+         *
+         *     **Pass `?status=active` on any route a shopper can reach.** Unknown query parameters are now rejected with a 422 rather than ignored, so a filter that does not apply fails loudly instead of appearing to work.
          */
         get: {
             parameters: {
                 query?: {
                     /** @description Resolve within this channel first, falling back to the org-wide page. */
                     channelId?: string;
+                    /** @description Restrict to this status. Omit to get the page in ANY status — which is what admin and preview tooling want, and what a storefront almost certainly does not. Pass `status=active` on a public route. */
+                    status?: 'draft' | 'active' | 'archived';
                 };
                 header?: never;
                 path: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minipim/sdk",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Typed TypeScript client for the MiniPim API.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/Epic-Design-Labs/minipim",