@orvello/sdk 0.2.3 → 0.3.0

package/dist/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
 // src/contract-hash.ts
-var CONTRACT_SHA256 = "d19081d6e7c4efcf54245026a17458d7f8dff002d61ea69cdd8f41c7d0d033ad";
+var CONTRACT_SHA256 = "eb64699e8b371644f2a18619fdd4c65055683b270c6c92577cf8e0df8716d2ca";
 
 // src/diagnose.ts
-var SDK_VERSION = "0.2.3" ;
+var SDK_VERSION = "0.3.0" ;
 function normalizeBaseUrl(raw) {
   const trimmed = raw.trim();
   if (!trimmed) throw new Error("Base URL cannot be empty");
@@ -185,22 +185,15 @@ function mapPaymentAccountToBankDetails(account) {
 
 // src/route-index.generated.ts
 var ROUTE_INDEX = {
-  "GET__security_public": ["GET", "/security/public", "n", "public", 0],
+  "GET__api_amp_mail_brand_logo": ["GET", "/api/amp-mail/brands/:slug/logo", "n", "public", 1],
+  "GET__api_amp_mail_file": ["GET", "/api/amp-mail/files/:token", "n", "public", 1],
+  "GET__security_public": ["GET", "/security/public", "k", "x_api_key_https", 0],
   "admin_vat_create_system_settings": ["POST", "/admin/vat/system-settings", "b", "frontend_permission_http", 4],
   "admin_vat_get_company_settings_history": ["GET", "/admin/vat/company/:companyId/settings-history", "b", "frontend_permission_http", 1],
   "admin_vat_get_system_settings": ["GET", "/admin/vat/system-settings", "b", "frontend_permission_http", 0],
   "admin_vat_get_system_settings_history": ["GET", "/admin/vat/system-settings/history", "b", "frontend_permission_http", 2],
   "admin_vat_update_company_settings": ["PUT", "/admin/vat/company/:companyId/settings", "b", "frontend_permission_http", 5],
   "admin_vat_update_system_settings": ["PUT", "/admin/vat/system-settings/:id", "b", "frontend_permission_http", 5],
-  "api_keys_audit": ["GET", "/api-keys/audit/:apiKeyId", "b", "frontend_bearer_http", 3],
-  "api_keys_by_id": ["GET", "/api-keys/byId/:apiKeyId", "b", "frontend_bearer_http", 1],
-  "api_keys_create": ["POST", "/api-keys/create", "b", "frontend_bearer_http", 4],
-  "api_keys_delete": ["DELETE", "/api-keys/delete/:apiKeyId", "b", "frontend_bearer_http", 1],
-  "api_keys_list": ["GET", "/api-keys/list", "b", "frontend_bearer_http", 2],
-  "api_keys_meta_capabilities": ["GET", "/api-keys/meta/capabilities", "b", "frontend_bearer_http", 2],
-  "api_keys_meta_scopes": ["GET", "/api-keys/meta/scopes", "b", "frontend_bearer_http", 2],
-  "api_keys_revoke": ["POST", "/api-keys/revoke/:apiKeyId", "b", "frontend_bearer_http", 5],
-  "api_keys_update": ["PUT", "/api-keys/update/:apiKeyId", "b", "frontend_bearer_http", 5],
   "app_info_get": ["GET", "/app-info", "b", "frontend_bearer_http", 2],
   "app_info_health": ["GET", "/app-info/health", "n", "public", 0],
   "app_info_manifest": ["GET", "/app-info/manifest", "n", "public", 0],
@@ -208,6 +201,7 @@ var ROUTE_INDEX = {
   "auth_login": ["POST", "/auth/login", "n", "public", 4],
   "auth_logout": ["POST", "/auth/logout", "n", "public", 4],
   "auth_me": ["GET", "/auth/me", "b", "frontend_bearer_http", 2],
+  "auth_me_profile_update": ["PATCH", "/auth/me/profile", "b", "frontend_bearer_http", 4],
   "auth_push_token_upsert": ["POST", "/auth/push-token", "b", "frontend_bearer_http", 4],
   "auth_refresh": ["POST", "/auth/refresh", "n", "public", 4],
   "auth_register": ["POST", "/auth/register", "n", "public", 4],
@@ -405,6 +399,7 @@ var ROUTE_INDEX = {
   "invoices_list_overdue": ["GET", "/invoices/overdue", "b", "frontend_permission_http", 2],
   "invoices_list_pending": ["GET", "/invoices/pending", "b", "frontend_permission_http", 2],
   "invoices_overdue_external": ["GET", "/invoices/external/overdue", "b", "unified_bearer", 2, ["invoices:read"]],
+  "invoices_payment_evidence_external": ["GET", "/invoices/external/:invoiceId/payment-evidence", "b", "unified_bearer", 1, ["invoices:read"]],
   "invoices_payment_reconciliation": ["GET", "/invoices/:invoiceId/payment-reconciliation", "b", "frontend_permission_http", 1],
   "invoices_pending_external": ["GET", "/invoices/external/pending", "b", "unified_bearer", 2, ["invoices:read"]],
   "invoices_repair_pdf": ["POST", "/invoices/:invoiceId/repair-pdf", "b", "frontend_bearer_http", 1],
@@ -726,7 +721,7 @@ function buildPath(operationId, params) {
 }
 
 // src/capabilities.ts
-var SDK_VERSION2 = "0.2.3" ;
+var SDK_VERSION2 = "0.3.0" ;
 var CLIENT_MANAGEMENT_OPS = [
   "oauth2_external_clients_list",
   "oauth2_external_clients_get",
@@ -1502,6 +1497,11 @@ var OrvelloClient = class _OrvelloClient {
   }
   // ── Invoices ─────────────────────────────────────────────────────────────
   invoices = {
+    /** Bank evidence, distinct from accounting status; this never initiates a bank call. */
+    getPaymentEvidence: (id, options) => this.request(`/invoices/external/${id}/payment-evidence`, {
+      method: "GET",
+      ...options
+    }),
     search: (query, options) => this.request("/invoices/external", {
       method: "GET",
       query,
@@ -1566,10 +1566,12 @@ var OrvelloClient = class _OrvelloClient {
       const baseUrl = await this.resolveBaseUrl();
       const targetUrl = pdfUrl.startsWith("http://") || pdfUrl.startsWith("https://") ? pdfUrl : `${baseUrl}${pdfUrl.startsWith("/") ? "" : "/"}${pdfUrl}`;
       const doFetch = this.doFetch;
-      const authHeader = await this.getAuthHeader();
       const headers = new Headers(options?.headers);
-      if (authHeader && !headers.has("Authorization")) {
-        headers.set("Authorization", authHeader);
+      if (new URL(targetUrl).origin === new URL(baseUrl).origin) {
+        const authHeader = await this.getAuthHeader();
+        if (authHeader && !headers.has("Authorization")) {
+          headers.set("Authorization", authHeader);
+        }
       }
       const resp = await doFetch(targetUrl, {
         method: "GET",