@ossy/sdk 3.5.0 → 3.12.0

package/README.md

@@ -15,7 +15,7 @@ import { SDK } from '@ossy/sdk'
 
 const sdk = SDK.of({
   workspaceId: 'your-workspace-id',
-  apiUrl: 'https://api.ossy.se/api/v0', // optional, this is the default
+  apiUrl: '/api/v0', // optional, this is the default (same origin)
 })
 
 // List resources in a folder
@@ -30,7 +30,7 @@ const resource = await sdk.resources.get({ id: 'resource-id' })
 | Option | Description |
 |--------|-------------|
 | `workspaceId` | Your workspace identifier (required for most operations) |
-| `apiUrl` | API base URL (default: `https://api.ossy.se/api/v0`) |
+| `apiUrl` | API base URL (default: `/api/v0`, same origin). CLI / Node clients without a page origin should use `https://ossy.se/api/v0`. |
 | `authorization` | Bearer token for authenticated requests |
 
 ## API overview

package/build/public.index.d.ts

@@ -5,17 +5,22 @@ export { ActionAccess, ActionRoute } from '@ossy/types';
 type ActionRef = Action | string;
 /** Normalize dot aliases to slash ids (`@ossy.booking.actions.create` → `@ossy/booking/actions/create`). */
 declare function resolveActionId(action: ActionRef): string;
-/**
- * Resolve POST /actions URL from an SDK `apiUrl`.
- * Actions are served at the app server root, not under `/api/v0` or the `/@ossy` proxy prefix.
- */
 declare function resolveActionsUrl(apiUrl: string): string;
 /** Resolve GET /events SSE URL from an SDK `apiUrl`. */
 declare function resolveEventsUrl(apiUrl: string): string;
 
+/**
+ * Whether `sdk.invoke` can send `payload` through a manifest HTTP action route.
+ *
+ * GET/HEAD adapters only forward `route.query` keys. Extra payload fields (e.g.
+ * `{ email, code }` on verify-sign-in while the adapter only accepts `token`)
+ * must use `POST /actions` instead — otherwise the adapter drops them and auth
+ * fails silently from the caller's perspective (#751).
+ */
+declare function canUseHttpActionRoute(route: ActionRoute, payload?: Record<string, unknown>): boolean;
 /**
  * Resolve a manifest HTTP action route to a fetch URL.
- * Supports same-origin `/@ossy` proxy and absolute `/api/v0` bases.
+ * Supports same-origin `/api/v0` (and the legacy `/@ossy` proxy) plus absolute `/api/v0` bases.
  */
 declare function resolveHttpActionUrl(apiUrl: string, route: ActionRoute, payload?: Record<string, unknown>): string;
 
@@ -24,6 +29,7 @@ declare function isLocalStorageUploadUrl(url: string): boolean;
 declare class SDK {
     workspaceId?: string;
     authorization?: string;
+    /** Same-origin REST prefix. `POST /actions` is resolved separately (not under this path). */
     baseUrl: string;
     actionRoutes: Record<string, ActionRoute>;
     static of(config: SDKConfig): SDK;
@@ -195,7 +201,9 @@ declare const AuthSignIn: PlatformAction<{
     email: string;
 }>;
 declare const AuthVerifySignIn: PlatformAction<{
-    token: string;
+    token?: string;
+    email?: string;
+    code?: string;
 }>;
 declare const AuthVerifyInvitation: PlatformAction<{
     workspaceId: string;
@@ -210,5 +218,5 @@ declare const AuthSignOff: PlatformAction;
 /** @deprecated Use `PlatformAction`. */
 type RestAction<TPayload = Record<string, unknown>> = PlatformAction<TPayload>;
 
-export { ApiTokenCreate, ApiTokenGetAll, ApiTokenInvalidate, AuthGetAuthenticatedUser, AuthGetAuthenticatedUserHistory, AuthGetUser, AuthSignIn, AuthSignOff, AuthSignUp, AuthVerifyInvitation, AuthVerifySignIn, ResourceUpdateAccess, ResourcesCreate, ResourcesCreateDirectory, ResourcesGet, ResourcesList, ResourcesMove, ResourcesRemove, ResourcesRename, ResourcesSearch, ResourcesUpdateContent, ResourcesUpload, ResourcesUploadNamedVersion, SDK, UserCurrentGet, UserCurrentGetHistory, UserCurrentUpdate, WorkspacesAddMember, WorkspacesCreate, WorkspacesCreateApiToken, WorkspacesDisableService, WorkspacesEnableService, WorkspacesGet, WorkspacesGetApiTokens, WorkspacesGetCurrent, WorkspacesGetSchemas, WorkspacesGetUsers, WorkspacesImportSchemas, WorkspacesInviteUser, WorkspacesList, WorkspacesRemoveMember, isLocalStorageUploadUrl, resolveActionId, resolveActionsUrl, resolveEventsUrl, resolveHttpActionUrl };
+export { ApiTokenCreate, ApiTokenGetAll, ApiTokenInvalidate, AuthGetAuthenticatedUser, AuthGetAuthenticatedUserHistory, AuthGetUser, AuthSignIn, AuthSignOff, AuthSignUp, AuthVerifyInvitation, AuthVerifySignIn, ResourceUpdateAccess, ResourcesCreate, ResourcesCreateDirectory, ResourcesGet, ResourcesList, ResourcesMove, ResourcesRemove, ResourcesRename, ResourcesSearch, ResourcesUpdateContent, ResourcesUpload, ResourcesUploadNamedVersion, SDK, UserCurrentGet, UserCurrentGetHistory, UserCurrentUpdate, WorkspacesAddMember, WorkspacesCreate, WorkspacesCreateApiToken, WorkspacesDisableService, WorkspacesEnableService, WorkspacesGet, WorkspacesGetApiTokens, WorkspacesGetCurrent, WorkspacesGetSchemas, WorkspacesGetUsers, WorkspacesImportSchemas, WorkspacesInviteUser, WorkspacesList, WorkspacesRemoveMember, canUseHttpActionRoute, isLocalStorageUploadUrl, resolveActionId, resolveActionsUrl, resolveEventsUrl, resolveHttpActionUrl };
 export type { ActionRef, PlatformAction, PushMessage, RestAction };

package/build/public.index.js

@@ -1 +1 @@
-const s={VisualContentDescriptors:"@ossy/tasks/visual-content-descriptors",ResizeCommonWeb:"@ossy/tasks/resize-common-web"},e={Queued:"queued",InProgress:"in progress",Success:"success",Failed:"failed"},t={id:"@ossy/users/actions/get-api-tokens"},o={id:"@ossy/users/actions/create-api-token"},i={id:"@ossy/users/actions/invalidate-api-token"},n={id:"@ossy/workspaces/actions/list"},a={id:"@ossy/workspaces/actions/get"},r={id:"@ossy/workspaces/actions/get"},c={id:"@ossy/workspaces/actions/create"},u={id:"@ossy/workspaces/actions/import-schemas"},d={id:"@ossy/workspaces/actions/get-schemas"},h={id:"@ossy/workspaces/actions/create-api-token"},p={id:"@ossy/workspaces/actions/get-api-tokens"},l={id:"@ossy/workspaces/actions/invite-user"},y={id:"@ossy/workspaces/actions/enable-service"},k={id:"@ossy/workspaces/actions/disable-service"},g={id:"@ossy/workspaces/actions/get-users"},v={id:"@ossy/users/actions/join-workspace"},w={id:"@ossy/workspaces/actions/remove-member"},m={id:"@ossy/authentication/actions/get-current-user"},f={id:"@ossy/users/actions/get-current-user-history"},b={id:"@ossy/users/actions/update-details"},z={id:"@ossy/resources/actions/create",payload:{type:"directory"}},j={id:"@ossy/resources/actions/create"},$={id:"@ossy/resources/actions/create"},I={id:"@ossy/resources/actions/upload-named-version"},O={id:"@ossy/resources/actions/get"},R={id:"@ossy/resources/actions/list"},T={id:"@ossy/resources/actions/search"},U={id:"@ossy/resources/actions/update-access"},S={id:"@ossy/resources/actions/delete"},P={id:"@ossy/resources/actions/update-content"},C={id:"@ossy/resources/actions/update-location"},E={id:"@ossy/resources/actions/update-name"},A={id:"@ossy/authentication/actions/sign-up"},W={id:"@ossy/authentication/actions/request-sign-in"},G={id:"@ossy/authentication/actions/verify-sign-in"},H={id:"@ossy/workspaces/actions/accept-invitation"},N={id:"@ossy/authentication/actions/get-current-user"},q={id:"@ossy/users/actions/get-current-user-history"},D={id:"@ossy/authentication/actions/get-current-user"},J={id:"@ossy/authentication/actions/sign-out"};function L(s){const e="string"==typeof s?s:s.id;return e.includes(".")?e.replace(/\./g,"/"):e}function V(s){const e=(null!=s?s:"").replace(/\/$/,"");if(!e||"/@ossy"===e||e.endsWith("/@ossy"))return"/actions";const t=e.replace(/\/api\/v0\/?$/,"").replace(/\/$/,"");return t?`${t}/actions`:"/actions"}function x(s){const e=(null!=s?s:"").replace(/\/$/,"");if(!e||"/@ossy"===e||e.endsWith("/@ossy"))return"/events";const t=e.replace(/\/api\/v0\/?$/,"").replace(/\/$/,"");return t?`${t}/events`:"/events"}function F(s,e,t){var o,i;const n=e.path.startsWith("/")?e.path:`/${e.path}`,a=(null!=s?s:"").replace(/\/$/,"");let r;r=!a||"/@ossy"===a||a.endsWith("/@ossy")?`/@ossy${n.replace(/^\/api\/v0/,"")}`:a.includes("/api/v0")?`${a.replace(/\/api\/v0\/?$/,"")}${n}`:`${a}${n}`;const c=null!==(o=e.method)&&void 0!==o?o:"GET";if("GET"===c||"HEAD"===c){const s=new URLSearchParams;for(const o of null!==(i=e.query)&&void 0!==i?i:[]){const e=null==t?void 0:t[o];null!=e&&""!==e&&s.set(o,String(e))}const o=s.toString();o&&(r+=`${r.includes("?")?"&":"?"}${o}`)}return r}function M(s){if(!s||"string"!=typeof s)return!1;try{const e=new URL(s,"http://localhost");return"/local-storage"===e.pathname||e.pathname.endsWith("/local-storage")}catch(s){return!1}}class Q{static of(s){return new Q(s)}constructor(s){this.baseUrl="https://api.ossy.se/api/v0",this.actionRoutes={},this.invoke=(s,e)=>this.invokePlatformAction(L(s),e),this.invokePlatformAction=(s,e)=>{const t=this.actionRoutes[s];if(t)return this.invokeHttpRoute(t,e);const o={method:"POST",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:s,payload:null!=e?e:{}})};this.workspaceId&&(o.headers=Object.assign(Object.assign({},o.headers),{workspaceId:this.workspaceId})),this.authorization&&(o.headers=Object.assign(Object.assign({},o.headers),{Authorization:this.authorization}));const i=V(this.baseUrl);return fetch(i,o).then(this.handleResponse)},this.invokeHttpRoute=(s,e)=>{var t;const o=null!==(t=s.method)&&void 0!==t?t:"GET",i=F(this.baseUrl,s,e),n={method:o,credentials:"include",headers:{}};return this.workspaceId&&(n.headers=Object.assign(Object.assign({},n.headers),{workspaceId:this.workspaceId})),this.authorization&&(n.headers=Object.assign(Object.assign({},n.headers),{Authorization:this.authorization})),"GET"!==o&&"HEAD"!==o&&(n.headers=Object.assign(Object.assign({},n.headers),{"Content-Type":"application/json"}),n.body=JSON.stringify(null!=e?e:{})),fetch(i,n).then(this.handleResponse)},this.handleResponse=s=>{const e=s.headers.get("Content-Type")||"",t=s.status;return 400===t?s.json().then(s=>Promise.reject(s.error)):[200,204].includes(t)?e.includes("application/json")?s.json():s:Promise.reject(s)},this.subscribePush=s=>{if("undefined"==typeof EventSource)return()=>{};const e=x(this.baseUrl),t=new EventSource(e,{withCredentials:!0});return t.onmessage=e=>{try{const t=JSON.parse(e.data);s.onMessage(t)}catch(s){}},t.onerror=e=>{var t;null===(t=s.onError)||void 0===t||t.call(s,e)},()=>{t.close()}},this.updateConfig(s)}updateConfig(s){var e;this.baseUrl=s.apiUrl||this.baseUrl,this.workspaceId=s.workspaceId||this.workspaceId,this.authorization=s.authorization||this.authorization,this.actionRoutes=null!==(e=s.actionRoutes)&&void 0!==e?e:this.actionRoutes}get resources(){return{upload:({location:s="/",file:e})=>{const t={type:e.type,location:s,name:e.name,size:e.size};return this.invoke($,t).then(s=>{const t=s.content.uploadUrl,o={};e.type&&(o["Content-Type"]=e.type);const i={method:"PUT",headers:o,body:e};return M(t)&&(i.credentials="include",this.workspaceId&&(o.workspaceId=this.workspaceId),this.authorization&&(o.Authorization=this.authorization)),fetch(t,i).then(()=>s)})},list:s=>{const e=new URLSearchParams(Object.assign({},s)).toString();return this.invoke(R,{search:e})},uploadNamedVersion:({id:s,name:e,file:t})=>{const o={id:s,namedVersion:e,name:e,size:t.size,type:t.type};return this.invoke(I,o).then(s=>{const e=s.content.uploadUrl,o={};t.type&&(o["Content-Type"]=t.type);const i={method:"PUT",headers:o,body:t};return M(e)&&(i.credentials="include",this.workspaceId&&(o.workspaceId=this.workspaceId),this.authorization&&(o.Authorization=this.authorization)),fetch(e,i).then(()=>s)})}}}}export{o as ApiTokenCreate,t as ApiTokenGetAll,i as ApiTokenInvalidate,N as AuthGetAuthenticatedUser,q as AuthGetAuthenticatedUserHistory,D as AuthGetUser,W as AuthSignIn,J as AuthSignOff,A as AuthSignUp,H as AuthVerifyInvitation,G as AuthVerifySignIn,U as ResourceUpdateAccess,j as ResourcesCreate,z as ResourcesCreateDirectory,O as ResourcesGet,R as ResourcesList,C as ResourcesMove,S as ResourcesRemove,E as ResourcesRename,T as ResourcesSearch,P as ResourcesUpdateContent,$ as ResourcesUpload,I as ResourcesUploadNamedVersion,Q as SDK,e as TaskStatus,s as Tasks,m as UserCurrentGet,f as UserCurrentGetHistory,b as UserCurrentUpdate,v as WorkspacesAddMember,c as WorkspacesCreate,h as WorkspacesCreateApiToken,k as WorkspacesDisableService,y as WorkspacesEnableService,r as WorkspacesGet,p as WorkspacesGetApiTokens,a as WorkspacesGetCurrent,d as WorkspacesGetSchemas,g as WorkspacesGetUsers,u as WorkspacesImportSchemas,l as WorkspacesInviteUser,n as WorkspacesList,w as WorkspacesRemoveMember,M as isLocalStorageUploadUrl,L as resolveActionId,V as resolveActionsUrl,x as resolveEventsUrl,F as resolveHttpActionUrl};
+const s={VisualContentDescriptors:"@ossy/tasks/visual-content-descriptors",ResizeCommonWeb:"@ossy/tasks/resize-common-web"},e={Queued:"queued",InProgress:"in progress",Success:"success",Failed:"failed"},t={id:"@ossy/users/actions/get-api-tokens"},o={id:"@ossy/users/actions/create-api-token"},i={id:"@ossy/users/actions/invalidate-api-token"},n={id:"@ossy/workspaces/actions/list"},a={id:"@ossy/workspaces/actions/get"},r={id:"@ossy/workspaces/actions/get"},c={id:"@ossy/workspaces/actions/create"},u={id:"@ossy/workspaces/actions/import-schemas"},d={id:"@ossy/workspaces/actions/get-schemas"},h={id:"@ossy/workspaces/actions/create-api-token"},p={id:"@ossy/workspaces/actions/get-api-tokens"},l={id:"@ossy/workspaces/actions/invite-user"},y={id:"@ossy/workspaces/actions/enable-service"},k={id:"@ossy/workspaces/actions/disable-service"},g={id:"@ossy/workspaces/actions/get-users"},v={id:"@ossy/users/actions/join-workspace"},w={id:"@ossy/workspaces/actions/remove-member"},f={id:"@ossy/authentication/actions/get-current-user"},m={id:"@ossy/users/actions/get-current-user-history"},b={id:"@ossy/users/actions/update-details"},z={id:"@ossy/resources/actions/create",payload:{type:"directory"}},j={id:"@ossy/resources/actions/create"},$={id:"@ossy/resources/actions/create"},I={id:"@ossy/resources/actions/upload-named-version"},O={id:"@ossy/resources/actions/get"},T={id:"@ossy/resources/actions/list"},R={id:"@ossy/resources/actions/search"},S={id:"@ossy/resources/actions/update-access"},U={id:"@ossy/resources/actions/delete"},E={id:"@ossy/resources/actions/update-content"},P={id:"@ossy/resources/actions/update-location"},C={id:"@ossy/resources/actions/update-name"},A={id:"@ossy/authentication/actions/sign-up"},G={id:"@ossy/authentication/actions/request-sign-in"},H={id:"@ossy/authentication/actions/verify-sign-in"},W={id:"@ossy/workspaces/actions/accept-invitation"},q={id:"@ossy/authentication/actions/get-current-user"},D={id:"@ossy/users/actions/get-current-user-history"},N={id:"@ossy/authentication/actions/get-current-user"},J={id:"@ossy/authentication/actions/sign-out"};function L(s){const e="string"==typeof s?s:s.id;return e.includes(".")?e.replace(/\./g,"/"):e}function V(s){return!s||"/@ossy"===s||s.endsWith("/@ossy")||"/api/v0"===s}function x(s){const e=(null!=s?s:"").replace(/\/$/,"");if(V(e))return"/actions";const t=e.replace(/\/api\/v0\/?$/,"").replace(/\/$/,"");return t?`${t}/actions`:"/actions"}function F(s){const e=(null!=s?s:"").replace(/\/$/,"");if(V(e))return"/events";const t=e.replace(/\/api\/v0\/?$/,"").replace(/\/$/,"");return t?`${t}/events`:"/events"}function M(s,e){var t,o;const i=null!==(t=s.method)&&void 0!==t?t:"GET";if("GET"!==i&&"HEAD"!==i)return!0;const n=new Set(null!==(o=s.query)&&void 0!==o?o:[]);return Object.entries(null!=e?e:{}).every(([s,e])=>null==e||""===e||n.has(s))}function Q(s,e,t){var o,i;const n=e.path.startsWith("/")?e.path:`/${e.path}`,a=(null!=s?s:"").replace(/\/$/,"");let r;r=!a||"/@ossy"===a||a.endsWith("/@ossy")?`/@ossy${n.replace(/^\/api\/v0/,"")}`:a.includes("/api/v0")?`${a.replace(/\/api\/v0\/?$/,"")}${n}`:`${a}${n}`;const c=null!==(o=e.method)&&void 0!==o?o:"GET";if("GET"===c||"HEAD"===c){const s=new URLSearchParams;for(const o of null!==(i=e.query)&&void 0!==i?i:[]){const e=null==t?void 0:t[o];null!=e&&""!==e&&s.set(o,String(e))}const o=s.toString();o&&(r+=`${r.includes("?")?"&":"?"}${o}`)}return r}function B(s){if(!s||"string"!=typeof s)return!1;try{const e=new URL(s,"http://localhost");return"/local-storage"===e.pathname||e.pathname.endsWith("/local-storage")}catch(s){return!1}}class K{static of(s){return new K(s)}constructor(s){this.baseUrl="/api/v0",this.actionRoutes={},this.invoke=(s,e)=>this.invokePlatformAction(L(s),e),this.invokePlatformAction=(s,e)=>{const t=this.actionRoutes[s];if(t&&M(t,e))return this.invokeHttpRoute(t,e);const o={method:"POST",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:s,payload:null!=e?e:{}})};this.workspaceId&&(o.headers=Object.assign(Object.assign({},o.headers),{workspaceId:this.workspaceId})),this.authorization&&(o.headers=Object.assign(Object.assign({},o.headers),{Authorization:this.authorization}));const i=x(this.baseUrl);return fetch(i,o).then(this.handleResponse)},this.invokeHttpRoute=(s,e)=>{var t;const o=null!==(t=s.method)&&void 0!==t?t:"GET",i=Q(this.baseUrl,s,e),n={method:o,credentials:"include",headers:{}};return this.workspaceId&&(n.headers=Object.assign(Object.assign({},n.headers),{workspaceId:this.workspaceId})),this.authorization&&(n.headers=Object.assign(Object.assign({},n.headers),{Authorization:this.authorization})),"GET"!==o&&"HEAD"!==o&&(n.headers=Object.assign(Object.assign({},n.headers),{"Content-Type":"application/json"}),n.body=JSON.stringify(null!=e?e:{})),fetch(i,n).then(this.handleResponse)},this.handleResponse=s=>{const e=s.headers.get("Content-Type")||"",t=s.status;return 400===t?s.json().then(s=>Promise.reject(s.error)):[200,204].includes(t)?e.includes("application/json")?s.json():s:Promise.reject(s)},this.subscribePush=s=>{if("undefined"==typeof EventSource)return()=>{};const e=F(this.baseUrl),t=new EventSource(e,{withCredentials:!0});return t.onmessage=e=>{try{const t=JSON.parse(e.data);s.onMessage(t)}catch(s){}},t.onerror=e=>{var t;null===(t=s.onError)||void 0===t||t.call(s,e)},()=>{t.close()}},this.updateConfig(s)}updateConfig(s){var e;this.baseUrl=s.apiUrl||this.baseUrl,this.workspaceId=s.workspaceId||this.workspaceId,this.authorization=s.authorization||this.authorization,this.actionRoutes=null!==(e=s.actionRoutes)&&void 0!==e?e:this.actionRoutes}get resources(){return{upload:({location:s="/",file:e})=>{const t={type:e.type,location:s,name:e.name,size:e.size};return this.invoke($,t).then(s=>{const t=s.content.uploadUrl,o={};e.type&&(o["Content-Type"]=e.type);const i={method:"PUT",headers:o,body:e};return B(t)&&(i.credentials="include",this.workspaceId&&(o.workspaceId=this.workspaceId),this.authorization&&(o.Authorization=this.authorization)),fetch(t,i).then(()=>s)})},list:s=>{const e=new URLSearchParams(Object.assign({},s)).toString();return this.invoke(T,{search:e})},uploadNamedVersion:({id:s,name:e,file:t})=>{const o={id:s,namedVersion:e,name:e,size:t.size,type:t.type};return this.invoke(I,o).then(s=>{const e=s.content.uploadUrl,o={};t.type&&(o["Content-Type"]=t.type);const i={method:"PUT",headers:o,body:t};return B(e)&&(i.credentials="include",this.workspaceId&&(o.workspaceId=this.workspaceId),this.authorization&&(o.Authorization=this.authorization)),fetch(e,i).then(()=>s)})}}}}export{o as ApiTokenCreate,t as ApiTokenGetAll,i as ApiTokenInvalidate,q as AuthGetAuthenticatedUser,D as AuthGetAuthenticatedUserHistory,N as AuthGetUser,G as AuthSignIn,J as AuthSignOff,A as AuthSignUp,W as AuthVerifyInvitation,H as AuthVerifySignIn,S as ResourceUpdateAccess,j as ResourcesCreate,z as ResourcesCreateDirectory,O as ResourcesGet,T as ResourcesList,P as ResourcesMove,U as ResourcesRemove,C as ResourcesRename,R as ResourcesSearch,E as ResourcesUpdateContent,$ as ResourcesUpload,I as ResourcesUploadNamedVersion,K as SDK,e as TaskStatus,s as Tasks,f as UserCurrentGet,m as UserCurrentGetHistory,b as UserCurrentUpdate,v as WorkspacesAddMember,c as WorkspacesCreate,h as WorkspacesCreateApiToken,k as WorkspacesDisableService,y as WorkspacesEnableService,r as WorkspacesGet,p as WorkspacesGetApiTokens,a as WorkspacesGetCurrent,d as WorkspacesGetSchemas,g as WorkspacesGetUsers,u as WorkspacesImportSchemas,l as WorkspacesInviteUser,n as WorkspacesList,w as WorkspacesRemoveMember,M as canUseHttpActionRoute,B as isLocalStorageUploadUrl,L as resolveActionId,x as resolveActionsUrl,F as resolveEventsUrl,Q as resolveHttpActionUrl};

package/build/types/Actions.d.ts

@@ -116,7 +116,9 @@ export declare const AuthSignIn: PlatformAction<{
     email: string;
 }>;
 export declare const AuthVerifySignIn: PlatformAction<{
-    token: string;
+    token?: string;
+    email?: string;
+    code?: string;
 }>;
 export declare const AuthVerifyInvitation: PlatformAction<{
     workspaceId: string;

package/build/types/platform-action.d.ts

@@ -3,10 +3,6 @@ export type ActionRef = Action | string;
 export declare function isActionRef(value: unknown): value is ActionRef;
 /** Normalize dot aliases to slash ids (`@ossy.booking.actions.create` → `@ossy/booking/actions/create`). */
 export declare function resolveActionId(action: ActionRef): string;
-/**
- * Resolve POST /actions URL from an SDK `apiUrl`.
- * Actions are served at the app server root, not under `/api/v0` or the `/@ossy` proxy prefix.
- */
 export declare function resolveActionsUrl(apiUrl: string): string;
 /** Resolve GET /events SSE URL from an SDK `apiUrl`. */
 export declare function resolveEventsUrl(apiUrl: string): string;

package/build/types/platform-action.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/build/types/resolve-http-action-url.d.ts

@@ -1,6 +1,15 @@
 import type { ActionRoute } from '@ossy/types';
+/**
+ * Whether `sdk.invoke` can send `payload` through a manifest HTTP action route.
+ *
+ * GET/HEAD adapters only forward `route.query` keys. Extra payload fields (e.g.
+ * `{ email, code }` on verify-sign-in while the adapter only accepts `token`)
+ * must use `POST /actions` instead — otherwise the adapter drops them and auth
+ * fails silently from the caller's perspective (#751).
+ */
+export declare function canUseHttpActionRoute(route: ActionRoute, payload?: Record<string, unknown>): boolean;
 /**
  * Resolve a manifest HTTP action route to a fetch URL.
- * Supports same-origin `/@ossy` proxy and absolute `/api/v0` bases.
+ * Supports same-origin `/api/v0` (and the legacy `/@ossy` proxy) plus absolute `/api/v0` bases.
  */
 export declare function resolveHttpActionUrl(apiUrl: string, route: ActionRoute, payload?: Record<string, unknown>): string;

package/build/types/resolve-http-action-url.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/build/types/sdk.d.ts

@@ -1,14 +1,15 @@
 import { SDKConfig } from './config';
 import { resolveActionId, resolveActionsUrl, resolveEventsUrl, type ActionRef } from './platform-action';
-import { resolveHttpActionUrl } from './resolve-http-action-url';
+import { canUseHttpActionRoute, resolveHttpActionUrl } from './resolve-http-action-url';
 import type { ActionRoute } from '@ossy/types';
-export { resolveActionId, resolveActionsUrl, resolveEventsUrl, resolveHttpActionUrl, type ActionRef };
+export { resolveActionId, resolveActionsUrl, resolveEventsUrl, canUseHttpActionRoute, resolveHttpActionUrl, type ActionRef, };
 export type { ActionRoute };
 /** Detect filesystem-backend upload URLs; S3 URLs must not get session headers. */
 export declare function isLocalStorageUploadUrl(url: string): boolean;
 export declare class SDK {
     workspaceId?: string;
     authorization?: string;
+    /** Same-origin REST prefix. `POST /actions` is resolved separately (not under this path). */
     baseUrl: string;
     actionRoutes: Record<string, ActionRoute>;
     static of(config: SDKConfig): SDK;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ossy/sdk",
   "description": "Software Development Kit for interacting with our services",
-  "version": "3.5.0",
+  "version": "3.12.0",
   "url": "git://github.com/ossy-se/packages/sdk",
   "source": "src/public.index.ts",
   "main": "build/public.index.js",
@@ -26,7 +26,7 @@
   "scripts": {
     "start": "",
     "build": "rollup -c rollup.config.js",
-    "test": ""
+    "test": "node --test --experimental-strip-types src/*.spec.js"
   },
   "publishConfig": {
     "access": "public",
@@ -36,5 +36,5 @@
     "/build",
     "README.md"
   ],
-  "gitHead": "23167600f991596f122765a53f2b9df08314e115"
+  "gitHead": "c2650803219ad1831559b512848358d9550ffad2"
 }