@podosoft/podokit-api-client 0.7.0 → 0.8.0

package/README.md

@@ -6,8 +6,10 @@ through this single entry point — never with a raw `fetch`.
 - `client.auth` — the [better-auth](https://better-auth.com) client (email/password,
   sessions, the `signupApproved` user field, and the admin plugin: `listUsers`,
   `updateUser`, `banUser`, `setRole`, `listUserSessions`, …).
-- `client.get/post/put/patch/del` — the app's REST endpoints, parsing the standard
-  error envelope and throwing `ApiError` on failure.
+- `client.get/post/put/patch/del` — the app's JSON REST endpoints, parsing the
+  standard error envelope and throwing `ApiError` on failure.
+- `client.postForm` — multipart uploads with the browser-managed boundary and the
+  same credentials and error handling.
 
 ```ts
 import { createApiClient } from "@podosoft/podokit-api-client";
@@ -20,6 +22,11 @@ await api.auth.signIn.email({ email, password });
 // Server-side (SSR): point at the internal backend and forward cookies
 const api = createApiClient({ baseUrl: process.env.BACKEND_INTERNAL_URL, fetch });
 const session = await api.auth.getSession();
+
+// Multipart upload
+const form = new FormData();
+form.set("file", imageFile);
+await api.postForm("/account/profile-image", form);
 ```
 
 ## Options
@@ -35,3 +42,5 @@ const session = await api.auth.getSession();
 Errors are thrown as `ApiError` (`code`, `message`, `statusCode`, `details`).
 `PUBLIC_SIGNUP_DISABLED` and `SIGNUP_APPROVAL_REQUIRED` are re-exported for
 provider-independent registration-policy handling.
+The profile-image policy, response type, and stable validation error codes are
+also re-exported so account UIs can display the exact limits enforced by the API.

package/dist/index.d.ts

@@ -20,7 +20,8 @@ export interface ApiClientOptions {
  */
 export type { Capabilities } from "@podosoft/podokit-contracts";
 /** Stable authentication policy error codes re-exported for browser clients. */
-export { PUBLIC_SIGNUP_DISABLED, SIGNUP_APPROVAL_REQUIRED, } from "@podosoft/podokit-contracts";
+export { PROFILE_IMAGE_DIMENSIONS_INVALID, PROFILE_IMAGE_NOT_FOUND, PROFILE_IMAGE_POLICY, PROFILE_IMAGE_REQUIRED, PROFILE_IMAGE_TOO_LARGE, PROFILE_IMAGE_TYPE_INVALID, PUBLIC_SIGNUP_DISABLED, SIGNUP_APPROVAL_REQUIRED, } from "@podosoft/podokit-contracts";
+export type { ProfileImageMimeType, ProfileImageResponse, } from "@podosoft/podokit-contracts";
 /** Error thrown when the API returns the standard error envelope or a non-2xx status. */
 export declare class ApiError extends Error {
     readonly code: string;
@@ -34,8 +35,10 @@ export declare class ApiError extends Error {
  *
  * - `client.auth` is the better-auth client (email/password, sessions, and the
  *   admin plugin: `client.auth.admin.listUsers()`, `banUser`, `setRole`, ...).
- * - `client.get/post/put/patch/del` call the app's REST endpoints and parse the
- *   standard error envelope, throwing {@link ApiError} on failure.
+ * - `client.get/post/put/patch/del` call the app's JSON REST endpoints and parse
+ *   the standard error envelope, throwing {@link ApiError} on failure.
+ * - `client.postForm` sends multipart `FormData` without overriding the browser's
+ *   boundary-aware content type.
  */
 export declare function createApiClient(options?: ApiClientOptions): {
     /** The better-auth client (auth + admin plugin), created on first access. */
@@ -2577,9 +2580,7 @@ export declare function createApiClient(options?: ApiClientOptions): {
                             email: string;
                             emailVerified: boolean;
                             name: string;
-                            image
-                            /** Error thrown when the API returns the standard error envelope or a non-2xx status. */
-                            ? /** Error thrown when the API returns the standard error envelope or a non-2xx status. */: string | null | undefined;
+                            image?: string | null | undefined;
                         };
                     }[]>;
                     setActiveSession: import("better-call").StrictEndpoint<"/multi-session/set-active", {
@@ -5266,6 +5267,7 @@ export declare function createApiClient(options?: ApiClientOptions): {
     put: <T>(path: string, body?: unknown) => Promise<T>;
     patch: <T>(path: string, body?: unknown) => Promise<T>;
     del: <T>(path: string) => Promise<T>;
+    postForm: <T>(path: string, body: FormData) => Promise<T>;
 };
 /** The client returned by {@link createApiClient}. */
 export type ApiClient = ReturnType<typeof createApiClient>;

package/dist/index.js

@@ -3,7 +3,7 @@ import { adminClient, twoFactorClient, magicLinkClient, emailOTPClient, username
 import { apiKeyClient } from "@better-auth/api-key/client";
 import { passkeyClient } from "@better-auth/passkey/client";
 /** Stable authentication policy error codes re-exported for browser clients. */
-export { PUBLIC_SIGNUP_DISABLED, SIGNUP_APPROVAL_REQUIRED, } from "@podosoft/podokit-contracts";
+export { PROFILE_IMAGE_DIMENSIONS_INVALID, PROFILE_IMAGE_NOT_FOUND, PROFILE_IMAGE_POLICY, PROFILE_IMAGE_REQUIRED, PROFILE_IMAGE_TOO_LARGE, PROFILE_IMAGE_TYPE_INVALID, PUBLIC_SIGNUP_DISABLED, SIGNUP_APPROVAL_REQUIRED, } from "@podosoft/podokit-contracts";
 /** Error thrown when the API returns the standard error envelope or a non-2xx status. */
 export class ApiError extends Error {
     code;
@@ -33,8 +33,10 @@ function toApiError(data, response) {
  *
  * - `client.auth` is the better-auth client (email/password, sessions, and the
  *   admin plugin: `client.auth.admin.listUsers()`, `banUser`, `setRole`, ...).
- * - `client.get/post/put/patch/del` call the app's REST endpoints and parse the
- *   standard error envelope, throwing {@link ApiError} on failure.
+ * - `client.get/post/put/patch/del` call the app's JSON REST endpoints and parse
+ *   the standard error envelope, throwing {@link ApiError} on failure.
+ * - `client.postForm` sends multipart `FormData` without overriding the browser's
+ *   boundary-aware content type.
  */
 export function createApiClient(options = {}) {
     const baseUrl = options.baseUrl ?? "";
@@ -91,6 +93,19 @@ export function createApiClient(options = {}) {
         }
         return data;
     }
+    async function formRequest(method, path, body) {
+        const response = await doFetch(`${baseUrl}${apiBasePath}${path}`, {
+            method,
+            credentials,
+            body,
+        });
+        const text = await response.text();
+        const data = text ? JSON.parse(text) : undefined;
+        if (!response.ok) {
+            throw toApiError(data, response);
+        }
+        return data;
+    }
     return {
         /** The better-auth client (auth + admin plugin), created on first access. */
         get auth() {
@@ -103,5 +118,6 @@ export function createApiClient(options = {}) {
         put: (path, body) => request("PUT", path, body),
         patch: (path, body) => request("PATCH", path, body),
         del: (path) => request("DELETE", path),
+        postForm: (path, body) => formRequest("POST", path, body),
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@podosoft/podokit-api-client",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Typed API client for PodoKit backends: better-auth (auth + admin) plus a standard error-envelope request layer.",
   "license": "Apache-2.0",
   "type": "module",
@@ -29,7 +29,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@podosoft/podokit-contracts": "^0.3.0",
+    "@podosoft/podokit-contracts": "^0.4.0",
     "better-auth": "^1.6.23",
     "@better-auth/api-key": "^1.6.23",
     "@better-auth/passkey": "^1.6.23"