@proteos/sdk 0.20.5 → 0.21.0

package/dist/{types-BNsjfU8N.d.ts → types-PzImL4QI.d.ts}

@@ -71,6 +71,12 @@ declare function resolveOptions(options: ClientOptions): ResolvedClientOptions;
 interface RequestOptions {
     /** Request timeout in milliseconds (overrides client default) */
     timeout?: number;
+    /**
+     * Skip attaching the Authorization header. Only meaningful for the public,
+     * unauthenticated endpoints (`/meta/v1/public/*`, `/functions/v1/public/*`)
+     * — every other endpoint 401s without a bearer.
+     */
+    skipAuth?: boolean;
     /** Additional headers for this request */
     headers?: Record<string, string>;
     /** AbortSignal for request cancellation */
@@ -1070,6 +1076,17 @@ interface PageService {
      * @throws {ProteosError} If page not found (404)
      */
     get(slug: string): Promise<Page>;
+    /**
+     * Gets a PUBLIC page (type='public') without authentication — no
+     * Authorization header is sent. Returns the page plus the props_schema of
+     * every component its layout references. Non-public pages 404
+     * (indistinguishable from absent).
+     *
+     * @param orgId - Org id (public routes carry the org in the path — there is
+     *   no token to scope from)
+     * @param slug - Page slug
+     */
+    getPublic(orgId: string, slug: string): Promise<PublicPageResponse>;
     /**
      * Creates a new page.
      *
@@ -2404,6 +2421,13 @@ interface Component extends AuditFields {
     source_file_id: string;
     /** The component's JSON Schema, driving the page-designer props editor + runtime validation. `null` until set. */
     props_schema: Record<string, unknown> | null;
+    /**
+     * Opts the compiled bundle into UNAUTHENTICATED serving. Public
+     * (type='public') pages may only reference public components (enforced at
+     * page save), and a public component's only platform reach at runtime is
+     * `functions.actions.invokePublic`.
+     */
+    is_public: boolean;
 }
 declare const ComponentSchema: z.ZodObject<{
     created_at: z.ZodString;
@@ -2436,6 +2460,7 @@ declare const ComponentSchema: z.ZodObject<{
     bundle_file_id: z.ZodString;
     source_file_id: z.ZodString;
     props_schema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    is_public: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     name: string;
     created_at: string;
@@ -2454,6 +2479,7 @@ declare const ComponentSchema: z.ZodObject<{
     bundle_file_id: string;
     source_file_id: string;
     props_schema: Record<string, unknown> | null;
+    is_public: boolean;
 }, {
     name: string;
     created_at: string;
@@ -2472,6 +2498,7 @@ declare const ComponentSchema: z.ZodObject<{
     bundle_file_id: string;
     source_file_id: string;
     props_schema: Record<string, unknown> | null;
+    is_public?: boolean | undefined;
 }>;
 /**
  * Options for listing components.
@@ -2492,6 +2519,8 @@ interface CreateComponentRequest {
     bundle_file_id?: string;
     source_file_id?: string;
     props_schema?: Record<string, unknown>;
+    /** See {@link Component.is_public}. Manifest-driven: omitting it sets false. */
+    is_public?: boolean;
 }
 /**
  * Request to update a component.
@@ -2502,6 +2531,7 @@ interface UpdateComponentRequest {
     bundle_file_id?: string;
     source_file_id?: string;
     props_schema?: Record<string, unknown>;
+    is_public?: boolean;
 }
 /**
  * List column definition.
@@ -2865,12 +2895,19 @@ declare const PageActionSchema: z.ZodObject<{
     action: string;
 }>;
 /**
- * Page type. `record` pages render against a single record of `entity_slug`;
- * `platform` pages are standalone (no record context — e.g. a dashboard
- * launched from a menu item). `external` is reserved for a future chromeless
- * variant and is not yet accepted by the API.
+ * Page type — encodes what the page binds to and how it is served (chrome +
+ * auth posture both follow from it):
+ *
+ * - `record`:   rendered against a single record of `entity_slug`; app chrome;
+ *   authenticated.
+ * - `platform`: standalone, no record context (e.g. a dashboard launched from
+ *   a menu item); app chrome; authenticated.
+ * - `kiosk`:    standalone, NO app chrome (bare page at `/k/…`); authenticated.
+ * - `public`:   standalone, NO app chrome (bare page at `/p/…`);
+ *   UNAUTHENTICATED — the layout is world-readable and its components may only
+ *   call `is_public` global actions.
  */
-type PageType = 'record' | 'platform';
+type PageType = 'record' | 'platform' | 'kiosk' | 'public';
 /**
  * Page configuration. A `record` page is the detail-page shape for a single
  * entity; a `platform` page is standalone (no entity, no record).
@@ -2916,7 +2953,7 @@ declare const PageSchema: z.ZodObject<{
     slug: z.ZodString;
     name: z.ZodString;
     module_slug: z.ZodString;
-    type: z.ZodEnum<["record", "platform"]>;
+    type: z.ZodEnum<["record", "platform", "kiosk", "public"]>;
     entity_slug: z.ZodOptional<z.ZodString>;
     actions: z.ZodArray<z.ZodObject<{
         label: z.ZodString;
@@ -2965,7 +3002,7 @@ declare const PageSchema: z.ZodObject<{
         } | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
-    type: "platform" | "record";
+    type: "platform" | "record" | "kiosk" | "public";
     name: string;
     created_at: string;
     updated_at: string;
@@ -2995,7 +3032,7 @@ declare const PageSchema: z.ZodObject<{
     };
     entity_slug?: string | undefined;
 }, {
-    type: "platform" | "record";
+    type: "platform" | "record" | "kiosk" | "public";
     name: string;
     created_at: string;
     updated_at: string;
@@ -3025,6 +3062,24 @@ declare const PageSchema: z.ZodObject<{
     };
     entity_slug?: string | undefined;
 }>;
+/**
+ * Component metadata slice riding on the public page payload — just the slug
+ * and props schema (deliberately not the full Component: this is served
+ * unauthenticated).
+ */
+interface PublicPageComponent {
+    slug: string;
+    props_schema?: Record<string, unknown>;
+}
+/**
+ * Payload of the unauthenticated `GET /meta/v1/public/orgs/{orgId}/pages/{slug}`:
+ * the page plus the props_schema of every component its layout references, so
+ * a public renderer needs no follow-up authenticated calls.
+ */
+interface PublicPageResponse {
+    page: Page;
+    components: PublicPageComponent[];
+}
 /**
  * Options for listing pages.
  */
@@ -3296,4 +3351,4 @@ interface UpdateAppRequest {
     icon_slug?: string;
 }
 
-export { type ListFn as $, type AuditFields as A, type CurrencyValue as B, type ClientOptions as C, DEFAULT_OPTIONS as D, DEFAULT_PAGE_SIZE as E, type FileRef as F, DONE as G, type DeployModuleRequest as H, type Done as I, type Entity as J, EntitySchema as K, type ListOptions as L, type EntityService as M, type EntityWithSchema as N, EntityWithSchemaSchema as O, PageIterator as P, type FileAttributeMeta as Q, FileRefSchema as R, type FilterElement as S, FilterElementSchema as T, type UserRef as U, type FilterGroup as V, FilterGroupSchema as W, type List as X, type ListAppsOptions as Y, type ListComponentsOptions as Z, type ListEntitiesOptions as _, type Attribute as a, currencySymbol as a$, type ListListViewsOptions as a0, type ListListsOptions as a1, type ListMenuConfigurationsOptions as a2, type ListModulesOptions as a3, type ListPagesOptions as a4, ListSchema as a5, type ListService as a6, type ListVariablesOptions as a7, type ListView as a8, ListViewSchema as a9, RelationAttributeMetaSchema as aA, type RequestOptions as aB, type ResolvedClientOptions as aC, type ResponseMeta as aD, ResponseMetaSchema as aE, type SortConfig as aF, SortConfigSchema as aG, type SortDirection as aH, type Timestamps as aI, type TokenProvider as aJ, type UpdateAppRequest as aK, type UpdateComponentRequest as aL, type UpdateEntityRequest as aM, type UpdateListRequest as aN, type UpdateListViewRequest as aO, type UpdateMenuConfigurationRequest as aP, type UpdatePageRequest as aQ, type UpdateVariableRequest as aR, UserRefSchema as aS, type UserType as aT, type Variable as aU, VariableSchema as aV, type VariableService as aW, allCurrencyCodes as aX, createIterator as aY, createListResultSchema as aZ, currencyLabel as a_, type ListViewService as aa, type LogicalOperator as ab, type MenuConfiguration as ac, MenuConfigurationSchema as ad, type MenuConfigurationService as ae, type MenuItem as af, MenuItemSchema as ag, MenuItemType as ah, MetaClient as ai, type MetaListOptions as aj, type Module as ak, ModuleSchema as al, type ModuleService as am, type ModuleStatus as an, type OnDeleteAction as ao, OnDeleteActionSchema as ap, PLATFORM_ATTRIBUTE_NAMES as aq, PLATFORM_USER_ID as ar, type Page as as, type PageAction as at, PageActionSchema as au, type PageLayout as av, PageLayoutSchema as aw, PageSchema as ax, type PageService as ay, type RelationAttributeMeta as az, type ListResult as b, currencySymbolSide as b0, formatAmount as b1, formatMoney as b2, isPlatformAttributeName as b3, localeNumberSeparators as b4, parseAmount as b5, parseCurrencyMeta as b6, parseFileMeta as b7, parseRelationMeta as b8, platformAttributes as b9, type PageLayoutSidePanel as bA, PageLayoutSidePanelSchema as bB, type RelatedListElement as bC, type ResponsiveSizing as bD, type RowElement as bE, type SectionElement as bF, type SizeValue as bG, SizeValueSchema as bH, type SizingProps as bI, type StringAttributeMeta as bJ, type StringFormat as bK, type TabsElement as bL, type TextElement as bM, type TextVariant as bN, type UserAttributeMeta as bO, UserAttributeMetaSchema as bP, isBuiltInControl as bQ, lookupCompatibleControls as bR, lookupControls as bS, lookupPrimaryControl as bT, parseUserMeta as bU, resolveOptions as ba, type ArrayAttributeMeta as bb, type AttributeForLookup as bc, type AttributeMeta as bd, BUILT_IN_CONTROLS as be, type BuiltInControlSlug as bf, type ColumnElement as bg, type CommonProps as bh, type ComponentElement as bi, type ControlBucket as bj, type DatetimeAttributeMeta as bk, type DatetimeFormat as bl, type DividerElement as bm, type EnumAttributeMeta as bn, type EnumValue as bo, type FieldElement as bp, FileAttributeMetaSchema as bq, type LayoutAlign as br, type LayoutElement as bs, LayoutElementSchema as bt, LayoutElementType as bu, type LayoutGap as bv, type LayoutJustify as bw, type LayoutTab as bx, type NumberAttributeMeta as by, type ObjectAttributeMeta as bz, ProteosClient as c, type App as d, AppSchema as e, type AppService as f, AttributeSchema as g, type AttributeType as h, AuditFieldsSchema as i, type Column as j, ColumnSchema as k, type ComparisonOperator as l, type Component as m, ComponentSchema as n, type ComponentService as o, type CreateAppRequest as p, type CreateComponentRequest as q, type CreateEntityRequest as r, type CreateListRequest as s, type CreateListViewRequest as t, type CreateMenuConfigurationRequest as u, type CreatePageRequest as v, type CreateVariableRequest as w, type CurrencyAttributeMeta as x, CurrencyAttributeMetaSchema as y, type CurrencySymbolSide as z };
+export { type ListFn as $, type AuditFields as A, type CurrencyValue as B, type ClientOptions as C, DEFAULT_OPTIONS as D, DEFAULT_PAGE_SIZE as E, type FileRef as F, DONE as G, type DeployModuleRequest as H, type Done as I, type Entity as J, EntitySchema as K, type ListOptions as L, type EntityService as M, type EntityWithSchema as N, EntityWithSchemaSchema as O, PageIterator as P, type FileAttributeMeta as Q, FileRefSchema as R, type FilterElement as S, FilterElementSchema as T, type UserRef as U, type FilterGroup as V, FilterGroupSchema as W, type List as X, type ListAppsOptions as Y, type ListComponentsOptions as Z, type ListEntitiesOptions as _, type Attribute as a, createIterator as a$, type ListListViewsOptions as a0, type ListListsOptions as a1, type ListMenuConfigurationsOptions as a2, type ListModulesOptions as a3, type ListPagesOptions as a4, ListSchema as a5, type ListService as a6, type ListVariablesOptions as a7, type ListView as a8, ListViewSchema as a9, type PublicPageComponent as aA, type PublicPageResponse as aB, type RelationAttributeMeta as aC, RelationAttributeMetaSchema as aD, type RequestOptions as aE, type ResolvedClientOptions as aF, type ResponseMeta as aG, ResponseMetaSchema as aH, type SortConfig as aI, SortConfigSchema as aJ, type SortDirection as aK, type Timestamps as aL, type TokenProvider as aM, type UpdateAppRequest as aN, type UpdateComponentRequest as aO, type UpdateEntityRequest as aP, type UpdateListRequest as aQ, type UpdateListViewRequest as aR, type UpdateMenuConfigurationRequest as aS, type UpdatePageRequest as aT, type UpdateVariableRequest as aU, UserRefSchema as aV, type UserType as aW, type Variable as aX, VariableSchema as aY, type VariableService as aZ, allCurrencyCodes as a_, type ListViewService as aa, type LogicalOperator as ab, type MenuConfiguration as ac, MenuConfigurationSchema as ad, type MenuConfigurationService as ae, type MenuItem as af, MenuItemSchema as ag, MenuItemType as ah, MetaClient as ai, type MetaListOptions as aj, type Module as ak, ModuleSchema as al, type ModuleService as am, type ModuleStatus as an, type OnDeleteAction as ao, OnDeleteActionSchema as ap, PLATFORM_ATTRIBUTE_NAMES as aq, PLATFORM_USER_ID as ar, type Page as as, type PageAction as at, PageActionSchema as au, type PageLayout as av, PageLayoutSchema as aw, PageSchema as ax, type PageService as ay, type PageType as az, type ListResult as b, createListResultSchema as b0, currencyLabel as b1, currencySymbol as b2, currencySymbolSide as b3, formatAmount as b4, formatMoney as b5, isPlatformAttributeName as b6, localeNumberSeparators as b7, parseAmount as b8, parseCurrencyMeta as b9, type LayoutTab as bA, type NumberAttributeMeta as bB, type ObjectAttributeMeta as bC, type PageLayoutSidePanel as bD, PageLayoutSidePanelSchema as bE, type RelatedListElement as bF, type ResponsiveSizing as bG, type RowElement as bH, type SectionElement as bI, type SizeValue as bJ, SizeValueSchema as bK, type SizingProps as bL, type StringAttributeMeta as bM, type StringFormat as bN, type TabsElement as bO, type TextElement as bP, type TextVariant as bQ, type UserAttributeMeta as bR, UserAttributeMetaSchema as bS, isBuiltInControl as bT, lookupCompatibleControls as bU, lookupControls as bV, lookupPrimaryControl as bW, parseUserMeta as bX, parseFileMeta as ba, parseRelationMeta as bb, platformAttributes as bc, resolveOptions as bd, type ArrayAttributeMeta as be, type AttributeForLookup as bf, type AttributeMeta as bg, BUILT_IN_CONTROLS as bh, type BuiltInControlSlug as bi, type ColumnElement as bj, type CommonProps as bk, type ComponentElement as bl, type ControlBucket as bm, type DatetimeAttributeMeta as bn, type DatetimeFormat as bo, type DividerElement as bp, type EnumAttributeMeta as bq, type EnumValue as br, type FieldElement as bs, FileAttributeMetaSchema as bt, type LayoutAlign as bu, type LayoutElement as bv, LayoutElementSchema as bw, LayoutElementType as bx, type LayoutGap as by, type LayoutJustify as bz, ProteosClient as c, type App as d, AppSchema as e, type AppService as f, AttributeSchema as g, type AttributeType as h, AuditFieldsSchema as i, type Column as j, ColumnSchema as k, type ComparisonOperator as l, type Component as m, ComponentSchema as n, type ComponentService as o, type CreateAppRequest as p, type CreateComponentRequest as q, type CreateEntityRequest as r, type CreateListRequest as s, type CreateListViewRequest as t, type CreateMenuConfigurationRequest as u, type CreatePageRequest as v, type CreateVariableRequest as w, type CurrencyAttributeMeta as x, CurrencyAttributeMetaSchema as y, type CurrencySymbolSide as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proteos/sdk",
-  "version": "0.20.5",
+  "version": "0.21.0",
   "license": "Apache-2.0",
   "description": "TypeScript SDK for the Proteos platform",
   "repository": {

package/src/client.ts

@@ -91,9 +91,11 @@ export class ProteosClient {
       ...requestOptions?.headers,
     })
 
-    const token = await this.getToken()
-    if (token) {
-      headers.set('Authorization', `Bearer ${token}`)
+    if (!requestOptions?.skipAuth) {
+      const token = await this.getToken()
+      if (token) {
+        headers.set('Authorization', `Bearer ${token}`)
+      }
     }
 
     return headers

package/src/functions/actions.ts

@@ -40,6 +40,17 @@ export interface ActionService {
    */
   invokeGlobal(slug: string, params: Record<string, unknown>): Promise<unknown>
 
+  /**
+   * Invokes a PUBLIC (`is_public`) global action without authentication — no
+   * Authorization header is sent. This is the only data path available to
+   * components on a public page. The action runs server-side as its creator
+   * (org + user injected via a machine token); non-public actions 404.
+   *
+   * @param orgId - Org id (public routes carry the org in the path — there is
+   *   no token to scope from)
+   */
+  invokePublic(orgId: string, slug: string, params: Record<string, unknown>): Promise<unknown>
+
   /**
    * Invokes an entity-scoped action against a specific record. Returns the
    * unwrapped `result` payload.
@@ -79,6 +90,20 @@ export class ActionServiceImpl implements ActionService {
     return response.result
   }
 
+  async invokePublic(
+    orgId: string,
+    slug: string,
+    params: Record<string, unknown>,
+  ): Promise<unknown> {
+    const response = await this.client.request<InvokeActionResponse>(
+      'POST',
+      `/functions/v1/public/orgs/${encodeURIComponent(orgId)}/actions/${encodeURIComponent(slug)}/invoke`,
+      params,
+      { skipAuth: true },
+    )
+    return response.result
+  }
+
   async invokeEntity(
     entitySlug: string,
     recordId: string,

package/src/index.ts

@@ -439,6 +439,9 @@ export type {
   // Page types
   Page,
   PageAction,
+  PageType,
+  PublicPageComponent,
+  PublicPageResponse,
   PageLayout,
   PageService,
   // Relation attribute meta

package/src/meta/index.ts

@@ -171,6 +171,9 @@ export type {
   // Page types
   Page,
   PageAction,
+  PageType,
+  PublicPageComponent,
+  PublicPageResponse,
   // Relation attribute meta
   RelationAttributeMeta,
   SortConfig,

package/src/meta/pages.ts

@@ -1,7 +1,13 @@
 import type { ProteosClient } from '../client.js'
 import { PageIterator } from '../iterator.js'
 import type { ListResult } from '../types/common.js'
-import type { CreatePageRequest, ListPagesOptions, Page, UpdatePageRequest } from './types.js'
+import type {
+  CreatePageRequest,
+  ListPagesOptions,
+  Page,
+  PublicPageResponse,
+  UpdatePageRequest,
+} from './types.js'
 
 const PAGES_BASE_PATH = '/meta/v1/pages'
 
@@ -32,6 +38,18 @@ export interface PageService {
    */
   get(slug: string): Promise<Page>
 
+  /**
+   * Gets a PUBLIC page (type='public') without authentication — no
+   * Authorization header is sent. Returns the page plus the props_schema of
+   * every component its layout references. Non-public pages 404
+   * (indistinguishable from absent).
+   *
+   * @param orgId - Org id (public routes carry the org in the path — there is
+   *   no token to scope from)
+   * @param slug - Page slug
+   */
+  getPublic(orgId: string, slug: string): Promise<PublicPageResponse>
+
   /**
    * Creates a new page.
    *
@@ -88,6 +106,15 @@ export class PageServiceImpl implements PageService {
     return this.client.request<Page>('GET', `${PAGES_BASE_PATH}/${slug}`)
   }
 
+  async getPublic(orgId: string, slug: string): Promise<PublicPageResponse> {
+    return this.client.request<PublicPageResponse>(
+      'GET',
+      `/meta/v1/public/orgs/${encodeURIComponent(orgId)}/pages/${encodeURIComponent(slug)}`,
+      undefined,
+      { skipAuth: true },
+    )
+  }
+
   async create(request: CreatePageRequest): Promise<Page> {
     return this.client.request<Page>('POST', PAGES_BASE_PATH, request)
   }

package/src/meta/types.ts

@@ -641,6 +641,13 @@ export interface Component extends AuditFields {
   source_file_id: string
   /** The component's JSON Schema, driving the page-designer props editor + runtime validation. `null` until set. */
   props_schema: Record<string, unknown> | null
+  /**
+   * Opts the compiled bundle into UNAUTHENTICATED serving. Public
+   * (type='public') pages may only reference public components (enforced at
+   * page save), and a public component's only platform reach at runtime is
+   * `functions.actions.invokePublic`.
+   */
+  is_public: boolean
 }
 
 export const ComponentSchema = AuditFieldsSchema.extend({
@@ -650,7 +657,9 @@ export const ComponentSchema = AuditFieldsSchema.extend({
   module_slug: z.string(),
   bundle_file_id: z.string(),
   source_file_id: z.string(),
+  // default(false): rows serialized before the flag existed lack the field.
   props_schema: z.record(z.unknown()).nullable(),
+  is_public: z.boolean().default(false),
 })
 
 /**
@@ -673,6 +682,8 @@ export interface CreateComponentRequest {
   bundle_file_id?: string
   source_file_id?: string
   props_schema?: Record<string, unknown>
+  /** See {@link Component.is_public}. Manifest-driven: omitting it sets false. */
+  is_public?: boolean
 }
 
 /**
@@ -684,6 +695,7 @@ export interface UpdateComponentRequest {
   bundle_file_id?: string
   source_file_id?: string
   props_schema?: Record<string, unknown>
+  is_public?: boolean
 }
 
 // ============================================================================
@@ -886,14 +898,21 @@ export const PageActionSchema = z.object({
 })
 
 /**
- * Page type. `record` pages render against a single record of `entity_slug`;
- * `platform` pages are standalone (no record context — e.g. a dashboard
- * launched from a menu item). `external` is reserved for a future chromeless
- * variant and is not yet accepted by the API.
+ * Page type — encodes what the page binds to and how it is served (chrome +
+ * auth posture both follow from it):
+ *
+ * - `record`:   rendered against a single record of `entity_slug`; app chrome;
+ *   authenticated.
+ * - `platform`: standalone, no record context (e.g. a dashboard launched from
+ *   a menu item); app chrome; authenticated.
+ * - `kiosk`:    standalone, NO app chrome (bare page at `/k/…`); authenticated.
+ * - `public`:   standalone, NO app chrome (bare page at `/p/…`);
+ *   UNAUTHENTICATED — the layout is world-readable and its components may only
+ *   call `is_public` global actions.
  */
-export type PageType = 'record' | 'platform'
+export type PageType = 'record' | 'platform' | 'kiosk' | 'public'
 
-export const PageTypeSchema = z.enum(['record', 'platform'])
+export const PageTypeSchema = z.enum(['record', 'platform', 'kiosk', 'public'])
 
 /**
  * Page configuration. A `record` page is the detail-page shape for a single
@@ -924,6 +943,26 @@ export const PageSchema = AuditFieldsSchema.extend({
   layout: PageLayoutSchema,
 })
 
+/**
+ * Component metadata slice riding on the public page payload — just the slug
+ * and props schema (deliberately not the full Component: this is served
+ * unauthenticated).
+ */
+export interface PublicPageComponent {
+  slug: string
+  props_schema?: Record<string, unknown>
+}
+
+/**
+ * Payload of the unauthenticated `GET /meta/v1/public/orgs/{orgId}/pages/{slug}`:
+ * the page plus the props_schema of every component its layout references, so
+ * a public renderer needs no follow-up authenticated calls.
+ */
+export interface PublicPageResponse {
+  page: Page
+  components: PublicPageComponent[]
+}
+
 /**
  * Options for listing pages.
  */

package/src/types/options.ts

@@ -88,6 +88,12 @@ export function resolveOptions(options: ClientOptions): ResolvedClientOptions {
 export interface RequestOptions {
   /** Request timeout in milliseconds (overrides client default) */
   timeout?: number
+  /**
+   * Skip attaching the Authorization header. Only meaningful for the public,
+   * unauthenticated endpoints (`/meta/v1/public/*`, `/functions/v1/public/*`)
+   * — every other endpoint 401s without a bearer.
+   */
+  skipAuth?: boolean
   /** Additional headers for this request */
   headers?: Record<string, string>
   /** AbortSignal for request cancellation */