@shuffl/sdk 0.7.6 → 0.7.8

package/README.md

@@ -10,7 +10,7 @@ The package is ESM-only and ships its own types. It installs `@shuffl/api-contra
 
 Create an API key in **Settings → API keys**. The key is bound to one team and the issuing user's current permissions, and expires within 30 days. There is one kind of API key: the same key works for the SDK, CLI, HTTP API and, when it carries the `mcp.knowledge` permission, the MCP server.
 
-Choose exact endpoint permissions such as `users.list` and `groups.save`, grouped by resource and Read/Write. Discover them with `shuffl.permissions.list()`. A write grant does not imply reads or sibling operations. See [endpoint permissions and delegation](https://shuffl-rebuild.vercel.app/docs/api-permissions).
+Choose exact endpoint permissions such as `users.list` and `groups.save`, grouped by resource and Read/Write. Discover them with `shuffl.permissions.list()`. A write grant does not imply reads or sibling operations. See [endpoint permissions and delegation](https://shuffl.ai/docs/api-permissions).
 
 ```ts
 import { Shuffl } from '@shuffl/sdk';
@@ -28,11 +28,11 @@ const preview = await shuffl.programs.preview({
 });
 ```
 
-`new Shuffl` takes a workspace key or a company key and reads its prefix to tell them apart. Pass `baseUrl` (the application origin, without `/api/v1`) only to reach a server other than production, such as `http://localhost:3000` in development.
+`new Shuffl` takes a workspace key or a company key and reads its prefix to tell them apart. Pass `baseUrl` (the application origin, without `/api/v1`) only to reach a server other than production, such as `http://localhost:3000` in development. Production defaults to `https://shuffl.ai`. If you previously set the old Vercel host explicitly, update that setting; the SDK refuses redirects to protect credentials.
 
 `users` means people in the team directory, including people who have no web login. IDs are Shuffl person IDs, not Slack IDs or authentication account IDs.
 
-A team key never gains company scope; company settings have their own key and live under `shuffl.company`, below. See the [permission reference](https://shuffl-rebuild.vercel.app/docs/api-permissions) for every method. Input and output types come directly from the portable public oRPC contract.
+A team key never gains company scope; company settings have their own key and live under `shuffl.company`, below. See the [permission reference](https://shuffl.ai/docs/api-permissions) for every method. Input and output types come directly from the portable public oRPC contract.
 
 ## What the client covers
 
@@ -52,7 +52,7 @@ Dates in the public API are ISO strings. Directory lists use an opaque cursor an
 new Shuffl({ apiKey: async () => credentialStore.read() });
 ```
 
-Every request carries an `x-shuffl-client` header naming the SDK release (`shuffl-sdk/0.7.6`; the CLI adds `shuffl-cli/0.7.6`), so Shuffl can count requests by release. Pass `client: 'billing-sync/1.2.0'` to put your app's name in front; Shuffl never stores that part.
+Every request carries an `x-shuffl-client` header naming the SDK release (`shuffl-sdk/0.7.7`; the CLI adds `shuffl-cli/0.7.7`), so Shuffl can count requests by release. Pass `client: 'billing-sync/1.2.0'` to put your app's name in front; Shuffl never stores that part.
 
 Use `ORPCError.code` for errors (`UNAUTHORIZED`, `FORBIDDEN`, `BAD_REQUEST`, `NOT_FOUND`, `CONFLICT`, and others). Calls accept oRPC's second options argument, including an abort signal. HTTPS is required except on loopback; redirects are refused to avoid forwarding credentials to another origin. The public API currently allows same-origin browser calls and server/CLI clients; cross-origin browser CORS is not enabled.
 
@@ -112,9 +112,9 @@ const page = await shuffl.company.members.list({ limit: 100 });
 await shuffl.company.members.remove({ userId: page.items[0]!.userId });
 ```
 
-`shuffl.company.current()` returns the key's company and grants. Every other method needs its grant: `company.details`, `company.workspaces.list`, `company.members.list`, `company.emailDomains.list`, `company.slack.list`, `company.rename`, `company.workspaces.setDefault` and `company.members.remove`. `members.list` pages with `limit` and `cursor` like `users.list`. Company writes run once when called and take no `requestKey`. A company key can't call the workspace methods, and a workspace key can't call `shuffl.company`; the SDK refuses the wrong kind with `UNAUTHORIZED` before sending a request. See [company keys](https://shuffl-rebuild.vercel.app/docs/api-permissions#company-keys).
+`shuffl.company.current()` returns the key's company and grants. Every other method needs its grant: `company.details`, `company.workspaces.list`, `company.members.list`, `company.emailDomains.list`, `company.slack.list`, `company.rename`, `company.workspaces.setDefault` and `company.members.remove`. `members.list` pages with `limit` and `cursor` like `users.list`. Company writes run once when called and take no `requestKey`. A company key can't call the workspace methods, and a workspace key can't call `shuffl.company`; the SDK refuses the wrong kind with `UNAUTHORIZED` before sending a request. See [company keys](https://shuffl.ai/docs/api-permissions#company-keys).
 
-Full guide: [Use the SDK and HTTP API](https://shuffl-rebuild.vercel.app/docs/sdk).
+Full guide: [Use the SDK and HTTP API](https://shuffl.ai/docs/sdk).
 
 ## License
 

package/dist/index.js

@@ -18,7 +18,7 @@ function clientHeader(client) {
         throw new Error('client is a short name/version, such as billing-sync/1.2.0.');
     return `${name} ${own}`;
 }
-const defaultBaseUrl = 'https://shuffl-rebuild.vercel.app';
+const defaultBaseUrl = 'https://shuffl.ai';
 const companyKeyPrefix = 'shuffl_company_';
 function origin(baseUrl) {
     const base = new URL(baseUrl);

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const sdkVersion = "0.7.6";
+export declare const sdkVersion = "0.7.8";

package/dist/version.js

@@ -1,3 +1,3 @@
 // The published version, sent in the x-shuffl-client header so Shuffl can
 // tell which SDK release calls it. `bun sdk:version X.Y.Z` writes it.
-export const sdkVersion = '0.7.6';
+export const sdkVersion = '0.7.8';

package/package.json

@@ -2,7 +2,7 @@
   "dependencies": {
     "@orpc/client": "1.15.3",
     "@orpc/contract": "1.15.3",
-    "@shuffl/api-contracts": "0.7.6"
+    "@shuffl/api-contracts": "0.7.8"
   },
   "description": "TypeScript client for the Shuffl API: people, groups, knowledge, playbooks, programs and management commands.",
   "engines": {
@@ -19,7 +19,7 @@
     "LICENSE",
     "README.md"
   ],
-  "homepage": "https://shuffl-rebuild.vercel.app/docs/sdk",
+  "homepage": "https://shuffl.ai/docs/sdk",
   "keywords": [
     "shuffl",
     "sdk",
@@ -34,5 +34,5 @@
   "sideEffects": false,
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "0.7.6"
+  "version": "0.7.8"
 }