@taphubhq/sdk-core 0.17.2 → 0.17.3

package/dist/index.cjs

@@ -178,7 +178,7 @@ var AgencyPairModule = class {
       if (args.filter.status !== void 0) filter.status = args.filter.status;
       variables.filter = filter;
     }
-    const body = await this.#graphql.request(
+    const body = await this.#graphql.publicRequest(
       FETCH_AGENCY_PAIRS_QUERY,
       variables,
       args?.signal ? { signal: args.signal } : void 0
@@ -2346,77 +2346,82 @@ function createGraphQLTransport(deps) {
     }
     return fetchImpl;
   }
-  return {
-    async request(query, variables, opts) {
-      const fetchImpl = resolveFetch();
-      const base = baseUrl.replace(/\/+$/, "");
-      const op = extractOp(query);
-      const url = `${base}?${op}`;
-      const token = getToken();
-      const headers = buildHeaders({ token, hasBody: true, agencyId });
-      const body = { query };
-      if (variables !== void 0) {
-        body.variables = variables;
+  async function execute(token, query, variables, opts) {
+    const fetchImpl = resolveFetch();
+    const base = baseUrl.replace(/\/+$/, "");
+    const op = extractOp(query);
+    const url = `${base}?${op}`;
+    const headers = buildHeaders({ token, hasBody: true, agencyId });
+    const body = { query };
+    if (variables !== void 0) {
+      body.variables = variables;
+    }
+    const startedAt = Date.now();
+    let httpStatus = null;
+    let gqlErrors = null;
+    let threw = null;
+    const fireProbe = () => {
+      if (!onRequest) return;
+      try {
+        onRequest({
+          startedAt,
+          endedAt: Date.now(),
+          httpStatus,
+          gqlErrors,
+          threw
+        });
+      } catch {
       }
-      const startedAt = Date.now();
-      let httpStatus = null;
-      let gqlErrors = null;
-      let threw = null;
-      const fireProbe = () => {
-        if (!onRequest) return;
-        try {
-          onRequest({
-            startedAt,
-            endedAt: Date.now(),
-            httpStatus,
-            gqlErrors,
-            threw
-          });
-        } catch {
-        }
-      };
+    };
+    try {
+      let response;
       try {
-        let response;
-        try {
-          response = await fetchImpl.call(void 0, url, {
-            method: "POST",
-            headers,
-            body: JSON.stringify(body),
-            signal: opts?.signal
-          });
-        } catch (err) {
-          threw = err;
-          mapNetworkErrorToTaphubError(err);
-        }
-        httpStatus = response.status;
-        let responseBody;
-        try {
-          responseBody = await response.json();
-        } catch {
-          throw new TaphubServerError("Invalid response from server", {
-            code: "InvalidResponse"
-          });
-        }
-        if (!response.ok) {
-          mapGraphQLHttpError(response.status, responseBody);
-        }
-        const graphqlBody = responseBody;
-        if (graphqlBody.errors && graphqlBody.errors.length > 0) {
-          gqlErrors = graphqlBody.errors;
-          mapGraphQLLevelError(graphqlBody);
-        }
-        if (graphqlBody.data === void 0 || graphqlBody.data === null) {
-          throw new TaphubServerError("Invalid response from server", {
-            code: "InvalidResponse"
-          });
-        }
-        return graphqlBody.data;
+        response = await fetchImpl.call(void 0, url, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(body),
+          signal: opts?.signal
+        });
       } catch (err) {
-        if (threw === null) threw = err;
-        throw err;
-      } finally {
-        fireProbe();
+        threw = err;
+        mapNetworkErrorToTaphubError(err);
+      }
+      httpStatus = response.status;
+      let responseBody;
+      try {
+        responseBody = await response.json();
+      } catch {
+        throw new TaphubServerError("Invalid response from server", {
+          code: "InvalidResponse"
+        });
+      }
+      if (!response.ok) {
+        mapGraphQLHttpError(response.status, responseBody);
       }
+      const graphqlBody = responseBody;
+      if (graphqlBody.errors && graphqlBody.errors.length > 0) {
+        gqlErrors = graphqlBody.errors;
+        mapGraphQLLevelError(graphqlBody);
+      }
+      if (graphqlBody.data === void 0 || graphqlBody.data === null) {
+        throw new TaphubServerError("Invalid response from server", {
+          code: "InvalidResponse"
+        });
+      }
+      return graphqlBody.data;
+    } catch (err) {
+      if (threw === null) threw = err;
+      throw err;
+    } finally {
+      fireProbe();
+    }
+  }
+  return {
+    request(query, variables, opts) {
+      return execute(getToken(), query, variables, opts);
+    },
+    publicRequest(query, variables, opts) {
+      return execute(null, query, variables, opts);
     }
   };
 }

package/dist/index.d.mts

@@ -61,6 +61,14 @@ interface GraphQLRequestOpts {
 }
 interface GraphQLTransport {
     request<T>(query: string, variables?: Record<string, unknown>, opts?: GraphQLRequestOpts): Promise<T>;
+    /**
+     * Tier 0 anonymous variant of {@link request}: sends `x-builder-code` for
+     * tenant scoping but NEVER attaches the JWT, even when one is present. Used
+     * by agency-scoped public reads (e.g. `fetchAgencyPairs`) so a logged-in
+     * user's JWT cannot override the `x-builder-code` agency on a public read.
+     * See main-260518-anon-game-view D1.
+     */
+    publicRequest<T>(query: string, variables?: Record<string, unknown>, opts?: GraphQLRequestOpts): Promise<T>;
 }
 
 type AgencyPairStatus = 'active' | 'paused' | 'ended';

package/dist/index.d.ts

@@ -61,6 +61,14 @@ interface GraphQLRequestOpts {
 }
 interface GraphQLTransport {
     request<T>(query: string, variables?: Record<string, unknown>, opts?: GraphQLRequestOpts): Promise<T>;
+    /**
+     * Tier 0 anonymous variant of {@link request}: sends `x-builder-code` for
+     * tenant scoping but NEVER attaches the JWT, even when one is present. Used
+     * by agency-scoped public reads (e.g. `fetchAgencyPairs`) so a logged-in
+     * user's JWT cannot override the `x-builder-code` agency on a public read.
+     * See main-260518-anon-game-view D1.
+     */
+    publicRequest<T>(query: string, variables?: Record<string, unknown>, opts?: GraphQLRequestOpts): Promise<T>;
 }
 
 type AgencyPairStatus = 'active' | 'paused' | 'ended';

package/dist/index.js

@@ -113,7 +113,7 @@ var AgencyPairModule = class {
       if (args.filter.status !== void 0) filter.status = args.filter.status;
       variables.filter = filter;
     }
-    const body = await this.#graphql.request(
+    const body = await this.#graphql.publicRequest(
       FETCH_AGENCY_PAIRS_QUERY,
       variables,
       args?.signal ? { signal: args.signal } : void 0
@@ -2281,77 +2281,82 @@ function createGraphQLTransport(deps) {
     }
     return fetchImpl;
   }
-  return {
-    async request(query, variables, opts) {
-      const fetchImpl = resolveFetch();
-      const base = baseUrl.replace(/\/+$/, "");
-      const op = extractOp(query);
-      const url = `${base}?${op}`;
-      const token = getToken();
-      const headers = buildHeaders({ token, hasBody: true, agencyId });
-      const body = { query };
-      if (variables !== void 0) {
-        body.variables = variables;
+  async function execute(token, query, variables, opts) {
+    const fetchImpl = resolveFetch();
+    const base = baseUrl.replace(/\/+$/, "");
+    const op = extractOp(query);
+    const url = `${base}?${op}`;
+    const headers = buildHeaders({ token, hasBody: true, agencyId });
+    const body = { query };
+    if (variables !== void 0) {
+      body.variables = variables;
+    }
+    const startedAt = Date.now();
+    let httpStatus = null;
+    let gqlErrors = null;
+    let threw = null;
+    const fireProbe = () => {
+      if (!onRequest) return;
+      try {
+        onRequest({
+          startedAt,
+          endedAt: Date.now(),
+          httpStatus,
+          gqlErrors,
+          threw
+        });
+      } catch {
       }
-      const startedAt = Date.now();
-      let httpStatus = null;
-      let gqlErrors = null;
-      let threw = null;
-      const fireProbe = () => {
-        if (!onRequest) return;
-        try {
-          onRequest({
-            startedAt,
-            endedAt: Date.now(),
-            httpStatus,
-            gqlErrors,
-            threw
-          });
-        } catch {
-        }
-      };
+    };
+    try {
+      let response;
       try {
-        let response;
-        try {
-          response = await fetchImpl.call(void 0, url, {
-            method: "POST",
-            headers,
-            body: JSON.stringify(body),
-            signal: opts?.signal
-          });
-        } catch (err) {
-          threw = err;
-          mapNetworkErrorToTaphubError(err);
-        }
-        httpStatus = response.status;
-        let responseBody;
-        try {
-          responseBody = await response.json();
-        } catch {
-          throw new TaphubServerError("Invalid response from server", {
-            code: "InvalidResponse"
-          });
-        }
-        if (!response.ok) {
-          mapGraphQLHttpError(response.status, responseBody);
-        }
-        const graphqlBody = responseBody;
-        if (graphqlBody.errors && graphqlBody.errors.length > 0) {
-          gqlErrors = graphqlBody.errors;
-          mapGraphQLLevelError(graphqlBody);
-        }
-        if (graphqlBody.data === void 0 || graphqlBody.data === null) {
-          throw new TaphubServerError("Invalid response from server", {
-            code: "InvalidResponse"
-          });
-        }
-        return graphqlBody.data;
+        response = await fetchImpl.call(void 0, url, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(body),
+          signal: opts?.signal
+        });
       } catch (err) {
-        if (threw === null) threw = err;
-        throw err;
-      } finally {
-        fireProbe();
+        threw = err;
+        mapNetworkErrorToTaphubError(err);
+      }
+      httpStatus = response.status;
+      let responseBody;
+      try {
+        responseBody = await response.json();
+      } catch {
+        throw new TaphubServerError("Invalid response from server", {
+          code: "InvalidResponse"
+        });
+      }
+      if (!response.ok) {
+        mapGraphQLHttpError(response.status, responseBody);
       }
+      const graphqlBody = responseBody;
+      if (graphqlBody.errors && graphqlBody.errors.length > 0) {
+        gqlErrors = graphqlBody.errors;
+        mapGraphQLLevelError(graphqlBody);
+      }
+      if (graphqlBody.data === void 0 || graphqlBody.data === null) {
+        throw new TaphubServerError("Invalid response from server", {
+          code: "InvalidResponse"
+        });
+      }
+      return graphqlBody.data;
+    } catch (err) {
+      if (threw === null) threw = err;
+      throw err;
+    } finally {
+      fireProbe();
+    }
+  }
+  return {
+    request(query, variables, opts) {
+      return execute(getToken(), query, variables, opts);
+    },
+    publicRequest(query, variables, opts) {
+      return execute(null, query, variables, opts);
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taphubhq/sdk-core",
-  "version": "0.17.2",
+  "version": "0.17.3",
   "description": "Core SDK for building on the TabHub platform",
   "license": "MIT",
   "main": "./dist/index.cjs",