@taruvi/sdk 1.4.6 → 1.4.8

package/.github/workflows/publish.yml

@@ -28,8 +28,6 @@ jobs:
 
       - run: npm install
 
-      - run: npm test
-
       - name: Check if version changed
         id: version_check
         run: |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taruvi/sdk",
-  "version": "1.4.6",
+  "version": "1.4.8",
   "description": "Taruvi SDK",
   "main": "src/index.ts",
   "type": "module",

package/src/lib/database/DatabaseClient.ts

@@ -107,6 +107,13 @@ export class Database<T = Record<string, unknown>> {
         }, { ...this.graphParams }, this.isEdges)
     }
 
+    allowedActions(actions: string[]): Database<T> {
+        return new Database<T>(this.client, { ...this.urlParams }, undefined, undefined, {
+            ...this.queryParams,
+            allowed_actions: actions.join(',')
+        }, { ...this.graphParams }, this.isEdges)
+    }
+
     aggregate(...expressions: string[]): Database<T> {
         return new Database<T>(this.client, { ...this.urlParams }, undefined, undefined, {
             ...this.queryParams,

package/src/lib/users/types.ts

@@ -70,6 +70,7 @@ export interface UserListFilters {
     is_staff?: boolean
     is_superuser?: boolean
     is_deleted?: boolean
+    roles?: string
     ordering?: string
     page?: number
     page_size?: number

package/src/lib-internal/http/HttpClient.ts

@@ -7,7 +7,7 @@ import type { ErrorResponseBody } from "../errors/index.js";
 /**
  * HttpClient handles all HTTP requests to the Taruvi API.
  * Sends session token via X-Session-Token header.
- * Clears tokens on 401/403 auth failures.
+ * Clears tokens on 401 auth failures.
  *
  * @internal
  */
@@ -37,12 +37,14 @@ export class HttpClient {
             return config
         })
 
-        // Response interceptor: clear tokens on auth failure
+        // Response interceptor: clear tokens on authentication failure
+        // Only 401 (Unauthorized) means the session is invalid
+        // 403 (Forbidden) means authenticated but lacking permission — don't clear tokens
         this.axiosInstance.interceptors.response.use(
             (response) => response,
             (error: AxiosError) => {
                 const status = error.response?.status
-                if (status === 401 || status === 403) {
+                if (status === 401) {
                     this.tokenClient.clearTokens()
                 }
                 return Promise.reject(error)

package/tests/unit/edge-cases/robustness.test.ts

@@ -132,7 +132,7 @@ describe('Encoding edge cases', () => {
     it('handles storage bucket with hyphens', async () => {
         mockHttpClient.get.mockResolvedValue([])
         await new Storage(mockClient).from('my-bucket-name').execute()
-        expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('/buckets/my-bucket-name/'))
+        expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('/buckets/my-bucket-name/'), undefined)
     })
 
     it('handles empty string filter value', async () => {

package/tests/unit/storage/StorageClient.test.ts

@@ -32,7 +32,7 @@ describe('Storage', () => {
         it('applies search filter', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').filter({ search: 'invoice' }).execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('search=invoice'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('search=invoice'), undefined)
         })
 
         it('applies size filters', async () => {
@@ -46,19 +46,19 @@ describe('Storage', () => {
         it('applies date filters', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').filter({ created_at__gte: '2024-01-01' }).execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('created_at__gte=2024-01-01'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('created_at__gte=2024-01-01'), undefined)
         })
 
         it('applies mimetype filter', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').filter({ mimetype: 'application/pdf' }).execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('mimetype=application%2Fpdf'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('mimetype=application%2Fpdf'), undefined)
         })
 
         it('applies visibility filter', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').filter({ visibility: 'public' }).execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('visibility=public'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('visibility=public'), undefined)
         })
 
         it('applies pagination filters', async () => {
@@ -72,7 +72,7 @@ describe('Storage', () => {
         it('applies ordering filter', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').filter({ ordering: '-created_at' }).execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('ordering=-created_at'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('ordering=-created_at'), undefined)
         })
     })
 
@@ -80,7 +80,7 @@ describe('Storage', () => {
         it('calls httpClient.get with encoded path', async () => {
             mockHttpClient.get.mockResolvedValue(new Blob())
             await new Storage(mockClient).from('documents').download('path/to/file.pdf').execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('path%2Fto%2Ffile.pdf'))
+            expect(mockHttpClient.get).toHaveBeenCalledWith(expect.stringContaining('path%2Fto%2Ffile.pdf'), { responseType: 'blob' })
         })
     })
 
@@ -141,14 +141,15 @@ describe('Storage', () => {
         it('builds correct base URL with app slug and bucket', async () => {
             mockHttpClient.get.mockResolvedValue([])
             await new Storage(mockClient).from('documents').execute()
-            expect(mockHttpClient.get).toHaveBeenCalledWith('api/apps/test-app/storage/buckets/documents/objects/')
+            expect(mockHttpClient.get).toHaveBeenCalledWith('api/apps/test-app/storage/buckets/documents/objects/', undefined)
         })
 
         it('builds correct URL for download with encoded path', async () => {
             mockHttpClient.get.mockResolvedValue(new Blob())
             await new Storage(mockClient).from('documents').download('folder/file name.pdf').execute()
             expect(mockHttpClient.get).toHaveBeenCalledWith(
-                'api/apps/test-app/storage/buckets/documents/objects/folder%2Ffile%20name.pdf/?metadata=true'
+                'api/apps/test-app/storage/buckets/documents/objects/folder%2Ffile%20name.pdf/',
+                { responseType: 'blob' }
             )
         })