@viu/emporix-sdk 2.35.0 → 2.36.0

package/CHANGELOG.md

@@ -1,5 +1,75 @@
 # @viu/emporix-sdk
 
+## 2.36.0
+
+### Minor Changes
+
+- [#278](https://github.com/viuteam/emporix-sdk/pull/278) [`9cb8b15`](https://github.com/viuteam/emporix-sdk/commit/9cb8b15d14a122e5a69a36a4c1d4cce7c1308c3f) Thanks [@viu-release-bot](https://github.com/apps/viu-release-bot)! - chore(sdk): sync generated types with upstream Emporix API specs
+
+  Updated services: ai-service
+
+  Raised from `patch` to `minor` by hand: this sync reshapes the MCP server model
+  rather than extending it, and a patch would not announce that.
+
+  **`McpServerResponse` is now a union.** Emporix split the single managed-MCP-server
+  shape into a custom and a dynamic variant:
+
+  ```ts
+  // before
+  type McpServerResponse = BaseMcpServer & { … }
+  // after
+  type McpServerResponse = CustomMcpServerResponse | DynamicMcpServerResponse
+  ```
+
+  `McpServerRequest` splits the same way. Since `client.ai.mcpServers` is typed
+  `AgenticCrudResource<McpServer, McpServerInput>` and `McpServer` aliases
+  `McpServerResponse`, code that reads fields off a returned MCP server now has to
+  narrow first. Nothing inside the SDK does, which is why the build stays green — the
+  break lands in consumer code.
+
+  Also in this sync:
+  - `McpServerType` gains `'dynamic'` (was `'custom' | 'predefined'`).
+  - `BaseMcpServer` and `CustomAgentMcpServerResponse` are gone, replaced by
+    `BaseManagedMcpServer` and `AgentMcpServerResponse`.
+  - `AgentMcpServersResponse` changes element type to `Array<AgentMcpServerResponse>`.
+  - Eight new types describe MCP tool invocation: `McpToolRequest`/`Response`,
+    `McpToolConfigRequest`/`Response`, `McpToolInvocationRequest`/`Response`,
+    `McpToolInvocationMethod` and `McpToolInvocationArgsLocation`.
+
+  No facade change: all 57 ai-service operations were already wrapped, and none of
+  the removed type names appear outside the generated file.
+
+### Patch Changes
+
+- [#277](https://github.com/viuteam/emporix-sdk/pull/277) [`f2b5def`](https://github.com/viuteam/emporix-sdk/commit/f2b5def1f125725602ca461f3cdd6b6cb485795c) Thanks [@amnael1](https://github.com/amnael1)! - docs: correct three stale claims in the SDK README, add the missing mixins LICENSE
+
+  Checked every verifiable claim in the sdk, react and mixins READMEs against the
+  code. The react one was clean. Three things in the SDK README were wrong:
+  - **`credentials.backend` was marked «(required)»**. It is not: `validateConfig`
+    requires only that the `credentials` object exists, so `credentials: {}` is a
+    legal credential-free client — which is exactly what `examples/md-module` does,
+    where the Managed Dashboard host owns the token. The table now marks
+    `credentials` itself as required and explains the empty case.
+  - **`customerGroups` was described as «read-only for now»**. It has `addMember`
+    and `removeMember`, and the React README already documented the
+    `useAddGroupMember` / `useRemoveGroupMember` hooks for them — the two READMEs
+    contradicted each other.
+  - **`availability` was described as a read-only service** naming two of its nine
+    methods. It has three reads defaulting to `anonymous` and six writes
+    (`create`, `update`, `delete`, `bulkCreate`, `bulkUpdate`, `bulkDelete`)
+    defaulting to `service`.
+
+  The documented tenant pattern was also the one from the error message
+  (`^[a-z][a-z0-9]+$`) rather than the one the code applies
+  (`^[a-z][a-z0-9]{2,15}$`); the prose «3–16 chars» was already right.
+
+  **`@viu/emporix-mixins` was shipping without a LICENSE file.** Its `files` array
+  has listed `LICENSE` since the changelog-links change, and `package.json`
+  declares `"license": "MIT"`, but the file itself never existed — so the published
+  tarball carried no license text. Added, identical to the other three packages.
+  Its README also gains the CI/npm badges and the Authors and License sections the
+  others have.
+
 ## 2.35.0
 
 ### Minor Changes

package/README.md

@@ -93,8 +93,9 @@ See [`../../docs/mixin-search.md`](../../docs/mixin-search.md) for the capabilit
 
 | Option | Default | Notes |
 | --- | --- | --- |
-| `tenant` (required) | — | lowercase, 3–16 chars, `^[a-z][a-z0-9]+$` |
-| `credentials.backend` (required) | — | `{ clientId, secret, scope? }` — service token |
+| `tenant` (required) | — | lowercase, 3–16 chars, `^[a-z][a-z0-9]{2,15}$` |
+| `credentials` (required) | — | the object itself is required; which sets it holds is up to you |
+| `credentials.backend` | — | `{ clientId, secret, scope? }` — service token |
 | `credentials.storefront` | — | `{ clientId }` — anonymous token (no secret) |
 | `credentials.custom` | — | `Record<name, { clientId, secret, scope? }>` |
 | `host` | `https://api.emporix.io` | |
@@ -104,6 +105,13 @@ See [`../../docs/mixin-search.md`](../../docs/mixin-search.md) for the capabilit
 | `logger` | console @ `warn` | `false`, a `Logger`, or `{ level, services, pretty, redact }` |
 | `tokenProvider` | built-in | inject for SSO/token-exchange |
 
+`credentials: {}` is legal: a client that never mints its own token, for when the
+token comes from outside. The Managed Dashboard module in
+[`examples/md-module`](../../examples/md-module) is built exactly that way — the
+host hands it a customer token and the SDK only passes it through. Pass
+`credentials.backend` when you need a `service` AuthContext, `storefront` for
+anonymous browsing, both when you need both.
+
 ## AuthContext per method
 
 `auth.service(name?)`, `auth.anonymous()`, `auth.customer(token)`,
@@ -141,8 +149,9 @@ header, guest checkout and deferred payment are covered in
 ## B2B
 
 `sdk.companies` (legal entities), `sdk.contacts` (contact assignments),
-`sdk.locations` (HQ/warehouse/office), `sdk.customerGroups` (IAM groups,
-read-only for now). Switching company scope is a customer-token rescope via
+`sdk.locations` (HQ/warehouse/office), `sdk.customerGroups` (IAM groups —
+`listForCompany` plus `addMember` / `removeMember`). Switching company scope is
+a customer-token rescope via
 `sdk.customers.refresh({ refreshToken, legalEntityId })`. Mutations that the
 customer's role lacks scope for surface as `EmporixInsufficientScopeError`
 (extends `EmporixForbiddenError`, carries `requiredScope`). See
@@ -162,11 +171,16 @@ the Media service directly. See [`../../docs/media.md`](../../docs/media.md).
 
 ## Availability
 
-`sdk.availability` reads site-aware product availability: `get(productId, siteCode)`
-for one product and `getMany(productIds, siteCode)` for a batch (single
-`POST .../search` request, result in input order). The opt-in
+`sdk.availability` covers site-aware product availability in both directions.
+
+**Reads** (default `anonymous`): `get(productId, siteCode)` for one product,
+`getMany(productIds, siteCode)` for a batch (single `POST .../search` request,
+result in input order), and `listForSite(siteCode)`. The opt-in
 `defaultAvailableOnNotFound` returns `{ available: true }` for products without a
-stock record. There is no restock-date field. See [`../../docs/availability.md`](../../docs/availability.md).
+stock record. There is no restock-date field.
+
+**Writes** (default `service`, so server-only): `create`, `update`, `delete`, plus
+`bulkCreate` / `bulkUpdate` / `bulkDelete`. See [`../../docs/availability.md`](../../docs/availability.md).
 
 ## Subpath exports
 

package/dist/index.cjs

@@ -995,7 +995,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "2.35.0";
+var version = "2.36.0";
 
 // src/version.ts
 var SDK_VERSION = version;