@zeroxyz/sdk 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `@zeroxyz/sdk` will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) — with the pre-1.0 caveat that minor versions may include breaking changes.
 
+## 0.1.1
+
+### Fixed
+
+- `client.fetch()` now defaults the request `Content-Type` when a body is present and the caller set none — string bodies use `application/json`, byte bodies are sniffed (`{`/`[` ⇒ `application/json`, otherwise `application/octet-stream`). This mirrors the CLI's existing inference. Without it, strict providers (e.g. Locus MPP's `express.json()`) leave `req.body` undefined and crash reading a field off it (`Cannot read properties of undefined (reading '…')`), while lenient providers tolerate the omission — a confusing, provider-dependent failure. A caller-supplied `Content-Type` (any casing) always wins. (#560)
+
 ## 0.1.0
 
 Initial public release.

package/dist/{chunk-XQEHJX2X.js → chunk-JFORV7AV.js}

@@ -1098,7 +1098,7 @@ var Payments = class {
 
 // package.json
 var package_default = {
-  version: "0.1.0"};
+  version: "0.1.1"};
 
 // src/version.ts
 var SDK_VERSION = package_default.version;
@@ -1150,7 +1150,13 @@ var deviceStartResponseSchema = z.object({
   expiresAt: z.number()
 });
 var devicePollResponseSchema = z.union([
-  z.object({ error: z.literal("authorization_pending") }),
+  // userCode + verificationUri are optional: older API deployments don't
+  // echo them on pending.
+  z.object({
+    error: z.literal("authorization_pending"),
+    userCode: z.string().optional(),
+    verificationUri: z.string().optional()
+  }),
   z.object({ error: z.literal("expired_token") }),
   z.object({
     accessToken: z.string(),
@@ -1424,7 +1430,11 @@ var AuthDevice = class {
       devicePollResponseSchema
     );
     if ("error" in parsed) {
-      return parsed.error === "authorization_pending" ? { status: "pending" } : { status: "expired" };
+      return parsed.error === "authorization_pending" ? {
+        status: "pending",
+        userCode: parsed.userCode,
+        verificationUri: parsed.verificationUri
+      } : { status: "expired" };
     }
     return {
       status: "ok",
@@ -2358,11 +2368,34 @@ var recordErrorFetchRun = async (client, opts, result) => {
   } catch {
   }
 };
+var sniffJsonShapeBytes = (buf) => {
+  let i = 0;
+  if (buf.length >= 3 && buf[0] === 239 && buf[1] === 187 && buf[2] === 191) {
+    i = 3;
+  }
+  while (i < buf.length && (buf[i] === 32 || buf[i] === 9 || buf[i] === 10 || buf[i] === 13)) {
+    i++;
+  }
+  if (i >= buf.length) return false;
+  return buf[i] === 123 || buf[i] === 91;
+};
+var withDefaultContentType = (headers, body) => {
+  if (!headers && body === void 0) return void 0;
+  const next = headers ? { ...headers } : {};
+  if (body === void 0) return next;
+  const hasContentType = Object.keys(next).some(
+    (k) => k.toLowerCase() === "content-type"
+  );
+  if (!hasContentType) {
+    next["content-type"] = typeof body === "string" || sniffJsonShapeBytes(body) ? "application/json" : "application/octet-stream";
+  }
+  return next;
+};
 var clientFetch = async (client, url, opts = {}) => {
   const startedAt = Date.now();
   const capabilityIdRequested = opts.capabilityId !== void 0;
   const method = opts.method ?? (opts.body !== void 0 ? "POST" : "GET");
-  const probeHeaders = opts.headers ? { ...opts.headers } : void 0;
+  const probeHeaders = withDefaultContentType(opts.headers, opts.body);
   const requestInit = {
     method,
     headers: probeHeaders,
@@ -2400,8 +2433,9 @@ var clientFetch = async (client, url, opts = {}) => {
           url,
           method,
           // Fresh clone for the paid retry — same rationale as
-          // the probe-side clone above.
-          headers: opts.headers ? { ...opts.headers } : void 0,
+          // the probe-side clone above. Re-derives the default
+          // Content-Type so the paid leg matches the probe.
+          headers: withDefaultContentType(opts.headers, opts.body),
           body: opts.body,
           maxPay: opts.maxPay,
           account: opts.account,
@@ -3013,5 +3047,5 @@ var ZeroClient = class _ZeroClient {
 };
 
 export { Auth, AuthDevice, BUG_REPORT_CATEGORIES, BugReports, Capabilities, DEFAULT_BASE_URL, DEFAULT_MAX_RETRIES, DEFAULT_TIMEOUT_MS, FETCH_SKIP_REASONS, FETCH_WARNINGS, Payments, Runs, SDK_VERSION, TEMPO_CHAIN_ID, TEMPO_TESTNET_CHAIN_ID, Wallet, ZeroApiError, ZeroAuthError, ZeroClient, ZeroConfigurationError, ZeroError, ZeroPaymentError, ZeroSessionCloseFailedError, ZeroTimeoutError, ZeroValidationError, ZeroWalletError, coerceTempoChainId, createManagedAccount, paymentHasAnchor, tempoChainLabelFromId };
-//# sourceMappingURL=chunk-XQEHJX2X.js.map
-//# sourceMappingURL=chunk-XQEHJX2X.js.map
+//# sourceMappingURL=chunk-JFORV7AV.js.map
+//# sourceMappingURL=chunk-JFORV7AV.js.map