oneentry 1.0.174 → 1.0.176

package/esm/auth-provider/authProviderApi.js

@@ -62,7 +62,7 @@ export default class AuthProviderApi extends AsyncModules {
             "value": "12345"
           }
         ]
-     * @param {IAuthFormData} body.formData - The form data for the registration, which can be a single object or an array of objects.
+     * @param {FormDataType | FormDataType[]} body.formData - Registration form fields: one object or an array. Field values: {@link FormDataType} — a value shaped by the field type (a string, a date object, a text object, a list, a file descriptor), not only a string. A file goes in as the descriptor `FileUploading.upload` returns: these methods do not upload a `File`/`Blob` themselves.
      * @example
         {
           "marker": "last_name",
@@ -88,7 +88,7 @@ export default class AuthProviderApi extends AsyncModules {
     async signUp(marker, body, langCode = this.state.lang) {
         // `langCode` goes onto our own copy — the caller's body stays as it was
         // given, so a retry or a second parallel call sends the same thing (CMS-909).
-        const result = await this._fetchPost(`/marker/${marker}/users/sign-up`, this._normalizePostBody({ ...body, langCode }, langCode));
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/sign-up`, this._normalizePostBody({ ...body, langCode }, langCode));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('SignUpResponseSchema'));
         return this._normalizeData(validated);
@@ -109,7 +109,7 @@ export default class AuthProviderApi extends AsyncModules {
             userIdentifier,
             eventIdentifier,
         };
-        const result = await this._fetchPost(`/marker/${marker}/users/generate-code`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/generate-code`, data);
         return result;
     }
     /**
@@ -130,7 +130,7 @@ export default class AuthProviderApi extends AsyncModules {
             eventIdentifier,
             code,
         };
-        const result = await this._fetchPost(`/marker/${marker}/users/check-code`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/check-code`, data);
         return result;
     }
     /**
@@ -149,7 +149,7 @@ export default class AuthProviderApi extends AsyncModules {
             userIdentifier: userIdentifier,
             code: code,
         };
-        const result = await this._fetchPost(`/marker/${marker}/users/activate`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/activate`, data);
         return result;
     }
     /**
@@ -186,7 +186,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/auth auth} documentation.
      */
     async auth(marker, body) {
-        const result = await this._fetchPost(`/marker/${marker}/users/auth`, body);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/auth`, body);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('AuthResponseSchema'));
         if (!('statusCode' in validated)) {
@@ -210,7 +210,7 @@ export default class AuthProviderApi extends AsyncModules {
      */
     async refresh(marker, token) {
         const data = { refreshToken: token };
-        const result = await this._fetchPost(`/marker/${marker}/users/refresh`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/refresh`, data);
         if (!('statusCode' in result)) {
             this.state.accessToken = result.accessToken;
             this.state.refreshToken = result.refreshToken;
@@ -235,7 +235,7 @@ export default class AuthProviderApi extends AsyncModules {
         const data = {
             refreshToken: token,
         };
-        const result = await this._fetchPost(`/marker/${marker}/users/logout`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/logout`, data);
         if (result) {
             this.state.accessToken = undefined;
             this.state.refreshToken = undefined;
@@ -256,7 +256,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/logoutAll logoutAll} documentation.
      */
     async logoutAll(marker) {
-        const result = await this._fetchPost(`/marker/${marker}/users/logout-all`);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/logout-all`);
         if (result) {
             this.state.accessToken = undefined;
             this.state.refreshToken = undefined;
@@ -290,7 +290,7 @@ export default class AuthProviderApi extends AsyncModules {
             password1: newPassword,
             password2: repeatPassword !== null && repeatPassword !== void 0 ? repeatPassword : newPassword,
         };
-        const result = await this._fetchPost(`/marker/${marker}/users/change-password`, data);
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/change-password`, data);
         return result;
     }
     /**
@@ -321,7 +321,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/getAuthProviderByMarker getAuthProviderByMarker} documentation.
      */
     async getAuthProviderByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${marker}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
         return this._normalizeData(result);
     }
     /**
@@ -334,7 +334,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/getActiveSessionsByMarker getActiveSessionsByMarker} documentation.
      */
     async getActiveSessionsByMarker(marker) {
-        const result = await this._fetchGet(`/marker/${marker}/users/sessions`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/users/sessions`);
         return this._normalizeData(result);
     }
     /**
@@ -357,7 +357,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/oauth oauth} documentation.
      */
     async oauth(marker, body, langCode = this.state.lang) {
-        const result = await this._fetchPost(`/marker/${marker}/oauth`, this._normalizePostBody(body, langCode));
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/oauth`, this._normalizePostBody(body, langCode));
         return result;
     }
 }

package/esm/auth-provider/authProviderSchemas.d.ts

@@ -49,7 +49,7 @@ export declare const UserResponseSchema: z.ZodObject<{
     authProviderIdentifier: z.ZodString;
     formData: z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
     formIdentifier: z.ZodString;
-    total: z.ZodString;
+    total: z.ZodOptional<z.ZodString>;
     groups: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
     state: z.ZodRecord<z.ZodString, z.ZodAny>;
     moduleFormConfigs: z.ZodOptional<z.ZodArray<z.ZodAny>>;

package/esm/auth-provider/authProvidersInterfaces.d.ts

@@ -1,4 +1,5 @@
 import type { IError, ILocalizeInfo, IRating } from '../base/utils.js';
+import type { FormDataType } from '../forms-data/formsDataInterfaces.js';
 /**
  * @interface IAuthProvider
  * @description This interface defines methods for user authentication and registration through various auth providers.
@@ -198,7 +199,7 @@ interface IAuthFormData {
  * @property {string} formIdentifier - Marker of the registration form. Example: "reg".
  * @property {string} [langCode] - Language code. Default: "en_US".
  * @property {Array} authData - Authentication fields, each with a `marker` and a `value`.
- * @property {IAuthFormData | IAuthFormData[]} formData - Registration form fields.
+ * @property {FormDataType | FormDataType[]} formData - Registration form fields. Field values: {@link FormDataType} — a value shaped by the field type (a string, a date object, a text object, a list, a file descriptor), not only a string. A file goes in as the descriptor `FileUploading.upload` returns: these methods do not upload a `File`/`Blob` themselves.
  * @property {INotificationData} notificationData - Notification contacts: `email`, `phonePush` and `phoneSMS`.
  * @description User registration (❗️For a provider with user activation, the activation code is sent through the corresponding user notification method).
  */
@@ -206,7 +207,7 @@ interface ISignUpData {
     formIdentifier: string;
     langCode?: string;
     authData: IAuthData[];
-    formData: IAuthFormData | IAuthFormData[];
+    formData: FormDataType | FormDataType[];
     notificationData: INotificationData;
 }
 /**

package/esm/base/asyncModules.d.ts

@@ -36,6 +36,17 @@ export default abstract class AsyncModules extends SyncModules {
      * validation disabled (the default) never pulls Zod into its bundle.
      */
     protected _validateResponse<T>(data: unknown, loadSchema?: () => Promise<z.ZodSchema<T>>): Promise<T | IError>;
+    /**
+     * Prepares a caller value (a marker) to be one segment of a request path.
+     * @param {string} value - The value to put into the path.
+     * @returns {string} The value encoded as a single path segment.
+     * @description `encodeURIComponent` keeps `?`, `#` and `/` from cutting the query or
+     * adding segments, but leaves `.` alone, and `URL` resolves a `.` or `..` segment
+     * (`%2E` included) — `form-data/marker/..` turned a read into `POST /form-data/`,
+     * the create endpoint. A dot-only value is sent with its `%` escaped instead, so the
+     * API gets a marker it rejects as invalid rather than another route.
+     */
+    protected _pathSegment(value: string): string;
     /**
      * Performs an HTTP GET request.
      * @param {string} path - The path to append to the base URL.

package/esm/base/asyncModules.js

@@ -79,6 +79,20 @@ export default class AsyncModules extends SyncModules {
             return validateResponseSafe(schema, data, this.state.validationLogErrors);
         }
     }
+    /**
+     * Prepares a caller value (a marker) to be one segment of a request path.
+     * @param {string} value - The value to put into the path.
+     * @returns {string} The value encoded as a single path segment.
+     * @description `encodeURIComponent` keeps `?`, `#` and `/` from cutting the query or
+     * adding segments, but leaves `.` alone, and `URL` resolves a `.` or `..` segment
+     * (`%2E` included) — `form-data/marker/..` turned a read into `POST /form-data/`,
+     * the create endpoint. A dot-only value is sent with its `%` escaped instead, so the
+     * API gets a marker it rejects as invalid rather than another route.
+     */
+    _pathSegment(value) {
+        const encoded = encodeURIComponent(value);
+        return /^\.{1,2}$/.test(value) ? encoded.replace(/\./g, '%252E') : encoded;
+    }
     /**
      * Performs an HTTP GET request.
      * @param {string} path - The path to append to the base URL.

package/esm/base/validation.d.ts

@@ -74,7 +74,7 @@ export declare const UserEntitySchema: z.ZodObject<{
     authProviderIdentifier: z.ZodString;
     formData: z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
     formIdentifier: z.ZodString;
-    total: z.ZodString;
+    total: z.ZodOptional<z.ZodString>;
     groups: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
     state: z.ZodRecord<z.ZodString, z.ZodAny>;
     moduleFormConfigs: z.ZodOptional<z.ZodArray<z.ZodAny>>;

package/esm/base/validation.js

@@ -137,7 +137,7 @@ export const UserEntitySchema = z.object({
     authProviderIdentifier: z.string(),
     formData: z.union([z.array(z.any()), z.record(z.string(), z.any())]),
     formIdentifier: z.string(),
-    total: z.string(),
+    total: z.string().optional(),
     groups: z.array(z.union([z.string(), z.number()])),
     state: z.record(z.string(), z.any()),
     moduleFormConfigs: z.array(z.any()).optional(),

package/esm/blocks/blocksApi.js

@@ -62,7 +62,7 @@ export default class BlocksApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/blocks/getBlockByMarker getBlockByMarker} documentation.
      */
     async getBlockByMarker(marker, langCode = this.state.lang, offset = 0, limit = 30) {
-        const response = await this._fetchGet(`/marker/${marker}?langCode=${langCode}`);
+        const response = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(response, schema('BlockEntitySchema'));
         const normalizeResponse = this._normalizeData(validated);
@@ -146,7 +146,8 @@ export default class BlocksApi extends AsyncModules {
             signPrice,
             productId,
         };
-        const result = await this._fetchGet(`/${marker}/similar-products?` + this._queryParamsToString(query));
+        const result = await this._fetchGet(`/${this._pathSegment(marker)}/similar-products?` +
+            this._queryParamsToString(query));
         return this._normalizeData(result);
     }
     /**
@@ -169,7 +170,8 @@ export default class BlocksApi extends AsyncModules {
             limit,
             signPrice,
         };
-        const result = await this._fetchGet(`/${marker}/products?` + this._queryParamsToString(query));
+        const result = await this._fetchGet(`/${this._pathSegment(marker)}/products?` +
+            this._queryParamsToString(query));
         // On API error responses there is no `items` array — return the (normalized)
         // error as-is instead of producing `undefined` from `result.items`.
         if (!Array.isArray(result === null || result === void 0 ? void 0 : result.items)) {
@@ -196,7 +198,7 @@ export default class BlocksApi extends AsyncModules {
             signPrice,
             limit,
         };
-        const data = await this._fetchGet(`/${marker}/products/${productId}/frequently-ordered?` +
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/products/${productId}/frequently-ordered?` +
             this._queryParamsToString(query));
         return this._normalizeData(data);
     }
@@ -229,7 +231,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getCartComplement(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/cart-complement?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/cart-complement?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -247,7 +250,7 @@ export default class BlocksApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/blocks/getCartComplementByProductIds getCartComplementByProductIds} documentation.
      */
     async getCartComplementByProductIds(marker, body) {
-        const data = await this._fetchPost(`/${marker}/cart-complement`, { langCode: this.state.lang, ...body });
+        const data = await this._fetchPost(`/${this._pathSegment(marker)}/cart-complement`, { langCode: this.state.lang, ...body });
         return this._normalizeData(data);
     }
     /**
@@ -264,7 +267,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getCartSimilar(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/cart-similar?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/cart-similar?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -282,7 +286,7 @@ export default class BlocksApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/blocks/getCartSimilarByProductIds getCartSimilarByProductIds} documentation.
      */
     async getCartSimilarByProductIds(marker, body) {
-        const data = await this._fetchPost(`/${marker}/cart-similar`, { langCode: this.state.lang, ...body });
+        const data = await this._fetchPost(`/${this._pathSegment(marker)}/cart-similar`, { langCode: this.state.lang, ...body });
         return this._normalizeData(data);
     }
     /**
@@ -299,7 +303,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getPersonalRecommendations(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/personal-recommendations?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/personal-recommendations?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -316,7 +321,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getRecentlyViewed(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/recently-viewed?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/recently-viewed?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -333,7 +339,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getRepeatPurchase(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/repeat-purchase?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/repeat-purchase?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -345,7 +352,7 @@ export default class BlocksApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/blocks/getSlides getSlides} documentation.
      */
     async getSlides(marker) {
-        const data = await this._fetchGet(`/${marker}/slides`);
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/slides`);
         return this._normalizeData(data);
     }
     /**
@@ -362,7 +369,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getTrending(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/trending?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/trending?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -379,7 +387,8 @@ export default class BlocksApi extends AsyncModules {
      */
     async getWishlistSimilar(marker, langCode = this.state.lang, signPrice, limit) {
         const query = { langCode, signPrice, limit };
-        const data = await this._fetchGet(`/${marker}/wishlist-similar?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/${this._pathSegment(marker)}/wishlist-similar?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**
@@ -397,7 +406,7 @@ export default class BlocksApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/blocks/getWishlistSimilarByProductIds getWishlistSimilarByProductIds} documentation.
      */
     async getWishlistSimilarByProductIds(marker, body) {
-        const data = await this._fetchPost(`/${marker}/wishlist-similar`, { langCode: this.state.lang, ...body });
+        const data = await this._fetchPost(`/${this._pathSegment(marker)}/wishlist-similar`, { langCode: this.state.lang, ...body });
         return this._normalizeData(data);
     }
 }

package/esm/discounts/discountsApi.js

@@ -57,7 +57,8 @@ export default class DiscountsApi extends AsyncModules {
             marker: '',
             langCode,
         };
-        const data = await this._fetchGet(`/marker/${marker}?` + this._queryParamsToString(query));
+        const data = await this._fetchGet(`/marker/${this._pathSegment(marker)}?` +
+            this._queryParamsToString(query));
         return this._normalizeData(data);
     }
     /**

package/esm/events/eventsApi.js

@@ -57,7 +57,7 @@ export default class EventsApi extends AsyncModules {
             locale: langCode,
             productId,
         };
-        return this._fetchBoolean(() => this._fetchPost(`/subscribe/marker/${marker}`, body));
+        return this._fetchBoolean(() => this._fetchPost(`/subscribe/marker/${this._pathSegment(marker)}`, body));
     }
     /**
      * Unsubscribing to an event on a product.
@@ -76,7 +76,7 @@ export default class EventsApi extends AsyncModules {
             productId: productId,
             locale: langCode,
         };
-        return this._fetchBoolean(() => this._fetchDelete(`/unsubscribe/marker/${marker}`, body));
+        return this._fetchBoolean(() => this._fetchDelete(`/unsubscribe/marker/${this._pathSegment(marker)}`, body));
     }
     /**
      * Returns all available events.
@@ -102,7 +102,7 @@ export default class EventsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/events/subscribeToForm subscribeToForm} documentation.
      */
     async subscribeToForm(marker, body) {
-        return this._fetchBoolean(() => this._fetchPost(`/forms/subscribe/marker/${marker}`, body));
+        return this._fetchBoolean(() => this._fetchPost(`/forms/subscribe/marker/${this._pathSegment(marker)}`, body));
     }
     /**
      * Returns all form subscriptions.
@@ -135,6 +135,6 @@ export default class EventsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/events/unsubscribeFromForm unsubscribeFromForm} documentation.
      */
     async unsubscribeFromForm(marker, body) {
-        return this._fetchBoolean(() => this._fetchDelete(`/forms/unsubscribe/marker/${marker}`, body));
+        return this._fetchBoolean(() => this._fetchDelete(`/forms/unsubscribe/marker/${this._pathSegment(marker)}`, body));
     }
 }

package/esm/filters/filtersApi.js

@@ -29,7 +29,7 @@ export default class FiltersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/filters/getFilterByMarker getFilterByMarker} documentation.
      */
     async getFilterByMarker(marker, langCode = this.state.lang) {
-        const data = await this._fetchGet(`/marker/${marker}?langCode=${langCode}`);
+        const data = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
         const validated = await this._validateResponse(data, schema('ContentFilterSchema'));
         return this._normalizeData(validated);
     }

package/esm/forms/formsApi.js

@@ -46,7 +46,7 @@ export default class FormsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms/getFormByMarker getFormByMarker} documentation.
      */
     async getFormByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${marker}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('FormEntitySchema'));
         return this._normalizeData(validated, langCode);

package/esm/forms-data/formsDataApi.d.ts

@@ -118,17 +118,19 @@ export default class FormsDataApi extends AsyncModules implements IFormsData {
      * @param {number} [body.parentId] - Identifier of the parent record, to fetch replies to one submission. Example: 10.
      * @param {string} [body.userIdentifier] - Text identifier of the sender. Example: "admin".
      * @param {FormDataStatus[]} [body.status] - Moderation statuses to keep: "sent", "moderation", "approved", "banned", "deleted". Must be an array; anything outside the set is rejected with `400 each value in status must be a valid enum value`. Example: ["approved"].
-     * @param {string} [body.dateFrom] - Lower bound of the submission date, `YYYY-MM-DD`. An empty string means "no bound" — the SDK removes it from the body, because the endpoint answers `400 dateFrom must be a valid date in format "YYYY-MM-DD"` to one. An unparsable non-empty value still fails the request. Example: "2025-01-01".
-     * @param {string} [body.dateTo] - Upper bound of the submission date, `YYYY-MM-DD`. An empty string means "no bound", handled like `dateFrom`. Example: "2025-12-31".
+     * @param {string} [body.dateFrom] - Lower bound of the submission date, `YYYY-MM-DD` or `YYYY-MM-DD HH:MM:SS`. An empty string means "no bound" — the SDK removes it from the body, because the endpoint answers `400 dateFrom must be a valid date in format "YYYY-MM-DD"` to one. An unparsable non-empty value still fails the request. Example: "2025-01-01".
+     * @param {string} [body.dateTo] - Upper bound of the submission date, `YYYY-MM-DD` or `YYYY-MM-DD HH:MM:SS`. An empty string means "no bound", handled like `dateFrom`. Example: "2025-12-31".
      * @param {number} [isExtended] - Pass `1` to return additional fields for each record. Default: `0`. Example: 1.
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @param {number} [offset] - Number of records to skip. Default: 0.
-     * @param {number} [limit] - Maximum number of records to return. Default: 30.
+     * @param {number} [offset] - Number of records to skip, `0` or more (a negative one answers `400 offset must not be less than 0`). Default: 0.
+     * @param {number} [limit] - Maximum number of records to return, `1` or more (`0` answers `400 limit must not be less than 1`). Default: 30.
      * @returns {Promise<IFormsByMarkerDataEntity | IError>} Returns an object containing the form data or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Each record's `formData` comes back **already unwrapped from its locale**. The API sends `formData: { "en_US": [ … ] }`; the SDK normalizes the response and hands over the array for `langCode`, so read `record.formData` — `record.formData[langCode]` is `undefined` and yields an empty list with no error. This holds for both values of `isExtended`.
      *
-     * The filter body is typed for a reason: the API silently ignores a field it does not know, so a misspelled `statuses` returns every record — unmoderated ones included — and the code looks like it works.
+     * The filter body is typed because the API refuses a field it does not know: a misspelled `statuses` answers `400 property statuses should not exist`.
+     *
+     * A marker or `formModuleConfigId` that matches nothing answers `200` with `{ items: [], total: 0 }`, not `404` — an empty list does not prove the form exists.
      *
      * Empty `dateFrom` / `dateTo` are stripped from the body before it is sent: the endpoint validates the pair as dates and rejects an empty string with a `400`, while every other field still treats "" as "no filter".
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/getFormsDataByMarker getFormsDataByMarker} documentation.
@@ -164,11 +166,11 @@ export default class FormsDataApi extends AsyncModules implements IFormsData {
      * @handleName getFormsDataByVectorSearch
      * @param {IFormsDataVectorSearch} body - Vector search parameters. Example: `{ queryText: "order confirmation" }`.
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @param {number} [offset] - Number of records to skip. Default: 0.
-     * @param {number} [limit] - Maximum number of records to return. Default: 30.
+     * @param {number} [offset] - Number of records to skip, `0` or more. Default: 0.
+     * @param {number} [limit] - Maximum number of records to return, `1` or more. Default: 30.
      * @returns {Promise<IVectorSearchResponse<IFormsDataSearchResponse> | IError>} Returns an object with an array of found form data records and total count.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description This method performs a semantic (vector) search for form data.
+     * @description This method performs a semantic (vector) search for form data. The body is checked by the API: an empty `queryText` or one longer than 512 characters, a negative `vectorDistanceThreshold` and a `maxHits` below `1` each answer `400`.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/getFormsDataByVectorSearch getFormsDataByVectorSearch} documentation.
      */
     getFormsDataByVectorSearch(body: IFormsDataVectorSearch, langCode?: string, offset?: number, limit?: number): Promise<IVectorSearchResponse<IFormsDataSearchResponse> | IError>;

package/esm/forms-data/formsDataApi.js

@@ -133,7 +133,9 @@ export default class FormsDataApi extends AsyncModules {
         const result = await this._fetchPost(``, { ...body, formData });
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('PostFormResponseSchema'));
-        return this._normalizeData(validated);
+        // The fields went in under `langCode`, so the response is unwrapped from the same
+        // locale; without it a call in another language returned `formData` still keyed by it
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Tells a file the SDK still has to upload from one already in storage.
@@ -214,23 +216,25 @@ export default class FormsDataApi extends AsyncModules {
      * @param {number} [body.parentId] - Identifier of the parent record, to fetch replies to one submission. Example: 10.
      * @param {string} [body.userIdentifier] - Text identifier of the sender. Example: "admin".
      * @param {FormDataStatus[]} [body.status] - Moderation statuses to keep: "sent", "moderation", "approved", "banned", "deleted". Must be an array; anything outside the set is rejected with `400 each value in status must be a valid enum value`. Example: ["approved"].
-     * @param {string} [body.dateFrom] - Lower bound of the submission date, `YYYY-MM-DD`. An empty string means "no bound" — the SDK removes it from the body, because the endpoint answers `400 dateFrom must be a valid date in format "YYYY-MM-DD"` to one. An unparsable non-empty value still fails the request. Example: "2025-01-01".
-     * @param {string} [body.dateTo] - Upper bound of the submission date, `YYYY-MM-DD`. An empty string means "no bound", handled like `dateFrom`. Example: "2025-12-31".
+     * @param {string} [body.dateFrom] - Lower bound of the submission date, `YYYY-MM-DD` or `YYYY-MM-DD HH:MM:SS`. An empty string means "no bound" — the SDK removes it from the body, because the endpoint answers `400 dateFrom must be a valid date in format "YYYY-MM-DD"` to one. An unparsable non-empty value still fails the request. Example: "2025-01-01".
+     * @param {string} [body.dateTo] - Upper bound of the submission date, `YYYY-MM-DD` or `YYYY-MM-DD HH:MM:SS`. An empty string means "no bound", handled like `dateFrom`. Example: "2025-12-31".
      * @param {number} [isExtended] - Pass `1` to return additional fields for each record. Default: `0`. Example: 1.
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @param {number} [offset] - Number of records to skip. Default: 0.
-     * @param {number} [limit] - Maximum number of records to return. Default: 30.
+     * @param {number} [offset] - Number of records to skip, `0` or more (a negative one answers `400 offset must not be less than 0`). Default: 0.
+     * @param {number} [limit] - Maximum number of records to return, `1` or more (`0` answers `400 limit must not be less than 1`). Default: 30.
      * @returns {Promise<IFormsByMarkerDataEntity | IError>} Returns an object containing the form data or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Each record's `formData` comes back **already unwrapped from its locale**. The API sends `formData: { "en_US": [ … ] }`; the SDK normalizes the response and hands over the array for `langCode`, so read `record.formData` — `record.formData[langCode]` is `undefined` and yields an empty list with no error. This holds for both values of `isExtended`.
      *
-     * The filter body is typed for a reason: the API silently ignores a field it does not know, so a misspelled `statuses` returns every record — unmoderated ones included — and the code looks like it works.
+     * The filter body is typed because the API refuses a field it does not know: a misspelled `statuses` answers `400 property statuses should not exist`.
+     *
+     * A marker or `formModuleConfigId` that matches nothing answers `200` with `{ items: [], total: 0 }`, not `404` — an empty list does not prove the form exists.
      *
      * Empty `dateFrom` / `dateTo` are stripped from the body before it is sent: the endpoint validates the pair as dates and rejects an empty string with a `400`, while every other field still treats "" as "no filter".
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/getFormsDataByMarker getFormsDataByMarker} documentation.
      */
     async getFormsDataByMarker(marker, formModuleConfigId, body = {}, isExtended = 0, langCode = this.state.lang, offset = 0, limit = 30) {
-        const result = await this._fetchPost(`/marker/${marker}?formModuleConfigId=${formModuleConfigId}&isExtended=${isExtended}&langCode=${langCode}&offset=${offset}&limit=${limit}`, this._stripEmptyDates(body));
+        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}?formModuleConfigId=${formModuleConfigId}&isExtended=${isExtended}&langCode=${langCode}&offset=${offset}&limit=${limit}`, this._stripEmptyDates(body));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('FormsByMarkerDataResponseSchema'));
         return this._normalizeData(validated, langCode);
@@ -276,11 +280,11 @@ export default class FormsDataApi extends AsyncModules {
      * @handleName getFormsDataByVectorSearch
      * @param {IFormsDataVectorSearch} body - Vector search parameters. Example: `{ queryText: "order confirmation" }`.
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @param {number} [offset] - Number of records to skip. Default: 0.
-     * @param {number} [limit] - Maximum number of records to return. Default: 30.
+     * @param {number} [offset] - Number of records to skip, `0` or more. Default: 0.
+     * @param {number} [limit] - Maximum number of records to return, `1` or more. Default: 30.
      * @returns {Promise<IVectorSearchResponse<IFormsDataSearchResponse> | IError>} Returns an object with an array of found form data records and total count.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description This method performs a semantic (vector) search for form data.
+     * @description This method performs a semantic (vector) search for form data. The body is checked by the API: an empty `queryText` or one longer than 512 characters, a negative `vectorDistanceThreshold` and a `maxHits` below `1` each answer `400`.
      * @see {@link https://js-sdk.oneentry.cloud/docs/forms-data/getFormsDataByVectorSearch getFormsDataByVectorSearch} documentation.
      */
     async getFormsDataByVectorSearch(body, langCode = this.state.lang, offset = 0, limit = 30) {