oneentry 1.0.176 → 1.0.178

package/esm/index.d.ts

@@ -34,6 +34,7 @@ import WsApi from './web-socket/wsApi.js';
 export { getAdditionalFields, getAttributeFile, getAttributeFiles, isFileAttribute, isListAttribute, isNumberAttribute, isStringAttribute, } from './base/attributes.js';
 export { expandAttributeTimeIntervals, expandTimeIntervals, isTimeIntervalAttribute, } from './base/timeIntervals.js';
 export type * from './types.js';
+export type { IDefineApi };
 /**
  * IDefineApi interface
  * @interface IDefineApi
@@ -132,17 +133,17 @@ interface IDefineApi {
  * @function defineOneEntry
  * @param {string} url - URl of your project.
  * @param {IConfig} config - Custom configuration settings
- * @param {string} [config.token] - Optional token parameter
+ * @param {string} config.token - App token of the project. Required: `defineOneEntry` throws without it.
  * @param {string} [config.guestId] - Optional guest identifier sent as the `x-guest-id` header for guest cart/wishlist/activity flows (only while unauthenticated). In the browser, if omitted, a stable per-device id is generated and persisted in localStorage. On the server you MUST pass a per-visitor `guestId` (or call `setGuestId`): the SDK never auto-generates a server id, to avoid sharing one guest across visitors.
  * @param {string} [config.deviceMetadata] - Optional device-metadata string sent as the `x-device-metadata` header instead of the environment-derived fingerprint. Refresh tokens are bound to this header, so a server issuing tokens for a browser (OAuth code exchange) must pass the browser's string (from `getDeviceMetadata()`), or the token will not be refreshable from that browser.
- * @param {string} [config.langCode] - Optional langCode parameter
+ * @param {string} [config.langCode] - Optional default language. Default: 'en_US'.
  * @param {boolean} [config.traficLimit] - Some methods use multiple queries to make it easier to work with the API. Set it to `true` to save traffic and decide for yourself what data you need: the SDK then skips its follow-up requests, and some results change shape (e.g. `searchPage` returns short `{ id, title }` cards). Default: false.
- * @param {string} [config.auth] - An object with authorization settings.
+ * @param {object} [config.auth] - An object with authorization settings.
  * @param {boolean} [config.auth.customAuth] - Set this flag to true if you want to configure the authorization process yourself. Set the flag to false, or do not pass it at all to have automatic authorization and token renewal.
- * @param {string} [config.auth.refreshToken] - Transfer the refresh token here, for example from the local storage, to resume the user's session. Otherwise, the user will need to log in every time a new session is created.
+ * @param {string} [config.auth.refreshToken] - Transfer the refresh token here, for example from the local storage, to resume the user's session. Otherwise, the user will need to log in every time a new session is created. On the server, also pass the `deviceMetadata` saved with the token: the API binds refresh tokens to it.
  * @param {string} [config.auth.providerMarker] - The marker of the authorization provider.
- * @param {string} [config.auth.saveFunction] - If you want to store the token between sessions, for example in local storage, create a custom function that takes refreshToken as a parameter and executes the necessary instructions. This function will be called every time the tokens are updated.
+ * @param {function(string): void} [config.auth.saveFunction] - If you want to store the token between sessions, for example in local storage, create a custom function that takes refreshToken as a parameter and executes the necessary instructions. This function will be called every time the tokens are updated.
  * @returns {IDefineApi} List of methods set.
- * @description Define API.
+ * @description Define API. The returned client holds one session (tokens, guest id) shared by all its modules: on a server, create a client per request for user calls — a client shared between requests serves the signed-in user's data to every visitor. `logout` does not change the guest id.
  */
 export declare function defineOneEntry(url: string, config: IConfig): IDefineApi;

package/esm/index.js

@@ -33,23 +33,55 @@ import UsersApi from './users/usersApi.js';
 import WsApi from './web-socket/wsApi.js';
 export { getAdditionalFields, getAttributeFile, getAttributeFiles, isFileAttribute, isListAttribute, isNumberAttribute, isStringAttribute, } from './base/attributes.js';
 export { expandAttributeTimeIntervals, expandTimeIntervals, isTimeIntervalAttribute, } from './base/timeIntervals.js';
+/**
+ * Checks the project URL every request path is appended to.
+ * @param {string} raw - The URL as passed, trimmed.
+ * @param {string} base - The URL with trailing `/` and `/api/content` removed.
+ * @returns {boolean} True for an http(s) origin (optionally with a path) or a same-origin proxy path.
+ * @description A backslash is read as `/` by browsers: `/\\evil.example` was a "path" that sent
+ * every request — and the app token — to another host. A query or fragment swallowed every
+ * path appended to it, and credentials in the URL make `fetch` throw on each call.
+ */
+function _isProjectUrl(raw, base) {
+    if (/[\\?#\s]/.test(base)) {
+        return false;
+    }
+    if (raw.startsWith('/')) {
+        // `/` and `/api/content` leave an empty base: the site's own origin
+        return !raw.startsWith('//') && (base === '' || base.startsWith('/'));
+    }
+    // `https:evil.example` parses with that host, but a browser resolves it as a path
+    if (!/^https?:\/\//i.test(base)) {
+        return false;
+    }
+    try {
+        const parsed = new URL(base);
+        return ((parsed.protocol === 'http:' || parsed.protocol === 'https:') &&
+            !!parsed.hostname &&
+            !parsed.username &&
+            !parsed.password);
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Define API.
  * @function defineOneEntry
  * @param {string} url - URl of your project.
  * @param {IConfig} config - Custom configuration settings
- * @param {string} [config.token] - Optional token parameter
+ * @param {string} config.token - App token of the project. Required: `defineOneEntry` throws without it.
  * @param {string} [config.guestId] - Optional guest identifier sent as the `x-guest-id` header for guest cart/wishlist/activity flows (only while unauthenticated). In the browser, if omitted, a stable per-device id is generated and persisted in localStorage. On the server you MUST pass a per-visitor `guestId` (or call `setGuestId`): the SDK never auto-generates a server id, to avoid sharing one guest across visitors.
  * @param {string} [config.deviceMetadata] - Optional device-metadata string sent as the `x-device-metadata` header instead of the environment-derived fingerprint. Refresh tokens are bound to this header, so a server issuing tokens for a browser (OAuth code exchange) must pass the browser's string (from `getDeviceMetadata()`), or the token will not be refreshable from that browser.
- * @param {string} [config.langCode] - Optional langCode parameter
+ * @param {string} [config.langCode] - Optional default language. Default: 'en_US'.
  * @param {boolean} [config.traficLimit] - Some methods use multiple queries to make it easier to work with the API. Set it to `true` to save traffic and decide for yourself what data you need: the SDK then skips its follow-up requests, and some results change shape (e.g. `searchPage` returns short `{ id, title }` cards). Default: false.
- * @param {string} [config.auth] - An object with authorization settings.
+ * @param {object} [config.auth] - An object with authorization settings.
  * @param {boolean} [config.auth.customAuth] - Set this flag to true if you want to configure the authorization process yourself. Set the flag to false, or do not pass it at all to have automatic authorization and token renewal.
- * @param {string} [config.auth.refreshToken] - Transfer the refresh token here, for example from the local storage, to resume the user's session. Otherwise, the user will need to log in every time a new session is created.
+ * @param {string} [config.auth.refreshToken] - Transfer the refresh token here, for example from the local storage, to resume the user's session. Otherwise, the user will need to log in every time a new session is created. On the server, also pass the `deviceMetadata` saved with the token: the API binds refresh tokens to it.
  * @param {string} [config.auth.providerMarker] - The marker of the authorization provider.
- * @param {string} [config.auth.saveFunction] - If you want to store the token between sessions, for example in local storage, create a custom function that takes refreshToken as a parameter and executes the necessary instructions. This function will be called every time the tokens are updated.
+ * @param {function(string): void} [config.auth.saveFunction] - If you want to store the token between sessions, for example in local storage, create a custom function that takes refreshToken as a parameter and executes the necessary instructions. This function will be called every time the tokens are updated.
  * @returns {IDefineApi} List of methods set.
- * @description Define API.
+ * @description Define API. The returned client holds one session (tokens, guest id) shared by all its modules: on a server, create a client per request for user calls — a client shared between requests serves the signed-in user's data to every visitor. `logout` does not change the guest id.
  */
 export function defineOneEntry(url, config) {
     if (typeof url !== 'string' || url.trim() === '') {
@@ -64,7 +96,18 @@ export function defineOneEntry(url, config) {
             'Pass it via config, e.g. ' +
             'defineOneEntry("https://your-project.oneentry.cloud", { token: "your-app-token" }).');
     }
-    const stateModule = new StateModule(url.endsWith('/') ? url.slice(0, -1) : url, config);
+    // Trailing slashes and a copied `/api/content` suffix used to double up in every path
+    // (`//api/content/…`, `/api/content/api/content/…`) and fail each call with a 404
+    const baseUrl = url
+        .trim()
+        .replace(/\/+$/, '')
+        .replace(/\/api\/content$/i, '');
+    if (!_isProjectUrl(url.trim(), baseUrl)) {
+        throw new Error('OneEntry SDK: project URL must be an http(s) URL without credentials, query or fragment, ' +
+            'or a same-origin proxy path starting with "/", e.g. ' +
+            'defineOneEntry("https://your-project.oneentry.cloud", { token: "your-app-token" }).');
+    }
+    const stateModule = new StateModule(baseUrl, config);
     const Admins = new AdminsApi(stateModule);
     const AttributesSets = new AttributesSetsApi(stateModule);
     const AuthProvider = new AuthProviderApi(stateModule);

package/esm/integration-collections/integrationCollectionsApi.d.ts

@@ -86,11 +86,13 @@ export default class IntegrationCollectionsApi extends AsyncModules implements I
      * @handleName getICollectionRowsByMarker
      * @param {string} marker - Marker of the collection. Example: "collection1".
      * @param {string} [langCode] - Language code. Default: "en_US".
+     * @param {ICollectionQuery} [userQuery] - Pagination and entity filter, as in `getICollectionRowsById`. Without it the API returns the first 30 records only. Example: `{ limit: 100, offset: 0 }`.
      * @returns {Promise<ICollectionRowsResponce | IError>} Returns CollectionRowEntity object.
      * @throws {IError} When isShell=false and an error occurs during the fetch
+     * @description Records of the collection, one page at a time: `limit` defaults to 30 and `total` holds the full count.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/getICollectionRowsByMarker getICollectionRowsByMarker} documentation.
      */
-    getICollectionRowsByMarker(marker: string, langCode?: string): Promise<ICollectionRowsResponce | IError>;
+    getICollectionRowsByMarker(marker: string, langCode?: string, userQuery?: ICollectionQuery): Promise<ICollectionRowsResponce | IError>;
     /**
      * Getting one record from the collection.
      * @handleName getICollectionRowByMarkerAndId
@@ -121,7 +123,7 @@ export default class IntegrationCollectionsApi extends AsyncModules implements I
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<ICollectionRow | IError>} Returns object of type ICollectionRow.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Create a record in the collection.
+     * @description Create a record in the collection. The row is stored under the language key of `formData` when it is wrapped (`{ "en_US": [...] }`), not under `langCode` of the call; the returned `formData` is an array either way.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/createICollectionRow createICollectionRow} documentation.
      */
     createICollectionRow(marker: string, body: ICollectionFormObject, langCode?: string): Promise<ICollectionRow | IError>;
@@ -147,7 +149,7 @@ export default class IntegrationCollectionsApi extends AsyncModules implements I
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<ICollectionRow | IError>} Returns object of type ICollectionRow.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Edit a record in the collection.
+     * @description Edit a record in the collection. `formData` **replaces** every field of the row: fields left out of the body are removed, not kept.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/updateICollectionRow updateICollectionRow} documentation.
      */
     updateICollectionRow(marker: string, id: number, body: {
@@ -159,10 +161,19 @@ export default class IntegrationCollectionsApi extends AsyncModules implements I
      * @handleName deleteICollectionRowByMarkerAndId
      * @param {string} marker - Marker of the collection. Example: "collection1".
      * @param {number} id - ID of the collection row. Example: 12.
-     * @returns {Promise<boolean | IError>} Returns true (in case of successful deletion) or false (in case of unsuccessful deletion) (permission "collections.row.delete" required for access)
+     * @returns {Promise<boolean | IError>} Returns `true` once the row is deleted; a row that is not there (or already deleted) answers IError `404 Row not found`, not `false`. Permission "collections.row.delete" is required.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Deletion of collection record object
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/deleteICollectionRowByMarkerAndId deleteICollectionRowByMarkerAndId} documentation.
      */
     deleteICollectionRowByMarkerAndId(marker: string, id: number): Promise<boolean | IError>;
+    /**
+     * Unwraps `formData` of a created or updated row that is still keyed by a language.
+     * @param {any} row - The normalized row.
+     * @returns {any} The row with `formData` as an array.
+     * @description The row is stored under the language key of the body, and the answer
+     * keeps that key: `createICollectionRow(…, 'ru_RU')` with `{ en_US: [...] }` returned
+     * `formData` as an object, while `ICollectionRow.formData` is an array.
+     */
+    private _rowFormDataAsArray;
 }

package/esm/integration-collections/integrationCollectionsApi.js

@@ -56,7 +56,8 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/getICollectionById getICollectionById} documentation.
      */
     async getICollectionById(id, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/${id}?` + this._queryParamsToString({ langCode }));
+        const result = await this._fetchGet(`/${this._pathSegment(String(id))}?` +
+            this._queryParamsToString({ langCode }));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('CollectionEntitySchema'));
         return this._normalizeData(validated, langCode);
@@ -84,7 +85,7 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/getICollectionRowsById getICollectionRowsById} documentation.
      */
     async getICollectionRowsById(id, langCode = this.state.lang, userQuery) {
-        const result = await this._fetchGet(`/${id}/rows?` +
+        const result = await this._fetchGet(`/${this._pathSegment(String(id))}/rows?` +
             this._queryParamsToString({
                 ...this._defaultQuery,
                 ...userQuery,
@@ -118,12 +119,19 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @handleName getICollectionRowsByMarker
      * @param {string} marker - Marker of the collection. Example: "collection1".
      * @param {string} [langCode] - Language code. Default: "en_US".
+     * @param {ICollectionQuery} [userQuery] - Pagination and entity filter, as in `getICollectionRowsById`. Without it the API returns the first 30 records only. Example: `{ limit: 100, offset: 0 }`.
      * @returns {Promise<ICollectionRowsResponce | IError>} Returns CollectionRowEntity object.
      * @throws {IError} When isShell=false and an error occurs during the fetch
+     * @description Records of the collection, one page at a time: `limit` defaults to 30 and `total` holds the full count.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/getICollectionRowsByMarker getICollectionRowsByMarker} documentation.
      */
-    async getICollectionRowsByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/rows?langCode=${langCode}`);
+    async getICollectionRowsByMarker(marker, langCode = this.state.lang, userQuery) {
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/rows?` +
+            this._queryParamsToString({
+                ...this._defaultQuery,
+                ...userQuery,
+                langCode,
+            }));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('CollectionRowsResponseSchema'));
         return this._normalizeData(validated, langCode);
@@ -139,7 +147,7 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/getICollectionRowByMarkerAndId getICollectionRowByMarkerAndId} documentation.
      */
     async getICollectionRowByMarkerAndId(marker, id, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/rows/${id}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/rows/${this._pathSegment(String(id))}?langCode=${encodeURIComponent(langCode)}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('CollectionRowSchema'));
         return this._normalizeData(validated, langCode);
@@ -163,14 +171,14 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<ICollectionRow | IError>} Returns object of type ICollectionRow.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Create a record in the collection.
+     * @description Create a record in the collection. The row is stored under the language key of `formData` when it is wrapped (`{ "en_US": [...] }`), not under `langCode` of the call; the returned `formData` is an array either way.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/createICollectionRow createICollectionRow} documentation.
      */
     async createICollectionRow(marker, body, langCode = this.state.lang) {
-        const response = await this._fetchPost(`/marker/${this._pathSegment(marker)}/rows?langCode=${langCode}`, body);
+        const response = await this._fetchPost(`/marker/${this._pathSegment(marker)}/rows?langCode=${encodeURIComponent(langCode)}`, body);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(response, schema('CollectionRowSchema'));
-        return this._normalizeData(validated, langCode);
+        return this._rowFormDataAsArray(this._normalizeData(validated, langCode));
     }
     /**
      * Edit a record in the collection.
@@ -194,28 +202,47 @@ export default class IntegrationCollectionsApi extends AsyncModules {
      * @param {string} [langCode] - Language code. Default: "en_US".
      * @returns {Promise<ICollectionRow | IError>} Returns object of type ICollectionRow.
      * @throws {IError} When isShell=false and an error occurs during the fetch
-     * @description Edit a record in the collection.
+     * @description Edit a record in the collection. `formData` **replaces** every field of the row: fields left out of the body are removed, not kept.
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/updateICollectionRow updateICollectionRow} documentation.
      */
     async updateICollectionRow(marker, id, body, langCode = this.state.lang) {
-        const response = await this._fetchPut(`/marker/${this._pathSegment(marker)}/rows/${id}?` +
-            `langCode=${langCode}`, body);
+        const response = await this._fetchPut(`/marker/${this._pathSegment(marker)}/rows/${this._pathSegment(String(id))}?` +
+            `langCode=${encodeURIComponent(langCode)}`, body);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(response, schema('CollectionRowSchema'));
-        return this._normalizeData(validated, langCode);
+        return this._rowFormDataAsArray(this._normalizeData(validated, langCode));
     }
     /**
      * Deletion of collection record object
      * @handleName deleteICollectionRowByMarkerAndId
      * @param {string} marker - Marker of the collection. Example: "collection1".
      * @param {number} id - ID of the collection row. Example: 12.
-     * @returns {Promise<boolean | IError>} Returns true (in case of successful deletion) or false (in case of unsuccessful deletion) (permission "collections.row.delete" required for access)
+     * @returns {Promise<boolean | IError>} Returns `true` once the row is deleted; a row that is not there (or already deleted) answers IError `404 Row not found`, not `false`. Permission "collections.row.delete" is required.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Deletion of collection record object
      * @see {@link https://js-sdk.oneentry.cloud/docs/integration-collections/deleteICollectionRowByMarkerAndId deleteICollectionRowByMarkerAndId} documentation.
      */
     async deleteICollectionRowByMarkerAndId(marker, id) {
-        const result = await this._fetchDelete(`/marker/${this._pathSegment(marker)}/rows/${id}`);
+        const result = await this._fetchDelete(`/marker/${this._pathSegment(marker)}/rows/${this._pathSegment(String(id))}`);
         return result;
     }
+    /**
+     * Unwraps `formData` of a created or updated row that is still keyed by a language.
+     * @param {any} row - The normalized row.
+     * @returns {any} The row with `formData` as an array.
+     * @description The row is stored under the language key of the body, and the answer
+     * keeps that key: `createICollectionRow(…, 'ru_RU')` with `{ en_US: [...] }` returned
+     * `formData` as an object, while `ICollectionRow.formData` is an array.
+     */
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    _rowFormDataAsArray(row) {
+        const formData = row === null || row === void 0 ? void 0 : row.formData;
+        if (formData && typeof formData === 'object' && !Array.isArray(formData)) {
+            const keys = Object.keys(formData);
+            if (keys.length === 1 && Array.isArray(formData[keys[0]])) {
+                return { ...row, formData: formData[keys[0]] };
+            }
+        }
+        return row;
+    }
 }

package/esm/integration-collections/integrationCollectionsInterfaces.d.ts

@@ -71,11 +71,12 @@ interface ICollectionsApi {
      * @handleName getICollectionRowsByMarker
      * @param {string} marker - Marker of the collection. Example: "collection1".
      * @param {string} [langCode] - Language code. Default: "en_US".
+     * @param {ICollectionQuery} [userQuery] - Pagination and entity filter. Without it the API returns the first 30 records only.
      * @returns {ICollectionRowsResponce} Returns collection row entity object.
      * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
-     * @description This method gets all records from the collection.
+     * @description Records of the collection, one page at a time: `limit` defaults to 30 and `total` holds the full count.
      */
-    getICollectionRowsByMarker(marker: string, langCode?: string): Promise<ICollectionRowsResponce | IError>;
+    getICollectionRowsByMarker(marker: string, langCode?: string, userQuery?: ICollectionQuery): Promise<ICollectionRowsResponce | IError>;
     /**
      * Getting one record from the collection.
      * @handleName getICollectionRowByMarkerAndId
@@ -189,13 +190,13 @@ interface ICollectionResponce {
  * @interface ICollectionFormData
  * @property {string} marker - Text identifier (marker) of the form field. Example: "collection_marker".
  * @property {string} type - Type of the form field, for example `"text"`, `"number"` or `"date"`. Example: "number".
- * @property {string} value - Value of the form field. Example: "Collection marker".
+ * @property {string | number | null} value - Value of the form field. Send a string; on reading, `integer`/`float`/`real` fields come back as a `number` — and as `null` when the stored value is not a number (the API stores `"abc"` in a `float` field as is, the SDK does not pass it on). Example: "Collection marker".
  * @description Represents a form data object within a collection, containing a marker, type, and value.
  */
 interface ICollectionFormData {
     marker: string;
     type: string;
-    value: string;
+    value: string | number | null;
 }
 /**
  * Collection form object
@@ -225,7 +226,7 @@ interface ICollectionFormObject {
  * @property {number} id - Object ID. Example: 1.
  * @property {string} createdDate - Creation date of the record. Example: "2023-01-01T00:00:00Z".
  * @property {string} updatedDate - Date the record was last updated. Example: "2023-01-02T00:00:00Z".
- * @property {number | null} [collectionId] - ID of the collection the row belongs to. Example: "product", "order", "etc".
+ * @property {number | null} [collectionId] - ID of the collection the row belongs to. The row list and row-by-id endpoints do not return it. Example: 1.
  * @property {ICollectionFormData[]} formData - Form fields of the collection row.
  * @example
     [
@@ -240,8 +241,7 @@ interface ICollectionFormObject {
  * @property {string | null} [attributeSetIdentifier] - Marker of the attribute set used by the form attached to the collection row, or `null` if there is none. Example: "attributeSet1" or null.
  * @property {string | null} [langCode] - Language code the row was stored under. Example: "en_US".
  * @property {string | null} [formIdentifier] - Marker of the form the row was created from; returned by the create and update row endpoints. Example: "collection_form".
- * @property {string} total - Total number of records. Example: "1".
- * @description Represents a row in a collection, containing various properties such as identifiers, dates, form data, and an optional total value.
+ * @description Represents a row in a collection, containing various properties such as identifiers, dates and form data.
  */
 interface ICollectionRow {
     id: number;
@@ -254,7 +254,6 @@ interface ICollectionRow {
     attributeSetIdentifier?: string | null;
     langCode?: string | null;
     formIdentifier?: string | null;
-    total?: string;
 }
 /**
  * Collection rows response object
@@ -315,4 +314,4 @@ interface ICollectionQuery {
  * @property {number} [offset] - Number of records to skip. Default: 0.
  */
 type ICollectionsListQuery = Pick<ICollectionQuery, 'limit' | 'offset'>;
-export type { ICollectionEntity, ICollectionFormObject, ICollectionIsValid, ICollectionQuery, ICollectionResponce, ICollectionRow, ICollectionRowsResponce, ICollectionsApi, ICollectionsListQuery, };
+export type { ICollectionEntity, ICollectionFormData, ICollectionFormObject, ICollectionIsValid, ICollectionQuery, ICollectionResponce, ICollectionRow, ICollectionRowsResponce, ICollectionsApi, ICollectionsListQuery, };

package/esm/integration-collections/integrationCollectionsSchemas.d.ts

@@ -51,7 +51,6 @@ export declare const CollectionRowSchema: z.ZodObject<{
     attributeSetIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     langCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     formIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    total: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /**
  * Collection rows response schema
@@ -72,7 +71,6 @@ export declare const CollectionRowsResponseSchema: z.ZodObject<{
         attributeSetIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         langCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         formIdentifier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        total: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     total: z.ZodNumber;
 }, z.core.$strip>;

package/esm/integration-collections/integrationCollectionsSchemas.js

@@ -43,7 +43,6 @@ export const CollectionRowSchema = z.object({
     attributeSetIdentifier: z.string().nullable().optional(),
     langCode: z.string().nullable().optional(),
     formIdentifier: z.string().nullable().optional(),
-    total: z.string().optional(),
 });
 /**
  * Collection rows response schema

package/esm/menus/menusApi.js

@@ -27,7 +27,7 @@ export default class MenusApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/menus/getMenusByMarker getMenusByMarker} documentation.
      */
     async getMenusByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${encodeURIComponent(langCode)}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('MenuEntitySchema'));
         return this._normalizeData(validated, langCode);

package/esm/orders/ordersApi.d.ts

@@ -165,6 +165,7 @@ export default class OrdersApi extends AsyncModules implements IOrdersApi {
      * @param {number} [limit] - Maximum number of records to return. Default: 30.
      * @returns {Promise<IOrderStatus[] | IError>} Returns an object with the orders statuses.
      * @throws {IError} When isShell=false and an error occurs during the fetch
+     * @description Get all order statuses of the storage. This method requires user authorization: a guest gets `401 Unauthorized`.
      * @see For more information about configuring the {@link https://js-sdk.oneentry.cloud/docs/category/authprovider authorization module}, see the documentation in the  {@link https://js-sdk.oneentry.cloud/docs/category/authprovider configuration settings section of the SDK}.
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getAllStatusesByStorageMarker getAllStatusesByStorageMarker} documentation.
      */
@@ -211,19 +212,6 @@ export default class OrdersApi extends AsyncModules implements IOrdersApi {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getOrdersByVectorSearch getOrdersByVectorSearch} documentation.
      */
     getOrdersByVectorSearch(body: IOrdersVectorSearch, langCode?: string, offset?: number, limit?: number): Promise<IVectorSearchResponse<IOrdersByMarkerEntity> | IError>;
-    /**
-     * Runs a fetch against the `/orders` base URL instead of the default
-     * `/orders-storage`, then restores the original URL.
-     *
-     * Refund endpoints live under `/api/content/orders`, while this class is based
-     * on `/api/content/orders-storage`. The helper swaps `_url` for the duration of
-     * the call and restores it in `finally`, so the base URL is restored even if
-     * the request throws.
-     * @param {() => Promise<T>} fetcher - Thunk performing the fetch call.
-     * @returns {Promise<T>} The fetcher result.
-     * @template T
-     */
-    private _withOrdersUrl;
     /**
      * Builds the order body the API expects: `formData` wrapped in a map keyed by locale.
      *

package/esm/orders/ordersApi.js

@@ -31,8 +31,8 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getAllOrdersStorage getAllOrdersStorage} documentation.
      */
     async getAllOrdersStorage(langCode = this.state.lang, offset = 0, limit = 30) {
-        const result = await this._fetchGet(`?langCode=${langCode}&limit=${limit}&offset=${offset}`);
-        return this._normalizeData(result);
+        const result = await this._fetchGet(`?langCode=${encodeURIComponent(langCode)}&limit=${encodeURIComponent(String(limit))}&offset=${encodeURIComponent(String(offset))}`);
+        return this._normalizeData(result, langCode);
     }
     /**
      * Getting all orders from the orders storage object created by the user.
@@ -48,10 +48,10 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getAllOrdersByMarker getAllOrdersByMarker} documentation.
      */
     async getAllOrdersByMarker(marker, langCode = this.state.lang, offset = 0, limit = 30) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/orders?langCode=${langCode}&limit=${limit}&offset=${offset}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/orders?langCode=${encodeURIComponent(langCode)}&limit=${encodeURIComponent(String(limit))}&offset=${encodeURIComponent(String(offset))}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('OrdersResponseSchema'));
-        return this._normalizeData(validated);
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Retrieve one order storage object by marker.
@@ -65,8 +65,8 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getOrdersStorageByMarker getOrdersStorageByMarker} documentation.
      */
     async getOrdersStorageByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
-        return this._normalizeData(result);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${encodeURIComponent(langCode)}`);
+        return this._normalizeData(result, langCode);
     }
     /**
      * Getting a single order from the order storage object created by the user.
@@ -81,10 +81,10 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getOrderByMarkerAndId getOrderByMarkerAndId} documentation.
      */
     async getOrderByMarkerAndId(marker, id, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/orders/${id}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/orders/${this._pathSegment(String(id))}?langCode=${encodeURIComponent(langCode)}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('OrderEntitySchema'));
-        return this._normalizeData(validated);
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Getting a single order created by the user, by its own id.
@@ -100,10 +100,10 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getOrderById getOrderById} documentation.
      */
     async getOrderById(id, langCode = this.state.lang) {
-        const result = await this._withOrdersUrl(() => this._fetchGet(`/${id}?langCode=${langCode}`));
+        const result = await this._withBaseUrl(this._ordersUrl)._fetchGet(`/${this._pathSegment(String(id))}?langCode=${encodeURIComponent(langCode)}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('OrderEntitySchema'));
-        return this._normalizeData(validated);
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Preview order calculation with discounts and coupons (without saving).
@@ -117,8 +117,8 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/previewOrder previewOrder} documentation.
      */
     async previewOrder(body, langCode = this.state.lang) {
-        const result = await this._fetchPost(`/orders/preview?langCode=${langCode}`, body);
-        return this._normalizeData(result);
+        const result = await this._fetchPost(`/orders/preview?langCode=${encodeURIComponent(langCode)}`, body);
+        return this._normalizeData(result, langCode);
     }
     /**
      * Creation of an order in the order storage.
@@ -152,7 +152,7 @@ export default class OrdersApi extends AsyncModules {
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/orders`, this._wrapOrderFormData(body, langCode));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('CreateOrderResponseSchema'));
-        return this._normalizeData(validated);
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Changing an order in the orders storage
@@ -185,10 +185,10 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/updateOrderByMarkerAndId updateOrderByMarkerAndId} documentation.
      */
     async updateOrderByMarkerAndId(marker, id, body, langCode = this.state.lang) {
-        const result = await this._fetchPut(`/marker/${this._pathSegment(marker)}/orders/${id}?langCode=${langCode}`, this._wrapOrderFormData(body, langCode));
+        const result = await this._fetchPut(`/marker/${this._pathSegment(marker)}/orders/${this._pathSegment(String(id))}?langCode=${encodeURIComponent(langCode)}`, this._wrapOrderFormData(body, langCode));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('UpdateOrderResponseSchema'));
-        return this._normalizeData(validated);
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Get all orders statuses by Storage marker
@@ -199,6 +199,7 @@ export default class OrdersApi extends AsyncModules {
      * @param {number} [limit] - Maximum number of records to return. Default: 30.
      * @returns {Promise<IOrderStatus[] | IError>} Returns an object with the orders statuses.
      * @throws {IError} When isShell=false and an error occurs during the fetch
+     * @description Get all order statuses of the storage. This method requires user authorization: a guest gets `401 Unauthorized`.
      * @see For more information about configuring the {@link https://js-sdk.oneentry.cloud/docs/category/authprovider authorization module}, see the documentation in the  {@link https://js-sdk.oneentry.cloud/docs/category/authprovider configuration settings section of the SDK}.
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getAllStatusesByStorageMarker getAllStatusesByStorageMarker} documentation.
      */
@@ -210,7 +211,7 @@ export default class OrdersApi extends AsyncModules {
         };
         const data = await this._fetchGet(`/marker/${this._pathSegment(marker)}/order-statuses?` +
             this._queryParamsToString(query));
-        return this._normalizeData(data);
+        return this._normalizeData(data, langCode);
     }
     /**
      * Get all refund requests for an order.
@@ -221,7 +222,7 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/getRefunds getRefunds} documentation.
      */
     async getRefunds(id) {
-        const data = await this._withOrdersUrl(() => this._fetchGet(`/${id}/refund`));
+        const data = await this._withBaseUrl(this._ordersUrl)._fetchGet(`/${this._pathSegment(String(id))}/refund`);
         return this._normalizeData(data);
     }
     /**
@@ -234,7 +235,7 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/createRefundRequest createRefundRequest} documentation.
      */
     async createRefundRequest(id, body) {
-        const data = await this._withOrdersUrl(() => this._fetchPost(`/${id}/refund`, body));
+        const data = await this._withBaseUrl(this._ordersUrl)._fetchPost(`/${this._pathSegment(String(id))}/refund`, body);
         return this._normalizeData(data);
     }
     /**
@@ -246,7 +247,7 @@ export default class OrdersApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/orders/cancelRefundRequest cancelRefundRequest} documentation.
      */
     async cancelRefundRequest(id) {
-        const data = await this._withOrdersUrl(() => this._fetchDelete(`/${id}/refund`));
+        const data = await this._withBaseUrl(this._ordersUrl)._fetchDelete(`/${this._pathSegment(String(id))}/refund`);
         return this._normalizeData(data);
     }
     /**
@@ -268,31 +269,9 @@ export default class OrdersApi extends AsyncModules {
             offset,
             limit,
         };
-        const data = await this._withOrdersUrl(() => this._fetchPost(`/vector/search?` + this._queryParamsToString(query), body));
+        const data = await this._withBaseUrl(this._ordersUrl)._fetchPost(`/vector/search?` + this._queryParamsToString(query), body);
         return this._normalizeData(data, langCode);
     }
-    /**
-     * Runs a fetch against the `/orders` base URL instead of the default
-     * `/orders-storage`, then restores the original URL.
-     *
-     * Refund endpoints live under `/api/content/orders`, while this class is based
-     * on `/api/content/orders-storage`. The helper swaps `_url` for the duration of
-     * the call and restores it in `finally`, so the base URL is restored even if
-     * the request throws.
-     * @param {() => Promise<T>} fetcher - Thunk performing the fetch call.
-     * @returns {Promise<T>} The fetcher result.
-     * @template T
-     */
-    async _withOrdersUrl(fetcher) {
-        const savedUrl = this._url;
-        this._url = this._ordersUrl;
-        try {
-            return await fetcher();
-        }
-        finally {
-            this._url = savedUrl;
-        }
-    }
     /**
      * Builds the order body the API expects: `formData` wrapped in a map keyed by locale.
      *