skapi-js 2.2.6-beta.1 → 2.2.6-beta.3

package/dist/skapi.d.mts

@@ -691,8 +691,9 @@ type Subscription = {
  */
 type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne' | 'gt' | 'gte' | 'lt' | 'lte';
 /**
- * One row of a ticket condition list: `headers`, `data`, `params` or `user` of a ticket's
- * condition, or `headers`, `data` or `user` of a req action's response condition.
+ * One row of a ticket condition list: `headers`, `body`, `params` or `user` of a ticket's
+ * condition, the `response` rows of a cond action, or `headers`, `data` or `user` of the
+ * response condition Skapi's own rows carry.
  *
  * How a list decides:
  * - Rows on the same key are alternatives: the key passes when any one of them matches.
@@ -701,9 +702,14 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
  * - A field missing from the request is a mismatch for its key, '!=' included, not an error.
  *   The only rows that pass on a missing field are `= undefined` and `!= null`.
  * - Every row is read, in order. For each key the FIRST matching row wins: its `setValueWhenMatch`
- *   applies and its `placeholder` captures, and later rows on that key are skipped. A row that
- *   does not match captures nothing, so several rows on one key, each with its own
- *   `setValueWhenMatch`, followed by a catch-all row, work as a lookup table.
+ *   replaces the value (in the data itself where the field exists) and its `placeholder` captures
+ *   the result. The later match rows on that key are skipped without being evaluated, so nothing
+ *   is re-checked against the replaced value; a later row on another key whose path runs through
+ *   the replaced field reads the replacement. A row that does not match captures nothing, so
+ *   several rows on one key, each with its own `setValueWhenMatch`, followed by a catch-all row,
+ *   work as a lookup table. At the ticket's condition keys and values are literal: `${...}` inside
+ *   a row is plain text. In a cond action the key is literal but `value` and `setValueWhenMatch`
+ *   may hold `${response...}` and `${placeholder[NAME]}`, resolved before the comparison.
  * - A capture-only row (a `placeholder` and no `operator`) never counts toward passing. It
  *   captures whenever its field exists.
  * - Header names ignore case, and header values are always strings. Query string values are
@@ -711,7 +717,7 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
  *   `?code=LAUNCH24` the string "LAUNCH24". '=' is strict, so it compares the parsed value: a
  *   `params` row needs `value: 2`, not "2", to match `?qty=2`.
  *
- * null and undefined (`data` and `params` rows only, in a response condition too):
+ * null and undefined (`body` and `params` rows only, in a response condition too):
  * - `= null` passes when the field is present and null. `!= null` passes otherwise, a missing field included.
  * - `= undefined` passes when the field is missing. `!= undefined` passes when it is present, null included.
  * - '>', '>=', '<' and '<=' never pass with null or undefined.
@@ -721,9 +727,9 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
 type TicketConditionRow = {
     /**
      * Where the row looks, relative to its own list and written without `${ }`:
-     * - `data` rows: a path into the request body. "id" is the body's `id`, "order[id]" is `order.id`.
+     * - `body` rows: a path into the request body. "id" is the body's `id`, "order[id]" is `order.id`.
      * - `params` rows: a path into the query string, read the same way.
-     * - `data` rows of a req action's response condition: a path into the response body ("status" is the response's `status`).
+     * - `response` rows of a cond action: a path into the enclosing action's answer ("body[status]" is a response's body.status, "record_id" a posted record's id); "" is the whole answer as text.
      * - `headers` rows: the header name, matched case-insensitively.
      * - `user` rows: the consumer attribute name.
      *
@@ -735,13 +741,13 @@ type TicketConditionRow = {
     /**
      * A literal, never templated. A list is read as described in TicketConditionOperator.
      * null, a list containing null, and undefined (an `operator` with no `value` key) are for
-     * `data` and `params` rows only.
+     * `body` and `params` rows only.
      */
     value?: string | number | boolean | null | undefined | Array<string | number | boolean | null>;
-    /** `data` and `params` rows only. When this row is the first matching row of its key, the value at `key` in the request data is replaced by this before anything else reads it. null replaces nothing. */
+    /** `body` and `params` rows only. When this row is the first matching row of its key, the value at `key` in the request data is replaced by this before anything else reads it. null replaces nothing. */
     setValueWhenMatch?: any;
     /**
-     * `data` and `params` rows only. Remembers the value at `key` under this name, and the
+     * `body` and `params` rows only. Remembers the value at `key` under this name, and the
      * actions read it as `${placeholder[NAME]}`. A match row captures only when it is the first
      * matching row of its key. A field that is missing captures nothing. Must match
      * ^[A-Za-z_][A-Za-z0-9_]*$.
@@ -827,7 +833,8 @@ type TicketCondition = {
     /** Rows against the request headers. See TicketConditionRow. Every row compares with a value: null, or no `value`, is refused. */
     headers?: TicketConditionRow[];
     /** Rows against the request body. Refused when `method` is 'GET': a GET request has no body. */
-    data?: TicketConditionRow[];
+    /** Rows against the request body ("data" before 2026-10-09; registration still accepts that name and stores "body"). */
+    body?: TicketConditionRow[];
     /** Rows against the query string, read on GET and on POST. */
     params?: TicketConditionRow[];
     /**
@@ -845,13 +852,15 @@ type TicketCondition = {
     record_access?: string;
 };
 /**
- * What a `req` action checks on the response before its nested actions run: `headers` and
- * `data` rows work as in the ticket's condition (captures and `setValueWhenMatch` included).
- * `headers` rows read the response headers and `data` row keys are paths into the parsed
- * response body. `user` and `record_access` still check the consumer, so they only work for
- * signed requests. A response that is not 2xx fails before this is checked.
+ * Skapi's own billing rows only (the super master registers them): the response check a `req`
+ * carried before 2026-10-09. Anyone else checks a response with a cond action in the req's
+ * Then chain. `headers` rows read the response headers and `data` row keys are paths into the
+ * parsed body (they keep that name here: the ticket's own body rows are `body`); `user` and
+ * `record_access` check the consumer.
  */
-type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user' | 'record_access'>;
+type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'user' | 'record_access'> & {
+    data?: TicketConditionRow[];
+};
 /**
  * One step of a ticket's action chain. Actions run in order. When an action fails its `err`
  * chain runs and the consumption stops. Nothing is rolled back.
@@ -864,14 +873,14 @@ type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user'
  *
  * | Reference | Reads |
  * |---|---|
- * | `${data}`, `${data[key]}` | The incoming request body (a text body too), or one key of it: `${data[id]}` is the body's `id`, `${data[order][id]}` its `order.id`. Always the incoming body, also in nested actions. |
+ * | `${body}`, `${body[key]}` | The incoming request body (a text body too), or one key of it: `${body[id]}` is the body's `id`, `${body[order][id]}` its `order.id`. Always the incoming body, also in nested actions. |
  * | `${params}`, `${params[key]}` | The incoming query string, or one key of it. |
  * | `${headers[name]}` | An incoming header, name case-insensitive. Authorization and Cookie read "<redacted>". |
  * | `${placeholder[NAME]}` | A value a condition row captured with `placeholder`. |
  * | `${user}`, `${user[key]}` | The signed-in user's attributes. Signed requests only. |
  * | `${ip}`, `${user_agent}`, `${method}` | The caller's IP address, User-Agent and HTTP method. |
  * | `${record_access}` | The record ID the condition's `record_access` names. Signed requests only. |
- * | `${response}`, `${response[key]}` | The answer of the enclosing action, in its Then chain (`actions`) and the `err` chains inside it: the record a pstr posted, the parsed body of a req's response, the SUCCESS text of acsg and acsr. |
+ * | `${response}`, `${response[key]}` | The answer of the enclosing action, in its Then chain (`actions`) and the `err` chains inside it: the record a pstr posted, the response of a req ({ status, headers, body }), the SUCCESS text of acsg, acsr, mail and nlsd. |
  * | `${error}`, `${error[key]}` | In an `err` chain, the failure: `code`, `message`, `detail`, `action` (the act) and `path`. |
  * | `${ticket}`, `${ticket[key]}` | This consumption: `id`, `service`, `owner`, `consume_id`, `timestamp` and `hash`. |
  * | `${CLIENT_SECRET}` | Reserved. See `secretName` on the req action. |
@@ -879,19 +888,21 @@ type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user'
  * Registration refuses anything else inside `${ }` (an unknown root such as `${id}`, keys under
  * a root that takes none such as `${ip[x]}`, `${placeholder}` or `${headers}` without a key,
  * broken brackets) with a message listing these forms, `${result}` (gone: an answer is read as
- * `${response}` in the action's Then chain, or captured there by a Condition action), and a reference written
+ * `${response}` in the action's Then chain, or captured there by a Check answer action), and a reference written
  * where it can never resolve (`${response}` outside a Then chain, `${error}` outside an `err`
  * chain, `${record_access}` when the condition names no record). When the action runs, a
  * reference that does not resolve fails it before it does anything: PATH_NOT_FOUND,
  * PLACEHOLDER_MISSING for a placeholder that was never captured, or AUTH_REQUIRED for `${user}`
  * on a request that is not signed in. Its `err` chain runs and the consumption stops.
  *
- * Every action but resp and cond answers something (the record, the response body, a SUCCESS
+ * Every action but resp and cond answers something (the record, the response as { status, headers, body }, a SUCCESS
  * text) and may carry a Then chain (`actions`, reading the answer as `${response}`). A Condition
  * action in that chain checks the answer: its `response` rows read it whole (key "") or by key,
  * whatever its shape. `retry: true` on acsg, acsr, pstr, req, mail and nlsd tries a failure again,
  * up to 3 more times, 1, 2 and 4 seconds apart, while the time budget holds them; never for a
- * failure inside Then.
+ * failure inside Then, nor for a refusal waiting cannot change (a bad address, a missing template
+ * or newsletter, the month's e-mail sends used up). An e-mail or newsletter already queued is
+ * never sent twice: bookkeeping that fails afterwards is a `warning` on the log row, not a failure.
  */
 type TicketAction = {
     /** Set the access group of a user. Answers the SUCCESS text the grant returns. */
@@ -947,11 +958,11 @@ type TicketAction = {
     err?: TicketAction[];
     retry?: boolean;
 } | {
-    /** HTTP request with its own response condition and nested chain. Answers the parsed response body. */
+    /** HTTP request with a nested chain on its response. Answers the whole response: { status, headers, body }. */
     act: 'req';
     exe: {
         /**
-         * http:// or https:// with a hostname, such as "https://api.example.com/orders/${data[id]}".
+         * http:// or https:// with a hostname, such as "https://api.example.com/orders/${body[id]}".
          * The scheme is always written out, so a URL that is one whole reference is refused.
          * No IP literal, no userinfo, never under the api domain. Redirects are not followed.
          * A value put into the URL with `${...}` is percent-encoded, so it cannot add path
@@ -1012,12 +1023,14 @@ type TicketAction = {
         };
         /** Legacy. Registration moves these rows to the end of `condition.data`. */
         match?: TicketConditionRow[];
-        /** Skapi's own billing rows only. A response check is a Condition action in `actions`, whose `response` rows read the answer. */
+        /** Skapi's own billing rows only. A response check is a Check answer action (cond) in `actions`, whose `response` rows read the answer. */
         condition?: TicketResponseCondition;
         /**
-         * Nested chain, run when the response passes `condition`. It reads the response body
-         * as `${response}` and `${response[key]}`, while `${data}` is still the incoming
-         * request body. Any action can nest, including another req with its own `secretName`.
+         * Nested chain, run on an answer below 300. It reads the response as `${response}`:
+         * `${response[status]}`, `${response[headers][content-type]}` (header names in
+         * lowercase) and `${response[body][key]}`, while `${body}` is still the incoming
+         * request body. A cond in it checks the response. Any action can nest, including
+         * another req with its own `secretName`.
          */
         actions?: TicketAction[];
     };
@@ -1034,10 +1047,10 @@ type TicketAction = {
     exe: {
         /** The template's ID, as the Custom tab and the upload reply show it. Literal; it must be stored when the ticket is registered. */
         template: string;
-        /** The recipient: one address, or a reference that gives one, such as "${user[email]}" or "${data[email]}". */
+        /** The recipient: one address, or a reference that gives one, such as "${user[email]}" or "${body[email]}". */
         to: string;
         /**
-         * Values for the placeholders the template carries, by name: { "order": "${data[order][id]}" } fills
+         * Values for the placeholders the template carries, by name: { "order": "${body[order][id]}" } fills
          * ${order}. Templated. "service_name" and "email" (the recipient) are filled by default and may be
          * overwritten here. Up to 30.
          */
@@ -1089,29 +1102,22 @@ type TicketAction = {
     err?: TicketAction[];
 } | {
     /**
-     * Condition: rows inside a chain, under the rules of the ticket's own condition. A part
-     * that fails fails the chain here with CONDITION_FAILED (the action's `err` chain runs).
-     * Answers nothing. `response` rows only inside a Then chain, `error` rows only inside an
-     * `err` chain, `placeholder` rows name placeholders (and may compare with null).
+     * Check answer: rows on the answer of the action whose Then chain this is, under the
+     * rules of the ticket's own condition rows. A key no row matches fails the chain here with
+     * CONDITION_FAILED (the enclosing action's `err` chain runs). Answers nothing. Inside a
+     * Then chain only.
      */
     act: 'cond';
     exe: {
-        data?: TicketConditionRow[];
-        params?: TicketConditionRow[];
-        headers?: TicketCondition['headers'];
-        ip?: TicketCondition['ip'];
-        user_agent?: TicketCondition['user_agent'];
-        user?: TicketCondition['user'];
-        record_access?: string;
-        placeholder?: {
-            key: string;
-            operator: TicketConditionOperator;
-            value: any;
-        }[];
-        /** Rows on the enclosing action's answer, inside a Then chain only: a key reads a field, "" the whole answer as text. */
-        response?: TicketConditionRow[];
-        /** Rows on the failure, inside an err chain only: code, message, detail, action, path, or "" for the whole error as text. */
-        error?: TicketConditionRow[];
+        /**
+         * Rows on the answer of the action whose Then chain this Condition is in, whatever its shape: a key is
+         * a path in the answer ("record_id" on a posted record, "body[status]" or "headers[content-type]" on a
+         * response), "" the whole answer as text. `value` and `setValueWhenMatch` may hold `${response...}` and
+         * `${placeholder[NAME]}`, resolved right before the comparison; any other reference is refused. A row's
+         * placeholder captures the replaced value when the row has one. A key no row matches fails the chain
+         * here with CONDITION_FAILED. Inside a Then chain only; answers nothing.
+         */
+        response: TicketConditionRow[];
     };
     err?: TicketAction[];
 };
@@ -1153,6 +1159,15 @@ type Ticket = {
      * https://docs.skapi.com/deprecated/deprecated.html#tickets-saved-before-this-release
      */
     legacy?: boolean;
+    /**
+     * The rules the ticket was saved under. 2: an HTTP request's answer is the whole response
+     * ({ status, headers, body }). Absent on a ticket saved before 2026-10-09: its req actions
+     * keep answering the body alone, as it was written to read them, until it is registered
+     * again (the dashboard moves such references under [body] when the ticket is opened).
+     * Returned to the project owner. See
+     * https://docs.skapi.com/deprecated/deprecated.html#a-request-s-answer-was-its-body
+     */
+    rules_version?: number;
 };
 type TicketErrorCode = 'INVALID_SERVICE' | 'SERVICE_DISABLED' | 'TICKET_NOT_FOUND' | 'TICKET_EXPIRED' | 'TICKET_EXHAUSTED' | 'USER_LIMIT_REACHED' | 'ISSUER_CANNOT_CONSUME' | 'AUTH_REQUIRED' | 'METHOD_NOT_ALLOWED' | 'CONDITION_FAILED' | 'PATH_NOT_FOUND' | 'PLACEHOLDER_MISSING' | 'REQUEST_FAILED' | 'TIMEOUT' | 'ACTION_FAILED' | 'ACTION_FORBIDDEN' | 'QUOTA_EXCEEDED' | 'ALREADY_RESPONDED' | 'INTERNAL_ERROR';
 /**

package/dist/skapi.d.ts

@@ -691,8 +691,9 @@ type Subscription = {
  */
 type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne' | 'gt' | 'gte' | 'lt' | 'lte';
 /**
- * One row of a ticket condition list: `headers`, `data`, `params` or `user` of a ticket's
- * condition, or `headers`, `data` or `user` of a req action's response condition.
+ * One row of a ticket condition list: `headers`, `body`, `params` or `user` of a ticket's
+ * condition, the `response` rows of a cond action, or `headers`, `data` or `user` of the
+ * response condition Skapi's own rows carry.
  *
  * How a list decides:
  * - Rows on the same key are alternatives: the key passes when any one of them matches.
@@ -701,9 +702,14 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
  * - A field missing from the request is a mismatch for its key, '!=' included, not an error.
  *   The only rows that pass on a missing field are `= undefined` and `!= null`.
  * - Every row is read, in order. For each key the FIRST matching row wins: its `setValueWhenMatch`
- *   applies and its `placeholder` captures, and later rows on that key are skipped. A row that
- *   does not match captures nothing, so several rows on one key, each with its own
- *   `setValueWhenMatch`, followed by a catch-all row, work as a lookup table.
+ *   replaces the value (in the data itself where the field exists) and its `placeholder` captures
+ *   the result. The later match rows on that key are skipped without being evaluated, so nothing
+ *   is re-checked against the replaced value; a later row on another key whose path runs through
+ *   the replaced field reads the replacement. A row that does not match captures nothing, so
+ *   several rows on one key, each with its own `setValueWhenMatch`, followed by a catch-all row,
+ *   work as a lookup table. At the ticket's condition keys and values are literal: `${...}` inside
+ *   a row is plain text. In a cond action the key is literal but `value` and `setValueWhenMatch`
+ *   may hold `${response...}` and `${placeholder[NAME]}`, resolved before the comparison.
  * - A capture-only row (a `placeholder` and no `operator`) never counts toward passing. It
  *   captures whenever its field exists.
  * - Header names ignore case, and header values are always strings. Query string values are
@@ -711,7 +717,7 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
  *   `?code=LAUNCH24` the string "LAUNCH24". '=' is strict, so it compares the parsed value: a
  *   `params` row needs `value: 2`, not "2", to match `?qty=2`.
  *
- * null and undefined (`data` and `params` rows only, in a response condition too):
+ * null and undefined (`body` and `params` rows only, in a response condition too):
  * - `= null` passes when the field is present and null. `!= null` passes otherwise, a missing field included.
  * - `= undefined` passes when the field is missing. `!= undefined` passes when it is present, null included.
  * - '>', '>=', '<' and '<=' never pass with null or undefined.
@@ -721,9 +727,9 @@ type TicketConditionOperator = '=' | '!=' | '>' | '>=' | '<' | '<=' | 'eq' | 'ne
 type TicketConditionRow = {
     /**
      * Where the row looks, relative to its own list and written without `${ }`:
-     * - `data` rows: a path into the request body. "id" is the body's `id`, "order[id]" is `order.id`.
+     * - `body` rows: a path into the request body. "id" is the body's `id`, "order[id]" is `order.id`.
      * - `params` rows: a path into the query string, read the same way.
-     * - `data` rows of a req action's response condition: a path into the response body ("status" is the response's `status`).
+     * - `response` rows of a cond action: a path into the enclosing action's answer ("body[status]" is a response's body.status, "record_id" a posted record's id); "" is the whole answer as text.
      * - `headers` rows: the header name, matched case-insensitively.
      * - `user` rows: the consumer attribute name.
      *
@@ -735,13 +741,13 @@ type TicketConditionRow = {
     /**
      * A literal, never templated. A list is read as described in TicketConditionOperator.
      * null, a list containing null, and undefined (an `operator` with no `value` key) are for
-     * `data` and `params` rows only.
+     * `body` and `params` rows only.
      */
     value?: string | number | boolean | null | undefined | Array<string | number | boolean | null>;
-    /** `data` and `params` rows only. When this row is the first matching row of its key, the value at `key` in the request data is replaced by this before anything else reads it. null replaces nothing. */
+    /** `body` and `params` rows only. When this row is the first matching row of its key, the value at `key` in the request data is replaced by this before anything else reads it. null replaces nothing. */
     setValueWhenMatch?: any;
     /**
-     * `data` and `params` rows only. Remembers the value at `key` under this name, and the
+     * `body` and `params` rows only. Remembers the value at `key` under this name, and the
      * actions read it as `${placeholder[NAME]}`. A match row captures only when it is the first
      * matching row of its key. A field that is missing captures nothing. Must match
      * ^[A-Za-z_][A-Za-z0-9_]*$.
@@ -827,7 +833,8 @@ type TicketCondition = {
     /** Rows against the request headers. See TicketConditionRow. Every row compares with a value: null, or no `value`, is refused. */
     headers?: TicketConditionRow[];
     /** Rows against the request body. Refused when `method` is 'GET': a GET request has no body. */
-    data?: TicketConditionRow[];
+    /** Rows against the request body ("data" before 2026-10-09; registration still accepts that name and stores "body"). */
+    body?: TicketConditionRow[];
     /** Rows against the query string, read on GET and on POST. */
     params?: TicketConditionRow[];
     /**
@@ -845,13 +852,15 @@ type TicketCondition = {
     record_access?: string;
 };
 /**
- * What a `req` action checks on the response before its nested actions run: `headers` and
- * `data` rows work as in the ticket's condition (captures and `setValueWhenMatch` included).
- * `headers` rows read the response headers and `data` row keys are paths into the parsed
- * response body. `user` and `record_access` still check the consumer, so they only work for
- * signed requests. A response that is not 2xx fails before this is checked.
+ * Skapi's own billing rows only (the super master registers them): the response check a `req`
+ * carried before 2026-10-09. Anyone else checks a response with a cond action in the req's
+ * Then chain. `headers` rows read the response headers and `data` row keys are paths into the
+ * parsed body (they keep that name here: the ticket's own body rows are `body`); `user` and
+ * `record_access` check the consumer.
  */
-type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user' | 'record_access'>;
+type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'user' | 'record_access'> & {
+    data?: TicketConditionRow[];
+};
 /**
  * One step of a ticket's action chain. Actions run in order. When an action fails its `err`
  * chain runs and the consumption stops. Nothing is rolled back.
@@ -864,14 +873,14 @@ type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user'
  *
  * | Reference | Reads |
  * |---|---|
- * | `${data}`, `${data[key]}` | The incoming request body (a text body too), or one key of it: `${data[id]}` is the body's `id`, `${data[order][id]}` its `order.id`. Always the incoming body, also in nested actions. |
+ * | `${body}`, `${body[key]}` | The incoming request body (a text body too), or one key of it: `${body[id]}` is the body's `id`, `${body[order][id]}` its `order.id`. Always the incoming body, also in nested actions. |
  * | `${params}`, `${params[key]}` | The incoming query string, or one key of it. |
  * | `${headers[name]}` | An incoming header, name case-insensitive. Authorization and Cookie read "<redacted>". |
  * | `${placeholder[NAME]}` | A value a condition row captured with `placeholder`. |
  * | `${user}`, `${user[key]}` | The signed-in user's attributes. Signed requests only. |
  * | `${ip}`, `${user_agent}`, `${method}` | The caller's IP address, User-Agent and HTTP method. |
  * | `${record_access}` | The record ID the condition's `record_access` names. Signed requests only. |
- * | `${response}`, `${response[key]}` | The answer of the enclosing action, in its Then chain (`actions`) and the `err` chains inside it: the record a pstr posted, the parsed body of a req's response, the SUCCESS text of acsg and acsr. |
+ * | `${response}`, `${response[key]}` | The answer of the enclosing action, in its Then chain (`actions`) and the `err` chains inside it: the record a pstr posted, the response of a req ({ status, headers, body }), the SUCCESS text of acsg, acsr, mail and nlsd. |
  * | `${error}`, `${error[key]}` | In an `err` chain, the failure: `code`, `message`, `detail`, `action` (the act) and `path`. |
  * | `${ticket}`, `${ticket[key]}` | This consumption: `id`, `service`, `owner`, `consume_id`, `timestamp` and `hash`. |
  * | `${CLIENT_SECRET}` | Reserved. See `secretName` on the req action. |
@@ -879,19 +888,21 @@ type TicketResponseCondition = Pick<TicketCondition, 'headers' | 'data' | 'user'
  * Registration refuses anything else inside `${ }` (an unknown root such as `${id}`, keys under
  * a root that takes none such as `${ip[x]}`, `${placeholder}` or `${headers}` without a key,
  * broken brackets) with a message listing these forms, `${result}` (gone: an answer is read as
- * `${response}` in the action's Then chain, or captured there by a Condition action), and a reference written
+ * `${response}` in the action's Then chain, or captured there by a Check answer action), and a reference written
  * where it can never resolve (`${response}` outside a Then chain, `${error}` outside an `err`
  * chain, `${record_access}` when the condition names no record). When the action runs, a
  * reference that does not resolve fails it before it does anything: PATH_NOT_FOUND,
  * PLACEHOLDER_MISSING for a placeholder that was never captured, or AUTH_REQUIRED for `${user}`
  * on a request that is not signed in. Its `err` chain runs and the consumption stops.
  *
- * Every action but resp and cond answers something (the record, the response body, a SUCCESS
+ * Every action but resp and cond answers something (the record, the response as { status, headers, body }, a SUCCESS
  * text) and may carry a Then chain (`actions`, reading the answer as `${response}`). A Condition
  * action in that chain checks the answer: its `response` rows read it whole (key "") or by key,
  * whatever its shape. `retry: true` on acsg, acsr, pstr, req, mail and nlsd tries a failure again,
  * up to 3 more times, 1, 2 and 4 seconds apart, while the time budget holds them; never for a
- * failure inside Then.
+ * failure inside Then, nor for a refusal waiting cannot change (a bad address, a missing template
+ * or newsletter, the month's e-mail sends used up). An e-mail or newsletter already queued is
+ * never sent twice: bookkeeping that fails afterwards is a `warning` on the log row, not a failure.
  */
 type TicketAction = {
     /** Set the access group of a user. Answers the SUCCESS text the grant returns. */
@@ -947,11 +958,11 @@ type TicketAction = {
     err?: TicketAction[];
     retry?: boolean;
 } | {
-    /** HTTP request with its own response condition and nested chain. Answers the parsed response body. */
+    /** HTTP request with a nested chain on its response. Answers the whole response: { status, headers, body }. */
     act: 'req';
     exe: {
         /**
-         * http:// or https:// with a hostname, such as "https://api.example.com/orders/${data[id]}".
+         * http:// or https:// with a hostname, such as "https://api.example.com/orders/${body[id]}".
          * The scheme is always written out, so a URL that is one whole reference is refused.
          * No IP literal, no userinfo, never under the api domain. Redirects are not followed.
          * A value put into the URL with `${...}` is percent-encoded, so it cannot add path
@@ -1012,12 +1023,14 @@ type TicketAction = {
         };
         /** Legacy. Registration moves these rows to the end of `condition.data`. */
         match?: TicketConditionRow[];
-        /** Skapi's own billing rows only. A response check is a Condition action in `actions`, whose `response` rows read the answer. */
+        /** Skapi's own billing rows only. A response check is a Check answer action (cond) in `actions`, whose `response` rows read the answer. */
         condition?: TicketResponseCondition;
         /**
-         * Nested chain, run when the response passes `condition`. It reads the response body
-         * as `${response}` and `${response[key]}`, while `${data}` is still the incoming
-         * request body. Any action can nest, including another req with its own `secretName`.
+         * Nested chain, run on an answer below 300. It reads the response as `${response}`:
+         * `${response[status]}`, `${response[headers][content-type]}` (header names in
+         * lowercase) and `${response[body][key]}`, while `${body}` is still the incoming
+         * request body. A cond in it checks the response. Any action can nest, including
+         * another req with its own `secretName`.
          */
         actions?: TicketAction[];
     };
@@ -1034,10 +1047,10 @@ type TicketAction = {
     exe: {
         /** The template's ID, as the Custom tab and the upload reply show it. Literal; it must be stored when the ticket is registered. */
         template: string;
-        /** The recipient: one address, or a reference that gives one, such as "${user[email]}" or "${data[email]}". */
+        /** The recipient: one address, or a reference that gives one, such as "${user[email]}" or "${body[email]}". */
         to: string;
         /**
-         * Values for the placeholders the template carries, by name: { "order": "${data[order][id]}" } fills
+         * Values for the placeholders the template carries, by name: { "order": "${body[order][id]}" } fills
          * ${order}. Templated. "service_name" and "email" (the recipient) are filled by default and may be
          * overwritten here. Up to 30.
          */
@@ -1089,29 +1102,22 @@ type TicketAction = {
     err?: TicketAction[];
 } | {
     /**
-     * Condition: rows inside a chain, under the rules of the ticket's own condition. A part
-     * that fails fails the chain here with CONDITION_FAILED (the action's `err` chain runs).
-     * Answers nothing. `response` rows only inside a Then chain, `error` rows only inside an
-     * `err` chain, `placeholder` rows name placeholders (and may compare with null).
+     * Check answer: rows on the answer of the action whose Then chain this is, under the
+     * rules of the ticket's own condition rows. A key no row matches fails the chain here with
+     * CONDITION_FAILED (the enclosing action's `err` chain runs). Answers nothing. Inside a
+     * Then chain only.
      */
     act: 'cond';
     exe: {
-        data?: TicketConditionRow[];
-        params?: TicketConditionRow[];
-        headers?: TicketCondition['headers'];
-        ip?: TicketCondition['ip'];
-        user_agent?: TicketCondition['user_agent'];
-        user?: TicketCondition['user'];
-        record_access?: string;
-        placeholder?: {
-            key: string;
-            operator: TicketConditionOperator;
-            value: any;
-        }[];
-        /** Rows on the enclosing action's answer, inside a Then chain only: a key reads a field, "" the whole answer as text. */
-        response?: TicketConditionRow[];
-        /** Rows on the failure, inside an err chain only: code, message, detail, action, path, or "" for the whole error as text. */
-        error?: TicketConditionRow[];
+        /**
+         * Rows on the answer of the action whose Then chain this Condition is in, whatever its shape: a key is
+         * a path in the answer ("record_id" on a posted record, "body[status]" or "headers[content-type]" on a
+         * response), "" the whole answer as text. `value` and `setValueWhenMatch` may hold `${response...}` and
+         * `${placeholder[NAME]}`, resolved right before the comparison; any other reference is refused. A row's
+         * placeholder captures the replaced value when the row has one. A key no row matches fails the chain
+         * here with CONDITION_FAILED. Inside a Then chain only; answers nothing.
+         */
+        response: TicketConditionRow[];
     };
     err?: TicketAction[];
 };
@@ -1153,6 +1159,15 @@ type Ticket = {
      * https://docs.skapi.com/deprecated/deprecated.html#tickets-saved-before-this-release
      */
     legacy?: boolean;
+    /**
+     * The rules the ticket was saved under. 2: an HTTP request's answer is the whole response
+     * ({ status, headers, body }). Absent on a ticket saved before 2026-10-09: its req actions
+     * keep answering the body alone, as it was written to read them, until it is registered
+     * again (the dashboard moves such references under [body] when the ticket is opened).
+     * Returned to the project owner. See
+     * https://docs.skapi.com/deprecated/deprecated.html#a-request-s-answer-was-its-body
+     */
+    rules_version?: number;
 };
 type TicketErrorCode = 'INVALID_SERVICE' | 'SERVICE_DISABLED' | 'TICKET_NOT_FOUND' | 'TICKET_EXPIRED' | 'TICKET_EXHAUSTED' | 'USER_LIMIT_REACHED' | 'ISSUER_CANNOT_CONSUME' | 'AUTH_REQUIRED' | 'METHOD_NOT_ALLOWED' | 'CONDITION_FAILED' | 'PATH_NOT_FOUND' | 'PLACEHOLDER_MISSING' | 'REQUEST_FAILED' | 'TIMEOUT' | 'ACTION_FAILED' | 'ACTION_FORBIDDEN' | 'QUOTA_EXCEEDED' | 'ALREADY_RESPONDED' | 'INTERNAL_ERROR';
 /**