spaps-sdk 1.6.4 → 1.6.5

package/README.md

@@ -1,78 +1,69 @@
 # spaps-sdk
 
-TypeScript SDK for the Sweet Potato Authentication & Payment Service.
+Typed TypeScript client for SPAPS-compatible APIs.
 
-## TL;DR
+Examples in this README use placeholders such as `user@example.com`, `admin@example.com`, and `https://api.example.test`. Replace them with values from your own deployment.
 
-**The Problem**: SPAPS consumers need one client that can speak auth, payments, secure messaging, issue reporting, entitlements, and dayrate APIs without rebuilding request plumbing for every app.
-
-**The Solution**: `spaps-sdk` exposes a typed `SPAPSClient` with source-backed namespaces for the major SPAPS surfaces and a small set of permission helpers for app code.
-
-### Why Use `spaps-sdk`?
-
-| Feature | What It Does |
-| --- | --- |
-| Zero-config local mode | Point at `localhost` and the SDK automatically treats it as local mode |
-| Typed namespaces | Use `auth`, `payments`, `sessions`, `secureMessages`, `issueReporting`, `email`, `entitlements`, `dayrate`, `cfo`, and `admin` from one client |
-| Browser and server key support | Configure with `publishableKey`, `secretKey`, or the legacy `apiKey` field |
-| Shared contracts | Re-exports many `spaps-types` definitions so apps can stay on one dependency surface |
-
-## Metadata
-
-- `package_name`: `spaps-sdk`
-- `latest_version`: `1.6.3`
-- `minimum_runtime`: `Node.js >=14.0.0`
-- `api_base_url`: `https://api.sweetpotato.dev`
-
-## Installation
-
-### npm
+## Install
 
 ```bash
 npm install spaps-sdk
 ```
 
-### pnpm
+Alternative package managers:
 
 ```bash
 pnpm add spaps-sdk
+yarn add spaps-sdk
 ```
 
-### yarn
+This package targets `Node.js >=14`.
 
-```bash
-yarn add spaps-sdk
-```
+## When It Fits
+
+| Need | Package gives you |
+| --- | --- |
+| One client for many SPAPS surfaces | `auth`, `payments`, `sessions`, `secureMessages`, `issueReporting`, `email`, `entitlements`, `dayrate`, `admin`, and `cfo` namespaces |
+| Local development without extra config | Localhost URLs automatically enable local mode |
+| Browser and server usage | `publishableKey`, `secretKey`, or legacy `apiKey` support |
+| Shared contracts | Re-exports a large slice of `spaps-types` |
 
-## Quick Example
+## Quick Start
 
-```typescript
-import { SPAPSClient } from 'spaps-sdk';
+```ts
+import { SPAPSClient } from "spaps-sdk";
 
 const spaps = new SPAPSClient({
-  apiUrl: 'http://localhost:3301',
+  apiUrl: "http://localhost:3301",
+  publishableKey: "spaps_pub_example",
 });
 
-const { data } = await spaps.login('user@example.com', 'password');
-console.log('User:', data.user);
+const auth = await spaps.auth.signInWithPassword({
+  email: "user@example.com",
+  password: "correct-horse-battery-staple",
+});
+
+const me = await spaps.getUser();
+const issues = await spaps.issueReporting.list({
+  status: "open",
+  scope: "mine",
+  limit: 20,
+});
 
-if (spaps.isAuthenticated()) {
-  const me = await spaps.getUser();
-  console.log(me.data.email);
-}
+console.log(auth.user.id, me.data.email, issues.total);
 ```
 
 ## Configuration
 
-Constructor values win over environment variables.
+Constructor values take precedence over environment variables.
 
 | Option | Purpose |
 | --- | --- |
-| `apiUrl` | Base API URL. Localhost enables local mode automatically. |
+| `apiUrl` | Base API URL. Localhost values enable local mode automatically |
 | `publishableKey` | Browser-safe key for client-side usage |
-| `secretKey` | Server-side key for full access |
-| `apiKey` | Deprecated legacy key field |
-| `timeout` | Override request timeout |
+| `secretKey` | Server-side key for privileged access |
+| `apiKey` | Legacy key field kept for compatibility |
+| `timeout` | Request timeout override |
 
 Relevant environment variables:
 
@@ -81,84 +72,72 @@ Relevant environment variables:
 - `SPAPS_API_KEY`
 - `NEXT_PUBLIC_SPAPS_API_KEY`
 
-## Client Surface
+## Core Surface
 
-| Namespace | What It Covers |
+| Namespace | Covers |
 | --- | --- |
-| `auth` | Password, wallet, magic-link, refresh, and logout flows |
-| `payments` | Checkout sessions, products, prices, subscriptions, and crypto payment helpers |
-| `sessions` | Current session lookup, validation, revocation, and session lifecycle helpers |
-| `secureMessages` | Create and list secure messages |
-| `issueReporting` | Status, history, create, edit, and reply issue-report flows |
-| `email` | Template lookup, previews, and sends |
+| `auth` | Password, wallet, magic-link, refresh, logout, and password-management flows |
+| `payments` | Checkout sessions, products, prices, subscriptions, and crypto helpers |
+| `sessions` | Session lookup, validation, and lifecycle helpers |
+| `secureMessages` | Secure-message create/list helpers |
+| `issueReporting` | Status, history, create, update, and reply flows |
+| `email` | Template lookup, preview, and send helpers |
 | `entitlements` | User and resource entitlement queries |
 | `dayrate` | Availability and booking helpers |
 | `admin` | Product and pricing admin helpers |
-| `cfo` | CFO-specific endpoints |
+| `cfo` | CFO-facing reporting endpoints |
 
-## Common Flows
+## Common Patterns
 
-### Typed Secure Messaging
+### Typed Secure Messages
 
-```typescript
-type SecureMessageMetadata = { urgency: 'low' | 'high'; tags?: string[] };
+```ts
+type SecureMessageMetadata = { urgency: "low" | "high"; tags?: string[] };
 
 const spaps = new SPAPSClient<SecureMessageMetadata>({
-  apiUrl: 'https://api.sweetpotato.dev',
+  apiUrl: "https://api.example.test",
   secretKey: process.env.SPAPS_API_KEY,
 });
 
 await spaps.secureMessages.create({
-  patientId: '3d6f0a51-8d77-4b38-8248-2d1b2f1f6c7f',
-  practitionerId: 'a3d7f431-6c9d-4cbc-9f78-4e5b6a7c8d9e',
-  content: 'Follow up scheduled for next week.',
-  metadata: { urgency: 'low', tags: ['follow-up'] },
+  patientId: "3d6f0a51-8d77-4b38-8248-2d1b2f1f6c7f",
+  practitionerId: "a3d7f431-6c9d-4cbc-9f78-4e5b6a7c8d9e",
+  content: "Follow up scheduled for next week.",
+  metadata: { urgency: "low", tags: ["follow-up"] },
 });
 ```
 
-### Shared Issue Reporting
-
-```typescript
-spaps.setAccessToken('jwt-token');
-
-const summary = await spaps.issueReporting.getStatus();
-const history = await spaps.issueReporting.list({ status: 'open' });
-
-if (!summary.has_open && history.total === 0) {
-  await spaps.issueReporting.create({
-    target: {
-      component_key: 'patient_protocol_widget',
-      component_label: 'Patient Protocol Widget',
-      page_url: '/patients/123/protocol',
-      metadata: { section: 'daily log' },
-    },
-    note: 'The save action silently fails after I edit today.',
-    reporter_role_hint: 'practitioner',
-  });
-}
-```
+### Permission Helpers With Explicit Admin Config
 
-### Permission Utilities
+```ts
+import {
+  canAccessAdmin,
+  createPermissionChecker,
+  isAdminAccount,
+} from "spaps-sdk";
 
-```typescript
-import { canAccessAdmin, getUserRole, isAdminAccount } from 'spaps-sdk';
+const customAdmins = ["admin@example.com"];
+const checker = createPermissionChecker(customAdmins);
 
-const role = getUserRole('user@example.com');
-const adminCheck = canAccessAdmin({ id: 'user_123', email: 'buildooor@gmail.com' });
-const isAdmin = isAdminAccount('buildooor@gmail.com');
+const role = checker.getRole("staff@example.com");
+const adminCheck = canAccessAdmin(
+  { id: "user_123", email: "admin@example.com" },
+  customAdmins,
+);
+const isAdmin = isAdminAccount("admin@example.com", customAdmins);
 
 console.log(role, adminCheck.allowed, isAdmin);
 ```
 
-### Helper Methods
+### Convenience Helpers
 
-```typescript
-const spaps = new SPAPSClient({ apiUrl: 'http://localhost:3301' });
+```ts
+const spaps = new SPAPSClient({ apiUrl: "http://localhost:3301" });
 
 spaps.isLocalMode();
 spaps.isAuthenticated();
 spaps.getAccessToken();
-spaps.setAccessToken('token');
+spaps.setAccessToken("token");
 await spaps.health();
 ```
 
@@ -177,41 +156,41 @@ npm run test
 
 ### `401 Unauthorized`
 
-Check the access token and key configuration for the environment you are targeting.
+Check the access token, API key choice, and target environment. Browser apps should generally use `publishableKey`, not a server secret.
 
 ### Local mode is not activating
 
-Use a localhost URL such as `http://localhost:3301`, or call `spaps.isLocalMode()` to confirm how the SDK resolved the environment.
+Use a localhost URL such as `http://localhost:3301`, then confirm with `spaps.isLocalMode()`.
 
-### Browser app needs limited access
+### I need shared types in app code
 
-Use `publishableKey` instead of a server-side secret key.
+Import them from `spaps-sdk` if the re-export exists, or install `spaps-types` directly for a narrower dependency.
 
 ## Limitations
 
-- The SDK wraps the current SPAPS surface; it is not an exhaustive code-generated client for every backend route.
+- The SDK is handwritten around the current SPAPS surface. It is not a generated client for every backend route.
 - Some admin and entitlement flows still depend on upstream permissions and token context.
-- The legacy `apiKey` constructor field still exists for compatibility, but new integrations should prefer the explicit key fields.
+- The legacy `apiKey` field remains for compatibility, but new integrations should prefer `publishableKey` or `secretKey`.
 
 ## FAQ
 
 ### Does this work in browsers?
 
-Yes. The package is designed for both browser and server-side usage.
+Yes. The package is intended for both browser and server use.
 
-### Does it include fetch polyfills?
+### Does it include a fetch polyfill?
 
-Yes. It loads `cross-fetch/polyfill` when `fetch` is unavailable.
+Yes. It loads `cross-fetch/polyfill` when `fetch` is missing.
 
-### Can I use it without TypeScript?
+### Can I use it from plain JavaScript?
 
-Yes. The runtime works in JavaScript projects and ships bundled type declarations for TS users.
+Yes. The runtime works in JavaScript projects and ships bundled type declarations for TypeScript users.
 
 ### Does it re-export shared types?
 
 Yes. Many `spaps-types` exports are re-exported for convenience.
 
-### How do I validate README-related examples?
+### How do I validate the README snippets?
 
 Run:
 
@@ -222,7 +201,7 @@ npm run test:readme
 
 ## About Contributions
 
-*About Contributions:* Please don't take this the wrong way, but I do not accept outside contributions for any of my projects. I simply don't have the mental bandwidth to review anything, and it's my name on the thing, so I'm responsible for any problems it causes; thus, the risk-reward is highly asymmetric from my perspective. I'd also have to worry about other "stakeholders," which seems unwise for tools I mostly make for myself for free. Feel free to submit issues, and even PRs if you want to illustrate a proposed fix, but know I won't merge them directly. Instead, I'll have Claude or Codex review submissions via `gh` and independently decide whether and how to address them. Bug reports in particular are welcome. Sorry if this offends, but I want to avoid wasted time and hurt feelings. I understand this isn't in sync with the prevailing open-source ethos that seeks community contributions, but it's the only way I can move at this velocity and keep my sanity.
+> *About Contributions:* Please don't take this the wrong way, but I do not accept outside contributions for any of my projects. I simply don't have the mental bandwidth to review anything, and it's my name on the thing, so I'm responsible for any problems it causes; thus, the risk-reward is highly asymmetric from my perspective. I'd also have to worry about other "stakeholders," which seems unwise for tools I mostly make for myself for free. Feel free to submit issues, and even PRs if you want to illustrate a proposed fix, but know I won't merge them directly. Instead, I'll have Claude or Codex review submissions via `gh` and independently decide whether and how to address them. Bug reports in particular are welcome. Sorry if this offends, but I want to avoid wasted time and hurt feelings. I understand this isn't in sync with the prevailing open-source ethos that seeks community contributions, but it's the only way I can move at this velocity and keep my sanity.
 
 ## License
 

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as spaps_types from 'spaps-types';
-import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
 export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
@@ -346,9 +346,13 @@ interface EntitlementCheckResult {
 }
 interface IssueReportListParams {
     status?: IssueReportStatus;
+    scope?: IssueReportScope;
     limit?: number;
     offset?: number;
 }
+interface IssueReportStatusParams {
+    scope?: IssueReportScope;
+}
 
 declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
     private client;
@@ -441,7 +445,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         /**
          * Return canonical issue-report summary for the shared floating entrypoint.
          */
-        getStatus: () => Promise<IssueReportStatusResult>;
+        getStatus: (params?: IssueReportStatusParams) => Promise<IssueReportStatusResult>;
         /**
          * List the caller's issue reports inside the active application scope.
          */
@@ -929,4 +933,4 @@ declare function createServerClient(secretKey: string, options?: Omit<SPAPSConfi
  */
 declare function detectKeyType(key: string): ApiKeyType | null;
 
-export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type IssueReportListParams, type PermissionCheckResult, PermissionChecker, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, verifyCryptoWebhookSignature };
+export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, verifyCryptoWebhookSignature };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as spaps_types from 'spaps-types';
-import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
 export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
@@ -346,9 +346,13 @@ interface EntitlementCheckResult {
 }
 interface IssueReportListParams {
     status?: IssueReportStatus;
+    scope?: IssueReportScope;
     limit?: number;
     offset?: number;
 }
+interface IssueReportStatusParams {
+    scope?: IssueReportScope;
+}
 
 declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
     private client;
@@ -441,7 +445,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         /**
          * Return canonical issue-report summary for the shared floating entrypoint.
          */
-        getStatus: () => Promise<IssueReportStatusResult>;
+        getStatus: (params?: IssueReportStatusParams) => Promise<IssueReportStatusResult>;
         /**
          * List the caller's issue reports inside the active application scope.
          */
@@ -929,4 +933,4 @@ declare function createServerClient(secretKey: string, options?: Omit<SPAPSConfi
  */
 declare function detectKeyType(key: string): ApiKeyType | null;
 
-export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type IssueReportListParams, type PermissionCheckResult, PermissionChecker, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, verifyCryptoWebhookSignature };
+export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, verifyCryptoWebhookSignature };

package/dist/index.js

@@ -637,9 +637,12 @@ var SPAPSClient = class {
     /**
      * Return canonical issue-report summary for the shared floating entrypoint.
      */
-    getStatus: async () => {
+    getStatus: async (params) => {
+      const q = new URLSearchParams();
+      if (params?.scope) q.append("scope", params.scope);
+      const qs = q.toString();
       const res = await this.client.get(
-        "/api/v1/issue-reports/status",
+        `/api/v1/issue-reports/status${qs ? `?${qs}` : ""}`,
         this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0
       );
       return this.unwrapApiResponse(res, "Failed to get issue report status");
@@ -650,6 +653,7 @@ var SPAPSClient = class {
     list: async (params) => {
       const q = new URLSearchParams();
       if (params?.status) q.append("status", params.status);
+      if (params?.scope) q.append("scope", params.scope);
       if (params?.limit !== void 0) q.append("limit", String(params.limit));
       if (params?.offset !== void 0) q.append("offset", String(params.offset));
       const qs = q.toString();

package/dist/index.mjs

@@ -607,9 +607,12 @@ var SPAPSClient = class {
     /**
      * Return canonical issue-report summary for the shared floating entrypoint.
      */
-    getStatus: async () => {
+    getStatus: async (params) => {
+      const q = new URLSearchParams();
+      if (params?.scope) q.append("scope", params.scope);
+      const qs = q.toString();
       const res = await this.client.get(
-        "/api/v1/issue-reports/status",
+        `/api/v1/issue-reports/status${qs ? `?${qs}` : ""}`,
         this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0
       );
       return this.unwrapApiResponse(res, "Failed to get issue report status");
@@ -620,6 +623,7 @@ var SPAPSClient = class {
     list: async (params) => {
       const q = new URLSearchParams();
       if (params?.status) q.append("status", params.status);
+      if (params?.scope) q.append("scope", params.scope);
       if (params?.limit !== void 0) q.append("limit", String(params.limit));
       if (params?.offset !== void 0) q.append("offset", String(params.offset));
       const qs = q.toString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.6.4",
+  "version": "1.6.5",
   "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking, role-based access control, and dayrate scheduling",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",