spaps-sdk 1.6.5 → 1.6.7

package/CHANGELOG.md

@@ -8,6 +8,14 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 
 - No changes yet.
 
+## [1.6.6] - 2026-04-20
+
+- Docs: note the current `dayrate.getCheckoutStatus` SDK gap and align package metadata with the published version.
+
+## [1.6.5] - 2026-04-05
+
+- Docs: align package README metadata with published version.
+
 ## [1.6.3] - 2026-03-29
 
 ### Added

package/README.md

@@ -53,6 +53,9 @@ const issues = await spaps.issueReporting.list({
 console.log(auth.user.id, me.data.email, issues.total);
 ```
 
+Issue-reporting reads are user-scoped in the stock SPAPS API. The SDK accepts `scope: "mine"`
+for explicitness and rejects wider scopes until SPAPS exposes a dedicated tenant queue endpoint.
+
 ## Configuration
 
 Constructor values take precedence over environment variables.
@@ -80,7 +83,7 @@ Relevant environment variables:
 | `payments` | Checkout sessions, products, prices, subscriptions, and crypto helpers |
 | `sessions` | Session lookup, validation, and lifecycle helpers |
 | `secureMessages` | Secure-message create/list helpers |
-| `issueReporting` | Status, history, create, update, and reply flows |
+| `issueReporting` | Status, history, create, update, reply, and voice-token flows |
 | `email` | Template lookup, preview, and send helpers |
 | `entitlements` | User and resource entitlement queries |
 | `dayrate` | Availability and booking helpers |
@@ -107,6 +110,16 @@ await spaps.secureMessages.create({
 });
 ```
 
+### Issue Reporting Voice Token
+
+Browser issue-reporting voice input should request a short-lived token from SPAPS instead of exposing an ElevenLabs API key.
+
+```ts
+const voiceToken = await spaps.issueReporting.createVoiceToken();
+
+console.log(voiceToken.provider, voiceToken.model_id);
+```
+
 ### Permission Helpers With Explicit Admin Config
 
 ```ts
@@ -199,6 +212,13 @@ npm run typecheck:readme
 npm run test:readme
 ```
 
+## Metadata
+
+- `package_name`: `spaps-sdk`
+- `latest_version`: `1.6.6`
+- `minimum_runtime`: `Node.js >=14.0.0`
+- `api_base_url`: `https://api.sweetpotato.dev`
+
 ## About Contributions
 
 > *About Contributions:* Please don't take this the wrong way, but I do not accept outside contributions for any of my projects. I simply don't have the mental bandwidth to review anything, and it's my name on the thing, so I'm responsible for any problems it causes; thus, the risk-reward is highly asymmetric from my perspective. I'd also have to worry about other "stakeholders," which seems unwise for tools I mostly make for myself for free. Feel free to submit issues, and even PRs if you want to illustrate a proposed fix, but know I won't merge them directly. Instead, I'll have Claude or Codex review submissions via `gh` and independently decide whether and how to address them. Bug reports in particular are welcome. Sorry if this offends, but I want to avoid wasted time and hurt feelings. I understand this isn't in sync with the prevailing open-source ethos that seeks community contributions, but it's the only way I can move at this velocity and keep my sanity.

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
-import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
+import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -344,14 +344,15 @@ interface EntitlementCheckResult {
     /** The matching entitlement, if any */
     entitlement?: Entitlement;
 }
+type SupportedIssueReportScope = Extract<IssueReportScope, 'mine'>;
 interface IssueReportListParams {
     status?: IssueReportStatus;
-    scope?: IssueReportScope;
+    scope?: SupportedIssueReportScope;
     limit?: number;
     offset?: number;
 }
 interface IssueReportStatusParams {
-    scope?: IssueReportScope;
+    scope?: SupportedIssueReportScope;
 }
 
 declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
@@ -458,6 +459,10 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
          * Create a new canonical issue report.
          */
         create: (payload: CreateIssueReportRequest) => Promise<IssueReport>;
+        /**
+         * Create a short-lived voice transcription token for issue reporting.
+         */
+        createVoiceToken: () => Promise<IssueReportingVoiceTokenResult>;
         /**
          * Update the note for an unresolved issue report.
          */

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
-import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
+import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -344,14 +344,15 @@ interface EntitlementCheckResult {
     /** The matching entitlement, if any */
     entitlement?: Entitlement;
 }
+type SupportedIssueReportScope = Extract<IssueReportScope, 'mine'>;
 interface IssueReportListParams {
     status?: IssueReportStatus;
-    scope?: IssueReportScope;
+    scope?: SupportedIssueReportScope;
     limit?: number;
     offset?: number;
 }
 interface IssueReportStatusParams {
-    scope?: IssueReportScope;
+    scope?: SupportedIssueReportScope;
 }
 
 declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
@@ -458,6 +459,10 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
          * Create a new canonical issue report.
          */
         create: (payload: CreateIssueReportRequest) => Promise<IssueReport>;
+        /**
+         * Create a short-lived voice transcription token for issue reporting.
+         */
+        createVoiceToken: () => Promise<IssueReportingVoiceTokenResult>;
         /**
          * Update the note for an unresolved issue report.
          */

package/dist/index.js

@@ -503,6 +503,13 @@ var WebSocketAuthHelper = class {
 if (typeof globalThis.fetch === "undefined") {
   require("cross-fetch/polyfill");
 }
+function appendSupportedIssueReportScope(q, scope) {
+  if (scope === void 0) return;
+  if (scope !== "mine") {
+    throw new Error('SPAPS issue reporting currently supports scope="mine" only');
+  }
+  q.append("scope", scope);
+}
 var SPAPSClient = class {
   client;
   apiKey;
@@ -639,7 +646,7 @@ var SPAPSClient = class {
      */
     getStatus: async (params) => {
       const q = new URLSearchParams();
-      if (params?.scope) q.append("scope", params.scope);
+      appendSupportedIssueReportScope(q, params?.scope);
       const qs = q.toString();
       const res = await this.client.get(
         `/api/v1/issue-reports/status${qs ? `?${qs}` : ""}`,
@@ -653,7 +660,7 @@ var SPAPSClient = class {
     list: async (params) => {
       const q = new URLSearchParams();
       if (params?.status) q.append("status", params.status);
-      if (params?.scope) q.append("scope", params.scope);
+      appendSupportedIssueReportScope(q, params?.scope);
       if (params?.limit !== void 0) q.append("limit", String(params.limit));
       if (params?.offset !== void 0) q.append("offset", String(params.offset));
       const qs = q.toString();
@@ -684,6 +691,17 @@ var SPAPSClient = class {
       );
       return this.unwrapApiResponse(res, "Failed to create issue report");
     },
+    /**
+     * Create a short-lived voice transcription token for issue reporting.
+     */
+    createVoiceToken: async () => {
+      const res = await this.client.post(
+        "/api/v1/issue-reports/voice-token",
+        void 0,
+        this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0
+      );
+      return this.unwrapApiResponse(res, "Failed to create issue report voice token");
+    },
     /**
      * Update the note for an unresolved issue report.
      */

package/dist/index.mjs

@@ -473,6 +473,13 @@ var WebSocketAuthHelper = class {
 if (typeof globalThis.fetch === "undefined") {
   __require("cross-fetch/polyfill");
 }
+function appendSupportedIssueReportScope(q, scope) {
+  if (scope === void 0) return;
+  if (scope !== "mine") {
+    throw new Error('SPAPS issue reporting currently supports scope="mine" only');
+  }
+  q.append("scope", scope);
+}
 var SPAPSClient = class {
   client;
   apiKey;
@@ -609,7 +616,7 @@ var SPAPSClient = class {
      */
     getStatus: async (params) => {
       const q = new URLSearchParams();
-      if (params?.scope) q.append("scope", params.scope);
+      appendSupportedIssueReportScope(q, params?.scope);
       const qs = q.toString();
       const res = await this.client.get(
         `/api/v1/issue-reports/status${qs ? `?${qs}` : ""}`,
@@ -623,7 +630,7 @@ var SPAPSClient = class {
     list: async (params) => {
       const q = new URLSearchParams();
       if (params?.status) q.append("status", params.status);
-      if (params?.scope) q.append("scope", params.scope);
+      appendSupportedIssueReportScope(q, params?.scope);
       if (params?.limit !== void 0) q.append("limit", String(params.limit));
       if (params?.offset !== void 0) q.append("offset", String(params.offset));
       const qs = q.toString();
@@ -654,6 +661,17 @@ var SPAPSClient = class {
       );
       return this.unwrapApiResponse(res, "Failed to create issue report");
     },
+    /**
+     * Create a short-lived voice transcription token for issue reporting.
+     */
+    createVoiceToken: async () => {
+      const res = await this.client.post(
+        "/api/v1/issue-reports/voice-token",
+        void 0,
+        this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0
+      );
+      return this.unwrapApiResponse(res, "Failed to create issue report voice token");
+    },
     /**
      * Update the note for an unresolved issue report.
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.6.5",
+  "version": "1.6.7",
   "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking, role-based access control, and dayrate scheduling",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -48,9 +48,9 @@
     "email": "buildooor@gmail.com"
   },
   "dependencies": {
-    "axios": "^1.6.0",
+    "axios": "^1.15.1",
     "cross-fetch": "^4.0.0",
-    "spaps-types": "^1.1.1"
+    "spaps-types": "^1.1.3"
   },
   "devDependencies": {
     "@types/node": "^20.10.0",