washday-sdk 1.6.48 → 1.6.49

package/dist/api/order/get.js

@@ -43,6 +43,7 @@ export const getList = function (params, options) {
                 'fetchSection',
                 'cfdiId',
                 'customerId',
+                'assignedEmployee',
             ], params);
             // ], { ...params, q: params.q ? encodeURIComponent(params.q) : undefined });
             return yield this.axiosInstance.get(`${GET_SET_ORDER}?${queryParams}`, config);

package/docs/domain-audit-app-washday-mx.md

@@ -0,0 +1,90 @@
+# Domain Audit — app.washday.mx
+
+## Repo
+
+washday-sdk
+
+## Summary
+
+- Total direct `app.washday.mx` references: 0
+- Total `washday.mx` references: 2
+- Total `washdaypos.com` references: 0
+- Highest-risk areas: no `app.washday.mx` usage found; SDK API base URLs are hardcoded to Heroku backend hosts and should be reviewed separately from the app-domain migration.
+- Recommended next step: No app-domain change is needed in this repo for the current audit; keep redirect URI support compatible with frontend/backend migration work.
+
+## Findings by category
+
+### 1. Production app links / redirects
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| _None found_ |  |  | No `app.washday.mx` production app links found. |  |  |
+
+### 2. Auth / OAuth / callback URLs
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| `src/api/integrations/post.ts` | 7 | `redirectUri` | SDK method accepts caller-provided redirect URI for integration OAuth. | Low | Support both app.washday.mx and app.washdaypos.com |
+
+### 3. Payments / billing redirects
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| _None found_ |  |  | No Washday app-domain payment redirects found. |  |  |
+
+### 4. Emails / notifications / templates
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| `test/auth.forgotPasswordBinding.test.ts` | 33, 38 | `rene@washday.mx` | Test email fixture for forgot-password binding. | Low | Email domain — keep washday.mx for now |
+
+### 5. CORS / allowed origins / security
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| `src/api/axiosInstance.ts` | 7-10 | `DEV_BASE_URL`, `STAGE_BASE_URL`, `PROD_BASE_URL`, `BASE_URL` | Hardcoded backend API base URLs; no app-domain usage. | Medium | Leave unchanged for now |
+
+### 6. Analytics / support / third-party integrations
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| _None found_ |  |  | No Washday app-domain reference found in third-party integration files searched. |  |  |
+
+### 7. Documentation-only references
+
+| File | Line | Reference | Usage | Risk | Recommendation |
+|---|---:|---|---|---|---|
+| _None found_ |  |  | No documentation-only `app.washday.mx` reference found. |  |  |
+
+### 8. Email references — keep for now
+
+These references use `@washday.mx` or email-related domain values. We are intentionally keeping these for now.
+
+| File | Line | Reference | Usage | Action |
+|---|---:|---|---|---|
+| `test/auth.forgotPasswordBinding.test.ts` | 33, 38 | `rene@washday.mx` | Test email fixture for forgot-password binding. | Email domain — keep washday.mx for now |
+
+## Recommended migration plan for this repo
+
+### Safe to leave unchanged for now
+
+- Test email fixture using `@washday.mx`.
+- Existing SDK behavior for caller-provided `redirectUri`.
+
+### Should become environment/config driven
+
+- No `app.washday.mx` value found. Separately consider whether SDK backend API base URLs should be configurable.
+
+### Needs provider whitelist/callback update before changing
+
+- No provider callback hardcoding found in this repo. Backend and frontend provider changes should happen before SDK callers switch redirect URIs.
+
+### Needs product decision before changing
+
+- Whether SDK default backend hosts should remain Heroku-specific is outside this app-domain audit.
+
+## Notes
+
+- Do not change runtime behavior in this audit PR.
+- Do not replace `app.washday.mx` yet.
+- Do not migrate email sender domains yet.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "washday-sdk",
-  "version": "1.6.48",
+  "version": "1.6.49",
   "description": "Washday utilities functions and API",
   "main": "dist/index.js",
   "type": "module",

package/src/api/order/get.ts

@@ -33,6 +33,7 @@ export const getList = async function (this: WashdayClientInstance, params: {
     fetchSection?: string,
     cfdiId?: string,
     customerId?: string,
+    assignedEmployee?: string,
 }, options?: { signal?: GenericAbortSignal }): Promise<any> {
     try {
         const config = {
@@ -63,6 +64,7 @@ export const getList = async function (this: WashdayClientInstance, params: {
             'fetchSection',
             'cfdiId',
             'customerId',
+            'assignedEmployee',
         ], params);
         // ], { ...params, q: params.q ? encodeURIComponent(params.q) : undefined });
         return await this.axiosInstance.get(`${GET_SET_ORDER}?${queryParams}`, config);

package/src/interfaces/Product.ts

@@ -74,6 +74,7 @@ export interface IOrderProduct extends IProduct {
     qty?: number
 
     // Operational line-level status fields (added 2026-04-04)
+    assignedEmployee?: IUser | string | null,
     status?: OrderProductLineStatus,
     cleanedDateTime?: Date | null,   // set on → ready (cleaning completed)
     readyDateTime?: Date | null,     // set on → ready; currently always equals cleanedDateTime

package/test/orders.getListAssignedEmployee.test.ts

@@ -0,0 +1,56 @@
+import { getList } from "../src/api/order/get";
+
+describe("orders.getList assignedEmployee filter", () => {
+  it("passes assignedEmployee through the order list query string", async () => {
+    const get = jest.fn().mockResolvedValue({
+      data: {
+        data: {
+          orders: [],
+        },
+      },
+    });
+    const client = {
+      apiToken: "token-123",
+      axiosInstance: { get },
+    } as any;
+
+    const result = await getList.call(client, {
+      store: undefined,
+      storeId: "store-1",
+      status: undefined,
+      name: undefined,
+      phone: undefined,
+      email: undefined,
+      fromDate: undefined,
+      toDate: undefined,
+      sequence: undefined,
+      pageNum: "0",
+      limit: "20",
+      sequenceSort: "-1",
+      cleanedDateTime: undefined,
+      readyDateTime: undefined,
+      collectedDateTime: undefined,
+      q: undefined,
+      pickupFromDate: undefined,
+      pickupToDate: undefined,
+      deliveryFromDate: undefined,
+      deliveryToDate: undefined,
+      assignedEmployee: "employee-1",
+    });
+
+    expect(get).toHaveBeenCalledWith(
+      "api/v2/order?store=undefined&storeId=store-1&status=undefined&name=undefined&phone=undefined&email=undefined&fromDate=undefined&toDate=undefined&sequence=undefined&pageNum=0&limit=20&sequenceSort=-1&cleanedDateTime=undefined&readyDateTime=undefined&collectedDateTime=undefined&q=undefined&pickupFromDate=undefined&pickupToDate=undefined&deliveryFromDate=undefined&deliveryToDate=undefined&assignedEmployee=employee-1",
+      {
+        headers: { Authorization: "Bearer token-123" },
+        signal: undefined,
+      }
+    );
+    expect(result).toEqual({
+      data: {
+        data: {
+          orders: [],
+        },
+      },
+    });
+  });
+});