Let both SDKs search the catalog by scope with no query

[kev1n]

What was broken

GET /catalog/search accepts any non-empty combination of q, category and platform. Measured against production today:

/catalog/search?platform=reddit    -> 200
/catalog/search?category=social    -> 200
/catalog/search                    -> 400 {"error":"name q, category, or platform"}

Both SDKs were stricter: query was typed as required and q was set unconditionally. So "every reddit API" or "everything in the social category" was expressible against the gateway and against MCP, and impossible through either SDK. Gateway PR getanyapi-com/anyapi#1013 relaxed the MCP side; the SDKs were never updated.

What changed

• query is optional in TypeScript SearchOptions and in the Python sync and async search(). Every existing call site keeps compiling and sends the identical request.
• q is set exactly when there is a query. An absent or empty query omits q from the query string rather than sending it empty, because an empty q is a different request.
• A call naming none of the three never reaches the gateway to earn a 400. Both readers raise AnyAPIError with status 0, the status this repository already uses for a caller error detected before any HTTP (see the missing-API-key path).
• The Python guard lives in the shared _account.search_request builder, so the sync and async clients have one owner for the rule.
• SPEC.md records the rule beside the search(options) contract.
• Both credentialless live discovery canaries now make a scope-only call against production, so CI proves the capability on the source tree, not only in a mock.

No generated code, openapi.json, catalog.json or IR was touched. The tolerant-reader rules are unchanged: the readers still reject credit keys and any non-AnyAPI provider, and derive nothing. A scope-only response is the same envelope with ranking: "keyword", which both readers already accepted.

Proof

pnpm check (dash guard, release tests, regen drift, generator, TypeScript, consumer-typecheck): EXIT=0, generator 158 tests, TypeScript 471 tests.

cd packages/python && pyright && mypy && pytest: pyright 0 errors, mypy clean on 86 source files, 498 tests passed.

New regression coverage fails without the fix (verified by reverting the builder): 3 TypeScript cases in tests/account.test.ts and 3 Python cases in tests/test_account.py covering the scope-only request, the empty-query omission, and the no-scope rejection with zero HTTP calls.

Live against api.getanyapi.com, through the built SDKs:

TypeScript

URL sent : https://api.getanyapi.com/catalog/search?platform=reddit&limit=3
ranking  : keyword | total: 11
  reddit.post                  social     from $0.0012
  reddit.post_comments         social     from $0.002
  reddit.post_transcript       social     from $0.002
URL sent : https://api.getanyapi.com/catalog/search?category=social&limit=3
ranking  : keyword | total: 167 | first: bluesky.post
no-scope : AnyAPIError status=0 search needs at least one of query, category, or platform
requests made: 2

Python

URL sent : https://api.getanyapi.com/catalog/search?platform=reddit&limit=3
ranking  : keyword | total: 11
  reddit.post                  social     from $0.0012
  reddit.post_comments         social     from $0.002
  reddit.post_transcript       social     from $0.002
URL sent : https://api.getanyapi.com/catalog/search?category=social&limit=3
ranking  : keyword | total: 167 | first: bluesky.post
no-scope : AnyAPIError status=0 search needs at least one of query, category, or platform
requests made: 2

Both live canaries pass end to end: PASS TypeScript live discovery: 363 APIs and PASS Python live discovery: 363 APIs.

Not in this PR

No tag and no publish. A release is a separate decision.

The three framework adapters (langchain-anyapi, llama-index-tools-anyapi, anyapi-haystack) each declare query: str as required in their own tool signatures and pass it straight through, so they all still block a scope-only search until they are relaxed too. That is a follow-up for after an SDK release, not a change here.

🤖 Generated with Claude Code