@01.software/sdk 0.56.1 → 0.65.0

package/dist/client.cjs

@@ -1048,6 +1048,49 @@ function stockSnapshotSearchParams(params) {
 }
 
 // src/core/collection/http-client.ts
+function validateWhere(where) {
+  if (where === void 0) return false;
+  let hasNull = false;
+  function visit(value, depth, key) {
+    if (depth > 10) {
+      throw createValidationError(
+        "Collection where must not exceed nesting depth 10."
+      );
+    }
+    if (value === null && (key === "equals" || key === "not_equals")) {
+      hasNull = true;
+      return;
+    }
+    if (value == null) {
+      throw createValidationError(
+        "Collection where must not contain null or undefined values."
+      );
+    }
+    if (Array.isArray(value)) {
+      if (value.length === 0) {
+        throw createValidationError(
+          "Collection where must not contain empty arrays, including and/or."
+        );
+      }
+      if (value.length > 1e3) {
+        throw createValidationError(
+          "Collection where arrays must not contain more than 1000 elements."
+        );
+      }
+      for (const item of value) visit(item, depth + 1);
+    } else if (typeof value === "object" && !(value instanceof Date)) {
+      const values = Object.entries(value);
+      if (values.length === 0) {
+        throw createValidationError(
+          "Collection where must not contain empty condition objects."
+        );
+      }
+      for (const [key2, item] of values) visit(item, depth + 1, key2);
+    }
+  }
+  visit(where, 0);
+  return hasNull;
+}
 var HttpClient = class {
   constructor(publishableKey, secretKey, getCustomerToken, onUnauthorized, onRequestId, apiUrl) {
     this.publishableKey = requirePublishableKeyForSecret(
@@ -1094,7 +1137,8 @@ var HttpClient = class {
       ...rest,
       "fallback-locale": fallbackLocale === false ? "none" : fallbackLocale
     };
-    const queryString = (0, import_qs_esm.stringify)(queryOptions, { addQueryPrefix: true });
+    const encodedOptions = validateWhere(queryOptions.where) ? { ...queryOptions, where: JSON.stringify(queryOptions.where) } : queryOptions;
+    const queryString = (0, import_qs_esm.stringify)(encodedOptions, { addQueryPrefix: true });
     return queryString ? `${endpoint}${queryString}` : endpoint;
   }
   assertJsonResponse(response) {
@@ -1500,17 +1544,52 @@ var portOneStandardActionCapabilityOperations = /* @__PURE__ */ new Set([
 ]);
 var MEMBERSHIP_ENDPOINT_OPERATIONS = {
   subscribe: operation(null, "post", "/memberships/subscribe"),
+  billingCustody: operation(null, "post", "/memberships/billing-custody"),
   cancel: operation(null, "post", "/memberships/:id/cancel"),
   me: operation(null, "get", "/memberships/me"),
   chargeResult: operation(null, "post", "/memberships/:id/charge-result"),
   refundResult: operation(null, "post", "/memberships/:id/refund-result"),
   revoke: operation(null, "post", "/memberships/:id/revoke")
 };
+var EXTERNAL_EFFECT_CLAIM_ENDPOINT_OPERATIONS = {
+  claim: operation(null, "post", "/external-effect-claims/claim"),
+  get: operation(null, "post", "/external-effect-claims/get"),
+  arm: operation(null, "post", "/external-effect-claims/arm"),
+  release: operation(null, "post", "/external-effect-claims/release"),
+  report: operation(null, "post", "/external-effect-claims/report"),
+  recovery: operation(null, "post", "/external-effect-claims/recovery")
+};
+var INSTALLATION_CREDENTIAL_ENDPOINT_OPERATIONS = {
+  create: operation(null, "post", "/installation-credentials/create"),
+  get: operation(null, "post", "/installation-credentials/get"),
+  replace: operation(null, "post", "/installation-credentials/replace"),
+  dispose: operation(null, "post", "/installation-credentials/dispose")
+};
+var EXTERNAL_CUSTOMER_LINK_ENDPOINT_OPERATIONS = {
+  connect: operation("customers", "post", "/external-links/connect"),
+  get: operation("customers", "post", "/external-links/get"),
+  list: operation("customers", "post", "/external-links/list"),
+  unlink: operation("customers", "post", "/external-links/unlink"),
+  capturePreviousState: operation(
+    "customers",
+    "post",
+    "/external-links/capture-previous-state"
+  ),
+  clearPreviousState: operation(
+    "customers",
+    "post",
+    "/external-links/clear-previous-state"
+  )
+};
 var CUSTOMER_GROUP_ENDPOINT_OPERATIONS = {
   members: operation("customer-groups", "get", "/:id/members"),
   grant: operation("customer-groups", "post", "/:id/members/grant"),
   revoke: operation("customer-groups", "post", "/:id/members/revoke")
 };
+var CUSTOMER_AUTH_ENDPOINT_OPERATIONS = {
+  revokeRefresh: operation("customers", "post", "/revoke-refresh"),
+  withdraw: operation("customers", "post", "/withdraw")
+};
 var EMBEDDED_ADMIN_ENDPOINT_OPERATIONS = {
   show: operation("tenants", "get", "/embedded-admin-app"),
   configure: operation("tenants", "patch", "/embedded-admin-app"),
@@ -1534,6 +1613,14 @@ var COMMUNITY_ENDPOINT_OPERATIONS = {
     detail: operation("posts", "get", "/detail")
   }
 };
+var GALLERY_ENDPOINT_OPERATIONS = {
+  items: {
+    storefront: operation("gallery-items", "get", "/storefront")
+  }
+};
+var VIDEO_ENDPOINT_OPERATIONS = {
+  playback: operation("videos", "post", "/:id/playback")
+};
 function resolveOperationTemplate(descriptor) {
   return descriptor.collection ? `/api/${descriptor.collection}${descriptor.path}` : `/api${descriptor.path}`;
 }
@@ -2123,6 +2210,15 @@ var PublicContentApi = class extends RawCustomerScopedApi {
   get(endpoint) {
     return this.request(endpoint, { method: "GET" });
   }
+  galleryItems(options) {
+    const operation2 = GALLERY_ENDPOINT_OPERATIONS.items.storefront;
+    return this.request(
+      resolveOperationPath(operation2, {
+        query: galleryItemsListQuery(options)
+      }),
+      { method: resolveOperationMethod(operation2) }
+    );
+  }
 };
 function appendCommonParams(search, options, defaultSort) {
   search.set("sort", options?.sort ?? defaultSort);
@@ -2142,12 +2238,12 @@ function linksListPath(options) {
     search.set("featured", String(options.featured));
   return `/api/links/storefront?${search}`;
 }
-function galleryItemsListPath(options) {
+function galleryItemsListQuery(options) {
   const search = new URLSearchParams();
   appendCommonParams(search, options, "manual");
   if (options?.galleryId) search.set("galleryId", options.galleryId);
   if (options?.gallerySlug) search.set("gallerySlug", options.gallerySlug);
-  return `/api/gallery-items/storefront?${search}`;
+  return search;
 }
 var ContentClient = class {
   constructor(options) {
@@ -2161,9 +2257,7 @@ var ContentClient = class {
       list: (params) => api.get(linksListPath(params))
     };
     this.galleryItems = {
-      list: (params) => api.get(
-        galleryItemsListPath(params)
-      )
+      list: (params) => api.galleryItems(params)
     };
   }
 };
@@ -4213,11 +4307,46 @@ var CustomerAuth = class {
     };
   }
   /**
-   * Clear the stored token
+   * Clear local credentials synchronously. This compatibility API cannot
+   * revoke the server-side refresh family; use logoutAsync() for that.
+   * @deprecated Use logoutAsync() to end the direct server session.
    */
   logout() {
     this.setSession(null, null);
   }
+  /**
+   * End the current direct refresh family and clear local credentials even if
+   * revocation fails. A legacy access-only session has no refresh family here.
+   */
+  async logoutAsync() {
+    this.syncFromPersistedStorage();
+    const refreshToken = this.refreshTokenValue;
+    this.logout();
+    if (!refreshToken) return;
+    const operation2 = CUSTOMER_AUTH_ENDPOINT_OPERATIONS.revokeRefresh;
+    await this.requestJson(resolveOperationPath(operation2), {
+      method: resolveOperationMethod(operation2),
+      body: JSON.stringify({ refreshToken })
+    });
+  }
+  /** Archive the current password account and clear this client's credentials on success. */
+  async withdraw(currentPassword) {
+    const token = this.getToken();
+    if (!token) throw new ApiError("Not authenticated", 401);
+    const operation2 = CUSTOMER_AUTH_ENDPOINT_OPERATIONS.withdraw;
+    const result = await this.requestJson(
+      resolveOperationPath(operation2),
+      {
+        method: resolveOperationMethod(operation2),
+        headers: { Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ currentPassword })
+      }
+    );
+    if (!result || typeof result.withdrawnAt !== "string" || !Number.isFinite(Date.parse(result.withdrawnAt)))
+      throw new ApiError("Invalid customer withdrawal response", 502);
+    this.logout();
+    return { withdrawnAt: result.withdrawnAt };
+  }
   /**
    * Get the current authenticated customer's profile
    */