@01.software/sdk 0.65.1 → 0.68.0

package/dist/index.cjs

@@ -141,9 +141,6 @@ __export(src_exports, {
 });
 module.exports = __toCommonJS(src_exports);
 
-// src/core/collection/http-client.ts
-var import_qs_esm = require("qs-esm");
-
 // src/core/errors.ts
 var SDK_ERROR_BRAND = /* @__PURE__ */ Symbol.for("@01.software/sdk/SDKError");
 var SDK_ERROR_TYPE_BRAND = /* @__PURE__ */ Symbol.for("@01.software/sdk/SDKError.type");
@@ -1147,288 +1144,6 @@ function stockSnapshotSearchParams(params) {
   return `variantIds=${params.variantIds.map(encodeURIComponent).join(",")}`;
 }
 
-// src/core/collection/http-client.ts
-function validateWhere(where) {
-  if (where === void 0) return false;
-  let hasNull = false;
-  function visit(value, depth, key) {
-    if (depth > 10) {
-      throw createValidationError(
-        "Collection where must not exceed nesting depth 10."
-      );
-    }
-    if (value === null && (key === "equals" || key === "not_equals")) {
-      hasNull = true;
-      return;
-    }
-    if (value == null) {
-      throw createValidationError(
-        "Collection where must not contain null or undefined values."
-      );
-    }
-    if (Array.isArray(value)) {
-      if (value.length === 0) {
-        throw createValidationError(
-          "Collection where must not contain empty arrays, including and/or."
-        );
-      }
-      if (value.length > 1e3) {
-        throw createValidationError(
-          "Collection where arrays must not contain more than 1000 elements."
-        );
-      }
-      for (const item of value) visit(item, depth + 1);
-    } else if (typeof value === "object" && !(value instanceof Date)) {
-      const values = Object.entries(value);
-      if (values.length === 0) {
-        throw createValidationError(
-          "Collection where must not contain empty condition objects."
-        );
-      }
-      for (const [key2, item] of values) visit(item, depth + 1, key2);
-    }
-  }
-  visit(where, 0);
-  return hasNull;
-}
-var HttpClient = class {
-  constructor(publishableKey, secretKey, getCustomerToken, onUnauthorized, onRequestId, apiUrl) {
-    this.publishableKey = requirePublishableKeyForSecret(
-      "CollectionClient",
-      publishableKey,
-      secretKey
-    );
-    this.secretKey = secretKey;
-    this.getCustomerToken = getCustomerToken;
-    this.onUnauthorized = onUnauthorized;
-    this.onRequestId = onRequestId;
-    this.apiUrl = apiUrl;
-  }
-  get defaultOptions() {
-    const opts = {
-      apiUrl: this.apiUrl,
-      publishableKey: this.publishableKey,
-      secretKey: this.secretKey
-    };
-    const token = this.getCustomerToken?.();
-    if (token) {
-      opts.customerToken = token;
-      if (this.onUnauthorized) {
-        opts.onUnauthorized = this.onUnauthorized;
-      }
-    }
-    return opts;
-  }
-  async fetchWithTracking(url, opts) {
-    try {
-      const response = await httpFetch(url, opts);
-      this.onRequestId?.(response.headers.get("x-request-id") ?? null);
-      return response;
-    } catch (err) {
-      const id = err instanceof SDKError ? err.requestId ?? null : null;
-      this.onRequestId?.(id);
-      throw err;
-    }
-  }
-  buildUrl(endpoint, options) {
-    if (!options) return endpoint;
-    const { fallbackLocale, ...rest } = options;
-    const queryOptions = fallbackLocale === void 0 ? rest : {
-      ...rest,
-      "fallback-locale": fallbackLocale === false ? "none" : fallbackLocale
-    };
-    const encodedOptions = validateWhere(queryOptions.where) ? { ...queryOptions, where: JSON.stringify(queryOptions.where) } : queryOptions;
-    const queryString = (0, import_qs_esm.stringify)(encodedOptions, { addQueryPrefix: true });
-    return queryString ? `${endpoint}${queryString}` : endpoint;
-  }
-  assertJsonResponse(response) {
-    const contentType = response.headers.get("content-type");
-    if (!contentType?.includes("application/json")) {
-      throw createApiError("Response is not in JSON format.", response.status, {
-        contentType
-      });
-    }
-  }
-  /**
-   * Parse Payload CMS find response (list query)
-   * Returns native Payload response structure
-   */
-  async parseFindResponse(response) {
-    const contentType = response.headers.get("content-type");
-    try {
-      this.assertJsonResponse(response);
-      const jsonData = await response.json();
-      if (jsonData.docs === void 0) {
-        throw createApiError("Invalid find response.", response.status, {
-          jsonData
-        });
-      }
-      return {
-        docs: jsonData.docs,
-        totalDocs: jsonData.totalDocs ?? 0,
-        limit: jsonData.limit || 20,
-        totalPages: jsonData.totalPages ?? 0,
-        page: jsonData.page || 1,
-        pagingCounter: jsonData.pagingCounter || 1,
-        hasPrevPage: jsonData.hasPrevPage ?? false,
-        hasNextPage: jsonData.hasNextPage ?? false,
-        prevPage: jsonData.prevPage ?? null,
-        nextPage: jsonData.nextPage ?? null
-      };
-    } catch (error) {
-      if (error instanceof SDKError) throw error;
-      throw createApiError("Failed to parse response.", response.status, {
-        contentType,
-        error: error instanceof Error ? error.message : error
-      });
-    }
-  }
-  /**
-   * Parse Payload CMS mutation response (create/update)
-   * Returns native Payload response structure
-   */
-  async parseMutationResponse(response) {
-    const contentType = response.headers.get("content-type");
-    try {
-      this.assertJsonResponse(response);
-      const jsonData = await response.json();
-      if (jsonData.doc === void 0) {
-        throw createApiError("Invalid mutation response.", response.status, {
-          jsonData
-        });
-      }
-      return {
-        message: jsonData.message || "",
-        doc: jsonData.doc,
-        errors: jsonData.errors
-      };
-    } catch (error) {
-      if (error instanceof SDKError) throw error;
-      throw createApiError("Failed to parse response.", response.status, {
-        contentType,
-        error: error instanceof Error ? error.message : error
-      });
-    }
-  }
-  /**
-   * Parse Payload CMS document response (findById/delete)
-   * Returns document directly without wrapper
-   */
-  async parseDocumentResponse(response) {
-    const contentType = response.headers.get("content-type");
-    try {
-      this.assertJsonResponse(response);
-      const jsonData = await response.json();
-      return jsonData;
-    } catch (error) {
-      if (error instanceof SDKError) throw error;
-      throw createApiError("Failed to parse response.", response.status, {
-        contentType,
-        error: error instanceof Error ? error.message : error
-      });
-    }
-  }
-};
-
-// src/utils/types.ts
-function resolveRelation(ref) {
-  if (typeof ref === "string" || typeof ref === "number" || ref === null || ref === void 0)
-    return null;
-  return ref;
-}
-
-// src/core/collection/query-builder.ts
-var PUBLIC_READ_DEPTH_ERROR = "Publishable collection reads require depth: 0. Use a shaped commerce endpoint or server client for populated data.";
-var PUBLIC_READ_JOINS_ERROR = "Publishable collection reads require joins: false. Use a shaped commerce endpoint or server client for joined data.";
-var PUBLIC_READ_POPULATE_ERROR = "Publishable collection reads do not support populate. Use a shaped commerce endpoint or server client for populated data.";
-function withDefaultPublicReadOptions(options) {
-  const rawOptions = options;
-  if (rawOptions?.depth !== void 0 && rawOptions.depth !== 0) {
-    throw createValidationError(PUBLIC_READ_DEPTH_ERROR);
-  }
-  if (rawOptions?.joins !== void 0 && rawOptions.joins !== false) {
-    throw createValidationError(PUBLIC_READ_JOINS_ERROR);
-  }
-  if (rawOptions?.populate !== void 0) {
-    throw createValidationError(PUBLIC_READ_POPULATE_ERROR);
-  }
-  return {
-    ...options,
-    depth: options?.depth ?? 0,
-    joins: options?.joins ?? false
-  };
-}
-var ReadOnlyCollectionQueryBuilder = class {
-  constructor(api, collection) {
-    this.api = api;
-    this.collection = collection;
-  }
-  async find(options) {
-    return this.api.requestFind(
-      `/api/${String(this.collection)}`,
-      withDefaultPublicReadOptions(options)
-    );
-  }
-  async findById(id, options) {
-    return this.api.requestFindById(
-      `/api/${String(this.collection)}/${String(id)}`,
-      withDefaultPublicReadOptions(options)
-    );
-  }
-  async count(options) {
-    return this.api.requestCount(
-      `/api/${String(this.collection)}/count`,
-      withDefaultPublicReadOptions(options)
-    );
-  }
-};
-
-// src/core/collection/collection-client.ts
-var ReadOnlyCollectionClient = class extends HttpClient {
-  from(collection) {
-    return new ReadOnlyCollectionQueryBuilder(this, collection);
-  }
-  async requestFind(endpoint, options) {
-    const url = this.buildUrl(endpoint, options);
-    const response = await this.fetchWithTracking(url, {
-      ...this.defaultOptions,
-      method: "GET"
-    });
-    return this.parseFindResponse(response);
-  }
-  async requestFindEndpoint(endpoint, data) {
-    const response = await this.fetchWithTracking(endpoint, {
-      ...this.defaultOptions,
-      method: "POST",
-      body: data ? JSON.stringify(data) : void 0
-    });
-    return this.parseFindResponse(response);
-  }
-  async requestFindEndpointGet(endpoint) {
-    const response = await this.fetchWithTracking(endpoint, {
-      ...this.defaultOptions,
-      method: "GET"
-    });
-    return this.parseFindResponse(response);
-  }
-  async requestFindById(endpoint, options) {
-    const url = this.buildUrl(endpoint, options);
-    const response = await this.fetchWithTracking(url, {
-      ...this.defaultOptions,
-      method: "GET"
-    });
-    return this.parseDocumentResponse(response);
-  }
-  async requestCount(endpoint, options) {
-    const url = this.buildUrl(endpoint, options);
-    const response = await this.fetchWithTracking(url, {
-      ...this.defaultOptions,
-      method: "GET"
-    });
-    return this.parseDocumentResponse(response);
-  }
-};
-
 // src/core/api/parse-response.ts
 async function parseApiResponse(response, endpoint, options = {}) {
   if (response.status === 204 || response.headers.get("content-length") === "0") {
@@ -1525,7 +1240,9 @@ var COMMERCE_ENDPOINT_OPERATIONS = {
     ),
     stockCheck: operation("products", "post", "/stock-check"),
     stockSnapshot: operation("products", "get", "/stock"),
-    upsert: operation("products", "post", "/upsert")
+    upsert: operation("products", "post", "/upsert"),
+    graphRevision: operation("products", "get", "/:id/graph-revision"),
+    variantsPatch: operation("products", "patch", "/:id/variants")
   },
   orders: {
     create: operation("orders", "post", "/create"),
@@ -1688,12 +1405,28 @@ var EXTERNAL_CUSTOMER_LINK_ENDPOINT_OPERATIONS = {
     "/external-links/clear-previous-state"
   )
 };
+var BENEFIT_VOUCHER_ENDPOINT_OPERATIONS = {
+  issue: operation("customers", "post", "/benefit-vouchers/issue"),
+  get: operation("customers", "post", "/benefit-vouchers/get"),
+  list: operation("customers", "post", "/benefit-vouchers/list"),
+  redeem: operation("customers", "post", "/benefit-vouchers/redeem"),
+  void: operation("customers", "post", "/benefit-vouchers/void"),
+  listMine: operation("customers", "get", "/me/benefit-vouchers")
+};
 var CUSTOMER_GROUP_ENDPOINT_OPERATIONS = {
   members: operation("customer-groups", "get", "/:id/members"),
   grant: operation("customer-groups", "post", "/:id/members/grant"),
   revoke: operation("customer-groups", "post", "/:id/members/revoke")
 };
 var CUSTOMER_AUTH_ENDPOINT_OPERATIONS = {
+  register: operation("customers", "post", "/register"),
+  login: operation("customers", "post", "/login"),
+  refresh: operation("customers", "post", "/refresh"),
+  me: operation("customers", "get", "/me"),
+  updateProfile: operation("customers", "patch", "/me"),
+  forgotPassword: operation("customers", "post", "/forgot-password"),
+  resetPassword: operation("customers", "post", "/reset-password"),
+  changePassword: operation("customers", "post", "/change-password"),
   revokeRefresh: operation("customers", "post", "/revoke-refresh"),
   withdraw: operation("customers", "post", "/withdraw")
 };
@@ -1703,6 +1436,9 @@ var EMBEDDED_ADMIN_ENDPOINT_OPERATIONS = {
   disable: operation("tenants", "delete", "/embedded-admin-app")
 };
 var EVENTS_ENDPOINT_OPERATIONS = {
+  registrations: {
+    listMine: operation("event-registrations", "get", "/my")
+  },
   events: {
     convertSchedule: operation("events", "post", "/:id/schedule")
   },
@@ -1903,73 +1639,440 @@ var COMMERCE_ENDPOINTS = {
       COMMERCE_ENDPOINT_OPERATIONS.shippingPolicies.calculate
     )
   }
-};
-
-// src/core/api/customer-scoped-api.ts
-var CustomerScopedTransport = class {
-  constructor(apiName, options) {
-    if (options.requiresCredential !== false && !options.secretKey && !options.customerToken) {
-      throw createConfigError(
-        `Either secretKey or customerToken is required for ${apiName}.`
-      );
+};
+
+// src/core/api/customer-scoped-api.ts
+var CustomerScopedTransport = class {
+  constructor(apiName, options) {
+    if (options.requiresCredential !== false && !options.secretKey && !options.customerToken) {
+      throw createConfigError(
+        `Either secretKey or customerToken is required for ${apiName}.`
+      );
+    }
+    this.publishableKey = requirePublishableKeyForSecret(
+      apiName,
+      options.publishableKey,
+      options.secretKey
+    );
+    this.secretKey = options.secretKey;
+    this.apiUrl = options.apiUrl;
+    this.customerToken = options.customerToken;
+    this.onUnauthorized = options.onUnauthorized;
+    this.onRequestId = options.onRequestId;
+  }
+  async request(endpoint, options) {
+    const token = typeof this.customerToken === "function" ? this.customerToken() : this.customerToken;
+    try {
+      const response = await httpFetch(endpoint, {
+        method: options.method,
+        apiUrl: this.apiUrl,
+        publishableKey: this.publishableKey,
+        secretKey: this.secretKey,
+        customerToken: token ?? void 0,
+        ...token && this.onUnauthorized && { onUnauthorized: this.onUnauthorized },
+        ...options.body !== void 0 && {
+          body: JSON.stringify(options.body)
+        },
+        ...options.headers && { headers: options.headers },
+        ...options.errorFamily && { errorFamily: options.errorFamily }
+      });
+      this.onRequestId?.(response.headers.get("x-request-id") ?? null);
+      return parseApiResponse(response, endpoint, {
+        errorFamily: options.errorFamily
+      });
+    } catch (err) {
+      const id = err instanceof SDKError ? err.requestId ?? null : null;
+      this.onRequestId?.(id);
+      throw err;
+    }
+  }
+};
+var CustomerScopedApi = class {
+  constructor(apiName, options) {
+    this.transport = new CustomerScopedTransport(apiName, options);
+  }
+  requestEndpoint(endpoint, body, options) {
+    return this.transport.request(resolveOperationPath(endpoint, options), {
+      method: resolveOperationMethod(endpoint),
+      body,
+      headers: options?.headers,
+      errorFamily: resolveOperationErrorFamily(endpoint)
+    });
+  }
+};
+var RawCustomerScopedApi = class {
+  constructor(apiName, options) {
+    this.transport = new CustomerScopedTransport(apiName, options);
+  }
+  request(endpoint, options) {
+    return this.transport.request(endpoint, options);
+  }
+};
+
+// src/core/api/benefit-voucher-types.ts
+var BENEFIT_VOUCHER_VOID_REASONS = [
+  "issued_in_error",
+  "benefit_revoked",
+  "customer_request",
+  "other"
+];
+function invalidBenefitVoucherResponse() {
+  throw createApiError("Invalid benefit voucher response", 200);
+}
+function object(value, keys) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).length !== keys.length || keys.some((key) => !(key in value)))
+    invalidBenefitVoucherResponse();
+  return value;
+}
+var uuid = (v) => typeof v === "string" && (/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(
+  v
+) || v === "00000000-0000-0000-0000-000000000000" || v.toLowerCase() === "ffffffff-ffff-ffff-ffff-ffffffffffff");
+var time = (v) => typeof v === "string" && /^\d{4}-\d{2}-\d{2}T/.test(v) && Number.isFinite(Date.parse(v)) && new Date(Date.parse(v)).toISOString() === v;
+var actor = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(v);
+function parseBenefitVoucher(value, mine = false) {
+  const v = object(value, [
+    "id",
+    "name",
+    "description",
+    "state",
+    "issuedAt",
+    "expiresAt",
+    ...mine ? ["closedAt"] : ["customerId", "definitionId", "source", "closed"]
+  ]);
+  if (!uuid(v.id) || typeof v.name !== "string" || !v.name.length || v.name.length > 120 || v.description !== null && (typeof v.description !== "string" || v.description.length > 1e3) || !["issued", "redeemed", "expired", "voided"].includes(v.state) || !time(v.issuedAt) || !time(v.expiresAt))
+    invalidBenefitVoucherResponse();
+  if (mine) {
+    if (v.closedAt !== null && !time(v.closedAt))
+      invalidBenefitVoucherResponse();
+  } else {
+    if (!uuid(v.customerId) || !uuid(v.definitionId))
+      invalidBenefitVoucherResponse();
+    const source = object(v.source, ["namespace", "ref"]);
+    if (typeof source.namespace !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(source.namespace) || typeof source.ref !== "string" || !source.ref.length || source.ref.length > 256)
+      invalidBenefitVoucherResponse();
+    if (v.closed !== null) {
+      const closed = object(v.closed, [
+        "at",
+        "channel",
+        "actor",
+        "actorRef",
+        "voidReason"
+      ]);
+      const principal = object(closed.actor, ["type", "id"]);
+      if (!time(closed.at) || !uuid(principal.id) || !["server", "console"].includes(closed.channel) || !["server_credential", "operator"].includes(principal.type) || closed.actorRef !== null && !actor(closed.actorRef) || closed.voidReason !== null && !BENEFIT_VOUCHER_VOID_REASONS.includes(closed.voidReason))
+        invalidBenefitVoucherResponse();
+    }
+  }
+  return value;
+}
+function parseBenefitVoucherList(value, mine = false) {
+  const v = object(value, ["vouchers", "nextCursor", "evaluatedAt"]);
+  if (!Array.isArray(v.vouchers) || v.vouchers.length > 100 || !time(v.evaluatedAt) || v.nextCursor !== null && (typeof v.nextCursor !== "string" || !v.nextCursor.length || v.nextCursor.length > 2048))
+    invalidBenefitVoucherResponse();
+  for (const row of v.vouchers) {
+    if (mine) parseBenefitVoucher(row, true);
+    else parseBenefitVoucher(row);
+  }
+  return value;
+}
+
+// src/core/api/customer-benefit-vouchers-api.ts
+var CustomerBenefitVouchersApi = class extends CustomerScopedApi {
+  async listMine(params = {}) {
+    const query = new URLSearchParams();
+    for (const [key, value] of Object.entries(params))
+      if (value !== void 0) query.set(key, String(value));
+    return parseBenefitVoucherList(
+      await this.requestEndpoint(
+        BENEFIT_VOUCHER_ENDPOINT_OPERATIONS.listMine,
+        void 0,
+        { query }
+      ),
+      true
+    );
+  }
+};
+
+// src/core/collection/http-client.ts
+var import_qs_esm = require("qs-esm");
+function validateWhere(where) {
+  if (where === void 0) return false;
+  let hasNull = false;
+  function visit(value, depth, key) {
+    if (depth > 10) {
+      throw createValidationError(
+        "Collection where must not exceed nesting depth 10."
+      );
+    }
+    if (value === null && (key === "equals" || key === "not_equals")) {
+      hasNull = true;
+      return;
+    }
+    if (value == null) {
+      throw createValidationError(
+        "Collection where must not contain null or undefined values."
+      );
+    }
+    if (Array.isArray(value)) {
+      if (value.length === 0) {
+        throw createValidationError(
+          "Collection where must not contain empty arrays, including and/or."
+        );
+      }
+      if (value.length > 1e3) {
+        throw createValidationError(
+          "Collection where arrays must not contain more than 1000 elements."
+        );
+      }
+      for (const item of value) visit(item, depth + 1);
+    } else if (typeof value === "object" && !(value instanceof Date)) {
+      const values = Object.entries(value);
+      if (values.length === 0) {
+        throw createValidationError(
+          "Collection where must not contain empty condition objects."
+        );
+      }
+      for (const [key2, item] of values) visit(item, depth + 1, key2);
+    }
+  }
+  visit(where, 0);
+  return hasNull;
+}
+var HttpClient = class {
+  constructor(publishableKey, secretKey, getCustomerToken, onUnauthorized, onRequestId, apiUrl) {
+    this.publishableKey = requirePublishableKeyForSecret(
+      "CollectionClient",
+      publishableKey,
+      secretKey
+    );
+    this.secretKey = secretKey;
+    this.getCustomerToken = getCustomerToken;
+    this.onUnauthorized = onUnauthorized;
+    this.onRequestId = onRequestId;
+    this.apiUrl = apiUrl;
+  }
+  get defaultOptions() {
+    const opts = {
+      apiUrl: this.apiUrl,
+      publishableKey: this.publishableKey,
+      secretKey: this.secretKey
+    };
+    const token = this.getCustomerToken?.();
+    if (token) {
+      opts.customerToken = token;
+      if (this.onUnauthorized) {
+        opts.onUnauthorized = this.onUnauthorized;
+      }
+    }
+    return opts;
+  }
+  async fetchWithTracking(url, opts) {
+    try {
+      const response = await httpFetch(url, opts);
+      this.onRequestId?.(response.headers.get("x-request-id") ?? null);
+      return response;
+    } catch (err) {
+      const id = err instanceof SDKError ? err.requestId ?? null : null;
+      this.onRequestId?.(id);
+      throw err;
+    }
+  }
+  buildUrl(endpoint, options) {
+    if (!options) return endpoint;
+    const { fallbackLocale, ...rest } = options;
+    const queryOptions = fallbackLocale === void 0 ? rest : {
+      ...rest,
+      "fallback-locale": fallbackLocale === false ? "none" : fallbackLocale
+    };
+    const encodedOptions = validateWhere(queryOptions.where) ? { ...queryOptions, where: JSON.stringify(queryOptions.where) } : queryOptions;
+    const queryString = (0, import_qs_esm.stringify)(encodedOptions, { addQueryPrefix: true });
+    return queryString ? `${endpoint}${queryString}` : endpoint;
+  }
+  assertJsonResponse(response) {
+    const contentType = response.headers.get("content-type");
+    if (!contentType?.includes("application/json")) {
+      throw createApiError("Response is not in JSON format.", response.status, {
+        contentType
+      });
+    }
+  }
+  /**
+   * Parse Payload CMS find response (list query)
+   * Returns native Payload response structure
+   */
+  async parseFindResponse(response) {
+    const contentType = response.headers.get("content-type");
+    try {
+      this.assertJsonResponse(response);
+      const jsonData = await response.json();
+      if (jsonData.docs === void 0) {
+        throw createApiError("Invalid find response.", response.status, {
+          jsonData
+        });
+      }
+      return {
+        docs: jsonData.docs,
+        totalDocs: jsonData.totalDocs ?? 0,
+        limit: jsonData.limit || 20,
+        totalPages: jsonData.totalPages ?? 0,
+        page: jsonData.page || 1,
+        pagingCounter: jsonData.pagingCounter || 1,
+        hasPrevPage: jsonData.hasPrevPage ?? false,
+        hasNextPage: jsonData.hasNextPage ?? false,
+        prevPage: jsonData.prevPage ?? null,
+        nextPage: jsonData.nextPage ?? null
+      };
+    } catch (error) {
+      if (error instanceof SDKError) throw error;
+      throw createApiError("Failed to parse response.", response.status, {
+        contentType,
+        error: error instanceof Error ? error.message : error
+      });
     }
-    this.publishableKey = requirePublishableKeyForSecret(
-      apiName,
-      options.publishableKey,
-      options.secretKey
-    );
-    this.secretKey = options.secretKey;
-    this.apiUrl = options.apiUrl;
-    this.customerToken = options.customerToken;
-    this.onUnauthorized = options.onUnauthorized;
-    this.onRequestId = options.onRequestId;
   }
-  async request(endpoint, options) {
-    const token = typeof this.customerToken === "function" ? this.customerToken() : this.customerToken;
+  /**
+   * Parse Payload CMS mutation response (create/update)
+   * Returns native Payload response structure
+   */
+  async parseMutationResponse(response) {
+    const contentType = response.headers.get("content-type");
     try {
-      const response = await httpFetch(endpoint, {
-        method: options.method,
-        apiUrl: this.apiUrl,
-        publishableKey: this.publishableKey,
-        secretKey: this.secretKey,
-        customerToken: token ?? void 0,
-        ...token && this.onUnauthorized && { onUnauthorized: this.onUnauthorized },
-        ...options.body !== void 0 && {
-          body: JSON.stringify(options.body)
-        },
-        ...options.headers && { headers: options.headers },
-        ...options.errorFamily && { errorFamily: options.errorFamily }
+      this.assertJsonResponse(response);
+      const jsonData = await response.json();
+      if (jsonData.doc === void 0) {
+        throw createApiError("Invalid mutation response.", response.status, {
+          jsonData
+        });
+      }
+      return {
+        message: jsonData.message || "",
+        doc: jsonData.doc,
+        errors: jsonData.errors
+      };
+    } catch (error) {
+      if (error instanceof SDKError) throw error;
+      throw createApiError("Failed to parse response.", response.status, {
+        contentType,
+        error: error instanceof Error ? error.message : error
       });
-      this.onRequestId?.(response.headers.get("x-request-id") ?? null);
-      return parseApiResponse(response, endpoint, {
-        errorFamily: options.errorFamily
+    }
+  }
+  /**
+   * Parse Payload CMS document response (findById/delete)
+   * Returns document directly without wrapper
+   */
+  async parseDocumentResponse(response) {
+    const contentType = response.headers.get("content-type");
+    try {
+      this.assertJsonResponse(response);
+      const jsonData = await response.json();
+      return jsonData;
+    } catch (error) {
+      if (error instanceof SDKError) throw error;
+      throw createApiError("Failed to parse response.", response.status, {
+        contentType,
+        error: error instanceof Error ? error.message : error
       });
-    } catch (err) {
-      const id = err instanceof SDKError ? err.requestId ?? null : null;
-      this.onRequestId?.(id);
-      throw err;
     }
   }
 };
-var CustomerScopedApi = class {
-  constructor(apiName, options) {
-    this.transport = new CustomerScopedTransport(apiName, options);
+
+// src/utils/types.ts
+function resolveRelation(ref) {
+  if (typeof ref === "string" || typeof ref === "number" || ref === null || ref === void 0)
+    return null;
+  return ref;
+}
+
+// src/core/collection/query-builder.ts
+var PUBLIC_READ_DEPTH_ERROR = "Publishable collection reads require depth: 0. Use a shaped commerce endpoint or server client for populated data.";
+var PUBLIC_READ_JOINS_ERROR = "Publishable collection reads require joins: false. Use a shaped commerce endpoint or server client for joined data.";
+var PUBLIC_READ_POPULATE_ERROR = "Publishable collection reads do not support populate. Use a shaped commerce endpoint or server client for populated data.";
+function withDefaultPublicReadOptions(options) {
+  const rawOptions = options;
+  if (rawOptions?.depth !== void 0 && rawOptions.depth !== 0) {
+    throw createValidationError(PUBLIC_READ_DEPTH_ERROR);
   }
-  requestEndpoint(endpoint, body, options) {
-    return this.transport.request(resolveOperationPath(endpoint, options), {
-      method: resolveOperationMethod(endpoint),
-      body,
-      headers: options?.headers,
-      errorFamily: resolveOperationErrorFamily(endpoint)
-    });
+  if (rawOptions?.joins !== void 0 && rawOptions.joins !== false) {
+    throw createValidationError(PUBLIC_READ_JOINS_ERROR);
+  }
+  if (rawOptions?.populate !== void 0) {
+    throw createValidationError(PUBLIC_READ_POPULATE_ERROR);
+  }
+  return {
+    ...options,
+    depth: options?.depth ?? 0,
+    joins: options?.joins ?? false
+  };
+}
+var ReadOnlyCollectionQueryBuilder = class {
+  constructor(api, collection) {
+    this.api = api;
+    this.collection = collection;
+  }
+  async find(options) {
+    return this.api.requestFind(
+      `/api/${String(this.collection)}`,
+      withDefaultPublicReadOptions(options)
+    );
+  }
+  async findById(id, options) {
+    return this.api.requestFindById(
+      `/api/${String(this.collection)}/${String(id)}`,
+      withDefaultPublicReadOptions(options)
+    );
+  }
+  async count(options) {
+    return this.api.requestCount(
+      `/api/${String(this.collection)}/count`,
+      withDefaultPublicReadOptions(options)
+    );
   }
 };
-var RawCustomerScopedApi = class {
-  constructor(apiName, options) {
-    this.transport = new CustomerScopedTransport(apiName, options);
+
+// src/core/collection/collection-client.ts
+var ReadOnlyCollectionClient = class extends HttpClient {
+  from(collection) {
+    return new ReadOnlyCollectionQueryBuilder(this, collection);
   }
-  request(endpoint, options) {
-    return this.transport.request(endpoint, options);
+  async requestFind(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
+    const response = await this.fetchWithTracking(url, {
+      ...this.defaultOptions,
+      method: "GET"
+    });
+    return this.parseFindResponse(response);
+  }
+  async requestFindEndpoint(endpoint, data) {
+    const response = await this.fetchWithTracking(endpoint, {
+      ...this.defaultOptions,
+      method: "POST",
+      body: data ? JSON.stringify(data) : void 0
+    });
+    return this.parseFindResponse(response);
+  }
+  async requestFindEndpointGet(endpoint) {
+    const response = await this.fetchWithTracking(endpoint, {
+      ...this.defaultOptions,
+      method: "GET"
+    });
+    return this.parseFindResponse(response);
+  }
+  async requestFindById(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
+    const response = await this.fetchWithTracking(url, {
+      ...this.defaultOptions,
+      method: "GET"
+    });
+    return this.parseDocumentResponse(response);
+  }
+  async requestCount(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
+    const response = await this.fetchWithTracking(url, {
+      ...this.defaultOptions,
+      method: "GET"
+    });
+    return this.parseDocumentResponse(response);
   }
 };
 
@@ -4128,19 +4231,24 @@ var CustomerAuth = class {
    * Register a new customer account
    */
   async register(data) {
-    return this.requestJson("/api/customers/register", {
-      method: "POST",
-      body: JSON.stringify(data)
-    });
+    return this.requestJson(
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.register),
+      {
+        method: resolveOperationMethod(
+          CUSTOMER_AUTH_ENDPOINT_OPERATIONS.register
+        ),
+        body: JSON.stringify(data)
+      }
+    );
   }
   /**
    * Login with email and password. Stores the token internally.
    */
   async login(data) {
     const result = await this.requestJson(
-      "/api/customers/login",
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.login),
       {
-        method: "POST",
+        method: resolveOperationMethod(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.login),
         body: JSON.stringify(data)
       }
     );
@@ -4386,14 +4494,18 @@ var CustomerAuth = class {
   }
   async _doRefreshToken(intended) {
     const init = intended.refreshToken ? {
-      method: "POST",
+      method: resolveOperationMethod(
+        CUSTOMER_AUTH_ENDPOINT_OPERATIONS.refresh
+      ),
       body: JSON.stringify({ refreshToken: intended.refreshToken })
     } : {
-      method: "POST",
+      method: resolveOperationMethod(
+        CUSTOMER_AUTH_ENDPOINT_OPERATIONS.refresh
+      ),
       headers: { Authorization: `Bearer ${intended.token}` }
     };
     const result = await this.requestJson(
-      "/api/customers/refresh",
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.refresh),
       init
     );
     const state = this.classifyCanonicalState(intended);
@@ -4462,9 +4574,9 @@ var CustomerAuth = class {
     if (!token) return null;
     try {
       const data = await this.requestJson(
-        "/api/customers/me",
+        resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.me),
         {
-          method: "GET",
+          method: resolveOperationMethod(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.me),
           headers: { Authorization: `Bearer ${token}` }
         }
       );
@@ -4481,19 +4593,29 @@ var CustomerAuth = class {
    * Request a password reset email
    */
   async forgotPassword(email) {
-    await this.requestJson("/api/customers/forgot-password", {
-      method: "POST",
-      body: JSON.stringify({ email })
-    });
+    await this.requestJson(
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.forgotPassword),
+      {
+        method: resolveOperationMethod(
+          CUSTOMER_AUTH_ENDPOINT_OPERATIONS.forgotPassword
+        ),
+        body: JSON.stringify({ email })
+      }
+    );
   }
   /**
    * Reset password using a token from the reset email
    */
   async resetPassword(token, password) {
-    await this.requestJson("/api/customers/reset-password", {
-      method: "POST",
-      body: JSON.stringify({ token, password })
-    });
+    await this.requestJson(
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.resetPassword),
+      {
+        method: resolveOperationMethod(
+          CUSTOMER_AUTH_ENDPOINT_OPERATIONS.resetPassword
+        ),
+        body: JSON.stringify({ token, password })
+      }
+    );
   }
   /**
    * Update the authenticated customer's profile (name, phone, marketingConsent)
@@ -4502,9 +4624,11 @@ var CustomerAuth = class {
     const token = this.getToken();
     if (!token) throw new ApiError("Not authenticated", 401);
     const result = await this.requestJson(
-      "/api/customers/me",
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.updateProfile),
       {
-        method: "PATCH",
+        method: resolveOperationMethod(
+          CUSTOMER_AUTH_ENDPOINT_OPERATIONS.updateProfile
+        ),
         headers: { Authorization: `Bearer ${token}` },
         body: JSON.stringify(data)
       }
@@ -4517,11 +4641,16 @@ var CustomerAuth = class {
   async changePassword(currentPassword, newPassword) {
     const token = this.getToken();
     if (!token) throw new ApiError("Not authenticated", 401);
-    await this.requestJson("/api/customers/change-password", {
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}` },
-      body: JSON.stringify({ currentPassword, newPassword })
-    });
+    await this.requestJson(
+      resolveOperationPath(CUSTOMER_AUTH_ENDPOINT_OPERATIONS.changePassword),
+      {
+        method: resolveOperationMethod(
+          CUSTOMER_AUTH_ENDPOINT_OPERATIONS.changePassword
+        ),
+        headers: { Authorization: `Bearer ${token}` },
+        body: JSON.stringify({ currentPassword, newPassword })
+      }
+    );
   }
   /**
    * Get the authenticated customer's orders with pagination and optional status filter
@@ -7039,6 +7168,18 @@ var EventsClient = class {
       { useCustomerAuth: false }
     );
   }
+  listMyRegistrations(params = {}) {
+    const query = new URLSearchParams();
+    if (params.page !== void 0) query.set("page", String(params.page));
+    if (params.limit !== void 0) query.set("limit", String(params.limit));
+    const operation2 = EVENTS_ENDPOINT_OPERATIONS.registrations.listMine;
+    return this.execute(
+      resolveOperationPath(operation2, { query }),
+      resolveOperationMethod(operation2),
+      void 0,
+      { useCustomerAuth: true, noStore: true }
+    );
+  }
   register(params) {
     return this.execute(
       "/api/event-registrations/register",
@@ -7069,6 +7210,7 @@ var EventsClient = class {
     try {
       const response = await httpFetch(endpoint, {
         method,
+        ...options.noStore && { cache: "no-store" },
         apiUrl: this.apiUrl,
         publishableKey: this.publishableKey,
         ...useCustomerAuth && token ? { customerToken: token } : {},
@@ -7261,6 +7403,16 @@ var Client = class _Client {
     this.markets = new MarketDiscovery(
       (options2) => this.collections.from("markets").find(options2)
     );
+    this.benefitVouchers = new CustomerBenefitVouchersApi(
+      "CustomerBenefitVouchersApi",
+      {
+        publishableKey: this.config.publishableKey,
+        apiUrl: this.config.apiUrl,
+        customerToken: () => this.customer.auth.getToken(),
+        onUnauthorized,
+        onRequestId
+      }
+    );
     const membershipApi = new BrowserMembershipApi("MembershipApi", {
       publishableKey: this.config.publishableKey,
       apiUrl: this.config.apiUrl,
@@ -7640,6 +7792,7 @@ function createTypedWebhookHandler(collection, handler) {
 
 // src/core/collection/const.ts
 var INTERNAL_COLLECTIONS = [
+  "benefit-voucher-definitions",
   "users",
   "payload-kv",
   "payload-locked-documents",
@@ -7655,6 +7808,7 @@ var INTERNAL_COLLECTIONS = [
   "tenant-mcp-usage-daily",
   "subscriptions",
   "billing-history",
+  "billing-consent-receipts",
   "usage-rate-cards",
   "usage-invoices",
   "inventory-reservations",