@01.software/sdk 0.73.1 → 0.75.0

package/CHANGELOG.md

@@ -1,5 +1,80 @@
 # @01.software/sdk
 
+## 0.75.0
+
+### Minor Changes
+
+- 3ab46a5: Allow `returnWithRefund` to complete an existing approved Return with `existingReturnId`, preserving the server-owned approval and idempotent replay. Clarify that the initial shipping refund is added separately to the line refund amount.
+
+  BREAKING (0.x minor): `returnWithRefund` now returns `ReturnWithRefundResponse`, matching the actual bounded completion receipt instead of full Return/Transaction documents. Use `refundSeq` and optional `notificationWarning`; read full documents separately when additional fields are needed. Completions without a provider transaction have both `transaction` and `refundSeq` set to null.
+
+- 2a3cdbe: BREAKING (0.x minor): isolate SDK collection declarations from Console Config and Payload global type augmentation. Internal collection slugs no longer resolve to generated documents through `CollectionType`; existing browser/server buckets and runtime access checks are unchanged. Use documented operation DTOs where provided; code managing internal collections must use its application-owned Payload types.
+
+  Remove two unavailable internal relations from populated admission-hold types, including nested order/refund graphs. Preserve the other raw document fields and existing named compatibility types, including `WebhookWithoutSecret`. Consumer Payload applications retain ownership of their own `GeneratedTypes` augmentation. Compatibility disposition follows ADR 0138 and #8960.
+
+- 78bd724: Add opt-in event registration email verification and its typed SDK helper on
+  `client.events` and `server.events`. The Events starter guides new deployments to
+  enable the event email-verification setting and shows an email code step for those
+  events; opt-out events keep immediate registration. Sandbox does not deliver
+  verification codes yet, so test registration there with an opt-out event.
+  Confirmation emails now have a tenant/recipient rolling-hour cap without changing
+  successful registration.
+- 7aa55a1: BREAKING (0.x minor): createFulfillment and updateFulfillment now return FulfillmentMutationResponse instead of the raw Fulfillment document. Shipment mutation receipts retain shipment state, tracking and timestamps while excluding expanded relations and document extensions.
+
+  Migration: tenant, order and fulfillmentOrder are IDs rather than populated documents; fulfillmentOrder is null for legacy unlinked shipments. Branch on null before using that relationship. The receipt no longer includes items, adminNotes, metadata, method or deletedAt. Replace shipment.items?.docs and other document-only reads with an authorized server.collections.from('fulfillments').findById(receipt.id, { joins: { items: { limit: 100 } } }) read. Use the returned order or fulfillmentOrder ID with an authorized read of its owning collection when related details are needed. Remove dependencies on internal method values and populated tenant internals. Authorized collection reads retain their normal field access rules.
+
+- 65f2725: Add `customer.auth.requestWithdrawalCode()` and `withdraw({ emailCode })` for purpose-limited withdrawal reauthentication on accounts without a local password. Existing `withdraw(password)` calls remain supported. Submit the code using the same refresh-family session (preserved across access-token refresh); successful withdrawal clears local credentials. Code-specific reauthentication reasons have a public type.
+
+### Patch Changes
+
+- ed5deda: Classify workspace social provider configuration as internal and synchronize the generated document types without exposing a public collection API.
+- 86ba927: Clarify that prepareFulfillmentOrder must precede createFulfillment because shipment creation requires an in-progress fulfillment order.
+- f8ec410: Update the generated EventOccurrence field documentation to match the Console copy: describe parentPublic as the parent event's public status, separate from sales conditions, and drop the capacity and registrations editing hints. The type structure is unchanged.
+- 79a9e72: Regenerate the `Tenant.tenantPurpose` field documentation in the raw collection document types to match the Console copy: TEST creation has ended and the purpose of retained records is immutable. The type structure is unchanged.
+- c5470fd: Expose the server-only Membership billing anchor day and its source in generated collection types.
+- e0c7231: Refresh the generated Tenant purpose documentation after TEST creation retirement.
+  The SDK type structure and wire format remain unchanged.
+- 287a638: Synchronize generated tenant notification settings and notification event types for occurrence time and venue change notices.
+
+## 0.74.0
+
+### Minor Changes
+
+- a5ac520: **Additive response arm (0.x minor).** `cancelOrder()` already returned this body for an order paid entirely with customer credit; `CancelOrderResponse` now types it as `CancelOrderCreditOnlyCommittedResponse` (exported from `@01.software/sdk`): `cancelCommitted: true`, the restored purchase total as `refundedAmount`, `providerRefunded: false`, and no `transactionId` or `refundPending`. There is no PG refund to run. Runtime behavior is unchanged. Code that assumed a committed response without `transactionId` has `refundedAmount: 0`, or an exhaustive check over `CancelOrderResponse`, needs the new arm.
+- b01549e: Feature progress now supports `customers` and `community` in addition to `ecommerce`. `createServerClient().tenant.featureProgress({ feature })` returns the response for the requested feature (`TenantFeatureProgressResponseFor<F>`): the `ecommerce` response keeps `config.fulfillmentMode`, while `customers` and `community` responses have no `config`. `TenantFeatureProgressResponse` still names the ecommerce response and `TenantFeatureProgressInput` still defaults to `feature: 'ecommerce'`, so existing wrappers keep their types; use `TenantFeatureProgressInput<TenantFeatureProgressFeature>` and `TenantFeatureProgressResponseUnion` to handle every supported feature. `01 feature check customers|community` reports hosted customer sign-in and first public comment setup. Manual items still require an end-to-end check in the app.
+
+  BREAKING (0.x minor): `TenantFeatureProgressFeature` now also includes `'customers'` and `'community'`, so exhaustive handling of that type needs the new cases, and a hand-written `TenantIntrospectionClient` implementation must type `featureProgress` as generic over the requested feature.
+
+- 6b8a188: Feature progress now supports `events`. `createServerClient().tenant.featureProgress({ feature: 'events' })` and `01 feature check events` report whether the workspace event calendar is public and whether a scheduled, not-yet-ended occurrence accepts a free RSVP, plus a manual register, lookup, and cancel check. The check is read-only and does not evaluate remaining capacity or paid admission. The response has no `config`.
+
+  BREAKING (0.x minor): `TenantFeatureProgressFeature` now also includes `'events'`, so exhaustive handling of that type needs the new case.
+
+- f433dee: Feature progress now supports `membership`. `createServerClient().tenant.featureProgress({ feature: 'membership' })` and `01 feature check membership` report whether an active plan has an active price for new sign-ups, plus a manual sign-up, charge, renewal, and cancellation check. Apps that only read or cancel existing memberships can treat the sellable-plan item as optional. The response has no `config`, like `customers` and `community`.
+
+  BREAKING (0.x minor): `TenantFeatureProgressFeature` now also includes `'membership'`, so exhaustive handling of that type needs the new case.
+
+### Patch Changes
+
+- 6814052: Clarify generated Event location JSDoc about the public read visibility of stored online URLs and notes and the privacy of internal notes. Persisted location paths and public read behavior remain unchanged.
+- 65ed375: `Tenant` 생성 타입의 `defaultContentLocale` 설명 주석에 고객 메일도 이 언어로 발송한다는 내용이 추가됩니다. 타입 구조는 변경하지 않습니다.
+- eb457be: Regenerate Payload type documentation after clarifying guest-link expiry guidance in the Console Admin Panel. Only JSDoc changes; field types and API response shapes are unchanged.
+- e1c8158: Order variants by their fractional-indexing `_order` key (code-unit order, keyed before unkeyed; equal to the Admin Panel order for current-format `[0-9a-z]` keys) instead of a `Number()` conversion that turned every key into `NaN`, so listing-group representative variants and `fillDefaults` selections follow the Admin Panel variant order.
+- e0fcb45: Type `createServerClient().video` as non-optional so the documented `createServerClient(...).video.playback(id)` compiles under strict TypeScript without `?.` or `!`. The server client always sets `video` at runtime; `RootServerClient.video` stays optional for structural mocks. A hand-written mock typed as `RootServerClientWithEvents` (or a `withMarket()` stub returning it) now needs a `video` member.
+- 58f915b: `Customer`·`Product` 생성 타입에서 `customData` 속성의 선언 순서만 바뀝니다. 타입 구조는 변경하지 않습니다.
+- 0e826e1: Remove collection-level descriptions from the generated payload types; Console list screens no longer show collection descriptions.
+- 6dea486: Shorten or remove commerce field descriptions in the generated payload types to match the trimmed Console copy.
+- 8530c76: Align event and registration descriptions in the generated payload types with the Console public read terminology and clarify guest-token PII visibility under retention policies. Types and response shapes are unchanged.
+- 9c0c1d5: Point the generated `users.tenants` description at the renamed Settings > Workspace > Project destination.
+- 16b3229: Shorten or remove shared field descriptions (SEO, subtitle, summary, taxonomy, videos) in the generated payload types to match the trimmed Console copy.
+- a26270c: Keep internal profile record creation evidence out of public profile and profile-statistics types while synchronizing the generated storage schema. Ordinary API and GraphQL surfaces do not expose `recordCreatedAt`.
+- 1d52b00: Shorten or remove customer and membership field descriptions in the generated payload types to match the trimmed Console copy.
+- a16f609: Shorten or remove content, community and event field descriptions in the generated payload types to match the trimmed Console copy.
+- 4165ada: Add `voided` to the generated `MembershipUnappliedPaidEvidence.reason` values for late paid evidence on expired setup charges.
+- 27f0891: Shorten or remove workspace, settings and system field descriptions in the generated payload types to match the trimmed Console copy.
+- 5376b13: Fix product listing-page search requests to query title and slug only, avoiding HTTP 400 errors caused by querying the nonexistent Products handle field.
+- fb854bc: 생성 타입에서 입장 유형 `priceReference` 필드 설명 주석을 갱신한다. 런타임과 타입 시그니처 변경은 없다.
+- 809b7db: Clarify the generated Video viewCount documentation to reflect that views are not currently collected automatically. The type structure is unchanged.
+
 ## 0.73.1
 
 ### Patch Changes

package/README.md

@@ -472,6 +472,8 @@ addendum in `docs/decisions/0012-sdk-public-commerce-contract.md`.
 
 ### Product Listing Pages (PLP) — join-safe queries
 
+`search` trims surrounding whitespace and matches product `title` or `slug`.
+
 **Recommended path:** Use `commerce.product.listingPage()` (or
 `createQueryHooks(client).useProductListingPage()`) for greenfield storefront
 PLPs. It wraps the cacheable listing-groups query endpoint, keeps the raw
@@ -977,6 +979,12 @@ const client = createClient({ publishableKey: '...' })
 const query = createQueryHooks(client, getStorefrontQueryClient())
 ```
 
+SDK document declarations are independent of your application's Payload
+`GeneratedTypes`: importing the SDK does not register the Console schema in
+Payload. `CollectionType<T>` resolves browser-public and server-only raw
+collection documents; internal slugs remain classification vocabulary only.
+Existing named raw exports, including `Tenant`, keep their compatibility shapes.
+
 ## Advanced: direct Payload queries (escape hatch)
 
 Most consumers should use the helper APIs above (`commerce.product.detail`, etc.). The query builder below is the escape hatch for advanced cases the helpers do not cover: bulk operations, custom filter combinations, or fields the helper response does not expose.
@@ -1567,12 +1575,36 @@ erase personal data or free the email for a new registration.
 Branch on `SDKError.apiReason`: `active_membership_exists` (409) requires the
 membership to end first, including scheduled cancellations still in an active
 status; `reauthentication_unavailable` (409) means no local password is set and
-the customer should contact the tenant administrator. Incorrect passwords use
+the customer must request a withdrawal-only email code. Incorrect passwords use
 the shared login attempt counter and temporary lock (`account_locked`, 423).
 Refusal leaves the SDK credentials intact. Server keys cannot withdraw on a
 customer's behalf. Operator restore continues to follow the existing archive
 rules; the withdrawal timestamp is retained.
 
+Customers without local password material, including social-only accounts, use
+withdrawal-only email reauthentication:
+
+```ts
+await client.customer.auth.requestWithdrawalCode()
+// Collect the code sent to the stored email, keeping the same refresh-family session.
+const { withdrawnAt } = await client.customer.auth.withdraw({ emailCode })
+```
+
+The six-digit code expires after 10 minutes, is single-use and cannot sign in.
+Ten invalid proofs block code verification for 15 minutes. Reissuing does not
+reset that budget. Refresh within the same family preserves the proof; a new
+login/family needs a new code. Issuance accepts JSON `{}` and is limited to
+5 requests per minute and 10 per hour per tenant/customer.
+`password_reauthentication_required` (409) means this account must use its local
+password. `withdrawal_session_refresh_required` (409) means its access token
+predates the stable session claim: refresh the existing direct session with
+`customer.auth.refreshToken()`, or the hosted session with `customer.oauth.refresh()`,
+store the returned pair, and retry code issuance. These code-specific 409 values
+are typed by `CustomerWithdrawalCodeReauthenticationReason`; common HTTP/auth
+reasons still apply. No code is issued before this refresh.
+No terms acknowledgement or new login session is required. `invalid_code` (401)
+requires a valid new proof; `service_unavailable` (503) keeps withdrawal denied.
+
 ### Market discovery
 
 Discover a tenant's active buyer markets and resolve the default market. These
@@ -1660,9 +1692,24 @@ customer already owns returns `resolution: 'unchanged'` and writes nothing, so
 the revision you last observed stays valid for the next mutation. Because it
 writes nothing, such a merge does not count as Cart activity for stale-Cart
 cleanup.
+`carts.merge` rejects an unknown or wrong `guestCartToken`, or a Cart belonging to another
+customer or tenant, with the same `404/not_found` envelope without writes.
+The response does not reveal which case occurred. Branch on
+`reason`, and use `requestId` for support correlation rather than comparing error text.
 Treat a replayed Cart result as an operation receipt: never replace a newer
 cached Cart with a lower `revision`; retrieve when response ordering is unclear.
 
+A customer can have more than one active Cart, because `carts.create` always
+creates a new Cart. `carts.mine` returns the active Cart with the latest
+`createdAt`, and `carts.merge` merges a guest Cart into that same Cart. When
+`createdAt` is equal, the Cart with the higher `id` is chosen. Merging an active
+Cart the customer already owns returns that Cart `unchanged`, even when it is an
+older Cart.
+
+If the guest Cart's market differs from that chosen Cart, `carts.merge` returns
+`409 cart_market_mismatch`. It does not merge into an older Cart in the guest
+Cart's market instead.
+
 Shipping Checkout creation requires a request `shippingAddress` or a valid
 stored Cart address whenever any line has `requiresShipping !== false`.
 `recipientName`, `phone`, `postalCode`, `address`, and `detailAddress` must be nonblank after trimming. Otherwise,
@@ -1957,9 +2004,12 @@ Customer order reads remain available through
 The SDK root no longer exports raw generated `Order`, `Transaction`, `Cart`, or
 `CartItem` Payload documents. Use the canonical `PublicOrder` / `PublicCart`
 DTOs for storefront code and explicit server collection types only inside
-trusted operational code. Order cancellation no longer returns the deprecated
-inline provider-refund branch. `refundPending` is a local financial marker, not
-authority for caller provider I/O:
+trusted operational code. SDK types no longer include the retired inline
+provider-refund flow. An order whose cancellation started through that flow can
+still return `providerRefunded: true` with `refundSeq`, or an uncommitted body
+with `reconciliationRequired: true`. These bounded legacy bodies remain outside
+`CancelOrderResponse`. `refundPending` is a local financial marker, not authority
+for caller provider I/O:
 
 | Captured payment lane                                   | Provider refund owner        | `resolveCancelRefund`                                                               |
 | ------------------------------------------------------- | ---------------------------- | ----------------------------------------------------------------------------------- |
@@ -1982,6 +2032,13 @@ as a committed cancellation and never start a provider refund from your
 storefront or BFF. A retry reads or resumes the same Console refund. Registered
 PortOne and credit-funded managed orders still return the pending marker.
 
+For an order paid entirely with customer credit, `cancelOrder()` restores credit
+inside the cancel commit and returns `CancelOrderCreditOnlyCommittedResponse`:
+`cancelCommitted: true`, the positive restored purchase total as
+`refundedAmount`, and `providerRefunded: false`, with neither `transactionId`
+nor `refundPending`. There is no PG refund to run. A later domain retry uses the
+ordinary `alreadyCanceled` arm with the same `refundedAmount`.
+
 Managed ownership follows the captured Transaction's exact tenant-bound
 PaymentSession and historical registered account. Order/provider/environment
 drift remains Console-owned corruption. Unresolved or cross-tenant identity
@@ -2022,6 +2079,7 @@ await server.commerce.orders.createReturn({
 await server.commerce.orders.updateReturn({ returnId, status })
 await server.commerce.orders.returnWithRefund({
   orderNumber,
+  existingReturnId?,
   returnItems: [{ orderItem, quantity, restockingFee? }],
   refundAmount,
   returnShippingFee?,
@@ -2031,6 +2089,26 @@ await server.commerce.orders.returnWithRefund({
 })
 ```
 
+**BREAKING (0.x minor):** `createFulfillment` and `updateFulfillment` return `FulfillmentMutationResponse` instead of a raw `Fulfillment` document. Shipment state, tracking and timestamps remain in the receipt.
+
+- `tenant`, `order` and `fulfillmentOrder` contain IDs instead of populated documents. Legacy unlinked shipments return `fulfillmentOrder: null`; check for null before reading the related work order.
+- `items`, `adminNotes`, `metadata`, `method` and `deletedAt` are absent from the receipt. Replace `shipment.items?.docs` and other document-only reads with `server.collections.from('fulfillments').findById(receipt.id, { joins: { items: { limit: 100 } } })` under authorized server credentials. Read related details from their owning collection using the returned ID. Remove dependencies on internal `method` values and populated tenant internals; collection reads retain their normal field access rules.
+
+`returnWithRefund` can complete an existing approved Return by passing
+`existingReturnId` with its `orderNumber`. The server uses the persisted approval's
+items, amounts, fees and reason; caller values cannot widen it. Keep the required
+`returnItems` and positive `refundAmount` in the request. The line refund is after
+return shipping/restocking fees; the initial shipping refund is added separately.
+Repeat the same request and `idempotencyKey` after response loss.
+
+The result is a bounded completion receipt: `return` includes only `id`,
+`status`, `refundAmount`, `returnShippingFee`, `initialShippingRefundAmount` and
+`completedAt`. A provider refund includes `transaction` (`id`, `type`, `kind`,
+`status`, `amount`, `providerEventId`) and numeric `refundSeq`; a completion
+without a provider transaction has `transaction: null` and `refundSeq: null`.
+`notificationWarning` may report a post-commit display/notification problem;
+the refund has completed. Read full documents separately if needed.
+
 ### Commerce Discounts / Shipping
 
 Available on both Client (customer JWT) and ServerClient (secretKey).
@@ -2354,6 +2432,12 @@ replacement API. Pass an empty list to clear codes. Singular `admission`,
 Browser `mine()`/`merge({ guestCartToken })` derive customer identity from the
 JWT; server calls require an explicit `customerToken`.
 
+### Event discovery and unlisted links
+
+`client.events.getRange()` lists published events with `visibility=public`. Its pages and totals exclude `unlisted` events, as do Publishable Key raw event and occurrence lists and counts. For an unlisted link, retain the event and occurrence IDs and read each with `client.collections.from('events').findById(eventId)` and `client.collections.from('event-occurrences').findById(occurrenceId)`. Registration remains available when the event and occurrence meet the registration rules.
+
+An id or slug filter on a raw list still follows listing visibility. To make an event discoverable, select `visibility=public`. Refresh cached lists and totals when the server's listing behavior changes.
+
 ### Event admission availability
 
 For paid admission choices, call
@@ -2962,3 +3046,24 @@ zero provider amount and restores credit only. A full-credit Order rejects any
 `pgPaymentId` or `paymentKey`; never invent an identifier. Explicit blank values
 remain invalid. Orders without credit funding retain `400/validation_failed`
 when `pgPaymentId` is omitted. Refund amount, credential, tenant and ecommerce authority remain unchanged.
+
+### Event registration email verification
+
+For an event with **Verify registration email** enabled, call
+`client.events.requestRegistrationEmailVerification(input)` before registering.
+When `verificationRequired` is true, collect the emailed eight-digit code, then
+pass the same input plus `emailVerification: { requestId, code }` to
+`client.events.register`. The code expires after 15 minutes and five attempts.
+No registration or seats exist until successful verification and a fresh capacity
+check. Opt-out events retain the existing register result and immediate behavior.
+Confirmation mail has a ten-per-hour tenant/recipient cap; suppression does not
+cancel registration. Event-cancellation notices are exempt. Verification mail has
+its own three-per-hour cap and a 60-second resend interval, plus ordinary email quota.
+
+The request returns a processing receipt before delivery in Live and Sandbox.
+Recipient limits suppress background delivery behind that same receipt; the
+recipient-independent tenant admission limit still returns synchronous 429.
+Only an active member of the exact Sandbox with a verified current email receives
+the code, using platform From, a `[Sandbox]` subject and no Reply-To. Other
+recipients and ordinary event mail are captured. Sandbox keeps its shared
+100/month non-billable email ceiling. A receipt confirms neither delivery nor seats.

package/dist/client.cjs

@@ -1379,16 +1379,28 @@ var CUSTOMER_AUTH_ENDPOINT_OPERATIONS = {
   resetPassword: operation("customers", "post", "/reset-password"),
   changePassword: operation("customers", "post", "/change-password"),
   revokeRefresh: operation("customers", "post", "/revoke-refresh"),
-  withdraw: operation("customers", "post", "/withdraw")
+  withdraw: operation("customers", "post", "/withdraw"),
+  requestWithdrawalCode: operation("customers", "post", "/withdraw/email-code")
 };
 var EMBEDDED_ADMIN_ENDPOINT_OPERATIONS = {
   show: operation("tenants", "get", "/embedded-admin-app"),
   configure: operation("tenants", "patch", "/embedded-admin-app"),
   disable: operation("tenants", "delete", "/embedded-admin-app")
 };
+var FIELD_CONFIG_ENDPOINT_OPERATIONS = {
+  list: operation("field-configs", "get", "/list"),
+  save: operation("field-configs", "post", "/save")
+};
 var EVENTS_ENDPOINT_OPERATIONS = {
   registrations: {
     register: operation("event-registrations", "post", "/register"),
+    requestEmailVerification: operation(
+      "event-registrations",
+      "post",
+      "/request-email-verification"
+    ),
+    emailCancelPage: operation("event-registrations", "get", "/email-cancel"),
+    emailCancel: operation("event-registrations", "post", "/email-cancel"),
     guestLookup: operation("event-registrations", "post", "/guest/lookup"),
     guestLookupByUrl: operation("event-registrations", "get", "/guest/:token"),
     guestCancel: operation("event-registrations", "post", "/guest/cancel"),
@@ -1427,6 +1439,9 @@ var VIDEO_ENDPOINT_OPERATIONS = {
 function resolveOperationTemplate(descriptor) {
   return descriptor.collection ? `/api/${descriptor.collection}${descriptor.path}` : `/api${descriptor.path}`;
 }
+var PAYMENT_DIAGNOSTIC_ENDPOINT_OPERATIONS = {
+  diagnose: operation("tenants", "get", "/payment-diagnostics")
+};
 function resolveOperationPath(descriptor, options) {
   const path = resolveOperationTemplate(descriptor).replace(
     /:([A-Za-z][A-Za-z0-9_]*)/g,
@@ -4801,8 +4816,25 @@ var CustomerAuth = class {
       body: JSON.stringify({ refreshToken })
     });
   }
-  /** Archive the current password account and clear this client's credentials on success. */
-  async withdraw(currentPassword) {
+  /** Send a withdrawal-only code to the current passwordless customer's stored email. */
+  async requestWithdrawalCode() {
+    const token = this.getToken();
+    if (!token) throw new ApiError("Not authenticated", 401);
+    const operation2 = CUSTOMER_AUTH_ENDPOINT_OPERATIONS.requestWithdrawalCode;
+    const result = await this.requestJson(
+      resolveOperationPath(operation2),
+      {
+        method: resolveOperationMethod(operation2),
+        headers: { Authorization: `Bearer ${token}` },
+        body: JSON.stringify({})
+      }
+    );
+    if (!result || typeof result.message !== "string")
+      throw new ApiError("Invalid withdrawal code response", 502);
+    return result;
+  }
+  /** Archive the current account and clear this client's credentials on success. */
+  async withdraw(proof) {
     const token = this.getToken();
     if (!token) throw new ApiError("Not authenticated", 401);
     const operation2 = CUSTOMER_AUTH_ENDPOINT_OPERATIONS.withdraw;
@@ -4811,7 +4843,9 @@ var CustomerAuth = class {
       {
         method: resolveOperationMethod(operation2),
         headers: { Authorization: `Bearer ${token}` },
-        body: JSON.stringify({ currentPassword })
+        body: JSON.stringify(
+          typeof proof === "string" ? { currentPassword: proof } : proof
+        )
       }
     );
     if (!result || typeof result.withdrawnAt !== "string" || !Number.isFinite(Date.parse(result.withdrawnAt)))
@@ -6223,10 +6257,13 @@ function buildProductHref(product, group, options = {}) {
   return params.size > 0 ? `${path}?${params.toString()}` : path;
 }
 function compareVariantOrder(a, b) {
-  const aOrder = Number(a._order ?? Number.MAX_SAFE_INTEGER);
-  const bOrder = Number(b._order ?? Number.MAX_SAFE_INTEGER);
-  if (Number.isFinite(aOrder) && Number.isFinite(bOrder) && aOrder !== bOrder) {
-    return aOrder - bOrder;
+  const aOrder = a._order || null;
+  const bOrder = b._order || null;
+  if (aOrder !== bOrder) {
+    if (aOrder === null) return 1;
+    if (bOrder === null) return -1;
+    const byOrder = compareOrdinal(aOrder, bOrder);
+    if (byOrder !== 0) return byOrder;
   }
   const aId = String(getRelationID(a.id) ?? "");
   const bId = String(getRelationID(b.id) ?? "");
@@ -6477,11 +6514,7 @@ function buildProductListingPageWhere(params) {
   const search = params.search?.trim();
   if (search) {
     clauses.push({
-      or: [
-        { title: { like: search } },
-        { slug: { like: search } },
-        { handle: { like: search } }
-      ]
+      or: [{ title: { like: search } }, { slug: { like: search } }]
     });
   }
   const filters = params.filters;
@@ -6751,6 +6784,15 @@ var EventsClient = class {
       { useCustomerAuth: true }
     );
   }
+  requestRegistrationEmailVerification(params) {
+    const operation2 = EVENTS_ENDPOINT_OPERATIONS.registrations.requestEmailVerification;
+    return this.execute(
+      resolveOperationPath(operation2),
+      resolveOperationMethod(operation2),
+      buildRegistrationRequestBody(params),
+      { useCustomerAuth: true, noStore: true }
+    );
+  }
   getGuestRegistration(token) {
     return this.execute(
       resolveOperationPath(
@@ -6803,7 +6845,10 @@ function buildRegistrationRequestBody(params) {
     occurrence: params.occurrence,
     ...params.quantity !== void 0 && { quantity: params.quantity },
     ...params.attendee !== void 0 && { attendee: params.attendee },
-    ...params.answers !== void 0 && { answers: params.answers }
+    ...params.answers !== void 0 && { answers: params.answers },
+    ...params.emailVerification !== void 0 && {
+      emailVerification: params.emailVerification
+    }
   };
 }
 function buildGuestCancelRequestBody(token, params) {