@adobe/aio-commerce-lib-admin-ui 0.1.0 → 0.2.0-beta-20260714082406

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @adobe/aio-commerce-lib-admin-ui
 
+## 0.2.0-beta-20260714082406
+### Minor Changes
+
+
+
+- [#528](https://github.com/adobe/aio-commerce-sdk/pull/528) [`0bb7d15`](https://github.com/adobe/aio-commerce-sdk/commit/0bb7d150961f631116b1ac421124960b5b857896) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - Add `getGridColumnAclResourceId`, `getMassActionAclResourceId`, and `getOrderViewButtonAclResourceId` helpers to derive the Commerce ACL resource id for protected grid columns, mass actions, and order view buttons, mirroring `getMenuAclResourceId`.
+
+
+
+- [#522](https://github.com/adobe/aio-commerce-sdk/pull/522) [`4396a64`](https://github.com/adobe/aio-commerce-sdk/commit/4396a647ad22dba063cdf03a16e04aef9387212f) Thanks [@oshmyheliuk](https://github.com/oshmyheliuk)! - Add `getAdminUiPermissionClient` for checking ACL permissions at runtime (SPA bootstrap and runtime action entry). Includes in-process TTL cache, in-flight request deduplication, and deny-by-default on errors. Also exports `getAclResourceId` for deterministic ACL resource id derivation from `metadata.id`.
+
+
+
+- [#542](https://github.com/adobe/aio-commerce-sdk/pull/542) [`c15b50f`](https://github.com/adobe/aio-commerce-sdk/commit/c15b50f667e6d1288270dbd4192c150db0ff0914) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Add browser helpers for Admin UI iframe extensions.
+
+
+
+- [#508](https://github.com/adobe/aio-commerce-sdk/pull/508) [`c36f825`](https://github.com/adobe/aio-commerce-sdk/commit/c36f825aff7329fc2831d8aaca032d17bbee373a) Thanks [@iivvaannxx](https://github.com/iivvaannxx)! - Add `@adobe/aio-commerce-lib-admin-ui/menu` entrypoint with named constants for Commerce Admin menu IDs (`MENU_SALES`, `MENU_CATALOG`, etc.), a `COMMERCE_MENUS` collection, a `CommerceMenu` type, and an `isCommerceMenu` type guard.
+
+
+
+- [#516](https://github.com/adobe/aio-commerce-sdk/pull/516) [`bdcced9`](https://github.com/adobe/aio-commerce-sdk/commit/bdcced9297ae5e1b87ce86490a2b6fad76b2e341) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Add `order-view-buttons` entrypoint with request parsing and response builders for `commerce/backend-ui/2` order view button handlers.
+
+
+
+- [#551](https://github.com/adobe/aio-commerce-sdk/pull/551) [`a66f389`](https://github.com/adobe/aio-commerce-sdk/commit/a66f3892622584d27cd6b5d2fc633e15bf9942a8) Thanks [@asalloum5](https://github.com/asalloum5)! - Add `enableAdminUiSdk` to the Admin UI API client, which enables the Admin UI SDK in Commerce via `PUT /V1/adminuisdk/config`.
+
+
+
+- [#486](https://github.com/adobe/aio-commerce-sdk/pull/486) [`413da36`](https://github.com/adobe/aio-commerce-sdk/commit/413da36dcd83e5a41c194f5af50611097659e725) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Add request and response builders for the `commerce/backend-ui/2` grid column wire contract.
+
+
+
+- [#546](https://github.com/adobe/aio-commerce-sdk/pull/546) [`ca2c4fe`](https://github.com/adobe/aio-commerce-sdk/commit/ca2c4febcdfbe52b933775f08e9a53765fc306ab) Thanks [@obarcelonap](https://github.com/obarcelonap)! - Remove `extensionUrl` from extension registration params. The Commerce backend now derives the view URL from the App Registry, so the field has no effect for v2 installed apps.
+
+
+
+- [#492](https://github.com/adobe/aio-commerce-sdk/pull/492) [`ce63b2b`](https://github.com/adobe/aio-commerce-sdk/commit/ce63b2b46f7ef1f2f68780b13e52d1c13fd5fe6e) Thanks [@jcuerdo](https://github.com/jcuerdo)! - Add `mass-actions` entrypoint with wire contract helpers for `commerce/backend-ui/2` mass actions. Parse worker action requests with `parseMassActionRequest`, build success/error responses with `okMassActionResponse`/`errorMassActionResponse`, and parse iframe selection parameters with `parseMassActionSelection`.
+
+
+### Patch Changes
+
+- Updated dependencies [[`19400fb`](https://github.com/adobe/aio-commerce-sdk/commit/19400fbdfc03c5bbfc30f995a2acdd4272c5e032), [`ce7768e`](https://github.com/adobe/aio-commerce-sdk/commit/ce7768e0ddc6ca35ad6ccec60f584c8bb5a743f0), [`4396a64`](https://github.com/adobe/aio-commerce-sdk/commit/4396a647ad22dba063cdf03a16e04aef9387212f), [`e85bec4`](https://github.com/adobe/aio-commerce-sdk/commit/e85bec40f1eaa91dd6bb7bc6954b2ecfc3ea4029), [`413da36`](https://github.com/adobe/aio-commerce-sdk/commit/413da36dcd83e5a41c194f5af50611097659e725)]:
+  - @adobe/aio-commerce-lib-core@1.2.0-beta-20260714082406
+  - @adobe/aio-commerce-lib-api@1.3.0-beta-20260714082406
+
 ## 0.1.0
 
 ### Minor Changes

package/README.md

@@ -1,6 +1,6 @@
 # `@adobe/aio-commerce-lib-admin-ui`
 
-This package provides utilities for interacting with the Adobe Commerce Admin UI SDK API.
+This package provides utilities for interacting with the Adobe Commerce Admin UI SDK API, the extension points (grid columns, mass actions, menu, order view buttons), and browser-side helpers for Admin UI iframe extensions.
 
 ## Installation
 

package/dist/cjs/acl-resource-id-DBlYU0DE.d.cts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+//#region source/api/lib/acl-resource-id.d.ts
+/**
+ * Derives the deterministic Commerce ACL resource id for an app from its metadata id.
+ *
+ * The id is assembled as {@link PREFIX} + sanitized `metadataId`, where sanitization trims
+ * whitespace, lowercases, and replaces every character outside `[a-z0-9_]` with `_`.
+ * `"Magento_CommerceBackendUix::adminuisdk_app_"` is that fixed constant prefix — not a
+ * placeholder — so the example below is fully reproducible from the given argument:
+ *
+ * @example
+ * ```
+ * getAclResourceId("approval-dashboard-app")
+ * // PREFIX                                    + sanitize("approval-dashboard-app")
+ * // "Magento_CommerceBackendUix::adminuisdk_app_" + "approval_dashboard_app"
+ * // → "Magento_CommerceBackendUix::adminuisdk_app_approval_dashboard_app"
+ * ```
+ *
+ * @param metadataId - The application's `metadata.id` value (e.g. `"approval-dashboard-app"`).
+ * @returns The full Commerce ACL resource id, or an empty string when `metadataId` is blank.
+ */
+declare function getAclResourceId(metadataId: string): string;
+/** Commerce entity an Admin UI component is attached to. */
+type AdminUiEntity = "order" | "product" | "customer";
+//#endregion
+export { getAclResourceId as n, AdminUiEntity as t };

package/dist/cjs/acl-resource-id-D_hCU1Qg.cjs

@@ -0,0 +1,69 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+
+//#region source/api/lib/acl-resource-id.ts
+/**
+* Fixed, constant prefix that every Admin UI SDK ACL resource id starts with.
+* It is owned by Commerce and is a stable part of the cross-repo id contract.
+*
+* @internal Exported for use by domain ACL helpers only — not part of the public API.
+*/
+const PREFIX = "Magento_CommerceBackendUix::adminuisdk_app_";
+/**
+* Sanitizes a single ACL id segment: trims whitespace, lowercases, and replaces every
+* character outside [a-z0-9_] with an underscore.
+*
+* @internal Exported for use by domain ACL helpers only — not part of the public API.
+*/
+function sanitizeSegment(segment) {
+	return segment.trim().toLowerCase().replace(/[^a-z0-9_]/g, "_");
+}
+/**
+* Derives the deterministic Commerce ACL resource id for an app from its metadata id.
+*
+* The id is assembled as {@link PREFIX} + sanitized `metadataId`, where sanitization trims
+* whitespace, lowercases, and replaces every character outside `[a-z0-9_]` with `_`.
+* `"Magento_CommerceBackendUix::adminuisdk_app_"` is that fixed constant prefix — not a
+* placeholder — so the example below is fully reproducible from the given argument:
+*
+* @example
+* ```
+* getAclResourceId("approval-dashboard-app")
+* // PREFIX                                    + sanitize("approval-dashboard-app")
+* // "Magento_CommerceBackendUix::adminuisdk_app_" + "approval_dashboard_app"
+* // → "Magento_CommerceBackendUix::adminuisdk_app_approval_dashboard_app"
+* ```
+*
+* @param metadataId - The application's `metadata.id` value (e.g. `"approval-dashboard-app"`).
+* @returns The full Commerce ACL resource id, or an empty string when `metadataId` is blank.
+*/
+function getAclResourceId(metadataId) {
+	if (metadataId.trim() === "") return "";
+	return `${PREFIX}${sanitizeSegment(metadataId)}`;
+}
+
+//#endregion
+Object.defineProperty(exports, 'getAclResourceId', {
+  enumerable: true,
+  get: function () {
+    return getAclResourceId;
+  }
+});
+Object.defineProperty(exports, 'sanitizeSegment', {
+  enumerable: true,
+  get: function () {
+    return sanitizeSegment;
+  }
+});

package/dist/cjs/api/index.cjs

@@ -0,0 +1,252 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_rolldown_runtime = require('../rolldown-runtime-Cx6hovH8.cjs');
+const require_acl_resource_id = require('../acl-resource-id-D_hCU1Qg.cjs');
+const require_utils = require('../utils-B59fjd_w.cjs');
+let _adobe_aio_commerce_lib_core_error = require("@adobe/aio-commerce-lib-core/error");
+let _adobe_aio_commerce_lib_api = require("@adobe/aio-commerce-lib-api");
+let valibot = require("valibot");
+valibot = require_rolldown_runtime.__toESM(valibot, 1);
+let ky = require("ky");
+
+//#region source/errors.ts
+/** Base error for Admin UI SDK permission helper failures. */
+var AdminUiPermissionError = class extends _adobe_aio_commerce_lib_core_error.CommerceSdkErrorBase {};
+/** Error thrown when the current user is denied access to an Admin UI SDK ACL resource. */
+var AdminUiPermissionDeniedError = class extends AdminUiPermissionError {
+	resource;
+	constructor(resource, options) {
+		super(`Admin UI SDK permission denied for resource: ${resource}`, options);
+		this.resource = resource;
+	}
+};
+
+//#endregion
+//#region source/api/config/endpoints.ts
+var endpoints_exports$1 = /* @__PURE__ */ require_rolldown_runtime.__exportAll({ enableAdminUiSdk: () => enableAdminUiSdk });
+/**
+* Enables the Admin UI SDK in Commerce via PUT /V1/adminuisdk/config.
+*
+* This must be called before {@link registerExtension} so that Commerce accepts
+* the extension registration; registering an extension while the SDK is disabled
+* leaves the extension unavailable in the Admin UI.
+*
+* @param httpClient - The {@link AdobeCommerceHttpClient} to use to make the request.
+* @param fetchOptions - Optional Ky fetch options.
+*
+* @throws An `HTTPError` if the status code is not 2XX.
+*/
+async function enableAdminUiSdk(httpClient, fetchOptions) {
+	return httpClient.put("adminuisdk/config", {
+		...fetchOptions,
+		json: { enableAdminUiSdk: true }
+	}).json();
+}
+
+//#endregion
+//#region source/api/extensions/schema.ts
+/** Parameters for POST /V1/adminuisdk/extension. */
+const ExtensionRegistrationParamsSchema = valibot.object({
+	extensionName: valibot.pipe(valibot.string(), valibot.minLength(1)),
+	extensionTitle: valibot.pipe(valibot.string(), valibot.minLength(1)),
+	extensionWorkspace: valibot.pipe(valibot.string(), valibot.minLength(1))
+});
+/** Parameters for DELETE /V1/adminuisdk/extension/{workspaceName}/{extensionName}. */
+const UnregisterExtensionParamsSchema = valibot.object({
+	extensionName: valibot.pipe(valibot.string(), valibot.minLength(1)),
+	workspaceName: valibot.pipe(valibot.string(), valibot.minLength(1))
+});
+
+//#endregion
+//#region source/api/extensions/endpoints.ts
+var endpoints_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
+	registerExtension: () => registerExtension,
+	unregisterExtension: () => unregisterExtension
+});
+/**
+* Registers an Admin UI extension with Commerce via POST /V1/adminuisdk/extension.
+*
+* @param httpClient - The {@link AdobeCommerceHttpClient} to use to make the request.
+* @param params - The extension registration parameters.
+* @param fetchOptions - Optional Ky fetch options.
+*
+* @throws A `CommerceSdkValidationError` if the parameters are invalid.
+* @throws An `HTTPError` if the status code is not 2XX.
+*/
+async function registerExtension(httpClient, params, fetchOptions) {
+	const extension = require_utils.parseOrThrow(ExtensionRegistrationParamsSchema, params);
+	return httpClient.post("adminuisdk/extension", {
+		...fetchOptions,
+		json: { extension }
+	}).json();
+}
+/**
+* Unregisters an Admin UI extension from Commerce via DELETE /V1/adminuisdk/extension/{workspaceName}/{extensionName}.
+*
+* @param httpClient - The {@link AdobeCommerceHttpClient} to use to make the request.
+* @param params - The workspace and extension names.
+* @param fetchOptions - Optional Ky fetch options.
+*
+* @throws A `CommerceSdkValidationError` if the parameters are invalid.
+* @throws An `HTTPError` if the status code is not 2XX.
+*/
+async function unregisterExtension(httpClient, params, fetchOptions) {
+	const { workspaceName, extensionName } = require_utils.parseOrThrow(UnregisterExtensionParamsSchema, params);
+	return httpClient.delete(`adminuisdk/extension/${workspaceName}/${extensionName}`, fetchOptions).then((_res) => {});
+}
+
+//#endregion
+//#region source/api/lib/api-client.ts
+/**
+* Creates a new API client for the Admin UI API with all available operations.
+*
+* @param params - The parameters to build the Commerce HTTP client.
+*/
+function createAdminUiApiClient(params) {
+	return _adobe_aio_commerce_lib_api.ApiClient.create(new _adobe_aio_commerce_lib_api.AdobeCommerceHttpClient(params), {
+		...endpoints_exports$1,
+		...endpoints_exports
+	});
+}
+
+//#endregion
+//#region source/api/permissions/schema.ts
+/** Response shape returned by the Admin UI SDK permission check endpoint. */
+const permissionCheckResponseSchema = valibot.object({ allowed: valibot.boolean() });
+
+//#endregion
+//#region source/api/permissions/endpoints.ts
+/**
+* Checks whether the current user has the given ACL resource granted via POST /V1/adminuisdk/permission/check.
+* This is the raw HTTP call — prefer {@link getAdminUiPermissionClient} for caching and deduplication.
+*
+* @param httpClient - The {@link AdobeCommerceHttpClient} to use to make the request.
+* @param params - The resource to check.
+*
+* @throws {@link HTTPError} if the response status is not in the 2xx range.
+*/
+async function checkPermission(httpClient, params) {
+	return require_utils.parseOrThrow(permissionCheckResponseSchema, await httpClient.post("adminuisdk/permission/check", { json: { resource: params.resource } }).json());
+}
+
+//#endregion
+//#region source/api/lib/permission-client.ts
+const DEFAULT_CACHE_TTL_MS = 3e5;
+/** Returns true when the error is an HTTP 401 Unauthorized response from ky. */
+function isUnauthorizedError(error) {
+	return error instanceof ky.HTTPError && error.response.status === 401;
+}
+/** Wraps an arbitrary thrown value in an `AdminUiPermissionError`, passing through instances that are already one. */
+function toPermissionError(error) {
+	return error instanceof AdminUiPermissionError ? error : new AdminUiPermissionError("Permission check failed", { cause: error });
+}
+/**
+* Creates a client for checking Admin UI SDK ACL resources.
+*
+* @param options - Client configuration; see {@link AdminUiPermissionClientOptions}.
+* @returns An {@link AdminUiPermissionClient} for checking and requiring ACL resources.
+*/
+function getAdminUiPermissionClient(options) {
+	const { httpClient, appId, cacheTtlMs = DEFAULT_CACHE_TTL_MS, denyOnError = true } = options;
+	const cache = /* @__PURE__ */ new Map();
+	const inFlight = /* @__PURE__ */ new Map();
+	/**
+	* Performs the network request for `resource` and maps the outcome to a `PermissionCheckResult`.
+	* Always throws `AdminUiPermissionError` on 401. On other errors, returns a non-cacheable error
+	* result when `denyOnError` is true, or re-throws otherwise.
+	*/
+	async function fetchCheck(resource) {
+		try {
+			return {
+				allowed: (await checkPermission(httpClient, { resource })).allowed,
+				cacheable: true
+			};
+		} catch (error) {
+			if (isUnauthorizedError(error)) throw new AdminUiPermissionError("Unauthorized", { cause: error });
+			if (denyOnError) return {
+				cacheable: false,
+				error: toPermissionError(error)
+			};
+			throw toPermissionError(error);
+		}
+	}
+	/**
+	* Returns a permission check result for `resource`, serving from the TTL cache or an
+	* in-flight request when available, and falling back to a fresh `fetchCheck` call otherwise.
+	* Successful cacheable results are written to the TTL cache once the in-flight promise settles.
+	*/
+	function resolveCheck(resource) {
+		if (cacheTtlMs > 0) {
+			const cached = cache.get(resource);
+			if (cached !== void 0 && cached.expiresAt > Date.now()) return {
+				allowed: cached.value,
+				cacheable: true
+			};
+		}
+		const existing = inFlight.get(resource);
+		if (existing !== void 0) return existing;
+		const trackedPromise = fetchCheck(resource).then((result) => {
+			if (cacheTtlMs > 0 && result.cacheable && inFlight.get(resource) === trackedPromise) cache.set(resource, {
+				expiresAt: Date.now() + cacheTtlMs,
+				value: result.allowed
+			});
+			return result;
+		}).finally(() => {
+			if (inFlight.get(resource) === trackedPromise) inFlight.delete(resource);
+		});
+		inFlight.set(resource, trackedPromise);
+		return trackedPromise;
+	}
+	/**
+	* Resolves the ACL resource id for a call: uses the explicit argument when provided,
+	* otherwise derives it from `appId`. Returns an empty string when neither source yields a
+	* valid id, which callers interpret as "no resource available."
+	*/
+	function resolveResource(resource) {
+		return resource ?? require_acl_resource_id.getAclResourceId(appId ?? "");
+	}
+	return {
+		async check(resource) {
+			const resolved = resolveResource(resource);
+			if (resolved === "") return false;
+			const result = await resolveCheck(resolved);
+			return "error" in result ? false : result.allowed;
+		},
+		invalidate(resource) {
+			if (resource === void 0) {
+				cache.clear();
+				inFlight.clear();
+				return;
+			}
+			cache.delete(resource);
+			inFlight.delete(resource);
+		},
+		async require(resource) {
+			const resolved = resolveResource(resource);
+			if (resolved === "") throw new AdminUiPermissionError("No ACL resource ID could be resolved: provide a resource argument or set appId in options");
+			const result = await resolveCheck(resolved);
+			if ("error" in result) throw result.error;
+			if (!result.allowed) throw new AdminUiPermissionDeniedError(resolved);
+		}
+	};
+}
+
+//#endregion
+exports.AdminUiPermissionDeniedError = AdminUiPermissionDeniedError;
+exports.AdminUiPermissionError = AdminUiPermissionError;
+exports.createAdminUiApiClient = createAdminUiApiClient;
+exports.getAclResourceId = require_acl_resource_id.getAclResourceId;
+exports.getAdminUiPermissionClient = getAdminUiPermissionClient;

package/dist/cjs/api/index.d.cts

@@ -0,0 +1,126 @@
+/**
+ * @license
+ *
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+import { n as getAclResourceId, t as AdminUiEntity } from "../acl-resource-id-DBlYU0DE.cjs";
+import { CommerceSdkErrorBase, CommerceSdkErrorOptions } from "@adobe/aio-commerce-lib-core/error";
+import { AdobeCommerceHttpClient, CommerceHttpClientParams } from "@adobe/aio-commerce-lib-api";
+import * as v from "valibot";
+
+//#region source/errors.d.ts
+/** Base error for Admin UI SDK permission helper failures. */
+declare class AdminUiPermissionError extends CommerceSdkErrorBase {}
+/** Options for {@link AdminUiPermissionDeniedError}. */
+type AdminUiPermissionDeniedErrorOptions = CommerceSdkErrorOptions;
+/** Error thrown when the current user is denied access to an Admin UI SDK ACL resource. */
+declare class AdminUiPermissionDeniedError extends AdminUiPermissionError {
+  readonly resource: string;
+  constructor(resource: string, options?: AdminUiPermissionDeniedErrorOptions);
+}
+//#endregion
+//#region source/api/lib/api-client.d.ts
+/**
+ * Creates a new API client for the Admin UI API with all available operations.
+ *
+ * @param params - The parameters to build the Commerce HTTP client.
+ */
+declare function createAdminUiApiClient(params: CommerceHttpClientParams): import("@adobe/aio-commerce-lib-api").ApiClientRecord<AdobeCommerceHttpClient, {
+  registerExtension(httpClient: AdobeCommerceHttpClient, params: ExtensionRegistrationParams, fetchOptions?: import("ky").Options): Promise<RegisterExtensionResponse>;
+  unregisterExtension(httpClient: AdobeCommerceHttpClient, params: UnregisterExtensionParams, fetchOptions?: import("ky").Options): Promise<void>;
+  enableAdminUiSdk(httpClient: AdobeCommerceHttpClient, fetchOptions?: import("ky").Options): Promise<boolean>;
+}>;
+/**
+ * An API client for the Admin UI API with all operations.
+ * @see {@link createAdminUiApiClient}
+ */
+type AdminUiApiClient = ReturnType<typeof createAdminUiApiClient>;
+//#endregion
+//#region source/api/lib/permission-client.d.ts
+/** Options used to create an Admin UI SDK permission client. */
+type AdminUiPermissionClientOptions = {
+  /** The application's `metadata.id` value. When provided, `check()` and `require()` can be called with no resource argument. */appId?: string;
+  /**
+   * Milliseconds to cache a permission result. Default: 300_000 (5 minutes).
+   * Set to 0 to disable result caching. Note: in-flight deduplication of concurrent identical
+   * requests is independent of this setting and remains active even when caching is disabled.
+   */
+  cacheTtlMs?: number; /** Return false instead of throwing when a network or parse error occurs. Default: true. */
+  denyOnError?: boolean; /** Commerce HTTP client used to call the Admin UI SDK permission endpoint. */
+  httpClient: AdobeCommerceHttpClient;
+};
+/** Client for checking the current user's Admin UI SDK resource permissions. */
+type AdminUiPermissionClient = {
+  /**
+   * Checks whether the current user has the given ACL resource granted.
+   *
+   * @param resource - The ACL resource id to check. When omitted, defaults to the id derived from `appId`.
+   * @returns `true` when granted; `false` when denied, on network or parse errors while `denyOnError` is
+   *   `true` (the default), or immediately when neither `resource` nor a valid `appId` is available.
+   * @throws {@link AdminUiPermissionError} on HTTP 401, regardless of `denyOnError`.
+   */
+  check: (resource?: string) => Promise<boolean>;
+  /**
+   * Clears cached permission results.
+   *
+   * @param resource - The ACL resource id whose cached result to clear. When omitted, clears all cached
+   *   entries and in-flight tracking without aborting outstanding HTTP requests.
+   */
+  invalidate: (resource?: string) => void;
+  /**
+   * Resolves when the current user has the given ACL resource granted.
+   *
+   * @param resource - The ACL resource id to require. When omitted, defaults to the id derived from `appId`.
+   * @throws {@link AdminUiPermissionDeniedError} when the resource is explicitly denied.
+   * @throws {@link AdminUiPermissionError} on HTTP 401, on network or parse errors while `denyOnError` is
+   *   `false`, or immediately when neither `resource` nor a valid `appId` is available.
+   */
+  require: (resource?: string) => Promise<void>;
+};
+/**
+ * Creates a client for checking Admin UI SDK ACL resources.
+ *
+ * @param options - Client configuration; see {@link AdminUiPermissionClientOptions}.
+ * @returns An {@link AdminUiPermissionClient} for checking and requiring ACL resources.
+ */
+declare function getAdminUiPermissionClient(options: AdminUiPermissionClientOptions): AdminUiPermissionClient;
+//#endregion
+//#region source/api/extensions/schema.d.ts
+/** Parameters for POST /V1/adminuisdk/extension. */
+declare const ExtensionRegistrationParamsSchema: v.ObjectSchema<{
+  readonly extensionName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+  readonly extensionTitle: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+  readonly extensionWorkspace: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+}, undefined>;
+/** Parameters for DELETE /V1/adminuisdk/extension/{workspaceName}/{extensionName}. */
+declare const UnregisterExtensionParamsSchema: v.ObjectSchema<{
+  readonly extensionName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+  readonly workspaceName: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+}, undefined>;
+/** The parameters accepted by POST /V1/adminuisdk/extension. */
+type ExtensionRegistrationParams = v.InferInput<typeof ExtensionRegistrationParamsSchema>;
+/** The parameters accepted by DELETE /V1/adminuisdk/extension/{workspaceName}/{extensionName}. */
+type UnregisterExtensionParams = v.InferInput<typeof UnregisterExtensionParamsSchema>;
+/** The response returned by POST /V1/adminuisdk/extension. */
+type RegisterExtensionResponse = {
+  extensionId: string;
+};
+//#endregion
+//#region source/api/permissions/schema.d.ts
+/** Response shape returned by the Admin UI SDK permission check endpoint. */
+declare const permissionCheckResponseSchema: v.ObjectSchema<{
+  readonly allowed: v.BooleanSchema<undefined>;
+}, undefined>;
+/** Parsed Admin UI SDK permission check response. */
+type PermissionCheckResponse = v.InferOutput<typeof permissionCheckResponseSchema>;
+//#endregion
+export { AdminUiApiClient, type AdminUiEntity, AdminUiPermissionClient, AdminUiPermissionClientOptions, AdminUiPermissionDeniedError, AdminUiPermissionDeniedErrorOptions, AdminUiPermissionError, type ExtensionRegistrationParams, type ExtensionRegistrationParamsSchema, type PermissionCheckResponse, type RegisterExtensionResponse, type UnregisterExtensionParams, type UnregisterExtensionParamsSchema, createAdminUiApiClient, getAclResourceId, getAdminUiPermissionClient, type permissionCheckResponseSchema };