@businessdash/sdk 0.9.60 → 0.9.80

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { type AddressDetailsResponse, type AddressFormValues, type AddressSearchInput, type AddressSearchResponse, type AddressVerifyResponse, type AiVisibilityInput, type AiVisibilityResponse, type AttributionHeartbeatInput, type AttributionHeartbeatResponse, type AttributionPolicy, type AuthIntrospectResponse, type BlogCategoryListResponse, type BlogCommentListResponse, type BlogCommentPostInput, type BlogCommentPostResponse, type BlogLikeResponse, type BlogListPostsResponse, type BlogPostBySlugResponse, type BlogSessionInput, type BlogSessionResponse, type BlogTagListResponse, type CartAddItemInput, type CartCouponInput, type CartSessionResponse, type CartSnapshot, type CartUpdateItemInput, type ChatbotAppendMessageInput, type ChatbotAvailability, type ChatbotChatInput, type ChatbotChatResponse, type ChatbotConfig, type ChatbotConfigUpdateInput, type ChatbotFormDefinition, type ChatbotFormSubmitInput, type ChatbotFormSubmitResponse, type ChatbotMessagesResponse, type ChatbotPersistedSessionInput, type ChatbotPersistedSessionResponse, type ChatbotRequestHumanInput, type ChatbotRequestHumanResponse, type ChatbotSessionResponse, type CheckoutSessionInput, type CheckoutSessionResponse, type CheckoutStartInput, type CheckoutStartResponse, type CheckoutStatusResponse, type ConfirmVerificationInput, type ConfirmVerificationResponse, type CouponValidateResponse, type CreateCollectionInput, type CreateCollectionResponse, type CreateEmailTemplateInput, type CreateEmailTemplateResponse, type CreateEmailTemplateVersionInput, type CreateEmailTemplateVersionResponse, type CustomerContactCompanyInput, type CustomerContactCompanyResponse, type CustomerContractDetail, type CustomerContractSignResponse, type CustomerDownloadsResponse, type CustomerInvoiceDetail, type CustomerInvoicePayInput, type CustomerInvoicePayResponse, type CustomerInvoicePdf, type CustomerJobActivityResponse, type CustomerJobComment, type CustomerJobCommentPostInput, type CustomerJobCommentsListResponse, type CustomerJobDetail, type CustomerJobEtaResponse, type CustomerNotificationPreferencesResponse, type CustomerNotificationPreferencesUpdateInput, type CustomerNotificationPreferencesUpdateResponse, type CustomerOrderDetail, type CustomerOrderListResponse, type CustomerPortalContextResponse, type CustomerPortalOtherOrgsResponse, type CustomerPortalProfile, type CustomerPortalUpdateProfileInput, type CustomerPortalUpdateProfileResponse, type CustomerQuoteActionResponse, type CustomerQuoteDetail, type CustomerReferralHistoryResponse, type CustomerReferralPayoutsResponse, type CustomerReferralStats, type CustomerReturnRequestCreated, type CustomerReturnRequestInput, type CustomerReviewListResponse, type CustomerReviewSubmitInput, type CustomerReviewSubmitResponse, type CustomerShipmentTracking, type CustomerWorkBundle, type DashboardSessionResponse, type ExecuteActionInput, type ExecuteActionResponse, type FollowerEditInput, type FollowerEditResponse, type FollowerJoinInput, type FollowerJoinResponse, type FollowerLeaveInput, type FollowerLeaveResponse, type FollowerMeInput, type FollowerMeResponse, type GetCollectionResponse, type GetEmailTemplateResponse, type GetMarketingLocalesResponse, type GetMarketingPageBundleResponse, type GetPublishedMarketingSchemaResponse, type GetSiteMarketingPageResponse, type GoogleAddress, type JobCategoryListResponse, type JobPosting, type JobPostingListResponse, type ListCollectionsResponse, type ListDataModelRecordsInput, type ListDataModelRecordsResponse, type ListEmailTemplatesInput, type ListEmailTemplatesResponse, type ListRowsInput, type ListRowsResponse, type ListSiteMarketingPagesResponse, type NotificationPreferencesResponse, type NotificationPreferencesUpdateInput, type PageViewsInput, type PageViewsResponse, type PublishMarketingSectionsInput, type PublishMarketingSectionsResponse, type QueryRowsInput, type QueryRowsResponse, type ReviewWallListResponse, type ShippingRatesInput, type ShippingRatesResponse, type ShippingSettingsResponse, type ShippingTrackResponse, type SiteAssetInput, type SiteBranding, type StartVerificationInput, type StartVerificationResponse, type StorefrontAddonsResponse, type StorefrontCategoriesResponse, type StorefrontListProductsResponse, type StorefrontProductDetail, type StorefrontProductReviewsResponse, type StorefrontProductsWithMetaResponse, type StorefrontRelatedProductsResponse, type StorefrontSessionInput, type StorefrontSessionResponse, type StorefrontSort, type SubscriptionCheckoutInput, type SubscriptionCheckoutResponse, type SubscriptionOffering, type SubscriptionOfferingsListResponse, type TenantAuthExchangeInput, type TenantAuthExchangeResponse, type TenantAuthMeResponse, type TenantAuthPasswordResetInput, type TenantAuthPasswordResetResponse, type TenantAuthSignOutResponse, type TenantAuthStartInput, type TenantAuthStartResponse, type UploadSiteAssetResponse, type UpsertDraftMarketingSchemaInput, type UpsertDraftMarketingSchemaResponse, type UpsertRowInput, type UpsertRowResponse } from "./contracts.js";
+import { type AddressDetailsResponse, type AddressFormValues, type AddressSearchInput, type AddressSearchResponse, type AddressVerifyResponse, type AiVisibilityInput, type AiVisibilityResponse, type AttributionHeartbeatInput, type AttributionHeartbeatResponse, type AttributionPolicy, type AuthIntrospectResponse, type BlogCategoryListResponse, type BlogCommentListResponse, type BlogCommentPostInput, type BlogCommentPostResponse, type BlogLikeResponse, type BlogListPostsResponse, type BlogPostBySlugResponse, type BlogSessionInput, type BlogSessionResponse, type BlogTagListResponse, type CartAddItemInput, type CartCouponInput, type CartSessionResponse, type CartSnapshot, type CartUpdateItemInput, type ChatbotAppendMessageInput, type ChatbotAvailability, type ChatbotChatInput, type ChatbotChatResponse, type ChatbotConfig, type ChatbotConfigUpdateInput, type ChatbotFormDefinition, type ChatbotFormSubmitInput, type ChatbotFormSubmitResponse, type ChatbotMessagesResponse, type ChatbotPersistedSessionInput, type ChatbotPersistedSessionResponse, type ChatbotRequestHumanInput, type ChatbotRequestHumanResponse, type ChatbotSessionResponse, type CheckoutSessionInput, type CheckoutSessionResponse, type CheckoutStartInput, type CheckoutStartResponse, type CheckoutStatusResponse, type ConfirmVerificationInput, type ConfirmVerificationResponse, type CouponCreateInput, type CouponCreateResponse, type CouponListResponse, type CouponValidateResponse, type CreateCollectionInput, type CreateCollectionResponse, type CreateEmailTemplateInput, type CreateEmailTemplateResponse, type CreateEmailTemplateVersionInput, type CreateEmailTemplateVersionResponse, type CustomerContactCompanyInput, type CustomerContactCompanyResponse, type CustomerContractDetail, type CustomerContractListResponse, type CustomerContractSignResponse, type CustomerDownloadsResponse, type CustomerInviteResendResponse, type CustomerInvoiceDetail, type CustomerInvoiceListResponse, type CustomerInvoicePayInput, type CustomerInvoicePayResponse, type CustomerInvoicePdf, type CustomerJobActivityResponse, type CustomerJobComment, type CustomerJobCommentPostInput, type CustomerJobCommentsListResponse, type CustomerJobDetail, type CustomerJobEtaResponse, type CustomerNotificationPreferencesResponse, type CustomerNotificationPreferencesUpdateInput, type CustomerNotificationPreferencesUpdateResponse, type CustomerNotReceivedResult, type CustomerOrderDetail, type CustomerOrderListResponse, type CustomerPortalContextResponse, type CustomerPortalMessage, type CustomerPortalMessageListResponse, type CustomerPortalMessagePostInput, type CustomerPortalMessagesMarkReadResponse, type CustomerPortalOtherOrgsResponse, type CustomerPortalProfile, type CustomerPortalQuizResultsResponse, type CustomerPortalUpdateProfileInput, type CustomerPortalUpdateProfileResponse, type CustomerProductReviewCreated, type CustomerProductReviewList, type CustomerPushConfig, type CustomerQuoteActionResponse, type CustomerQuoteDetail, type CustomerQuoteListResponse, type CustomerReferralHistoryResponse, type CustomerReferralPayoutsResponse, type CustomerReferralStats, type CustomerReturnRequestCreated, type CustomerReturnRequestInput, type CustomerReturnRequestListResponse, type CustomerReviewListResponse, type CustomerReviewSubmitInput, type CustomerReviewSubmitResponse, type CustomerShipmentListResponse, type CustomerShipmentTracking, type CustomerSubscriberContentResponse, type CustomerSubscriptionCancelResponse, type CustomerSubscriptionResponse, type CustomerWorkBundle, type DashboardSessionResponse, type ExecuteActionInput, type ExecuteActionResponse, type FollowerEditInput, type FollowerEditResponse, type FollowerJoinInput, type FollowerJoinResponse, type FollowerLeaveInput, type FollowerLeaveResponse, type FollowerMeInput, type FollowerMeResponse, type GetCollectionResponse, type GetEmailTemplateResponse, type GetMarketingLocalesResponse, type GetMarketingPageBundleResponse, type GetPublishedMarketingSchemaResponse, type GetSiteMarketingPageResponse, type GoogleAddress, type JobCategoryListResponse, type JobPosting, type JobPostingListResponse, type LegalDocument, type LegalListResponse, type ListCollectionsResponse, type ListDataModelRecordsInput, type ListDataModelRecordsResponse, type ListEmailTemplatesInput, type ListEmailTemplatesResponse, type ListRowsInput, type ListRowsResponse, type ListSiteMarketingPagesResponse, type NotificationPreferencesResponse, type NotificationPreferencesUpdateInput, type PageViewsInput, type PageViewsResponse, type PublishMarketingSectionsInput, type PublishMarketingSectionsResponse, type QueryRowsInput, type QueryRowsResponse, type ReviewWallListResponse, type SchedulingBookingResult, type SchedulingBookingView, type SchedulingCancelResult, type SchedulingEventTypeDetail, type SchedulingEventTypeList, type SchedulingRescheduleResult, type SchedulingSlotsResponse, type ShippingRatesInput, type ShippingRatesResponse, type ShippingSettingsResponse, type ShippingTrackResponse, type SiteAssetInput, type SiteBranding, type StartVerificationInput, type StartVerificationResponse, type StorefrontAddonsResponse, type StorefrontCategoriesResponse, type StorefrontListProductsResponse, type StorefrontProductDetail, type StorefrontProductReviewsResponse, type StorefrontProductsWithMetaResponse, type StorefrontRelatedProductsResponse, type StorefrontSessionInput, type StorefrontSessionResponse, type StorefrontSort, type StorefrontSyncToStripeResponse, type SubscriptionCheckoutInput, type SubscriptionCheckoutResponse, type SubscriptionOffering, type SubscriptionOfferingsListResponse, type TenantAuthExchangeInput, type TenantAuthExchangeResponse, type TenantAuthMeResponse, type TenantAuthPasswordResetInput, type TenantAuthPasswordResetResponse, type TenantAuthSignOutResponse, type TenantAuthStartInput, type TenantAuthStartResponse, type UploadSiteAssetResponse, type UpsertDraftMarketingSchemaInput, type UpsertDraftMarketingSchemaResponse, type UpsertRowInput, type UpsertRowResponse } from "./contracts.js";
 export type FetchLike = typeof fetch;
 /** Options for {@link BiabDevClient} / {@link createBiabDevClient}. */
 export type BiabDevClientOptions = {
@@ -49,12 +49,29 @@ export declare class BiabDevClient {
     get coupons(): BiabDevCouponsClient;
     get subscriptions(): BiabDevSubscriptionsClient;
     get shipping(): BiabDevShippingClient;
+    /** Customer-portal invitations — currently resend. */
+    get customerInvites(): BiabDevCustomerInvitesClient;
     get notifications(): BiabDevNotificationsClient;
     get address(): BiabDevAddressClient;
     get blog(): BiabDevBlogClient;
     get reviews(): BiabDevReviewsClient;
+    /**
+     * Tracking consent for this org's site.
+     *
+     * Pair with `@businessdash/sdk/consent`, which handles the visitor cookie
+     * and gives you a gate to check before starting analytics.
+     */
+    get consent(): BiabDevConsentClient;
     /** Public job postings — build a careers page on your own domain. */
     get hiring(): BiabDevHiringClient;
+    /**
+     * The org's published legal pages — privacy, terms, refund policy, whatever
+     * they authored in the dashboard.
+     *
+     * Pair with `@businessdash/sdk/legal` to render them without writing a page
+     * per document.
+     */
+    get legal(): BiabDevLegalClient;
     get chatbot(): BiabDevChatbotClient;
     get auth(): BiabDevAuthClient;
     /**
@@ -102,6 +119,14 @@ export declare class BiabDevSiteClient {
      */
     readonly marketing: BiabDevMarketingClient;
     readonly parallelPages: BiabDevParallelPagesClient;
+    /**
+     * Booking and conference calls.
+     *
+     * Previously reachable only through `sdk.ts`'s separate scheduling
+     * resource, which is why the OpenAPI generator — which reads this file —
+     * never saw it, and why no non-JS starter had scheduling at all.
+     */
+    readonly scheduling: BiabDevSchedulingClient;
     constructor(client: BiabDevClient, siteId: string);
     /**
      * The org's storefront branding — logo + favicon (site static media) plus
@@ -114,6 +139,23 @@ export declare class BiabDevSiteClient {
      * <img src={b.logoUrl ?? b.orgIcon ?? ""} alt={b.orgName ?? ""} />
      * ```
      */
+    /**
+     * Every URL the PLATFORM owns the shape of, as JSON.
+     *
+     * Published site-builder pages, published legal documents, and every
+     * materialised programmatic-page URL. Blog posts and products are not here
+     * — the platform does not know where your site renders them. Merge those in
+     * with `@businessdash/sdk/sitemap`, which handles the whole job.
+     *
+     * Paths are relative, so you join them against your own origin rather than
+     * the org's primary verified domain.
+     */
+    sitemapEntries(): Promise<{
+        entries: Array<{
+            loc: string;
+            lastmod?: string | undefined;
+        }>;
+    }>;
     branding(): Promise<SiteBranding>;
 }
 export declare const parallelPagesListResponseSchema: z.ZodObject<{
@@ -691,6 +733,37 @@ export declare class BiabDevStorefrontClient {
      * own native product catalog using BIAB as the data layer.
      */
     createSession(input?: StorefrontSessionInput): Promise<StorefrontSessionResponse>;
+    /**
+     * Push your catalog into YOUR OWN Stripe account.
+     *
+     * Products and their variant combinations become Stripe Products and
+     * Prices on the Stripe account connected to your workspace, so you can
+     * manage the catalog here and let Stripe be the system of record for
+     * money. Safe to re-run: an unchanged product is left alone, and a new
+     * Price is minted only when the amount actually changed (Stripe Prices
+     * are immutable on amount).
+     *
+     * Requires a SECRET key holding `storefront:write` — never a publishable
+     * token, because this spends against Stripe on your behalf.
+     *
+     * Pass `productId` to sync one product. Omit it to sync everything not yet
+     * pushed, in bounded batches: check `remaining` and call again until it
+     * reaches 0.
+     *
+     * ```ts
+     * let remaining = 1;
+     * while (remaining > 0) {
+     *   const res = await biab.storefront.syncToStripe();
+     *   remaining = res.remaining;
+     * }
+     * ```
+     *
+     * Per-product failures are returned in `failed` rather than throwing, so
+     * one bad product doesn't abandon the batch.
+     */
+    syncToStripe(input?: {
+        productId?: string;
+    }): Promise<StorefrontSyncToStripeResponse>;
     /**
      * Paginated list of live products for the calling org's storefront.
      * Cursor is an opaque integer offset — pass back the response's
@@ -727,6 +800,33 @@ export declare class BiabDevStorefrontClient {
      * via `BiabApiError` if the product isn't live or doesn't belong
      * to the org bound to the API key.
      */
+    /**
+     * The CAD file for a product — STEP, IGES, or a native part file.
+     *
+     * ## Call this from YOUR server, then proxy it
+     *
+     * The API key is a server secret, so a browser cannot reach this directly.
+     * Expose your own route (`/api/products/:id/cad`), call this behind it, and
+     * redirect the visitor to the URL it returns.
+     *
+     * The platform withholds the raw URL from every product payload on purpose:
+     * CAD files are the largest thing it serves and are the org's intellectual
+     * property, so a catalog of naked URLs is a design library published to
+     * anyone willing to write a loop. This endpoint requires a `biab_cad` cookie
+     * on the incoming request, rate-limits per IP, and re-checks the
+     * `ecommerce.product_3d` entitlement before answering.
+     *
+     * `cacheSeconds` is what to put on your own response — CAD at a content URL
+     * does not change, so caching hard is where the bandwidth saving comes from.
+     *
+     * Rejects 404 when the product is a draft, has no CAD file, or the org lacks
+     * the add-on. Those are deliberately one answer.
+     */
+    getCadDownload(productId: string): Promise<{
+        url: string;
+        fileName: string | null;
+        cacheSeconds: number;
+    }>;
     getProduct(productId: string): Promise<StorefrontProductDetail>;
     /** Approved reviews for a product + aggregate (`avgRating`, `totalCount`).
      *  Cursor-paginated — pass back `nextCursor` for the next page. */
@@ -926,6 +1026,34 @@ export declare class BiabDevCouponsClient {
      * else toast.error(result.message);
      * ```
      */
+    /**
+     * Create a coupon and make it live in YOUR OWN Stripe account in one call —
+     * a Stripe Coupon plus a Promotion Code, so the same string works on your
+     * storefront and on Stripe-hosted Checkout.
+     *
+     * Creation and the Stripe sync are one operation deliberately: a coupon
+     * that exists locally but not in Stripe is the failure worth designing out,
+     * where a customer types a code your storefront accepts and Stripe rejects.
+     * If the sync fails the coupon is still created and `stripeSynced` comes
+     * back `false` with the reason, rather than pretending it is live.
+     *
+     * Requires a SECRET key holding `storefront:write`.
+     *
+     * ```ts
+     * const { coupon, stripeSynced } = await biab.coupons.create({
+     *   code: 'WELCOME10',
+     *   discountType: 'percent',
+     *   value: 10,
+     * })
+     * ```
+     *
+     * Buy-X-get-Y and bundle-gift coupons aren't available here — Stripe has no
+     * native BXGY, so those run through our own cart math and need the offer
+     * rows the dashboard collects.
+     */
+    create(input: CouponCreateInput): Promise<CouponCreateResponse>;
+    /** Every coupon on the workspace, newest first. Requires `storefront:write`. */
+    list(): Promise<CouponListResponse>;
     validate(code: string): Promise<CouponValidateResponse>;
 }
 /**
@@ -1176,6 +1304,77 @@ export declare class BiabDevHiringClient {
      */
     categories(): Promise<JobCategoryListResponse>;
 }
+/**
+ * The org's published legal pages.
+ *
+ * Everything here is content the org deliberately put on the public internet;
+ * drafts are filtered server-side and unreachable. Requires `legal:read`, which
+ * is publishable — a browser token is the expected caller.
+ *
+ * @example
+ * ```ts
+ * const { items, presentation } = await client.legal.list();
+ * const privacy = await client.legal.get("privacy");
+ * ```
+ */
+export declare class BiabDevLegalClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    /**
+     * Every published document, plus the header/footer presentation.
+     *
+     * Both in one response because the common use — a footer link list — needs
+     * the titles and the presentation together, and a second round trip for the
+     * latter is one a site either makes on every page or skips entirely.
+     */
+    list(): Promise<LegalListResponse>;
+    /**
+     * One document by slug, body included.
+     *
+     * Rejects with a 404 when the slug is unpublished or absent — the two are
+     * deliberately indistinguishable, since "exists but hidden" would leak that
+     * an org is drafting a policy and is not something a caller can act on.
+     */
+    get(slug: string): Promise<LegalDocument>;
+}
+/**
+ * Tracking consent, scoped to the calling org.
+ *
+ * Every call is answered for the org whose key made it. There is no shape here
+ * that could read or write another org's consent — consent is given to a
+ * controller, and one controller's record is not another's to act on.
+ *
+ * The visitor is identified by an `x-biab-visitor` header carrying an opaque id
+ * from the caller's own first-party cookie. `@businessdash/sdk/consent` manages
+ * that for you; these methods are the transport underneath it.
+ */
+export declare class BiabDevConsentClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    /** The notice to show, and what this visitor currently allows. */
+    get(visitorKey?: string | null): Promise<{
+        categories: string[];
+        noticeText: string | null;
+        noticeVersion: number;
+        allowed: string[];
+        mustAsk: boolean;
+        reason: string;
+    }>;
+    /**
+     * Record the visitor's answer.
+     *
+     * `granted: []` is a real answer — "asked, refused everything" — and is
+     * stored as one, so the banner does not reappear on the next page.
+     */
+    record(input: {
+        visitorKey: string;
+        granted: string[];
+        noticeVersion: number;
+        source?: "banner" | "settings";
+    }): Promise<{
+        ok: boolean;
+    }>;
+}
 export declare class BiabDevChatbotClient {
     private readonly client;
     constructor(client: BiabDevClient);
@@ -1350,6 +1549,16 @@ export declare class BiabDevCustomerPortalClient {
     private headers;
     context(): Promise<CustomerPortalContextResponse>;
     getProfile(): Promise<CustomerPortalProfile>;
+    /**
+     * The signed-in customer's quiz results at this org — the SDK side of
+     * the account-gated reveal: an invitation completed with "create an
+     * account to see how you did" surfaces its result here (and only to
+     * the invited email). Interview-mode quizzes come back with
+     * `scoreWithheld: true` and no verdict, by the org's own setting.
+     */
+    myQuizResults(options?: {
+        token?: string;
+    }): Promise<CustomerPortalQuizResultsResponse>;
     updateProfile(input: CustomerPortalUpdateProfileInput): Promise<CustomerPortalUpdateProfileResponse>;
     myOtherCustomerOrgs(): Promise<CustomerPortalOtherOrgsResponse>;
     /**
@@ -1501,6 +1710,68 @@ export declare class BiabDevCustomerPortalClient {
     }): Promise<CustomerReferralHistoryResponse>;
     /** The customer's referral payout history + upcoming rows (newest first). */
     myReferralPayouts(): Promise<CustomerReferralPayoutsResponse>;
+    /**
+     * The return requests on one order, newest first.
+     *
+     * `resolutionNote` carries staff's answer — when a return is denied that IS
+     * the answer, and hiding it just moves the question to email.
+     */
+    listReturnRequests(orderId: string): Promise<CustomerReturnRequestListResponse>;
+    /**
+     * The customer's message thread with the org's staff, newest first.
+     *
+     * Automated rows — the review-ask and similar — are excluded server-side, so
+     * this is only what a person wrote.
+     */
+    listMessages(opts?: {
+        limit?: number;
+        jobId?: string;
+    }): Promise<CustomerPortalMessageListResponse>;
+    /** Send a message to the org's staff. Lands in the CRM timeline. */
+    postMessage(input: CustomerPortalMessagePostInput): Promise<CustomerPortalMessage>;
+    /**
+     * Mark the staff messages read up to now.
+     *
+     * One-way: it never clears a stamp. A portal that could un-read a message
+     * would let a customer hide from staff that they had seen something.
+     */
+    markMessagesRead(): Promise<CustomerPortalMessagesMarkReadResponse>;
+    /**
+     * The customer's invoices, newest first.
+     *
+     * `unpaid: true` filters on the computed BALANCE rather than on the status
+     * string, because a partially-paid invoice still owes money whatever it is
+     * called. This is the call behind "show me everything I owe" — which had no
+     * endpoint at all before 0.9.61.
+     */
+    listInvoices(opts?: {
+        limit?: number;
+        status?: string;
+        unpaid?: boolean;
+    }): Promise<CustomerInvoiceListResponse>;
+    /** The customer's quotes. `status: "sent"` is the set still awaiting them. */
+    listQuotes(opts?: {
+        limit?: number;
+        status?: string;
+    }): Promise<CustomerQuoteListResponse>;
+    /** The customer's contracts. `status: "sent"` still awaits a signature. */
+    listContracts(opts?: {
+        limit?: number;
+        status?: string;
+    }): Promise<CustomerContractListResponse>;
+    /**
+     * Every shipment across the customer's orders. `active: true` narrows to
+     * parcels still moving.
+     *
+     * STORED status only — no live carrier poll. `trackShipment(id)` spends a
+     * Shippo request because it is one parcel the customer opened; doing that
+     * per row here would mean a carrier call for every parcel in their history
+     * on every page load.
+     */
+    listShipments(opts?: {
+        limit?: number;
+        active?: boolean;
+    }): Promise<CustomerShipmentListResponse>;
     /**
      * The signed-in customer's orders (newest first), each with a shipment
      * roll-up (`overallStatus`, `anyInTransit`, `latestEstimatedDelivery`) for
@@ -1552,6 +1823,180 @@ export declare class BiabDevCustomerPortalClient {
      * ```
      */
     submitReturnRequest(orderId: string, input?: CustomerReturnRequestInput): Promise<CustomerReturnRequestCreated>;
+    /**
+     * Ask for a replacement instead of a refund.
+     *
+     * Sugar over `submitReturnRequest` with `kind: "exchange"`, because an
+     * exchange reads as its own action to the person writing the UI, and burying
+     * it in an options bag is how it stays undiscovered. `variantId` is the one
+     * they want instead — omit it when that still needs a conversation.
+     *
+     * @example
+     * ```ts
+     * await portal.submitExchangeRequest(orderId, {
+     *   exchangeForVariantId: largeVariantId,
+     *   reason: "wrong size",
+     * });
+     * ```
+     */
+    submitExchangeRequest(orderId: string, input?: Omit<CustomerReturnRequestInput, "kind">): Promise<CustomerReturnRequestCreated>;
+    /**
+     * Report that a parcel never arrived.
+     *
+     * This does NOT change the shipment's carrier status, and deliberately so:
+     * when the carrier says delivered and the customer says otherwise, both
+     * facts matter — the carrier's scan is what the org files a claim against.
+     * The result carries `carrierStatus` alongside the report so a UI can show
+     * both: *"Carrier says delivered Aug 14 · You reported not received Aug 16."*
+     *
+     * `contested: true` means exactly that disagreement. Re-reporting an open
+     * claim returns it with `alreadyOpen: true` rather than erroring — a
+     * customer tapping twice is anxious, not hostile.
+     *
+     * @example
+     * ```ts
+     * const r = await portal.reportNotReceived(shipmentId, {
+     *   note: "Nothing on the porch, checked with neighbours.",
+     * });
+     * if (r.contested) showCarrierDisputeHelp();
+     * ```
+     */
+    reportNotReceived(shipmentId: string, input?: {
+        note?: string;
+    }): Promise<CustomerNotReceivedResult>;
+    /**
+     * The product reviews this customer has written for this org.
+     *
+     * Distinct from `listReviews()`, which is reviews of the ORG. Both exist
+     * because "are these people good to deal with" and "is this thing any good"
+     * are different questions, stored in different tables, and shown in
+     * different places.
+     *
+     * `isApproved: false` means QUEUED, not rejected — render it as "awaiting
+     * review" or the customer will assume it was lost and write it again.
+     */
+    /**
+     * The customer's subscription with this org, and what the org offers.
+     *
+     * One subscription per org — `user_subscriptions` is unique on
+     * (user, org) — so there is no id to pass. The org's live offerings come
+     * back alongside, because a portal that reports "not subscribed" and
+     * nothing else is a dead end.
+     *
+     * **Render entitlement from `subscription.hasAccess`, not from `status`.**
+     * A lifetime purchase has no period to expire and a cancelled subscription
+     * keeps access until the period already paid for ends; `hasAccess` is
+     * computed by the same function the content gates use, so the portal and
+     * the gate cannot disagree.
+     */
+    getSubscription(): Promise<CustomerSubscriptionResponse>;
+    /**
+     * Cancel the subscription at the end of the paid period.
+     *
+     * Cancelling ends the RENEWAL, not the access: the customer has paid for
+     * the period they are in and keeps everything until `accessUntil`. Ending
+     * access on the click would take back something they already bought, which
+     * is the most common way a subscription flow feels like a trap.
+     *
+     * Read `accessUntil` back to them — "active until 14 March" is the true
+     * statement, not "cancelled".
+     */
+    cancelSubscription(): Promise<CustomerSubscriptionCancelResponse>;
+    /**
+     * Clear a pending cancellation.
+     *
+     * Between cancelling and the period ending nothing has actually been lost,
+     * so changing your mind should cost one call rather than a re-purchase.
+     * After the period ends there is nothing to resume and they subscribe again
+     * like anyone else.
+     */
+    resumeSubscription(): Promise<CustomerSubscriptionCancelResponse>;
+    /**
+     * The content this subscription entitles them to — the answer to "what am
+     * I actually getting for this?", which is the question asked right before
+     * someone cancels.
+     *
+     * When `entitled` is false these are LOCKED previews, not an empty
+     * entitlement: titles, excerpts and images, no bodies. Show them beside the
+     * offer. Rendering an empty list would hide the pitch at exactly the moment
+     * it is most relevant.
+     */
+    getSubscriberContent(opts?: {
+        limit?: number;
+    }): Promise<CustomerSubscriberContentResponse>;
+    /**
+     * Push config and the browsers this customer has registered.
+     *
+     * Returns `vapidPublicKey` too, because a page cannot subscribe without it.
+     */
+    getPushConfig(): Promise<CustomerPushConfig>;
+    /**
+     * Register this browser.
+     *
+     * Pair with `subscribeToPush()` from `@businessdash/sdk/push-core`, which
+     * handles the service worker, the permission prompt and the key encoding
+     * and hands back exactly this payload.
+     *
+     * Upserted on the endpoint, so re-subscribing from the same browser
+     * refreshes the row rather than creating a second one.
+     */
+    subscribePush(input: {
+        endpoint: string;
+        p256dh: string;
+        auth: string;
+        userAgent?: string | null;
+        label?: string | null;
+        categories?: string[] | null;
+    }): Promise<{
+        id: string;
+        created: boolean;
+    }>;
+    /**
+     * Rename a device, or narrow what it receives.
+     *
+     * `categories: []` means "nothing for now" and keeps the subscription
+     * warm — browsers make re-granting a revoked permission deliberately
+     * awkward, so an "off" that discards the subscription is hard to undo.
+     */
+    updatePushDevice(input: {
+        id: string;
+        label?: string | null;
+        categories?: string[] | null;
+    }): Promise<{
+        ok: boolean;
+    }>;
+    /**
+     * Forget a device. Takes an id or the endpoint.
+     *
+     * A browser tearing its own subscription down knows its endpoint, not our
+     * row id — so pass what `unsubscribeFromPush()` returns.
+     */
+    unsubscribePush(input: {
+        id?: string;
+        endpoint?: string;
+    }): Promise<{
+        ok: boolean;
+        deletedId: string | null;
+    }>;
+    listProductReviews(): Promise<CustomerProductReviewList>;
+    /**
+     * Review a product this customer BOUGHT.
+     *
+     * The portal requires a matching order — it is standing inside the
+     * customer's purchase history, which is the one thing the public storefront
+     * does not know. That makes these verified-buyer reviews, and it stops a
+     * competitor one-starring a catalogue they never bought.
+     *
+     * Rejects with `not_purchased` (403) when no order matches, and
+     * `already_reviewed` (409) on a second review of the same product.
+     * Moderation follows the ORG's policy, so the result may be
+     * `awaitingModeration`.
+     */
+    submitProductReview(input: {
+        productId: string;
+        rating: number;
+        content: string;
+    }): Promise<CustomerProductReviewCreated>;
     /**
      * List the digital downloads the customer is entitled to for a paid order
      * (P10d). Each item is a ready-to-use URL — a short-lived presigned link for
@@ -1602,7 +2047,31 @@ export declare class BiabDevCustomerPortalClient {
      * dispatch travel-time recompute layer ships, at which point the
      * `eta` field switches sources without breaking this shape.
      */
+    /**
+     * Where the job and its technicians are in the dispatch lifecycle.
+     *
+     * Named for ETA historically; it is the DISPATCH STATUS surface, which is
+     * why `getDispatchStatus` below is the same call under the name people
+     * look for.
+     *
+     * Read `dispatchStatus` (job-level) for "is anyone on the way" and
+     * `assignments[].dispatchStatus` for per-technician detail. They differ on
+     * purpose: the job is `completed` only once the LAST assignee finishes.
+     *
+     * Nothing about the dispatch CASCADE is exposed — who was offered the job,
+     * who declined, how many people were asked before someone accepted. That
+     * is staff-internal, and a customer learning they were the fourth choice
+     * helps nobody.
+     */
     getJobEta(jobId: string): Promise<CustomerJobEtaResponse>;
+    /**
+     * Dispatch status for a job — the same call as `getJobEta`, under the name
+     * developers actually search for.
+     *
+     * An alias rather than a second route: two endpoints returning the same
+     * thing is how they drift.
+     */
+    getDispatchStatus(jobId: string): Promise<CustomerJobEtaResponse>;
     /**
      * Unified job activity feed: structured events (status changes,
      * dispatch lifecycle, media uploads, quote/contract/invoice
@@ -1677,5 +2146,157 @@ export declare class BiabDevAuthClient {
      */
     requestPasswordReset(input: TenantAuthPasswordResetInput): Promise<TenantAuthPasswordResetResponse>;
 }
+/**
+ * Booking, rescheduling, cancelling — and the conference call attached to it.
+ *
+ * ## Both sides of every flow
+ *
+ * An invitee acts with a signed TOKEN from their confirmation email; staff act
+ * with the API key. Both reach the same service, so the same notifications fire
+ * to the invitee AND every host either way, and the booking records which of
+ * them made the change.
+ *
+ * ## Three tokens, not one
+ *
+ * A confirmed booking yields `manageToken`, `rescheduleToken` and `cancelToken`
+ * separately. A cancel link in an email must not also be able to reschedule,
+ * and neither should be able to read the whole booking. One token for all three
+ * would make every emailed link as powerful as the strongest thing it enables.
+ *
+ * ## The conference link is re-minted on reschedule
+ *
+ * Moving a booking can issue a new meeting URL. Read `conferenceLink` back from
+ * the reschedule result rather than reusing the one from confirmation —
+ * otherwise the calendar invite you send points at a dead room.
+ */
+/**
+ * Customer-portal invitations.
+ *
+ * For an org running its own admin tooling rather than the dashboard.
+ */
+export declare class BiabDevCustomerInvitesClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    /**
+     * Hand an invite link out again.
+     *
+     * **Rotates the token** — the previous link stops working. That is the
+     * point rather than a side effect: if the reason for resending was "it went
+     * to the wrong address", rotating IS the fix, and reusing the token would
+     * leave the wrong recipient holding a working invitation. The cost is that
+     * someone who finds the original email later gets a dead link, which is a
+     * support message rather than an account.
+     *
+     * Rate limited to one send a minute per invitation, answering **429** with
+     * a retry hint. Resend mails an address the caller chose, so an unbounded
+     * one is a mail-bombing tool. Staff clicking the button in the dashboard
+     * skip the wait; an API key does not, because an API key is the automated
+     * caller the limit exists for.
+     *
+     * Refuses a **revoked** invitation (resending would quietly un-revoke it)
+     * and a **fully-redeemed** one (it did its job; a new invitation should be
+     * created as one, so the list keeps showing what happened).
+     */
+    resend(inviteId: string, opts?: {
+        expiresInDays?: number | null;
+    }): Promise<CustomerInviteResendResponse>;
+}
+export declare class BiabDevSchedulingClient {
+    private readonly client;
+    private readonly siteId;
+    constructor(client: BiabDevClient, siteId: string);
+    private path;
+    /** What the org offers to book. */
+    listEventTypes(): Promise<SchedulingEventTypeList>;
+    /** One event type, plus the questions asked when booking it. */
+    getEventType(slug: string): Promise<SchedulingEventTypeDetail>;
+    /**
+     * Free slots in a window.
+     *
+     * Ask for the window you are about to render, not the whole month: slot
+     * computation walks every host's calendar and busy times, so a wide range
+     * is a slow one.
+     */
+    getAvailableSlots(slug: string, params: {
+        from: Date | string;
+        to: Date | string;
+    }): Promise<SchedulingSlotsResponse>;
+    /**
+     * Book a slot.
+     *
+     * Returns `pending` rather than `confirmed` when the event type requires
+     * approval — say "requested" in the UI for that case, because telling
+     * someone their meeting is booked when staff still have to accept it is the
+     * kind of thing they plan a day around.
+     */
+    confirmBooking(input: {
+        eventTypeSlug: string;
+        startAt: Date | string;
+        invitee: {
+            email: string;
+            name: string;
+            phone?: string | null;
+            timezone: string;
+        };
+        answers?: Array<{
+            questionId: string;
+            value: string;
+        }>;
+        notes?: string | null;
+        schedulingLinkId?: string;
+        holderKey?: string | null;
+    }): Promise<SchedulingBookingResult>;
+    /**
+     * Read a booking with one of its signed tokens.
+     *
+     * `type` must match the token you hold — a cancel token will not open the
+     * manage view. That is the point of issuing three.
+     */
+    getBooking(token: string, type?: "manage" | "cancel" | "reschedule"): Promise<SchedulingBookingView>;
+    /**
+     * Move a booking — the INVITEE side, with their reschedule token.
+     *
+     * Notifies the invitee and every host, and cancels the reminder jobs queued
+     * against the old time so nobody gets "your meeting starts in 15 minutes"
+     * for a slot that moved.
+     */
+    rescheduleBooking(input: {
+        token: string;
+        newStartAt: Date | string;
+        reason?: string | null;
+    }): Promise<SchedulingRescheduleResult>;
+    /**
+     * Move a booking as STAFF, with the API key rather than an invitee token.
+     *
+     * Same service as the token path, so the invitee AND every host are
+     * notified either way, and the reminder jobs for the old time are
+     * cancelled either way. `actorUserId` records WHO moved it, which is what
+     * lets a customer's history say "they rescheduled" rather than leaving an
+     * unexplained change.
+     */
+    rescheduleBookingAsStaff(input: {
+        bookingId: string;
+        newStartAt: Date | string;
+        reason?: string | null;
+        actorUserId?: string | null;
+    }): Promise<SchedulingRescheduleResult>;
+    /** Cancel a booking as STAFF. Notifies the invitee and every host. */
+    cancelBookingAsStaff(input: {
+        bookingId: string;
+        reason?: string | null;
+        actorUserId?: string | null;
+    }): Promise<SchedulingCancelResult>;
+    /**
+     * Cancel a booking — the INVITEE side, with their cancel token.
+     *
+     * `reason` is passed to the hosts. Worth collecting: "something came up" and
+     * "I booked the wrong service" lead to different follow-ups, and the second
+     * is recoverable revenue.
+     */
+    cancelBooking(input: {
+        token: string;
+        reason?: string | null;
+    }): Promise<SchedulingCancelResult>;
+}
 export {};
 //# sourceMappingURL=client.d.ts.map