@businessdash/sdk 0.9.80 → 0.9.90

package/src/client.ts

@@ -116,6 +116,8 @@ import {
 	type CustomerPortalUpdateProfileResponse,
 	type CustomerProductReviewCreated,
 	type CustomerProductReviewList,
+	type CustomerProposal,
+	type CustomerProposalListResponse,
 	type CustomerPushConfig,
 	type CustomerQuoteActionResponse,
 	type CustomerQuoteDetail,
@@ -210,6 +212,8 @@ import {
 	customerPortalUpdateProfileResponseSchema,
 	customerProductReviewCreatedSchema,
 	customerProductReviewListSchema,
+	customerProposalListResponseSchema,
+	customerProposalSchema,
 	customerPushConfigSchema,
 	customerQuoteActionResponseSchema,
 	customerQuoteDetailSchema,
@@ -397,14 +401,14 @@ import {
 } from "./contracts.js";
 import {
 	accessRejectionFromBody,
-	BiabApiError,
-	isBiabPlanGateBody,
+	BdApiError,
+	isBdPlanGateBody,
 } from "./errors.js";
 
 export type FetchLike = typeof fetch;
 
-/** Options for {@link BiabDevClient} / {@link createBiabDevClient}. */
-export type BiabDevClientOptions = {
+/** Options for {@link BdApiClient} / {@link createBdApiClient}. */
+export type BdApiClientOptions = {
 	baseUrl: string;
 	apiKey: string;
 	fetch?: FetchLike;
@@ -505,19 +509,19 @@ function extractErrorMessage(body: unknown, fallback: string) {
 }
 
 /**
- * Typed client for the BIAB package HTTP API.
+ * Typed client for the BD package HTTP API.
  *
  * @remarks
  * **Alpha:** This SDK is in alpha. Surfaces and behavior may change without semver guarantees.
  * Do not rely on it for production workloads—use development, staging, or experiments only.
  */
-export class BiabDevClient {
+export class BdApiClient {
 	private readonly baseUrl: string;
 	private readonly apiKey: string;
 	private readonly fetchImpl: FetchLike;
 	private readonly defaultHeaders: HeadersInit | undefined;
 
-	constructor(options: BiabDevClientOptions) {
+	constructor(options: BdApiClientOptions) {
 		// Trailing slash is required by the WHATWG URL parser so the relative
 		// `path` segments are appended to (rather than replacing) the base path.
 		this.baseUrl = options.baseUrl.endsWith("/")
@@ -539,60 +543,60 @@ export class BiabDevClient {
 	private readonly siteOrigin: string | undefined;
 
 	site(siteId: string) {
-		return new BiabDevSiteClient(this, siteId);
+		return new BdSiteClient(this, siteId);
 	}
 
 	get emailTemplates() {
-		return new BiabDevEmailTemplatesClient(this);
+		return new BdEmailTemplatesClient(this);
 	}
 
 	get dashboard() {
-		return new BiabDevDashboardClient(this);
+		return new BdDashboardClient(this);
 	}
 
 	get storefront() {
-		return new BiabDevStorefrontClient(this);
+		return new BdStorefrontClient(this);
 	}
 
 	get cart() {
-		return new BiabDevCartClient(this);
+		return new BdCartClient(this);
 	}
 
 	get checkout() {
-		return new BiabDevCheckoutClient(this);
+		return new BdCheckoutClient(this);
 	}
 
 	get coupons() {
-		return new BiabDevCouponsClient(this);
+		return new BdCouponsClient(this);
 	}
 
 	get subscriptions() {
-		return new BiabDevSubscriptionsClient(this);
+		return new BdSubscriptionsClient(this);
 	}
 
 	get shipping() {
-		return new BiabDevShippingClient(this);
+		return new BdShippingClient(this);
 	}
 
 	/** Customer-portal invitations — currently resend. */
 	get customerInvites() {
-		return new BiabDevCustomerInvitesClient(this);
+		return new BdCustomerInvitesClient(this);
 	}
 
 	get notifications() {
-		return new BiabDevNotificationsClient(this);
+		return new BdNotificationsClient(this);
 	}
 
 	get address() {
-		return new BiabDevAddressClient(this);
+		return new BdAddressClient(this);
 	}
 
 	get blog() {
-		return new BiabDevBlogClient(this);
+		return new BdBlogClient(this);
 	}
 
 	get reviews() {
-		return new BiabDevReviewsClient(this);
+		return new BdReviewsClient(this);
 	}
 
 	/**
@@ -602,12 +606,12 @@ export class BiabDevClient {
 	 * and gives you a gate to check before starting analytics.
 	 */
 	get consent() {
-		return new BiabDevConsentClient(this);
+		return new BdConsentClient(this);
 	}
 
 	/** Public job postings — build a careers page on your own domain. */
 	get hiring() {
-		return new BiabDevHiringClient(this);
+		return new BdHiringClient(this);
 	}
 
 	/**
@@ -618,26 +622,26 @@ export class BiabDevClient {
 	 * per document.
 	 */
 	get legal() {
-		return new BiabDevLegalClient(this);
+		return new BdLegalClient(this);
 	}
 
 	get chatbot() {
-		return new BiabDevChatbotClient(this);
+		return new BdChatbotClient(this);
 	}
 
 	get auth() {
-		return new BiabDevAuthClient(this);
+		return new BdAuthClient(this);
 	}
 
 	/**
-	 * Customer-portal client. Pin to a specific BIAB organization id so the
+	 * Customer-portal client. Pin to a specific BD organization id so the
 	 * caller never sees data from any other org (recommended). Omit
 	 * `organizationId` to fall back to the user's currently-active session
 	 * org — only use that on first-party hosts where the host already pins
 	 * the org.
 	 */
 	customerPortal(organizationId?: string) {
-		return new BiabDevCustomerPortalClient(this, organizationId ?? null);
+		return new BdCustomerPortalClient(this, organizationId ?? null);
 	}
 
 	async introspect(): Promise<AuthIntrospectResponse> {
@@ -674,12 +678,12 @@ export class BiabDevClient {
 
 		// Access gate — 200 (reads, body-only signal) and 402 (writes)
 		// both surface as a typed error so consumer code is uniform.
-		// Three flavours: plan-required (BiabFeatureNotEntitledError),
-		// payment-required (BiabPaymentLapsedError), service-suspended
-		// (BiabServiceSuspendedError) — all extend BiabAccessRejectedError
+		// Three flavours: plan-required (BdFeatureNotEntitledError),
+		// payment-required (BdPaymentLapsedError), service-suspended
+		// (BdServiceSuspendedError) — all extend BdAccessRejectedError
 		// for "catch any" patterns. `unwrapAccess()` is the opt-in
 		// Result-shape escape hatch.
-		if (isBiabPlanGateBody(body)) {
+		if (isBdPlanGateBody(body)) {
 			throw accessRejectionFromBody({
 				body,
 				path: url.pathname,
@@ -688,12 +692,12 @@ export class BiabDevClient {
 		}
 
 		if (!response.ok) {
-			throw new BiabApiError({
+			throw new BdApiError({
 				status: response.status,
 				path: url.pathname,
 				message: extractErrorMessage(
 					body,
-					`BIAB API request failed with status ${response.status}.`,
+					`BD API request failed with status ${response.status}.`,
 				),
 				body,
 			});
@@ -703,38 +707,38 @@ export class BiabDevClient {
 	}
 }
 
-export class BiabDevSiteClient {
-	readonly collections: BiabDevCollectionsClient;
-	readonly rows: BiabDevRowsClient;
+export class BdSiteClient {
+	readonly collections: BdCollectionsClient;
+	readonly rows: BdRowsClient;
 	/**
 	 * The org's custom database — the tables from `defineDataModel()`.
 	 * Distinct from `collections`/`rows`, which are Site Data. See
-	 * {@link BiabDevDataModelClient}.
+	 * {@link BdDataModelClient}.
 	 */
-	readonly dataModel: BiabDevDataModelClient;
+	readonly dataModel: BdDataModelClient;
 	/**
 	 * Read your site's visitor counts back (the counterpart to the
-	 * `<BIABAnalytics/>` tracker, which only records). See
-	 * {@link BiabDevAnalyticsClient}.
+	 * `<BDAnalytics/>` tracker, which only records). See
+	 * {@link BdAnalyticsClient}.
 	 */
-	readonly analytics: BiabDevAnalyticsClient;
+	readonly analytics: BdAnalyticsClient;
 	/**
 	 * The "Powered by BusinessDash" badge's policy + heartbeat. See
-	 * {@link BiabDevAttributionClient}.
+	 * {@link BdAttributionClient}.
 	 */
-	readonly attribution: BiabDevAttributionClient;
-	readonly assets: BiabDevAssetsClient;
-	readonly actions: BiabDevActionsClient;
-	readonly followers: BiabDevFollowersClient;
-	readonly marketingPages: BiabDevMarketingPagesClient;
+	readonly attribution: BdAttributionClient;
+	readonly assets: BdAssetsClient;
+	readonly actions: BdActionsClient;
+	readonly followers: BdFollowersClient;
+	readonly marketingPages: BdMarketingPagesClient;
 	/**
 	 * Schema-driven marketing flow (Phase 2). Pair with the SDK's
-	 * `defineSiteMarketingSchema()` builder + the `biab-dev sync-schema`
+	 * `defineSiteMarketingSchema()` builder + the `bd sync-schema`
 	 * CLI for the authoring side; this client is the live-site read
 	 * path (`getPageBundle`) and the upload entry point for the CLI.
 	 */
-	readonly marketing: BiabDevMarketingClient;
-	readonly parallelPages: BiabDevParallelPagesClient;
+	readonly marketing: BdMarketingClient;
+	readonly parallelPages: BdParallelPagesClient;
 	/**
 	 * Booking and conference calls.
 	 *
@@ -742,24 +746,24 @@ export class BiabDevSiteClient {
 	 * resource, which is why the OpenAPI generator — which reads this file —
 	 * never saw it, and why no non-JS starter had scheduling at all.
 	 */
-	readonly scheduling: BiabDevSchedulingClient;
+	readonly scheduling: BdSchedulingClient;
 
 	constructor(
-		readonly client: BiabDevClient,
+		readonly client: BdApiClient,
 		readonly siteId: string,
 	) {
-		this.collections = new BiabDevCollectionsClient(client, siteId);
-		this.scheduling = new BiabDevSchedulingClient(client, siteId);
-		this.rows = new BiabDevRowsClient(client, siteId);
-		this.dataModel = new BiabDevDataModelClient(client, siteId);
-		this.analytics = new BiabDevAnalyticsClient(client, siteId);
-		this.attribution = new BiabDevAttributionClient(client, siteId);
-		this.assets = new BiabDevAssetsClient(client, siteId);
-		this.actions = new BiabDevActionsClient(client, siteId);
-		this.followers = new BiabDevFollowersClient(client, siteId);
-		this.marketingPages = new BiabDevMarketingPagesClient(client, siteId);
-		this.marketing = new BiabDevMarketingClient(client, siteId);
-		this.parallelPages = new BiabDevParallelPagesClient(client, siteId);
+		this.collections = new BdCollectionsClient(client, siteId);
+		this.scheduling = new BdSchedulingClient(client, siteId);
+		this.rows = new BdRowsClient(client, siteId);
+		this.dataModel = new BdDataModelClient(client, siteId);
+		this.analytics = new BdAnalyticsClient(client, siteId);
+		this.attribution = new BdAttributionClient(client, siteId);
+		this.assets = new BdAssetsClient(client, siteId);
+		this.actions = new BdActionsClient(client, siteId);
+		this.followers = new BdFollowersClient(client, siteId);
+		this.marketingPages = new BdMarketingPagesClient(client, siteId);
+		this.marketing = new BdMarketingClient(client, siteId);
+		this.parallelPages = new BdParallelPagesClient(client, siteId);
 	}
 
 	/**
@@ -888,9 +892,9 @@ export type ParallelPagesRenderResponse = z.infer<
  *     return <RenderTemplate bundle={bundle} />;
  *   }
  */
-export class BiabDevParallelPagesClient {
+export class BdParallelPagesClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -996,9 +1000,9 @@ export function clearMarketingCache(siteId: string): void {
  *     checksum = `noop: true`).
  *   - `getLocales()` — enabled locales + brand-token map.
  */
-export class BiabDevMarketingClient {
+export class BdMarketingClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1080,15 +1084,15 @@ export class BiabDevMarketingClient {
 	}
 
 	/**
-	 * Bulk-upsert section values. Used by `biab-dev sync-content` to push
-	 * local JSON content to BIAB. Server caps each request at 256 items;
+	 * Bulk-upsert section values. Used by `bd sync-content` to push
+	 * local JSON content to BD. Server caps each request at 256 items;
 	 * larger imports are batched by the CLI. Per-item failures are
 	 * reported in the response (`results[].ok === false`) without aborting
 	 * the rest of the batch.
 	 *
 	 * The CLI's `--lax` flag sets `validate: false` for first-time imports
 	 * of legacy content that doesn't yet match the published schema —
-	 * useful so writers can pull existing content into BIAB and fix
+	 * useful so writers can pull existing content into BD and fix
 	 * validation errors in the dashboard incrementally.
 	 */
 	async publishSections(
@@ -1121,7 +1125,7 @@ export class BiabDevMarketingClient {
 
 /**
  * Process-wide cache for marketing-page payloads, keyed by `(siteId, pageKey)`.
- * Shared across `BiabDevMarketingPagesClient` instances so that
+ * Shared across `BdMarketingPagesClient` instances so that
  * `prefetch(pageKey)` warms the same store `get(pageKey)` reads on demand.
  *
  * Lives on a module-level `Map` rather than instance state because consumers
@@ -1166,9 +1170,9 @@ export function clearMarketingPageCache(
  * `list()` (no payloads) with `get(pageKey)` / `prefetch(pageKey)` to load
  * pages on demand instead of paying the full-content cost up front.
  */
-export class BiabDevMarketingPagesClient {
+export class BdMarketingPagesClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1234,9 +1238,9 @@ export class BiabDevMarketingPagesClient {
 	}
 }
 
-export class BiabDevCollectionsClient {
+export class BdCollectionsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1268,9 +1272,9 @@ export class BiabDevCollectionsClient {
 	}
 }
 
-export class BiabDevRowsClient {
+export class BdRowsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1318,11 +1322,11 @@ export class BiabDevRowsClient {
 
 /**
  * Read rows out of the org's CUSTOM DATABASE — the tables you declare with
- * `defineDataModel()` and push with `biab-dev sync-data-model`.
+ * `defineDataModel()` and push with `bd sync-data-model`.
  *
  * ⚠️ Not the same thing as `.collections` / `.rows`. Those read Site Data (the
  * site builder's tables, `site_data_rows`). Rows seeded with
- * `biab-dev sync-records` live in `org_object_records` and are reachable only
+ * `bd sync-records` live in `org_object_records` and are reachable only
  * through here — no `collections:*` call will ever return one.
  *
  * Requires the `metadata:read_records` scope. What a key can actually read is
@@ -1338,7 +1342,7 @@ export class BiabDevRowsClient {
  * private one never is. Open a table by declaring `visibility` in your model.
  *
  * ```ts
- * const result = await biab.site(siteId).dataModel.listRecords({
+ * const result = await bd.site(siteId).dataModel.listRecords({
  *   object: TECH_OBJECT_ID,   // the universalIdentifier from your config
  * });
  * if (!result.available) return <UpgradeCard feature={result.requiredFeature} />;
@@ -1348,9 +1352,9 @@ export class BiabDevRowsClient {
  * }
  * ```
  */
-export class BiabDevDataModelClient {
+export class BdDataModelClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1407,20 +1411,20 @@ export class BiabDevDataModelClient {
 /**
  * Read your site's visitor counts back.
  *
- * The `<BIABAnalytics/>` tracker (`@businessdash/sdk/react-analytics`) RECORDS
+ * The `<BDAnalytics/>` tracker (`@businessdash/sdk/react-analytics`) RECORDS
  * pageviews; this READS the totals, so you can put a number on the page instead
  * of only feeding the dashboard.
  *
  * ```ts
  * // Site-wide, all time
- * const all = await biab.site(siteId).analytics.pageViews();
+ * const all = await bd.site(siteId).analytics.pageViews();
  * if (all.available) console.log(`${all.total.views} views`);
  *
  * // One page, last 30 days
- * const home = await biab.site(siteId).analytics.pageViews({ paths: ['/'], days: 30 });
+ * const home = await bd.site(siteId).analytics.pageViews({ paths: ['/'], days: 30 });
  *
  * // A batch of pages in one round-trip
- * const list = await biab.site(siteId).analytics.pageViews({
+ * const list = await bd.site(siteId).analytics.pageViews({
  *   paths: ['/tech/typescript', '/tech/rust'],
  * });
  * // list.paths → [{ path, views, visitors }, …], every requested path present
@@ -1430,9 +1434,9 @@ export class BiabDevDataModelClient {
  * Requires the `analytics.web` entitlement — an org without it gets
  * `{ available: false }`, so branch on `.available`.
  */
-export class BiabDevAnalyticsClient {
+export class BdAnalyticsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1465,7 +1469,7 @@ export class BiabDevAnalyticsClient {
 	 * to a 30-day window.
 	 *
 	 * ```ts
-	 * const ai = await biab.site(siteId).analytics.aiVisibility({ days: 30 });
+	 * const ai = await bd.site(siteId).analytics.aiVisibility({ days: 30 });
 	 * if (ai.available) {
 	 *   for (const c of ai.crawlers)
 	 *     console.log(`${c.name}: ${c.fetches} fetches over ${c.distinctPages} pages`);
@@ -1495,9 +1499,9 @@ export class BiabDevAnalyticsClient {
  * verifies the badge by fetching your live domain, not by trusting this call. So
  * don't build logic on the heartbeat; do honor `policy().required`.
  */
-export class BiabDevAttributionClient {
+export class BdAttributionClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1531,9 +1535,9 @@ export class BiabDevAttributionClient {
 	}
 }
 
-export class BiabDevAssetsClient {
+export class BdAssetsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1549,9 +1553,9 @@ export class BiabDevAssetsClient {
 	}
 }
 
-export class BiabDevActionsClient {
+export class BdActionsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1570,8 +1574,8 @@ export class BiabDevActionsClient {
 	}
 }
 
-export class BiabDevEmailTemplatesClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdEmailTemplatesClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	async list(
 		input: ListEmailTemplatesInput = {},
@@ -1620,9 +1624,9 @@ export class BiabDevEmailTemplatesClient {
 	}
 }
 
-export class BiabDevFollowersClient {
+export class BdFollowersClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}
 
@@ -1679,8 +1683,8 @@ export class BiabDevFollowersClient {
 	}
 }
 
-export class BiabDevDashboardClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdDashboardClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	async createSession(): Promise<DashboardSessionResponse> {
 		return this.client.request({
@@ -1691,13 +1695,13 @@ export class BiabDevDashboardClient {
 	}
 }
 
-export class BiabDevStorefrontClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdStorefrontClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * Legacy embed-session mint (kept for iframe-widget consumers).
 	 * The programmatic methods below let consumer sites render their
-	 * own native product catalog using BIAB as the data layer.
+	 * own native product catalog using BD as the data layer.
 	 */
 	async createSession(
 		input?: StorefrontSessionInput,
@@ -1731,7 +1735,7 @@ export class BiabDevStorefrontClient {
 	 * ```ts
 	 * let remaining = 1;
 	 * while (remaining > 0) {
-	 *   const res = await biab.storefront.syncToStripe();
+	 *   const res = await bd.storefront.syncToStripe();
 	 *   remaining = res.remaining;
 	 * }
 	 * ```
@@ -1818,7 +1822,7 @@ export class BiabDevStorefrontClient {
 
 	/**
 	 * Full product detail with variants + per-image rows. Returns 404
-	 * via `BiabApiError` if the product isn't live or doesn't belong
+	 * via `BdApiError` if the product isn't live or doesn't belong
 	 * to the org bound to the API key.
 	 */
 	/**
@@ -1833,7 +1837,7 @@ export class BiabDevStorefrontClient {
 	 * The platform withholds the raw URL from every product payload on purpose:
 	 * CAD files are the largest thing it serves and are the org's intellectual
 	 * property, so a catalog of naked URLs is a design library published to
-	 * anyone willing to write a loop. This endpoint requires a `biab_cad` cookie
+	 * anyone willing to write a loop. This endpoint requires a `bd_cad` cookie
 	 * on the incoming request, rate-limits per IP, and re-checks the
 	 * `ecommerce.product_3d` entitlement before answering.
 	 *
@@ -1904,9 +1908,9 @@ export class BiabDevStorefrontClient {
 	}
 }
 
-export class BiabDevCartClient {
+export class BdCartClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly visitorToken: string | null = null,
 		private readonly sessionToken: string | null = null,
 	) {}
@@ -1916,8 +1920,8 @@ export class BiabDevCartClient {
 	 * own httpOnly cookie). Same shopper across page loads, no
 	 * sign-in required.
 	 */
-	forVisitor(visitorToken: string): BiabDevCartClient {
-		return new BiabDevCartClient(this.client, visitorToken, null);
+	forVisitor(visitorToken: string): BdCartClient {
+		return new BdCartClient(this.client, visitorToken, null);
 	}
 
 	/**
@@ -1925,14 +1929,14 @@ export class BiabDevCartClient {
 	 * Carts are now keyed to the signed-in customer; persists
 	 * across devices.
 	 */
-	withSession(sessionToken: string): BiabDevCartClient {
-		return new BiabDevCartClient(this.client, null, sessionToken);
+	withSession(sessionToken: string): BdCartClient {
+		return new BdCartClient(this.client, null, sessionToken);
 	}
 
 	private headers(): HeadersInit {
 		const out: Record<string, string> = {};
-		if (this.visitorToken) out["X-BIAB-Cart-Visitor"] = this.visitorToken;
-		if (this.sessionToken) out["X-BIAB-Session-Token"] = this.sessionToken;
+		if (this.visitorToken) out["X-BD-Cart-Visitor"] = this.visitorToken;
+		if (this.sessionToken) out["X-BD-Session-Token"] = this.sessionToken;
 		return out;
 	}
 
@@ -2043,9 +2047,9 @@ export class BiabDevCartClient {
 	}
 }
 
-export class BiabDevCheckoutClient {
+export class BdCheckoutClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly visitorToken: string | null = null,
 		private readonly sessionToken: string | null = null,
 	) {}
@@ -2054,8 +2058,8 @@ export class BiabDevCheckoutClient {
 	 * Authenticate the start-from-cart call as an anonymous shopper
 	 * (visitor-token cart). Same UUID you used with `client.cart.forVisitor(...)`.
 	 */
-	forVisitor(visitorToken: string): BiabDevCheckoutClient {
-		return new BiabDevCheckoutClient(this.client, visitorToken, null);
+	forVisitor(visitorToken: string): BdCheckoutClient {
+		return new BdCheckoutClient(this.client, visitorToken, null);
 	}
 
 	/**
@@ -2063,14 +2067,14 @@ export class BiabDevCheckoutClient {
 	 * The Stripe Checkout Session will be created against this
 	 * customer's saved cart.
 	 */
-	withSession(sessionToken: string): BiabDevCheckoutClient {
-		return new BiabDevCheckoutClient(this.client, null, sessionToken);
+	withSession(sessionToken: string): BdCheckoutClient {
+		return new BdCheckoutClient(this.client, null, sessionToken);
 	}
 
 	private headers(): HeadersInit {
 		const out: Record<string, string> = {};
-		if (this.visitorToken) out["X-BIAB-Cart-Visitor"] = this.visitorToken;
-		if (this.sessionToken) out["X-BIAB-Session-Token"] = this.sessionToken;
+		if (this.visitorToken) out["X-BD-Cart-Visitor"] = this.visitorToken;
+		if (this.sessionToken) out["X-BD-Session-Token"] = this.sessionToken;
 		return out;
 	}
 
@@ -2092,7 +2096,7 @@ export class BiabDevCheckoutClient {
 	}
 
 	/**
-	 * Convert the caller's saved BIAB cart (resolved via visitor token
+	 * Convert the caller's saved BD cart (resolved via visitor token
 	 * or session token) into a Stripe Checkout Session. Returns the
 	 * Stripe-hosted URL; redirect the browser there to collect payment.
 	 *
@@ -2126,7 +2130,7 @@ export class BiabDevCheckoutClient {
 }
 
 /**
- * White-glove Google Places proxy. BIAB owns the API key — consumer
+ * White-glove Google Places proxy. BD owns the API key — consumer
  * code never sees it. Use at the checkout delivery-address input
  * to give shoppers text-search predictions + verify deliverability
  * before submitting the order.
@@ -2151,7 +2155,7 @@ export class BiabDevCheckoutClient {
  * // When user picks a prediction:
  * const detail = await client.address.getDetails(prediction.place_id);
  * if (detail.enabled && detail.address) {
- *   const form = BiabDevAddressClient.googleToFormValues(detail.address);
+ *   const form = BdAddressClient.googleToFormValues(detail.address);
  *   reactHookForm.reset(form);
  * }
  *
@@ -2160,8 +2164,8 @@ export class BiabDevCheckoutClient {
  * if (!v.isVerified) showDidYouMean(v.googleAddress);
  * ```
  */
-export class BiabDevAddressClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdAddressClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	async search(input: AddressSearchInput): Promise<AddressSearchResponse> {
 		const body = addressSearchInputSchema.parse(input);
@@ -2232,8 +2236,8 @@ export class BiabDevAddressClient {
  * dashboard's "Sync to Stripe" action — otherwise `startCheckout`
  * returns 409 `subscription_not_synced`.
  */
-export class BiabDevSubscriptionsClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdSubscriptionsClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	async list(): Promise<SubscriptionOfferingsListResponse> {
 		return this.client.request({
@@ -2263,8 +2267,8 @@ export class BiabDevSubscriptionsClient {
 	}
 }
 
-export class BiabDevCouponsClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdCouponsClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * Validate a coupon code against the org's Stripe-connected
@@ -2297,7 +2301,7 @@ export class BiabDevCouponsClient {
 	 * Requires a SECRET key holding `storefront:write`.
 	 *
 	 * ```ts
-	 * const { coupon, stripeSynced } = await biab.coupons.create({
+	 * const { coupon, stripeSynced } = await bd.coupons.create({
 	 *   code: 'WELCOME10',
 	 *   discountType: 'percent',
 	 *   value: 10,
@@ -2339,10 +2343,10 @@ export class BiabDevCouponsClient {
 
 /**
  * Shipping: rate lookups + on-demand tracking. White-glove model —
- * BIAB owns the carrier integration; consumer code never sees the
+ * BD owns the carrier integration; consumer code never sees the
  * underlying provider name. Gated on `ecommerce.shipping` so calls
  * from orgs on the Launch plan return the standard plan-gate body
- * via {@link BiabApiError} (status 403).
+ * via {@link BdApiError} (status 403).
  *
  * @example
  * ```ts
@@ -2359,25 +2363,25 @@ export class BiabDevCouponsClient {
  * }
  * ```
  */
-export class BiabDevShippingClient {
+export class BdShippingClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly visitorToken: string | null = null,
 		private readonly sessionToken: string | null = null,
 	) {}
 
-	forVisitor(visitorToken: string): BiabDevShippingClient {
-		return new BiabDevShippingClient(this.client, visitorToken, null);
+	forVisitor(visitorToken: string): BdShippingClient {
+		return new BdShippingClient(this.client, visitorToken, null);
 	}
 
-	withSession(sessionToken: string): BiabDevShippingClient {
-		return new BiabDevShippingClient(this.client, null, sessionToken);
+	withSession(sessionToken: string): BdShippingClient {
+		return new BdShippingClient(this.client, null, sessionToken);
 	}
 
 	private headers(): HeadersInit {
 		const out: Record<string, string> = {};
-		if (this.visitorToken) out["X-BIAB-Cart-Visitor"] = this.visitorToken;
-		if (this.sessionToken) out["X-BIAB-Session-Token"] = this.sessionToken;
+		if (this.visitorToken) out["X-BD-Cart-Visitor"] = this.visitorToken;
+		if (this.sessionToken) out["X-BD-Session-Token"] = this.sessionToken;
 		return out;
 	}
 
@@ -2448,24 +2452,22 @@ export class BiabDevShippingClient {
  *   - `order.return_label_created`
  *
  * The webhook payload is JSON + signed with the customer's saved
- * `webhookSigningSecret` via `X-BIAB-Signature: <hex hmac-sha256>`.
+ * `webhookSigningSecret` via `X-BD-Signature: <hex hmac-sha256>`.
  * Consumer's receiver verifies via:
  *   crypto.createHmac('sha256', secret).update(rawBody).digest('hex')
  */
-export class BiabDevNotificationsClient {
+export class BdNotificationsClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly sessionToken: string | null = null,
 	) {}
 
-	withSession(sessionToken: string): BiabDevNotificationsClient {
-		return new BiabDevNotificationsClient(this.client, sessionToken);
+	withSession(sessionToken: string): BdNotificationsClient {
+		return new BdNotificationsClient(this.client, sessionToken);
 	}
 
 	private headers(): HeadersInit {
-		return this.sessionToken
-			? { "X-BIAB-Session-Token": this.sessionToken }
-			: {};
+		return this.sessionToken ? { "X-BD-Session-Token": this.sessionToken } : {};
 	}
 
 	async getPreferences(): Promise<CustomerNotificationPreferencesResponse> {
@@ -2529,9 +2531,9 @@ export class BiabDevNotificationsClient {
 	}
 }
 
-export class BiabDevBlogClient {
+export class BdBlogClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly sessionToken: string | null = null,
 	) {}
 
@@ -2546,14 +2548,12 @@ export class BiabDevBlogClient {
 	 * await client.blog().withSession(token).postComment(slug, { content });
 	 * ```
 	 */
-	withSession(sessionToken: string): BiabDevBlogClient {
-		return new BiabDevBlogClient(this.client, sessionToken);
+	withSession(sessionToken: string): BdBlogClient {
+		return new BdBlogClient(this.client, sessionToken);
 	}
 
 	private headers(): HeadersInit {
-		return this.sessionToken
-			? { "X-BIAB-Session-Token": this.sessionToken }
-			: {};
+		return this.sessionToken ? { "X-BD-Session-Token": this.sessionToken } : {};
 	}
 
 	/**
@@ -2698,8 +2698,8 @@ export class BiabDevBlogClient {
  * }
  * ```
  */
-export class BiabDevReviewsClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdReviewsClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * One page of the org's public reviews, newest-first. `limit` defaults to
@@ -2741,8 +2741,8 @@ export class BiabDevReviewsClient {
  * }
  * ```
  */
-export class BiabDevHiringClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdHiringClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * One page of open postings, newest-first. `limit` defaults to the server
@@ -2807,8 +2807,8 @@ export class BiabDevHiringClient {
  * const privacy = await client.legal.get("privacy");
  * ```
  */
-export class BiabDevLegalClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdLegalClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * Every published document, plus the header/footer presentation.
@@ -2857,12 +2857,12 @@ const consentStateSchema = z.object({
  * that could read or write another org's consent — consent is given to a
  * controller, and one controller's record is not another's to act on.
  *
- * The visitor is identified by an `x-biab-visitor` header carrying an opaque id
+ * The visitor is identified by an `x-bd-visitor` header carrying an opaque id
  * from the caller's own first-party cookie. `@businessdash/sdk/consent` manages
  * that for you; these methods are the transport underneath it.
  */
-export class BiabDevConsentClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdConsentClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/** The notice to show, and what this visitor currently allows. */
 	async get(visitorKey?: string | null): Promise<{
@@ -2876,7 +2876,7 @@ export class BiabDevConsentClient {
 		return this.client.request({
 			path: "consent",
 			responseSchema: consentStateSchema,
-			...(visitorKey ? { headers: { "x-biab-visitor": visitorKey } } : {}),
+			...(visitorKey ? { headers: { "x-bd-visitor": visitorKey } } : {}),
 		});
 	}
 
@@ -2900,14 +2900,14 @@ export class BiabDevConsentClient {
 				noticeVersion: input.noticeVersion,
 				source: input.source ?? "banner",
 			},
-			headers: { "x-biab-visitor": input.visitorKey },
+			headers: { "x-bd-visitor": input.visitorKey },
 			responseSchema: z.object({ ok: z.boolean() }),
 		});
 	}
 }
 
-export class BiabDevChatbotClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdChatbotClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/** Returns the iframe URL for `<Chatbot/>`. */
 	async createSession(): Promise<ChatbotSessionResponse> {
@@ -3180,7 +3180,7 @@ export class BiabDevChatbotClient {
  *
  * @remarks
  * **Privacy:** When `organizationId` is set, every request is pinned to that
- * org via the `X-BIAB-Customer-Portal-Org` header. The server-side
+ * org via the `X-BD-Customer-Portal-Org` header. The server-side
  * `customerPortalProcedure` will reject any access to a different org, so a
  * customer browsing a Dominoes-branded site can never accidentally see Pizza
  * Hut data even if their account is linked to both. This is the recommended
@@ -3199,13 +3199,13 @@ function decodeBase64ToBytes(base64: string): Uint8Array {
 	return bytes;
 }
 
-export class BiabDevCustomerPortalClient {
+export class BdCustomerPortalClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly organizationId: string | null,
 		/**
 		 * Optional tenantAuth session token. When set, requests include
-		 * an `X-BIAB-Session-Token` header and the BIAB customer-portal
+		 * an `X-BD-Session-Token` header and the BD customer-portal
 		 * routes resolve the calling user via the session payload
 		 * instead of the API key's user binding.
 		 *
@@ -3234,8 +3234,8 @@ export class BiabDevCustomerPortalClient {
 	 *   .getWork();
 	 * ```
 	 */
-	withSession(sessionToken: string): BiabDevCustomerPortalClient {
-		return new BiabDevCustomerPortalClient(
+	withSession(sessionToken: string): BdCustomerPortalClient {
+		return new BdCustomerPortalClient(
 			this.client,
 			this.organizationId,
 			sessionToken,
@@ -3245,10 +3245,10 @@ export class BiabDevCustomerPortalClient {
 	private headers(): HeadersInit {
 		const out: Record<string, string> = {};
 		if (this.organizationId) {
-			out["X-BIAB-Customer-Portal-Org"] = this.organizationId;
+			out["X-BD-Customer-Portal-Org"] = this.organizationId;
 		}
 		if (this.sessionToken) {
-			out["X-BIAB-Session-Token"] = this.sessionToken;
+			out["X-BD-Session-Token"] = this.sessionToken;
 		}
 		return out;
 	}
@@ -3393,6 +3393,31 @@ export class BiabDevCustomerPortalClient {
 		});
 	}
 
+	/**
+	 * Designed proposals the customer has been sent.
+	 *
+	 * Separate from `listQuotes` because a proposal is the document built
+	 * around a quote, not the quote: `kind` decides whether a consumer offers
+	 * a download or frames a page, and a UI that guessed would get one of the
+	 * two wrong every time.
+	 */
+	async listProposals(): Promise<CustomerProposalListResponse> {
+		return this.client.request({
+			path: "customer-portal/proposals",
+			responseSchema: customerProposalListResponseSchema,
+			headers: this.headers(),
+		});
+	}
+
+	/** One proposal the customer owns. */
+	async getProposal(proposalId: string): Promise<CustomerProposal> {
+		return this.client.request({
+			path: `customer-portal/proposals/${encodeURIComponent(proposalId)}`,
+			responseSchema: customerProposalSchema,
+			headers: this.headers(),
+		});
+	}
+
 	/** Read a single quote the signed-in customer owns. */
 	async getQuote(quoteId: string): Promise<CustomerQuoteDetail> {
 		return this.client.request({
@@ -3513,7 +3538,7 @@ export class BiabDevCustomerPortalClient {
 	/**
 	 * Begin signing a contract the customer owns. Returns a ready, absolute
 	 * signing URL on the org's branded hostname — redirect the customer there
-	 * to BIAB's hosted e-sign page, which captures the signature and generates
+	 * to BD's hosted e-sign page, which captures the signature and generates
 	 * the executed PDF. No signature payload is collected client-side, so the
 	 * legal record stays consistent across consumers.
 	 *
@@ -4120,7 +4145,7 @@ export class BiabDevCustomerPortalClient {
 	/**
 	 * List the digital downloads the customer is entitled to for a paid order
 	 * (P10d). Each item is a ready-to-use URL — a short-lived presigned link for
-	 * BIAB-hosted files (`expiresInSeconds` set) or the org's external link.
+	 * BD-hosted files (`expiresInSeconds` set) or the org's external link.
 	 * Returns an empty list until the order's payment settles.
 	 *
 	 * @example
@@ -4284,14 +4309,14 @@ export class BiabDevCustomerPortalClient {
 }
 
 /**
- * Creates a {@link BiabDevClient} for the given host `baseUrl` and package API key.
+ * Creates a {@link BdApiClient} for the given host `baseUrl` and package API key.
  *
  * @remarks
  * **Alpha:** This package is still in alpha release. APIs may change; it is **not** intended
  * for production use yet. Prefer non-production environments until a stable major is published.
  */
-export function createBiabDevClient(options: BiabDevClientOptions) {
-	return new BiabDevClient(options);
+export function createBdApiClient(options: BdApiClientOptions) {
+	return new BdApiClient(options);
 }
 
 /**
@@ -4299,8 +4324,8 @@ export function createBiabDevClient(options: BiabDevClientOptions) {
  * the API key. Used by the SDK's `createAuthHandler` (server) and
  * `<SignIn />` / `<SignUp />` / `<SignOut />` components (client).
  */
-export class BiabDevAuthClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdAuthClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	async start(input: TenantAuthStartInput): Promise<TenantAuthStartResponse> {
 		const body = tenantAuthStartInputSchema.parse(input);
@@ -4364,7 +4389,7 @@ export class BiabDevAuthClient {
 		return this.client.request({
 			method: "GET",
 			path: "auth/me",
-			headers: { "x-biab-session": input.sessionToken },
+			headers: { "x-bd-session": input.sessionToken },
 			responseSchema: tenantAuthMeResponseSchema,
 		});
 	}
@@ -4429,8 +4454,8 @@ export class BiabDevAuthClient {
  *
  * For an org running its own admin tooling rather than the dashboard.
  */
-export class BiabDevCustomerInvitesClient {
-	constructor(private readonly client: BiabDevClient) {}
+export class BdCustomerInvitesClient {
+	constructor(private readonly client: BdApiClient) {}
 
 	/**
 	 * Hand an invite link out again.
@@ -4468,9 +4493,9 @@ export class BiabDevCustomerInvitesClient {
 	}
 }
 
-export class BiabDevSchedulingClient {
+export class BdSchedulingClient {
 	constructor(
-		private readonly client: BiabDevClient,
+		private readonly client: BdApiClient,
 		private readonly siteId: string,
 	) {}