@classytic/commerce-client 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.1 — 2026-10-20
+
+Add tenant-scoped media removal through the guarded media resource, and type media folder, size and display metadata for Fluid library bindings. Report unsupported source formats and browser decoding failures before starting storage writes.
+
+Add `@classytic/commerce-client/platform`: `createPlatformClient({ apiUrl, token })` for platform administration with a bearer token and no merchant organization. `organizations.list` pages organizations and `organizations.decide(id, { action, expectedStatus, note })` applies an approve, reject, suspend or reactivate decision (matches `@spinekit/auth` 0.17.0 `./organizations`).
+
+Dependencies are already at the latest published (`arc-next` 0.18.0, `media-transform` 0.3.0, `primitives` 0.34.0).
+
 ## 0.1.0 — 2026-10-20
 
 First publish.
@@ -19,3 +27,5 @@ Typed store profiles, catalog reads, guest checkout with explicit retry keys, an
 The isolated `/management` entry supports merchant catalog/media, order commands
 and cash collection, store settings, Telegram connections and delivery history,
 plus API-key options, creation, rotation and revocation.
+
+Platform administration: `./platform` exposes bearer-only organization lists and guarded status decisions without requiring a merchant organization.

package/dist/management-types.d.ts

@@ -98,6 +98,11 @@ export interface StoreSettings {
 }
 export interface MerchantMedia {
   _id: string;
+  folder: string;
+  size: number;
+  title?: string;
+  alt?: string;
+  createdAt?: string;
   url: string;
   filename: string;
   mimeType?: string;

package/dist/management.d.ts

@@ -86,6 +86,12 @@ export declare function createMerchantClient(options: MerchantClientOptions): {
       params?: import("@classytic/arc-next/api").QueryParams;
       options?: Omit<import("@classytic/arc-next/api").RequestOptions, "token" | "organizationId">;
     }) => Promise<import("@classytic/repo-core/pagination").PaginatedResult<MerchantMedia>>;
+    remove: ({ token, organizationId, id, options }: {
+      token?: string | null;
+      organizationId?: string | null;
+      id: string;
+      options?: Omit<import("@classytic/arc-next/api").RequestOptions, "token" | "organizationId">;
+    }) => Promise<import("@classytic/repo-core/repository").DeleteResult>;
     upload: (file: File, folder?: 'products' | 'categories') => Promise<MerchantMedia>;
     uploadImage(file: File, folder?: 'products' | 'categories'): Promise<MerchantMedia>;
   };

package/dist/management.js

@@ -124,10 +124,12 @@ function createMerchantMedia(client, fetcher) {
 	}
 	return {
 		list: media.getAll.bind(media),
+		remove: media.delete.bind(media),
 		upload: (file, folder = "products") => upload(file, folder),
 		async uploadImage(file, folder = "products") {
 			const policy = await media.request("GET", `${media.baseUrl}/transform-policy`);
-			const { resolveTransformPlan } = await import("@classytic/media-transform/policy");
+			const { resolveTransformPlan, isTransformableImage } = await import("@classytic/media-transform/policy");
+			if (!isTransformableImage(file.type)) throw new Error("Choose a JPEG, PNG, WebP, AVIF or BMP image that your browser can open.");
 			const plan = resolveTransformPlan({
 				folder,
 				mimeType: file.type,
@@ -142,7 +144,9 @@ function createMerchantMedia(client, fetcher) {
 				import("@classytic/media-transform/image/compressImageSet"),
 				import("@classytic/media-transform/image/uploadHints")
 			]);
-			const result = await compressImageSet(await createBrowserImageAdapter(), file, plan.options);
+			const result = await compressImageSet(await createBrowserImageAdapter(), file, plan.options).catch(() => {
+				throw new Error("Your browser could not process this image. Try a JPEG or PNG copy.");
+			});
 			return upload(new File([result.blob], storedFilename(file.name, result.format), { type: result.blob.type }), folder, result, file.name);
 		}
 	};

package/dist/platform.d.ts

@@ -0,0 +1,36 @@
+//#region src/platform.d.ts
+export type OrganizationStatus = 'pending' | 'active' | 'rejected' | 'suspended';
+export type OrganizationAction = 'approve' | 'reject' | 'suspend' | 'reactivate';
+export interface PlatformOrganization {
+  _id: string;
+  name: string;
+  slug: string;
+  status: OrganizationStatus;
+  createdAt?: string;
+  statusHistory?: Array<{
+    status: OrganizationStatus;
+    occurredAt: string;
+    by?: string;
+    note?: string;
+  }>;
+}
+/** Platform administration uses a bearer identity without selecting a merchant organization. */
+export declare function createPlatformClient({ apiUrl, token }: {
+  apiUrl: string;
+  token: string;
+}): {
+  organizations: {
+    list: ({ token, organizationId, params, options }?: {
+      token?: string | null;
+      organizationId?: string | null;
+      params?: import("@classytic/arc-next/api").QueryParams;
+      options?: Omit<import("@classytic/arc-next/api").RequestOptions, "token" | "organizationId">;
+    }) => Promise<import("@classytic/repo-core/pagination").PaginatedResult<PlatformOrganization>>;
+    decide(id: string, data: {
+      action: OrganizationAction;
+      expectedStatus: OrganizationStatus;
+      note: string;
+    }): Promise<PlatformOrganization>;
+  };
+};
+//#endregion

package/dist/platform.js

@@ -0,0 +1,29 @@
+import { BaseApi } from "@classytic/arc-next/api";
+import { createClient } from "@classytic/arc-next/client";
+//#region src/platform.ts
+/** Platform administration uses a bearer identity without selecting a merchant organization. */
+function createPlatformClient({ apiUrl, token }) {
+	if (!token.trim()) throw new Error("A platform bearer token is required.");
+	const url = new URL(apiUrl);
+	if (url.username || url.password || url.search || url.hash) throw new Error("Use a plain API URL.");
+	const client = createClient({
+		baseUrl: url.href.replace(/\/+$/, ""),
+		getToken: () => token,
+		credentials: "omit",
+		autoIdempotency: false,
+		timeoutMs: 15e3
+	});
+	const organizations = new BaseApi("admin/organizations", {
+		client,
+		basePath: "",
+		cache: "no-store"
+	});
+	return { organizations: {
+		list: organizations.getAll.bind(organizations),
+		decide(id, data) {
+			return organizations.request("POST", `${organizations.baseUrl}/${encodeURIComponent(id)}/action`, { data });
+		}
+	} };
+}
+//#endregion
+export { createPlatformClient };

package/management.md

@@ -86,3 +86,15 @@ Product writes also accept `tags`, `collections` and
 `defaultMonetization.pricing.compareAtPrice`. The catalog derives `onSale`; clients
 never set it. Tags and collections use the existing catalog arrays, with no
 additional collection-management service.
+
+
+### Media library
+
+`client.media.list({ params: { page: 1, limit: 20, folder: 'products' } })`
+returns tenant-scoped media and pagination. `client.media.remove({ id })` uses
+the media resource's guarded delete; an in-use image is refused by the server.
+
+`client.media.uploadImage(file, folder)` resolves the server's transform policy
+through media-transform before requesting storage writes. The server must accept
+every output format in its policy, including the browser encoder's fallback.
+Passthrough thresholds and dimensions belong to that policy, rather than the UI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/commerce-client",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Typed storefront and merchant clients for the Classytic Commerce API",
   "type": "module",
   "sideEffects": false,
@@ -30,6 +30,10 @@
     "./category-tree": {
       "types": "./dist/category-tree.d.ts",
       "default": "./dist/category-tree.js"
+    },
+    "./platform": {
+      "types": "./dist/platform.d.ts",
+      "default": "./dist/platform.js"
     }
   },
   "files": [