@commercengine/pos 0.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["refreshPromise: Promise<void> | null","newTokens: { access_token: string; refresh_token: string }","errors: string[]","config: PosSDKOptions"],"sources":["../src/lib/utils/jwt.ts","../src/lib/utils/auth.ts","../src/lib/middleware/auth.ts","../src/lib/utils/url.ts","../src/lib/client.ts","../src/lib/pos.ts","../src/index.ts"],"sourcesContent":["import { decodeJwt } from \"jose\";\n\n/**\n * JWT payload structure for POS tokens\n */\nexport interface JwtPayload {\n  token_type: string;\n  exp: number;\n  iat: number;\n  jti: string;\n  ulid: string;\n  username: string;\n  email: string;\n  phone: string;\n  first_name: string;\n  last_name: string;\n  store_id: string;\n  is_logged_in: boolean;\n  customer_id: string | null;\n  customer_group_id: string | null;\n  device: {\n    device_id: string;\n    device_name: string;\n  };\n  location: {\n    id: string;\n    name: string;\n  };\n  role: {\n    id: string;\n    name: string;\n  };\n  tenant_id: string;\n  channel: {\n    id: string;\n    name: string;\n    type: string;\n  };\n  sid: string;\n}\n\n/**\n * User information extracted from POS JWT token\n */\nexport interface UserInfo {\n  id: string;\n  username: string;\n  email: string;\n  phone: string;\n  firstName: string;\n  lastName: string;\n  storeId: string;\n  isLoggedIn: boolean;\n  customerId: string | null;\n  customerGroupId: string | null;\n  device: {\n    deviceId: string;\n    deviceName: string;\n  };\n  location: {\n    id: string;\n    name: string;\n  };\n  role: {\n    id: string;\n    name: string;\n  };\n  tenantId: string;\n  channel: {\n    id: string;\n    name: string;\n    type: string;\n  };\n  sessionId: string;\n  tokenExpiry: Date;\n  tokenIssuedAt: Date;\n}\n\n/**\n * Decode and extract user information from a JWT token\n *\n * @param token - The JWT token to decode\n * @returns User information or null if token is invalid\n */\nexport function extractUserInfoFromToken(token: string): UserInfo | null {\n  try {\n    const payload = decodeJwt(token) as JwtPayload;\n\n    return {\n      id: payload.ulid,\n      username: payload.username,\n      email: payload.email,\n      phone: payload.phone,\n      firstName: payload.first_name,\n      lastName: payload.last_name,\n      storeId: payload.store_id,\n      isLoggedIn: payload.is_logged_in,\n      customerId: payload.customer_id,\n      customerGroupId: payload.customer_group_id,\n      device: {\n        deviceId: payload.device.device_id,\n        deviceName: payload.device.device_name,\n      },\n      location: {\n        id: payload.location.id,\n        name: payload.location.name,\n      },\n      role: {\n        id: payload.role.id,\n        name: payload.role.name,\n      },\n      tenantId: payload.tenant_id,\n      channel: {\n        id: payload.channel.id,\n        name: payload.channel.name,\n        type: payload.channel.type,\n      },\n      sessionId: payload.sid,\n      tokenExpiry: new Date(payload.exp * 1000),\n      tokenIssuedAt: new Date(payload.iat * 1000),\n    };\n  } catch (error) {\n    console.warn(\"Failed to decode JWT token:\", error);\n    return null;\n  }\n}\n\n/**\n * Check if a JWT token is expired\n *\n * @param token - The JWT token to check\n * @param bufferSeconds - Buffer time in seconds (default: 30)\n * @returns True if token is expired or will expire within buffer time\n */\nexport function isTokenExpired(\n  token: string,\n  bufferSeconds: number = 30\n): boolean {\n  try {\n    const payload = decodeJwt(token);\n    if (!payload.exp) return true;\n\n    const currentTime = Math.floor(Date.now() / 1000);\n    const expiryTime = payload.exp;\n\n    // Consider token expired if it expires within the buffer time\n    return currentTime >= expiryTime - bufferSeconds;\n  } catch (error) {\n    console.warn(\"Failed to decode JWT token:\", error);\n    return true; // Treat invalid tokens as expired\n  }\n}\n\n/**\n * Get the user ID from a JWT token\n *\n * @param token - The JWT token\n * @returns User ID (ulid) or null if token is invalid\n */\nexport function getUserIdFromToken(token: string): string | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.id || null;\n}\n\n/**\n * Check if user is logged in based on JWT token\n *\n * @param token - The JWT token\n * @returns True if user is logged in, false otherwise\n */\nexport function isUserLoggedIn(token: string): boolean {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.isLoggedIn || false;\n}\n\n/**\n * Check if user is authenticated (has valid POS token)\n * Checks the token for isLoggedIn status\n *\n * @param token - The JWT token\n * @returns True if user is authenticated with valid POS access\n */\nexport function isUserAuthenticated(token: string): boolean {\n  const userInfo = extractUserInfoFromToken(token);\n  return !!userInfo?.isLoggedIn;\n}\n\n/**\n * Get the device ID from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Device ID or null if token is invalid\n */\nexport function getDeviceIdFromToken(token: string): string | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.device?.deviceId || null;\n}\n\n/**\n * Get the location ID from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Location ID or null if token is invalid\n */\nexport function getLocationIdFromToken(token: string): string | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.location?.id || null;\n}\n\n/**\n * Get the role information from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Role object with id and name, or null if token is invalid\n */\nexport function getRoleFromToken(\n  token: string\n): { id: string; name: string } | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.role || null;\n}\n\n/**\n * Get the tenant ID from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Tenant ID or null if token is invalid\n */\nexport function getTenantIdFromToken(token: string): string | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.tenantId || null;\n}\n\n/**\n * Get the channel information from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Channel object with id and name, or null if token is invalid\n */\nexport function getChannelFromToken(\n  token: string\n): { id: string; name: string } | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.channel || null;\n}\n\n/**\n * Get the session ID from a POS JWT token\n *\n * @param token - The JWT token\n * @returns Session ID or null if token is invalid\n */\nexport function getSessionIdFromToken(token: string): string | null {\n  const userInfo = extractUserInfoFromToken(token);\n  return userInfo?.sessionId || null;\n}\n","/**\n * Check if a URL path is a POS login endpoint that should use API key\n * Based on POS spec, only these 5 endpoints use X-Api-Key:\n * - /pos/auth/login/email\n * - /pos/auth/login/phone\n * - /pos/auth/login/whatsapp\n * - /pos/auth/pair-device\n * - /pos/auth/verify-otp\n */\nexport function isApiKeyEndpoint(pathname: string): boolean {\n  const apiKeyEndpoints = [\n    \"/pos/auth/login/email\",\n    \"/pos/auth/login/phone\",\n    \"/pos/auth/login/whatsapp\",\n    \"/pos/auth/pair-device\",\n    \"/pos/auth/verify-otp\",\n  ];\n  return apiKeyEndpoints.some((endpoint) => pathname.includes(endpoint));\n}\n\n/**\n * Check if a URL path is a POS endpoint that returns tokens\n * Based on POS spec, only these endpoints return tokens:\n * - /pos/auth/verify-otp (after OTP verification)\n * - /pos/auth/refresh-token\n */\nexport function isTokenReturningEndpoint(pathname: string): boolean {\n  const tokenEndpoints = [\"/pos/auth/verify-otp\", \"/pos/auth/refresh-token\"];\n  return tokenEndpoints.some((endpoint) => pathname.includes(endpoint));\n}\n\n/**\n * Check if a URL path is a POS logout endpoint\n */\nexport function isLogoutEndpoint(pathname: string): boolean {\n  return (\n    pathname.includes(\"/pos/auth/logout\") || pathname.includes(\"/pos/logout\")\n  );\n}\n\n// Re-export JWT utilities from jwt.ts\nexport {\n  isTokenExpired,\n  extractUserInfoFromToken,\n  getUserIdFromToken,\n  isUserLoggedIn,\n  isUserAuthenticated,\n  getDeviceIdFromToken,\n  getLocationIdFromToken,\n  getRoleFromToken,\n  getTenantIdFromToken,\n} from \"./jwt\";\nexport type { UserInfo, JwtPayload } from \"./jwt\";\n","import type { Middleware } from \"openapi-fetch\";\nimport { getPathnameFromUrl } from \"@commercengine/sdk-core\";\nimport {\n  isApiKeyEndpoint,\n  isTokenReturningEndpoint,\n  isLogoutEndpoint,\n  isTokenExpired,\n} from \"../utils/auth\";\n\n/**\n * Token storage interface for the POS auth middleware\n */\nexport interface TokenStorage {\n  getAccessToken(): Promise<string | null>;\n  setAccessToken(token: string): Promise<void>;\n  getRefreshToken(): Promise<string | null>;\n  setRefreshToken(token: string): Promise<void>;\n  clearTokens(): Promise<void>;\n}\n\n/**\n * Simple in-memory token storage implementation\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private accessToken: string | null = null;\n  private refreshToken: string | null = null;\n\n  async getAccessToken(): Promise<string | null> {\n    return this.accessToken;\n  }\n\n  async setAccessToken(token: string): Promise<void> {\n    this.accessToken = token;\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    return this.refreshToken;\n  }\n\n  async setRefreshToken(token: string): Promise<void> {\n    this.refreshToken = token;\n  }\n\n  async clearTokens(): Promise<void> {\n    this.accessToken = null;\n    this.refreshToken = null;\n  }\n}\n\n/**\n * Browser localStorage token storage implementation for POS\n */\nexport class BrowserTokenStorage implements TokenStorage {\n  private accessTokenKey: string;\n  private refreshTokenKey: string;\n\n  constructor(prefix: string = \"pos_\") {\n    this.accessTokenKey = `${prefix}access_token`;\n    this.refreshTokenKey = `${prefix}refresh_token`;\n  }\n\n  async getAccessToken(): Promise<string | null> {\n    if (typeof localStorage === \"undefined\") return null;\n    return localStorage.getItem(this.accessTokenKey);\n  }\n\n  async setAccessToken(token: string): Promise<void> {\n    if (typeof localStorage !== \"undefined\") {\n      localStorage.setItem(this.accessTokenKey, token);\n    }\n  }\n\n  async getRefreshToken(): Promise<string | null> {\n    if (typeof localStorage === \"undefined\") return null;\n    return localStorage.getItem(this.refreshTokenKey);\n  }\n\n  async setRefreshToken(token: string): Promise<void> {\n    if (typeof localStorage !== \"undefined\") {\n      localStorage.setItem(this.refreshTokenKey, token);\n    }\n  }\n\n  async clearTokens(): Promise<void> {\n    if (typeof localStorage !== \"undefined\") {\n      localStorage.removeItem(this.accessTokenKey);\n      localStorage.removeItem(this.refreshTokenKey);\n    }\n  }\n}\n\n/**\n * Configuration for the POS auth middleware\n */\nexport interface PosAuthMiddlewareConfig {\n  /**\n   * Token storage implementation\n   */\n  tokenStorage: TokenStorage;\n\n  /**\n   * API key for X-Api-Key endpoints (login, pair-device, verify-otp)\n   * Required for POS authentication flows and fallback scenarios\n   */\n  apiKey: string;\n\n  /**\n   * Base URL for the API (used for refresh token endpoint)\n   */\n  baseUrl: string;\n\n  /**\n   * Function to refresh tokens\n   * Should make a call to the POS refresh token endpoint\n   */\n  refreshTokenFn?: (refreshToken: string) => Promise<{\n    access_token: string;\n    refresh_token: string;\n  }>;\n\n  /**\n   * Callback when tokens are updated (login/refresh)\n   */\n  onTokensUpdated?: (accessToken: string, refreshToken: string) => void;\n\n  /**\n   * Callback when tokens are cleared (logout/error)\n   */\n  onTokensCleared?: () => void;\n}\n\n/**\n * Create POS authentication middleware for openapi-fetch\n *\n * POS Authentication Rules:\n * 1. API Key endpoints (X-Api-Key): login/email, login/phone, login/whatsapp, pair-device, verify-otp\n * 2. Bearer token endpoints: All other endpoints\n * 3. Token returning endpoints: verify-otp, refresh-token\n */\nexport function createPosAuthMiddleware(\n  config: PosAuthMiddlewareConfig\n): Middleware {\n  let isRefreshing = false;\n  let refreshPromise: Promise<void> | null = null;\n  let hasAssessedTokens = false;\n\n  const assessTokenStateOnce = async (): Promise<void> => {\n    // Skip if already assessed (tokenStorage is guaranteed to exist when middleware is created)\n    if (hasAssessedTokens) return;\n    \n    hasAssessedTokens = true;\n    \n    try {\n      const accessToken = await config.tokenStorage.getAccessToken();\n      const refreshToken = await config.tokenStorage.getRefreshToken();\n      \n      // Case 1: Valid access token - do nothing\n      if (accessToken && !isTokenExpired(accessToken)) {\n        return;\n      }\n      \n      // Case 2: Orphaned refresh token (no access token but refresh token exists)\n      if (!accessToken && refreshToken) {\n        // Clean up orphaned refresh token to prevent confusion\n        await config.tokenStorage.clearTokens();\n        config.onTokensCleared?.();\n        console.info('Cleaned up orphaned refresh token in POS');\n        return;\n      }\n      \n      // Case 3: Expired access token with valid refresh token\n      if (accessToken && refreshToken && !isTokenExpired(refreshToken)) {\n        try {\n          await refreshTokens();\n          console.info('POS tokens refreshed proactively on startup');\n        } catch (error) {\n          // Refresh failed - both tokens are likely invalid, clear them\n          await config.tokenStorage.clearTokens();\n          config.onTokensCleared?.();\n          console.info('POS tokens cleared after failed refresh on startup');\n        }\n        return;\n      }\n      \n      // Case 4: Both tokens expired or invalid - clear stale tokens\n      if ((accessToken && isTokenExpired(accessToken)) || \n          (refreshToken && isTokenExpired(refreshToken))) {\n        await config.tokenStorage.clearTokens();\n        config.onTokensCleared?.();\n        console.info('POS stale tokens cleared on startup - user needs to re-authenticate');\n        return;\n      }\n      \n      // Case 5: No tokens at all - valid unauthenticated state\n      if (!accessToken && !refreshToken) {\n        // This is normal - user hasn't logged in or has logged out\n        // No action needed, POS will work with API key endpoints\n        return;\n      }\n      \n      // Note: Unlike storefront, POS doesn't have anonymous fallback\n      // Users must explicitly authenticate through login endpoints\n    } catch (error) {\n      // Silent fail - don't break the request flow\n      console.warn('POS token state assessment failed:', error);\n    }\n  };\n\n  const refreshTokens = async (): Promise<void> => {\n    if (isRefreshing && refreshPromise) {\n      return refreshPromise;\n    }\n\n    isRefreshing = true;\n    refreshPromise = (async () => {\n      try {\n        const refreshToken = await config.tokenStorage.getRefreshToken();\n\n        if (!refreshToken || isTokenExpired(refreshToken)) {\n          throw new Error(\"No valid refresh token available\");\n        }\n\n        let newTokens: { access_token: string; refresh_token: string };\n\n        if (config.refreshTokenFn) {\n          // Use provided refresh function\n          newTokens = await config.refreshTokenFn(refreshToken);\n        } else {\n          // Default refresh implementation for POS\n          const response = await fetch(\n            `${config.baseUrl}/pos/auth/refresh-token`,\n            {\n              method: \"POST\",\n              headers: {\n                \"Content-Type\": \"application/json\",\n                Authorization: `Bearer ${await config.tokenStorage.getAccessToken()}`,\n              },\n              body: JSON.stringify({ refresh_token: refreshToken }),\n            }\n          );\n\n          if (!response.ok) {\n            throw new Error(`POS token refresh failed: ${response.status}`);\n          }\n\n          const data = await response.json();\n          newTokens = data.content || data;\n        }\n\n        // Store new tokens\n        await config.tokenStorage.setAccessToken(newTokens.access_token);\n        await config.tokenStorage.setRefreshToken(newTokens.refresh_token);\n\n        // Notify callback\n        config.onTokensUpdated?.(\n          newTokens.access_token,\n          newTokens.refresh_token\n        );\n      } catch (error) {\n        console.error(\"POS token refresh failed:\", error);\n        // Clear tokens on refresh failure\n        await config.tokenStorage.clearTokens();\n        config.onTokensCleared?.();\n        throw error;\n      } finally {\n        isRefreshing = false;\n        refreshPromise = null;\n      }\n    })();\n\n    return refreshPromise;\n  };\n\n  return {\n    async onRequest({ request }) {\n      const pathname = getPathnameFromUrl(request.url);\n      \n      // Assess token state once per middleware instance (POS session start)\n      await assessTokenStateOnce();\n\n      // Handle API Key endpoints (5 specific endpoints only)\n      if (isApiKeyEndpoint(pathname)) {\n        request.headers.set(\"X-Api-Key\", config.apiKey);\n        return request;\n      }\n\n      // For all other endpoints, use Bearer token\n      let accessToken = await config.tokenStorage.getAccessToken();\n\n      // Check if token needs refresh\n      if (accessToken && isTokenExpired(accessToken)) {\n        try {\n          await refreshTokens();\n          accessToken = await config.tokenStorage.getAccessToken();\n        } catch (error) {\n          // If refresh fails, continue without token (will get 401)\n          console.warn(\"Token refresh failed:\", error);\n          accessToken = null;\n        }\n      }\n\n      // Add Authorization header if we have a token\n      if (accessToken) {\n        request.headers.set(\"Authorization\", `Bearer ${accessToken}`);\n      }\n\n      return request;\n    },\n\n    async onResponse({ request, response }) {\n      const pathname = getPathnameFromUrl(request.url);\n\n      // Handle successful responses that return tokens (verify-otp, refresh-token)\n      if (response.ok && isTokenReturningEndpoint(pathname)) {\n        try {\n          const data = await response.clone().json();\n          const content = data.content || data;\n\n          if (content?.access_token && content?.refresh_token) {\n            await config.tokenStorage.setAccessToken(content.access_token);\n            await config.tokenStorage.setRefreshToken(content.refresh_token);\n            config.onTokensUpdated?.(\n              content.access_token,\n              content.refresh_token\n            );\n          }\n        } catch (error) {\n          console.warn(\"Failed to extract tokens from POS response:\", error);\n        }\n      } else if (response.ok && isLogoutEndpoint(pathname)) {\n        // Clear tokens on successful logout\n        await config.tokenStorage.clearTokens();\n        config.onTokensCleared?.();\n      }\n\n      // Handle 401 responses - retry once if token was expired\n      if (response.status === 401 && !isApiKeyEndpoint(pathname)) {\n        const currentToken = await config.tokenStorage.getAccessToken();\n\n        // Only attempt refresh if we have a token and it's expired\n        if (currentToken && isTokenExpired(currentToken, 0)) {\n          try {\n            await refreshTokens();\n\n            // Retry the original request with new token\n            const newToken = await config.tokenStorage.getAccessToken();\n            if (newToken) {\n              const retryRequest = request.clone();\n              retryRequest.headers.set(\"Authorization\", `Bearer ${newToken}`);\n              return fetch(retryRequest);\n            }\n          } catch (error) {\n            // If refresh fails, let the original 401 response through\n            console.warn(\"POS token refresh failed on 401 response:\", error);\n          }\n        }\n      }\n\n      return response;\n    },\n  };\n}\n\n/**\n * Helper function to create POS auth middleware with sensible defaults\n */\nexport function createDefaultPosAuthMiddleware(options: {\n  apiKey: string;\n  baseUrl: string;\n  tokenStorage?: TokenStorage;\n  onTokensUpdated?: (accessToken: string, refreshToken: string) => void;\n  onTokensCleared?: () => void;\n}): Middleware {\n  const tokenStorage =\n    options.tokenStorage ||\n    (typeof localStorage !== \"undefined\"\n      ? new BrowserTokenStorage()\n      : new MemoryTokenStorage());\n\n  return createPosAuthMiddleware({\n    tokenStorage,\n    apiKey: options.apiKey,\n    baseUrl: options.baseUrl,\n    onTokensUpdated: options.onTokensUpdated,\n    onTokensCleared: options.onTokensCleared,\n  });\n}\n","/**\n * Environment configuration for POS API\n */\nexport enum Environment {\n  Development = \"dev\",\n  Staging = \"staging\",\n  Production = \"production\",\n}\n\n/**\n * Configuration for building POS API URLs\n */\nexport interface PosURLConfig {\n  storeId: string;\n  environment?: Environment;\n  baseUrl?: string;\n}\n\n/**\n * Build the base URL for POS API requests\n *\n * @param config - URL configuration\n * @returns The base URL for POS API requests\n */\nexport function buildPosURL(config: PosURLConfig): string {\n  // If custom baseUrl is provided, use it directly\n  if (config.baseUrl) {\n    return config.baseUrl.replace(/\\/$/, \"\"); // Remove trailing slash\n  }\n\n  // Build URL based on environment and store ID\n  const env = config.environment || Environment.Production;\n\n  switch (env) {\n    case Environment.Staging:\n      return `https://staging.api.commercengine.io/api/v1/${config.storeId}/storefront`;\n    case Environment.Production:\n    default:\n      return `https://prod.api.commercengine.io/api/v1/${config.storeId}/storefront`;\n  }\n}\n","import type { paths } from \"../types/pos\";\nimport { BaseAPIClient, getPathnameFromUrl } from \"@commercengine/sdk-core\";\nimport { createDefaultPosAuthMiddleware } from \"./middleware/auth\";\nimport { isApiKeyEndpoint } from \"./utils/auth\";\nimport { buildPosURL } from \"./utils/url\";\nimport type { PosSDKOptions, SupportedDefaultHeaders } from \"../index\";\n\n/**\n * POS API client that extends the generic BaseAPIClient\n * Adds Commerce Engine POS specific authentication and token management\n */\nexport class PosAPIClient extends BaseAPIClient<\n  paths,\n  SupportedDefaultHeaders\n> {\n  protected config: PosSDKOptions;\n  private initializationPromise: Promise<void> | null = null;\n\n  /**\n   * Validate required configuration parameters\n   * @param config - Configuration to validate\n   * @throws Error with descriptive message if validation fails\n   */\n  private static validateConfig(config: PosSDKOptions): void {\n    const errors: string[] = [];\n\n    // Required fields validation\n    if (!config.storeId?.trim()) {\n      errors.push(\"storeId is required and cannot be empty\");\n    }\n\n    if (!config.apiKey?.trim()) {\n      errors.push(\"apiKey is required for POS authentication (needed for login, device pairing, and token refresh fallbacks)\");\n    }\n\n    // Token configuration validation\n    if (config.accessToken && !config.tokenStorage && !config.refreshToken) {\n      errors.push(\"When providing accessToken without tokenStorage, consider providing refreshToken for token refresh capability\");\n    }\n\n    if (config.refreshToken && !config.accessToken) {\n      errors.push(\"refreshToken cannot be provided without accessToken (orphaned refresh token)\");\n    }\n\n    if (config.refreshToken && !config.tokenStorage) {\n      errors.push(\"refreshToken requires tokenStorage for automatic token management\");\n    }\n\n    // Callback validation\n    if ((config.onTokensUpdated || config.onTokensCleared) && !config.tokenStorage) {\n      errors.push(\"Token callbacks (onTokensUpdated/onTokensCleared) require tokenStorage for automatic token management\");\n    }\n\n    // URL validation\n    if (config.baseUrl && !PosAPIClient.isValidUrl(config.baseUrl)) {\n      errors.push(\"baseUrl must be a valid HTTP/HTTPS URL\");\n    }\n\n    if (errors.length > 0) {\n      throw new Error(`POS SDK configuration validation failed:\\n- ${errors.join('\\n- ')}`);\n    }\n  }\n\n  /**\n   * Check if a string is a valid URL\n   * @param url - URL string to validate\n   * @returns True if valid URL\n   */\n  private static isValidUrl(url: string): boolean {\n    try {\n      const parsed = new URL(url);\n      return parsed.protocol === 'http:' || parsed.protocol === 'https:';\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * Create a new PosAPIClient\n   *\n   * @param config - Configuration for the API client\n   */\n  constructor(config: PosSDKOptions) {\n    // Validate required configuration first (before calling super)\n    PosAPIClient.validateConfig(config);\n\n    // Build base URL from Commerce Engine config\n    const baseUrl = buildPosURL({\n      storeId: config.storeId,\n      environment: config.environment,\n      baseUrl: config.baseUrl,\n    });\n\n    // Header transformations for POS API\n    const headerTransformations = {\n      customer_group_id: \"x-customer-group-id\",\n      // Add any other header transformations here\n    } as Record<keyof SupportedDefaultHeaders, string>;\n\n    // Call parent constructor with generic config\n    super(\n      {\n        baseUrl: baseUrl,\n        timeout: config.timeout,\n        defaultHeaders: config.defaultHeaders,\n        debug: config.debug,\n        logger: config.logger,\n      },\n      baseUrl,\n      headerTransformations\n    );\n\n    // Store full config for POS-specific features\n    this.config = { ...config };\n\n    // Set up POS-specific auth middleware\n    this.setupPosAuth();\n  }\n\n  /**\n   * Set up POS-specific authentication middleware\n   */\n  private setupPosAuth(): void {\n    const config = this.config as PosSDKOptions;\n\n    // Set up auth middleware if token storage is provided\n    if (config.tokenStorage) {\n      const authMiddleware = createDefaultPosAuthMiddleware({\n        apiKey: config.apiKey,\n        baseUrl: this.getBaseUrl(),\n        tokenStorage: config.tokenStorage,\n        onTokensUpdated: config.onTokensUpdated,\n        onTokensCleared: config.onTokensCleared,\n      });\n      this.client.use(authMiddleware);\n\n      // If initial tokens were provided, store them in tokenStorage\n      if (config.accessToken) {\n        this.initializationPromise = this.initializeTokens(\n          config.accessToken,\n          config.refreshToken\n        );\n        // Clear the manual tokens since we're using storage\n        config.accessToken = undefined;\n        config.refreshToken = undefined;\n      }\n    } else {\n      // For manual token management, add simple header injection middleware\n      this.client.use({\n        onRequest: async ({ request }) => {\n          const pathname = getPathnameFromUrl(request.url);\n\n          // For login endpoints, use API key\n          if (isApiKeyEndpoint(pathname)) {\n            request.headers.set(\"X-Api-Key\", config.apiKey);\n            return request;\n          }\n\n          // For all other endpoints, prefer access token, fallback to API key\n          if (config.accessToken) {\n            request.headers.set(\n              \"Authorization\",\n              `Bearer ${config.accessToken}`\n            );\n          } else if (config.apiKey) {\n            request.headers.set(\"X-Api-Key\", config.apiKey);\n          }\n\n          return request;\n        },\n      });\n    }\n  }\n\n  /**\n   * Get the authorization header value\n   * If using token storage, gets the current token from storage\n   * Otherwise returns the manual token\n   *\n   * @returns The Authorization header value or empty string if no token is set\n   */\n  public async getAuthorizationHeader(): Promise<string> {\n    // Wait for initialization to complete if using token storage\n    if (this.config.tokenStorage && this.initializationPromise) {\n      await this.initializationPromise;\n    }\n\n    if (this.config.tokenStorage) {\n      const token = await this.config.tokenStorage.getAccessToken();\n      return token ? `Bearer ${token}` : \"\";\n    }\n    return this.config.accessToken ? `Bearer ${this.config.accessToken}` : \"\";\n  }\n\n  /**\n   * Set authentication tokens\n   *\n   * @param accessToken - The access token (required)\n   * @param refreshToken - The refresh token (optional)\n   *\n   * Behavior:\n   * - If tokenStorage is provided: Stores tokens for automatic management\n   * - If tokenStorage is not provided: Only stores access token for manual management\n   */\n  public async setTokens(\n    accessToken: string,\n    refreshToken?: string\n  ): Promise<void> {\n    if (this.config.tokenStorage) {\n      // Automatic token management\n      await this.config.tokenStorage.setAccessToken(accessToken);\n      if (refreshToken) {\n        await this.config.tokenStorage.setRefreshToken(refreshToken);\n      }\n    } else {\n      // Manual token management - only access token\n      this.config.accessToken = accessToken;\n      if (refreshToken) {\n        console.warn(\n          \"Refresh token provided but ignored in manual token management mode. Use tokenStorage for automatic management.\"\n        );\n      }\n    }\n  }\n\n  /**\n   * Clear all authentication tokens\n   *\n   * Behavior:\n   * - If tokenStorage is provided: Clears both access and refresh tokens from storage\n   * - If tokenStorage is not provided: Clears the manual access token\n   */\n  public async clearTokens(): Promise<void> {\n    if (this.config.tokenStorage) {\n      await this.config.tokenStorage.clearTokens();\n    } else {\n      this.config.accessToken = undefined;\n    }\n  }\n\n  /**\n   * Set the X-Api-Key header\n   *\n   * @param apiKey - The API key to set\n   */\n  public setApiKey(apiKey: string): void {\n    this.config.apiKey = apiKey;\n  }\n\n\n  /**\n   * Initialize tokens in storage (private helper method)\n   */\n  private async initializeTokens(\n    accessToken: string,\n    refreshToken?: string\n  ): Promise<void> {\n    try {\n      if (this.config.tokenStorage) {\n        await this.config.tokenStorage.setAccessToken(accessToken);\n        if (refreshToken) {\n          await this.config.tokenStorage.setRefreshToken(refreshToken);\n        }\n      }\n    } catch (error) {\n      console.warn(\"Failed to initialize tokens in storage:\", error);\n    }\n  }\n}\n","import { PosAPIClient } from \"./client\";\nimport type { ApiResult } from \"@commercengine/sdk-core\";\nimport type {\n  // Auth types\n  LoginPosDeviceWithEmailBody,\n  LoginPosDeviceWithEmailContent,\n  LoginPosDeviceWithPhoneBody,\n  LoginPosDeviceWithPhoneContent,\n  LoginPosDeviceWithWhatsappBody,\n  LoginPosDeviceWithWhatsappContent,\n  PairPosDeviceBody,\n  PairPosDeviceContent,\n  RefreshPosAccessTokenBody,\n  RefreshPosAccessTokenContent,\n  VerifyPosLoginOtpBody,\n  VerifyPosLoginOtpContent,\n  LogoutFromPosDeviceResponse,\n\n  // Cart types\n  PosCreateCartBody,\n  PosCreateCartContent,\n  PosGetCartPathParams,\n  PosGetCartContent,\n  PosDeleteCartPathParams,\n  PosDeleteCartResponse,\n  PosUpdateCartPathParams,\n  PosUpdateCartBody,\n  PosUpdateCartContent,\n\n  // Cart address\n  PosCreateCartAddressPathParams,\n  PosCreateCartAddressBody,\n  PosCreateCartAddressContent,\n\n  // Coupons\n  PosListCouponsContent,\n  PosListCouponsHeaderParams,\n  PosApplyCouponPathParams,\n  PosApplyCouponBody,\n  PosApplyCouponContent,\n  PosRemoveCouponPathParams,\n  PosRemoveCouponContent,\n  PosEvaluateCouponsPathParams,\n  PosEvaluateCouponsContent,\n\n  // Promotions\n  PosListPromotionsContent,\n  PosListPromotionsHeaderParams,\n  PosEvaluatePromotionsPathParams,\n  PosEvaluatePromotionsContent,\n\n  // Credit balance\n  PosRedeemCreditBalancePathParams,\n  PosRedeemCreditBalanceBody,\n  PosRedeemCreditBalanceContent,\n  PosRemoveCreditBalancePathParams,\n  PosRemoveCreditBalanceContent,\n\n  // Gift cards\n  PosRedeemGiftCardPathParams,\n  PosRedeemGiftCardBody,\n  PosRedeemGiftCardContent,\n  PosRemoveGiftCardPathParams,\n  PosRemoveGiftCardContent,\n\n  // Loyalty points\n  PosRedeemLoyaltyPointsPathParams,\n  PosRedeemLoyaltyPointsBody,\n  PosRedeemLoyaltyPointsContent,\n  PosRemoveLoyaltyPointsPathParams,\n  PosRemoveLoyaltyPointsContent,\n\n  // Fulfillment\n  PosUpdateFulfillmentPreferencePathParams,\n  PosUpdateFulfillmentPreferenceBody,\n  PosUpdateFulfillmentPreferenceResponse,\n  GetPosFulfillmentOptionsBody,\n  GetPosFulfillmentOptionsContent,\n\n  // Customer\n  UpdatePosCartCustomerPathParams,\n  UpdatePosCartCustomerBody,\n  UpdatePosCartCustomerContent,\n\n  // Orders\n  CreatePosOrderBody,\n  CreatePosOrderContent,\n\n  // Catalog types\n  PosListCategoriesContent,\n  PosListCategoriesQuery,\n  PosListProductsContent,\n  PosListProductsQuery,\n  PosListProductsHeaderParams,\n  PosListCrosssellProductsContent,\n  PosListCrosssellProductsQuery,\n  PosListCrosssellProductsHeaderParams,\n  PosSearchProductsBody,\n  PosSearchProductsContent,\n  PosSearchProductsHeaderParams,\n  PosListSimilarProductsContent,\n  PosListSimilarProductsQuery,\n  PosListSimilarProductsHeaderParams,\n  PosListUpsellProductsContent,\n  PosListUpsellProductsQuery,\n  PosListUpsellProductsHeaderParams,\n  PosGetProductDetailPathParams,\n  PosGetProductDetailContent,\n  PosGetProductDetailHeaderParams,\n  PosListProductReviewsPathParams,\n  PosListProductReviewsContent,\n  PosListProductReviewsQuery,\n  PosListProductVariantsPathParams,\n  PosListProductVariantsContent,\n  PosListProductVariantsHeaderParams,\n  PosGetVariantDetailPathParams,\n  PosGetVariantDetailContent,\n  PosGetVariantDetailHeaderParams,\n  PosListSkusContent,\n  PosListSkusQuery,\n  PosListSkusHeaderParams,\n} from \"../types/pos-api-types\";\n\n/**\n * Client for interacting with POS endpoints\n * Single client that handles all POS operations including auth, cart, orders, etc.\n */\nexport class PosClient extends PosAPIClient {\n  // ===============================\n  // AUTHENTICATION ENDPOINTS\n  // ===============================\n\n  /**\n   * Login with email address for POS device\n   * @param body - Login credentials containing device ID and email\n   * @returns Promise with OTP token and action\n   */\n  public async loginWithEmail(\n    body: LoginPosDeviceWithEmailBody\n  ): Promise<ApiResult<LoginPosDeviceWithEmailContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/login/email\", {\n        body: body,\n      })\n    );\n  }\n\n  /**\n   * Login with phone number for POS device\n   * @param body - Login credentials containing device ID and phone\n   * @returns Promise with OTP token and action\n   */\n  public async loginWithPhone(\n    body: LoginPosDeviceWithPhoneBody\n  ): Promise<ApiResult<LoginPosDeviceWithPhoneContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/login/phone\", { body })\n    );\n  }\n\n  /**\n   * Login with WhatsApp for POS device\n   * @param body - Login credentials containing device ID and phone\n   * @returns Promise with OTP token and action\n   */\n  public async loginWithWhatsapp(\n    body: LoginPosDeviceWithWhatsappBody\n  ): Promise<ApiResult<LoginPosDeviceWithWhatsappContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/login/whatsapp\", { body })\n    );\n  }\n\n  /**\n   * Pair POS device with pairing code\n   * @param body - Pairing code received via phone/email\n   * @returns Promise with device information\n   */\n  public async pairDevice(\n    body: PairPosDeviceBody\n  ): Promise<ApiResult<PairPosDeviceContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/pair-device\", { body })\n    );\n  }\n\n  /**\n   * Verify OTP for POS login\n   * @param body - OTP verification data\n   * @returns Promise with user info and tokens\n   */\n  public async verifyOtp(\n    body: VerifyPosLoginOtpBody\n  ): Promise<ApiResult<VerifyPosLoginOtpContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/verify-otp\", { body })\n    );\n  }\n\n  /**\n   * Refresh POS access token\n   * @param body - Refresh token data\n   * @returns Promise with new tokens\n   */\n  public async refreshAccessToken(\n    body: RefreshPosAccessTokenBody\n  ): Promise<ApiResult<RefreshPosAccessTokenContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/auth/refresh-token\", { body })\n    );\n  }\n\n  /**\n   * Logout from POS device\n   * @returns Promise with logout confirmation\n   */\n  public async logout(): Promise<ApiResult<LogoutFromPosDeviceResponse>> {\n    return this.executeRequest(() => this.client.POST(\"/pos/auth/logout\"));\n  }\n\n  // ===============================\n  // CART ENDPOINTS\n  // ===============================\n\n  /**\n   * Create a new cart\n   * @param body - Cart creation data with items\n   * @returns Promise with created cart\n   */\n  public async createCart(\n    body: PosCreateCartBody\n  ): Promise<ApiResult<PosCreateCartContent>> {\n    return this.executeRequest(() => this.client.POST(\"/pos/carts\", { body }));\n  }\n\n  /**\n   * Get cart details\n   * @param pathParams - Cart ID\n   * @returns Promise with cart details\n   */\n  public async getCart(\n    pathParams: PosGetCartPathParams\n  ): Promise<ApiResult<PosGetCartContent>> {\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/carts/{id}\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  /**\n   * Delete cart (remove all items)\n   * @param pathParams - Cart ID\n   * @returns Promise with deletion confirmation\n   */\n  public async deleteCart(\n    pathParams: PosDeleteCartPathParams\n  ): Promise<ApiResult<PosDeleteCartResponse>> {\n    return this.executeRequest(() =>\n      this.client.DELETE(\"/pos/carts/{id}\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  /**\n   * Add/update cart item (set quantity to 0 to remove)\n   * @param pathParams - Cart ID\n   * @param body - Item update data\n   * @returns Promise with updated cart\n   */\n  public async updateCart(\n    pathParams: PosUpdateCartPathParams,\n    body: PosUpdateCartBody\n  ): Promise<ApiResult<PosUpdateCartContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/items\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Update cart address (billing/shipping)\n   * @param pathParams - Cart ID\n   * @param body - Address data (registered user IDs or guest addresses)\n   * @returns Promise with updated cart\n   */\n  public async createCartAddress(\n    pathParams: PosCreateCartAddressPathParams,\n    body: PosCreateCartAddressBody\n  ): Promise<ApiResult<PosCreateCartAddressContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/address\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  // ===============================\n  // COUPON & PROMOTION ENDPOINTS\n  // ===============================\n\n  /**\n   * List all available coupons\n   * @param headers - Optional header parameters (customer_group_id, etc.)\n   * @returns Promise with available coupons\n   */\n  public async listCoupons(\n    headers?: PosListCouponsHeaderParams\n  ): Promise<ApiResult<PosListCouponsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/carts/available-coupons\", {\n        params: {\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List all available promotions\n   * @param headers - Optional header parameters (customer_group_id, etc.)\n   * @returns Promise with available promotions\n   */\n  public async listPromotions(\n    headers?: PosListPromotionsHeaderParams\n  ): Promise<ApiResult<PosListPromotionsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/carts/available-promotions\", {\n        params: {\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * Apply coupon to cart\n   * @param pathParams - Cart ID\n   * @param body - Coupon code\n   * @returns Promise with updated cart\n   */\n  public async applyCoupon(\n    pathParams: PosApplyCouponPathParams,\n    body: PosApplyCouponBody\n  ): Promise<ApiResult<PosApplyCouponContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/coupon\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Remove coupon from cart\n   * @param pathParams - Cart ID\n   * @returns Promise with updated cart\n   */\n  public async removeCoupon(\n    pathParams: PosRemoveCouponPathParams\n  ): Promise<ApiResult<PosRemoveCouponContent>> {\n    return this.executeRequest(() =>\n      this.client.DELETE(\"/pos/carts/{id}/coupon\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  /**\n   * Evaluate applicable/inapplicable coupons for cart\n   * @param pathParams - Cart ID\n   * @returns Promise with coupon evaluation results\n   */\n  public async evaluateCoupons(\n    pathParams: PosEvaluateCouponsPathParams\n  ): Promise<ApiResult<PosEvaluateCouponsContent>> {\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/carts/{id}/evaluate-coupons\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  /**\n   * Evaluate applicable/inapplicable promotions for cart\n   * @param pathParams - Cart ID\n   * @returns Promise with promotion evaluation results\n   */\n  public async evaluatePromotions(\n    pathParams: PosEvaluatePromotionsPathParams\n  ): Promise<ApiResult<PosEvaluatePromotionsContent>> {\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/carts/{id}/evaluate-promotions\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  // ===============================\n  // CREDIT BALANCE ENDPOINTS\n  // ===============================\n\n  /**\n   * Apply credit balance to cart\n   * @param pathParams - Cart ID\n   * @param body - Credit balance amount to use\n   * @returns Promise with updated cart\n   */\n  public async redeemCreditBalance(\n    pathParams: PosRedeemCreditBalancePathParams,\n    body: PosRedeemCreditBalanceBody\n  ): Promise<ApiResult<PosRedeemCreditBalanceContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/credit-balance\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Remove credit balance from cart\n   * @param pathParams - Cart ID\n   * @returns Promise with updated cart\n   */\n  public async removeCreditBalance(\n    pathParams: PosRemoveCreditBalancePathParams\n  ): Promise<ApiResult<PosRemoveCreditBalanceContent>> {\n    return this.executeRequest(() =>\n      this.client.DELETE(\"/pos/carts/{id}/credit-balance\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  // ===============================\n  // GIFT CARD ENDPOINTS\n  // ===============================\n\n  /**\n   * Redeem gift card for cart\n   * @param pathParams - Cart ID\n   * @param body - Gift card code\n   * @returns Promise with updated cart\n   */\n  public async redeemGiftCard(\n    pathParams: PosRedeemGiftCardPathParams,\n    body: PosRedeemGiftCardBody\n  ): Promise<ApiResult<PosRedeemGiftCardContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/gift-card\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Remove gift card from cart\n   * @param pathParams - Cart ID\n   * @returns Promise with updated cart\n   */\n  public async removeGiftCard(\n    pathParams: PosRemoveGiftCardPathParams\n  ): Promise<ApiResult<PosRemoveGiftCardContent>> {\n    return this.executeRequest(() =>\n      this.client.DELETE(\"/pos/carts/{id}/gift-card\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  // ===============================\n  // LOYALTY POINTS ENDPOINTS\n  // ===============================\n\n  /**\n   * Redeem loyalty points for cart\n   * @param pathParams - Cart ID\n   * @param body - Loyalty points to redeem\n   * @returns Promise with updated cart\n   */\n  public async redeemLoyaltyPoints(\n    pathParams: PosRedeemLoyaltyPointsPathParams,\n    body: PosRedeemLoyaltyPointsBody\n  ): Promise<ApiResult<PosRedeemLoyaltyPointsContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/loyalty-points\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Remove loyalty points from cart\n   * @param pathParams - Cart ID\n   * @returns Promise with updated cart\n   */\n  public async removeLoyaltyPoints(\n    pathParams: PosRemoveLoyaltyPointsPathParams\n  ): Promise<ApiResult<PosRemoveLoyaltyPointsContent>> {\n    return this.executeRequest(() =>\n      this.client.DELETE(\"/pos/carts/{id}/loyalty-points\", {\n        params: { path: pathParams },\n      })\n    );\n  }\n\n  // ===============================\n  // FULFILLMENT ENDPOINTS\n  // ===============================\n\n  /**\n   * Update cart fulfillment preference (delivery/pickup)\n   * @param pathParams - Cart ID\n   * @param body - Fulfillment preference data\n   * @returns Promise with confirmation\n   */\n  public async updateFulfillmentPreference(\n    pathParams: PosUpdateFulfillmentPreferencePathParams,\n    body: PosUpdateFulfillmentPreferenceBody\n  ): Promise<ApiResult<PosUpdateFulfillmentPreferenceResponse>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/fulfillment-preference\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  /**\n   * Get fulfillment options for cart\n   * @param body - Cart data for fulfillment calculation\n   * @returns Promise with fulfillment options\n   */\n  public async getFulfillmentOptions(\n    body: GetPosFulfillmentOptionsBody\n  ): Promise<ApiResult<GetPosFulfillmentOptionsContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/fulfillment-options\", { body })\n    );\n  }\n\n  // ===============================\n  // CUSTOMER ENDPOINTS\n  // ===============================\n\n  /**\n   * Update cart customer information\n   * @param pathParams - Cart ID\n   * @param body - Customer update data\n   * @returns Promise with updated cart\n   */\n  public async updateCartCustomer(\n    pathParams: UpdatePosCartCustomerPathParams,\n    body: UpdatePosCartCustomerBody\n  ): Promise<ApiResult<UpdatePosCartCustomerContent>> {\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/carts/{id}/update-customer\", {\n        params: { path: pathParams },\n        body,\n      })\n    );\n  }\n\n  // ===============================\n  // ORDER ENDPOINTS\n  // ===============================\n\n  /**\n   * Create order from cart\n   * @param body - Order creation data\n   * @returns Promise with created order\n   */\n  public async createOrder(\n    body: CreatePosOrderBody\n  ): Promise<ApiResult<CreatePosOrderContent>> {\n    return this.executeRequest(() => this.client.POST(\"/pos/orders\", { body }));\n  }\n\n  // ===============================\n  // CATALOG ENDPOINTS\n  // ===============================\n\n  /**\n   * List all categories\n   * @param query - Optional query parameters for filtering categories\n   * @returns Promise with list of categories\n   */\n  public async listCategories(\n    query?: PosListCategoriesQuery\n  ): Promise<ApiResult<PosListCategoriesContent>> {\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/categories\", {\n        params: { query },\n      })\n    );\n  }\n\n  /**\n   * List all products\n   * @param query - Optional query parameters for filtering products\n   * @param headers - Optional header parameters\n   * @returns Promise with list of products\n   */\n  public async listProducts(\n    query?: PosListProductsQuery,\n    headers?: PosListProductsHeaderParams\n  ): Promise<ApiResult<PosListProductsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products\", {\n        params: {\n          query,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List cross-sell products\n   * @param query - Query parameters with product IDs for cross-sell recommendations\n   * @param headers - Optional header parameters\n   * @returns Promise with cross-sell products\n   */\n  public async listCrosssellProducts(\n    query: PosListCrosssellProductsQuery,\n    headers?: PosListCrosssellProductsHeaderParams\n  ): Promise<ApiResult<PosListCrosssellProductsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/cross-sell\", {\n        params: {\n          query,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * Search products\n   * @param body - Search criteria and parameters\n   * @param headers - Optional header parameters\n   * @returns Promise with search results\n   */\n  public async searchProducts(\n    body: PosSearchProductsBody,\n    headers?: PosSearchProductsHeaderParams\n  ): Promise<ApiResult<PosSearchProductsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.POST(\"/pos/catalog/products/search\", {\n        body,\n        params: {\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List similar products\n   * @param query - Query parameters with product ID for similarity recommendations\n   * @param headers - Optional header parameters\n   * @returns Promise with similar products\n   */\n  public async listSimilarProducts(\n    query: PosListSimilarProductsQuery,\n    headers?: PosListSimilarProductsHeaderParams\n  ): Promise<ApiResult<PosListSimilarProductsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/similar\", {\n        params: {\n          query,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List up-sell products\n   * @param query - Query parameters with product IDs for up-sell recommendations\n   * @param headers - Optional header parameters\n   * @returns Promise with up-sell products\n   */\n  public async listUpsellProducts(\n    query: PosListUpsellProductsQuery,\n    headers?: PosListUpsellProductsHeaderParams\n  ): Promise<ApiResult<PosListUpsellProductsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/up-sell\", {\n        params: {\n          query,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * Get product details\n   * @param pathParams - Product ID or slug\n   * @param headers - Optional header parameters\n   * @returns Promise with product details\n   */\n  public async getProductDetail(\n    pathParams: PosGetProductDetailPathParams,\n    headers?: PosGetProductDetailHeaderParams\n  ): Promise<ApiResult<PosGetProductDetailContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/{product_id_or_slug}\", {\n        params: {\n          path: pathParams,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List product reviews\n   * @param pathParams - Product ID\n   * @param query - Optional query parameters for filtering reviews\n   * @returns Promise with product reviews\n   */\n  public async listProductReviews(\n    pathParams: PosListProductReviewsPathParams,\n    query?: PosListProductReviewsQuery\n  ): Promise<ApiResult<PosListProductReviewsContent>> {\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/{product_id}/reviews\", {\n        params: {\n          path: pathParams,\n          query,\n        },\n      })\n    );\n  }\n\n  /**\n   * List product variants\n   * @param pathParams - Product ID\n   * @param headers - Optional header parameters\n   * @returns Promise with product variants\n   */\n  public async listProductVariants(\n    pathParams: PosListProductVariantsPathParams,\n    headers?: PosListProductVariantsHeaderParams\n  ): Promise<ApiResult<PosListProductVariantsContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/{product_id}/variants\", {\n        params: {\n          path: pathParams,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * Get variant details\n   * @param pathParams - Product ID and variant ID\n   * @param headers - Optional header parameters\n   * @returns Promise with variant details\n   */\n  public async getVariantDetail(\n    pathParams: PosGetVariantDetailPathParams,\n    headers?: PosGetVariantDetailHeaderParams\n  ): Promise<ApiResult<PosGetVariantDetailContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/products/{product_id}/variants/{variant_id}\", {\n        params: {\n          path: pathParams,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n\n  /**\n   * List all SKUs\n   * @param query - Optional query parameters for filtering SKUs\n   * @param headers - Optional header parameters\n   * @returns Promise with list of SKUs\n   */\n  public async listSkus(\n    query?: PosListSkusQuery,\n    headers?: PosListSkusHeaderParams\n  ): Promise<ApiResult<PosListSkusContent>> {\n    const mergedHeaders = this.mergeHeaders(headers);\n    return this.executeRequest(() =>\n      this.client.GET(\"/pos/catalog/skus\", {\n        params: {\n          query,\n          header: mergedHeaders,\n        },\n      })\n    );\n  }\n}\n","import { PosAPIClient } from \"./lib/client\";\nimport { type BaseSDKOptions } from \"@commercengine/sdk-core\";\nimport { Environment } from \"./lib/utils/url\";\nimport { PosClient } from \"./lib/pos\";\nimport {\n  type TokenStorage,\n  MemoryTokenStorage,\n  BrowserTokenStorage,\n} from \"./lib/middleware/auth\";\nimport {\n  extractUserInfoFromToken,\n  getUserIdFromToken,\n  isUserLoggedIn,\n  isUserAuthenticated,\n  getDeviceIdFromToken,\n  getLocationIdFromToken,\n  getRoleFromToken,\n  getTenantIdFromToken,\n  type UserInfo,\n} from \"./lib/utils/jwt\";\nimport { ResponseUtils } from \"@commercengine/sdk-core\";\n\n/**\n * Supported default headers for POS API\n */\nexport interface SupportedDefaultHeaders {\n  /**\n   * Customer group ID used for pricing and promotions\n   */\n  customer_group_id?: string;\n}\n\n/**\n * SDK initialization options for the POS API\n */\nexport interface PosSDKOptions extends BaseSDKOptions<SupportedDefaultHeaders> {\n  /**\n   * Store ID for the API requests\n   */\n  storeId: string;\n\n  /**\n   * Environment to use (defaults to Production)\n   * Overrides baseUrl if provided\n   */\n  environment?: Environment;\n\n  /**\n   * Custom base URL (overrides environment if provided)\n   * If not provided, will be built from storeId and environment\n   */\n  baseUrl?: string;\n\n  /**\n   * X-Api-Key for authentication endpoints that require API key\n   * Required for login, pair-device, and verify-otp endpoints\n   * Always required even when initializing with tokens (for refresh fallbacks)\n   */\n  apiKey: string;\n\n  /**\n   * Optional initial access token\n   * - If tokenStorage is provided: Used as initial token value, then managed automatically\n   * - If tokenStorage is not provided: Used for manual token management\n   */\n  accessToken?: string;\n\n  /**\n   * Optional initial refresh token\n   * - Only used when tokenStorage is provided\n   * - Allows initialization with both access and refresh tokens\n   */\n  refreshToken?: string;\n\n  /**\n   * Optional token storage for automatic token management\n   * If provided, enables automatic token refresh and management\n   */\n  tokenStorage?: TokenStorage;\n\n  /**\n   * Callback when tokens are updated (login/refresh)\n   */\n  onTokensUpdated?: (accessToken: string, refreshToken: string) => void;\n\n  /**\n   * Callback when tokens are cleared (logout/error)\n   */\n  onTokensCleared?: () => void;\n}\n\n/**\n * Main SDK class for the POS API\n * Provides access to all POS endpoints through a single client\n */\nexport class PosSDK {\n  /**\n   * Client for all POS operations (auth, cart, orders, etc.)\n   */\n  public readonly pos: PosClient;\n\n  /**\n   * Create a new PosSDK instance\n   *\n   * @param options - Configuration options for the SDK\n   */\n  constructor(options: PosSDKOptions) {\n    // Convert options to internal config format\n    const config: PosSDKOptions = {\n      storeId: options.storeId,\n      environment: options.environment,\n      baseUrl: options.baseUrl,\n      accessToken: options.accessToken,\n      refreshToken: options.refreshToken,\n      apiKey: options.apiKey,\n      timeout: options.timeout,\n      tokenStorage: options.tokenStorage,\n      onTokensUpdated: options.onTokensUpdated,\n      onTokensCleared: options.onTokensCleared,\n      defaultHeaders: options.defaultHeaders,\n      debug: options.debug,\n      logger: options.logger,\n    };\n\n    this.pos = new PosClient(config);\n  }\n\n  /**\n   * Set authentication tokens for the client\n   *\n   * @param accessToken - The access token (required)\n   * @param refreshToken - The refresh token (optional)\n   *\n   * Behavior:\n   * - If tokenStorage is provided: Stores tokens for automatic management\n   * - If tokenStorage is not provided: Only stores access token for manual management\n   */\n  public async setTokens(\n    accessToken: string,\n    refreshToken?: string\n  ): Promise<void> {\n    await this.pos.setTokens(accessToken, refreshToken);\n  }\n\n  /**\n   * Clear all authentication tokens from the client\n   *\n   * Behavior:\n   * - If tokenStorage is provided: Clears both access and refresh tokens from storage\n   * - If tokenStorage is not provided: Clears the manual access token\n   */\n  public async clearTokens(): Promise<void> {\n    await this.pos.clearTokens();\n  }\n\n  /**\n   * Set the API key for the client\n   *\n   * @param apiKey - The API key to set\n   */\n  public setApiKey(apiKey: string): void {\n    this.pos.setApiKey(apiKey);\n  }\n\n\n  /**\n   * Get the current access token if available\n   */\n  public async getAccessToken(): Promise<string | null> {\n    const header = await this.pos.getAuthorizationHeader();\n    return header.startsWith(\"Bearer \") ? header.substring(7) : null;\n  }\n\n  /**\n   * Set default headers for the client\n   *\n   * @param headers - Default headers to set\n   */\n  public setDefaultHeaders(headers: SupportedDefaultHeaders): void {\n    this.pos.setDefaultHeaders(headers);\n  }\n\n  /**\n   * Get current default headers\n   */\n  public getDefaultHeaders(): SupportedDefaultHeaders | undefined {\n    return this.pos.getDefaultHeaders();\n  }\n\n  /**\n   * Get user information from the current access token\n   *\n   * @returns User information extracted from JWT token, or null if no token or invalid token\n   */\n  public async getUserInfo(): Promise<UserInfo | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return extractUserInfoFromToken(token);\n  }\n\n  /**\n   * Get the current user ID from the access token\n   *\n   * @returns User ID (ulid) or null if no token or invalid token\n   */\n  public async getUserId(): Promise<string | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return getUserIdFromToken(token);\n  }\n\n  /**\n   * Check if the current user is logged in\n   *\n   * @returns True if user is logged in, false otherwise\n   */\n  public async isLoggedIn(): Promise<boolean> {\n    const token = await this.getAccessToken();\n    if (!token) return false;\n    return isUserLoggedIn(token);\n  }\n\n  /**\n   * Check if the current user is authenticated with POS access\n   * This verifies the user has valid device and role information\n   *\n   * @returns True if user is authenticated for POS operations\n   */\n  public async isAuthenticated(): Promise<boolean> {\n    const token = await this.getAccessToken();\n    if (!token) return false;\n    return isUserAuthenticated(token);\n  }\n\n  /**\n   * Get the device ID from the current access token\n   * This is commonly needed for POS API requests\n   *\n   * @returns Device ID or null if no token or invalid token\n   */\n  public async getDeviceId(): Promise<string | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return getDeviceIdFromToken(token);\n  }\n\n  /**\n   * Get the location ID from the current access token\n   * This is commonly needed for POS API requests\n   *\n   * @returns Location ID or null if no token or invalid token\n   */\n  public async getLocationId(): Promise<string | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return getLocationIdFromToken(token);\n  }\n\n  /**\n   * Get the role information from the current access token\n   *\n   * @returns Role object with id and name, or null if no token or invalid token\n   */\n  public async getRole(): Promise<{ id: string; name: string } | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return getRoleFromToken(token);\n  }\n\n  /**\n   * Get the tenant ID from the current access token\n   *\n   * @returns Tenant ID or null if no token or invalid token\n   */\n  public async getTenantId(): Promise<string | null> {\n    const token = await this.getAccessToken();\n    if (!token) return null;\n    return getTenantIdFromToken(token);\n  }\n}\n\n// Export the main SDK class as default\nexport default PosSDK;\n\n// Export individual clients for advanced usage\nexport {\n  PosAPIClient,\n  PosClient,\n  ResponseUtils,\n};\n\n// Export environment enum\nexport { Environment } from \"./lib/utils/url\";\n\n// Export token storage types\nexport type { TokenStorage };\nexport { MemoryTokenStorage, BrowserTokenStorage };\n\n// Export logger types\nexport type { DebugLoggerFn } from \"@commercengine/sdk-core\";\n\n// Export POS-specific JWT types\nexport type { UserInfo } from \"./lib/utils/jwt\";\n\n// Export API types for consumer usage\nexport type { components, operations, paths } from \"./types/pos\";\nexport type * from \"./types/pos-api-types\";"],"mappings":";;;;;;;;;;AAoFA,SAAgB,yBAAyB,OAAgC;AACvE,KAAI;EACF,MAAM,UAAU,UAAU;AAE1B,SAAO;GACL,IAAI,QAAQ;GACZ,UAAU,QAAQ;GAClB,OAAO,QAAQ;GACf,OAAO,QAAQ;GACf,WAAW,QAAQ;GACnB,UAAU,QAAQ;GAClB,SAAS,QAAQ;GACjB,YAAY,QAAQ;GACpB,YAAY,QAAQ;GACpB,iBAAiB,QAAQ;GACzB,QAAQ;IACN,UAAU,QAAQ,OAAO;IACzB,YAAY,QAAQ,OAAO;;GAE7B,UAAU;IACR,IAAI,QAAQ,SAAS;IACrB,MAAM,QAAQ,SAAS;;GAEzB,MAAM;IACJ,IAAI,QAAQ,KAAK;IACjB,MAAM,QAAQ,KAAK;;GAErB,UAAU,QAAQ;GAClB,SAAS;IACP,IAAI,QAAQ,QAAQ;IACpB,MAAM,QAAQ,QAAQ;IACtB,MAAM,QAAQ,QAAQ;;GAExB,WAAW,QAAQ;GACnB,6BAAa,IAAI,KAAK,QAAQ,MAAM;GACpC,+BAAe,IAAI,KAAK,QAAQ,MAAM;;UAEjC,OAAO;AACd,UAAQ,KAAK,+BAA+B;AAC5C,SAAO;;;;;;;;;;AAWX,SAAgB,eACd,OACA,gBAAwB,IACf;AACT,KAAI;EACF,MAAM,UAAU,UAAU;AAC1B,MAAI,CAAC,QAAQ,IAAK,QAAO;EAEzB,MAAM,cAAc,KAAK,MAAM,KAAK,QAAQ;EAC5C,MAAM,aAAa,QAAQ;AAG3B,SAAO,eAAe,aAAa;UAC5B,OAAO;AACd,UAAQ,KAAK,+BAA+B;AAC5C,SAAO;;;;;;;;;AAUX,SAAgB,mBAAmB,OAA8B;CAC/D,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,MAAM;;;;;;;;AASzB,SAAgB,eAAe,OAAwB;CACrD,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,cAAc;;;;;;;;;AAUjC,SAAgB,oBAAoB,OAAwB;CAC1D,MAAM,WAAW,yBAAyB;AAC1C,QAAO,CAAC,CAAC,UAAU;;;;;;;;AASrB,SAAgB,qBAAqB,OAA8B;CACjE,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,QAAQ,YAAY;;;;;;;;AASvC,SAAgB,uBAAuB,OAA8B;CACnE,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,UAAU,MAAM;;;;;;;;AASnC,SAAgB,iBACd,OACqC;CACrC,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,QAAQ;;;;;;;;AAS3B,SAAgB,qBAAqB,OAA8B;CACjE,MAAM,WAAW,yBAAyB;AAC1C,QAAO,UAAU,YAAY;;;;;;;;;;;;;;AC7N/B,SAAgB,iBAAiB,UAA2B;CAC1D,MAAM,kBAAkB;EACtB;EACA;EACA;EACA;EACA;;AAEF,QAAO,gBAAgB,MAAM,aAAa,SAAS,SAAS;;;;;;;;AAS9D,SAAgB,yBAAyB,UAA2B;CAClE,MAAM,iBAAiB,CAAC,wBAAwB;AAChD,QAAO,eAAe,MAAM,aAAa,SAAS,SAAS;;;;;AAM7D,SAAgB,iBAAiB,UAA2B;AAC1D,QACE,SAAS,SAAS,uBAAuB,SAAS,SAAS;;;;;;;;ACb/D,IAAa,qBAAb,MAAwD;CACtD,AAAQ,cAA6B;CACrC,AAAQ,eAA8B;CAEtC,MAAM,iBAAyC;AAC7C,SAAO,KAAK;;CAGd,MAAM,eAAe,OAA8B;AACjD,OAAK,cAAc;;CAGrB,MAAM,kBAA0C;AAC9C,SAAO,KAAK;;CAGd,MAAM,gBAAgB,OAA8B;AAClD,OAAK,eAAe;;CAGtB,MAAM,cAA6B;AACjC,OAAK,cAAc;AACnB,OAAK,eAAe;;;;;;AAOxB,IAAa,sBAAb,MAAyD;CACvD,AAAQ;CACR,AAAQ;CAER,YAAY,SAAiB,QAAQ;AACnC,OAAK,iBAAiB,GAAG,OAAO;AAChC,OAAK,kBAAkB,GAAG,OAAO;;CAGnC,MAAM,iBAAyC;AAC7C,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,SAAO,aAAa,QAAQ,KAAK;;CAGnC,MAAM,eAAe,OAA8B;AACjD,MAAI,OAAO,iBAAiB,YAC1B,cAAa,QAAQ,KAAK,gBAAgB;;CAI9C,MAAM,kBAA0C;AAC9C,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,SAAO,aAAa,QAAQ,KAAK;;CAGnC,MAAM,gBAAgB,OAA8B;AAClD,MAAI,OAAO,iBAAiB,YAC1B,cAAa,QAAQ,KAAK,iBAAiB;;CAI/C,MAAM,cAA6B;AACjC,MAAI,OAAO,iBAAiB,aAAa;AACvC,gBAAa,WAAW,KAAK;AAC7B,gBAAa,WAAW,KAAK;;;;;;;;;;;;AAqDnC,SAAgB,wBACd,QACY;CACZ,IAAI,eAAe;CACnB,IAAIA,iBAAuC;CAC3C,IAAI,oBAAoB;CAExB,MAAM,uBAAuB,YAA2B;AAEtD,MAAI,kBAAmB;AAEvB,sBAAoB;AAEpB,MAAI;GACF,MAAM,cAAc,MAAM,OAAO,aAAa;GAC9C,MAAM,eAAe,MAAM,OAAO,aAAa;AAG/C,OAAI,eAAe,CAAC,eAAe,aACjC;AAIF,OAAI,CAAC,eAAe,cAAc;AAEhC,UAAM,OAAO,aAAa;AAC1B,WAAO;AACP,YAAQ,KAAK;AACb;;AAIF,OAAI,eAAe,gBAAgB,CAAC,eAAe,eAAe;AAChE,QAAI;AACF,WAAM;AACN,aAAQ,KAAK;aACN,OAAO;AAEd,WAAM,OAAO,aAAa;AAC1B,YAAO;AACP,aAAQ,KAAK;;AAEf;;AAIF,OAAK,eAAe,eAAe,gBAC9B,gBAAgB,eAAe,eAAgB;AAClD,UAAM,OAAO,aAAa;AAC1B,WAAO;AACP,YAAQ,KAAK;AACb;;AAIF,OAAI,CAAC,eAAe,CAAC,aAGnB;WAKK,OAAO;AAEd,WAAQ,KAAK,sCAAsC;;;CAIvD,MAAM,gBAAgB,YAA2B;AAC/C,MAAI,gBAAgB,eAClB,QAAO;AAGT,iBAAe;AACf,oBAAkB,YAAY;AAC5B,OAAI;IACF,MAAM,eAAe,MAAM,OAAO,aAAa;AAE/C,QAAI,CAAC,gBAAgB,eAAe,cAClC,OAAM,IAAI,MAAM;IAGlB,IAAIC;AAEJ,QAAI,OAAO,eAET,aAAY,MAAM,OAAO,eAAe;SACnC;KAEL,MAAM,WAAW,MAAM,MACrB,GAAG,OAAO,QAAQ,0BAClB;MACE,QAAQ;MACR,SAAS;OACP,gBAAgB;OAChB,eAAe,UAAU,MAAM,OAAO,aAAa;;MAErD,MAAM,KAAK,UAAU,EAAE,eAAe;;AAI1C,SAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,6BAA6B,SAAS;KAGxD,MAAM,OAAO,MAAM,SAAS;AAC5B,iBAAY,KAAK,WAAW;;AAI9B,UAAM,OAAO,aAAa,eAAe,UAAU;AACnD,UAAM,OAAO,aAAa,gBAAgB,UAAU;AAGpD,WAAO,kBACL,UAAU,cACV,UAAU;YAEL,OAAO;AACd,YAAQ,MAAM,6BAA6B;AAE3C,UAAM,OAAO,aAAa;AAC1B,WAAO;AACP,UAAM;aACE;AACR,mBAAe;AACf,qBAAiB;;;AAIrB,SAAO;;AAGT,QAAO;EACL,MAAM,UAAU,EAAE,WAAW;GAC3B,MAAM,WAAW,mBAAmB,QAAQ;AAG5C,SAAM;AAGN,OAAI,iBAAiB,WAAW;AAC9B,YAAQ,QAAQ,IAAI,aAAa,OAAO;AACxC,WAAO;;GAIT,IAAI,cAAc,MAAM,OAAO,aAAa;AAG5C,OAAI,eAAe,eAAe,aAChC,KAAI;AACF,UAAM;AACN,kBAAc,MAAM,OAAO,aAAa;YACjC,OAAO;AAEd,YAAQ,KAAK,yBAAyB;AACtC,kBAAc;;AAKlB,OAAI,YACF,SAAQ,QAAQ,IAAI,iBAAiB,UAAU;AAGjD,UAAO;;EAGT,MAAM,WAAW,EAAE,SAAS,YAAY;GACtC,MAAM,WAAW,mBAAmB,QAAQ;AAG5C,OAAI,SAAS,MAAM,yBAAyB,UAC1C,KAAI;IACF,MAAM,OAAO,MAAM,SAAS,QAAQ;IACpC,MAAM,UAAU,KAAK,WAAW;AAEhC,QAAI,SAAS,gBAAgB,SAAS,eAAe;AACnD,WAAM,OAAO,aAAa,eAAe,QAAQ;AACjD,WAAM,OAAO,aAAa,gBAAgB,QAAQ;AAClD,YAAO,kBACL,QAAQ,cACR,QAAQ;;YAGL,OAAO;AACd,YAAQ,KAAK,+CAA+C;;YAErD,SAAS,MAAM,iBAAiB,WAAW;AAEpD,UAAM,OAAO,aAAa;AAC1B,WAAO;;AAIT,OAAI,SAAS,WAAW,OAAO,CAAC,iBAAiB,WAAW;IAC1D,MAAM,eAAe,MAAM,OAAO,aAAa;AAG/C,QAAI,gBAAgB,eAAe,cAAc,GAC/C,KAAI;AACF,WAAM;KAGN,MAAM,WAAW,MAAM,OAAO,aAAa;AAC3C,SAAI,UAAU;MACZ,MAAM,eAAe,QAAQ;AAC7B,mBAAa,QAAQ,IAAI,iBAAiB,UAAU;AACpD,aAAO,MAAM;;aAER,OAAO;AAEd,aAAQ,KAAK,6CAA6C;;;AAKhE,UAAO;;;;;;;AAQb,SAAgB,+BAA+B,SAMhC;CACb,MAAM,eACJ,QAAQ,iBACP,OAAO,iBAAiB,cACrB,IAAI,wBACJ,IAAI;AAEV,QAAO,wBAAwB;EAC7B;EACA,QAAQ,QAAQ;EAChB,SAAS,QAAQ;EACjB,iBAAiB,QAAQ;EACzB,iBAAiB,QAAQ;;;;;;;;;AC7X7B,IAAY,sDAAL;AACL;AACA;AACA;;;;;;;;;AAkBF,SAAgB,YAAY,QAA8B;AAExD,KAAI,OAAO,QACT,QAAO,OAAO,QAAQ,QAAQ,OAAO;CAIvC,MAAM,MAAM,OAAO,eAAe,YAAY;AAE9C,SAAQ,KAAR;EACE,KAAK,YAAY,QACf,QAAO,+CAA+C,OAAO,QAAQ;EACvE,KAAK,YAAY;EACjB,QACE,QAAO,4CAA4C,OAAO,QAAQ;;;;;;;;;;AC3BxE,IAAa,eAAb,MAAa,qBAAqB,cAGhC;CACA,AAAU;CACV,AAAQ,wBAA8C;;;;;;CAOtD,OAAe,eAAe,QAA6B;EACzD,MAAMC,SAAmB;AAGzB,MAAI,CAAC,OAAO,SAAS,OACnB,QAAO,KAAK;AAGd,MAAI,CAAC,OAAO,QAAQ,OAClB,QAAO,KAAK;AAId,MAAI,OAAO,eAAe,CAAC,OAAO,gBAAgB,CAAC,OAAO,aACxD,QAAO,KAAK;AAGd,MAAI,OAAO,gBAAgB,CAAC,OAAO,YACjC,QAAO,KAAK;AAGd,MAAI,OAAO,gBAAgB,CAAC,OAAO,aACjC,QAAO,KAAK;AAId,OAAK,OAAO,mBAAmB,OAAO,oBAAoB,CAAC,OAAO,aAChE,QAAO,KAAK;AAId,MAAI,OAAO,WAAW,CAAC,aAAa,WAAW,OAAO,SACpD,QAAO,KAAK;AAGd,MAAI,OAAO,SAAS,EAClB,OAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK;;;;;;;CAS/E,OAAe,WAAW,KAAsB;AAC9C,MAAI;GACF,MAAM,SAAS,IAAI,IAAI;AACvB,UAAO,OAAO,aAAa,WAAW,OAAO,aAAa;UACpD;AACN,UAAO;;;;;;;;CASX,YAAY,QAAuB;AAEjC,eAAa,eAAe;EAG5B,MAAM,UAAU,YAAY;GAC1B,SAAS,OAAO;GAChB,aAAa,OAAO;GACpB,SAAS,OAAO;;EAIlB,MAAM,wBAAwB,EAC5B,mBAAmB;AAKrB,QACE;GACW;GACT,SAAS,OAAO;GAChB,gBAAgB,OAAO;GACvB,OAAO,OAAO;GACd,QAAQ,OAAO;KAEjB,SACA;AAIF,OAAK,SAAS,EAAE,GAAG;AAGnB,OAAK;;;;;CAMP,AAAQ,eAAqB;EAC3B,MAAM,SAAS,KAAK;AAGpB,MAAI,OAAO,cAAc;GACvB,MAAM,iBAAiB,+BAA+B;IACpD,QAAQ,OAAO;IACf,SAAS,KAAK;IACd,cAAc,OAAO;IACrB,iBAAiB,OAAO;IACxB,iBAAiB,OAAO;;AAE1B,QAAK,OAAO,IAAI;AAGhB,OAAI,OAAO,aAAa;AACtB,SAAK,wBAAwB,KAAK,iBAChC,OAAO,aACP,OAAO;AAGT,WAAO,cAAc;AACrB,WAAO,eAAe;;QAIxB,MAAK,OAAO,IAAI,EACd,WAAW,OAAO,EAAE,cAAc;GAChC,MAAM,WAAW,mBAAmB,QAAQ;AAG5C,OAAI,iBAAiB,WAAW;AAC9B,YAAQ,QAAQ,IAAI,aAAa,OAAO;AACxC,WAAO;;AAIT,OAAI,OAAO,YACT,SAAQ,QAAQ,IACd,iBACA,UAAU,OAAO;YAEV,OAAO,OAChB,SAAQ,QAAQ,IAAI,aAAa,OAAO;AAG1C,UAAO;;;;;;;;;;CAaf,MAAa,yBAA0C;AAErD,MAAI,KAAK,OAAO,gBAAgB,KAAK,sBACnC,OAAM,KAAK;AAGb,MAAI,KAAK,OAAO,cAAc;GAC5B,MAAM,QAAQ,MAAM,KAAK,OAAO,aAAa;AAC7C,UAAO,QAAQ,UAAU,UAAU;;AAErC,SAAO,KAAK,OAAO,cAAc,UAAU,KAAK,OAAO,gBAAgB;;;;;;;;;;;;CAazE,MAAa,UACX,aACA,cACe;AACf,MAAI,KAAK,OAAO,cAAc;AAE5B,SAAM,KAAK,OAAO,aAAa,eAAe;AAC9C,OAAI,aACF,OAAM,KAAK,OAAO,aAAa,gBAAgB;SAE5C;AAEL,QAAK,OAAO,cAAc;AAC1B,OAAI,aACF,SAAQ,KACN;;;;;;;;;;CAaR,MAAa,cAA6B;AACxC,MAAI,KAAK,OAAO,aACd,OAAM,KAAK,OAAO,aAAa;MAE/B,MAAK,OAAO,cAAc;;;;;;;CAS9B,AAAO,UAAU,QAAsB;AACrC,OAAK,OAAO,SAAS;;;;;CAOvB,MAAc,iBACZ,aACA,cACe;AACf,MAAI;AACF,OAAI,KAAK,OAAO,cAAc;AAC5B,UAAM,KAAK,OAAO,aAAa,eAAe;AAC9C,QAAI,aACF,OAAM,KAAK,OAAO,aAAa,gBAAgB;;WAG5C,OAAO;AACd,WAAQ,KAAK,2CAA2C;;;;;;;;;;;AC1I9D,IAAa,YAAb,cAA+B,aAAa;;;;;;CAU1C,MAAa,eACX,MACoD;AACpD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,yBAAyB,EAClC;;;;;;;CAUZ,MAAa,eACX,MACoD;AACpD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,yBAAyB,EAAE;;;;;;;CAShD,MAAa,kBACX,MACuD;AACvD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,4BAA4B,EAAE;;;;;;;CASnD,MAAa,WACX,MAC0C;AAC1C,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,yBAAyB,EAAE;;;;;;;CAShD,MAAa,UACX,MAC8C;AAC9C,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,wBAAwB,EAAE;;;;;;;CAS/C,MAAa,mBACX,MACkD;AAClD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,2BAA2B,EAAE;;;;;;CAQlD,MAAa,SAA0D;AACrE,SAAO,KAAK,qBAAqB,KAAK,OAAO,KAAK;;;;;;;CAYpD,MAAa,WACX,MAC0C;AAC1C,SAAO,KAAK,qBAAqB,KAAK,OAAO,KAAK,cAAc,EAAE;;;;;;;CAQpE,MAAa,QACX,YACuC;AACvC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,mBAAmB,EACjC,QAAQ,EAAE,MAAM;;;;;;;CAUtB,MAAa,WACX,YAC2C;AAC3C,SAAO,KAAK,qBACV,KAAK,OAAO,OAAO,mBAAmB,EACpC,QAAQ,EAAE,MAAM;;;;;;;;CAWtB,MAAa,WACX,YACA,MAC0C;AAC1C,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,yBAAyB;GACxC,QAAQ,EAAE,MAAM;GAChB;;;;;;;;;CAWN,MAAa,kBACX,YACA,MACiD;AACjD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,2BAA2B;GAC1C,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAcN,MAAa,YACX,SAC2C;EAC3C,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,gCAAgC,EAC9C,QAAQ,EACN,QAAQ;;;;;;;CAWhB,MAAa,eACX,SAC8C;EAC9C,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,mCAAmC,EACjD,QAAQ,EACN,QAAQ;;;;;;;;CAYhB,MAAa,YACX,YACA,MAC2C;AAC3C,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,0BAA0B;GACzC,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAUN,MAAa,aACX,YAC4C;AAC5C,SAAO,KAAK,qBACV,KAAK,OAAO,OAAO,0BAA0B,EAC3C,QAAQ,EAAE,MAAM;;;;;;;CAUtB,MAAa,gBACX,YAC+C;AAC/C,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,oCAAoC,EAClD,QAAQ,EAAE,MAAM;;;;;;;CAUtB,MAAa,mBACX,YACkD;AAClD,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,uCAAuC,EACrD,QAAQ,EAAE,MAAM;;;;;;;;CAetB,MAAa,oBACX,YACA,MACmD;AACnD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,kCAAkC;GACjD,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAUN,MAAa,oBACX,YACmD;AACnD,SAAO,KAAK,qBACV,KAAK,OAAO,OAAO,kCAAkC,EACnD,QAAQ,EAAE,MAAM;;;;;;;;CAetB,MAAa,eACX,YACA,MAC8C;AAC9C,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,6BAA6B;GAC5C,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAUN,MAAa,eACX,YAC8C;AAC9C,SAAO,KAAK,qBACV,KAAK,OAAO,OAAO,6BAA6B,EAC9C,QAAQ,EAAE,MAAM;;;;;;;;CAetB,MAAa,oBACX,YACA,MACmD;AACnD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,kCAAkC;GACjD,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAUN,MAAa,oBACX,YACmD;AACnD,SAAO,KAAK,qBACV,KAAK,OAAO,OAAO,kCAAkC,EACnD,QAAQ,EAAE,MAAM;;;;;;;;CAetB,MAAa,4BACX,YACA,MAC4D;AAC5D,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,0CAA0C;GACzD,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAUN,MAAa,sBACX,MACqD;AACrD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,4BAA4B,EAAE;;;;;;;;CAcnD,MAAa,mBACX,YACA,MACkD;AAClD,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,mCAAmC;GAClD,QAAQ,EAAE,MAAM;GAChB;;;;;;;;CAcN,MAAa,YACX,MAC2C;AAC3C,SAAO,KAAK,qBAAqB,KAAK,OAAO,KAAK,eAAe,EAAE;;;;;;;CAYrE,MAAa,eACX,OAC8C;AAC9C,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,2BAA2B,EACzC,QAAQ,EAAE;;;;;;;;CAWhB,MAAa,aACX,OACA,SAC4C;EAC5C,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,yBAAyB,EACvC,QAAQ;GACN;GACA,QAAQ;;;;;;;;;CAYhB,MAAa,sBACX,OACA,SACqD;EACrD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,oCAAoC,EAClD,QAAQ;GACN;GACA,QAAQ;;;;;;;;;CAYhB,MAAa,eACX,MACA,SAC8C;EAC9C,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,KAAK,gCAAgC;GAC/C;GACA,QAAQ,EACN,QAAQ;;;;;;;;;CAYhB,MAAa,oBACX,OACA,SACmD;EACnD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,iCAAiC,EAC/C,QAAQ;GACN;GACA,QAAQ;;;;;;;;;CAYhB,MAAa,mBACX,OACA,SACkD;EAClD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,iCAAiC,EAC/C,QAAQ;GACN;GACA,QAAQ;;;;;;;;;CAYhB,MAAa,iBACX,YACA,SACgD;EAChD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,8CAA8C,EAC5D,QAAQ;GACN,MAAM;GACN,QAAQ;;;;;;;;;CAYhB,MAAa,mBACX,YACA,OACkD;AAClD,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,8CAA8C,EAC5D,QAAQ;GACN,MAAM;GACN;;;;;;;;;CAYR,MAAa,oBACX,YACA,SACmD;EACnD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,+CAA+C,EAC7D,QAAQ;GACN,MAAM;GACN,QAAQ;;;;;;;;;CAYhB,MAAa,iBACX,YACA,SACgD;EAChD,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,4DAA4D,EAC1E,QAAQ;GACN,MAAM;GACN,QAAQ;;;;;;;;;CAYhB,MAAa,SACX,OACA,SACwC;EACxC,MAAM,gBAAgB,KAAK,aAAa;AACxC,SAAO,KAAK,qBACV,KAAK,OAAO,IAAI,qBAAqB,EACnC,QAAQ;GACN;GACA,QAAQ;;;;;;;;;;;AC1sBlB,IAAa,SAAb,MAAoB;;;;CAIlB,AAAgB;;;;;;CAOhB,YAAY,SAAwB;EAElC,MAAMC,SAAwB;GAC5B,SAAS,QAAQ;GACjB,aAAa,QAAQ;GACrB,SAAS,QAAQ;GACjB,aAAa,QAAQ;GACrB,cAAc,QAAQ;GACtB,QAAQ,QAAQ;GAChB,SAAS,QAAQ;GACjB,cAAc,QAAQ;GACtB,iBAAiB,QAAQ;GACzB,iBAAiB,QAAQ;GACzB,gBAAgB,QAAQ;GACxB,OAAO,QAAQ;GACf,QAAQ,QAAQ;;AAGlB,OAAK,MAAM,IAAI,UAAU;;;;;;;;;;;;CAa3B,MAAa,UACX,aACA,cACe;AACf,QAAM,KAAK,IAAI,UAAU,aAAa;;;;;;;;;CAUxC,MAAa,cAA6B;AACxC,QAAM,KAAK,IAAI;;;;;;;CAQjB,AAAO,UAAU,QAAsB;AACrC,OAAK,IAAI,UAAU;;;;;CAOrB,MAAa,iBAAyC;EACpD,MAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,SAAO,OAAO,WAAW,aAAa,OAAO,UAAU,KAAK;;;;;;;CAQ9D,AAAO,kBAAkB,SAAwC;AAC/D,OAAK,IAAI,kBAAkB;;;;;CAM7B,AAAO,oBAAyD;AAC9D,SAAO,KAAK,IAAI;;;;;;;CAQlB,MAAa,cAAwC;EACnD,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,yBAAyB;;;;;;;CAQlC,MAAa,YAAoC;EAC/C,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,mBAAmB;;;;;;;CAQ5B,MAAa,aAA+B;EAC1C,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,eAAe;;;;;;;;CASxB,MAAa,kBAAoC;EAC/C,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,oBAAoB;;;;;;;;CAS7B,MAAa,cAAsC;EACjD,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,qBAAqB;;;;;;;;CAS9B,MAAa,gBAAwC;EACnD,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,uBAAuB;;;;;;;CAQhC,MAAa,UAAwD;EACnE,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,iBAAiB;;;;;;;CAQ1B,MAAa,cAAsC;EACjD,MAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,qBAAqB;;;AAKhC,kBAAe"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@commercengine/pos",
+  "version": "0.1.0",
+  "description": "TypeScript SDK for the POS API",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "keywords": [
+    "commerce engine",
+    "pos",
+    "api",
+    "sdk"
+  ],
+  "dependencies": {
+    "jose": "^6.1.0",
+    "openapi-fetch": "^0.14.0",
+    "@commercengine/sdk-core": "0.0.0"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.29.6",
+    "@types/node": "^24.3.0",
+    "openapi-format": "^1.27.3",
+    "openapi-typescript": "^7.9.1",
+    "rimraf": "^6.0.1",
+    "tsdown": "^0.14.2",
+    "typescript": "^5.9.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "Commerce Engine",
+  "license": "All rights reserved",
+  "scripts": {
+    "build": "tsdown",
+    "generate-storefront-pos-spec": "openapi-format https://openapi.commercengine.io/ce-storefront.json --filterFile openapi/storefront/filter.json --output openapi/storefront/pos.openapi.json",
+    "generate-admin-pos-spec": "openapi-format https://openapi.commercengine.io/ce-admin.json --filterFile openapi/admin/filter.json --output openapi/admin/pos.openapi.json",
+    "generate-types": "openapi-typescript openapi/storefront/pos.openapi.json --output src/types/pos.d.ts && openapi-typescript openapi/admin/pos.openapi.json --output src/types/admin-pos.d.ts",
+    "generate-typed-exports": "python3 src/types/generate-typed-exports.py --openapi-url ./openapi/storefront/pos.openapi.json --input src/types/pos.d.ts --output src/types/pos-api-types.ts && python3 src/types/generate-typed-exports.py --openapi-url ./openapi/admin/pos.openapi.json --input src/types/admin-pos.d.ts --output src/types/admin-pos-api-types.ts",
+    "codegen": "pnpm run generate-storefront-pos-spec && pnpm run generate-admin-pos-spec && pnpm run generate-types && pnpm run generate-typed-exports",
+    "clean": "rimraf dist",
+    "check-exports": "attw --pack ."
+  }
+}