@kasuvia/sdk 0.0.8 → 0.0.9

package/dist/services/index.d.mts

@@ -1,2 +1,908 @@
-export { g as CartItemPayload, o as ContactFormData, R as RateAddress, z as ShippingRatesRequest, E as acceptQuote, F as addToCart, G as addToGuestCart, H as addToWishlist, I as approveDeliverable, J as bespokeService, K as bookAppointment, M as cancelAppointment, P as cancelOrder, Q as checkAvailability, T as checkInWishlist, V as clearCart, W as clearGuestCart, X as clearTokens, Y as configService, Z as consultationService, _ as createCmsEntry, $ as createConsultation, a0 as createDedicatedAccount, a1 as createOrder, a2 as deleteCmsEntry, a3 as findOrder, a4 as findOrderByToken, a5 as getAppointment, a6 as getAppointments, a7 as getAuthUser, a8 as getAvailableSlots, a9 as getBusinessConfig, aa as getCart, ab as getCmsEntry, ac as getConsultation, ad as getConsultations, ae as getDeliverables, af as getFeaturedProducts, ag as getGuestCart, ah as getGuestCartCount, ai as getGuestCartProductType, aj as getGuestCartSubtotal, ak as getLatestProducts, al as getLowStockProducts, am as getMe, an as getNewProducts, ao as getOnSaleProducts, ap as getOrders, aq as getPopularProducts, ar as getRecommendedProducts, as as getSellerShippingAddress, at as getShippingRates, au as getStoredTokens, av as getStorefrontCollectionBySlug, aw as getStorefrontCollections, ax as getStorefrontProductBySlug, ay as getStorefrontProducts, az as getSupportedCurrencies, aA as getSupportedLanguages, aB as getTransactionStatus, aC as getWishlist, aD as googleTranslate, aE as initiatePayment, aF as listCmsEntries, aG as loginCustomer, aH as logisticsService, aI as logout, aJ as mapAuthUserToCustomer, aK as mergeGuestCart, aL as mergeGuestCartIfPresent, aM as notificationsService, aN as paymentService, aO as refreshToken, aP as registerCustomer, aQ as rejectQuote, aR as removeFromCart, aS as removeFromGuestCart, aT as removeFromWishlist, aU as removeProductFromWishlist, aV as requestQuote, aW as requestRevision, aX as sendContactConfirmation, aY as sendContactEmail, aZ as sendMessage, a_ as serviceBookingService, a$ as silentRefresh, b0 as storeTokens, b1 as trackOrder, b2 as updateCartItem, b3 as updateCmsEntry, b4 as updateGuestCartItemQuantity, b5 as updateProfile, b6 as validateShippingAddress, b7 as verifySocialToken, b8 as verifyTransaction } from '../index-CefG7_xq.mjs';
-export { p as CreateOrderParams, F as FindOrderParams, w as OrderStatus } from '../index-C5YO9gTl.mjs';
+import { S as SdkConfig } from '../index-NkI10J_E.mjs';
+import { b as CartResponse, a as CartItem, h as ProductType, L as ListParams, d as PaginatedResponse, P as Product, c as Collection, W as WishlistItem, e as WishlistCheckResponse, f as WishlistListResponse, Q as ShippingRatesResponse } from '../index-CNW_LINy.mjs';
+export { C as CreateOrderParams, F as FindOrderParams, i as OrderStatus } from '../index-CNW_LINy.mjs';
+import { M as CommentCreate, L as Comment, O as ReviewCreate, N as Review, V as ProductCommentsResponse, W as ProductReviewsResponse, P as MerchantReplyCreate, Q as CommentModerationAction, T as ReviewModerationAction, X as CommentUpdate, Y as ReviewUpdate, h as ChangePasswordPayload, af as MediaAsset, g as CreateCustomerAddressPayload, f as CustomerAddress, i as CustomerDeactivatePayload, D as DeactivateAccountResult, j as CustomerForgotPasswordPayload, A as AuthUserResponse, r as CustomerUser, S as StorefrontBusinessInfo, o as CustomerLoginPayload, n as CustomerAuthResponse, aZ as RefreshTokenResponse, p as CustomerRegisterPayload, q as CustomerPasswordlessRequestPayload, k as CustomerReactivatePayload, m as CustomerResetPasswordPayload, U as UpdateCustomerAddressPayload, s as UpdateProfilePayload, t as CustomerPasswordlessVerifyPayload, l as CustomerReactivateVerifyPayload, _ as WalletBalanceResponse, a0 as DVACreateRequest, $ as DVADetails, Z as GatewayMethods, a3 as TransactionVerifyResponse, a4 as WalletLedgerResponse, a2 as PaymentInitiateRequest, a1 as PaymentInitiateResponse, B as BespokeDeliverableStatus, w as BespokeAvailability, b2 as SupportedLanguagesResponse, b1 as SupportedCurrenciesResponse, a9 as BusinessConfig, a6 as CreateCmsEntryParams, a5 as CmsEntry, a8 as ListCmsEntriesParams, aq as CmsEntryListResponse, a7 as UpdateCmsEntryParams } from '../media.service-Cx7dQjzX.mjs';
+export { b as Consultation, ac as ContactFormData, C as CreateBespokeOrderParams, c as CreateConsultationParams, d as CreateFeedbackParams, a as CreateServiceBookingOrderParams, aB as DigitalDownloadFileEntry, aC as DigitalDownloadListing, aD as DigitalDownloadRedirect, aE as DigitalDownloadResult, F as Feedback, aF as FeedbackCategory, e as FeedbackListResponse, aG as FeedbackStatus, aN as NotificationInboxItem, aa as NotificationInboxResponse, aO as NotificationPriority, aX as PromoValidationResult, aY as PushSubscriptionKeys, y as ServiceBookingsPage, ad as SubscribeToPushParams, ag as UploadMediaFileParams, ah as UploadMediaFilesResult, ae as VapidPublicKeyResponse, b4 as approveMilestone, b5 as bookAppointment, b6 as cancelAppointment, b7 as cancelOrder, b8 as confirmAppointmentCompletion, b9 as createBespokeOrder, ba as createConsultation, bb as createFeedback, bc as createOrder, bd as createServiceBookingOrder, be as disputeAppointment, bf as findOrder, bg as getAppointment, bh as getAppointments, bi as getAvailableSlots, bj as getMilestones, bk as getMyFeedback, bl as getNotificationInbox, bm as getNotificationPreferences, bn as getOrders, bo as getVapidPublicKey, bp as markAllNotificationsRead, bq as markNotificationRead, br as notificationsService, bs as rescheduleAppointment, bt as resolveDigitalDownload, bu as resolveDigitalDownloadFile, bv as sendContactConfirmation, bw as sendContactEmail, bx as serviceBookingService, by as subscribeToPush, bz as trackNotificationClick, bA as trackOrder, bB as unsubscribeFromPush, bC as updateNotificationPreferences, bD as uploadMediaFile, bE as uploadMediaFiles, bF as validatePromoCode } from '../media.service-Cx7dQjzX.mjs';
+
+/**
+ * Legal Document Types
+ *
+ * Types for merchant storefront legal pages generated by
+ * kasuvia-website-builder-system via kasuvia-cms.
+ */
+interface LegalSection {
+    heading: string;
+    body: string;
+}
+interface MerchantLegalDocument {
+    document_type: string;
+    template_version: string;
+    rendered_sections: LegalSection[];
+    published_at: string;
+}
+
+/**
+ * Review and Comment Service
+ *
+ * Handles review and comment operations using REST API.
+ * Stateless - all configuration passed as parameters.
+ *
+ * REAL BUG FIXED (2026-09-21): every URL here hardcoded a literal `/api/v1`
+ * prefix AND used a completely different path shape than the real
+ * kasuvia-crm-go backend (`kasuvia-crm-go/internal/api/v1/endpoints/
+ * reviews.go` + `admin_reviews.go`) — e.g. `POST /api/v1/reviews/comments`
+ * vs the real `POST /api/v1/comments`, `GET /api/v1/reviews/products/{id}`
+ * vs the real `GET /api/v1/products/{id}/reviews`. Every function 404'd.
+ * `config.backendUrls.crm` already includes `/api/v1` (same convention as
+ * every other backendUrls.* entry — see payment.service.ts/order.service.ts)
+ * so the hardcoded prefix also risked doubling to `/api/v1/api/v1/...` once
+ * KASUVIA_CRM_URL was actually set.
+ */
+
+/**
+ * Create a new review
+ */
+declare function createReview(reviewData: ReviewCreate, config: SdkConfig): Promise<Review>;
+/**
+ * Update an existing review
+ */
+declare function updateReview(reviewId: string, reviewData: ReviewUpdate, config: SdkConfig): Promise<Review>;
+/**
+ * Get paginated reviews for a product
+ */
+declare function getProductReviews(productId: string, params: {
+    page?: number;
+    page_size?: number;
+    moderation_status?: string;
+} | undefined, config: SdkConfig): Promise<ProductReviewsResponse>;
+/**
+ * Create a new comment
+ */
+declare function createComment(commentData: CommentCreate, config: SdkConfig): Promise<Comment>;
+/**
+ * Update an existing comment
+ */
+declare function updateComment(commentId: string, commentData: CommentUpdate, config: SdkConfig): Promise<Comment>;
+/**
+ * Get paginated comments for a product
+ */
+declare function getProductComments(productId: string, params: {
+    page?: number;
+    page_size?: number;
+    moderation_status?: string;
+} | undefined, config: SdkConfig): Promise<ProductCommentsResponse>;
+/**
+ * Get pending reviews for moderation (merchant/staff only)
+ */
+declare function getPendingReviews(config: SdkConfig): Promise<Review[]>;
+/**
+ * Get pending comments for moderation (merchant/staff only)
+ */
+declare function getPendingComments(config: SdkConfig): Promise<Comment[]>;
+/**
+ * Moderate a review (approve/reject) - merchant/staff only
+ */
+declare function moderateReview(reviewId: string, action: ReviewModerationAction, config: SdkConfig): Promise<Review>;
+/**
+ * Moderate a comment (approve/reject) - merchant/staff only
+ */
+declare function moderateComment(commentId: string, action: CommentModerationAction, config: SdkConfig): Promise<Comment>;
+/**
+ * Post a merchant reply to a review - merchant/staff only
+ */
+declare function merchantReplyToReview(reviewId: string, replyData: MerchantReplyCreate, config: SdkConfig): Promise<Review>;
+
+/**
+ * Cart Service
+ *
+ * Handles cart operations for both guest and authenticated users via
+ * kasuvia-cart-management (Go/Huma). All cart operations target the
+ * cart-management service, which is the single source of truth for cart state.
+ *
+ * KEY CONSTRAINT — backend-resolved fields:
+ * kasuvia-cart-management resolves product_name, product_slug, image_url,
+ * variant_attributes, unit_price, is_bespoke, and product_type entirely
+ * server-side from kasuvia-store-management at add/merge time. These MUST NOT
+ * be sent in request payloads — only product_id, variant_id, quantity, and
+ * custom_measurements are accepted by the backend.
+ *
+ * Stateless — all configuration passed as parameters.
+ */
+
+/**
+ * Fetch guest cart from backend (Redis-backed).
+ */
+declare function getGuestCart(config: SdkConfig, guestSessionId: string): Promise<CartResponse>;
+/**
+ * Add item to guest cart (Redis-backed).
+ * Only product_id, variant_id, quantity, and custom_measurements are sent —
+ * all other fields are resolved server-side by kasuvia-cart-management.
+ */
+declare function addToGuestCart(config: SdkConfig, guestSessionId: string, item: {
+    product_id: string;
+    variant_id?: string | null;
+    quantity: number;
+    custom_measurements?: string | null;
+}): Promise<CartResponse>;
+/**
+ * Update quantity of a guest cart item.
+ */
+declare function updateGuestCartItemQuantity(config: SdkConfig, guestSessionId: string, itemId: string, quantity: number): Promise<CartResponse>;
+/**
+ * Remove an item from the guest cart.
+ *
+ * REAL BUG FIXED (2026-09-22), live-reproduced: this used to type its
+ * result as `CartResponse` and read `data.items` off it, but the real
+ * backend's `DELETE /cart/{item_id}` returns `204 No Content` with a
+ * genuinely empty body (confirmed live: `HTTP_STATUS:204 BODY_LENGTH:0`) -
+ * `apiRequest` resolves an empty body to `undefined`, so `data.items`
+ * threw `TypeError: Cannot read properties of undefined (reading 'items')`
+ * on every real delete. The item really was removed server-side (the
+ * DELETE request itself succeeded), but the thrown error sent
+ * `removeFromCartMutation` down `onError` instead of `onSuccess`, so
+ * `queryClient.invalidateQueries` never ran - a customer's cart kept
+ * showing the "removed" item until something else (a full page reload)
+ * happened to trigger a fresh, uncached fetch. Matches `clearGuestCart`'s
+ * existing `Promise<void>` shape, which was already correct for this same
+ * "backend returns no body" pattern.
+ */
+declare function removeFromGuestCart(config: SdkConfig, guestSessionId: string, itemId: string): Promise<void>;
+/**
+ * Clear the entire guest cart.
+ */
+declare function clearGuestCart(config: SdkConfig, guestSessionId: string): Promise<void>;
+/**
+ * Fetch authenticated user's cart from backend.
+ */
+declare function getCart(config: SdkConfig, accessToken?: string | null): Promise<CartResponse>;
+/**
+ * Add item to authenticated user's cart.
+ * Only product_id, variant_id, quantity, and custom_measurements are sent —
+ * all other fields are resolved server-side by kasuvia-cart-management.
+ */
+declare function addToCart(config: SdkConfig, accessToken: string, item: {
+    product_id: string;
+    variant_id?: string | null;
+    quantity: number;
+    custom_measurements?: string | null;
+    product_slug?: string;
+    product_name?: string;
+    image_url?: string;
+    variant_attributes?: string;
+    unit_price?: number;
+    is_bespoke?: boolean;
+}): Promise<CartResponse>;
+/**
+ * Update item quantity in authenticated user's cart.
+ */
+declare function updateCartItem(config: SdkConfig, accessToken: string, itemId: string, quantity: number): Promise<CartResponse>;
+/**
+ * Remove item from authenticated user's cart.
+ * Same real bug/fix as removeFromGuestCart above - see its doc comment.
+ */
+declare function removeFromCart(config: SdkConfig, accessToken: string, itemId: string): Promise<void>;
+/**
+ * Clear authenticated user's cart.
+ */
+declare function clearCart(config: SdkConfig, accessToken: string): Promise<void>;
+/**
+ * Merge guest cart items into the authenticated customer's cart.
+ *
+ * The backend (POST /api/v1/cart/merge) accepts only:
+ *   { items: [{ product_id, variant_id?, quantity, custom_measurements? }] }
+ * Product name, image, price, type are all re-resolved server-side.
+ *
+ * Sends X-Guest-Session so the backend can atomically delete the guest
+ * cart (best-effort) after merging.
+ */
+declare function mergeGuestCart(config: SdkConfig, accessToken: string, guestSessionId: string, guestItems: Pick<CartItem, 'product_id' | 'variant_id' | 'quantity' | 'custom_measurements'>[]): Promise<CartResponse>;
+/**
+ * Convenience wrapper: fetch guest cart and merge if it has items (called post-login).
+ */
+declare function mergeGuestCartIfPresent(config: SdkConfig, accessToken: string, guestSessionId: string): Promise<void>;
+/**
+ * Helper to get a guest cart's product type (for type-mismatch checks before adding an item).
+ */
+declare function getGuestCartProductType(items?: CartItem[]): ProductType | null;
+
+/**
+ * Customer auth service — all API calls scoped to this storefront's business tenant.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * POST /auth/login/customer/
+ * Business is identified by the X-Storefront-Key + X-Business-ID headers
+ * (config.storefrontApiKey / config.businessId) — never a body field (see
+ * plan: Customer Storefront Identity Enforcement).
+ */
+declare function loginCustomer(config: SdkConfig, payload: CustomerLoginPayload, guestSessionId?: string | null): Promise<CustomerAuthResponse>;
+/**
+ * POST /auth/register/customer/
+ * Business identified via headers, see loginCustomer.
+ */
+declare function registerCustomer(config: SdkConfig, payload: CustomerRegisterPayload, guestSessionId?: string | null): Promise<CustomerAuthResponse>;
+/** POST /auth/token/refresh/
+ */
+declare function refreshToken(config: SdkConfig, refresh: string): Promise<RefreshTokenResponse>;
+/**
+ * POST /auth/logout/ — revokes the server-side session.
+ *
+ * Never throws: a customer's own logout must always clear their local
+ * session client-side (caller does this regardless of this promise's
+ * outcome) even if the backend is unreachable — an unrevoked server-side
+ * session in that case is a availability tradeoff, not a security one (the
+ * refresh token still expires on its own TTL). What CLAUDE.md forbids is
+ * failing SILENTLY; the failure is now always logged with real context so
+ * it's visible to whoever is debugging a report of "sessions not clearing
+ * server-side", instead of vanishing into a bare `catch {}`.
+ */
+declare function logout(config: SdkConfig, refresh?: string): Promise<void>;
+/**
+ * Verify a social provider id_token (or access_token for Facebook) with the backend.
+ */
+declare function verifySocialToken(config: SdkConfig, provider: 'google' | 'facebook', token: string): Promise<CustomerAuthResponse>;
+/**
+ * POST /auth/login/customer/passwordless/request/
+ * Sends a one-time login code to the customer's email. Always resolves
+ * successfully (the backend never reveals whether the email is registered).
+ * Business identified via headers, see loginCustomer.
+ */
+declare function requestCustomerOtp(config: SdkConfig, payload: CustomerPasswordlessRequestPayload): Promise<void>;
+/**
+ * POST /auth/login/customer/passwordless/verify/
+ * Verifies a one-time login code and returns tokens, auto-creating the
+ * customer account on first use (same as social login).
+ * Business identified via headers, see loginCustomer.
+ */
+declare function verifyCustomerOtp(config: SdkConfig, payload: CustomerPasswordlessVerifyPayload, guestSessionId?: string | null): Promise<CustomerAuthResponse>;
+/**
+ * POST /auth/forgot-password/customer/
+ * Request a customer password reset OTP (business-scoped via headers).
+ */
+declare function forgotPasswordCustomer(config: SdkConfig, payload: CustomerForgotPasswordPayload): Promise<{
+    detail: string;
+}>;
+/**
+ * POST /auth/reset-password/customer/
+ * Verify OTP and reset customer password (business-scoped via headers).
+ */
+declare function resetPasswordCustomer(config: SdkConfig, payload: CustomerResetPasswordPayload): Promise<{
+    detail: string;
+}>;
+/**
+ * POST /auth/customer/deactivate/
+ * Self-service account deactivation for customers.
+ */
+declare function deactivateCustomerAccount(config: SdkConfig, accessToken: string, payload?: CustomerDeactivatePayload): Promise<DeactivateAccountResult>;
+/**
+ * POST /auth/customer/reactivate/
+ * Request reactivation code for a deactivated customer account.
+ */
+declare function requestCustomerReactivation(config: SdkConfig, payload: CustomerReactivatePayload): Promise<{
+    detail: string;
+}>;
+/**
+ * POST /auth/customer/reactivate/verify/
+ * Verify reactivation OTP and restore customer account.
+ */
+declare function verifyCustomerReactivation(config: SdkConfig, payload: CustomerReactivateVerifyPayload): Promise<{
+    detail: string;
+}>;
+/** Map kasuvia-auth UserSerializer response to storefront CustomerUser. */
+declare function mapAuthUserToCustomer(data: AuthUserResponse, provider?: CustomerUser['provider']): CustomerUser;
+/** GET /auth/profile/ */
+declare function getMe(config?: SdkConfig, accessToken?: string): Promise<CustomerUser>;
+/** GET /auth/profile/ - alias for getMe for backward compatibility */
+declare function getAuthUser(config?: SdkConfig, accessToken?: string): Promise<AuthUserResponse>;
+/** PUT /auth/profile/ — update firstname, lastname, phone */
+declare function updateProfile(configOrPayload: SdkConfig | UpdateProfilePayload, accessTokenOrPayload?: string | UpdateProfilePayload, payloadParam?: UpdateProfilePayload): Promise<CustomerUser>;
+/**
+ * POST /auth/change-password/ — identity-mode-agnostic; the backend
+ * branches on the JWT's identity_mode (kasuvia-auth/authentication/api/v1/
+ * views/core.py:353, ChangePasswordView) to mutate the right underlying
+ * profile (customer/staff/owner). Used here for a logged-in storefront
+ * customer. `old_password` may be omitted only if the account genuinely has
+ * no password yet (a social/passwordless-only customer setting one for the
+ * first time) — the backend itself enforces this, not the frontend.
+ */
+declare function changePassword(config: SdkConfig, accessToken: string, payload: ChangePasswordPayload): Promise<{
+    detail: string;
+}>;
+/**
+ * GET /auth/storefront/business-info/
+ * Public, unauthenticated — only needs the storefront key (no access token,
+ * no X-Business-ID; PublicBusinessInfoView resolves the business from the
+ * key itself). Real gap fixed 2026-09-17: this endpoint existed on the
+ * backend with zero SDK coverage.
+ */
+declare function getStorefrontBusinessInfo(config: SdkConfig): Promise<StorefrontBusinessInfo>;
+interface PresignedUploadUrlParams {
+    filename: string;
+    content_type: string;
+    business_id: string;
+    context: string;
+    entity_id: string;
+    owner_id?: string;
+    affiliation?: string;
+}
+interface PresignedUploadUrlResponse {
+    presigned_url: string;
+    storage_path: string;
+    bucket: string;
+    expires_in: number;
+    asset_id?: string;
+}
+/**
+ * POST /auth/media/presigned-url/ — kasuvia-auth's thin proxy in front of
+ * kasuvia-media-system. Params are sent as a query string (not a JSON
+ * body) to match every other caller of this endpoint.
+ */
+declare function getPresignedUploadUrl(config: SdkConfig, accessToken: string, params: PresignedUploadUrlParams): Promise<PresignedUploadUrlResponse>;
+interface ConfirmMediaUploadParams {
+    storage_path: string;
+    business_id: string;
+    entity_id: string;
+    original_filename: string;
+    content_type: string;
+    size: number;
+    context: string;
+    owner_id?: string;
+    affiliation?: string;
+}
+/**
+ * POST /auth/media/confirm-upload/ — confirms a completed direct-to-R2
+ * upload and returns the resulting MediaAsset. Params are sent as a query
+ * string (not a JSON body) to match every other caller of this endpoint.
+ */
+declare function confirmMediaUpload(config: SdkConfig, accessToken: string, params: ConfirmMediaUploadParams): Promise<MediaAsset>;
+/**
+ * Silently refresh the access token on app boot.
+ * Builds CustomerUser from JWT claims — no additional profile API call needed.
+ * Returns null if no refresh token exists or if the refresh fails.
+ */
+declare function silentRefresh(config: SdkConfig, refresh: string): Promise<{
+    user: CustomerUser;
+    provider: CustomerUser['provider'];
+    newAccessToken: string;
+    newRefreshToken: string;
+} | null>;
+/**
+ * Store tokens in localStorage (client-side utility)
+ * This is a convenience function for storefronts to store auth tokens
+ */
+declare function storeTokens(accessToken: string, refreshToken: string): void;
+/**
+ * Clear tokens from localStorage (client-side utility)
+ */
+declare function clearTokens(): void;
+/**
+ * Get stored tokens from localStorage (client-side utility)
+ */
+declare function getStoredTokens(): {
+    accessToken: string | null;
+    refreshToken: string | null;
+};
+/** GET /auth/profile/addresses/ */
+declare function getCustomerAddresses(config: SdkConfig, accessToken: string): Promise<CustomerAddress[]>;
+/** POST /auth/profile/addresses/ */
+declare function createCustomerAddress(config: SdkConfig, accessToken: string, payload: CreateCustomerAddressPayload): Promise<CustomerAddress>;
+/** PATCH /auth/profile/addresses/{id}/ */
+declare function updateCustomerAddress(config: SdkConfig, accessToken: string, addressId: string, payload: UpdateCustomerAddressPayload): Promise<CustomerAddress>;
+/** DELETE /auth/profile/addresses/{id}/ */
+declare function deleteCustomerAddress(config: SdkConfig, accessToken: string, addressId: string): Promise<void>;
+
+/**
+ * Product Service
+ *
+ * Handles product operations using GraphQL.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * Create GraphQL client with provided config
+ */
+/**
+ * Fetch all active products for the storefront.
+ */
+declare function getStorefrontProducts(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Product>>;
+/**
+ * Fetch a single product by slug for the storefront.
+ */
+declare function getStorefrontProductBySlug(config: SdkConfig, slug: string): Promise<Product>;
+/**
+ * Fetch popular products for the storefront.
+ */
+declare function getPopularProducts(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Product>>;
+/**
+ * Fetch featured products for the storefront.
+ */
+declare function getFeaturedProducts(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Product>>;
+/**
+ * Fetch new products for the storefront.
+ */
+declare function getNewProducts(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Product>>;
+/**
+ * Fetch products currently on sale for the storefront.
+ */
+declare function getOnSaleProducts(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Product>>;
+/**
+ * Fetch recommended products for the storefront.
+ * Returns featured, popular, and new products.
+ * Optionally excludes a specific product ID.
+ */
+declare function getRecommendedProducts(config: SdkConfig, params?: ListParams & {
+    excludeProductId?: string;
+}): Promise<PaginatedResponse<Product>>;
+
+/**
+ * Collection Service
+ *
+ * Handles collection operations using GraphQL.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * Fetch paginated active collections for the storefront.
+ */
+declare function getStorefrontCollections(config: SdkConfig, params?: ListParams): Promise<PaginatedResponse<Collection>>;
+/**
+ * Fetch a single collection by its slug.
+ */
+declare function getStorefrontCollectionBySlug(config: SdkConfig, slug: string): Promise<Collection>;
+
+/**
+ * Wishlist Service
+ *
+ * Handles wishlist operations.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * Fetch the customer's wishlist for the current business.
+ */
+declare function getWishlist(config: SdkConfig, accessToken: string, params?: {
+    page?: number;
+    pageSize?: number;
+}): Promise<WishlistListResponse>;
+/**
+ * Check if a product is in the customer's wishlist.
+ */
+declare function checkInWishlist(config: SdkConfig, accessToken: string, productId: string): Promise<WishlistCheckResponse>;
+/**
+ * Add a product to the customer's wishlist.
+ */
+declare function addToWishlist(config: SdkConfig, accessToken: string, productId: string, notes?: string): Promise<WishlistItem>;
+/**
+ * Remove an item from the customer's wishlist by item ID.
+ */
+declare function removeFromWishlist(config: SdkConfig, accessToken: string, itemId: string): Promise<void>;
+/**
+ * Remove a product from the customer's wishlist by product ID.
+ */
+declare function removeProductFromWishlist(config: SdkConfig, accessToken: string, productId: string): Promise<void>;
+
+/**
+ * Payment Service
+ *
+ * Customer-facing payment API for payment initiation and verification via
+ * kasuvia-payment-system-go.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * Fetch available payment methods and gateways for a storefront region.
+ *
+ * REAL BUG FIXED (2026-09-22): `currency`/`countryCode` used to default to
+ * 'NGN'/'NG' as SDK-level JS defaults — an independent copy of a value the
+ * real backend already declares itself (`query:"currency" default:"NGN"` /
+ * `query:"country_code" default:"NG"`, kasuvia-payment-system-go's own real,
+ * documented default for this route). Duplicating it client-side risks the
+ * two silently drifting apart if the backend's real default is ever
+ * changed. Now optional with no client-side default at all — when omitted,
+ * the query param is left out entirely and the backend's own declared
+ * default applies, the single source of truth for what "unspecified"
+ * means here.
+ */
+declare function getAvailablePaymentMethods(config: SdkConfig, currency?: string, countryCode?: string): Promise<GatewayMethods[]>;
+/**
+ * Create a Monnify Dedicated Virtual Account so the customer can pay via
+ * bank transfer. Note: Monnify DVA only supports NGN currency - the backend
+ * will reject non-NGN requests for this payment method.
+ */
+declare function createDedicatedAccount(config: SdkConfig, accessToken: string | null | undefined, request: DVACreateRequest): Promise<DVADetails>;
+/**
+ * Initiate a payment (customer → business owner).
+ * Routes to Monnify, Flutterwave, or Paystack on the backend based on region/selection.
+ * Returns a checkout_url to redirect the customer to the gateway.
+ */
+declare function initiatePayment(config: SdkConfig, accessToken: string | null | undefined, request: PaymentInitiateRequest): Promise<PaymentInitiateResponse>;
+/**
+ * Verify a payment after the gateway redirects back to /checkout/verify.
+ */
+declare function verifyTransaction(config: SdkConfig, reference: string): Promise<TransactionVerifyResponse>;
+/**
+ * Poll transaction status by internal transaction ID.
+ */
+declare function getTransactionStatus(config: SdkConfig, transactionId: string): Promise<TransactionVerifyResponse>;
+/**
+ * Fetch authenticated customer's wallet balance.
+ */
+declare function getWalletBalance(config: SdkConfig, accessToken: string): Promise<WalletBalanceResponse>;
+/**
+ * Fetch authenticated customer's wallet ledger (transaction history).
+ */
+declare function getWalletLedger(config: SdkConfig, accessToken: string, params?: {
+    page?: number;
+    page_size?: number;
+}): Promise<WalletLedgerResponse>;
+/**
+ * Claim a pending guest wallet credit into the authenticated customer's wallet.
+ */
+declare function claimWalletCredit(config: SdkConfig, accessToken: string, claimToken: string): Promise<WalletBalanceResponse>;
+declare const paymentService: {
+    readonly getAvailablePaymentMethods: typeof getAvailablePaymentMethods;
+    readonly createDedicatedAccount: typeof createDedicatedAccount;
+    readonly initiatePayment: typeof initiatePayment;
+    readonly verifyTransaction: typeof verifyTransaction;
+    readonly getTransactionStatus: typeof getTransactionStatus;
+    readonly getWalletBalance: typeof getWalletBalance;
+    readonly getWalletLedger: typeof getWalletLedger;
+    readonly claimWalletCredit: typeof claimWalletCredit;
+};
+
+/**
+ * Logistics Service
+ *
+ * Handles shipping rates and address validation.
+ * Stateless - all configuration passed as parameters.
+ */
+
+interface RateAddress {
+    city: string;
+    state: string;
+    country: string;
+}
+/**
+ * REAL BUG FIXED (2026-09-20): this request shape used to be `{cart_items,
+ * origin_address, destination_address, currency?, shipping_method?}` —
+ * completely stale against the real backend. Confirmed against the real
+ * Pydantic schema (kasuvia-store-management/app/schemas/logistics.py:121-144,
+ * `ShippingRatesRequest`), which explicitly documents why: "No origin_address
+ * field — the server resolves the fulfilling StoreLocation itself... A
+ * client-supplied origin would either have to be silently ignored or
+ * silently trusted over the resolved location; neither is acceptable, so it
+ * isn't accepted at all." The server also fetches cart items itself from
+ * `cart_id` (server-side cart as source of truth, preventing client-side
+ * cart manipulation) rather than trusting a client-submitted item list.
+ * Sending the old shape meant every physical checkout's shipping-rates call
+ * was missing the required `cart_id` field entirely and would always 422.
+ */
+interface ShippingRatesRequest {
+    cart_id: string;
+    destination_address: RateAddress;
+    currency: string;
+    shipping_method?: 'carrier' | 'self_pickup';
+    /** Required when shipping_method is 'self_pickup' — see GET /logistics/pickup-locations. */
+    pickup_location_id?: string;
+}
+/**
+ * Fetch shipping rates for a cart.
+ */
+declare function getShippingRates(config: SdkConfig, payload: ShippingRatesRequest): Promise<ShippingRatesResponse>;
+/**
+ * Result of independently forward-geocoding the typed street address via
+ * LocationIQ and cross-checking it against Terminal Africa's own (city/
+ * state/country-only, street-line-blind) validation. See
+ * app/services/address_trust_service.py on the backend. Only present when
+ * Terminal Africa itself reported the address valid.
+ */
+interface AddressTrustResult {
+    trusted: boolean;
+    confidence: 'high' | 'medium' | 'low' | 'unavailable';
+    reason: string | null;
+    resolved: {
+        latitude: number;
+        longitude: number;
+        display_name: string;
+        city: string | null;
+        state: string | null;
+        country: string | null;
+    } | null;
+    plus_code: string | null;
+}
+/**
+ * Validate a shipping address.
+ */
+declare function validateShippingAddress(config: SdkConfig, payload: {
+    first_name: string;
+    last_name: string;
+    phone: string;
+    address_line1: string;
+    address_line2?: string;
+    city: string;
+    state: string;
+    country: string;
+    postal_code?: string;
+}): Promise<{
+    valid: boolean;
+    message?: string;
+    errorType?: 'state' | 'city' | 'general';
+    data?: unknown;
+    cities?: Array<{
+        name: string;
+        city_id: string;
+        stateCode: string;
+        countryCode: string;
+    }>;
+    states?: Array<{
+        name: string;
+        code: string;
+        countryCode: string;
+    }>;
+    /** Street-level trust check — only present when valid is true. See AddressTrustResult. */
+    address_trust?: AddressTrustResult;
+}>;
+interface PickupLocation {
+    id: string;
+    name: string;
+    description: string | null;
+    address: {
+        line1: string;
+        line2: string | null;
+        city: string;
+        state: string;
+        country: string;
+        postal_code: string;
+    };
+    coordinates: {
+        latitude: number;
+        longitude: number;
+    };
+    /** km from the coordinates passed to listPickupLocations, or null if none were passed. */
+    distance_km: number | null;
+    operating_hours: Record<string, string> | null;
+}
+/**
+ * List the business's active pickup locations, so the customer can choose
+ * one at checkout for shipping_method="self_pickup" instead of the merchant
+ * assigning one blindly after the fact. Pass the customer's shipping
+ * coordinates to sort nearest-first.
+ */
+interface PickupLocationsResult {
+    locations: PickupLocation[];
+}
+declare function listPickupLocations(config: SdkConfig, coords?: {
+    latitude: number;
+    longitude: number;
+}): Promise<PickupLocationsResult>;
+/**
+ * List ALL of the business's active locations (not just pickup-eligible
+ * ones) — the set a customer needs to choose from for an 'at_business'
+ * service appointment when the business runs more than one branch. Sibling
+ * of listPickupLocations, same response shape (PickupLocationsResult),
+ * different backend filter (GET /logistics/locations, no
+ * is_pickup_location gate).
+ */
+declare function listBusinessLocations(config: SdkConfig, coords?: {
+    latitude: number;
+    longitude: number;
+}): Promise<PickupLocationsResult>;
+/**
+ * Reverse geocode coordinates to address components using backend LocationIQ service.
+ */
+interface ReverseGeocodeResult {
+    city: string | null;
+    state: string | null;
+    country: string | null;
+    country_code: string | null;
+    display_name: string | null;
+}
+declare function reverseGeocode(config: SdkConfig, payload: {
+    latitude: number;
+    longitude: number;
+}): Promise<ReverseGeocodeResult>;
+/**
+ * Decode a Plus Code to coordinates.
+ */
+interface PlusCodeDecodeResult {
+    latitude: number;
+    longitude: number;
+    latitude_lo: number;
+    longitude_hi: number;
+    plus_code: string;
+}
+declare function decodePlusCode(config: SdkConfig, payload: {
+    plus_code: string;
+}): Promise<PlusCodeDecodeResult>;
+/**
+ * As-you-type address autocomplete suggestions.
+ */
+interface AddressSuggestionResult {
+    place_id: string;
+    display_name: string;
+    line1: string;
+    city: string | null;
+    state: string | null;
+    postal_code: string | null;
+    country: string | null;
+    country_code: string | null;
+    latitude: number | null;
+    longitude: number | null;
+}
+interface AddressAutocompleteResult {
+    results: AddressSuggestionResult[];
+}
+declare function autocompleteAddress(config: SdkConfig, q: string, country?: string): Promise<AddressAutocompleteResult>;
+declare const logisticsService: {
+    getShippingRates: typeof getShippingRates;
+    validateShippingAddress: typeof validateShippingAddress;
+    listPickupLocations: typeof listPickupLocations;
+    listBusinessLocations: typeof listBusinessLocations;
+    reverseGeocode: typeof reverseGeocode;
+    decodePlusCode: typeof decodePlusCode;
+    autocompleteAddress: typeof autocompleteAddress;
+};
+
+/**
+ * Bespoke Service
+ *
+ * Handles bespoke product availability checks and the buyer side of the
+ * bespoke order deliverable proofing flow.
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * REAL BUG FIXED (2026-09-20): was calling `/bespoke/availability/{id}` —
+ * missing the `/capacity` segment. Confirmed against the real router
+ * (kasuvia-store-management/app/api/v1/endpoints/bespoke/capacity.py:184,
+ * registered under the `/bespoke/capacity` prefix): the real route is
+ * `/bespoke/capacity/availability/{id}`. Every bespoke availability check
+ * was 404ing.
+ */
+declare function checkAvailability(config: SdkConfig, product_id: string): Promise<BespokeAvailability>;
+/**
+ * POST /orders/{order_id}/bespoke/approve — buyer approves the seller's
+ * submitted deliverable, starting the escrow release clock.
+ */
+declare function approveBespokeDeliverable(config: SdkConfig, accessToken: string, orderId: string): Promise<BespokeDeliverableStatus>;
+/**
+ * POST /orders/{order_id}/bespoke/request-revision — buyer asks the seller
+ * to revise the submitted deliverable. Capped at 2 revisions server-side;
+ * beyond that, the backend escalates to manual review rather than refusing
+ * silently (see the real endpoint's own doc comment).
+ */
+declare function requestBespokeRevision(config: SdkConfig, accessToken: string, orderId: string, notes: string): Promise<BespokeDeliverableStatus>;
+declare const bespokeService: {
+    checkAvailability: typeof checkAvailability;
+    approveBespokeDeliverable: typeof approveBespokeDeliverable;
+    requestBespokeRevision: typeof requestBespokeRevision;
+};
+
+/**
+ * App Service
+ *
+ * Handles translation and other app-level utilities.
+ */
+declare function googleTranslate(text: string, target: string, source?: string): Promise<string>;
+
+/**
+ * Config Service
+ *
+ * Handles configuration endpoints (languages, currencies, locales, business config).
+ * Stateless - all configuration passed as parameters.
+ */
+
+/**
+ * Fetch supported languages from the payment system.
+ * Resolves to: {kasuviaPaymentBackendUrl}/config/supported-languages
+ */
+declare function getSupportedLanguages(config: SdkConfig): Promise<SupportedLanguagesResponse>;
+/**
+ * Fetch supported currencies from the payment system.
+ * Resolves to: {kasuviaPaymentBackendUrl}/config/supported-currencies
+ */
+declare function getSupportedCurrencies(config: SdkConfig): Promise<SupportedCurrenciesResponse>;
+/**
+ * Fetch the business's public configuration, including store_currency.
+ * Uses storefront API key header (X-Storefront-Key).
+ * Resolves to: {kasuviaAuthBackendUrl}/internal/businesses/{business_id}/
+ * This endpoint is designed for storefronts to fetch business config using their storefront API key.
+ */
+declare function getBusinessConfig(config: SdkConfig): Promise<BusinessConfig>;
+declare const configService: {
+    readonly getSupportedLanguages: typeof getSupportedLanguages;
+    readonly getSupportedCurrencies: typeof getSupportedCurrencies;
+    readonly getBusinessConfig: typeof getBusinessConfig;
+};
+
+/**
+ * CMS Service
+ *
+ * Handles CMS model and entry operations using the kasuvia-cms SDK endpoints.
+ * Protected by X-Storefront-Key and X-Business-ID headers.
+ * Stateless - all configuration passed as parameters.
+ *
+ * REAL BUG FIXED (2026-09-21), live-reproduced: every URL here used
+ * `config.businessId` (the public BID, e.g. "B-2W9EC07") as the
+ * `{business_id}` path segment. kasuvia-cms's SDK routes
+ * (`app/core/security/base.py`'s `get_storefront_business_uuid`, used by
+ * every route in `cms_sdk.py`) explicitly require the INTERNAL UUID there —
+ * "CmsModel/CmsEntry documents are keyed by the UUID business_id... SDK
+ * routes need this, not the BID" (its own docstring) — and 403s with
+ * "Business ID mismatch" on anything else. Every CMS entry call from the
+ * storefront has been failing since the feature was built. Fixed by
+ * requiring an explicit `businessUuid` parameter (resolved via
+ * `getBusinessConfig`'s real `business_id` field, cached by
+ * `useBusinessConfig()` at the hook layer) instead of silently reusing the
+ * wrong config field.
+ */
+
+/**
+ * List CMS entries for a specific model.
+ * Requires public_api.read permission on the model.
+ */
+declare function listCmsEntries(config: SdkConfig, businessUuid: string, modelSlug: string, params?: ListCmsEntriesParams): Promise<CmsEntryListResponse>;
+/**
+ * Get a single CMS entry by ID.
+ * Requires public_api.read permission on the model.
+ */
+declare function getCmsEntry(config: SdkConfig, businessUuid: string, modelSlug: string, entryId: string): Promise<CmsEntry>;
+/**
+ * Create a new CMS entry.
+ * Requires public_api.create permission on the model.
+ */
+declare function createCmsEntry(config: SdkConfig, businessUuid: string, accessToken: string, modelSlug: string, params: CreateCmsEntryParams): Promise<CmsEntry>;
+/**
+ * Update an existing CMS entry.
+ * Requires public_api.update permission on the model.
+ */
+declare function updateCmsEntry(config: SdkConfig, businessUuid: string, accessToken: string, modelSlug: string, entryId: string, params: UpdateCmsEntryParams): Promise<CmsEntry>;
+/**
+ * Delete a CMS entry.
+ * Requires public_api.delete permission on the model.
+ */
+declare function deleteCmsEntry(config: SdkConfig, businessUuid: string, accessToken: string, modelSlug: string, entryId: string): Promise<void>;
+
+/**
+ * Legal Service
+ *
+ * Fetches this business's own currently-active storefront legal document
+ * (Terms, Privacy, or Refund Policy) from kasuvia-cms — public, no auth,
+ * the same endpoint the registration flow's consent record is checked against
+ * (see kasuvia-auth's CustomerTermsAcceptance).
+ *
+ * website-builder-system auto-generates storefront_terms/storefront_privacy
+ * the first time a business publishes (_ensure_storefront_legal_documents).
+ * A business that hasn't published yet, or whose auto-generation failed,
+ * genuinely has none yet. Returns null in that case rather than throwing;
+ * the page decides how to render that honestly — never substituting placeholder
+ * text for real legal text.
+ */
+
+/**
+ * Fetch a storefront legal document from kasuvia-cms.
+ *
+ * REAL BUG FIXED (2026-09-22): took a raw `cmsBaseUrl` string instead of
+ * `SdkConfig` — the only function across this SDK's ~90 service functions
+ * that broke that convention, which is exactly why kasuvia-storefront's
+ * `lib/legal.ts` wrapper existed at all (bridging this one odd signature
+ * back to the app's real config). `businessUuid` is kept as its own
+ * explicit parameter rather than silently reading `config.businessId`:
+ * this real backend route (`GET /cms/legal/storefront/{business_id}/...`,
+ * confirmed against kasuvia-cms's `get_business_id` dependency and
+ * `MerchantLegalDocument.business_id` field) is keyed by the internal
+ * business UUID, never the public BID `config.businessId` actually is —
+ * the same UUID-vs-BID class of bug already found and fixed in
+ * `cms.service.ts`. Resolve it the same way (`useBusinessConfig`'s real
+ * `business_id` field) before calling this.
+ *
+ * @param config - SdkConfig; only `backendUrls.cms` is read from it here.
+ * @param businessUuid - The tenant's real business UUID (not the public BID).
+ * @param documentType - e.g. "storefront_terms", "storefront_privacy",
+ *                       "storefront_refund_policy"
+ * @param fetchOptions - Optional native fetch options (e.g. Next.js `next: { revalidate }`)
+ */
+declare function getMerchantLegalDocument(config: SdkConfig, businessUuid: string, documentType: string, fetchOptions?: RequestInit): Promise<MerchantLegalDocument | null>;
+
+export { type AddressAutocompleteResult, type AddressSuggestionResult, type AddressTrustResult, Comment, CommentCreate, CommentModerationAction, CommentUpdate, type ConfirmMediaUploadParams, type LegalSection, type MerchantLegalDocument, MerchantReplyCreate, type PickupLocation, type PickupLocationsResult, type PlusCodeDecodeResult, type PresignedUploadUrlParams, type PresignedUploadUrlResponse, ProductCommentsResponse, ProductReviewsResponse, type RateAddress, type ReverseGeocodeResult, Review, ReviewCreate, ReviewModerationAction, ReviewUpdate, type ShippingRatesRequest, addToCart, addToGuestCart, addToWishlist, approveBespokeDeliverable, autocompleteAddress, bespokeService, changePassword, checkAvailability, checkInWishlist, claimWalletCredit, clearCart, clearGuestCart, clearTokens, configService, confirmMediaUpload, createCmsEntry, createComment, createCustomerAddress, createDedicatedAccount, createReview, deactivateCustomerAccount, decodePlusCode, deleteCmsEntry, deleteCustomerAddress, forgotPasswordCustomer, getAuthUser, getAvailablePaymentMethods, getBusinessConfig, getCart, getCmsEntry, getCustomerAddresses, getFeaturedProducts, getGuestCart, getGuestCartProductType, getMe, getMerchantLegalDocument, getNewProducts, getOnSaleProducts, getPendingComments, getPendingReviews, getPopularProducts, getPresignedUploadUrl, getProductComments, getProductReviews, getRecommendedProducts, getShippingRates, getStoredTokens, getStorefrontBusinessInfo, getStorefrontCollectionBySlug, getStorefrontCollections, getStorefrontProductBySlug, getStorefrontProducts, getSupportedCurrencies, getSupportedLanguages, getTransactionStatus, getWalletBalance, getWalletLedger, getWishlist, googleTranslate, initiatePayment, listBusinessLocations, listCmsEntries, listPickupLocations, loginCustomer, logisticsService, logout, mapAuthUserToCustomer, merchantReplyToReview, mergeGuestCart, mergeGuestCartIfPresent, moderateComment, moderateReview, paymentService, refreshToken, registerCustomer, removeFromCart, removeFromGuestCart, removeFromWishlist, removeProductFromWishlist, requestBespokeRevision, requestCustomerOtp, requestCustomerReactivation, resetPasswordCustomer, reverseGeocode, silentRefresh, storeTokens, updateCartItem, updateCmsEntry, updateComment, updateCustomerAddress, updateGuestCartItemQuantity, updateProfile, updateReview, validateShippingAddress, verifyCustomerOtp, verifyCustomerReactivation, verifySocialToken, verifyTransaction };