@letsbot/sdk 0.2.0 → 0.5.0

package/README.md

@@ -74,12 +74,16 @@ for await (const won of crm.iterate('crmListDeals', { status: 'won', sort: 'upda
 | `deals` | `list`, `pipelines`, `lostReasons`, `search`, `get`, `create`, `update`, `delete`, `moveStage`, `markWon`, `markLost`, `addNote` |
 | `tasks` | `list`, `get`, `create`, `update`, `delete`, `complete` |
 | `activities`, `quotes`, `products` | `list`, `get`, `create` (+ `update`, `delete`, `schema` for quotes and products) |
-| `hooks` | `list`, `events`, `sample`, `subscribe`, `unsubscribe` |
+| `customObjects` | `list`, `schema` (custom objects — 404 until the workspace switches them on) |
+| `customRecords` | `list`, `search`, `get`, `create`, `update`, `delete` — pass the object `key`, e.g. `co_projects`; values by field key |
+| `hooks` | `list`, `events`, `sample`, `subscribe`, `unsubscribe` (`CRM_WEBHOOK_EVENTS` lists all 24 events) |
 
 Every method takes one object: path parameters (`id`, `contactId`) plus the query (reads) or the JSON body (writes).
 Lists take `q`, `filters` (lists-engine JSON — see `…schema()`), `view`, `sort`, `dir`, `page`, `per_page` and answer
 `{success, data, meta}`. Errors are `LetsBotApiError` with the envelope's `code` (`missing_scope`, `not_found`,
-`validation_failed`, `already_exists` — a duplicate phone, with the existing contact in `error.body.data`, …). Reads
+`validation_failed`, `already_exists` — a duplicate phone, with the existing contact in `error.body.data`,
+`possible_duplicate` — a likely duplicate, read it with `crmPossibleDuplicate(error)` or repeat with
+`allow_duplicate: true`, …). Reads
 are retried on network errors and 5xx; writes are not. The client-side limit defaults to 120 requests/minute, the
 API's per-key limit.
 
@@ -90,6 +94,22 @@ Webhook deliveries (panel → CRM → Settings → API & webhooks, or `crm.hooks
 const valid = verifyCrmWebhookSignature(rawBody, req.headers['x-letsbot-signature'], subscriptionSecret);
 ```
 
+`invoice.created`, `form.submitted`, `deal.assigned` and `health.at_risk` deliveries carry an extra block next to `data`:
+`invoice`, `form` (source, form, submission, answers), `assignment` (new / previous owner) and `health` (score,
+previous, reasons; `object` says contact or company).
+
+```ts
+const record = await crm.customRecords.create({ key: 'co_projects', values: { name: 'Riyadh fit-out', budget: 120000 } });
+
+try {
+  await crm.contacts.create({ phone: '966501234567', email: 'laila@example.com' });
+} catch (error) {
+  const dup = crmPossibleDuplicate(error);
+  if (!dup) throw error;
+  await crm.contacts.update({ id: dup.existingId, name: 'Laila' });
+}
+```
+
 Any operation can also be called by its `operationId` from the spec:
 
 ```ts
@@ -97,6 +117,38 @@ await letsbot.call('sendButtonsAlias', { phone: '966501234567', body: 'Confirm?'
 const { data, status, headers, replayed } = await letsbot.callWithResponse('getChatList');
 ```
 
+### Business / ERP (`LetsBotErp`)
+
+The Business API lives on the workspace domain like the CRM API and needs a workspace key with the **erp** scope
+ticked. Each area (inventory, sales, purchasing, expenses, accounting) answers 404 until the workspace switches it on.
+Creates return drafts (or take the one step you call); nothing messages a customer.
+
+```ts
+import { LetsBotErp, verifyErpWebhookSignature } from '@letsbot/sdk';
+
+const erp = new LetsBotErp({ apiKey: process.env.LETSBOT_KEY!, workspace: 'mystore.letsbot.net' });
+
+const { data: order } = await erp.salesOrders.create({ customer_id: 42, lines: [{ sku: 'RY-OUD-50', qty: 2 }] });
+await erp.salesOrders.confirm({ id: order!.id! });
+
+const { data: invoice } = await erp.invoices.create({ order_id: order!.id! });
+await erp.invoices.issue({ id: invoice!.id! });
+const { data: link } = await erp.invoices.pdfLink({ id: invoice!.id! }); // link.pdf_url once shareable
+
+await erp.payments.record({ customer_id: 42, amount: 1150, method: 'bank_transfer', reference: 'TRX-1' });
+
+for await (const level of erp.iterate('erpListStockLevels', { warehouse_id: 1 })) console.log(level.sku, level.available);
+
+// Webhooks: invoice.issued, invoice.paid, invoice.cleared, invoice.rejected, credit_note.issued, payment.received,
+// order.confirmed, stock.low, po.confirmed_by_supplier, expense.posted
+const { data: hook } = await erp.hooks.subscribe({ url: 'https://example.com/letsbot', events: ['invoice.paid'] });
+// on receipt: verifyErpWebhookSignature(rawBody, req.headers['x-letsbot-signature'], hook.secret)
+```
+
+Every create (`salesOrders.create`, `invoices.create`, `invoices.createCreditNote`, `payments.record`,
+`purchaseOrders.create`, `expenses.create`) sends an `Idempotency-Key` — pass `{ idempotencyKey: 'order-123' }` to
+tie it to your own id — so a retry after a timeout never makes a second document.
+
 ### Templates
 
 ```ts

package/dist/index.cjs

@@ -76,6 +76,7 @@ var operations = {
   addGroupParticipant: { method: "POST", path: "/group/add/participant", params: "body", send: false },
   archiveChat: { method: "POST", path: "/chat/archive", params: "body", send: false },
   blockUser: { method: "POST", path: "/user/block", params: "body", send: false },
+  cancelOrder: { method: "POST", path: "/orders/{orderId}/cancel", params: "body", send: false },
   checkPhone: { method: "POST", path: "/check/phone", params: "body", send: false },
   createGroup: { method: "POST", path: "/group/create", params: "body", send: false },
   createProduct: { method: "POST", path: "/product/create", params: "body", send: false },
@@ -110,6 +111,7 @@ var operations = {
   qr: { method: "POST", path: "/qr", params: "none", send: false },
   queryBroadcast: { method: "POST", path: "/instance/query/broadcast", params: "body", send: false },
   readChat: { method: "POST", path: "/chat/read", params: "body", send: false },
+  recordOrder: { method: "POST", path: "/orders", params: "body", send: false },
   removeGroupParticipant: { method: "POST", path: "/group/remove/participant", params: "body", send: false },
   renameGroup: { method: "POST", path: "/group/rename", params: "body", send: false },
   revokeInviteCode: { method: "POST", path: "/invite/revoke/code", params: "body", send: false },
@@ -240,7 +242,7 @@ var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://letsbot.net/api/v1";
-var SDK_VERSION = "0.2.0";
+var SDK_VERSION = "0.5.0";
 var IDEMPOTENT_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
 var RETRYABLE_5XX = /* @__PURE__ */ new Set([500, 502, 503, 504]);
 var LetsBotClient = class {
@@ -522,6 +524,10 @@ var resourceMap = {
     collections: "getCollections",
     getOrder: "getOrder"
   },
+  orders: {
+    record: "recordOrder",
+    cancel: "cancelOrder"
+  },
   session: {
     qr: "qr",
     find: "findSession",
@@ -563,13 +569,16 @@ var crmOperations = {
   crmCompleteTask: { method: "POST", path: "/tasks/{id}/complete", body: false },
   crmContactsSchema: { method: "GET", path: "/contacts/schema", body: false },
   crmCreateActivity: { method: "POST", path: "/activities", body: true },
-  crmCreateCompany: { method: "POST", path: "/companies", body: true },
-  crmCreateContact: { method: "POST", path: "/contacts", body: true },
+  crmCreateCompany: { method: "POST", path: "/companies", body: true, query: ["allow_duplicate"] },
+  crmCreateContact: { method: "POST", path: "/contacts", body: true, query: ["allow_duplicate"] },
+  crmCreateCustomRecord: { method: "POST", path: "/objects/{key}/records", body: true },
   crmCreateDeal: { method: "POST", path: "/deals", body: true },
   crmCreateProduct: { method: "POST", path: "/products", body: true },
   crmCreateQuote: { method: "POST", path: "/quotes", body: true },
   crmCreateTask: { method: "POST", path: "/tasks", body: true },
+  crmCustomObjectSchema: { method: "GET", path: "/objects/{key}/schema", body: false },
   crmDeleteCompany: { method: "DELETE", path: "/companies/{id}", body: false },
+  crmDeleteCustomRecord: { method: "DELETE", path: "/objects/{key}/records/{id}", body: false },
   crmDeleteDeal: { method: "DELETE", path: "/deals/{id}", body: false },
   crmDeleteProduct: { method: "DELETE", path: "/products/{id}", body: false },
   crmDeleteQuote: { method: "DELETE", path: "/quotes/{id}", body: false },
@@ -577,6 +586,7 @@ var crmOperations = {
   crmGetActivity: { method: "GET", path: "/activities/{id}", body: false },
   crmGetCompany: { method: "GET", path: "/companies/{id}", body: false },
   crmGetContact: { method: "GET", path: "/contacts/{id}", body: false },
+  crmGetCustomRecord: { method: "GET", path: "/objects/{key}/records/{id}", body: false },
   crmGetDeal: { method: "GET", path: "/deals/{id}", body: false },
   crmGetProduct: { method: "GET", path: "/products/{id}", body: false },
   crmGetQuote: { method: "GET", path: "/quotes/{id}", body: false },
@@ -586,6 +596,8 @@ var crmOperations = {
   crmListActivities: { method: "GET", path: "/activities", body: false },
   crmListCompanies: { method: "GET", path: "/companies", body: false },
   crmListContacts: { method: "GET", path: "/contacts", body: false },
+  crmListCustomObjects: { method: "GET", path: "/objects", body: false },
+  crmListCustomRecords: { method: "GET", path: "/objects/{key}/records", body: false },
   crmListDeals: { method: "GET", path: "/deals", body: false },
   crmListHookEvents: { method: "GET", path: "/hooks/events", body: false },
   crmListHooks: { method: "GET", path: "/hooks", body: false },
@@ -601,12 +613,14 @@ var crmOperations = {
   crmQuotesSchema: { method: "GET", path: "/quotes/schema", body: false },
   crmSearchCompanies: { method: "GET", path: "/companies/search", body: false },
   crmSearchContacts: { method: "GET", path: "/contacts/search", body: false },
+  crmSearchCustomRecords: { method: "GET", path: "/objects/{key}/records/search", body: false },
   crmSearchDeals: { method: "GET", path: "/deals/search", body: false },
   crmSubscribeHook: { method: "POST", path: "/hooks", body: true },
   crmUnlinkCompanyContact: { method: "DELETE", path: "/companies/{id}/contacts/{contactId}", body: false },
   crmUnsubscribeHook: { method: "DELETE", path: "/hooks/{id}", body: false },
   crmUpdateCompany: { method: "PATCH", path: "/companies/{id}", body: true },
   crmUpdateContact: { method: "PATCH", path: "/contacts/{id}", body: true },
+  crmUpdateCustomRecord: { method: "PATCH", path: "/objects/{key}/records/{id}", body: true },
   crmUpdateDeal: { method: "PATCH", path: "/deals/{id}", body: true },
   crmUpdateProduct: { method: "PATCH", path: "/products/{id}", body: true },
   crmUpdateQuote: { method: "PATCH", path: "/quotes/{id}", body: true },
@@ -614,6 +628,40 @@ var crmOperations = {
 };
 
 // src/crm.ts
+var CRM_WEBHOOK_EVENTS = [
+  "contact.created",
+  "contact.updated",
+  "contact.deleted",
+  "company.created",
+  "company.updated",
+  "company.deleted",
+  "deal.created",
+  "deal.updated",
+  "deal.deleted",
+  "deal.stage_changed",
+  "deal.won",
+  "deal.lost",
+  "deal.assigned",
+  "task.created",
+  "task.completed",
+  "ticket.created",
+  "quote.sent",
+  "quote.viewed",
+  "quote.accepted",
+  "quote.signed",
+  "quote.paid",
+  "invoice.created",
+  "form.submitted",
+  "health.at_risk"
+];
+function crmPossibleDuplicate(error) {
+  const e = error;
+  if (!e || e.status !== 409 || e.code !== "possible_duplicate") return null;
+  const body = e.body ?? {};
+  const duplicates = Array.isArray(body.duplicates) ? body.duplicates : [];
+  const existingId = Number(body.existing_id ?? duplicates[0]?.id);
+  return Number.isFinite(existingId) ? { existingId, duplicates } : null;
+}
 var CRM_DEFAULT_RATE_LIMIT = 120;
 var CRM_SIGNATURE_HEADER = "X-LetsBot-Signature";
 var crmResourceMap = {
@@ -681,6 +729,18 @@ var crmResourceMap = {
     update: "crmUpdateProduct",
     delete: "crmDeleteProduct"
   },
+  customObjects: {
+    list: "crmListCustomObjects",
+    schema: "crmCustomObjectSchema"
+  },
+  customRecords: {
+    list: "crmListCustomRecords",
+    search: "crmSearchCustomRecords",
+    get: "crmGetCustomRecord",
+    create: "crmCreateCustomRecord",
+    update: "crmUpdateCustomRecord",
+    delete: "crmDeleteCustomRecord"
+  },
   hooks: {
     list: "crmListHooks",
     events: "crmListHookEvents",
@@ -721,6 +781,10 @@ var LetsBotCrm = class {
   activities;
   quotes;
   products;
+  /** Custom objects (`/objects`): 404 until the workspace has custom objects switched on. */
+  customObjects;
+  /** Records of a custom object (`/objects/{key}/records`); pass the object `key`, e.g. `co_projects`. */
+  customRecords;
   hooks;
   transport;
   constructor(options) {
@@ -749,6 +813,8 @@ var LetsBotCrm = class {
     this.activities = bind(crmResourceMap.activities);
     this.quotes = bind(crmResourceMap.quotes);
     this.products = bind(crmResourceMap.products);
+    this.customObjects = bind(crmResourceMap.customObjects);
+    this.customRecords = bind(crmResourceMap.customRecords);
     this.hooks = bind(crmResourceMap.hooks);
   }
   /** The resolved base URL, e.g. `https://mystore.letsbot.net/api/v1/crm`. */
@@ -774,10 +840,19 @@ var LetsBotCrm = class {
       return encodeURIComponent(String(value));
     });
     const url = new URL(this.transport.root + path);
+    const append = (key, value) => {
+      if (value === void 0 || value === null) return;
+      url.searchParams.append(key, typeof value === "object" ? JSON.stringify(value) : String(value));
+    };
     if (!meta.body) {
-      for (const [key, value] of Object.entries(rest)) {
-        if (value === void 0 || value === null) continue;
-        url.searchParams.append(key, typeof value === "object" ? JSON.stringify(value) : String(value));
+      for (const [key, value] of Object.entries(rest)) append(key, value);
+    } else if ("query" in meta) {
+      for (const key of meta.query) {
+        if (key in rest) {
+          const value = rest[key];
+          append(key, typeof value === "boolean" ? value ? 1 : 0 : value);
+          delete rest[key];
+        }
       }
     }
     return this.transport.request(operationId, meta.method, url, meta.body ? rest : void 0, options);
@@ -813,6 +888,240 @@ function verifyCrmWebhookSignature(rawBody, header, secret, options = {}) {
   const given = Buffer.from(v1, "hex");
   return given.length === expected.length && crypto.timingSafeEqual(given, expected);
 }
+
+// src/generated/erp-operations.ts
+var erpOperations = {
+  erpConfirmSalesOrder: { method: "POST", path: "/sales/orders/{id}/confirm", body: false, idempotent: false },
+  erpCreateCreditNote: { method: "POST", path: "/sales/invoices/{id}/credit-notes", body: true, idempotent: true },
+  erpCreateExpense: { method: "POST", path: "/expenses", body: true, idempotent: true },
+  erpCreateInvoice: { method: "POST", path: "/sales/invoices", body: true, idempotent: true },
+  erpCreatePurchaseOrder: { method: "POST", path: "/purchasing/purchase-orders", body: true, idempotent: true },
+  erpCreateSalesOrder: { method: "POST", path: "/sales/orders", body: true, idempotent: true },
+  erpCustomerStatement: { method: "GET", path: "/sales/customers/{id}/statement", body: false, idempotent: false },
+  erpGetBill: { method: "GET", path: "/purchasing/bills/{id}", body: false, idempotent: false },
+  erpGetCreditNote: { method: "GET", path: "/sales/credit-notes/{id}", body: false, idempotent: false },
+  erpGetCustomer: { method: "GET", path: "/sales/customers/{id}", body: false, idempotent: false },
+  erpGetExpense: { method: "GET", path: "/expenses/{id}", body: false, idempotent: false },
+  erpGetInvoice: { method: "GET", path: "/sales/invoices/{id}", body: false, idempotent: false },
+  erpGetItem: { method: "GET", path: "/inventory/items/{id}", body: false, idempotent: false },
+  erpGetJournalEntry: { method: "GET", path: "/accounting/journal-entries/{id}", body: false, idempotent: false },
+  erpGetPayment: { method: "GET", path: "/sales/payments/{id}", body: false, idempotent: false },
+  erpGetPurchaseOrder: { method: "GET", path: "/purchasing/purchase-orders/{id}", body: false, idempotent: false },
+  erpGetSalesOrder: { method: "GET", path: "/sales/orders/{id}", body: false, idempotent: false },
+  erpGetSupplier: { method: "GET", path: "/purchasing/suppliers/{id}", body: false, idempotent: false },
+  erpHookEvents: { method: "GET", path: "/hooks/events", body: false, idempotent: false },
+  erpHookSample: { method: "GET", path: "/hooks/sample", body: false, idempotent: false },
+  erpInvoicePdfLink: { method: "GET", path: "/sales/invoices/{id}/pdf", body: false, idempotent: false },
+  erpIssueCreditNote: { method: "POST", path: "/sales/credit-notes/{id}/issue", body: false, idempotent: false },
+  erpIssueInvoice: { method: "POST", path: "/sales/invoices/{id}/issue", body: false, idempotent: false },
+  erpListAccounts: { method: "GET", path: "/accounting/accounts", body: false, idempotent: false },
+  erpListBills: { method: "GET", path: "/purchasing/bills", body: false, idempotent: false },
+  erpListCreditNotes: { method: "GET", path: "/sales/credit-notes", body: false, idempotent: false },
+  erpListCustomers: { method: "GET", path: "/sales/customers", body: false, idempotent: false },
+  erpListExpenseCategories: { method: "GET", path: "/expenses/categories", body: false, idempotent: false },
+  erpListExpenses: { method: "GET", path: "/expenses", body: false, idempotent: false },
+  erpListHooks: { method: "GET", path: "/hooks", body: false, idempotent: false },
+  erpListInvoices: { method: "GET", path: "/sales/invoices", body: false, idempotent: false },
+  erpListItems: { method: "GET", path: "/inventory/items", body: false, idempotent: false },
+  erpListJournalEntries: { method: "GET", path: "/accounting/journal-entries", body: false, idempotent: false },
+  erpListPayments: { method: "GET", path: "/sales/payments", body: false, idempotent: false },
+  erpListPurchaseOrders: { method: "GET", path: "/purchasing/purchase-orders", body: false, idempotent: false },
+  erpListSalesOrders: { method: "GET", path: "/sales/orders", body: false, idempotent: false },
+  erpListStockLevels: { method: "GET", path: "/inventory/stock-levels", body: false, idempotent: false },
+  erpListStockMoves: { method: "GET", path: "/inventory/stock-moves", body: false, idempotent: false },
+  erpListSuppliers: { method: "GET", path: "/purchasing/suppliers", body: false, idempotent: false },
+  erpListVariants: { method: "GET", path: "/inventory/variants", body: false, idempotent: false },
+  erpListWarehouses: { method: "GET", path: "/inventory/warehouses", body: false, idempotent: false },
+  erpRecordPayment: { method: "POST", path: "/sales/payments", body: true, idempotent: true },
+  erpReportBalanceSheet: { method: "GET", path: "/accounting/reports/balance-sheet", body: false, idempotent: false },
+  erpReportProfitAndLoss: { method: "GET", path: "/accounting/reports/profit-and-loss", body: false, idempotent: false },
+  erpReportVat: { method: "GET", path: "/accounting/reports/vat", body: false, idempotent: false },
+  erpSubscribeHook: { method: "POST", path: "/hooks", body: true, idempotent: false },
+  erpUnsubscribeHook: { method: "DELETE", path: "/hooks/{id}", body: false, idempotent: false }
+};
+
+// src/erp.ts
+var ERP_DEFAULT_RATE_LIMIT = 120;
+var ERP_WEBHOOK_EVENTS = [
+  "invoice.issued",
+  "invoice.paid",
+  "invoice.cleared",
+  "invoice.rejected",
+  "credit_note.issued",
+  "payment.received",
+  "order.confirmed",
+  "stock.low",
+  "po.confirmed_by_supplier",
+  "expense.posted"
+];
+var erpResourceMap = {
+  items: { list: "erpListItems", get: "erpGetItem" },
+  variants: { list: "erpListVariants" },
+  warehouses: { list: "erpListWarehouses" },
+  stock: { levels: "erpListStockLevels", moves: "erpListStockMoves" },
+  customers: { list: "erpListCustomers", get: "erpGetCustomer", statement: "erpCustomerStatement" },
+  salesOrders: { list: "erpListSalesOrders", get: "erpGetSalesOrder", create: "erpCreateSalesOrder", confirm: "erpConfirmSalesOrder" },
+  invoices: {
+    list: "erpListInvoices",
+    get: "erpGetInvoice",
+    create: "erpCreateInvoice",
+    issue: "erpIssueInvoice",
+    pdfLink: "erpInvoicePdfLink",
+    createCreditNote: "erpCreateCreditNote"
+  },
+  creditNotes: { list: "erpListCreditNotes", get: "erpGetCreditNote", issue: "erpIssueCreditNote" },
+  payments: { list: "erpListPayments", get: "erpGetPayment", record: "erpRecordPayment" },
+  suppliers: { list: "erpListSuppliers", get: "erpGetSupplier" },
+  purchaseOrders: { list: "erpListPurchaseOrders", get: "erpGetPurchaseOrder", create: "erpCreatePurchaseOrder" },
+  bills: { list: "erpListBills", get: "erpGetBill" },
+  expenses: { list: "erpListExpenses", get: "erpGetExpense", create: "erpCreateExpense", categories: "erpListExpenseCategories" },
+  accounting: {
+    accounts: "erpListAccounts",
+    journalEntries: "erpListJournalEntries",
+    journalEntry: "erpGetJournalEntry",
+    profitAndLoss: "erpReportProfitAndLoss",
+    balanceSheet: "erpReportBalanceSheet",
+    vat: "erpReportVat"
+  },
+  hooks: {
+    list: "erpListHooks",
+    events: "erpHookEvents",
+    sample: "erpHookSample",
+    subscribe: "erpSubscribeHook",
+    unsubscribe: "erpUnsubscribeHook"
+  }
+};
+var UNSAFE2 = /* @__PURE__ */ new Set(["POST", "PATCH", "PUT", "DELETE"]);
+function erpBaseUrl(workspace) {
+  const raw = workspace.trim();
+  if (raw === "") throw new TypeError("LetsBotErp: `workspace` is empty");
+  const host = (/^https?:\/\//i.test(raw) ? new URL(raw).host : raw.split("/")[0]).toLowerCase();
+  return `https://${host.includes(".") ? host : `${host}.letsbot.net`}/api/v1/erp`;
+}
+var ErpTransport = class extends LetsBotClient {
+  authHeaders(apiKey) {
+    return { "X-Zapier-Api-Key": apiKey };
+  }
+  request(operationId, method, url, json, idempotent, options) {
+    const headers = this.baseHeaders(options);
+    let body;
+    if (json !== void 0) {
+      headers["Content-Type"] = "application/json";
+      body = JSON.stringify(json);
+    }
+    let idempotencyKey;
+    if (idempotent && options.idempotencyKey !== false) {
+      idempotencyKey = options.idempotencyKey ?? this.newKey();
+      headers["Idempotency-Key"] = idempotencyKey;
+    }
+    const unsafeRetryAllowed = !UNSAFE2.has(method) || idempotencyKey !== void 0;
+    return this.perform(operationId, method, url, headers, body, { idempotencyKey, unsafeRetryAllowed }, options);
+  }
+  get root() {
+    return this.baseUrl;
+  }
+};
+var LetsBotErp = class {
+  items;
+  variants;
+  warehouses;
+  stock;
+  customers;
+  salesOrders;
+  invoices;
+  creditNotes;
+  payments;
+  suppliers;
+  purchaseOrders;
+  bills;
+  expenses;
+  accounting;
+  hooks;
+  transport;
+  constructor(options) {
+    if (!options?.baseUrl && !options?.workspace) {
+      throw new TypeError("LetsBotErp: pass `workspace` (e.g. mystore.letsbot.net) or `baseUrl`");
+    }
+    this.transport = new ErpTransport(
+      {
+        ...options,
+        baseUrl: options.baseUrl ?? erpBaseUrl(options.workspace),
+        rateLimit: options.rateLimit === false ? false : { requestsPerMinute: options.rateLimit?.requestsPerMinute ?? ERP_DEFAULT_RATE_LIMIT }
+      },
+      "LetsBotErp: `apiKey` (a workspace API key with the erp scope)"
+    );
+    const bind = (map) => {
+      const bound = {};
+      for (const [name, id] of Object.entries(map)) {
+        bound[name] = (params, options2) => this.call(id, ...[params, options2]);
+      }
+      return bound;
+    };
+    this.items = bind(erpResourceMap.items);
+    this.variants = bind(erpResourceMap.variants);
+    this.warehouses = bind(erpResourceMap.warehouses);
+    this.stock = bind(erpResourceMap.stock);
+    this.customers = bind(erpResourceMap.customers);
+    this.salesOrders = bind(erpResourceMap.salesOrders);
+    this.invoices = bind(erpResourceMap.invoices);
+    this.creditNotes = bind(erpResourceMap.creditNotes);
+    this.payments = bind(erpResourceMap.payments);
+    this.suppliers = bind(erpResourceMap.suppliers);
+    this.purchaseOrders = bind(erpResourceMap.purchaseOrders);
+    this.bills = bind(erpResourceMap.bills);
+    this.expenses = bind(erpResourceMap.expenses);
+    this.accounting = bind(erpResourceMap.accounting);
+    this.hooks = bind(erpResourceMap.hooks);
+  }
+  /** The resolved base URL, e.g. `https://mystore.letsbot.net/api/v1/erp`. */
+  get baseUrl() {
+    return this.transport.root;
+  }
+  /** Call any ERP operation by its operationId and get the body. */
+  async call(operationId, ...args) {
+    return (await this.callWithResponse(operationId, ...args)).data;
+  }
+  /** Call any ERP operation and get the body plus status, headers, Idempotency-Key and replay flag. */
+  async callWithResponse(operationId, ...args) {
+    const [params = {}, options = {}] = args;
+    const meta = erpOperations[operationId];
+    if (!meta) throw new TypeError(`Unknown LetsBot ERP operation: ${String(operationId)}`);
+    const rest = { ...params };
+    const path = meta.path.replace(/\{(\w+)\}/g, (_, name) => {
+      const value = rest[name];
+      if (value === void 0 || value === null || value === "") {
+        throw new TypeError(`${operationId}: \`${name}\` is required`);
+      }
+      delete rest[name];
+      return encodeURIComponent(String(value));
+    });
+    const url = new URL(this.transport.root + path);
+    if (!meta.body) {
+      for (const [key, value] of Object.entries(rest)) {
+        if (value === void 0 || value === null) continue;
+        url.searchParams.append(key, typeof value === "object" ? JSON.stringify(value) : String(value));
+      }
+    }
+    return this.transport.request(operationId, meta.method, url, meta.body ? rest : void 0, meta.idempotent, options);
+  }
+  /**
+   * Every row of a list, page by page (`meta.last_page`).
+   *
+   * ```ts
+   * for await (const invoice of erp.iterate('erpListInvoices', { status: 'issued,partially_paid', overdue: true })) { … }
+   * ```
+   */
+  async *iterate(operationId, params = {}, options) {
+    for (let page = 1; ; page++) {
+      const body = await this.call(operationId, ...[{ per_page: 100, ...params, page }, options]);
+      yield* body.data;
+      if (body.data.length === 0 || page >= (body.meta?.last_page ?? page)) return;
+    }
+  }
+};
+function verifyErpWebhookSignature(rawBody, header, secret, options = {}) {
+  return verifyCrmWebhookSignature(rawBody, header, secret, options);
+}
 var IDENTITY_MAX_SUB_LENGTH = 191;
 var IDENTITY_MAX_TTL_SECONDS = 7 * 24 * 60 * 60;
 var IDENTITY_DEFAULT_TTL = "24h";
@@ -889,6 +1198,8 @@ var LetsBot = class extends LetsBotClient {
   user;
   instance;
   products;
+  /** Store orders: record one (order journey + invoice) or stop its journey. */
+  orders;
   session;
   archive;
   constructor(options) {
@@ -904,6 +1215,7 @@ var LetsBot = class extends LetsBotClient {
     this.user = bindResource(this, resourceMap.user);
     this.instance = bindResource(this, resourceMap.instance);
     this.products = bindResource(this, resourceMap.products);
+    this.orders = bindResource(this, resourceMap.orders);
     this.session = bindResource(this, resourceMap.session);
     this.archive = {
       ...bindResource(this, resourceMap.archive),
@@ -914,7 +1226,10 @@ var LetsBot = class extends LetsBotClient {
 
 exports.CRM_DEFAULT_RATE_LIMIT = CRM_DEFAULT_RATE_LIMIT;
 exports.CRM_SIGNATURE_HEADER = CRM_SIGNATURE_HEADER;
+exports.CRM_WEBHOOK_EVENTS = CRM_WEBHOOK_EVENTS;
 exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
+exports.ERP_DEFAULT_RATE_LIMIT = ERP_DEFAULT_RATE_LIMIT;
+exports.ERP_WEBHOOK_EVENTS = ERP_WEBHOOK_EVENTS;
 exports.IDENTITY_DEFAULT_TTL = IDENTITY_DEFAULT_TTL;
 exports.IDENTITY_MAX_SUB_LENGTH = IDENTITY_MAX_SUB_LENGTH;
 exports.IDENTITY_MAX_TTL_SECONDS = IDENTITY_MAX_TTL_SECONDS;
@@ -924,16 +1239,22 @@ exports.LetsBotApiError = LetsBotApiError;
 exports.LetsBotClient = LetsBotClient;
 exports.LetsBotConnectionError = LetsBotConnectionError;
 exports.LetsBotCrm = LetsBotCrm;
+exports.LetsBotErp = LetsBotErp;
 exports.SDK_VERSION = SDK_VERSION;
 exports.TokenBucket = TokenBucket;
 exports.createIdentityToken = createIdentityToken;
 exports.crmBaseUrl = crmBaseUrl;
 exports.crmOperations = crmOperations;
+exports.crmPossibleDuplicate = crmPossibleDuplicate;
 exports.crmResourceMap = crmResourceMap;
+exports.erpBaseUrl = erpBaseUrl;
+exports.erpOperations = erpOperations;
+exports.erpResourceMap = erpResourceMap;
 exports.experimental_verifyWebhookSignature = experimental_verifyWebhookSignature;
 exports.isLogicalFailure = isLogicalFailure;
 exports.operations = operations;
 exports.resourceMap = resourceMap;
 exports.verifyCrmWebhookSignature = verifyCrmWebhookSignature;
+exports.verifyErpWebhookSignature = verifyErpWebhookSignature;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map