@rovela-ai/sdk 0.4.1 → 0.4.2

package/dist/admin/api/settings.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @rovela/sdk/admin/api/settings
+ *
+ * API route handler for store settings management.
+ * Supports GET (with lazy initialization from blueprint) and PUT (upsert).
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/settings/route.ts
+ * export { GET, PUT } from '@rovela/sdk/admin/api/settings'
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import { StoreSettingsData } from '../../core/db/queries';
+import type { AdminApiError } from '../types';
+interface SettingsResponse {
+    settings: StoreSettingsData;
+}
+/**
+ * GET /api/admin/settings
+ *
+ * Get store settings. If no settings exist in database, seeds from
+ * blueprint and environment variables (lazy initialization).
+ */
+export declare function GET(): Promise<NextResponse<SettingsResponse | AdminApiError>>;
+/**
+ * PUT /api/admin/settings
+ *
+ * Update store settings. Creates or updates the settings row.
+ *
+ * Request Body:
+ * ```json
+ * {
+ *   "storeName": "My Store",
+ *   "storeEmail": "support@example.com",
+ *   "storeCurrency": "USD",
+ *   "storeTimezone": "America/New_York",
+ *   "taxIncludedInPrices": true,
+ *   "shippingEnabled": true,
+ *   "freeShippingThreshold": 100,
+ *   "shippingCountries": ["US", "CA", "MX"]
+ * }
+ * ```
+ *
+ * Note: Tax rates are managed via /api/admin/tax-zones (zone-based system)
+ */
+export declare function PUT(request: NextRequest): Promise<NextResponse<SettingsResponse | AdminApiError>>;
+export {};
+//# sourceMappingURL=settings.d.ts.map

package/dist/admin/api/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/admin/api/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEvD,OAAO,EAAgC,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAM7C,UAAU,gBAAgB;IACxB,QAAQ,EAAE,iBAAiB,CAAA;CAC5B;AAmCD;;;;;GAKG;AACH,wBAAsB,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,gBAAgB,GAAG,aAAa,CAAC,CAAC,CAyBnF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,gBAAgB,GAAG,aAAa,CAAC,CAAC,CA0HzD"}

package/dist/admin/api/settings.js

@@ -0,0 +1,201 @@
+/**
+ * @rovela/sdk/admin/api/settings
+ *
+ * API route handler for store settings management.
+ * Supports GET (with lazy initialization from blueprint) and PUT (upsert).
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/settings/route.ts
+ * export { GET, PUT } from '@rovela/sdk/admin/api/settings'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { findSettings, upsertSettings } from '../../core/db/queries';
+// =============================================================================
+// Default Values
+// =============================================================================
+/**
+ * Get default settings from environment variables.
+ * Used for lazy initialization on first access.
+ *
+ * Note: We intentionally do NOT read from blueprint.json here because:
+ * 1. Blueprint is a build-time artifact (used by Claude Agent)
+ * 2. At runtime, settings should come from DB or env vars
+ * 3. Importing core/config would pull in 'fs' module, breaking client bundling
+ */
+function getDefaultSettings() {
+    return {
+        storeName: process.env.STORE_NAME || 'My Store',
+        storeEmail: process.env.SUPPORT_EMAIL || process.env.RESEND_FROM_EMAIL || '',
+        storeCurrency: process.env.STORE_CURRENCY || 'USD',
+        storeTimezone: process.env.STORE_TIMEZONE || 'America/New_York',
+        taxIncludedInPrices: true, // Default: prices include tax
+        shippingEnabled: true,
+        freeShippingThreshold: 0,
+        shippingCountries: ['US', 'CA'],
+        // Auth configuration defaults
+        guestCheckout: true,
+        customerAccounts: false,
+    };
+}
+// =============================================================================
+// Handlers
+// =============================================================================
+/**
+ * GET /api/admin/settings
+ *
+ * Get store settings. If no settings exist in database, seeds from
+ * blueprint and environment variables (lazy initialization).
+ */
+export async function GET() {
+    try {
+        // Anyone with read access to settings can see them (owner, administrator, manager).
+        const guard = await requireAdmin({ permission: 'settings.read' });
+        if (!guard.ok) {
+            return guard.response;
+        }
+        // Try to find existing settings
+        let settings = await findSettings();
+        // If no settings exist, seed from defaults (lazy initialization)
+        if (!settings) {
+            const defaults = getDefaultSettings();
+            settings = await upsertSettings(defaults);
+        }
+        return NextResponse.json({ settings });
+    }
+    catch (error) {
+        console.error('[Admin Settings API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch settings', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * PUT /api/admin/settings
+ *
+ * Update store settings. Creates or updates the settings row.
+ *
+ * Request Body:
+ * ```json
+ * {
+ *   "storeName": "My Store",
+ *   "storeEmail": "support@example.com",
+ *   "storeCurrency": "USD",
+ *   "storeTimezone": "America/New_York",
+ *   "taxIncludedInPrices": true,
+ *   "shippingEnabled": true,
+ *   "freeShippingThreshold": 100,
+ *   "shippingCountries": ["US", "CA", "MX"]
+ * }
+ * ```
+ *
+ * Note: Tax rates are managed via /api/admin/tax-zones (zone-based system)
+ */
+export async function PUT(request) {
+    try {
+        // Writing settings is restricted to owners + administrators.
+        const guard = await requireAdmin({ permission: 'settings.write' });
+        if (!guard.ok) {
+            return guard.response;
+        }
+        // Parse request body
+        const body = await request.json();
+        // Validate and sanitize input
+        const data = {};
+        if (typeof body.storeName === 'string') {
+            data.storeName = body.storeName.trim().slice(0, 255);
+        }
+        if (typeof body.storeEmail === 'string') {
+            data.storeEmail = body.storeEmail.trim().toLowerCase().slice(0, 255);
+        }
+        if (typeof body.storeCurrency === 'string') {
+            data.storeCurrency = body.storeCurrency.toUpperCase().slice(0, 10);
+        }
+        if (typeof body.storeTimezone === 'string') {
+            data.storeTimezone = body.storeTimezone.slice(0, 100);
+        }
+        if (typeof body.taxIncludedInPrices === 'boolean') {
+            data.taxIncludedInPrices = body.taxIncludedInPrices;
+        }
+        if (typeof body.shippingEnabled === 'boolean') {
+            data.shippingEnabled = body.shippingEnabled;
+        }
+        if (typeof body.freeShippingThreshold === 'number') {
+            data.freeShippingThreshold = Math.max(0, body.freeShippingThreshold);
+        }
+        if (Array.isArray(body.shippingCountries)) {
+            data.shippingCountries = body.shippingCountries
+                .filter((c) => typeof c === 'string')
+                .map((c) => c.toUpperCase().trim().slice(0, 2))
+                .filter((c) => c.length === 2);
+        }
+        // Auth configuration
+        if (typeof body.guestCheckout === 'boolean') {
+            data.guestCheckout = body.guestCheckout;
+        }
+        if (typeof body.customerAccounts === 'boolean') {
+            data.customerAccounts = body.customerAccounts;
+        }
+        // Discount/promotion configuration
+        if (typeof body.promotionCodesEnabled === 'boolean') {
+            data.promotionCodesEnabled = body.promotionCodesEnabled;
+        }
+        // R021: cookie consent banner master toggle.
+        if (typeof body.cookieBannerEnabled === 'boolean') {
+            data.cookieBannerEnabled = body.cookieBannerEnabled;
+        }
+        // Shippo shipping configuration
+        if (typeof body.shippingMode === 'string' && ['manual', 'shippo'].includes(body.shippingMode)) {
+            data.shippingMode = body.shippingMode;
+        }
+        if (typeof body.shippoTestMode === 'boolean') {
+            data.shippoTestMode = body.shippoTestMode;
+        }
+        // Shippo from address (validate required fields)
+        if (body.shippoFromAddress && typeof body.shippoFromAddress === 'object') {
+            const addr = body.shippoFromAddress;
+            if (typeof addr.name === 'string' &&
+                typeof addr.street1 === 'string' &&
+                typeof addr.city === 'string' &&
+                typeof addr.state === 'string' &&
+                typeof addr.zip === 'string' &&
+                typeof addr.country === 'string') {
+                data.shippoFromAddress = {
+                    name: addr.name.trim(),
+                    company: typeof addr.company === 'string' ? addr.company.trim() : undefined,
+                    street1: addr.street1.trim(),
+                    street2: typeof addr.street2 === 'string' ? addr.street2.trim() : undefined,
+                    city: addr.city.trim(),
+                    state: addr.state.trim().toUpperCase(),
+                    zip: addr.zip.trim(),
+                    country: addr.country.trim().toUpperCase(),
+                    phone: typeof addr.phone === 'string' ? addr.phone.trim() : undefined,
+                    email: typeof addr.email === 'string' ? addr.email.trim().toLowerCase() : undefined,
+                };
+            }
+        }
+        // Shippo default parcel dimensions
+        if (body.shippoDefaultParcel && typeof body.shippoDefaultParcel === 'object') {
+            const parcel = body.shippoDefaultParcel;
+            if (typeof parcel.length === 'number' && parcel.length > 0 &&
+                typeof parcel.width === 'number' && parcel.width > 0 &&
+                typeof parcel.height === 'number' && parcel.height > 0 &&
+                typeof parcel.weight === 'number' && parcel.weight > 0) {
+                data.shippoDefaultParcel = {
+                    length: parcel.length,
+                    width: parcel.width,
+                    height: parcel.height,
+                    weight: parcel.weight,
+                };
+            }
+        }
+        // Upsert settings
+        const settings = await upsertSettings(data);
+        return NextResponse.json({ settings });
+    }
+    catch (error) {
+        console.error('[Admin Settings API] PUT error:', error);
+        return NextResponse.json({ error: 'Failed to update settings', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=settings.js.map

package/dist/admin/api/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/admin/api/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAqB,MAAM,uBAAuB,CAAA;AAWvF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,SAAS,kBAAkB;IACzB,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU;QAC/C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QAC5E,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK;QAClD,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,kBAAkB;QAC/D,mBAAmB,EAAE,IAAI,EAAE,8BAA8B;QACzD,eAAe,EAAE,IAAI;QACrB,qBAAqB,EAAE,CAAC;QACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC/B,8BAA8B;QAC9B,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,KAAK;KACxB,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,IAAI,CAAC;QACH,oFAAoF;QACpF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAA;QACjE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,QAAQ,CAAA;QACvB,CAAC;QAED,gCAAgC;QAChC,IAAI,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAA;QAEnC,iEAAiE;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAA;YACrC,QAAQ,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;QACvD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC7D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,OAAoB;IAEpB,IAAI,CAAC;QACH,6DAA6D;QAC7D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,QAAQ,CAAA;QACvB,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAEjC,8BAA8B;QAC9B,MAAM,IAAI,GAA+B,EAAE,CAAA;QAE3C,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACrD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC7C,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB;iBAC5C,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;iBAC7C,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;iBACtD,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC1C,CAAC;QACD,qBAAqB;QACrB,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACzC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC/C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;QAC/C,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAA;QACzD,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACrD,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAmC,CAAA;QAC9D,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC7C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QAC3C,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,CAAC,iBAAiB,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAA;YACnC,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;gBAC5B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAChC,CAAC;gBACD,IAAI,CAAC,iBAAiB,GAAG;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtB,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;oBAC3E,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC5B,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;oBAC3E,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;oBACtC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;oBACpB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC1C,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;oBACrE,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;iBACpF,CAAA;YACH,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAA;YACvC,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBACtD,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;gBACpD,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBACtD,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EACtD,CAAC;gBACD,IAAI,CAAC,mBAAmB,GAAG;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAA;YACH,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;QAE3C,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;QACvD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/setup-guide.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @rovela/sdk/admin/api/setup-guide
+ *
+ * Setup-guide orchestrator for the admin dashboard.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/setup-guide/route.ts
+ * export { GET } from '@rovela-ai/sdk/admin/api/setup-guide'
+ *
+ * // app/api/admin/setup-guide/manual-mark/route.ts
+ * export { POST as markSetupTask } from '@rovela-ai/sdk/admin/api/setup-guide'
+ * ```
+ *
+ * GET returns the 9 task statuses + progress + visibility hint in one
+ * round-trip. Auto-detected signals are read live; manual marks live in
+ * `store_settings.onboarding` JSONB and are written via POST.
+ *
+ * Tasks (3 tiers):
+ *   Tier 1 (Open for business — must do):
+ *     - stripe          (auto)  — connected account exists
+ *     - products        (auto)  — onboarding.firstProductTouched OR count > 1
+ *     - shipping        (auto)  — at least one active shipping zone
+ *     - tax             (auto)  — at least one tax zone OR onboarding.taxNoneNeeded
+ *
+ *   Tier 2 (Make it yours):
+ *     - logo            (auto)  — onboarding.logoUploaded
+ *     - domain          (auto)  — NEXT_PUBLIC_APP_URL is not a `.rovela.app` host
+ *     - legal           (manual) — onboarding.legalPagesReviewed
+ *
+ *   Tier 3 (Operational):
+ *     - team            (auto)  — admin count > 1
+ *     - analytics       (auto)  — store_settings.analytics has any keys
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { AdminApiError } from '../types';
+export type SetupTaskId = 'stripe' | 'products' | 'shipping' | 'tax' | 'logo' | 'domain' | 'legal' | 'team' | 'analytics';
+export type SetupTier = 1 | 2 | 3;
+export interface SetupTask {
+    id: SetupTaskId;
+    tier: SetupTier;
+    status: 'complete' | 'incomplete';
+    /** True when status is determined by data signals (not a manual mark). */
+    auto: boolean;
+    /** True when the task has a "Mark as done" / override button alongside the CTA. */
+    hasManualOverride?: boolean;
+}
+export interface SetupGuideResponse {
+    tasks: SetupTask[];
+    progress: {
+        total: number;
+        complete: number;
+        tier1: {
+            complete: number;
+            total: number;
+        };
+        tier2: {
+            complete: number;
+            total: number;
+        };
+        tier3: {
+            complete: number;
+            total: number;
+        };
+    };
+    /**
+     * Server hint for whether the card should render. Client may further
+     * gate on a per-session minimize toggle.
+     */
+    visibility: 'show' | 'hide';
+    /** ISO timestamp when the merchant permanently dismissed the guide. */
+    dismissedAt: string | null;
+}
+export declare function GET(_request: NextRequest): Promise<NextResponse<SetupGuideResponse | AdminApiError>>;
+export declare function POST(request: NextRequest): Promise<NextResponse<{
+    ok: true;
+} | AdminApiError>>;
+//# sourceMappingURL=setup-guide.d.ts.map

package/dist/admin/api/setup-guide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-guide.d.ts","sourceRoot":"","sources":["../../../src/admin/api/setup-guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAQvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAM7C,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,UAAU,GACV,UAAU,GACV,KAAK,GACL,MAAM,GACN,QAAQ,GACR,OAAO,GACP,MAAM,GACN,WAAW,CAAA;AAEf,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEjC,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,WAAW,CAAA;IACf,IAAI,EAAE,SAAS,CAAA;IACf,MAAM,EAAE,UAAU,GAAG,YAAY,CAAA;IACjC,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAA;IACb,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;QAC1C,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;QAC1C,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAC3C,CAAA;IACD;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AA2BD,wBAAsB,GAAG,CACvB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,kBAAkB,GAAG,aAAa,CAAC,CAAC,CA2J3D;AAiBD,wBAAsB,IAAI,CACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CAmDrD"}

package/dist/admin/api/setup-guide.js

@@ -0,0 +1,235 @@
+/**
+ * @rovela/sdk/admin/api/setup-guide
+ *
+ * Setup-guide orchestrator for the admin dashboard.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/setup-guide/route.ts
+ * export { GET } from '@rovela-ai/sdk/admin/api/setup-guide'
+ *
+ * // app/api/admin/setup-guide/manual-mark/route.ts
+ * export { POST as markSetupTask } from '@rovela-ai/sdk/admin/api/setup-guide'
+ * ```
+ *
+ * GET returns the 9 task statuses + progress + visibility hint in one
+ * round-trip. Auto-detected signals are read live; manual marks live in
+ * `store_settings.onboarding` JSONB and are written via POST.
+ *
+ * Tasks (3 tiers):
+ *   Tier 1 (Open for business — must do):
+ *     - stripe          (auto)  — connected account exists
+ *     - products        (auto)  — onboarding.firstProductTouched OR count > 1
+ *     - shipping        (auto)  — at least one active shipping zone
+ *     - tax             (auto)  — at least one tax zone OR onboarding.taxNoneNeeded
+ *
+ *   Tier 2 (Make it yours):
+ *     - logo            (auto)  — onboarding.logoUploaded
+ *     - domain          (auto)  — NEXT_PUBLIC_APP_URL is not a `.rovela.app` host
+ *     - legal           (manual) — onboarding.legalPagesReviewed
+ *
+ *   Tier 3 (Operational):
+ *     - team            (auto)  — admin count > 1
+ *     - analytics       (auto)  — store_settings.analytics has any keys
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { getSetupGuideSignals, setOnboardingFlag, } from '../../core/db/queries';
+import { hasConnectedAccount } from '../../checkout/stripe/client';
+const MANUAL_MARK_KEYS = [
+    'taxNoneNeeded',
+    'legalPagesReviewed',
+    'firstProductTouched',
+    'logoUploaded',
+    'dismiss',
+    'reopen',
+];
+// =============================================================================
+// GET /api/admin/setup-guide
+// =============================================================================
+export async function GET(_request) {
+    const guard = await requireAdmin({ permission: 'settings.read' });
+    if (!guard.ok)
+        return guard.response;
+    try {
+        const [signals, stripeConnected] = await Promise.all([
+            getSetupGuideSignals(),
+            Promise.resolve(hasConnectedAccount()),
+        ]);
+        const onboarding = signals.storeSettings?.onboarding ?? {};
+        const analyticsKeys = Object.keys(signals.storeSettings?.analytics ?? {});
+        // Tolerance read: legacy stores have manual-mark flags persisted as
+        // JSONB strings ("true") instead of booleans because of an earlier
+        // bug in setOnboardingFlag's text-cast (queries.ts). Accept BOTH
+        // shapes so existing stores self-heal at render time without a SQL
+        // migration. New writes (post-fix) land as proper booleans.
+        const isMarked = (v) => v === true || v === 'true';
+        // --- Custom-domain detection -------------------------------------------
+        // Platform's deploy flow flips NEXT_PUBLIC_APP_URL to the custom domain
+        // only after DNS verification succeeds (see CLAUDE.md §23). The negative
+        // list covers every host pattern the platform manages on the merchant's
+        // behalf — anything outside this list is a real custom domain.
+        //
+        // Without the extended list, the Blaxel sandbox preview URL
+        // (`*.preview.bl.run`) would falsely register as "custom domain
+        // verified" in every editing session.
+        const isManagedHost = (host) => host.endsWith('.rovela.app') ||
+            host.endsWith('.preview.bl.run') ||
+            host.endsWith('.bl.run') ||
+            host.endsWith('.vercel.app') ||
+            host === 'localhost' ||
+            host === '127.0.0.1';
+        const appUrl = process.env.NEXT_PUBLIC_APP_URL ?? '';
+        let appHost = '';
+        try {
+            appHost = appUrl ? new URL(appUrl).hostname : '';
+        }
+        catch {
+            appHost = '';
+        }
+        const customDomainVerified = appHost.length > 0 && !isManagedHost(appHost);
+        // --- Build tasks --------------------------------------------------------
+        const tasks = [
+            // Tier 1
+            {
+                id: 'stripe',
+                tier: 1,
+                status: stripeConnected ? 'complete' : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'products',
+                tier: 1,
+                // Two complete-paths: explicit flag (set by API writeback on any
+                // product create/update) OR more than 1 product (covers the case
+                // where the AI seeded one and the merchant added more without ever
+                // editing the seeded one).
+                status: isMarked(onboarding.firstProductTouched) || signals.productCount > 1
+                    ? 'complete'
+                    : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'shipping',
+                tier: 1,
+                status: signals.shippingZonesCount > 0 ? 'complete' : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'tax',
+                tier: 1,
+                status: signals.taxZonesCount > 0 || isMarked(onboarding.taxNoneNeeded)
+                    ? 'complete'
+                    : 'incomplete',
+                auto: true,
+                hasManualOverride: true, // "I don't collect tax"
+            },
+            // Tier 2
+            {
+                id: 'logo',
+                tier: 2,
+                status: isMarked(onboarding.logoUploaded) ? 'complete' : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'domain',
+                tier: 2,
+                status: customDomainVerified ? 'complete' : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'legal',
+                tier: 2,
+                status: isMarked(onboarding.legalPagesReviewed) ? 'complete' : 'incomplete',
+                auto: false,
+            },
+            // Tier 3
+            {
+                id: 'team',
+                tier: 3,
+                status: signals.adminCount > 1 ? 'complete' : 'incomplete',
+                auto: true,
+            },
+            {
+                id: 'analytics',
+                tier: 3,
+                status: analyticsKeys.length > 0 ? 'complete' : 'incomplete',
+                auto: true,
+            },
+        ];
+        // --- Build progress -----------------------------------------------------
+        const tier1Tasks = tasks.filter((t) => t.tier === 1);
+        const tier2Tasks = tasks.filter((t) => t.tier === 2);
+        const tier3Tasks = tasks.filter((t) => t.tier === 3);
+        const completeOf = (xs) => xs.filter((t) => t.status === 'complete').length;
+        const completeTotal = completeOf(tasks);
+        const total = tasks.length;
+        // --- Visibility ---------------------------------------------------------
+        // Hide once the merchant has explicitly dismissed (which they can only do
+        // after 100% complete). Otherwise show — even at 100%, we want one render
+        // pass with the celebration state, then the client can auto-collapse.
+        const dismissedAt = onboarding.dismissedAt ?? null;
+        const visibility = dismissedAt ? 'hide' : 'show';
+        return NextResponse.json({
+            tasks,
+            progress: {
+                total,
+                complete: completeTotal,
+                tier1: { complete: completeOf(tier1Tasks), total: tier1Tasks.length },
+                tier2: { complete: completeOf(tier2Tasks), total: tier2Tasks.length },
+                tier3: { complete: completeOf(tier3Tasks), total: tier3Tasks.length },
+            },
+            visibility,
+            dismissedAt,
+        });
+    }
+    catch (error) {
+        console.error('[Setup Guide API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch setup guide', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+function isValidKey(value) {
+    return (typeof value === 'string' && MANUAL_MARK_KEYS.includes(value));
+}
+export async function POST(request) {
+    const guard = await requireAdmin({ permission: 'settings.write' });
+    if (!guard.ok)
+        return guard.response;
+    let body;
+    try {
+        body = await request.json();
+    }
+    catch {
+        return NextResponse.json({ error: 'Invalid JSON body', code: 'VALIDATION_ERROR' }, { status: 400 });
+    }
+    if (!isValidKey(body.key)) {
+        return NextResponse.json({
+            error: `Unknown manual-mark key. Allowed: ${MANUAL_MARK_KEYS.join(', ')}`,
+            code: 'VALIDATION_ERROR',
+        }, { status: 400 });
+    }
+    if (typeof body.value !== 'boolean') {
+        return NextResponse.json({ error: '`value` must be a boolean', code: 'VALIDATION_ERROR' }, { status: 400 });
+    }
+    try {
+        if (body.key === 'dismiss') {
+            // Special case: write a timestamp instead of a boolean. We store the
+            // ISO string so an admin tool / merchant support can see WHEN they
+            // dismissed (not just THAT they did).
+            await setOnboardingFlag('dismissedAt', body.value ? new Date().toISOString() : undefined);
+        }
+        else if (body.key === 'reopen') {
+            await setOnboardingFlag('dismissedAt', undefined);
+        }
+        else {
+            // Standard boolean flag
+            await setOnboardingFlag(body.key, body.value);
+        }
+        return NextResponse.json({ ok: true });
+    }
+    catch (error) {
+        console.error('[Setup Guide API] manual-mark error:', error);
+        return NextResponse.json({ error: 'Failed to update setup guide', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=setup-guide.js.map

package/dist/admin/api/setup-guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-guide.js","sourceRoot":"","sources":["../../../src/admin/api/setup-guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAElB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AA4DlE,MAAM,gBAAgB,GAAiC;IACrD,eAAe;IACf,oBAAoB;IACpB,qBAAqB;IACrB,cAAc;IACd,SAAS;IACT,QAAQ;CACT,CAAA;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,QAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAA;IACjE,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAA;IAEpC,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,oBAAoB,EAAE;YACtB,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;SACvC,CAAC,CAAA;QAEF,MAAM,UAAU,GAAoB,OAAO,CAAC,aAAa,EAAE,UAAU,IAAI,EAAE,CAAA;QAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,IAAI,EAAE,CAAC,CAAA;QAEzE,oEAAoE;QACpE,mEAAmE;QACnE,iEAAiE;QACjE,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,MAAM,CAAA;QAEpE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,+DAA+D;QAC/D,EAAE;QACF,4DAA4D;QAC5D,gEAAgE;QAChE,sCAAsC;QACtC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAW,EAAE,CAC9C,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC5B,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,WAAW,CAAA;QAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAA;QACpD,IAAI,OAAO,GAAG,EAAE,CAAA;QAChB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAA;QACd,CAAC;QACD,MAAM,oBAAoB,GACxB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QAE/C,2EAA2E;QAC3E,MAAM,KAAK,GAAgB;YACzB,SAAS;YACT;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBACnD,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,CAAC;gBACP,iEAAiE;gBACjE,iEAAiE;gBACjE,mEAAmE;gBACnE,2BAA2B;gBAC3B,MAAM,EACJ,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC;oBAClE,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,YAAY;gBAClB,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,OAAO,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBAClE,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,CAAC;gBACP,MAAM,EACJ,OAAO,CAAC,aAAa,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;oBAC7D,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,YAAY;gBAClB,IAAI,EAAE,IAAI;gBACV,iBAAiB,EAAE,IAAI,EAAE,wBAAwB;aAClD;YACD,SAAS;YACT;gBACE,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBACrE,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBACxD,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBAC3E,IAAI,EAAE,KAAK;aACZ;YACD,SAAS;YACT;gBACE,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBAC1D,IAAI,EAAE,IAAI;aACX;YACD;gBACE,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;gBAC5D,IAAI,EAAE,IAAI;aACX;SACF,CAAA;QAED,2EAA2E;QAC3E,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,CAAC,EAAe,EAAE,EAAE,CACrC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAA;QAElD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAA;QAE1B,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,IAAI,CAAA;QAClD,MAAM,UAAU,GAAoB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QAEjE,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,KAAK;YACL,QAAQ,EAAE;gBACR,KAAK;gBACL,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;gBACrE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;gBACrE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE;aACtE;YACD,UAAU;YACV,WAAW;SACZ,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QACpD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAWD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAA;IAEpC,IAAI,IAA6B,CAAA;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,IAAI,CACtB;YACE,KAAK,EAAE,qCAAqC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzE,IAAI,EAAE,kBAAkB;SACzB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,qEAAqE;YACrE,mEAAmE;YACnE,sCAAsC;YACtC,MAAM,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC3F,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;QACnD,CAAC;aAAM,CAAC;YACN,wBAAwB;YACxB,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;QAC5D,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACjE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/setup.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @rovela/sdk/admin/api/setup
+ *
+ * Admin setup API route handler for first-time admin account creation.
+ * This endpoint is only accessible when no admins exist for the tenant.
+ */
+import { NextResponse } from 'next/server';
+/**
+ * Success response
+ */
+interface AdminSetupResponse {
+    success: true;
+    message: string;
+    adminId: string;
+}
+/**
+ * Error response
+ */
+interface AdminSetupError {
+    error: string;
+    code: 'SETUP_DISABLED' | 'VALIDATION_ERROR' | 'EMAIL_EXISTS' | 'SERVER_ERROR';
+}
+/**
+ * POST handler for first-time admin setup.
+ *
+ * SECURITY: This endpoint only works when countAdmins() === 0.
+ * Once an owner is created, this endpoint returns 403 Forbidden.
+ *
+ * @example
+ * ```typescript
+ * // app/api/admin/setup/route.ts
+ * export { POST } from '@rovela-ai/sdk/admin/api/setup'
+ * ```
+ *
+ * @example
+ * ```typescript
+ * // Request body
+ * {
+ *   "email": "owner@store.com",
+ *   "password": "securePassword123",
+ *   "name": "Store Owner"
+ * }
+ *
+ * // Success response (201)
+ * {
+ *   "success": true,
+ *   "message": "Admin account created successfully.",
+ *   "adminId": "uuid"
+ * }
+ *
+ * // Error response (403) - Setup already completed
+ * {
+ *   "error": "Admin setup has already been completed.",
+ *   "code": "SETUP_DISABLED"
+ * }
+ * ```
+ */
+export declare function POST(request: Request): Promise<NextResponse<AdminSetupResponse | AdminSetupError>>;
+export {};
+//# sourceMappingURL=setup.d.ts.map

package/dist/admin/api/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/admin/api/setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAa1C;;GAEG;AACH,UAAU,kBAAkB;IAC1B,OAAO,EAAE,IAAI,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,cAAc,GAAG,cAAc,CAAA;CAC9E;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,IAAI,CACxB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,CAAC,kBAAkB,GAAG,eAAe,CAAC,CAAC,CAmH7D"}