@sixtyninecommerce/admin 0.9.0 → 0.11.0

package/dist/tax/index.d.ts

@@ -1,5 +1,5 @@
 import { type Page, type Transport } from '@sixtyninecommerce/core';
-import type { Call } from '../types.js';
+import type { Call, ListOptions } from '../types.js';
 /**
  * The mapping used when no mapping names the country the money is taxed in.
  *
@@ -115,10 +115,85 @@ export interface TaxMappingsModule {
     /** Drop one country's mapping. Silent when there was none. */
     remove(key: string, countryCode: string, options?: Call): Promise<TaxClass>;
 }
+/**
+ * A platform-wide tax category (`Standard`, `Reduced`, `Zero`): what a tax class maps a country
+ * onto, and what a tax rate prices in a zone. Shared by every store.
+ */
+export interface TaxCategory {
+    id: string;
+    name: string;
+    /** The category the platform's own tax setup treats as the default. */
+    isDefault: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * A platform-wide tax rate: the percentage a category is taxed at in a zone, optionally only for
+ * one customer group.
+ */
+export interface TaxRate {
+    id: string;
+    name: string;
+    /** A percentage: `21` is 21 %. Not money. */
+    value: number;
+    /** A disabled rate is never applied. */
+    enabled: boolean;
+    category: {
+        id: string;
+        name: string;
+    };
+    zone: {
+        id: string;
+        name: string;
+    };
+    /** Null for a rate that applies to every customer. */
+    customerGroup: {
+        id: string;
+        name: string;
+    } | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** The platform's tax categories (read-only here; a SuperAdmin writes them through `platform.tax.categories`). */
+export interface TaxCategoriesModule {
+    /**
+     * Every tax category, in id order. Reading needs `ReadTaxCategory`, which every store role holds.
+     *
+     * A `Page`: walk it (`for await`, or `.next()` until null) for the COMPLETE list. Nothing is cut
+     * at a fixed size; every following page keeps the same order and per-call options.
+     *
+     * @effect read
+     */
+    list(options?: ListOptions): Promise<Page<TaxCategory>>;
+}
+/** The platform's tax rates (read-only here; a SuperAdmin writes them through `platform.tax.rates`). */
+export interface TaxRatesModule {
+    /**
+     * Every tax rate, in id order, with its category, zone and customer group. Reading needs
+     * `ReadTaxRate`, which every store role holds.
+     *
+     * A `Page`: walk it (`for await`, or `.next()` until null) for the COMPLETE list. Nothing is cut
+     * at a fixed size (the dashboard used to stop at 100); every following page keeps the same
+     * order and per-call options.
+     *
+     * @effect read
+     */
+    list(options?: ListOptions): Promise<Page<TaxRate>>;
+}
 export interface TaxModule {
     classes: TaxClassesModule;
     mappings: TaxMappingsModule;
+    /** The platform-wide tax categories every store shares. */
+    categories: TaxCategoriesModule;
+    /** The platform-wide tax rates every store shares. */
+    rates: TaxRatesModule;
 }
+/** A {@link TaxCategory} as every read and write answers it (`platform.tax` reuses it). */
+export declare const TAX_CATEGORY_FIELDS = "\n  id\n  name\n  isDefault\n  createdAt\n  updatedAt\n";
+/** A {@link TaxRate} as every read and write answers it (`platform.tax` reuses it). */
+export declare const TAX_RATE_FIELDS = "\n  id\n  name\n  value\n  enabled\n  category { id name }\n  zone { id name }\n  customerGroup { id name }\n  createdAt\n  updatedAt\n";
+export declare const TAX_CATEGORIES_QUERY = "\n  query TaxCategories($options: TaxCategoryListOptions) {\n    taxCategories(options: $options) {\n      items { \n  id\n  name\n  isDefault\n  createdAt\n  updatedAt\n }\n      totalItems\n    }\n  }\n";
+export declare const TAX_RATES_QUERY = "\n  query TaxRates($options: TaxRateListOptions) {\n    taxRates(options: $options) {\n      items { \n  id\n  name\n  value\n  enabled\n  category { id name }\n  zone { id name }\n  customerGroup { id name }\n  createdAt\n  updatedAt\n }\n      totalItems\n    }\n  }\n";
 export declare const TAX_CLASSES_QUERY = "\n  query TaxClasses {\n    taxClasses { \n  id\n  key\n  label\n  mappings {\n    countryCode\n    taxCategoryId\n    taxCategory {\n      id\n      name\n      isDefault\n    }\n  }\n }\n  }\n";
 export declare const TAX_CLASS_QUERY = "\n  query TaxClass($key: String!) {\n    taxClass(key: $key) { \n  id\n  key\n  label\n  mappings {\n    countryCode\n    taxCategoryId\n    taxCategory {\n      id\n      name\n      isDefault\n    }\n  }\n }\n  }\n";
 export declare const UPSERT_TAX_CLASS_MUTATION = "\n  mutation UpsertTaxClass($input: UpsertTaxClassInput!) {\n    upsertTaxClass(input: $input) { \n  id\n  key\n  label\n  mappings {\n    countryCode\n    taxCategoryId\n    taxCategory {\n      id\n      name\n      isDefault\n    }\n  }\n }\n  }\n";

package/dist/tax/index.js

@@ -1,4 +1,5 @@
 import { createPage } from '@sixtyninecommerce/core';
+import { vendureListPage } from '../catalog/types.js';
 /**
  * The mapping used when no mapping names the country the money is taxed in.
  *
@@ -8,6 +9,49 @@ import { createPage } from '@sixtyninecommerce/core';
  * the same one read two ways.
  */
 export const TAX_CLASS_FALLBACK_COUNTRY = '*';
+/** A {@link TaxCategory} as every read and write answers it (`platform.tax` reuses it). */
+export const TAX_CATEGORY_FIELDS = /* GraphQL */ `
+  id
+  name
+  isDefault
+  createdAt
+  updatedAt
+`;
+/** A {@link TaxRate} as every read and write answers it (`platform.tax` reuses it). */
+export const TAX_RATE_FIELDS = /* GraphQL */ `
+  id
+  name
+  value
+  enabled
+  category { id name }
+  zone { id name }
+  customerGroup { id name }
+  createdAt
+  updatedAt
+`;
+export const TAX_CATEGORIES_QUERY = /* GraphQL */ `
+  query TaxCategories($options: TaxCategoryListOptions) {
+    taxCategories(options: $options) {
+      items { ${TAX_CATEGORY_FIELDS} }
+      totalItems
+    }
+  }
+`;
+export const TAX_RATES_QUERY = /* GraphQL */ `
+  query TaxRates($options: TaxRateListOptions) {
+    taxRates(options: $options) {
+      items { ${TAX_RATE_FIELDS} }
+      totalItems
+    }
+  }
+`;
+/**
+ * Vendure's list queries add no ORDER BY of their own, and `skip/take` over an unordered query
+ * can repeat or skip rows between two requests. Every list here is ordered by id, the one unique
+ * key a sort can name (a GraphQL sort input applies its fields in the SCHEMA's order, where `id`
+ * comes first, so `{ name, id }` is id order too), so a walk answers each row exactly once.
+ */
+const BY_ID = { id: 'ASC' };
 const TAX_CLASS_FIELDS = /* GraphQL */ `
   id
   key
@@ -79,6 +123,12 @@ export function createTaxModule(transport) {
                 return data.deleteTaxClass;
             },
         },
+        categories: {
+            list: (options) => vendureListPage(transport, TAX_CATEGORIES_QUERY, 'taxCategories', (skip, take) => ({ options: { skip, take, sort: BY_ID } }), options),
+        },
+        rates: {
+            list: (options) => vendureListPage(transport, TAX_RATES_QUERY, 'taxRates', (skip, take) => ({ options: { skip, take, sort: BY_ID } }), options),
+        },
         mappings: {
             async set(key, countryCode, taxCategoryId, options) {
                 const data = await transport.graphql({

package/dist/tenant/email-style.d.ts

@@ -0,0 +1,102 @@
+import type { Transport } from '@sixtyninecommerce/core';
+import type { Call } from '../types.js';
+/**
+ * The look of every email (and the PDF colours) the active store sends, as the engine applies it.
+ *
+ * The four choice fields name a member of a fixed set, which the engine checks on `set`:
+ * `fontFamily` `system` | `georgia` | `arial` | `verdana`; `logoPosition` `center` | `left`;
+ * `logoVariant` `light` | `dark` | `none` (which Business profile logo heads the email);
+ * `buttonStyle` `filled` | `outline`. They are typed `string` because a store can hold a value
+ * from before that check, which `get` answers as stored and `set` accepts back unchanged.
+ */
+export interface EmailStyle {
+    /** The active store. The style read is always the active store's, also while it inherits. */
+    channelId: string;
+    /**
+     * Buttons and links. Each colour is a hex (`#1a2b3c`, 3 to 8 digits), `rgb(r, g, b)`, a colour
+     * name or `transparent`.
+     */
+    accentColor: string;
+    /** The outer background; `transparent` lets a mail client's dark mode show through. */
+    backgroundColor: string;
+    /** The content area's background. */
+    contentBgColor: string;
+    textColor: string;
+    mutedTextColor: string;
+    fontFamily: string;
+    /** Pixels. */
+    headingFontSize: number;
+    /** Pixels. */
+    bodyFontSize: number;
+    logoPosition: string;
+    /** Pixels. */
+    logoMaxWidth: number;
+    logoVariant: string;
+    /** A button's corner radius, in pixels. */
+    borderRadius: number;
+    /** The content column's width, in pixels. */
+    contentWidth: number;
+    buttonStyle: string;
+}
+/**
+ * The style fields a `set` changes; an omitted field keeps its value. The sizes are whole pixels
+ * (GraphQL `Int`). `channelId` is not an input: `set` leaves it out, so `set({ ...style, … })`
+ * with a style `get` answered works.
+ */
+export type EmailStylePatch = Partial<Omit<EmailStyle, 'channelId'>>;
+/**
+ * `admin.tenant.emailStyle` — the active store's email style (part of the `settings.email` group).
+ * Always the ACTIVE channel; no channel argument.
+ *
+ * **A store that takes `settings.email` from its organization** (`admin.tenant.settingsSources`:
+ * locked, or inheritable and not overridden) sends its organization's style, and `get` answers
+ * that one. `set` then refuses any change; sending back what `get` answered is accepted and
+ * changes nothing. `admin.tenant.settingsSources.override('settings.email')` first to keep a style
+ * of the store's own.
+ */
+export interface EmailStyleModule {
+    /**
+     * The style the store's emails use: its own, its organization's while it inherits, or the
+     * platform's defaults while it has saved none. Needs `ReadSettings`.
+     *
+     * @effect read
+     * @permission ReadSettings
+     */
+    get(options?: Call): Promise<EmailStyle>;
+    /**
+     * Change the fields `patch` names, and answer the whole style as the engine now stores it. The
+     * next email the store sends uses it; emails already sent keep theirs.
+     *
+     * **Coded refusals:**
+     * - `EMAIL_STYLE_COLOR_INVALID` → `ValidationError` (400): a colour that is not a hex, `rgb(…)`,
+     *   colour name or `transparent`. The message names the field.
+     * - `EMAIL_STYLE_FONT_FAMILY_INVALID`, `EMAIL_STYLE_LOGO_POSITION_INVALID`,
+     *   `EMAIL_STYLE_BUTTON_STYLE_INVALID`, `EMAIL_LOGO_VARIANT_INVALID` → `ValidationError` (400):
+     *   a choice outside its set (see {@link EmailStyle}). Sending back the value the store holds
+     *   passes, even one from before the check.
+     * - `BAD_USER_INPUT` → `ValidationError` (400): a key that is not a style field, or a value of
+     *   the wrong type (a size that is not a whole number). The message names it.
+     * - `MANAGED_BY_ORGANIZATION` → `BusinessRuleError` (422): a changed field while the
+     *   organization locks `settings.email`.
+     * - `ORGANIZATION_SETTINGS_INHERITED` → `BusinessRuleError` (422): a changed field while the
+     *   store inherits `settings.email`; `tenant.settingsSources.override` it first.
+     * - `FORBIDDEN` → `PermissionDeniedError` (403): the credential lacks `UpdateSettings`.
+     *
+     * The sizes have no engine bounds yet; a UI should keep its own.
+     *
+     * @effect write
+     * @permission UpdateSettings
+     */
+    set(patch: EmailStylePatch, options?: Call): Promise<EmailStyle>;
+}
+/** The style fields, in the order the engine's input lists them. */
+export declare const EMAIL_STYLE_FIELDS = "\n  channelId\n  accentColor\n  backgroundColor\n  contentBgColor\n  textColor\n  mutedTextColor\n  fontFamily\n  headingFontSize\n  bodyFontSize\n  logoPosition\n  logoMaxWidth\n  logoVariant\n  borderRadius\n  contentWidth\n  buttonStyle\n";
+export declare const EMAIL_STYLE_QUERY = "\n  query EmailStyle {\n    emailStyleConfig { \n  channelId\n  accentColor\n  backgroundColor\n  contentBgColor\n  textColor\n  mutedTextColor\n  fontFamily\n  headingFontSize\n  bodyFontSize\n  logoPosition\n  logoMaxWidth\n  logoVariant\n  borderRadius\n  contentWidth\n  buttonStyle\n }\n  }\n";
+export declare const SET_EMAIL_STYLE_MUTATION = "\n  mutation SetEmailStyle($input: UpdateEmailStyleConfigInput!) {\n    updateEmailStyleConfig(input: $input) { \n  channelId\n  accentColor\n  backgroundColor\n  contentBgColor\n  textColor\n  mutedTextColor\n  fontFamily\n  headingFontSize\n  bodyFontSize\n  logoPosition\n  logoMaxWidth\n  logoVariant\n  borderRadius\n  contentWidth\n  buttonStyle\n }\n  }\n";
+/**
+ * The patch as the engine's `UpdateEmailStyleConfigInput` takes it. Every other key goes through
+ * as given, so the engine refuses a misspelt or unknown one (`BAD_USER_INPUT`) instead of the SDK
+ * dropping it and answering success; `channelId` alone is left out (see {@link EmailStylePatch}).
+ */
+export declare function emailStyleInputOf(patch: EmailStylePatch): Record<string, unknown>;
+export declare function createEmailStyleModule(transport: Transport): EmailStyleModule;

package/dist/tenant/email-style.js

@@ -0,0 +1,72 @@
+/** The style fields, in the order the engine's input lists them. */
+export const EMAIL_STYLE_FIELDS = /* GraphQL */ `
+  channelId
+  accentColor
+  backgroundColor
+  contentBgColor
+  textColor
+  mutedTextColor
+  fontFamily
+  headingFontSize
+  bodyFontSize
+  logoPosition
+  logoMaxWidth
+  logoVariant
+  borderRadius
+  contentWidth
+  buttonStyle
+`;
+export const EMAIL_STYLE_QUERY = /* GraphQL */ `
+  query EmailStyle {
+    emailStyleConfig { ${EMAIL_STYLE_FIELDS} }
+  }
+`;
+export const SET_EMAIL_STYLE_MUTATION = /* GraphQL */ `
+  mutation SetEmailStyle($input: UpdateEmailStyleConfigInput!) {
+    updateEmailStyleConfig(input: $input) { ${EMAIL_STYLE_FIELDS} }
+  }
+`;
+function fromWire(wire) {
+    return {
+        channelId: String(wire.channelId),
+        accentColor: wire.accentColor,
+        backgroundColor: wire.backgroundColor,
+        contentBgColor: wire.contentBgColor,
+        textColor: wire.textColor,
+        mutedTextColor: wire.mutedTextColor,
+        fontFamily: wire.fontFamily,
+        headingFontSize: wire.headingFontSize,
+        bodyFontSize: wire.bodyFontSize,
+        logoPosition: wire.logoPosition,
+        logoMaxWidth: wire.logoMaxWidth,
+        logoVariant: wire.logoVariant,
+        borderRadius: wire.borderRadius,
+        contentWidth: wire.contentWidth,
+        buttonStyle: wire.buttonStyle,
+    };
+}
+/**
+ * The patch as the engine's `UpdateEmailStyleConfigInput` takes it. Every other key goes through
+ * as given, so the engine refuses a misspelt or unknown one (`BAD_USER_INPUT`) instead of the SDK
+ * dropping it and answering success; `channelId` alone is left out (see {@link EmailStylePatch}).
+ */
+export function emailStyleInputOf(patch) {
+    const { channelId: _readOnly, ...input } = patch;
+    return input;
+}
+export function createEmailStyleModule(transport) {
+    return {
+        async get(options) {
+            const data = await transport.graphql({ api: 'admin', query: EMAIL_STYLE_QUERY }, options);
+            return fromWire(data.emailStyleConfig);
+        },
+        async set(patch, options) {
+            const data = await transport.graphql({
+                api: 'admin',
+                query: SET_EMAIL_STYLE_MUTATION,
+                variables: { input: emailStyleInputOf(patch) },
+            }, options);
+            return fromWire(data.updateEmailStyleConfig);
+        },
+    };
+}

package/dist/tenant/email-templates.d.ts

@@ -0,0 +1,66 @@
+import { type Transport } from '@sixtyninecommerce/core';
+import type { Call } from '../types.js';
+import { type EmailStylePatch } from './email-style.js';
+/** One template rendered as the store would send it, filled from the store's own records. */
+export interface EmailPreview {
+    subject: string;
+    /** The whole HTML document, ready for an `<iframe srcdoc>`. */
+    html: string;
+    /** Each recipient field resolved for the sample, as one comma-separated list ('' for none). */
+    recipients: {
+        to: string;
+        cc: string;
+        bcc: string;
+    };
+    /**
+     * `true` when the credential's customer-data level withheld part of the answer (an app
+     * installation below `customerData: full`): `subject` and `html` then read `''`, and so do the
+     * recipients below `identity`. Absent otherwise.
+     */
+    redacted?: true;
+}
+export interface EmailPreviewOptions extends Call {
+    /** The language to render the template's texts and subject in, e.g. `nl`. */
+    languageCode: string;
+    /**
+     * Style fields to preview instead of the stored ones, e.g. a form's unsaved values. Nothing is
+     * saved. A value `tenant.emailStyle.set` would refuse is not refused here: the renderer draws it
+     * with its own fallback.
+     */
+    style?: EmailStylePatch;
+}
+/**
+ * `admin.tenant.emailTemplates` — the active store's email templates (part of the `settings.email`
+ * group). Always the ACTIVE channel; no channel argument.
+ *
+ * Templates are addressed by TYPE (`order_confirmation`, `shipping_confirmation`, …): a template's
+ * id changes when the store starts or stops taking `settings.email` from its organization, its
+ * type never does. While the store inherits, every read answers the organization's template.
+ */
+export interface EmailTemplatesModule {
+    /**
+     * Render the template of `type` as the store would send it now, optionally with unsaved style
+     * changes. Two requests: the template the store uses for `type` is looked up first.
+     *
+     * **The answer is customer data.** The sample is filled from the store's LATEST REAL order and
+     * customer (synthetic values only in a store with none), so `subject`, `html` and the
+     * recipients carry a real buyer's name, email and addresses. Do not log or forward them; a
+     * credential below `customerData: full` gets them withheld ({@link EmailPreview.redacted}).
+     *
+     * For a store on its own settings, the first look-up of a known type the store has no template
+     * of yet creates it from the platform's default (as the dashboard's editor does).
+     *
+     * **Coded refusals:**
+     * - `EMAIL_TEMPLATE_NOT_FOUND` → `NotFoundError` (404): no template of `type` (an unknown type).
+     * - `ENTITY_NOT_FOUND` → `NotFoundError` (404): the template changed between the two requests
+     *   (the store's `settings.email` source moved); ask again.
+     * - `FORBIDDEN` → `PermissionDeniedError` (403): the credential lacks `ReadSettings`.
+     *
+     * @effect read
+     * @permission ReadSettings
+     */
+    preview(type: string, options: EmailPreviewOptions): Promise<EmailPreview>;
+}
+export declare const EMAIL_TEMPLATE_ID_BY_TYPE_QUERY = "\n  query EmailTemplateIdByType($type: String!) {\n    emailTemplateByType(type: $type) { id }\n  }\n";
+export declare const EMAIL_PREVIEW_QUERY = "\n  query EmailPreview(\n    $templateId: ID!\n    $languageCode: String!\n    $styleOverrides: UpdateEmailStyleConfigInput\n  ) {\n    renderEmailPreview(\n      templateId: $templateId\n      languageCode: $languageCode\n      styleOverrides: $styleOverrides\n    ) {\n      subject\n      html\n      recipientTo\n      recipientCc\n      recipientBcc\n    }\n  }\n";
+export declare function createEmailTemplatesModule(transport: Transport): EmailTemplatesModule;

package/dist/tenant/email-templates.js

@@ -0,0 +1,54 @@
+import { NotFoundError } from '@sixtyninecommerce/core';
+import { customerDataField } from '../customers/wire.js';
+import { emailStyleInputOf } from './email-style.js';
+export const EMAIL_TEMPLATE_ID_BY_TYPE_QUERY = /* GraphQL */ `
+  query EmailTemplateIdByType($type: String!) {
+    emailTemplateByType(type: $type) { id }
+  }
+`;
+export const EMAIL_PREVIEW_QUERY = /* GraphQL */ `
+  query EmailPreview(
+    $templateId: ID!
+    $languageCode: String!
+    $styleOverrides: UpdateEmailStyleConfigInput
+  ) {
+    renderEmailPreview(
+      templateId: $templateId
+      languageCode: $languageCode
+      styleOverrides: $styleOverrides
+    ) {
+      subject
+      html
+      recipientTo
+      recipientCc
+      recipientBcc
+    }
+  }
+`;
+export function createEmailTemplatesModule(transport) {
+    return {
+        async preview(type, options) {
+            const { languageCode, style, ...call } = options;
+            const found = await transport.graphql({ api: 'admin', query: EMAIL_TEMPLATE_ID_BY_TYPE_QUERY, variables: { type } }, call);
+            const templateId = found.emailTemplateByType?.id;
+            if (!templateId) {
+                throw new NotFoundError({
+                    code: 'EMAIL_TEMPLATE_NOT_FOUND',
+                    message: `The store has no email template of type "${type}".`,
+                    status: 404,
+                    service: 'vendure',
+                });
+            }
+            const { value, mark } = await customerDataField(transport, EMAIL_PREVIEW_QUERY, 'renderEmailPreview', {
+                templateId,
+                languageCode,
+                ...(style !== undefined ? { styleOverrides: emailStyleInputOf(style) } : {}),
+            }, call);
+            return mark({
+                subject: value.subject,
+                html: value.html,
+                recipients: { to: value.recipientTo, cc: value.recipientCc, bcc: value.recipientBcc },
+            });
+        },
+    };
+}

package/dist/tenant/notifications.d.ts

@@ -38,8 +38,8 @@ export interface NotificationEventConfig {
     event: string;
     /**
      * `false` switches the email off altogether; nothing is logged for it. Always
-     * `true` for `password_reset`, `email_change` and `account_setup`, which
-     * cannot be switched off.
+     * `true` for `password_reset`, `email_change`, `account_setup` and
+     * `gift_card_issued`, which cannot be switched off.
      */
     enabled: boolean;
     sender: NotificationSender;
@@ -60,20 +60,23 @@ export interface NotificationEventConfig {
 export interface UpdateNotificationEventConfigInput {
     /**
      * `false` is refused with `EVENT_ALWAYS_ENABLED` ({@link ValidationError}) on
-     * `password_reset`, `email_change` and `account_setup`: each is the only way
-     * a customer resets a password (or sets the first one on an imported
-     * account), confirms a new address, or finishes a storefront registration,
-     * so they are always sent. `magic_link_login` and `customer_invite` can be
-     * switched off.
+     * `password_reset`, `email_change`, `account_setup` and `gift_card_issued`:
+     * each is the only way a customer resets a password (or sets the first one
+     * on an imported account), confirms a new address, finishes a storefront
+     * registration, or receives the code of a gift card they paid for (the
+     * platform keeps only its hash), so they are always sent. `magic_link_login`
+     * and `customer_invite` can be switched off.
      */
     enabled?: boolean;
     /**
      * `none` is refused on the identity emails — the `account` category:
      * password reset, magic link, invitation, email change, email and chat
-     * verification — with `EVENT_ALWAYS_PLATFORM_SENT` ({@link ValidationError}).
-     * Each carries a one-time credential only the platform can issue, and no
-     * platform event carries one, so there is no event your system could send it
-     * from. What you control there is where its link lands (your head's URL).
+     * verification — and on `gift_card_issued`, with `EVENT_ALWAYS_PLATFORM_SENT`
+     * ({@link ValidationError}). Each carries a one-time credential, or a gift
+     * card's code, only the platform can issue, and no platform event carries
+     * one (`stored_value.gift_card.issued` names the card, never its code), so
+     * there is no event your system could send it from. What you control there
+     * is where its link lands (your head's URL).
      *
      * `none` is also refused on an email whose `replacementEventTypes` is `null`,
      * with `NO_REPLACEMENT_EVENT` ({@link ValidationError}): no platform event is
@@ -87,6 +90,8 @@ export interface UpdateNotificationEventConfigInput {
      * links or codes, and one login serves the person in every store, so they go to
      * the account holder alone: `to` is the `customer_email` variable, `cc` and
      * `bcc` are empty, and `list` answers exactly that whatever was stored before.
+     * So does `gift_card_issued`: whoever holds a copy of its code can spend the
+     * card, so it goes to the buyer alone.
      * Any other list on them is refused with `IDENTITY_EMAIL_RECIPIENTS_FIXED`
      * ({@link ValidationError}); resending the lists `list` answered is accepted.
      */
@@ -119,18 +124,19 @@ export interface UpdateNotificationEventConfigInput {
  *
  * **Coded refusals**, GraphQL errors mapped by `core`:
  * - `EVENT_ALWAYS_PLATFORM_SENT` → {@link ValidationError}: `sender: 'none'` on
- *   an identity email. The message names the event; `details[0].field` is
- *   `/sender`.
+ *   an identity email or `gift_card_issued`. The message names the event;
+ *   `details[0].field` is `/sender`.
  * - `EVENT_ALWAYS_ENABLED` → {@link ValidationError}: `enabled: false` on
- *   `password_reset`, `email_change` or `account_setup`. The message names the
- *   event and why it cannot be switched off; `details[0].field` is `/enabled`.
+ *   `password_reset`, `email_change`, `account_setup` or `gift_card_issued`.
+ *   The message names the event and why it cannot be switched off;
+ *   `details[0].field` is `/enabled`.
  * - `NO_REPLACEMENT_EVENT` → {@link ValidationError}: `sender: 'none'` on an
  *   email no emitted platform event replaces (`replacementEventTypes: null`).
  *   The message names the event, and the event planned to replace it when one
  *   is; `details[0].field` is `/sender`.
  * - `IDENTITY_EMAIL_RECIPIENTS_FIXED` → {@link ValidationError}: a recipient
- *   list on an identity email (or `new_customer`) that names anyone but the
- *   account holder. `details[].field` names each offending list
+ *   list on an identity email (or `new_customer`, or `gift_card_issued`) that
+ *   names anyone but the account holder. `details[].field` names each offending list
  *   (`/recipientTo`, `/recipientCc`, `/recipientBcc`).
  * - `INVALID_NOTIFICATION_SENDER` → {@link ValidationError}.
  * - `NOTIFICATION_EVENT_NOT_FOUND` → {@link NotFoundError}: no such event key.

package/dist/tenant/settings-sources.d.ts

@@ -97,7 +97,7 @@ export interface SettingsSourcesModule {
     assets(group: SettingsGroup | (string & {}), call?: Call): Promise<AssetFile[]>;
 }
 export declare const CHANNEL_SETTINGS_SOURCES_QUERY = "\n  query ChannelSettingsSources {\n    channelSettingsSources { \n  group\n  source\n  locked\n  overridden\n  inheritable\n  organizationName\n  values\n }\n  }\n";
-export declare const CHANNEL_SETTINGS_ASSETS_QUERY = "\n  query ChannelSettingsAssets($group: String!) {\n    channelSettingsAssets(group: $group) { \n  id\n  createdAt\n  updatedAt\n  name\n  type\n  mimeType\n  fileSize\n  width\n  height\n  source\n  preview\n  focalPoint {\n    x\n    y\n  }\n  tags {\n    value\n  }\n }\n  }\n";
+export declare const CHANNEL_SETTINGS_ASSETS_QUERY = "\n  query ChannelSettingsAssets($group: String!) {\n    channelSettingsAssets(group: $group) { \n  id\n  createdAt\n  updatedAt\n  name\n  type\n  mimeType\n  fileSize\n  width\n  height\n  source\n  preview\n  focalPoint {\n    x\n    y\n  }\n  tags {\n    value\n  }\n  customFields {\n    altText\n  }\n }\n  }\n";
 export declare const OVERRIDE_ORGANIZATION_SETTINGS_MUTATION = "\n  mutation OverrideOrganizationSettings($group: String!) {\n    overrideOrganizationSettings(group: $group) { \n  group\n  source\n  locked\n  overridden\n  inheritable\n  organizationName\n  values\n }\n  }\n";
 export declare const INHERIT_ORGANIZATION_SETTINGS_MUTATION = "\n  mutation InheritOrganizationSettings($group: String!) {\n    inheritOrganizationSettings(group: $group) { \n  group\n  source\n  locked\n  overridden\n  inheritable\n  organizationName\n  values\n }\n  }\n";
 export declare function createSettingsSourcesModule(transport: Transport): SettingsSourcesModule;

package/dist/tenant/time-zone.d.ts

@@ -0,0 +1,17 @@
+import type { Transport } from '@sixtyninecommerce/core';
+import type { Call } from '../types.js';
+/**
+ * `admin.tenant.timeZone(call?)`: the ACTIVE store's IANA time zone (`Europe/Amsterdam`,
+ * `America/New_York`, …) as the engine resolves it: the store's own setting, or
+ * `Europe/Amsterdam` when it has none or an invalid one. It is the zone the API counts calendar
+ * days in (a requested delivery day, "shipped today", an invoice date), so render dates and
+ * "today" in it, never in the browser's or the server's own zone, and never re-check the
+ * setting yourself: the engine owns the rule.
+ *
+ * Any signed-in caller of the store may read it. No channel argument: the tenant is the store.
+ *
+ * @effect read
+ */
+export type TenantTimeZoneReader = (call?: Call) => Promise<string>;
+export declare const STORE_TIME_ZONE_QUERY = "\n  query StoreTimeZone {\n    storeTimeZone\n  }\n";
+export declare function createTenantTimeZoneReader(transport: Transport): TenantTimeZoneReader;

package/dist/tenant/time-zone.js

@@ -0,0 +1,11 @@
+export const STORE_TIME_ZONE_QUERY = /* GraphQL */ `
+  query StoreTimeZone {
+    storeTimeZone
+  }
+`;
+export function createTenantTimeZoneReader(transport) {
+    return async (call) => {
+        const data = await transport.graphql({ api: 'admin', query: STORE_TIME_ZONE_QUERY }, call);
+        return data.storeTimeZone;
+    };
+}

package/dist/types.d.ts

@@ -5,15 +5,22 @@ export interface Call {
      * Sent as `Idempotency-Key` on a REST write. On a GraphQL one it is sent as
      * an ARGUMENT — the Admin API has no header for it — and only the mutations
      * that declare one act on it. Today those are the money mutations
-     * `payments.record`, `orders.park`, `orders.settle` and all three
+     * `payments.record`, `orders.park`, `orders.settle`, `orders.cancelWithMoney` and all three
      * `orders.surcharges.*`, plus `payments.providers.completeOnboarding`,
      * `payments.providers.terminals.provision`, `stock.adjust`,
      * `hooks.assignments.assign`, `customers.upsertByExternalRef`,
      * `customers.groups.replaceMembers`, `pricing.coupons.apply` / `remove`,
-     * `orders.setLinePrices` / `setOneTimeDiscounts`,
+     * `orders.setLinePrices` / `setOneTimeDiscounts`, `orders.correctFulfillmentQuantities`,
      * `pos.sale.applyCouponCode` / `removeCouponCode`, `storedValue.issue` / `adjust` /
-     * `redeem`, `apps.releaseFieldGroup` and `catalog.products.bulk` (which mints one when
-     * omitted). Repeating one under the same key
+     * `redeem`, `apps.releaseFieldGroup`, `catalog.products.bulk` and `orders.bulk` (both mint
+     * one when omitted), `catalog.products.save`, `orders.drafts.saveAddresses`,
+     * `orders.drafts.place` and `orders.drafts.cloneFrom` (both mint one when omitted),
+     * `fulfillments.create` and `fulfillments.warehouse.append` (both mint one when omitted),
+     * `quotes.convertToOrder` (mints one when omitted), `documents.issuePartialCreditNote` (mints
+     * one when omitted), and the
+     * accounts-receivable money doors `payments.ar.recordPayment` / `recordPrepaidDrawdown` /
+     * `directDebit.collectNow` and `documents.ar.issueCreditNote` / `generateInvoice` /
+     * `generateStatement`, and `returns.settle`. Repeating one under the same key
      * returns the first call's result instead of moving the money again; a
      * DIFFERENT request under the same key is refused with a `ConflictError`
      * (409) coded `IDEMPOTENCY_CONFLICT`, and a repeat that arrives while the
@@ -54,6 +61,46 @@ export interface ListOptions extends Call {
     after?: string;
     limit?: number;
 }
+/**
+ * One argument a configurable operation takes, as the engine publishes its definition: a
+ * payment handler's `apiKey`, an eligibility checker's `customerGroupIds`.
+ */
+export interface ConfigArgDefinition {
+    name: string;
+    /** The value's type as the engine names it: `string`, `int`, `float`, `boolean`, `datetime`, `ID`. */
+    type: string;
+    /** A list is sent as one JSON-encoded string, like every argument value. */
+    list: boolean;
+    /**
+     * NOT the enforced rule, in either direction. The engine publishes `true` for every argument
+     * whose declaration merely omits the flag, including ones nothing enforces, and can publish
+     * `false` for one a write then refuses. Never gate a form or a request on it: send what you
+     * have and read the engine's refusal.
+     */
+    required: boolean;
+    /** The declared default as JSON, or `null` when the argument has none. */
+    defaultValue: unknown;
+    /** In the language of the request; `null` when the declaration gives none. */
+    label: string | null;
+    /** In the language of the request; `null` when the declaration gives none. */
+    description: string | null;
+    /**
+     * How a form should render the argument, as declared: `{ component: 'password-form-input' }`
+     * marks a credential, `options` a fixed choice. `null` when nothing is declared.
+     */
+    ui: Record<string, unknown> | null;
+}
+/**
+ * A configurable operation the engine has registered (a payment handler, an eligibility
+ * checker, a shipping calculator, a promotion action): the `code` a stored operation names, and
+ * the arguments it takes.
+ */
+export interface ConfigurableOperationDefinition {
+    code: string;
+    /** What the operation does, in the language of the request. */
+    description: string;
+    args: ConfigArgDefinition[];
+}
 /** One channel the signed-in principal holds a role on. */
 export interface MeChannel {
     id: string;