@viu/emporix-sdk 2.33.5 → 2.35.0

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # @viu/emporix-sdk
 
+## 2.35.0
+
+### Minor Changes
+
+- [#273](https://github.com/viuteam/emporix-sdk/pull/273) [`23406dc`](https://github.com/viuteam/emporix-sdk/commit/23406dc3b99bde255c3c01157f3ee6093bbc490a) Thanks [@amnael1](https://github.com/amnael1)! - feat(sdk): expose the customer password-migration endpoints
+
+  `client.customerAdmin` gains the four operations Emporix added to the Customer
+  Service: `getPasswordMigrationRetention`, `configurePasswordMigrationRetention`
+  and `deletePasswordMigrationRetention` for the retention window, plus
+  `importCustomers` for the bulk import.
+
+  Together they cover migrating customers off a legacy shop. Configure a retention
+  window, import customers carrying `legacyAuth`, and each legacy password hash is
+  replaced with an Emporix hash on that customer's first successful login. Without
+  an active config the import is rejected — the order matters.
+
+  `importCustomers` answers **207 Multi-Status**, so per-item failures arrive as
+  data with their own `code` rather than throwing. Inspect every entry.
+
+  All four need a service token with `customer.import_read` or
+  `customer.import_manage`, so there are no React hooks — see `docs/customer-admin.md`.
+
+### Patch Changes
+
+- [#272](https://github.com/viuteam/emporix-sdk/pull/272) [`87552e7`](https://github.com/viuteam/emporix-sdk/commit/87552e72d5e2de7d1523c3664c49d3cd2f643214) Thanks [@viu-release-bot](https://github.com/apps/viu-release-bot)! - chore(sdk): sync generated types with upstream Emporix API specs
+
+  Updated services: customer-service
+
+## 2.34.0
+
+### Minor Changes
+
+- [#269](https://github.com/viuteam/emporix-sdk/pull/269) [`1cc5094`](https://github.com/viuteam/emporix-sdk/commit/1cc5094f092529494c166fbf8e5a315adac127b2) Thanks [@amnael1](https://github.com/amnael1)! - Fix the JSON-Patch `op` enum for the Approval service. The upstream spec ships
+  `ADD`/`REMOVE`/`REPLACE`, which the live API rejects with 400; `ApprovalPatch['op']`
+  is now `'add' | 'remove' | 'replace'`. Callers that worked around the wrong type
+  with a cast can drop it. Measured against tenant `viu` on 2026-08-18.
+
+- [#269](https://github.com/viuteam/emporix-sdk/pull/269) [`c2e9993`](https://github.com/viuteam/emporix-sdk/commit/c2e999351b0ca99ae96b8615957cb2d168c2ee34) Thanks [@amnael1](https://github.com/amnael1)! - Add `approvalStatusPatch(status, approverComment?)`, which builds the JSON-Patch for
+  an approval decision. It encodes two measured quirks: the op is lowercase, and the
+  approver comment needs `add` rather than `replace` — `replace` on the absent
+  `approverComment` field answers APPROVAL-400010 and, because PATCH is atomic, drops
+  the status change with it.
+
+- [#269](https://github.com/viuteam/emporix-sdk/pull/269) [`071cb9c`](https://github.com/viuteam/emporix-sdk/commit/071cb9c6022c3dc4cd1f99f114c208fc057344f1) Thanks [@amnael1](https://github.com/amnael1)! - Add `productYrn(tenant, productId)`, the inverse of `productIdFromYrn` and the form
+  `carts.addItem` requires. Also notes in `productIdFromYrn` that approval resource
+  items carry a bare product id rather than a YRN, so callers need the `itemId` fallback.
+
+### Patch Changes
+
+- [#269](https://github.com/viuteam/emporix-sdk/pull/269) [`ab8c607`](https://github.com/viuteam/emporix-sdk/commit/ab8c6078349738867877c3600f3ef52880c82439) Thanks [@amnael1](https://github.com/amnael1)! - Document measured Approval-service behaviour: `createApproval` consumes the cart
+  (404 from the Cart API, not restored by decline or withdrawal), `checkPermitted`
+  answers `true` for the approver as well as the requester, and the approver comment
+  needs `add`. Also corrects the `useCreateApproval` example, which showed the payload
+  nested under `resource` and omitted the mandatory `action`, `approver` and `details`.
+
+- [#269](https://github.com/viuteam/emporix-sdk/pull/269) [`75bf3ef`](https://github.com/viuteam/emporix-sdk/commit/75bf3efae89dbcd19283dc9ac8f6cc609e72ee7b) Thanks [@amnael1](https://github.com/amnael1)! - Warn when `context` is passed at the top level of `EmporixConfig` instead of inside
+  `credentials.storefront`. It was silently dropped, after which `matchByContext`
+  returns an empty list with no error because the anonymous token carries no site,
+  currency or country. `logger: false` is honoured as a request for silence.
+
 ## 2.33.5
 
 ### Patch Changes

package/dist/index.cjs

@@ -90,6 +90,17 @@ function errorFromResponse(status, message, body) {
 // src/core/config.ts
 var DEFAULT_HOST = "https://api.emporix.io";
 var TENANT_RE = /^[a-z][a-z0-9]{2,15}$/;
+function warnOnMisplacedContext(input) {
+  if (!("context" in input)) return;
+  const logger = input.logger;
+  if (logger === false) return;
+  const message = "EmporixConfig has no top-level `context` \u2014 it is being ignored. Move it into `credentials.storefront.context`, otherwise the anonymous token carries no site/currency/country and price matching returns an empty list without erroring.";
+  if (logger && typeof logger.warn === "function") {
+    logger.warn(message);
+    return;
+  }
+  console.warn(`[emporix] ${message}`);
+}
 function validateConfig(input) {
   if (!TENANT_RE.test(input.tenant)) {
     throw new Error(
@@ -99,6 +110,7 @@ function validateConfig(input) {
   if (!input.credentials) {
     throw new Error("credentials is required (provide at least one of backend/storefront/custom)");
   }
+  warnOnMisplacedContext(input);
   return {
     tenant: input.tenant,
     host: input.host ?? DEFAULT_HOST,
@@ -983,7 +995,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "2.33.5";
+var version = "2.35.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -8378,6 +8390,9 @@ var CustomerAdminService = class {
   customerPath(customerNumber) {
     return `${this.base()}/${encodeURIComponent(customerNumber)}`;
   }
+  configPath() {
+    return `/customer/${this.ctx.tenant}/config/password-migration-retention`;
+  }
   addressPath(customerNumber, addressId) {
     return `${this.customerPath(customerNumber)}/addresses/${encodeURIComponent(addressId)}`;
   }
@@ -8468,6 +8483,59 @@ var CustomerAdminService = class {
       query: { tags: tags.join(",") }
     });
   }
+  // --- Password-migration retention ---
+  /**
+   * Retrieves the tenant's password-migration retention config. Requires the
+   * `customer.import_read` scope. An unconfigured tenant answers with an empty
+   * object rather than a 404.
+   */
+  async getPasswordMigrationRetention(auth2 = SERVICE35) {
+    return this.ctx.http.request({
+      method: "GET",
+      path: this.configPath(),
+      auth: auth2
+    });
+  }
+  /**
+   * Creates or updates the retention config (`POST`). Requires the
+   * `customer.import_manage` scope. **Call this before importing customers with
+   * `legacyAuth`** — that import is rejected without an active config. Re-POST with
+   * an earlier `retentionEndDate` to shorten a running window.
+   */
+  async configurePasswordMigrationRetention(input, auth2 = SERVICE35) {
+    return this.ctx.http.request({
+      method: "POST",
+      path: this.configPath(),
+      auth: auth2,
+      body: input
+    });
+  }
+  /**
+   * Removes the retention config. Requires the `customer.import_manage` scope.
+   * Intended for after the migration window: when the window ends, unmigrated
+   * accounts need a password reset and their legacy credentials are cleared.
+   */
+  async deletePasswordMigrationRetention(auth2 = SERVICE35) {
+    await this.ctx.http.request({ method: "DELETE", path: this.configPath(), auth: auth2 });
+  }
+  // --- Bulk import ---
+  /**
+   * Bulk-imports customers (`POST /customers/import`). Requires the
+   * `customer.import_manage` scope.
+   *
+   * Responds **207 Multi-Status**: per-item failures do **not** throw — inspect each
+   * entry's `code`. Each item must carry exactly one of `account.passwordHash` or
+   * `account.legacyAuth`, and importing `legacyAuth` requires an active retention
+   * config (see `configurePasswordMigrationRetention`).
+   */
+  async importCustomers(input, auth2 = SERVICE35) {
+    return this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/import`,
+      auth: auth2,
+      body: input
+    });
+  }
 };
 
 // src/services/approval.ts
@@ -8543,6 +8611,15 @@ var ApprovalService = class {
     });
   }
 };
+function approvalStatusPatch(status, approverComment) {
+  const comment = approverComment?.trim() ?? "";
+  return [
+    { op: "replace", path: "/status", value: status },
+    // `as const` on both fields: the generated type narrows `path` to an enum too, so
+    // a widened `string` from the spread would not be assignable.
+    ...comment !== "" ? [{ op: "add", path: "/approverComment", value: comment }] : []
+  ];
+}
 
 // src/client.ts
 var EmporixClient = class {
@@ -8733,6 +8810,9 @@ function productIdFromYrn(yrn) {
   const semi = yrn.lastIndexOf(";");
   return semi >= 0 ? yrn.slice(semi + 1) : "";
 }
+function productYrn(tenant, productId) {
+  return `urn:yaas:hybris:product:product:${tenant};${productId}`;
+}
 
 exports.AiService = AiService;
 exports.ApprovalService = ApprovalService;
@@ -8800,6 +8880,7 @@ exports.TenantConfigService = TenantConfigService;
 exports.UnitHandlingService = UnitHandlingService;
 exports.VendorService = VendorService;
 exports.WebhookService = WebhookService;
+exports.approvalStatusPatch = approvalStatusPatch;
 exports.auth = auth;
 exports.createConsoleLogger = createConsoleLogger;
 exports.createCookieBackedStorage = createCookieBackedStorage;
@@ -8812,6 +8893,7 @@ exports.iterateAll = iterateAll;
 exports.parseAnonymousSession = parseAnonymousSession;
 exports.pickFee = pickFee;
 exports.productIdFromYrn = productIdFromYrn;
+exports.productYrn = productYrn;
 exports.redact = redact;
 exports.resolveQuery = resolveQuery;
 exports.resolveToken = resolveToken;