@viu/emporix-sdk 2.7.0 → 2.8.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @viu/emporix-sdk
 
+## 2.8.0
+
+### Minor Changes
+
+- [#98](https://github.com/viuteam/emporix-sdk/pull/98) [`108a724`](https://github.com/viuteam/emporix-sdk/commit/108a724f1d4342532ae8d575faa501d54d8c591f) Thanks [@amnael1](https://github.com/amnael1)! - Support partial cart-item updates. `client.carts.updateItem(cartId, itemId,
+patch, auth, { partial: true })` now sends `?partial=true`, so a quantity-only
+  change can be `{ quantity }` instead of a full item replace (which otherwise
+  requires re-sending `itemYrn` + the `price` row). The React
+  `useCartMutations().updateItem` mutation accepts an optional `partial` flag in
+  its variables. Default behavior is unchanged.
+
 ## 2.7.0
 
 ### Minor Changes

package/dist/cart.cjs

@@ -131,13 +131,19 @@ var CartService = class {
       body: items
     });
   }
-  /** Updates an item. */
-  async updateItem(cartId, itemId, patch, auth) {
+  /**
+   * Updates an item. By default this is a **full replace** — the server expects
+   * the complete item (e.g. `itemYrn` + the `price` row). Pass
+   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a
+   * quantity-only change with just `{ quantity }`.
+   */
+  async updateItem(cartId, itemId, patch, auth, opts = {}) {
     return this.ctx.http.request({
       method: "PUT",
       path: `${this.base()}/${cartId}/items/${itemId}`,
       auth: requireCartAuth(auth),
-      body: patch
+      body: patch,
+      ...opts.partial ? { query: { partial: "true" } } : {}
     });
   }
   /** Removes an item. */

package/dist/cart.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/errors.ts","../src/services/cart.ts"],"names":[],"mappings":";;;AACA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,cAAA;AAAA,EAAgB,eAAA;AAAA,EAAiB,OAAA;AAAA,EAAS,eAAA;AAAA,EAAiB,WAAA;AAAA,EAC3D,QAAA;AAAA,EAAU,eAAA;AAAA,EAAiB,eAAA;AAAA,EAAiB;AAC9C,CAAC,CAAA;AAED,SAAS,MAAM,IAAA,EAAwB;AACrC,EAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,GAAG,OAAO,IAAA,CAAK,IAAI,KAAK,CAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA,EAAG;AACpE,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,kBAAA,CAAmB,GAAA,CAAI,CAAA,CAAE,aAAa,CAAA,GAAI,gBAAA,GAAmB,KAAA,CAAM,CAAC,CAAA;AAAA,IAC/E;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAGO,IAAM,YAAA,GAAN,cAA2B,KAAA,CAAM;AAAA,EAC7B,MAAA;AAAA,EACA,IAAA;AAAA,EACT,WAAA,CAAY,OAAA,EAAiB,MAAA,EAAiB,IAAA,EAAgB;AAC5D,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AACvB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,GAAA,CAAA,MAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AAAA;AAAA,EAEA,MAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAE;AAAA,EAC/F;AACF,CAAA;AAOO,IAAM,oBAAA,GAAN,cAAmC,YAAA,CAAa;AAAC,CAAA;AAEjD,IAAM,sBAAA,GAAN,cAAqC,YAAA,CAAa;AAAC,CAAA;;;ACT1D,SAAS,gBAAgB,IAAA,EAA4C;AACnE,EAAA,IAAI,SAAS,IAAA,CAAK,IAAA,KAAS,cAAc,IAAA,CAAK,IAAA,KAAS,cAAc,OAAO,IAAA;AAC5E,EAAA,MAAM,IAAI,sBAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,oBAAoB,IAAA,EAA4C;AACvE,EAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AAC7C,EAAA,MAAM,IAAI,uBAAuB,wDAAwD,CAAA;AAC3F;AAGO,IAAM,cAAN,MAAkB;AAAA,EACvB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAErB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,MAAA,CAAA;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,SAAS;AAAC,KACjB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,MAAA,EAAgB,IAAA,EAAkC;AAC1D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,UAAA,CACJ,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAyC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACzE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,KAAA,CAAM,OAAO,IAAA,CAAK,IAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AACjE,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA;AAChC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QACvC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,KAAA;AAAA,QACA,IAAA,EAAM,gBAAgB,IAAI;AAAA,OAC3B,CAAA;AAAA,IACH,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,CAAA,YAAa,sBAAsB,OAAO,IAAA;AAC9C,MAAA,MAAM,CAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAA,CACJ,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CACJ,MAAA,EACA,MAAA,EACA,OACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,MAAA,EAAgB,IAAA,EAAkC;AAC5D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,WAAA,CAAY,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AAChF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,QAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,EAAE,IAAA;AAAK,KACd,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,YAAA,CAAa,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,YAAY,IAAI,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,kBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,iBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,iBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,gBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CACJ,cAAA,EACA,gBAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,cAAc,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA,EAAM,oBAAoB,IAAI,CAAA;AAAA,MAC9B,IAAA,EAAM,EAAE,KAAA,EAAO,gBAAA;AAAiB,KACjC,CAAA;AAAA,EACH;AACF","file":"cart.cjs","sourcesContent":["/** Keys whose values are stripped from any serialised error body. */\nconst REDACTED_BODY_KEYS = new Set([\n  \"access_token\", \"refresh_token\", \"token\", \"customertoken\", \"saastoken\",\n  \"secret\", \"client_secret\", \"authorization\", \"password\",\n]);\n\nfunction scrub(body: unknown): unknown {\n  if (Array.isArray(body)) return body.map(scrub);\n  if (body && typeof body === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(body as Record<string, unknown>)) {\n      out[k] = REDACTED_BODY_KEYS.has(k.toLowerCase()) ? \"***redacted***\" : scrub(v);\n    }\n    return out;\n  }\n  return body;\n}\n\n/** Base class for every error thrown by the SDK. */\nexport class EmporixError extends Error {\n  readonly status: number | undefined;\n  readonly body: unknown;\n  constructor(message: string, status?: number, body?: unknown) {\n    super(message);\n    this.name = new.target.name;\n    this.status = status;\n    this.body = body;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n  /** Safe serialisation — token-like body fields are redacted. */\n  toJSON(): Record<string, unknown> {\n    return { name: this.name, message: this.message, status: this.status, body: scrub(this.body) };\n  }\n}\n\n/** 401 — authentication failed or token expired. */\nexport class EmporixAuthError extends EmporixError {}\n/** 403 — authenticated but not permitted. */\nexport class EmporixForbiddenError extends EmporixError {}\n/** 404 — resource not found. */\nexport class EmporixNotFoundError extends EmporixError {}\n/** 400/422 — request validation failed. */\nexport class EmporixValidationError extends EmporixError {}\n/** 5xx — server-side failure. */\nexport class EmporixServerError extends EmporixError {}\n\n/**\n * 403 with a `missing scope: <name>` hint in the body's `details` array.\n * Subclasses {@link EmporixForbiddenError} so existing 403 catches still work.\n */\nexport class EmporixInsufficientScopeError extends EmporixForbiddenError {\n  readonly requiredScope: string | undefined;\n  constructor(message: string, status: number, body: unknown, requiredScope?: string) {\n    super(message, status, body);\n    this.requiredScope = requiredScope;\n  }\n}\n\nconst SCOPE_HINT_RE = /missing scope[: ]+([a-z0-9._-]+)/i;\n\nfunction extractRequiredScope(body: unknown): string | undefined {\n  if (body && typeof body === \"object\" && \"details\" in body) {\n    const details = (body as { details?: unknown }).details;\n    if (Array.isArray(details)) {\n      for (const d of details) {\n        if (typeof d === \"string\") {\n          const m = d.match(SCOPE_HINT_RE);\n          if (m) return m[1];\n        }\n      }\n    }\n  }\n  return undefined;\n}\n\n/** Maps an HTTP status to the matching {@link EmporixError} subclass. */\nexport function errorFromResponse(status: number, message: string, body: unknown): EmporixError {\n  if (status === 401) return new EmporixAuthError(message, status, body);\n  if (status === 403) {\n    const scope = extractRequiredScope(body);\n    if (scope) return new EmporixInsufficientScopeError(message, status, body, scope);\n    return new EmporixForbiddenError(message, status, body);\n  }\n  if (status === 404) return new EmporixNotFoundError(message, status, body);\n  if (status === 400 || status === 422) return new EmporixValidationError(message, status, body);\n  if (status >= 500) return new EmporixServerError(message, status, body);\n  return new EmporixError(message, status, body);\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixNotFoundError, EmporixValidationError } from \"../core/errors\";\nimport type {\n  Cart as GeneratedCart,\n  CreateCart,\n  CreatedCart,\n  CartItemRequest,\n  UpdateCartItem,\n  AddressRequest,\n  BatchResponse as GeneratedBatchResponse,\n  SingleBatchResponse as GeneratedSingleBatchResponse,\n} from \"../generated/cart\";\n\n/** A cart as returned by the Cart service (all generated fields). */\nexport type Cart = GeneratedCart;\n\n/** The cart-create response (`{ cartId, yrn }`, generated). */\nexport type CartCreated = CreatedCart;\n\n/** Generated request bodies (caller sends the exact wire shape). */\nexport type CreateCartInput = CreateCart;\nexport type CartItemInput = CartItemRequest;\nexport type CartItemUpdate = UpdateCartItem;\n\n/** Per-entry result of `addItemsBatch`. `status` is HTTP-style per entry (e.g. 201 = added, 4xx = failed). */\nexport type CartItemBatchEntry = GeneratedSingleBatchResponse;\n/** Response shape of `addItemsBatch` — one entry per input item, matching by `index`. */\nexport type CartItemsBatchResponse = GeneratedBatchResponse;\n\n/** An address payload for cart shipping/billing (generated). */\nexport type CartAddress = AddressRequest;\n\nfunction requireCartAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && (auth.kind === \"customer\" || auth.kind === \"anonymous\")) return auth;\n  throw new EmporixValidationError(\n    \"CartService requires an explicit { kind: 'customer' } or { kind: 'anonymous' } AuthContext\",\n  );\n}\n\nfunction requireCustomerAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && auth.kind === \"customer\") return auth;\n  throw new EmporixValidationError(\"cart.merge requires a { kind: 'customer' } AuthContext\");\n}\n\n/** Cart operations. Every method requires an explicit customer/anonymous context. */\nexport class CartService {\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/cart/${this.ctx.tenant}/carts`;\n  }\n\n  /** Creates a cart. */\n  async create(\n    input: CreateCartInput | undefined,\n    auth: AuthContext,\n  ): Promise<CartCreated> {\n    return this.ctx.http.request<CartCreated>({\n      method: \"POST\",\n      path: this.base(),\n      auth: requireCartAuth(auth),\n      body: input ?? {},\n    });\n  }\n\n  /** Fetches a cart by id. */\n  async get(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Returns the current cart for the session, or null if none. */\n  /**\n   * Get the customer / anonymous cart matching the given criteria. Per Emporix:\n   * uniqueness is defined by `siteCode` + `type` + `legalEntityId` +\n   * (`customerId` derived from a customer token, or `sessionId` derived from an\n   * anonymous token). With `create: true`, Emporix creates a new cart if none\n   * matches.\n   *\n   * Returns `null` on 404 (no cart found and `create` was not set). All other\n   * errors are propagated.\n   */\n  async getCurrent(\n    auth: AuthContext,\n    opts: { siteCode: string; type?: string; legalEntityId?: string; create?: boolean },\n  ): Promise<Cart | null> {\n    const query: Record<string, string | number> = { siteCode: opts.siteCode };\n    if (opts.type !== undefined) query.type = opts.type;\n    if (opts.legalEntityId !== undefined) query.legalEntityId = opts.legalEntityId;\n    if (opts.create) query.create = \"true\";\n    try {\n      return await this.ctx.http.request<Cart>({\n        method: \"GET\",\n        path: this.base(),\n        query,\n        auth: requireCartAuth(auth),\n      });\n    } catch (e) {\n      if (e instanceof EmporixNotFoundError) return null;\n      throw e;\n    }\n  }\n\n  /** Adds an item. */\n  async addItem(\n    cartId: string,\n    item: CartItemInput,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n      body: item,\n    });\n  }\n\n  /**\n   * Adds multiple items in a single request via `POST /carts/{id}/itemsBatch`.\n   * Server-side limit is 200 entries per call — callers handling larger sets\n   * must chunk. The response carries a per-entry `status` (HTTP-style: 201\n   * for added, 4xx/5xx for failed) and `index` matching the input position;\n   * partial failures do **not** throw — inspect `status` per entry.\n   */\n  async addItemsBatch(\n    cartId: string,\n    items: CartItemInput[],\n    auth: AuthContext,\n  ): Promise<CartItemsBatchResponse> {\n    return this.ctx.http.request<CartItemsBatchResponse>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /** Updates an item. */\n  async updateItem(\n    cartId: string,\n    itemId: string,\n    patch: CartItemUpdate,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n      body: patch,\n    });\n  }\n\n  /** Removes an item. */\n  async removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Empties the cart. */\n  async clear(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Applies a coupon. */\n  async applyCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/coupons`,\n      auth: requireCartAuth(auth),\n      body: { code },\n    });\n  }\n\n  /** Removes a coupon. */\n  async removeCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/coupons/${code}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Sets the shipping address. */\n  async setShippingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/shipping-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /** Sets the billing address. */\n  async setBillingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/billing-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /**\n   * Merges one or more anonymous carts into the specified customer cart.\n   * Per Emporix: the target cart in the path **must belong to the logged-in\n   * customer**, and each id in `anonymousCartIds` must belong to an anonymous\n   * customer. Anonymous carts go `CLOSED` on success.\n   *\n   * Requires a customer `AuthContext`.\n   */\n  async merge(\n    customerCartId: string,\n    anonymousCartIds: string[],\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${customerCartId}/merge`,\n      auth: requireCustomerAuth(auth),\n      body: { carts: anonymousCartIds },\n    });\n  }\n}\n"]}
+{"version":3,"sources":["../src/core/errors.ts","../src/services/cart.ts"],"names":[],"mappings":";;;AACA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,cAAA;AAAA,EAAgB,eAAA;AAAA,EAAiB,OAAA;AAAA,EAAS,eAAA;AAAA,EAAiB,WAAA;AAAA,EAC3D,QAAA;AAAA,EAAU,eAAA;AAAA,EAAiB,eAAA;AAAA,EAAiB;AAC9C,CAAC,CAAA;AAED,SAAS,MAAM,IAAA,EAAwB;AACrC,EAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,GAAG,OAAO,IAAA,CAAK,IAAI,KAAK,CAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA,EAAG;AACpE,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,kBAAA,CAAmB,GAAA,CAAI,CAAA,CAAE,aAAa,CAAA,GAAI,gBAAA,GAAmB,KAAA,CAAM,CAAC,CAAA;AAAA,IAC/E;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAGO,IAAM,YAAA,GAAN,cAA2B,KAAA,CAAM;AAAA,EAC7B,MAAA;AAAA,EACA,IAAA;AAAA,EACT,WAAA,CAAY,OAAA,EAAiB,MAAA,EAAiB,IAAA,EAAgB;AAC5D,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AACvB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,GAAA,CAAA,MAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AAAA;AAAA,EAEA,MAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAE;AAAA,EAC/F;AACF,CAAA;AAOO,IAAM,oBAAA,GAAN,cAAmC,YAAA,CAAa;AAAC,CAAA;AAEjD,IAAM,sBAAA,GAAN,cAAqC,YAAA,CAAa;AAAC,CAAA;;;ACT1D,SAAS,gBAAgB,IAAA,EAA4C;AACnE,EAAA,IAAI,SAAS,IAAA,CAAK,IAAA,KAAS,cAAc,IAAA,CAAK,IAAA,KAAS,cAAc,OAAO,IAAA;AAC5E,EAAA,MAAM,IAAI,sBAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,oBAAoB,IAAA,EAA4C;AACvE,EAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AAC7C,EAAA,MAAM,IAAI,uBAAuB,wDAAwD,CAAA;AAC3F;AAGO,IAAM,cAAN,MAAkB;AAAA,EACvB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAErB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,MAAA,CAAA;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,SAAS;AAAC,KACjB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,MAAA,EAAgB,IAAA,EAAkC;AAC1D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,UAAA,CACJ,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAyC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACzE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,KAAA,CAAM,OAAO,IAAA,CAAK,IAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AACjE,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA;AAChC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QACvC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,KAAA;AAAA,QACA,IAAA,EAAM,gBAAgB,IAAI;AAAA,OAC3B,CAAA;AAAA,IACH,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,CAAA,YAAa,sBAAsB,OAAO,IAAA;AAC9C,MAAA,MAAM,CAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAA,CACJ,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,WACJ,MAAA,EACA,MAAA,EACA,OACA,IAAA,EACA,IAAA,GAA8B,EAAC,EAChB;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,KAAA;AAAA,MACN,GAAI,IAAA,CAAK,OAAA,GAAU,EAAE,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,GAAI;AAAC,KACtD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,MAAA,EAAgB,IAAA,EAAkC;AAC5D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,WAAA,CAAY,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AAChF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,QAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,EAAE,IAAA;AAAK,KACd,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,YAAA,CAAa,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,YAAY,IAAI,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,kBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,iBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,iBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,gBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CACJ,cAAA,EACA,gBAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,cAAc,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA,EAAM,oBAAoB,IAAI,CAAA;AAAA,MAC9B,IAAA,EAAM,EAAE,KAAA,EAAO,gBAAA;AAAiB,KACjC,CAAA;AAAA,EACH;AACF","file":"cart.cjs","sourcesContent":["/** Keys whose values are stripped from any serialised error body. */\nconst REDACTED_BODY_KEYS = new Set([\n  \"access_token\", \"refresh_token\", \"token\", \"customertoken\", \"saastoken\",\n  \"secret\", \"client_secret\", \"authorization\", \"password\",\n]);\n\nfunction scrub(body: unknown): unknown {\n  if (Array.isArray(body)) return body.map(scrub);\n  if (body && typeof body === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(body as Record<string, unknown>)) {\n      out[k] = REDACTED_BODY_KEYS.has(k.toLowerCase()) ? \"***redacted***\" : scrub(v);\n    }\n    return out;\n  }\n  return body;\n}\n\n/** Base class for every error thrown by the SDK. */\nexport class EmporixError extends Error {\n  readonly status: number | undefined;\n  readonly body: unknown;\n  constructor(message: string, status?: number, body?: unknown) {\n    super(message);\n    this.name = new.target.name;\n    this.status = status;\n    this.body = body;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n  /** Safe serialisation — token-like body fields are redacted. */\n  toJSON(): Record<string, unknown> {\n    return { name: this.name, message: this.message, status: this.status, body: scrub(this.body) };\n  }\n}\n\n/** 401 — authentication failed or token expired. */\nexport class EmporixAuthError extends EmporixError {}\n/** 403 — authenticated but not permitted. */\nexport class EmporixForbiddenError extends EmporixError {}\n/** 404 — resource not found. */\nexport class EmporixNotFoundError extends EmporixError {}\n/** 400/422 — request validation failed. */\nexport class EmporixValidationError extends EmporixError {}\n/** 5xx — server-side failure. */\nexport class EmporixServerError extends EmporixError {}\n\n/**\n * 403 with a `missing scope: <name>` hint in the body's `details` array.\n * Subclasses {@link EmporixForbiddenError} so existing 403 catches still work.\n */\nexport class EmporixInsufficientScopeError extends EmporixForbiddenError {\n  readonly requiredScope: string | undefined;\n  constructor(message: string, status: number, body: unknown, requiredScope?: string) {\n    super(message, status, body);\n    this.requiredScope = requiredScope;\n  }\n}\n\nconst SCOPE_HINT_RE = /missing scope[: ]+([a-z0-9._-]+)/i;\n\nfunction extractRequiredScope(body: unknown): string | undefined {\n  if (body && typeof body === \"object\" && \"details\" in body) {\n    const details = (body as { details?: unknown }).details;\n    if (Array.isArray(details)) {\n      for (const d of details) {\n        if (typeof d === \"string\") {\n          const m = d.match(SCOPE_HINT_RE);\n          if (m) return m[1];\n        }\n      }\n    }\n  }\n  return undefined;\n}\n\n/** Maps an HTTP status to the matching {@link EmporixError} subclass. */\nexport function errorFromResponse(status: number, message: string, body: unknown): EmporixError {\n  if (status === 401) return new EmporixAuthError(message, status, body);\n  if (status === 403) {\n    const scope = extractRequiredScope(body);\n    if (scope) return new EmporixInsufficientScopeError(message, status, body, scope);\n    return new EmporixForbiddenError(message, status, body);\n  }\n  if (status === 404) return new EmporixNotFoundError(message, status, body);\n  if (status === 400 || status === 422) return new EmporixValidationError(message, status, body);\n  if (status >= 500) return new EmporixServerError(message, status, body);\n  return new EmporixError(message, status, body);\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixNotFoundError, EmporixValidationError } from \"../core/errors\";\nimport type {\n  Cart as GeneratedCart,\n  CreateCart,\n  CreatedCart,\n  CartItemRequest,\n  UpdateCartItem,\n  AddressRequest,\n  BatchResponse as GeneratedBatchResponse,\n  SingleBatchResponse as GeneratedSingleBatchResponse,\n} from \"../generated/cart\";\n\n/** A cart as returned by the Cart service (all generated fields). */\nexport type Cart = GeneratedCart;\n\n/** The cart-create response (`{ cartId, yrn }`, generated). */\nexport type CartCreated = CreatedCart;\n\n/** Generated request bodies (caller sends the exact wire shape). */\nexport type CreateCartInput = CreateCart;\nexport type CartItemInput = CartItemRequest;\nexport type CartItemUpdate = UpdateCartItem;\n\n/** Per-entry result of `addItemsBatch`. `status` is HTTP-style per entry (e.g. 201 = added, 4xx = failed). */\nexport type CartItemBatchEntry = GeneratedSingleBatchResponse;\n/** Response shape of `addItemsBatch` — one entry per input item, matching by `index`. */\nexport type CartItemsBatchResponse = GeneratedBatchResponse;\n\n/** An address payload for cart shipping/billing (generated). */\nexport type CartAddress = AddressRequest;\n\nfunction requireCartAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && (auth.kind === \"customer\" || auth.kind === \"anonymous\")) return auth;\n  throw new EmporixValidationError(\n    \"CartService requires an explicit { kind: 'customer' } or { kind: 'anonymous' } AuthContext\",\n  );\n}\n\nfunction requireCustomerAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && auth.kind === \"customer\") return auth;\n  throw new EmporixValidationError(\"cart.merge requires a { kind: 'customer' } AuthContext\");\n}\n\n/** Cart operations. Every method requires an explicit customer/anonymous context. */\nexport class CartService {\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/cart/${this.ctx.tenant}/carts`;\n  }\n\n  /** Creates a cart. */\n  async create(\n    input: CreateCartInput | undefined,\n    auth: AuthContext,\n  ): Promise<CartCreated> {\n    return this.ctx.http.request<CartCreated>({\n      method: \"POST\",\n      path: this.base(),\n      auth: requireCartAuth(auth),\n      body: input ?? {},\n    });\n  }\n\n  /** Fetches a cart by id. */\n  async get(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Returns the current cart for the session, or null if none. */\n  /**\n   * Get the customer / anonymous cart matching the given criteria. Per Emporix:\n   * uniqueness is defined by `siteCode` + `type` + `legalEntityId` +\n   * (`customerId` derived from a customer token, or `sessionId` derived from an\n   * anonymous token). With `create: true`, Emporix creates a new cart if none\n   * matches.\n   *\n   * Returns `null` on 404 (no cart found and `create` was not set). All other\n   * errors are propagated.\n   */\n  async getCurrent(\n    auth: AuthContext,\n    opts: { siteCode: string; type?: string; legalEntityId?: string; create?: boolean },\n  ): Promise<Cart | null> {\n    const query: Record<string, string | number> = { siteCode: opts.siteCode };\n    if (opts.type !== undefined) query.type = opts.type;\n    if (opts.legalEntityId !== undefined) query.legalEntityId = opts.legalEntityId;\n    if (opts.create) query.create = \"true\";\n    try {\n      return await this.ctx.http.request<Cart>({\n        method: \"GET\",\n        path: this.base(),\n        query,\n        auth: requireCartAuth(auth),\n      });\n    } catch (e) {\n      if (e instanceof EmporixNotFoundError) return null;\n      throw e;\n    }\n  }\n\n  /** Adds an item. */\n  async addItem(\n    cartId: string,\n    item: CartItemInput,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n      body: item,\n    });\n  }\n\n  /**\n   * Adds multiple items in a single request via `POST /carts/{id}/itemsBatch`.\n   * Server-side limit is 200 entries per call — callers handling larger sets\n   * must chunk. The response carries a per-entry `status` (HTTP-style: 201\n   * for added, 4xx/5xx for failed) and `index` matching the input position;\n   * partial failures do **not** throw — inspect `status` per entry.\n   */\n  async addItemsBatch(\n    cartId: string,\n    items: CartItemInput[],\n    auth: AuthContext,\n  ): Promise<CartItemsBatchResponse> {\n    return this.ctx.http.request<CartItemsBatchResponse>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Updates an item. By default this is a **full replace** — the server expects\n   * the complete item (e.g. `itemYrn` + the `price` row). Pass\n   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a\n   * quantity-only change with just `{ quantity }`.\n   */\n  async updateItem(\n    cartId: string,\n    itemId: string,\n    patch: CartItemUpdate,\n    auth: AuthContext,\n    opts: { partial?: boolean } = {},\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n      body: patch,\n      ...(opts.partial ? { query: { partial: \"true\" } } : {}),\n    });\n  }\n\n  /** Removes an item. */\n  async removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Empties the cart. */\n  async clear(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Applies a coupon. */\n  async applyCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/coupons`,\n      auth: requireCartAuth(auth),\n      body: { code },\n    });\n  }\n\n  /** Removes a coupon. */\n  async removeCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/coupons/${code}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Sets the shipping address. */\n  async setShippingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/shipping-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /** Sets the billing address. */\n  async setBillingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/billing-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /**\n   * Merges one or more anonymous carts into the specified customer cart.\n   * Per Emporix: the target cart in the path **must belong to the logged-in\n   * customer**, and each id in `anonymousCartIds` must belong to an anonymous\n   * customer. Anonymous carts go `CLOSED` on success.\n   *\n   * Requires a customer `AuthContext`.\n   */\n  async merge(\n    customerCartId: string,\n    anonymousCartIds: string[],\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${customerCartId}/merge`,\n      auth: requireCustomerAuth(auth),\n      body: { carts: anonymousCartIds },\n    });\n  }\n}\n"]}

package/dist/cart.d.cts

@@ -1779,8 +1779,15 @@ declare class CartService {
      * partial failures do **not** throw — inspect `status` per entry.
      */
     addItemsBatch(cartId: string, items: CartItemInput[], auth: AuthContext): Promise<CartItemsBatchResponse>;
-    /** Updates an item. */
-    updateItem(cartId: string, itemId: string, patch: CartItemUpdate, auth: AuthContext): Promise<Cart>;
+    /**
+     * Updates an item. By default this is a **full replace** — the server expects
+     * the complete item (e.g. `itemYrn` + the `price` row). Pass
+     * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a
+     * quantity-only change with just `{ quantity }`.
+     */
+    updateItem(cartId: string, itemId: string, patch: CartItemUpdate, auth: AuthContext, opts?: {
+        partial?: boolean;
+    }): Promise<Cart>;
     /** Removes an item. */
     removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart>;
     /** Empties the cart. */

package/dist/cart.d.ts

@@ -1779,8 +1779,15 @@ declare class CartService {
      * partial failures do **not** throw — inspect `status` per entry.
      */
     addItemsBatch(cartId: string, items: CartItemInput[], auth: AuthContext): Promise<CartItemsBatchResponse>;
-    /** Updates an item. */
-    updateItem(cartId: string, itemId: string, patch: CartItemUpdate, auth: AuthContext): Promise<Cart>;
+    /**
+     * Updates an item. By default this is a **full replace** — the server expects
+     * the complete item (e.g. `itemYrn` + the `price` row). Pass
+     * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a
+     * quantity-only change with just `{ quantity }`.
+     */
+    updateItem(cartId: string, itemId: string, patch: CartItemUpdate, auth: AuthContext, opts?: {
+        partial?: boolean;
+    }): Promise<Cart>;
     /** Removes an item. */
     removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart>;
     /** Empties the cart. */

package/dist/cart.js

@@ -1,4 +1,4 @@
-export { CartService } from './chunk-IEZHGU7F.js';
+export { CartService } from './chunk-I3YYGSN2.js';
 import './chunk-KTODT6DV.js';
 //# sourceMappingURL=cart.js.map
 //# sourceMappingURL=cart.js.map

package/dist/{chunk-IEZHGU7F.js → chunk-I3YYGSN2.js}

@@ -88,13 +88,19 @@ var CartService = class {
       body: items
     });
   }
-  /** Updates an item. */
-  async updateItem(cartId, itemId, patch, auth) {
+  /**
+   * Updates an item. By default this is a **full replace** — the server expects
+   * the complete item (e.g. `itemYrn` + the `price` row). Pass
+   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a
+   * quantity-only change with just `{ quantity }`.
+   */
+  async updateItem(cartId, itemId, patch, auth, opts = {}) {
     return this.ctx.http.request({
       method: "PUT",
       path: `${this.base()}/${cartId}/items/${itemId}`,
       auth: requireCartAuth(auth),
-      body: patch
+      body: patch,
+      ...opts.partial ? { query: { partial: "true" } } : {}
     });
   }
   /** Removes an item. */
@@ -167,5 +173,5 @@ var CartService = class {
 };
 
 export { CartService };
-//# sourceMappingURL=chunk-IEZHGU7F.js.map
-//# sourceMappingURL=chunk-IEZHGU7F.js.map
+//# sourceMappingURL=chunk-I3YYGSN2.js.map
+//# sourceMappingURL=chunk-I3YYGSN2.js.map

package/dist/chunk-I3YYGSN2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/cart.ts"],"names":[],"mappings":";;;AAiCA,SAAS,gBAAgB,IAAA,EAA4C;AACnE,EAAA,IAAI,SAAS,IAAA,CAAK,IAAA,KAAS,cAAc,IAAA,CAAK,IAAA,KAAS,cAAc,OAAO,IAAA;AAC5E,EAAA,MAAM,IAAI,sBAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,oBAAoB,IAAA,EAA4C;AACvE,EAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AAC7C,EAAA,MAAM,IAAI,uBAAuB,wDAAwD,CAAA;AAC3F;AAGO,IAAM,cAAN,MAAkB;AAAA,EACvB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAErB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,MAAA,CAAA;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,SAAS;AAAC,KACjB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,MAAA,EAAgB,IAAA,EAAkC;AAC1D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,UAAA,CACJ,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAyC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACzE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,KAAA,CAAM,OAAO,IAAA,CAAK,IAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AACjE,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA;AAChC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QACvC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,KAAA;AAAA,QACA,IAAA,EAAM,gBAAgB,IAAI;AAAA,OAC3B,CAAA;AAAA,IACH,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,CAAA,YAAa,sBAAsB,OAAO,IAAA;AAC9C,MAAA,MAAM,CAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAA,CACJ,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,WACJ,MAAA,EACA,MAAA,EACA,OACA,IAAA,EACA,IAAA,GAA8B,EAAC,EAChB;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,KAAA;AAAA,MACN,GAAI,IAAA,CAAK,OAAA,GAAU,EAAE,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,GAAI;AAAC,KACtD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,MAAA,EAAgB,IAAA,EAAkC;AAC5D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,WAAA,CAAY,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AAChF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,QAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,EAAE,IAAA;AAAK,KACd,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,YAAA,CAAa,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,YAAY,IAAI,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,kBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,iBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,iBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,gBAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CACJ,cAAA,EACA,gBAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,cAAc,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA,EAAM,oBAAoB,IAAI,CAAA;AAAA,MAC9B,IAAA,EAAM,EAAE,KAAA,EAAO,gBAAA;AAAiB,KACjC,CAAA;AAAA,EACH;AACF","file":"chunk-I3YYGSN2.js","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixNotFoundError, EmporixValidationError } from \"../core/errors\";\nimport type {\n  Cart as GeneratedCart,\n  CreateCart,\n  CreatedCart,\n  CartItemRequest,\n  UpdateCartItem,\n  AddressRequest,\n  BatchResponse as GeneratedBatchResponse,\n  SingleBatchResponse as GeneratedSingleBatchResponse,\n} from \"../generated/cart\";\n\n/** A cart as returned by the Cart service (all generated fields). */\nexport type Cart = GeneratedCart;\n\n/** The cart-create response (`{ cartId, yrn }`, generated). */\nexport type CartCreated = CreatedCart;\n\n/** Generated request bodies (caller sends the exact wire shape). */\nexport type CreateCartInput = CreateCart;\nexport type CartItemInput = CartItemRequest;\nexport type CartItemUpdate = UpdateCartItem;\n\n/** Per-entry result of `addItemsBatch`. `status` is HTTP-style per entry (e.g. 201 = added, 4xx = failed). */\nexport type CartItemBatchEntry = GeneratedSingleBatchResponse;\n/** Response shape of `addItemsBatch` — one entry per input item, matching by `index`. */\nexport type CartItemsBatchResponse = GeneratedBatchResponse;\n\n/** An address payload for cart shipping/billing (generated). */\nexport type CartAddress = AddressRequest;\n\nfunction requireCartAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && (auth.kind === \"customer\" || auth.kind === \"anonymous\")) return auth;\n  throw new EmporixValidationError(\n    \"CartService requires an explicit { kind: 'customer' } or { kind: 'anonymous' } AuthContext\",\n  );\n}\n\nfunction requireCustomerAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && auth.kind === \"customer\") return auth;\n  throw new EmporixValidationError(\"cart.merge requires a { kind: 'customer' } AuthContext\");\n}\n\n/** Cart operations. Every method requires an explicit customer/anonymous context. */\nexport class CartService {\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/cart/${this.ctx.tenant}/carts`;\n  }\n\n  /** Creates a cart. */\n  async create(\n    input: CreateCartInput | undefined,\n    auth: AuthContext,\n  ): Promise<CartCreated> {\n    return this.ctx.http.request<CartCreated>({\n      method: \"POST\",\n      path: this.base(),\n      auth: requireCartAuth(auth),\n      body: input ?? {},\n    });\n  }\n\n  /** Fetches a cart by id. */\n  async get(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Returns the current cart for the session, or null if none. */\n  /**\n   * Get the customer / anonymous cart matching the given criteria. Per Emporix:\n   * uniqueness is defined by `siteCode` + `type` + `legalEntityId` +\n   * (`customerId` derived from a customer token, or `sessionId` derived from an\n   * anonymous token). With `create: true`, Emporix creates a new cart if none\n   * matches.\n   *\n   * Returns `null` on 404 (no cart found and `create` was not set). All other\n   * errors are propagated.\n   */\n  async getCurrent(\n    auth: AuthContext,\n    opts: { siteCode: string; type?: string; legalEntityId?: string; create?: boolean },\n  ): Promise<Cart | null> {\n    const query: Record<string, string | number> = { siteCode: opts.siteCode };\n    if (opts.type !== undefined) query.type = opts.type;\n    if (opts.legalEntityId !== undefined) query.legalEntityId = opts.legalEntityId;\n    if (opts.create) query.create = \"true\";\n    try {\n      return await this.ctx.http.request<Cart>({\n        method: \"GET\",\n        path: this.base(),\n        query,\n        auth: requireCartAuth(auth),\n      });\n    } catch (e) {\n      if (e instanceof EmporixNotFoundError) return null;\n      throw e;\n    }\n  }\n\n  /** Adds an item. */\n  async addItem(\n    cartId: string,\n    item: CartItemInput,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n      body: item,\n    });\n  }\n\n  /**\n   * Adds multiple items in a single request via `POST /carts/{id}/itemsBatch`.\n   * Server-side limit is 200 entries per call — callers handling larger sets\n   * must chunk. The response carries a per-entry `status` (HTTP-style: 201\n   * for added, 4xx/5xx for failed) and `index` matching the input position;\n   * partial failures do **not** throw — inspect `status` per entry.\n   */\n  async addItemsBatch(\n    cartId: string,\n    items: CartItemInput[],\n    auth: AuthContext,\n  ): Promise<CartItemsBatchResponse> {\n    return this.ctx.http.request<CartItemsBatchResponse>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Updates an item. By default this is a **full replace** — the server expects\n   * the complete item (e.g. `itemYrn` + the `price` row). Pass\n   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a\n   * quantity-only change with just `{ quantity }`.\n   */\n  async updateItem(\n    cartId: string,\n    itemId: string,\n    patch: CartItemUpdate,\n    auth: AuthContext,\n    opts: { partial?: boolean } = {},\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n      body: patch,\n      ...(opts.partial ? { query: { partial: \"true\" } } : {}),\n    });\n  }\n\n  /** Removes an item. */\n  async removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Empties the cart. */\n  async clear(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Applies a coupon. */\n  async applyCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/coupons`,\n      auth: requireCartAuth(auth),\n      body: { code },\n    });\n  }\n\n  /** Removes a coupon. */\n  async removeCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/coupons/${code}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Sets the shipping address. */\n  async setShippingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/shipping-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /** Sets the billing address. */\n  async setBillingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/billing-address`,\n      auth: requireCartAuth(auth),\n      body: address,\n    });\n  }\n\n  /**\n   * Merges one or more anonymous carts into the specified customer cart.\n   * Per Emporix: the target cart in the path **must belong to the logged-in\n   * customer**, and each id in `anonymousCartIds` must belong to an anonymous\n   * customer. Anonymous carts go `CLOSED` on success.\n   *\n   * Requires a customer `AuthContext`.\n   */\n  async merge(\n    customerCartId: string,\n    anonymousCartIds: string[],\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${customerCartId}/merge`,\n      auth: requireCustomerAuth(auth),\n      body: { carts: anonymousCartIds },\n    });\n  }\n}\n"]}

package/dist/index.cjs

@@ -1302,13 +1302,19 @@ var CartService = class {
       body: items
     });
   }
-  /** Updates an item. */
-  async updateItem(cartId, itemId, patch, auth2) {
+  /**
+   * Updates an item. By default this is a **full replace** — the server expects
+   * the complete item (e.g. `itemYrn` + the `price` row). Pass
+   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a
+   * quantity-only change with just `{ quantity }`.
+   */
+  async updateItem(cartId, itemId, patch, auth2, opts = {}) {
     return this.ctx.http.request({
       method: "PUT",
       path: `${this.base()}/${cartId}/items/${itemId}`,
       auth: requireCartAuth(auth2),
-      body: patch
+      body: patch,
+      ...opts.partial ? { query: { partial: "true" } } : {}
     });
   }
   /** Removes an item. */
@@ -5014,7 +5020,7 @@ var ApprovalService = class {
 };
 
 // package.json
-var version = "2.7.0";
+var version = "2.8.0";
 
 // src/version.ts
 var SDK_VERSION = version;