@viu/emporix-sdk 4.0.1 → 4.2.0

package/dist/index.cjs

@@ -1242,7 +1242,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "4.0.1";
+var version = "4.2.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -2865,6 +2865,51 @@ var CartService = class {
       auth: requireCartAuth(auth2)
     });
   }
+  /**
+   * Runs up to 10 cart commands on this cart in one request, in order
+   * (`POST /carts/{cartId}/execute`). The typical chain is `AddCartItem` then
+   * `GetCart`: the calculated cart comes back without a second round trip.
+   *
+   * - `onError: "fail"` (default) stops at the first command that does not
+   *   answer 2xx and **throws the error that command's REST call would have
+   *   thrown** — an `EmporixNotFoundError` for a 404, … — with the command's
+   *   error body. The commands before it **have already been applied**.
+   * - `onError: "resume"` runs every command and resolves with all results;
+   *   check each `code`.
+   * - A `400` for the whole request (no commands or more than 10, an unknown
+   *   type, `versioning: "explicit"` without a `resourceVersion`) means no
+   *   command ran.
+   *
+   * The request takes about as long as its commands together — size the
+   * client's `timeouts.readMs` for long chains. It is never retried: a replay
+   * would apply the writes twice.
+   *
+   * `auth` is forwarded unguarded: a customer or anonymous token works on the
+   * shopper's own cart; a service token needs `cart.cart_manage`, plus
+   * `cart.cart_manage_external_prices` when a command carries an external
+   * price, product, fee or discount.
+   */
+  async execute(cartId, commands, auth2, opts = {}) {
+    const path = `${this.base()}/${encodeURIComponent(cartId)}/execute`;
+    const res = await this.ctx.http.request({
+      method: "POST",
+      path,
+      auth: auth2,
+      query: { ...opts },
+      body: { commands }
+    });
+    if (opts.onError !== "resume") {
+      const failed = res.results.find((r) => r.code < 200 || r.code > 299);
+      if (failed) {
+        throw errorFromResponse(
+          failed.code,
+          `POST ${path} \u2192 command ${failed.index} (${failed.type}) \u2192 ${failed.code}`,
+          failed.data
+        );
+      }
+    }
+    return res;
+  }
 };
 
 // src/services/checkout.ts
@@ -3075,6 +3120,18 @@ var PaymentGatewayService = class {
   };
 };
 
+// src/core/search.ts
+var SEARCH_PAGING = ["pageNumber", "pageSize", "sort", "fields"];
+function splitQuery(input, queryKeys) {
+  const body = {};
+  const query = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (queryKeys.includes(key)) query[key] = value;
+    else body[key] = value;
+  }
+  return { body, query };
+}
+
 // src/services/price.ts
 function normalizeMatch(raw) {
   const itemId = raw.itemId ?? raw.itemRef;
@@ -3220,13 +3277,16 @@ var PriceService = class {
       auth: authCtx
     });
   }
-  /** Searches flat prices (POST body query). Default auth: service. */
+  /**
+   * Searches flat prices: the criteria go in the body, `expand` in the query
+   * string. Default auth: service.
+   */
   async search(query, authCtx = SERVICE4) {
     return this.ctx.http.request({
       method: "POST",
       path: `/price/${this.ctx.tenant}/prices/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, ["expand"])
     });
   }
   /** Creates multiple flat prices in one request. Default auth: service. */
@@ -3294,11 +3354,12 @@ var PriceService = class {
       auth: authCtx,
       body: input
     }),
+    /** `q` in the body; `pageNumber`, `pageSize` and `sort` in the query string. */
     search: async (query, authCtx = SERVICE4) => this.ctx.http.request({
       method: "POST",
       path: `/price/${this.ctx.tenant}/price-lists/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, ["pageNumber", "pageSize", "sort"])
     }),
     get: async (listId, authCtx = SERVICE4) => this.ctx.http.request({
       method: "GET",
@@ -3348,11 +3409,12 @@ var PriceService = class {
         auth: authCtx
       });
     },
+    /** `q` in the body; `pageNumber`, `pageSize` and `sort` in the query string. */
     searchPrices: async (listId, query, authCtx = SERVICE4) => this.ctx.http.request({
       method: "POST",
       path: `/price/${this.ctx.tenant}/price-lists/${listId}/prices/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, ["pageNumber", "pageSize", "sort"])
     }),
     bulkCreatePrices: async (listId, inputs, authCtx = SERVICE4) => this.ctx.http.request({
       method: "POST",
@@ -3389,7 +3451,10 @@ var MediaService = class {
   base() {
     return `/media/${this.ctx.tenant}/assets`;
   }
-  /** Create an asset. BLOB uploads via multipart; LINK via JSON. */
+  /**
+   * Create an asset. BLOB uploads via multipart (max 30 MB); LINK via JSON.
+   * {@link startUploadSession} sends the file straight to storage instead.
+   */
   async create(input, auth2 = SERVICE5) {
     if (input.kind === "blob") {
       const fd = new FormData();
@@ -3447,7 +3512,7 @@ var MediaService = class {
    *   Sends `application/json`. Used for `refIds`, `details`, `metadata`,
    *   or `url` changes.
    * - `{ kind: "blob", file, body }` — replaces the BLOB file content
-   *   (max 10MB) AND patches metadata in the same request. Sends
+   *   (max 30 MB) AND patches metadata in the same request. Sends
    *   `multipart/form-data`.
    *
    * `type` and `access` are immutable per Emporix — they must match the
@@ -3521,6 +3586,12 @@ var MediaService = class {
    *   an `ArrayBuffer` transparently; binary Content-Types are passed
    *   through verbatim.
    *
+   * Emporix recommends {@link getDownloadUrl} for every download: here the file
+   * passes through the Media API. A `413` means the asset's known size exceeds
+   * the streaming limit (30 MB by default) — only {@link getDownloadUrl} can
+   * serve it. A `409` means the asset is still `PENDING` from a direct upload
+   * whose file has not reached storage.
+   *
    * Implementation note: uses `redirect: "manual"` so the redirect-location
    * is observable. In Node.js this works; in a browser the redirect Location
    * is intentionally hidden by fetch — there, `PUBLIC` downloads will
@@ -3576,6 +3647,61 @@ var MediaService = class {
     }
     throw errorFromResponse(res.status, `GET ${path} \u2192 ${res.status}`, parsed);
   }
+  /**
+   * Get a URL that serves the stored file straight from storage
+   * (`GET /assets/{assetId}/download-url`). Emporix recommends it for every
+   * download: the file never passes through the Media API, there is no size
+   * limit, and the URL can be handed to a browser as it is.
+   *
+   * - `PRIVATE` BLOB → `provider: "GCS"`, a signed Google Cloud Storage URL that
+   *   works without an Emporix token until `expiresAt` (15 minutes by default).
+   * - `PUBLIC` BLOB → `provider: "CLOUDINARY"`, the permanent URL.
+   * - `LINK` → `provider: "LINK"`, the stored URL.
+   *
+   * `disposition` (`attachment` by default, or `inline`) affects private URLs
+   * only. Unlike {@link startUploadSession}, this works whether or not direct
+   * upload is enabled for the tenant. A `409` means a direct upload is still
+   * `PENDING` and its file has not reached storage; once it has, this call
+   * completes the asset before answering.
+   */
+  async getDownloadUrl(assetId, query = {}, auth2 = SERVICE5) {
+    return this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/${encodeURIComponent(assetId)}/download-url`,
+      auth: auth2,
+      query: { ...query }
+    });
+  }
+  /**
+   * Start a direct upload of a `BLOB` asset (`POST /assets/upload-session`,
+   * `201`). Emporix creates the asset as `PENDING` — `id` is its id — and
+   * returns where to send the file. **This method does not send it**:
+   *
+   * - `upload.method === "PUT"` (a `PRIVATE` asset, `uploadType: "put"` or
+   *   omitted): `PUT` the file to `upload.url` with every `upload.headers` entry.
+   * - `upload.method === "POST"` (every `PUBLIC` asset, or `uploadType: "form"`):
+   *   a multipart `POST` to `upload.url` with every `upload.fields` entry
+   *   unchanged and the file part last.
+   *
+   * That request goes to Google Cloud Storage or Cloudinary, not to Emporix, so
+   * it must not carry the Emporix token — which is also why a browser can make
+   * it. The asset turns `READY` once storage confirms; until then, calls that
+   * need the file answer `409`. The instruction is valid for 15 minutes (GCS) or
+   * an hour (Cloudinary), and an unused session expires at `expiresAt`.
+   *
+   * Direct upload is enabled per tenant by Emporix Support. Without it the call
+   * throws an `EmporixForbiddenError` whose `body.message` is `direct upload is
+   * not enabled for this tenant`, and nothing is created — the same status as a
+   * missing scope, so read the message.
+   */
+  async startUploadSession(input, auth2 = SERVICE5) {
+    return this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/upload-session`,
+      auth: auth2,
+      body: input
+    });
+  }
   /** Multipart upload sugar: builds `AssetCreateBlob` from input. */
   async uploadFile(input, auth2 = SERVICE5) {
     const body = {
@@ -3820,13 +3946,17 @@ var SegmentService = class {
   async create(input, authCtx = SERVICE6) {
     return this.ctx.http.request({ method: "POST", path: this.base(), auth: authCtx, body: input });
   }
-  /** Searches segments (POST body). Default auth: service. */
+  /**
+   * Searches segments: `q` in the body; paging, sort, fields, `legalEntityId`
+   * and `customerId` in the query string. `customerId` returns that customer's
+   * segments and needs `customersegment.segment_read`. Default auth: service.
+   */
   async search(query, authCtx = SERVICE6) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, [...SEARCH_PAGING, "legalEntityId", "customerId"])
     });
   }
   /** Full-replaces a segment (PUT). Default auth: service. */
@@ -3903,7 +4033,7 @@ var SegmentService = class {
       method: "POST",
       path: `${this.base()}/${segmentId}/customers/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, SEARCH_PAGING)
     }),
     get: async (segmentId, customerId, authCtx = SERVICE6) => this.ctx.http.request({
       method: "GET",
@@ -3978,7 +4108,7 @@ var SegmentService = class {
       method: "POST",
       path: `${this.base()}/${encodeURIComponent(segmentId)}/groups/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, SEARCH_PAGING)
     }),
     get: async (segmentId, groupId, authCtx = SERVICE6) => this.ctx.http.request({
       method: "GET",
@@ -4012,7 +4142,7 @@ var SegmentService = class {
       method: "POST",
       path: `${this.base()}/${segmentId}/items/search`,
       auth: authCtx,
-      body: query
+      ...splitQuery(query, [...SEARCH_PAGING, "legalEntityId"])
     }),
     get: async (segmentId, type, itemId, authCtx = SERVICE6) => this.ctx.http.request({
       method: "GET",
@@ -4336,14 +4466,15 @@ var CompaniesService = class {
   }
   /**
    * Searches legal entities via `POST /legal-entities/search` with an Emporix
-   * `q`-syntax filter body. Requires the same read scope as {@link listMine}.
+   * `q`-syntax filter body; paging, sort and fields go in the query string.
+   * Requires the same read scope as {@link listMine}.
    */
   async search(query, auth2) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/search`,
       auth: auth2,
-      body: query,
+      ...splitQuery(query, SEARCH_PAGING),
       idempotent: true
       // pure read over POST — safe to replay on 5xx/429
     });
@@ -4529,11 +4660,28 @@ var IamService = class {
         auth: auth2
       });
     },
+    /**
+     * Lists one vendor's Management Dashboard users, with their groups
+     * (`GET /users/vendors/{vendorId}`).
+     */
+    listForVendor: async (vendorId, auth2) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/vendors/${encodeURIComponent(vendorId)}`,
+      auth: auth2
+    }),
     getGroups: async (userId, auth2) => this.ctx.http.request({
       method: "GET",
       path: `${this.base()}/users/${userId}/groups`,
       auth: auth2
     }),
+    /** Removes a user from every group at once (`DELETE /users/{userId}/groups`, `204`). */
+    removeFromAllGroups: async (userId, auth2) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/users/${encodeURIComponent(userId)}/groups`,
+        auth: auth2
+      });
+    },
     /**
      * Reads one of a user's groups (`GET /users/{userId}/groups/{groupId}`).
      * The collection read above returns the same shape per entry; this exists
@@ -4772,6 +4920,20 @@ var OrdersService = class {
       ...headers ? { headers } : {}
     });
   }
+  /**
+   * The status transitions the customer may trigger on one of their orders
+   * (`GET /orders/{orderId}/transitions`) — for example whether it can still be
+   * cancelled, before offering {@link cancel}.
+   */
+  async listTransitions(orderId, auth2, opts = {}) {
+    const headers = this.saasHeader(opts.saasToken);
+    return this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/${encodeURIComponent(orderId)}/transitions`,
+      auth: auth2,
+      ...headers ? { headers } : {}
+    });
+  }
   /** Transitions an order to a new status. Server enforces legal transitions. */
   async transition(orderId, status, auth2, opts = {}) {
     const body = { status };
@@ -5317,6 +5479,21 @@ var ClientConfigService = class {
 
 // src/services/shopping-list.ts
 var RESERVED = /* @__PURE__ */ new Set(["customerId", "metadata"]);
+function toLists(env) {
+  const out = [];
+  for (const [key, value] of Object.entries(env)) {
+    if (RESERVED.has(key) || value === null || typeof value !== "object") continue;
+    const v = value;
+    out.push({
+      key,
+      name: v.name ?? key,
+      items: v.items ?? [],
+      ...v.mixins ? { mixins: v.mixins } : {},
+      ...v.metadata ? { metadata: v.metadata } : {}
+    });
+  }
+  return out;
+}
 var ShoppingListService = class {
   constructor(ctx) {
     this.ctx = ctx;
@@ -5326,7 +5503,11 @@ var ShoppingListService = class {
   base() {
     return `/shoppinglist/${this.ctx.tenant}/shopping-lists`;
   }
-  /** The caller's lists (or, with employee scope, all), normalized to an array. */
+  /**
+   * The caller's lists, normalized to an array. With employee scope Emporix
+   * returns **every customer's** lists and ignores `name` — read one customer's
+   * with {@link getForCustomer} instead.
+   */
   async list(auth2, opts = {}) {
     const envelopes = await this.ctx.http.request({
       method: "GET",
@@ -5334,21 +5515,20 @@ var ShoppingListService = class {
       auth: auth2,
       ...opts.name ? { query: { name: opts.name } } : {}
     });
-    const out = [];
-    for (const env of envelopes ?? []) {
-      for (const [key, value] of Object.entries(env)) {
-        if (RESERVED.has(key) || value === null || typeof value !== "object") continue;
-        const v = value;
-        out.push({
-          key,
-          name: v.name ?? key,
-          items: v.items ?? [],
-          ...v.mixins ? { mixins: v.mixins } : {},
-          ...v.metadata ? { metadata: v.metadata } : {}
-        });
-      }
-    }
-    return out;
+    return (envelopes ?? []).flatMap(toLists);
+  }
+  /**
+   * One customer's lists (`GET /shopping-lists/{customerId}`), normalized to an
+   * array — the employee read; `name` narrows it to one list.
+   */
+  async getForCustomer(customerId, auth2, opts = {}) {
+    const envelope = await this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/${encodeURIComponent(customerId)}`,
+      auth: auth2,
+      ...opts.name ? { query: { name: opts.name } } : {}
+    });
+    return envelope ? toLists(envelope) : [];
   }
   /** Create a list; returns the new list id. */
   async create(draft, auth2) {
@@ -5377,8 +5557,8 @@ var ShoppingListService = class {
       ...opts.name ? { query: { name: opts.name } } : {}
     });
   }
-  async loadList(listName, auth2) {
-    const lists = await this.list(auth2, { name: listName });
+  async loadList(customerId, listName, auth2) {
+    const lists = auth2.kind === "service" ? await this.getForCustomer(customerId, auth2, { name: listName }) : await this.list(auth2, { name: listName });
     const found = lists.find((l) => l.name === listName);
     if (!found) throw new EmporixNotFoundError(`Shopping list "${listName}" not found`, 404);
     return found;
@@ -5392,20 +5572,20 @@ var ShoppingListService = class {
   }
   /** Add/replace an item by `productId` (read-modify-write, last-write-wins). */
   async addItem(customerId, listName, item, auth2) {
-    const list = await this.loadList(listName, auth2);
+    const list = await this.loadList(customerId, listName, auth2);
     const items = [...list.items.filter((i) => i.productId !== item.productId), item];
     await this.put(customerId, list, items, auth2);
   }
   /** Remove an item by `productId` (no-op if absent). */
   async removeItem(customerId, listName, productId, auth2) {
-    const list = await this.loadList(listName, auth2);
+    const list = await this.loadList(customerId, listName, auth2);
     const items = list.items.filter((i) => i.productId !== productId);
     await this.put(customerId, list, items, auth2);
   }
   /** Set an item's quantity; `quantity <= 0` removes it. Adds the item if absent. */
   async setItemQuantity(customerId, listName, productId, quantity, auth2) {
     if (quantity <= 0) return this.removeItem(customerId, listName, productId, auth2);
-    const list = await this.loadList(listName, auth2);
+    const list = await this.loadList(customerId, listName, auth2);
     let items = list.items.map((i) => i.productId === productId ? { ...i, quantity } : i);
     if (!items.some((i) => i.productId === productId)) items = [...items, { productId, quantity }];
     await this.put(customerId, list, items, auth2);
@@ -5738,13 +5918,14 @@ var FeeService = class {
    * Finds item fees for several products on one site
    * (`POST /itemFees/searchByProductIds`). Note the upstream asymmetry:
    * `productIds` is a comma-separated **string** and `siteCode` is singular.
+   * `siteFallback` goes in the query string, everything else in the body.
    */
   async searchItemFeesByProductIds(search, auth2 = SERVICE13) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.itemFeesBase()}/searchByProductIds`,
       auth: auth2,
-      body: search,
+      ...splitQuery(search, ["siteFallback"]),
       idempotent: true
       // pure read over POST — safe to replay on 5xx/429
     });
@@ -6350,9 +6531,9 @@ var AgenticCrudResource = class {
   list(query = {}, auth2 = SERVICE16) {
     return this.ctx.http.request({ method: "GET", path: this.path, auth: auth2, query: { ...query } });
   }
-  /** Structured search (`POST {path}/search`). Body is `{ q? }`. */
+  /** Structured search (`POST {path}/search`): `q` in the body, paging/sort/fields in the query. */
   search(query, auth2 = SERVICE16) {
-    return this.ctx.http.request({ method: "POST", path: `${this.path}/search`, auth: auth2, body: query });
+    return this.ctx.http.request({ method: "POST", path: `${this.path}/search`, auth: auth2, ...splitQuery(query, SEARCH_PAGING) });
   }
   /** Retrieve one entry by id (`GET {path}/{id}`). */
   get(id, opts = {}, auth2 = SERVICE16) {
@@ -6402,7 +6583,7 @@ var JobsResource = class {
   }
   /** Structured job search (`POST /jobs/search`). */
   search(query, auth2 = SERVICE16) {
-    return this.ctx.http.request({ method: "POST", path: `${this.base}/jobs/search`, auth: auth2, body: query });
+    return this.ctx.http.request({ method: "POST", path: `${this.base}/jobs/search`, auth: auth2, ...splitQuery(query, SEARCH_PAGING) });
   }
   /** Retrieve one job (`GET /jobs/{jobId}`). */
   get(jobId, auth2 = SERVICE16) {
@@ -6426,7 +6607,7 @@ var TemplatesResource = class {
   }
   /** Structured template search (`POST /agentic/templates/search`). */
   search(query, auth2 = SERVICE16) {
-    return this.ctx.http.request({ method: "POST", path: `${this.path}/search`, auth: auth2, body: query });
+    return this.ctx.http.request({ method: "POST", path: `${this.path}/search`, auth: auth2, ...splitQuery(query, SEARCH_PAGING) });
   }
   /**
    * Instantiate a new agent from a template
@@ -6459,7 +6640,7 @@ var LogsResource = class {
   }
   /** Structured request-log search (`POST /agentic/logs/requests/search`). */
   searchRequests(query, auth2 = SERVICE16) {
-    return this.ctx.http.request({ method: "POST", path: `${this.path}/requests/search`, auth: auth2, body: query });
+    return this.ctx.http.request({ method: "POST", path: `${this.path}/requests/search`, auth: auth2, ...splitQuery(query, SEARCH_PAGING) });
   }
   /** List session logs (`GET /agentic/logs/sessions`). */
   listSessions(query = {}, auth2 = SERVICE16) {
@@ -6471,7 +6652,7 @@ var LogsResource = class {
   }
   /** Structured session-log search (`POST /agentic/logs/sessions/search`). */
   searchSessions(query, auth2 = SERVICE16) {
-    return this.ctx.http.request({ method: "POST", path: `${this.path}/sessions/search`, auth: auth2, body: query });
+    return this.ctx.http.request({ method: "POST", path: `${this.path}/sessions/search`, auth: auth2, ...splitQuery(query, SEARCH_PAGING) });
   }
 };
 var AnalyticsResource = class {
@@ -6503,6 +6684,10 @@ function assertChatOptions(opts, method) {
 function sessionHeader(opts) {
   return opts.sessionId ? { headers: { "session-id": opts.sessionId } } : {};
 }
+var AUTH_KINDS = /* @__PURE__ */ new Set(["service", "anonymous", "customer", "raw"]);
+function isAuthContext(value) {
+  return AUTH_KINDS.has(String(value.kind));
+}
 var AiService = class {
   constructor(ctx) {
     this.ctx = ctx;
@@ -6571,12 +6756,13 @@ var AiService = class {
       body: input
     });
   }
-  /** List all agentic agents. */
-  async listAgents(auth2 = SERVICE17) {
+  async listAgents(queryOrAuth = {}, auth2 = SERVICE17) {
+    const [query, ctx] = isAuthContext(queryOrAuth) ? [{}, queryOrAuth] : [queryOrAuth, auth2];
     return this.ctx.http.request({
       method: "GET",
       path: `${this.base()}/agentic/agents`,
-      auth: auth2
+      auth: ctx,
+      query: { ...query }
     });
   }
   /** Retrieve one agent by id. */
@@ -6621,13 +6807,16 @@ var AiService = class {
       ...opts.force ? { query: { force: "true" } } : {}
     });
   }
-  /** Server-side agent search (`POST /agentic/agents/search`). */
+  /**
+   * Server-side agent search (`POST /agentic/agents/search`). `q` goes in the
+   * body; `pageNumber`, `pageSize`, `sort` and `fields` in the query string.
+   */
   async searchAgents(query, auth2 = SERVICE17) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/agentic/agents/search`,
       auth: auth2,
-      body: query
+      ...splitQuery(query, SEARCH_PAGING)
     });
   }
   /**
@@ -6680,21 +6869,22 @@ var AiService = class {
     });
     for await (const ev of events) yield ev.data;
   }
-  /** List stored agentic conversations (`GET /agentic/conversations`). */
-  async listConversations(auth2 = SERVICE17) {
+  async listConversations(queryOrAuth = {}, auth2 = SERVICE17) {
+    const [query, ctx] = isAuthContext(queryOrAuth) ? [{}, queryOrAuth] : [queryOrAuth, auth2];
     return this.ctx.http.request({
       method: "GET",
       path: `${this.base()}/agentic/conversations`,
-      auth: auth2
+      auth: ctx,
+      query: { ...query }
     });
   }
-  /** Server-side conversation search (`POST /agentic/conversations/search`). */
+  /** Server-side conversation search (`POST /agentic/conversations/search`), paged like {@link searchAgents}. */
   async searchConversations(query, auth2 = SERVICE17) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/agentic/conversations/search`,
       auth: auth2,
-      body: query
+      ...splitQuery(query, SEARCH_PAGING)
     });
   }
   // --- Standalone agentic reads / bulk operations ------------------------
@@ -8890,14 +9080,17 @@ var VendorService = class {
       auth: auth2
     });
   }
-  /** Search vendors (`POST /vendors/search`). A built filter in `q` is resolved to a string. */
+  /**
+   * Search vendors (`POST /vendors/search`). A built filter in `q` is resolved to
+   * a string; paging, sort and fields go in the query string.
+   */
   async searchVendors(query, auth2 = SERVICE33) {
-    const body = query.q !== void 0 ? { ...query, q: resolveQuery(query.q, { compoundLogicalQuery: false }) } : query;
+    const input = query.q !== void 0 ? { ...query, q: resolveQuery(query.q, { compoundLogicalQuery: false }) } : query;
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/vendors/search`,
       auth: auth2,
-      body
+      ...splitQuery(input, SEARCH_PAGING)
     });
   }
   /** Create a vendor. */
@@ -8992,10 +9185,18 @@ var CustomerAdminService = class {
       ...Object.keys(query).length ? { query } : {}
     });
   }
-  /** Search customers (`POST /customers/search`). A built filter in `q` is resolved to a string. */
+  /**
+   * Search customers (`POST /customers/search`). A built filter in `q` is resolved
+   * to a string; `pageNumber`, `pageSize`, `sort` and `expand` go in the query string.
+   */
   async searchCustomers(query, auth2 = SERVICE34) {
-    const body = query.q !== void 0 ? { ...query, q: resolveQuery(query.q, { compoundLogicalQuery: false }) } : query;
-    return this.ctx.http.request({ method: "POST", path: `${this.base()}/search`, auth: auth2, body });
+    const input = query.q !== void 0 ? { ...query, q: resolveQuery(query.q, { compoundLogicalQuery: false }) } : query;
+    return this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/search`,
+      auth: auth2,
+      ...splitQuery(input, ["pageNumber", "pageSize", "sort", "expand"])
+    });
   }
   /** Retrieve a customer profile by number. */
   async getCustomer(customerNumber, auth2 = SERVICE34) {