@viu/emporix-sdk 4.1.0 → 4.2.2

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @viu/emporix-sdk
 
+## 4.2.2
+
+### Patch Changes
+
+- [#372](https://github.com/viuteam/emporix-sdk/pull/372) [`b89a81a`](https://github.com/viuteam/emporix-sdk/commit/b89a81a9eed1cdbf781757d5e5f09820f6cb04af) Thanks [@amnael1](https://github.com/amnael1)! - docs(sdk): document published mappings and aborted import runs
+  
+  The import types and `triggerRun` / `retryRun` now describe the Import Service change of 2026-09-28, which the types already carried: a run executes each stream's published mappings, a dry run checks the drafts with `mappings: "draft"`, and runs report `mappingVersions` and `dryRunPublished`. They also name the trap that came with it — a run refused for never-published mappings still resolves with `200` and only then finishes `ABORTED`, so read the run back before treating it as started.
+
+## 4.2.0
+
+### Minor Changes
+
+- [#361](https://github.com/viuteam/emporix-sdk/pull/361) [`2d33114`](https://github.com/viuteam/emporix-sdk/commit/2d33114f8f7177e1d2178d46633ff3ac976ba3b4) Thanks [@amnael1](https://github.com/amnael1)! - feat(cart): add carts.execute for cart command chains
+  
+  `client.carts.execute(cartId, commands, auth, { onError, versioning })` wraps
+  Emporix's new `POST /cart/{tenant}/carts/{cartId}/execute`: up to ten cart
+  operations on one cart in a single request, typically `AddCartItem` followed by
+  `GetCart`, so the calculated cart comes back with the write. `CartCommand` types
+  each command's `data` from its REST operation. With the default
+  `onError: "fail"`, a failed command throws the error its REST call would have
+  thrown — the commands before it are already applied; `onError: "resume"`
+  returns every result. See `docs/cart.md`.
+  
+  React: `useCartCommands(cartId?)` runs a chain on the active cart and adopts a
+  trailing `GetCart` straight into the `useCart` cache — an add-to-cart costs one
+  request instead of the write plus a refetch. Any other chain, and any failure,
+  invalidates the cart.
+  
+  Angular: `injectCartMutations().execute(commands, opts?)` runs a chain and
+  invalidates the cart after success and after a failure.
+
+### Patch Changes
+
+- [#356](https://github.com/viuteam/emporix-sdk/pull/356) [`bde9867`](https://github.com/viuteam/emporix-sdk/commit/bde986759fd0b0869058d3e975a563fa761ec5a6) Thanks [@viu-release-bot](https://github.com/apps/viu-release-bot)! - chore(sdk): sync generated types with upstream Emporix API specs
+  
+  Updated services: cart
+
 ## 4.1.0
 
 ### Minor Changes

package/README.md

@@ -126,6 +126,7 @@ anonymous browsing, both when you need both.
 | `products.*` / `categories.*` (reads) | `anonymous` | — (pass `customer` for personalized pricing) |
 | `carts.*` | — | explicit `customer` or `anonymous` |
 | `carts.merge` | — | `customer` |
+| `carts.execute` ([command chains](../../docs/cart.md)) | — | `customer`, `anonymous`, or `service` with `cart.cart_manage` |
 | `companies.*` / `contacts.*` / `locations.*` / `customerGroups.*` (B2B) | — | `customer` (reads need `*_read_own`; mutations need `*_manage`) |
 | `media.*` (Asset CRUD + download) | `service` | `service` — server-only (`media.asset_read` / `media.asset_manage`); never call from the browser |
 

package/dist/cart.cjs

@@ -38,10 +38,50 @@ var EmporixError = class extends Error {
     return { name: this.name, message: this.message, status: this.status, body: scrub(this.body) };
   }
 };
+var EmporixAuthError = class extends EmporixError {
+};
+var EmporixForbiddenError = class extends EmporixError {
+};
 var EmporixNotFoundError = class extends EmporixError {
 };
 var EmporixValidationError = class extends EmporixError {
 };
+var EmporixServerError = class extends EmporixError {
+};
+var EmporixInsufficientScopeError = class extends EmporixForbiddenError {
+  requiredScope;
+  constructor(message, status, body, requiredScope) {
+    super(message, status, body);
+    this.requiredScope = requiredScope;
+  }
+};
+var SCOPE_HINT_RE = /missing scope[: ]+([a-z0-9._-]+)/i;
+function extractRequiredScope(body) {
+  if (body && typeof body === "object" && "details" in body) {
+    const details = body.details;
+    if (Array.isArray(details)) {
+      for (const d of details) {
+        if (typeof d === "string") {
+          const m = d.match(SCOPE_HINT_RE);
+          if (m) return m[1];
+        }
+      }
+    }
+  }
+  return void 0;
+}
+function errorFromResponse(status, message, body) {
+  if (status === 401) return new EmporixAuthError(message, status, body);
+  if (status === 403) {
+    const scope = extractRequiredScope(body);
+    if (scope) return new EmporixInsufficientScopeError(message, status, body, scope);
+    return new EmporixForbiddenError(message, status, body);
+  }
+  if (status === 404) return new EmporixNotFoundError(message, status, body);
+  if (status === 400 || status === 422) return new EmporixValidationError(message, status, body);
+  if (status >= 500) return new EmporixServerError(message, status, body);
+  return new EmporixError(message, status, body);
+}
 
 // src/services/cart.ts
 function requireCartAuth(auth) {
@@ -435,6 +475,51 @@ var CartService = class {
       auth: requireCartAuth(auth)
     });
   }
+  /**
+   * Runs up to 10 cart commands on this cart in one request, in order
+   * (`POST /carts/{cartId}/execute`). The typical chain is `AddCartItem` then
+   * `GetCart`: the calculated cart comes back without a second round trip.
+   *
+   * - `onError: "fail"` (default) stops at the first command that does not
+   *   answer 2xx and **throws the error that command's REST call would have
+   *   thrown** — an `EmporixNotFoundError` for a 404, … — with the command's
+   *   error body. The commands before it **have already been applied**.
+   * - `onError: "resume"` runs every command and resolves with all results;
+   *   check each `code`.
+   * - A `400` for the whole request (no commands or more than 10, an unknown
+   *   type, `versioning: "explicit"` without a `resourceVersion`) means no
+   *   command ran.
+   *
+   * The request takes about as long as its commands together — size the
+   * client's `timeouts.readMs` for long chains. It is never retried: a replay
+   * would apply the writes twice.
+   *
+   * `auth` is forwarded unguarded: a customer or anonymous token works on the
+   * shopper's own cart; a service token needs `cart.cart_manage`, plus
+   * `cart.cart_manage_external_prices` when a command carries an external
+   * price, product, fee or discount.
+   */
+  async execute(cartId, commands, auth, opts = {}) {
+    const path = `${this.base()}/${encodeURIComponent(cartId)}/execute`;
+    const res = await this.ctx.http.request({
+      method: "POST",
+      path,
+      auth,
+      query: { ...opts },
+      body: { commands }
+    });
+    if (opts.onError !== "resume") {
+      const failed = res.results.find((r) => r.code < 200 || r.code > 299);
+      if (failed) {
+        throw errorFromResponse(
+          failed.code,
+          `POST ${path} \u2192 command ${failed.index} (${failed.type}) \u2192 ${failed.code}`,
+          failed.data
+        );
+      }
+    }
+    return res;
+  }
 };
 
 exports.CartService = CartService;

package/dist/cart.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/errors.ts","../src/services/cart.ts"],"names":[],"mappings":";;;AACA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,cAAA;AAAA,EAAgB,eAAA;AAAA,EAAiB,OAAA;AAAA,EAAS,eAAA;AAAA,EAAiB,WAAA;AAAA,EAC3D,QAAA;AAAA,EAAU,eAAA;AAAA,EAAiB,eAAA;AAAA,EAAiB;AAC9C,CAAC,CAAA;AAED,SAAS,MAAM,IAAA,EAAwB;AACrC,EAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,GAAG,OAAO,IAAA,CAAK,IAAI,KAAK,CAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA,EAAG;AACpE,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,kBAAA,CAAmB,GAAA,CAAI,CAAA,CAAE,aAAa,CAAA,GAAI,gBAAA,GAAmB,KAAA,CAAM,CAAC,CAAA;AAAA,IAC/E;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAGO,IAAM,YAAA,GAAN,cAA2B,KAAA,CAAM;AAAA,EAC7B,MAAA;AAAA,EACA,IAAA;AAAA,EACT,WAAA,CAAY,OAAA,EAAiB,MAAA,EAAiB,IAAA,EAAgB;AAC5D,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AACvB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,GAAA,CAAA,MAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AAAA;AAAA,EAEA,MAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAE;AAAA,EAC/F;AACF,CAAA;AAOO,IAAM,oBAAA,GAAN,cAAmC,YAAA,CAAa;AAAC,CAAA;AAEjD,IAAM,sBAAA,GAAN,cAAqC,YAAA,CAAa;AAAC,CAAA;;;AC4B1D,SAAS,gBAAgB,IAAA,EAA4C;AACnE,EAAA,IAAI,SAAS,IAAA,CAAK,IAAA,KAAS,cAAc,IAAA,CAAK,IAAA,KAAS,cAAc,OAAO,IAAA;AAC5E,EAAA,MAAM,IAAI,sBAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,oBAAoB,IAAA,EAA4C;AACvE,EAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AAC7C,EAAA,MAAM,IAAI,uBAAuB,wDAAwD,CAAA;AAC3F;AAGO,IAAM,cAAN,MAAkB;AAAA,EAEvB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,MAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,MAAA,CAAA;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,SAAS;AAAC,KACjB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,MAAA,EAAgB,IAAA,EAAkC;AAC1D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,UAAA,CACJ,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAyC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACzE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,KAAA,CAAM,OAAO,IAAA,CAAK,IAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AACjE,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA;AAChC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QACvC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,KAAA;AAAA,QACA,IAAA,EAAM,gBAAgB,IAAI;AAAA,OAC3B,CAAA;AAAA,IACH,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,CAAA,YAAa,sBAAsB,OAAO,IAAA;AAC9C,MAAA,MAAM,CAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAA,CACJ,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,WACJ,MAAA,EACA,MAAA,EACA,OACA,IAAA,EACA,IAAA,GAA8B,EAAC,EAChB;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,KAAA;AAAA,MACN,GAAI,IAAA,CAAK,OAAA,GAAU,EAAE,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,GAAI;AAAC,KACtD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,MAAA,EAAgB,IAAA,EAAkC;AAC5D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,WAAA,CAAY,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AAChF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAyB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,IAAA;AAAK,KACd,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CAAa,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AACjF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,KAAA,EAAO,EAAE,KAAA,EAAO,IAAA,EAAK;AAAA,MACrB,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,QAAA,CAAS,MAAA,EAAgB,IAAA,EAAkD;AAC/E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,MACjD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,SAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,CAAU,MAAA,EAAgB,IAAA,EAAwC;AACtE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAoB;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,EAAkC;AAC9D,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,QAAA,CAAA;AAAA,MAC9B,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,QAAA,EAAkB,IAAA,EAAkC;AACnF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,QAAA;AAAS,KAClB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAA,CAAe,MAAA,EAAgB,QAAA,EAAkB,IAAA,EAAkC;AACvF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,eAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,QAAA;AAAS,KAClB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACqC;AACrC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAoC;AAAA,MACvD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,kBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,KAAK,YAAA,CAAa,MAAA,EAAQ,SAAS,UAAA,EAAY,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,KAAK,YAAA,CAAa,MAAA,EAAQ,SAAS,SAAA,EAAW,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,YAAA,CACJ,MAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,OAAsB,EAAC;AAC7B,IAAA,IAAI,SAAA,CAAU,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,EAAE,GAAG,SAAA,CAAU,QAAA,EAAU,IAAA,EAAM,UAAA,EAAY,CAAA;AAC7E,IAAA,IAAI,SAAA,CAAU,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,EAAE,GAAG,SAAA,CAAU,OAAA,EAAS,IAAA,EAAM,SAAA,EAAW,CAAA;AAC1E,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,SAAA,EAAW,IAAA;AAAK,KACzB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAA,CACZ,MAAA,EACA,OAAA,EACA,MACA,QAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAC/C,IAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,SAAA,IAAa,EAAC,EAAG,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AACtE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,SAAA,EAAW,CAAC,GAAG,MAAA,EAAQ,EAAE,GAAG,OAAA,EAAS,IAAA,EAAM,CAAA;AAAE,KACtD,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CACJ,cAAA,EACA,gBAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,cAAc,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA,EAAM,oBAAoB,IAAI,CAAA;AAAA,MAC9B,IAAA,EAAM,EAAE,KAAA,EAAO,gBAAA;AAAiB,KACjC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACA,MAAA,GAAqF,EAAC,EAC9D;AACxB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,KAAA,EAAO;AAAA,QACL,GAAI,OAAO,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,UAAA,EAAY,MAAA,CAAO,UAAA,EAAW;AAAA,QAC3E,GAAI,OAAO,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAS;AAAA,QACrE,GAAI,OAAO,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAK;AAAA,QACzD,GAAI,OAAO,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAO,OACjE;AAAA,MACA,IAAA,EAAM,KAAA;AAAA,MACN,UAAA,EAAY,IAAA;AAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,CAAO,MAAA,EAAgB,IAAA,EAAkC;AAC7D,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAA,CAAO,MAAA,EAAgB,KAAA,EAAwB,IAAA,EAAkC;AACrF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAsC;AAClF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAkB;AAAA,MACrC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,aAAA,CAAc,MAAA,EAAgB,IAAA,EAA4C;AAC9E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kBAAA,CAAmB,MAAA,EAAgB,IAAA,EAAkC;AACzE,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,qBAAA,CAAsB,MAAA,EAAgB,aAAA,EAAuB,IAAA,EAAkC;AACnG,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,cAAc,aAAa,CAAA,CAAA;AAAA,MACzD,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,uBAAA,CAAwB,MAAA,EAAgB,IAAA,EAAsD;AAClG,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAkC;AAAA,MACrD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,eAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AACF","file":"cart.cjs","sourcesContent":["/** Keys whose values are stripped from any serialised error body. */\nconst REDACTED_BODY_KEYS = new Set([\n  \"access_token\", \"refresh_token\", \"token\", \"customertoken\", \"saastoken\",\n  \"secret\", \"client_secret\", \"authorization\", \"password\",\n]);\n\nfunction scrub(body: unknown): unknown {\n  if (Array.isArray(body)) return body.map(scrub);\n  if (body && typeof body === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(body as Record<string, unknown>)) {\n      out[k] = REDACTED_BODY_KEYS.has(k.toLowerCase()) ? \"***redacted***\" : scrub(v);\n    }\n    return out;\n  }\n  return body;\n}\n\n/** Base class for every error thrown by the SDK. */\nexport class EmporixError extends Error {\n  readonly status: number | undefined;\n  readonly body: unknown;\n  constructor(message: string, status?: number, body?: unknown) {\n    super(message);\n    this.name = new.target.name;\n    this.status = status;\n    this.body = body;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n  /** Safe serialisation — token-like body fields are redacted. */\n  toJSON(): Record<string, unknown> {\n    return { name: this.name, message: this.message, status: this.status, body: scrub(this.body) };\n  }\n}\n\n/** 401 — authentication failed or token expired. */\nexport class EmporixAuthError extends EmporixError {}\n/** 403 — authenticated but not permitted. */\nexport class EmporixForbiddenError extends EmporixError {}\n/** 404 — resource not found. */\nexport class EmporixNotFoundError extends EmporixError {}\n/** 400/422 — request validation failed. */\nexport class EmporixValidationError extends EmporixError {}\n/** 5xx — server-side failure. */\nexport class EmporixServerError extends EmporixError {}\n/** Request aborted by the configured connect/read timeout. No HTTP status. */\nexport class EmporixTimeoutError extends EmporixError {}\n/** DNS/TLS/connection-level failure before or during the exchange. No HTTP status. */\nexport class EmporixNetworkError extends EmporixError {}\n\n/**\n * 403 with a `missing scope: <name>` hint in the body's `details` array.\n * Subclasses {@link EmporixForbiddenError} so existing 403 catches still work.\n */\nexport class EmporixInsufficientScopeError extends EmporixForbiddenError {\n  readonly requiredScope: string | undefined;\n  constructor(message: string, status: number, body: unknown, requiredScope?: string) {\n    super(message, status, body);\n    this.requiredScope = requiredScope;\n  }\n}\n\nconst SCOPE_HINT_RE = /missing scope[: ]+([a-z0-9._-]+)/i;\n\nfunction extractRequiredScope(body: unknown): string | undefined {\n  if (body && typeof body === \"object\" && \"details\" in body) {\n    const details = (body as { details?: unknown }).details;\n    if (Array.isArray(details)) {\n      for (const d of details) {\n        if (typeof d === \"string\") {\n          const m = d.match(SCOPE_HINT_RE);\n          if (m) return m[1];\n        }\n      }\n    }\n  }\n  return undefined;\n}\n\n/** Maps an HTTP status to the matching {@link EmporixError} subclass. */\nexport function errorFromResponse(status: number, message: string, body: unknown): EmporixError {\n  if (status === 401) return new EmporixAuthError(message, status, body);\n  if (status === 403) {\n    const scope = extractRequiredScope(body);\n    if (scope) return new EmporixInsufficientScopeError(message, status, body, scope);\n    return new EmporixForbiddenError(message, status, body);\n  }\n  if (status === 404) return new EmporixNotFoundError(message, status, body);\n  if (status === 400 || status === 422) return new EmporixValidationError(message, status, body);\n  if (status >= 500) return new EmporixServerError(message, status, body);\n  return new EmporixError(message, status, body);\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixNotFoundError, EmporixValidationError } from \"../core/errors\";\nimport type {\n  Cart as GeneratedCart,\n  CreateCart,\n  CreatedCart,\n  CartItemRequest,\n  UpdateCartItem,\n  AddressRequest,\n  AppliedDiscount,\n  BatchResponse as GeneratedBatchResponse,\n  SingleBatchResponse as GeneratedSingleBatchResponse,\n  CartValidationResult as GeneratedCartValidationResult,\n  CartItemResponse,\n  CartItemsBatchUpdateRequest,\n  CartItemsBatchUpdateResponse,\n  Search,\n  CartGetAll,\n  UpdateCart,\n  DiscountResponse,\n  CartDtRestrictions,\n} from \"../generated/cart\";\n\n/** A cart as returned by the Cart service (all generated fields). */\nexport type Cart = GeneratedCart;\n\n/** The cart-create response (`{ cartId, yrn }`, generated). */\nexport type CartCreated = CreatedCart;\n\n/** Generated request bodies (caller sends the exact wire shape). */\nexport type CreateCartInput = CreateCart;\nexport type CartItemInput = CartItemRequest;\nexport type CartItemUpdate = UpdateCartItem;\n\n/** Per-entry result of `addItemsBatch`. `status` is HTTP-style per entry (e.g. 201 = added, 4xx = failed). */\nexport type CartItemBatchEntry = GeneratedSingleBatchResponse;\n/** Response shape of `addItemsBatch` — one entry per input item, matching by `index`. */\nexport type CartItemsBatchResponse = GeneratedBatchResponse;\n\n/** An address payload for cart shipping/billing (generated). */\nexport type CartAddress = AddressRequest;\n\n/** Result of validating a cart's items (generated). */\nexport type CartValidationResult = GeneratedCartValidationResult;\n\n/** A single cart item as returned by the Cart service (generated). */\nexport type CartItem = CartItemResponse;\n\n/** Request body for updating multiple cart items (generated). */\nexport type CartItemsBatchUpdateInput = CartItemsBatchUpdateRequest;\n\n/** Per-entry response for a multi-item update (generated). */\nexport type CartItemsBatchUpdateResult = CartItemsBatchUpdateResponse;\n\n/** Body for searching carts (`POST /carts/search`) — a `q` filter. */\nexport type CartSearchInput = Search;\n\n/** A cart summary as returned by `POST /carts/search`. */\nexport type CartSummary = CartGetAll;\n\n/** Body for a full cart update (`PUT /carts/{id}`). */\nexport type CartUpdateInput = UpdateCart;\n\n/** A discount entry as returned by `GET /carts/{id}/discounts`. */\nexport type CartDiscount = DiscountResponse;\n\n/** Lead-time and non-delivery-time restrictions for a cart (`GET …/dtRestrictions`). */\nexport type CartDeliveryRestrictions = CartDtRestrictions;\n\nfunction requireCartAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && (auth.kind === \"customer\" || auth.kind === \"anonymous\")) return auth;\n  throw new EmporixValidationError(\n    \"CartService requires an explicit { kind: 'customer' } or { kind: 'anonymous' } AuthContext\",\n  );\n}\n\nfunction requireCustomerAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && auth.kind === \"customer\") return auth;\n  throw new EmporixValidationError(\"cart.merge requires a { kind: 'customer' } AuthContext\");\n}\n\n/** Cart operations. Every method requires an explicit customer/anonymous context. */\nexport class CartService {\n  static readonly channel = \"cart\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/cart/${this.ctx.tenant}/carts`;\n  }\n\n  /** Creates a cart. */\n  async create(\n    input: CreateCartInput | undefined,\n    auth: AuthContext,\n  ): Promise<CartCreated> {\n    return this.ctx.http.request<CartCreated>({\n      method: \"POST\",\n      path: this.base(),\n      auth: requireCartAuth(auth),\n      body: input ?? {},\n    });\n  }\n\n  /** Fetches a cart by id. */\n  async get(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Returns the current cart for the session, or null if none. */\n  /**\n   * Get the customer / anonymous cart matching the given criteria. Per Emporix:\n   * uniqueness is defined by `siteCode` + `type` + `legalEntityId` +\n   * (`customerId` derived from a customer token, or `sessionId` derived from an\n   * anonymous token). With `create: true`, Emporix creates a new cart if none\n   * matches.\n   *\n   * Returns `null` on 404 (no cart found and `create` was not set). All other\n   * errors are propagated.\n   */\n  async getCurrent(\n    auth: AuthContext,\n    opts: { siteCode: string; type?: string; legalEntityId?: string; create?: boolean },\n  ): Promise<Cart | null> {\n    const query: Record<string, string | number> = { siteCode: opts.siteCode };\n    if (opts.type !== undefined) query.type = opts.type;\n    if (opts.legalEntityId !== undefined) query.legalEntityId = opts.legalEntityId;\n    if (opts.create) query.create = \"true\";\n    try {\n      return await this.ctx.http.request<Cart>({\n        method: \"GET\",\n        path: this.base(),\n        query,\n        auth: requireCartAuth(auth),\n      });\n    } catch (e) {\n      if (e instanceof EmporixNotFoundError) return null;\n      throw e;\n    }\n  }\n\n  /** Adds an item. */\n  async addItem(\n    cartId: string,\n    item: CartItemInput,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n      body: item,\n    });\n  }\n\n  /**\n   * Adds multiple items in a single request via `POST /carts/{id}/itemsBatch`.\n   * Server-side limit is 200 entries per call — callers handling larger sets\n   * must chunk. The response carries a per-entry `status` (HTTP-style: 201\n   * for added, 4xx/5xx for failed) and `index` matching the input position;\n   * partial failures do **not** throw — inspect `status` per entry.\n   */\n  async addItemsBatch(\n    cartId: string,\n    items: CartItemInput[],\n    auth: AuthContext,\n  ): Promise<CartItemsBatchResponse> {\n    return this.ctx.http.request<CartItemsBatchResponse>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Updates an item. By default this is a **full replace** — the server expects\n   * the complete item (e.g. `itemYrn` + the `price` row). Pass\n   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a\n   * quantity-only change with just `{ quantity }`.\n   */\n  async updateItem(\n    cartId: string,\n    itemId: string,\n    patch: CartItemUpdate,\n    auth: AuthContext,\n    opts: { partial?: boolean } = {},\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n      body: patch,\n      ...(opts.partial ? { query: { partial: \"true\" } } : {}),\n    });\n  }\n\n  /** Removes an item. */\n  async removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Empties the cart. */\n  async clear(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /**\n   * Applies a coupon by code. Coupon application goes through the cart's\n   * `discounts` endpoint (`POST …/discounts` with a coupon-code-only payload) —\n   * the live API has no `…/coupons` path. The apply response only carries the\n   * applied-discount reference (`{ discountId, discountIndex }`), so the updated\n   * cart is re-fetched and returned to preserve the `Cart` contract.\n   */\n  async applyCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<AppliedDiscount>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: cartAuth,\n      body: { code },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Removes a coupon by code via `DELETE …/discounts?codes=<code>` — the live\n   * API has no `…/coupons/<code>` path. The delete responds 204 No Content, so\n   * the updated cart is re-fetched and returned.\n   */\n  async removeCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts`,\n      query: { codes: code },\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Validates the cart's items (pricing/consistency checks). */\n  async validate(cartId: string, auth: AuthContext): Promise<CartValidationResult> {\n    return this.ctx.http.request<CartValidationResult>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/validate`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Lists the items in a cart with calculated prices. */\n  async listItems(cartId: string, auth: AuthContext): Promise<CartItem[]> {\n    return this.ctx.http.request<CartItem[]>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Refreshes a cart and its items (re-prices), then returns the updated cart. */\n  async refresh(cartId: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/refresh`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Changes the cart's site (re-prices to the new site's currency), then returns the updated cart. */\n  async changeSite(cartId: string, siteCode: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/changeSite`,\n      auth: cartAuth,\n      body: { siteCode },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Changes the cart's currency (re-prices), then returns the updated cart. */\n  async changeCurrency(cartId: string, currency: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/changeCurrency`,\n      auth: cartAuth,\n      body: { currency },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Updates multiple cart items in one request (`PUT …/itemsBatch`). Like\n   * `addItemsBatch`, the response carries a per-entry `status`; partial failures\n   * do not throw — inspect each entry.\n   */\n  async updateItemsBatch(\n    cartId: string,\n    items: CartItemsBatchUpdateInput,\n    auth: AuthContext,\n  ): Promise<CartItemsBatchUpdateResult> {\n    return this.ctx.http.request<CartItemsBatchUpdateResult>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Sets the cart's shipping address, preserving the billing address.\n   *\n   * The API has no per-type address endpoint: addresses live in the cart's\n   * `addresses` array, written via `PUT /carts/{cartId}`. That array is a **full\n   * replace** — sending only one type leaves the other as an empty stub — so\n   * this method reads the cart, merges, writes, and re-fetches. Use\n   * {@link setAddresses} to set both in a single request.\n   */\n  async setShippingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.mergeAddress(cartId, address, \"SHIPPING\", requireCartAuth(auth));\n  }\n\n  /**\n   * Sets the cart's billing address, preserving the shipping address. See\n   * {@link setShippingAddress} for why this reads before writing.\n   */\n  async setBillingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.mergeAddress(cartId, address, \"BILLING\", requireCartAuth(auth));\n  }\n\n  /**\n   * Sets both cart addresses in one request (`PUT /carts/{cartId}`), skipping\n   * the read that {@link setShippingAddress} needs.\n   *\n   * **This replaces the cart's address set**: a type you omit is cleared, and\n   * `{}` clears both. Use it when you already hold both addresses (a checkout\n   * form submitting them together); use the per-type setters to change one and\n   * keep the other.\n   */\n  async setAddresses(\n    cartId: string,\n    addresses: { shipping?: CartAddress; billing?: CartAddress },\n    auth: AuthContext,\n  ): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    const next: CartAddress[] = [];\n    if (addresses.shipping) next.push({ ...addresses.shipping, type: \"SHIPPING\" });\n    if (addresses.billing) next.push({ ...addresses.billing, type: \"BILLING\" });\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth: cartAuth,\n      body: { addresses: next },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Reads the cart, replaces the entry of `type` with `address` (keeping every\n   * other type verbatim — resending it unchanged is what stops the server from\n   * wiping it), writes, and returns the re-fetched cart.\n   */\n  private async mergeAddress(\n    cartId: string,\n    address: CartAddress,\n    type: \"SHIPPING\" | \"BILLING\",\n    cartAuth: AuthContext,\n  ): Promise<Cart> {\n    const current = await this.get(cartId, cartAuth);\n    const others = (current.addresses ?? []).filter((a) => a.type !== type);\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth: cartAuth,\n      body: { addresses: [...others, { ...address, type }] },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Merges one or more anonymous carts into the specified customer cart.\n   * Per Emporix: the target cart in the path **must belong to the logged-in\n   * customer**, and each id in `anonymousCartIds` must belong to an anonymous\n   * customer. Anonymous carts go `CLOSED` on success.\n   *\n   * Requires a customer `AuthContext`.\n   */\n  async merge(\n    customerCartId: string,\n    anonymousCartIds: string[],\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${customerCartId}/merge`,\n      auth: requireCustomerAuth(auth),\n      body: { carts: anonymousCartIds },\n    });\n  }\n\n  /**\n   * Searches carts tenant-wide (`POST /carts/search`, body `{ q }`). This is a\n   * backend/admin operation — a customer token cannot scan other customers'\n   * carts, so `auth` is forwarded unguarded (pass a service token for admin\n   * use). The server enforces scope (403 on insufficient).\n   */\n  async search(\n    query: CartSearchInput,\n    auth: AuthContext,\n    params: { pageNumber?: number; pageSize?: number; sort?: string; fields?: string } = {},\n  ): Promise<CartSummary[]> {\n    return this.ctx.http.request<CartSummary[]>({\n      method: \"POST\",\n      path: `${this.base()}/search`,\n      query: {\n        ...(params.pageNumber === undefined ? {} : { pageNumber: params.pageNumber }),\n        ...(params.pageSize === undefined ? {} : { pageSize: params.pageSize }),\n        ...(params.sort === undefined ? {} : { sort: params.sort }),\n        ...(params.fields === undefined ? {} : { fields: params.fields }),\n      },\n      body: query,\n      idempotent: true, // pure read over POST — safe to replay on 5xx/429\n      auth,\n    });\n  }\n\n  /**\n   * Deletes a cart (`DELETE /carts/{cartId}`). Backend/admin or owner\n   * operation — `auth` is forwarded unguarded (service or customer). Returns\n   * nothing; the cart no longer exists.\n   */\n  async delete(cartId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Full-updates a cart (`PUT /carts/{cartId}`, body `UpdateCart`). Backend or\n   * owner operation — `auth` is forwarded unguarded. The endpoint returns 204,\n   * so the cart is re-fetched with the same `auth` (via a direct GET, not\n   * `get()`, so a service token is not rejected by the cart-auth guard) and\n   * returned.\n   */\n  async update(cartId: string, input: CartUpdateInput, auth: AuthContext): Promise<Cart> {\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n      body: input,\n    });\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n    });\n  }\n\n  /** Fetches a single cart item's details (`GET /carts/{cartId}/items/{itemId}`). */\n  async getItem(cartId: string, itemId: string, auth: AuthContext): Promise<CartItem> {\n    return this.ctx.http.request<CartItem>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Lists the discounts applied to a cart (`GET /carts/{cartId}/discounts`). */\n  async listDiscounts(cartId: string, auth: AuthContext): Promise<CartDiscount[]> {\n    return this.ctx.http.request<CartDiscount[]>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /**\n   * Removes all discounts from a cart (`DELETE /carts/{cartId}/discounts` with\n   * no `codes` filter), then re-fetches and returns the updated cart. Use\n   * `removeCoupon(code)` to remove a specific coupon by code.\n   */\n  async removeAllDiscounts(cartId: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Removes a single discount by its index (`DELETE\n   * /carts/{cartId}/discounts/{discountIndex}`), then re-fetches and returns\n   * the updated cart.\n   */\n  async removeDiscountByIndex(cartId: string, discountIndex: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts/${discountIndex}`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Retrieves the cart's lead-time and non-delivery-time restrictions (`GET /carts/{cartId}/dtRestrictions`). */\n  async getDeliveryRestrictions(cartId: string, auth: AuthContext): Promise<CartDeliveryRestrictions> {\n    return this.ctx.http.request<CartDeliveryRestrictions>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/dtRestrictions`,\n      auth: requireCartAuth(auth),\n    });\n  }\n}\n"]}
+{"version":3,"sources":["../src/core/errors.ts","../src/services/cart.ts"],"names":[],"mappings":";;;AACA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,cAAA;AAAA,EAAgB,eAAA;AAAA,EAAiB,OAAA;AAAA,EAAS,eAAA;AAAA,EAAiB,WAAA;AAAA,EAC3D,QAAA;AAAA,EAAU,eAAA;AAAA,EAAiB,eAAA;AAAA,EAAiB;AAC9C,CAAC,CAAA;AAED,SAAS,MAAM,IAAA,EAAwB;AACrC,EAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,GAAG,OAAO,IAAA,CAAK,IAAI,KAAK,CAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,IAA+B,CAAA,EAAG;AACpE,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,kBAAA,CAAmB,GAAA,CAAI,CAAA,CAAE,aAAa,CAAA,GAAI,gBAAA,GAAmB,KAAA,CAAM,CAAC,CAAA;AAAA,IAC/E;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAGO,IAAM,YAAA,GAAN,cAA2B,KAAA,CAAM;AAAA,EAC7B,MAAA;AAAA,EACA,IAAA;AAAA,EACT,WAAA,CAAY,OAAA,EAAiB,MAAA,EAAiB,IAAA,EAAgB;AAC5D,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AACvB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,GAAA,CAAA,MAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AAAA;AAAA,EAEA,MAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAE;AAAA,EAC/F;AACF,CAAA;AAGO,IAAM,gBAAA,GAAN,cAA+B,YAAA,CAAa;AAAC,CAAA;AAE7C,IAAM,qBAAA,GAAN,cAAoC,YAAA,CAAa;AAAC,CAAA;AAElD,IAAM,oBAAA,GAAN,cAAmC,YAAA,CAAa;AAAC,CAAA;AAEjD,IAAM,sBAAA,GAAN,cAAqC,YAAA,CAAa;AAAC,CAAA;AAEnD,IAAM,kBAAA,GAAN,cAAiC,YAAA,CAAa;AAAC,CAAA;AAU/C,IAAM,6BAAA,GAAN,cAA4C,qBAAA,CAAsB;AAAA,EAC9D,aAAA;AAAA,EACT,WAAA,CAAY,OAAA,EAAiB,MAAA,EAAgB,IAAA,EAAe,aAAA,EAAwB;AAClF,IAAA,KAAA,CAAM,OAAA,EAAS,QAAQ,IAAI,CAAA;AAC3B,IAAA,IAAA,CAAK,aAAA,GAAgB,aAAA;AAAA,EACvB;AACF,CAAA;AAEA,IAAM,aAAA,GAAgB,mCAAA;AAEtB,SAAS,qBAAqB,IAAA,EAAmC;AAC/D,EAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,aAAa,IAAA,EAAM;AACzD,IAAA,MAAM,UAAW,IAAA,CAA+B,OAAA;AAChD,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC1B,MAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,QAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AACzB,UAAA,MAAM,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA;AAC/B,UAAA,IAAI,CAAA,EAAG,OAAO,CAAA,CAAE,CAAC,CAAA;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,iBAAA,CAAkB,MAAA,EAAgB,OAAA,EAAiB,IAAA,EAA6B;AAC9F,EAAA,IAAI,WAAW,GAAA,EAAK,OAAO,IAAI,gBAAA,CAAiB,OAAA,EAAS,QAAQ,IAAI,CAAA;AACrE,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,MAAM,KAAA,GAAQ,qBAAqB,IAAI,CAAA;AACvC,IAAA,IAAI,OAAO,OAAO,IAAI,8BAA8B,OAAA,EAAS,MAAA,EAAQ,MAAM,KAAK,CAAA;AAChF,IAAA,OAAO,IAAI,qBAAA,CAAsB,OAAA,EAAS,MAAA,EAAQ,IAAI,CAAA;AAAA,EACxD;AACA,EAAA,IAAI,WAAW,GAAA,EAAK,OAAO,IAAI,oBAAA,CAAqB,OAAA,EAAS,QAAQ,IAAI,CAAA;AACzE,EAAA,IAAI,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA,SAAY,IAAI,sBAAA,CAAuB,OAAA,EAAS,MAAA,EAAQ,IAAI,CAAA;AAC7F,EAAA,IAAI,UAAU,GAAA,EAAK,OAAO,IAAI,kBAAA,CAAmB,OAAA,EAAS,QAAQ,IAAI,CAAA;AACtE,EAAA,OAAO,IAAI,YAAA,CAAa,OAAA,EAAS,MAAA,EAAQ,IAAI,CAAA;AAC/C;;;AC+BA,SAAS,gBAAgB,IAAA,EAA4C;AACnE,EAAA,IAAI,SAAS,IAAA,CAAK,IAAA,KAAS,cAAc,IAAA,CAAK,IAAA,KAAS,cAAc,OAAO,IAAA;AAC5E,EAAA,MAAM,IAAI,sBAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,oBAAoB,IAAA,EAA4C;AACvE,EAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,IAAA,KAAS,UAAA,EAAY,OAAO,IAAA;AAC7C,EAAA,MAAM,IAAI,uBAAuB,wDAAwD,CAAA;AAC3F;AAGO,IAAM,cAAN,MAAkB;AAAA,EAEvB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,MAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,MAAA,CAAA;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,SAAS;AAAC,KACjB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,MAAA,EAAgB,IAAA,EAAkC;AAC1D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,UAAA,CACJ,IAAA,EACA,IAAA,EACsB;AACtB,IAAA,MAAM,KAAA,GAAyC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AACzE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,KAAA,CAAM,OAAO,IAAA,CAAK,IAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AACjE,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAA,CAAM,MAAA,GAAS,MAAA;AAChC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QACvC,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,QAChB,KAAA;AAAA,QACA,IAAA,EAAM,gBAAgB,IAAI;AAAA,OAC3B,CAAA;AAAA,IACH,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,CAAA,YAAa,sBAAsB,OAAO,IAAA;AAC9C,MAAA,MAAM,CAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAA,CACJ,MAAA,EACA,IAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAgC;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,WACJ,MAAA,EACA,MAAA,EACA,OACA,IAAA,EACA,IAAA,GAA8B,EAAC,EAChB;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM,KAAA;AAAA,MACN,GAAI,IAAA,CAAK,OAAA,GAAU,EAAE,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,GAAI;AAAC,KACtD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAkC;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,MAAA,EAAgB,IAAA,EAAkC;AAC5D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,WAAA,CAAY,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AAChF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAyB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,IAAA;AAAK,KACd,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAA,CAAa,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAkC;AACjF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,KAAA,EAAO,EAAE,KAAA,EAAO,IAAA,EAAK;AAAA,MACrB,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,QAAA,CAAS,MAAA,EAAgB,IAAA,EAAkD;AAC/E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA8B;AAAA,MACjD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,SAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,CAAU,MAAA,EAAgB,IAAA,EAAwC;AACtE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAoB;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,MAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,EAAkC;AAC9D,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,QAAA,CAAA;AAAA,MAC9B,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,MAAA,EAAgB,QAAA,EAAkB,IAAA,EAAkC;AACnF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,QAAA;AAAS,KAClB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAA,CAAe,MAAA,EAAgB,QAAA,EAAkB,IAAA,EAAkC;AACvF,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,eAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,QAAA;AAAS,KAClB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAA,CACJ,MAAA,EACA,KAAA,EACA,IAAA,EACqC;AACrC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAoC;AAAA,MACvD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,WAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI,CAAA;AAAA,MAC1B,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,kBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,KAAK,YAAA,CAAa,MAAA,EAAQ,SAAS,UAAA,EAAY,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAA,CACJ,MAAA,EACA,OAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,KAAK,YAAA,CAAa,MAAA,EAAQ,SAAS,SAAA,EAAW,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,YAAA,CACJ,MAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,OAAsB,EAAC;AAC7B,IAAA,IAAI,SAAA,CAAU,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,EAAE,GAAG,SAAA,CAAU,QAAA,EAAU,IAAA,EAAM,UAAA,EAAY,CAAA;AAC7E,IAAA,IAAI,SAAA,CAAU,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,EAAE,GAAG,SAAA,CAAU,OAAA,EAAS,IAAA,EAAM,SAAA,EAAW,CAAA;AAC1E,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,SAAA,EAAW,IAAA;AAAK,KACzB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAA,CACZ,MAAA,EACA,OAAA,EACA,MACA,QAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAC/C,IAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,SAAA,IAAa,EAAC,EAAG,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,IAAI,CAAA;AACtE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,QAAA;AAAA,MACN,IAAA,EAAM,EAAE,SAAA,EAAW,CAAC,GAAG,MAAA,EAAQ,EAAE,GAAG,OAAA,EAAS,IAAA,EAAM,CAAA;AAAE,KACtD,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,KAAA,CACJ,cAAA,EACA,gBAAA,EACA,IAAA,EACe;AACf,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,cAAc,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA,EAAM,oBAAoB,IAAI,CAAA;AAAA,MAC9B,IAAA,EAAM,EAAE,KAAA,EAAO,gBAAA;AAAiB,KACjC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CACJ,KAAA,EACA,IAAA,EACA,MAAA,GAAqF,EAAC,EAC9D;AACxB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,KAAA,EAAO;AAAA,QACL,GAAI,OAAO,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,UAAA,EAAY,MAAA,CAAO,UAAA,EAAW;AAAA,QAC3E,GAAI,OAAO,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,MAAA,CAAO,QAAA,EAAS;AAAA,QACrE,GAAI,OAAO,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAK;AAAA,QACzD,GAAI,OAAO,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAO,OACjE;AAAA,MACA,IAAA,EAAM,KAAA;AAAA,MACN,UAAA,EAAY,IAAA;AAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,CAAO,MAAA,EAAgB,IAAA,EAAkC;AAC7D,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAA,CAAO,MAAA,EAAgB,KAAA,EAAwB,IAAA,EAAkC;AACrF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MACjC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,CAAA;AAAA,MAC9B;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,CAAQ,MAAA,EAAgB,MAAA,EAAgB,IAAA,EAAsC;AAClF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAkB;AAAA,MACrC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MAC9C,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,aAAA,CAAc,MAAA,EAAgB,IAAA,EAA4C;AAC9E,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kBAAA,CAAmB,MAAA,EAAgB,IAAA,EAAkC;AACzE,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,UAAA,CAAA;AAAA,MAC9B,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,qBAAA,CAAsB,MAAA,EAAgB,aAAA,EAAuB,IAAA,EAAkC;AACnG,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,MAAM,cAAc,aAAa,CAAA,CAAA;AAAA,MACzD,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,uBAAA,CAAwB,MAAA,EAAgB,IAAA,EAAsD;AAClG,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAkC;AAAA,MACrD,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,MAAM,CAAA,eAAA,CAAA;AAAA,MAC9B,IAAA,EAAM,gBAAgB,IAAI;AAAA,KAC3B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA0BA,MAAM,OAAA,CACJ,MAAA,EACA,UACA,IAAA,EACA,IAAA,GAA2B,EAAC,EACA;AAC5B,IAAA,MAAM,IAAA,GAAO,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,kBAAA,CAAmB,MAAM,CAAC,CAAA,QAAA,CAAA;AACzD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA2B;AAAA,MACzD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,IAAA;AAAA,MACA,KAAA,EAAO,EAAE,GAAG,IAAA,EAAK;AAAA,MACjB,IAAA,EAAM,EAAE,QAAA;AAAS,KAClB,CAAA;AACD,IAAA,IAAI,IAAA,CAAK,YAAY,QAAA,EAAU;AAC7B,MAAA,MAAM,MAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,GAAO,GAAA,IAAO,CAAA,CAAE,IAAA,GAAO,GAAG,CAAA;AACnE,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,iBAAA;AAAA,UACJ,MAAA,CAAO,IAAA;AAAA,UACP,CAAA,KAAA,EAAQ,IAAI,CAAA,gBAAA,EAAc,MAAA,CAAO,KAAK,KAAK,MAAA,CAAO,IAAI,CAAA,SAAA,EAAO,MAAA,CAAO,IAAI,CAAA,CAAA;AAAA,UACxE,MAAA,CAAO;AAAA,SACT;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACF","file":"cart.cjs","sourcesContent":["/** Keys whose values are stripped from any serialised error body. */\nconst REDACTED_BODY_KEYS = new Set([\n  \"access_token\", \"refresh_token\", \"token\", \"customertoken\", \"saastoken\",\n  \"secret\", \"client_secret\", \"authorization\", \"password\",\n]);\n\nfunction scrub(body: unknown): unknown {\n  if (Array.isArray(body)) return body.map(scrub);\n  if (body && typeof body === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(body as Record<string, unknown>)) {\n      out[k] = REDACTED_BODY_KEYS.has(k.toLowerCase()) ? \"***redacted***\" : scrub(v);\n    }\n    return out;\n  }\n  return body;\n}\n\n/** Base class for every error thrown by the SDK. */\nexport class EmporixError extends Error {\n  readonly status: number | undefined;\n  readonly body: unknown;\n  constructor(message: string, status?: number, body?: unknown) {\n    super(message);\n    this.name = new.target.name;\n    this.status = status;\n    this.body = body;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n  /** Safe serialisation — token-like body fields are redacted. */\n  toJSON(): Record<string, unknown> {\n    return { name: this.name, message: this.message, status: this.status, body: scrub(this.body) };\n  }\n}\n\n/** 401 — authentication failed or token expired. */\nexport class EmporixAuthError extends EmporixError {}\n/** 403 — authenticated but not permitted. */\nexport class EmporixForbiddenError extends EmporixError {}\n/** 404 — resource not found. */\nexport class EmporixNotFoundError extends EmporixError {}\n/** 400/422 — request validation failed. */\nexport class EmporixValidationError extends EmporixError {}\n/** 5xx — server-side failure. */\nexport class EmporixServerError extends EmporixError {}\n/** Request aborted by the configured connect/read timeout. No HTTP status. */\nexport class EmporixTimeoutError extends EmporixError {}\n/** DNS/TLS/connection-level failure before or during the exchange. No HTTP status. */\nexport class EmporixNetworkError extends EmporixError {}\n\n/**\n * 403 with a `missing scope: <name>` hint in the body's `details` array.\n * Subclasses {@link EmporixForbiddenError} so existing 403 catches still work.\n */\nexport class EmporixInsufficientScopeError extends EmporixForbiddenError {\n  readonly requiredScope: string | undefined;\n  constructor(message: string, status: number, body: unknown, requiredScope?: string) {\n    super(message, status, body);\n    this.requiredScope = requiredScope;\n  }\n}\n\nconst SCOPE_HINT_RE = /missing scope[: ]+([a-z0-9._-]+)/i;\n\nfunction extractRequiredScope(body: unknown): string | undefined {\n  if (body && typeof body === \"object\" && \"details\" in body) {\n    const details = (body as { details?: unknown }).details;\n    if (Array.isArray(details)) {\n      for (const d of details) {\n        if (typeof d === \"string\") {\n          const m = d.match(SCOPE_HINT_RE);\n          if (m) return m[1];\n        }\n      }\n    }\n  }\n  return undefined;\n}\n\n/** Maps an HTTP status to the matching {@link EmporixError} subclass. */\nexport function errorFromResponse(status: number, message: string, body: unknown): EmporixError {\n  if (status === 401) return new EmporixAuthError(message, status, body);\n  if (status === 403) {\n    const scope = extractRequiredScope(body);\n    if (scope) return new EmporixInsufficientScopeError(message, status, body, scope);\n    return new EmporixForbiddenError(message, status, body);\n  }\n  if (status === 404) return new EmporixNotFoundError(message, status, body);\n  if (status === 400 || status === 422) return new EmporixValidationError(message, status, body);\n  if (status >= 500) return new EmporixServerError(message, status, body);\n  return new EmporixError(message, status, body);\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { EmporixNotFoundError, EmporixValidationError, errorFromResponse } from \"../core/errors\";\nimport type {\n  Cart as GeneratedCart,\n  CreateCart,\n  CreatedCart,\n  CartItemRequest,\n  UpdateCartItem,\n  AddressRequest,\n  AppliedDiscount,\n  BatchResponse as GeneratedBatchResponse,\n  SingleBatchResponse as GeneratedSingleBatchResponse,\n  CartValidationResult as GeneratedCartValidationResult,\n  CartItemResponse,\n  CartItemsBatchUpdateRequest,\n  CartItemsBatchUpdateResponse,\n  Search,\n  CartGetAll,\n  UpdateCart,\n  DiscountResponse,\n  CartDtRestrictions,\n  Discount,\n  ExecuteCommand,\n  ExecuteCommandResult,\n  ExecuteResponse,\n  PostCartExecuteData,\n} from \"../generated/cart\";\n\n/** A cart as returned by the Cart service (all generated fields). */\nexport type Cart = GeneratedCart;\n\n/** The cart-create response (`{ cartId, yrn }`, generated). */\nexport type CartCreated = CreatedCart;\n\n/** Generated request bodies (caller sends the exact wire shape). */\nexport type CreateCartInput = CreateCart;\nexport type CartItemInput = CartItemRequest;\nexport type CartItemUpdate = UpdateCartItem;\n\n/** Per-entry result of `addItemsBatch`. `status` is HTTP-style per entry (e.g. 201 = added, 4xx = failed). */\nexport type CartItemBatchEntry = GeneratedSingleBatchResponse;\n/** Response shape of `addItemsBatch` — one entry per input item, matching by `index`. */\nexport type CartItemsBatchResponse = GeneratedBatchResponse;\n\n/** An address payload for cart shipping/billing (generated). */\nexport type CartAddress = AddressRequest;\n\n/** Result of validating a cart's items (generated). */\nexport type CartValidationResult = GeneratedCartValidationResult;\n\n/** A single cart item as returned by the Cart service (generated). */\nexport type CartItem = CartItemResponse;\n\n/** Request body for updating multiple cart items (generated). */\nexport type CartItemsBatchUpdateInput = CartItemsBatchUpdateRequest;\n\n/** Per-entry response for a multi-item update (generated). */\nexport type CartItemsBatchUpdateResult = CartItemsBatchUpdateResponse;\n\n/** Body for searching carts (`POST /carts/search`) — a `q` filter. */\nexport type CartSearchInput = Search;\n\n/** A cart summary as returned by `POST /carts/search`. */\nexport type CartSummary = CartGetAll;\n\n/** Body for a full cart update (`PUT /carts/{id}`). */\nexport type CartUpdateInput = UpdateCart;\n\n/** A discount entry as returned by `GET /carts/{id}/discounts`. */\nexport type CartDiscount = DiscountResponse;\n\n/** Lead-time and non-delivery-time restrictions for a cart (`GET …/dtRestrictions`). */\nexport type CartDeliveryRestrictions = CartDtRestrictions;\n\n/** Body for applying a discount (`POST /carts/{id}/discounts`, generated). */\nexport type CartDiscountInput = Discount;\n\n/**\n * Request body per command type of {@link CartService.execute}. The spec states\n * this only in prose — its `data` is an untyped object — so it is the one\n * hand-written piece. A command type missing here (one Emporix adds after this\n * was written) keeps the spec's untyped `data` and still works.\n */\nexport interface CartCommandBodies {\n  AddCartItem: CartItemInput;\n  UpdateCartItem: CartItemUpdate;\n  AddCartItemsBatch: CartItemInput[];\n  UpdateCartItemsBatch: CartItemsBatchUpdateInput;\n  UpdateCart: CartUpdateInput;\n  ApplyCartDiscount: CartDiscountInput;\n}\n\n/**\n * One command of a {@link CartService.execute} chain: `type` picks the REST\n * operation, `data` is that operation's request body, `options` holds its\n * remaining path and query parameters (`itemId`, `partial`, `expandCalculation`,\n * `zipCode`, `countryCode`, `resourceVersion`, `codes`, `discountIndex`). The\n * cart id is the `execute` path parameter, never a command field.\n *\n * `options` is the generated type, where every field is optional: `itemId`\n * (`UpdateCartItem`, `DeleteCartItem`) and `discountIndex` (`DeleteCartDiscount`)\n * are required by the server, which reports a missing one on that command.\n */\nexport type CartCommand = {\n  [T in ExecuteCommand[\"type\"]]: Omit<ExecuteCommand, \"type\" | \"data\"> & { type: T } &\n    (T extends keyof CartCommandBodies ? { data: CartCommandBodies[T] } : Pick<ExecuteCommand, \"data\">);\n}[ExecuteCommand[\"type\"]];\n\n/** `onError` and `versioning` of {@link CartService.execute} — both query parameters (generated). */\nexport type CartExecuteOptions = NonNullable<PostCartExecuteData[\"query\"]>;\n\n/** The `207` body of {@link CartService.execute}: one result per command that ran, in order (generated). */\nexport type CartExecuteResult = ExecuteResponse;\n\n/**\n * One entry of {@link CartExecuteResult}`.results`: `code`/`status` of the\n * equivalent REST call, and as `data` its response body — or its error body\n * when `code` is not 2xx; absent for a 204 (generated).\n */\nexport type CartCommandResult = ExecuteCommandResult;\n\nfunction requireCartAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && (auth.kind === \"customer\" || auth.kind === \"anonymous\")) return auth;\n  throw new EmporixValidationError(\n    \"CartService requires an explicit { kind: 'customer' } or { kind: 'anonymous' } AuthContext\",\n  );\n}\n\nfunction requireCustomerAuth(auth: AuthContext | undefined): AuthContext {\n  if (auth && auth.kind === \"customer\") return auth;\n  throw new EmporixValidationError(\"cart.merge requires a { kind: 'customer' } AuthContext\");\n}\n\n/** Cart operations. Every method requires an explicit customer/anonymous context. */\nexport class CartService {\n  static readonly channel = \"cart\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/cart/${this.ctx.tenant}/carts`;\n  }\n\n  /** Creates a cart. */\n  async create(\n    input: CreateCartInput | undefined,\n    auth: AuthContext,\n  ): Promise<CartCreated> {\n    return this.ctx.http.request<CartCreated>({\n      method: \"POST\",\n      path: this.base(),\n      auth: requireCartAuth(auth),\n      body: input ?? {},\n    });\n  }\n\n  /** Fetches a cart by id. */\n  async get(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Returns the current cart for the session, or null if none. */\n  /**\n   * Get the customer / anonymous cart matching the given criteria. Per Emporix:\n   * uniqueness is defined by `siteCode` + `type` + `legalEntityId` +\n   * (`customerId` derived from a customer token, or `sessionId` derived from an\n   * anonymous token). With `create: true`, Emporix creates a new cart if none\n   * matches.\n   *\n   * Returns `null` on 404 (no cart found and `create` was not set). All other\n   * errors are propagated.\n   */\n  async getCurrent(\n    auth: AuthContext,\n    opts: { siteCode: string; type?: string; legalEntityId?: string; create?: boolean },\n  ): Promise<Cart | null> {\n    const query: Record<string, string | number> = { siteCode: opts.siteCode };\n    if (opts.type !== undefined) query.type = opts.type;\n    if (opts.legalEntityId !== undefined) query.legalEntityId = opts.legalEntityId;\n    if (opts.create) query.create = \"true\";\n    try {\n      return await this.ctx.http.request<Cart>({\n        method: \"GET\",\n        path: this.base(),\n        query,\n        auth: requireCartAuth(auth),\n      });\n    } catch (e) {\n      if (e instanceof EmporixNotFoundError) return null;\n      throw e;\n    }\n  }\n\n  /** Adds an item. */\n  async addItem(\n    cartId: string,\n    item: CartItemInput,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n      body: item,\n    });\n  }\n\n  /**\n   * Adds multiple items in a single request via `POST /carts/{id}/itemsBatch`.\n   * Server-side limit is 200 entries per call — callers handling larger sets\n   * must chunk. The response carries a per-entry `status` (HTTP-style: 201\n   * for added, 4xx/5xx for failed) and `index` matching the input position;\n   * partial failures do **not** throw — inspect `status` per entry.\n   */\n  async addItemsBatch(\n    cartId: string,\n    items: CartItemInput[],\n    auth: AuthContext,\n  ): Promise<CartItemsBatchResponse> {\n    return this.ctx.http.request<CartItemsBatchResponse>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Updates an item. By default this is a **full replace** — the server expects\n   * the complete item (e.g. `itemYrn` + the `price` row). Pass\n   * `{ partial: true }` to send a **partial update** (`?partial=true`), e.g. a\n   * quantity-only change with just `{ quantity }`.\n   */\n  async updateItem(\n    cartId: string,\n    itemId: string,\n    patch: CartItemUpdate,\n    auth: AuthContext,\n    opts: { partial?: boolean } = {},\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n      body: patch,\n      ...(opts.partial ? { query: { partial: \"true\" } } : {}),\n    });\n  }\n\n  /** Removes an item. */\n  async removeItem(cartId: string, itemId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Empties the cart. */\n  async clear(cartId: string, auth: AuthContext): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /**\n   * Applies a coupon by code. Coupon application goes through the cart's\n   * `discounts` endpoint (`POST …/discounts` with a coupon-code-only payload) —\n   * the live API has no `…/coupons` path. The apply response only carries the\n   * applied-discount reference (`{ discountId, discountIndex }`), so the updated\n   * cart is re-fetched and returned to preserve the `Cart` contract.\n   */\n  async applyCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<AppliedDiscount>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: cartAuth,\n      body: { code },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Removes a coupon by code via `DELETE …/discounts?codes=<code>` — the live\n   * API has no `…/coupons/<code>` path. The delete responds 204 No Content, so\n   * the updated cart is re-fetched and returned.\n   */\n  async removeCoupon(cartId: string, code: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts`,\n      query: { codes: code },\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Validates the cart's items (pricing/consistency checks). */\n  async validate(cartId: string, auth: AuthContext): Promise<CartValidationResult> {\n    return this.ctx.http.request<CartValidationResult>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/validate`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Lists the items in a cart with calculated prices. */\n  async listItems(cartId: string, auth: AuthContext): Promise<CartItem[]> {\n    return this.ctx.http.request<CartItem[]>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/items`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Refreshes a cart and its items (re-prices), then returns the updated cart. */\n  async refresh(cartId: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/refresh`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Changes the cart's site (re-prices to the new site's currency), then returns the updated cart. */\n  async changeSite(cartId: string, siteCode: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/changeSite`,\n      auth: cartAuth,\n      body: { siteCode },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Changes the cart's currency (re-prices), then returns the updated cart. */\n  async changeCurrency(cartId: string, currency: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"POST\",\n      path: `${this.base()}/${cartId}/changeCurrency`,\n      auth: cartAuth,\n      body: { currency },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Updates multiple cart items in one request (`PUT …/itemsBatch`). Like\n   * `addItemsBatch`, the response carries a per-entry `status`; partial failures\n   * do not throw — inspect each entry.\n   */\n  async updateItemsBatch(\n    cartId: string,\n    items: CartItemsBatchUpdateInput,\n    auth: AuthContext,\n  ): Promise<CartItemsBatchUpdateResult> {\n    return this.ctx.http.request<CartItemsBatchUpdateResult>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}/itemsBatch`,\n      auth: requireCartAuth(auth),\n      body: items,\n    });\n  }\n\n  /**\n   * Sets the cart's shipping address, preserving the billing address.\n   *\n   * The API has no per-type address endpoint: addresses live in the cart's\n   * `addresses` array, written via `PUT /carts/{cartId}`. That array is a **full\n   * replace** — sending only one type leaves the other as an empty stub — so\n   * this method reads the cart, merges, writes, and re-fetches. Use\n   * {@link setAddresses} to set both in a single request.\n   */\n  async setShippingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.mergeAddress(cartId, address, \"SHIPPING\", requireCartAuth(auth));\n  }\n\n  /**\n   * Sets the cart's billing address, preserving the shipping address. See\n   * {@link setShippingAddress} for why this reads before writing.\n   */\n  async setBillingAddress(\n    cartId: string,\n    address: CartAddress,\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.mergeAddress(cartId, address, \"BILLING\", requireCartAuth(auth));\n  }\n\n  /**\n   * Sets both cart addresses in one request (`PUT /carts/{cartId}`), skipping\n   * the read that {@link setShippingAddress} needs.\n   *\n   * **This replaces the cart's address set**: a type you omit is cleared, and\n   * `{}` clears both. Use it when you already hold both addresses (a checkout\n   * form submitting them together); use the per-type setters to change one and\n   * keep the other.\n   */\n  async setAddresses(\n    cartId: string,\n    addresses: { shipping?: CartAddress; billing?: CartAddress },\n    auth: AuthContext,\n  ): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    const next: CartAddress[] = [];\n    if (addresses.shipping) next.push({ ...addresses.shipping, type: \"SHIPPING\" });\n    if (addresses.billing) next.push({ ...addresses.billing, type: \"BILLING\" });\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth: cartAuth,\n      body: { addresses: next },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Reads the cart, replaces the entry of `type` with `address` (keeping every\n   * other type verbatim — resending it unchanged is what stops the server from\n   * wiping it), writes, and returns the re-fetched cart.\n   */\n  private async mergeAddress(\n    cartId: string,\n    address: CartAddress,\n    type: \"SHIPPING\" | \"BILLING\",\n    cartAuth: AuthContext,\n  ): Promise<Cart> {\n    const current = await this.get(cartId, cartAuth);\n    const others = (current.addresses ?? []).filter((a) => a.type !== type);\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth: cartAuth,\n      body: { addresses: [...others, { ...address, type }] },\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Merges one or more anonymous carts into the specified customer cart.\n   * Per Emporix: the target cart in the path **must belong to the logged-in\n   * customer**, and each id in `anonymousCartIds` must belong to an anonymous\n   * customer. Anonymous carts go `CLOSED` on success.\n   *\n   * Requires a customer `AuthContext`.\n   */\n  async merge(\n    customerCartId: string,\n    anonymousCartIds: string[],\n    auth: AuthContext,\n  ): Promise<Cart> {\n    return this.ctx.http.request<Cart>({\n      method: \"POST\",\n      path: `${this.base()}/${customerCartId}/merge`,\n      auth: requireCustomerAuth(auth),\n      body: { carts: anonymousCartIds },\n    });\n  }\n\n  /**\n   * Searches carts tenant-wide (`POST /carts/search`, body `{ q }`). This is a\n   * backend/admin operation — a customer token cannot scan other customers'\n   * carts, so `auth` is forwarded unguarded (pass a service token for admin\n   * use). The server enforces scope (403 on insufficient).\n   */\n  async search(\n    query: CartSearchInput,\n    auth: AuthContext,\n    params: { pageNumber?: number; pageSize?: number; sort?: string; fields?: string } = {},\n  ): Promise<CartSummary[]> {\n    return this.ctx.http.request<CartSummary[]>({\n      method: \"POST\",\n      path: `${this.base()}/search`,\n      query: {\n        ...(params.pageNumber === undefined ? {} : { pageNumber: params.pageNumber }),\n        ...(params.pageSize === undefined ? {} : { pageSize: params.pageSize }),\n        ...(params.sort === undefined ? {} : { sort: params.sort }),\n        ...(params.fields === undefined ? {} : { fields: params.fields }),\n      },\n      body: query,\n      idempotent: true, // pure read over POST — safe to replay on 5xx/429\n      auth,\n    });\n  }\n\n  /**\n   * Deletes a cart (`DELETE /carts/{cartId}`). Backend/admin or owner\n   * operation — `auth` is forwarded unguarded (service or customer). Returns\n   * nothing; the cart no longer exists.\n   */\n  async delete(cartId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Full-updates a cart (`PUT /carts/{cartId}`, body `UpdateCart`). Backend or\n   * owner operation — `auth` is forwarded unguarded. The endpoint returns 204,\n   * so the cart is re-fetched with the same `auth` (via a direct GET, not\n   * `get()`, so a service token is not rejected by the cart-auth guard) and\n   * returned.\n   */\n  async update(cartId: string, input: CartUpdateInput, auth: AuthContext): Promise<Cart> {\n    await this.ctx.http.request<void>({\n      method: \"PUT\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n      body: input,\n    });\n    return this.ctx.http.request<Cart>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}`,\n      auth,\n    });\n  }\n\n  /** Fetches a single cart item's details (`GET /carts/{cartId}/items/{itemId}`). */\n  async getItem(cartId: string, itemId: string, auth: AuthContext): Promise<CartItem> {\n    return this.ctx.http.request<CartItem>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/items/${itemId}`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /** Lists the discounts applied to a cart (`GET /carts/{cartId}/discounts`). */\n  async listDiscounts(cartId: string, auth: AuthContext): Promise<CartDiscount[]> {\n    return this.ctx.http.request<CartDiscount[]>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /**\n   * Removes all discounts from a cart (`DELETE /carts/{cartId}/discounts` with\n   * no `codes` filter), then re-fetches and returns the updated cart. Use\n   * `removeCoupon(code)` to remove a specific coupon by code.\n   */\n  async removeAllDiscounts(cartId: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /**\n   * Removes a single discount by its index (`DELETE\n   * /carts/{cartId}/discounts/{discountIndex}`), then re-fetches and returns\n   * the updated cart.\n   */\n  async removeDiscountByIndex(cartId: string, discountIndex: string, auth: AuthContext): Promise<Cart> {\n    const cartAuth = requireCartAuth(auth);\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${cartId}/discounts/${discountIndex}`,\n      auth: cartAuth,\n    });\n    return this.get(cartId, cartAuth);\n  }\n\n  /** Retrieves the cart's lead-time and non-delivery-time restrictions (`GET /carts/{cartId}/dtRestrictions`). */\n  async getDeliveryRestrictions(cartId: string, auth: AuthContext): Promise<CartDeliveryRestrictions> {\n    return this.ctx.http.request<CartDeliveryRestrictions>({\n      method: \"GET\",\n      path: `${this.base()}/${cartId}/dtRestrictions`,\n      auth: requireCartAuth(auth),\n    });\n  }\n\n  /**\n   * Runs up to 10 cart commands on this cart in one request, in order\n   * (`POST /carts/{cartId}/execute`). The typical chain is `AddCartItem` then\n   * `GetCart`: the calculated cart comes back without a second round trip.\n   *\n   * - `onError: \"fail\"` (default) stops at the first command that does not\n   *   answer 2xx and **throws the error that command's REST call would have\n   *   thrown** — an `EmporixNotFoundError` for a 404, … — with the command's\n   *   error body. The commands before it **have already been applied**.\n   * - `onError: \"resume\"` runs every command and resolves with all results;\n   *   check each `code`.\n   * - A `400` for the whole request (no commands or more than 10, an unknown\n   *   type, `versioning: \"explicit\"` without a `resourceVersion`) means no\n   *   command ran.\n   *\n   * The request takes about as long as its commands together — size the\n   * client's `timeouts.readMs` for long chains. It is never retried: a replay\n   * would apply the writes twice.\n   *\n   * `auth` is forwarded unguarded: a customer or anonymous token works on the\n   * shopper's own cart; a service token needs `cart.cart_manage`, plus\n   * `cart.cart_manage_external_prices` when a command carries an external\n   * price, product, fee or discount.\n   */\n  async execute(\n    cartId: string,\n    commands: CartCommand[],\n    auth: AuthContext,\n    opts: CartExecuteOptions = {},\n  ): Promise<CartExecuteResult> {\n    const path = `${this.base()}/${encodeURIComponent(cartId)}/execute`;\n    const res = await this.ctx.http.request<CartExecuteResult>({\n      method: \"POST\",\n      path,\n      auth,\n      query: { ...opts },\n      body: { commands },\n    });\n    if (opts.onError !== \"resume\") {\n      const failed = res.results.find((r) => r.code < 200 || r.code > 299);\n      if (failed) {\n        throw errorFromResponse(\n          failed.code,\n          `POST ${path} → command ${failed.index} (${failed.type}) → ${failed.code}`,\n          failed.data,\n        );\n      }\n    }\n    return res;\n  }\n}\n"]}