@withpotter/lib 0.13.0-next.101

package/dist/api/service-missing.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/service-missing.ts"],"sourcesContent":["import { ApiRequestError } from './core';\n\n/**\n * Whether a failed read means the backend does not have the service at all.\n *\n * The dashboard is one build over more than one backend, and a box's engine\n * does not serve everything Boxspace does. Asked for a list it has no route\n * for, it answers in the router's own words (\"Cannot GET /waitlist/queue\",\n * \"Invalid API path\", \"Validation failed (uuid is expected)\") and pages were\n * printing that in a red banner with a Retry beside it. None of it is something\n * a merchant can act on, and retrying asks the same missing route again.\n *\n * So a page asks here first, and says a missing service in a plain sentence of\n * its own. Everything else (no network, a 5xx, a refusal, a real validation\n * error) is still an error and is still shown as one.\n *\n * FOR LISTS AND FIXED PATHS ONLY. A 404 on `/things/:id` is a record that is\n * gone, which is a different sentence; do not ask this about one.\n */\n\n/** The router's own sentences for \"no such route\", when only the text survives. */\nconst NO_ROUTE = /^(Cannot (GET|POST|PUT|PATCH|DELETE) \\/|Invalid API path\\b)/;\n\n/**\n * A fixed path such as `/automations/templates` asked of an engine that only\n * has `/automations/:id` is taken for an id, and refused as a bad one.\n */\nconst TAKEN_FOR_AN_ID = /^Validation failed \\(uuid.* is expected\\)$/;\n\n/** For a caller that was handed the message and not the error. */\nexport function isServiceMissingMessage(message: string): boolean {\n  return NO_ROUTE.test(message);\n}\n\nexport function isServiceMissing(\n  error: unknown,\n  {\n    fixedPath = false,\n  }: {\n    /**\n     * The request carried no id, so a \"uuid is expected\" refusal can only mean\n     * the path itself was read as one. Never set this for a request that sends\n     * an id of its own.\n     */\n    fixedPath?: boolean;\n  } = {},\n): boolean {\n  if (!(error instanceof ApiRequestError)) return false;\n  if (error.status === 404) return true;\n  if (isServiceMissingMessage(error.message)) return true;\n\n  return fixedPath && error.status === 400 && TAKEN_FOR_AN_ID.test(error.message);\n}\n"],"mappings":"AAAA,SAAS,uBAAuB;AAqBhC,MAAM,WAAW;AAMjB,MAAM,kBAAkB;AAGjB,SAAS,wBAAwB,SAA0B;AAChE,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEO,SAAS,iBACd,OACA;AAAA,EACE,YAAY;AACd,IAOI,CAAC,GACI;AACT,MAAI,EAAE,iBAAiB,iBAAkB,QAAO;AAChD,MAAI,MAAM,WAAW,IAAK,QAAO;AACjC,MAAI,wBAAwB,MAAM,OAAO,EAAG,QAAO;AAEnD,SAAO,aAAa,MAAM,WAAW,OAAO,gBAAgB,KAAK,MAAM,OAAO;AAChF;","names":[]}

package/dist/api/session-refresh.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Renewing the session when its short-lived access token has run out.
+ *
+ * The engine keeps the session in HttpOnly cookies: a 15-minute access token
+ * and a rotating refresh token. This code cannot read either; it only asks
+ * `POST /accounts/refresh` to swap them when a request comes back "expired".
+ */
+/**
+ * Whether a 401 from `url` could be an expired access token. Called once with
+ * the URL alone (to skip the body read) and again with the body.
+ */
+export declare function wantsRefresh(url: string, body?: unknown): boolean;
+/**
+ * Ask the engine for a new session. Every request that failed together shares
+ * one call. False when it cannot be renewed (refused, or an engine without the
+ * route), so the caller falls back to ending the session.
+ */
+export declare function refreshSession(apiBase: string): Promise<boolean>;

package/dist/api/session-refresh.js

@@ -0,0 +1,37 @@
+const REFRESH_PATH = "/accounts/refresh";
+const NEVER_REFRESH = [REFRESH_PATH, "/accounts/login", "/accounts/logout"];
+const ADMIN_API = "/platform-admin/";
+const EXPIRED = /expired|no authentication token/i;
+const IDLE = /session_idle/i;
+let inFlight = null;
+function wantsRefresh(url, body) {
+  const path = new URL(url, "http://localhost").pathname;
+  if (path.includes(ADMIN_API)) return false;
+  if (NEVER_REFRESH.some((never) => path.endsWith(never))) return false;
+  if (body === void 0) return true;
+  const { message, code } = body ?? {};
+  const text = [code, ...Array.isArray(message) ? message : [message]].filter((part) => typeof part === "string").join(" ");
+  return EXPIRED.test(text) && !IDLE.test(text);
+}
+function refreshSession(apiBase) {
+  inFlight ??= renew(apiBase).finally(() => {
+    inFlight = null;
+  });
+  return inFlight;
+}
+async function renew(apiBase) {
+  try {
+    const res = await fetch(`${apiBase}${REFRESH_PATH}`, {
+      method: "POST",
+      credentials: "include"
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+export {
+  refreshSession,
+  wantsRefresh
+};
+//# sourceMappingURL=session-refresh.js.map

package/dist/api/session-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/session-refresh.ts"],"sourcesContent":["/**\n * Renewing the session when its short-lived access token has run out.\n *\n * The engine keeps the session in HttpOnly cookies: a 15-minute access token\n * and a rotating refresh token. This code cannot read either; it only asks\n * `POST /accounts/refresh` to swap them when a request comes back \"expired\".\n */\n\nconst REFRESH_PATH = '/accounts/refresh';\n/** Calls whose 401 means something else (wrong details, nothing to end). */\nconst NEVER_REFRESH = [REFRESH_PATH, '/accounts/login', '/accounts/logout'];\nconst ADMIN_API = '/platform-admin/';\nconst EXPIRED = /expired|no authentication token/i;\nconst IDLE = /session_idle/i;\n\nlet inFlight: Promise<boolean> | null = null;\n\n/**\n * Whether a 401 from `url` could be an expired access token. Called once with\n * the URL alone (to skip the body read) and again with the body.\n */\nexport function wantsRefresh(url: string, body?: unknown): boolean {\n  const path = new URL(url, 'http://localhost').pathname;\n  if (path.includes(ADMIN_API)) return false;\n  if (NEVER_REFRESH.some((never) => path.endsWith(never))) return false;\n  if (body === undefined) return true;\n\n  const { message, code } = (body ?? {}) as { message?: unknown; code?: unknown };\n  const text = [code, ...(Array.isArray(message) ? message : [message])]\n    .filter((part): part is string => typeof part === 'string')\n    .join(' ');\n  return EXPIRED.test(text) && !IDLE.test(text);\n}\n\n/**\n * Ask the engine for a new session. Every request that failed together shares\n * one call. False when it cannot be renewed (refused, or an engine without the\n * route), so the caller falls back to ending the session.\n */\nexport function refreshSession(apiBase: string): Promise<boolean> {\n  inFlight ??= renew(apiBase).finally(() => {\n    inFlight = null;\n  });\n  return inFlight;\n}\n\nasync function renew(apiBase: string): Promise<boolean> {\n  try {\n    const res = await fetch(`${apiBase}${REFRESH_PATH}`, {\n      method: 'POST',\n      credentials: 'include',\n    });\n    return res.ok;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":"AAQA,MAAM,eAAe;AAErB,MAAM,gBAAgB,CAAC,cAAc,mBAAmB,kBAAkB;AAC1E,MAAM,YAAY;AAClB,MAAM,UAAU;AAChB,MAAM,OAAO;AAEb,IAAI,WAAoC;AAMjC,SAAS,aAAa,KAAa,MAAyB;AACjE,QAAM,OAAO,IAAI,IAAI,KAAK,kBAAkB,EAAE;AAC9C,MAAI,KAAK,SAAS,SAAS,EAAG,QAAO;AACrC,MAAI,cAAc,KAAK,CAAC,UAAU,KAAK,SAAS,KAAK,CAAC,EAAG,QAAO;AAChE,MAAI,SAAS,OAAW,QAAO;AAE/B,QAAM,EAAE,SAAS,KAAK,IAAK,QAAQ,CAAC;AACpC,QAAM,OAAO,CAAC,MAAM,GAAI,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO,CAAE,EAClE,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,EACzD,KAAK,GAAG;AACX,SAAO,QAAQ,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;AAC9C;AAOO,SAAS,eAAe,SAAmC;AAChE,eAAa,MAAM,OAAO,EAAE,QAAQ,MAAM;AACxC,eAAW;AAAA,EACb,CAAC;AACD,SAAO;AACT;AAEA,eAAe,MAAM,SAAmC;AACtD,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,YAAY,IAAI;AAAA,MACnD,QAAQ;AAAA,MACR,aAAa;AAAA,IACf,CAAC;AACD,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/api/session-scope.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Which session a request belongs to, and where a 401 sends the person.
+ *
+ * One console serves two sign-ins: the merchant dashboard (the HttpOnly `pb_auth_token`
+ * cookie) and the platform admin (`pb_admin_token`, an HttpOnly cookie). They
+ * must never mix. The admin guard reads a bearer before its cookie, so a merchant
+ * bearer on an admin call is read as a bad admin session; and a 401 from the
+ * admin must not send the person to the merchant sign-in, which forwards a
+ * signed-in merchant to `/dashboard`.
+ */
+export declare const ADMIN_LOGIN_PAGE = "/admin/login";
+/** Merchant pages that must never bounce to login, or the redirect loops. */
+export declare const AUTH_ROUTES: string[];
+/** True for a call to the platform-admin API. */
+export declare function isAdminRequest(url: string): boolean;
+/** True for a page of the admin console. */
+export declare function isAdminPage(pagePath: string): boolean;
+/** A 401 means the session is gone, except wrong admin sign-in details. */
+export declare function isSessionExpiryResponse(status: number, url: string): boolean;
+/**
+ * Where to send someone whose session has gone, or null to stay put.
+ * Admin calls and admin pages go to the admin sign-in; everything else to the
+ * merchant sign-in. Either way they come back to the page they were on.
+ */
+export declare function sessionExpiryTarget(requestUrl: string, pagePath: string, search?: string): string | null;
+/**
+ * The admin page to open after admin sign-in: the `redirect` it was sent with
+ * when that is an admin page on this site, otherwise Overview.
+ */
+export declare function adminReturnPath(redirect: string | null | undefined): string;
+/** The merchant's own headers go only on merchant calls. */
+export declare function merchantIdentity(requestUrl: string, accountId: string | null, token: string | null): {
+    accountId: string | null;
+    token: string | null;
+};

package/dist/api/session-scope.js

@@ -0,0 +1,53 @@
+const ADMIN_API = "/platform-admin/";
+const ADMIN_LOGIN_API = "/platform-admin/v1/auth/login";
+const ADMIN_PAGE = "/admin";
+const ADMIN_LOGIN_PAGE = "/admin/login";
+const ADMIN_AUTH_PAGES = [ADMIN_LOGIN_PAGE, "/admin/change-password"];
+const AUTH_ROUTES = ["/login", "/signup", "/auth", "/invite"];
+function pathOf(url) {
+  return new URL(url, "http://localhost").pathname;
+}
+function isAdminRequest(url) {
+  return pathOf(url).includes(ADMIN_API);
+}
+function isAdminPage(pagePath) {
+  return pagePath === ADMIN_PAGE || pagePath.startsWith(`${ADMIN_PAGE}/`);
+}
+function isSessionExpiryResponse(status, url) {
+  return status === 401 && !pathOf(url).endsWith(ADMIN_LOGIN_API);
+}
+function sessionExpiryTarget(requestUrl, pagePath, search = "") {
+  const back = encodeURIComponent(pagePath + search);
+  if (isAdminRequest(requestUrl) || isAdminPage(pagePath)) {
+    if (ADMIN_AUTH_PAGES.includes(pagePath)) return null;
+    return isAdminPage(pagePath) ? `${ADMIN_LOGIN_PAGE}?redirect=${back}` : ADMIN_LOGIN_PAGE;
+  }
+  if (AUTH_ROUTES.some((route) => pagePath.startsWith(route))) return null;
+  return `/login?redirect=${back}`;
+}
+function adminReturnPath(redirect) {
+  if (!redirect || !redirect.startsWith("/") || redirect.startsWith("//")) {
+    return ADMIN_PAGE;
+  }
+  const url = new URL(redirect, "http://localhost");
+  if (url.origin !== "http://localhost" || !isAdminPage(url.pathname)) {
+    return ADMIN_PAGE;
+  }
+  if (ADMIN_AUTH_PAGES.includes(url.pathname)) return ADMIN_PAGE;
+  return url.pathname + url.search;
+}
+function merchantIdentity(requestUrl, accountId, token) {
+  if (isAdminRequest(requestUrl)) return { accountId: null, token: null };
+  return { accountId, token };
+}
+export {
+  ADMIN_LOGIN_PAGE,
+  AUTH_ROUTES,
+  adminReturnPath,
+  isAdminPage,
+  isAdminRequest,
+  isSessionExpiryResponse,
+  merchantIdentity,
+  sessionExpiryTarget
+};
+//# sourceMappingURL=session-scope.js.map

package/dist/api/session-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/session-scope.ts"],"sourcesContent":["/**\n * Which session a request belongs to, and where a 401 sends the person.\n *\n * One console serves two sign-ins: the merchant dashboard (the HttpOnly `pb_auth_token`\n * cookie) and the platform admin (`pb_admin_token`, an HttpOnly cookie). They\n * must never mix. The admin guard reads a bearer before its cookie, so a merchant\n * bearer on an admin call is read as a bad admin session; and a 401 from the\n * admin must not send the person to the merchant sign-in, which forwards a\n * signed-in merchant to `/dashboard`.\n */\n\nconst ADMIN_API = '/platform-admin/';\nconst ADMIN_LOGIN_API = '/platform-admin/v1/auth/login';\nconst ADMIN_PAGE = '/admin';\nexport const ADMIN_LOGIN_PAGE = '/admin/login';\n/** Admin pages that run without an admin session; a 401 there must not bounce. */\nconst ADMIN_AUTH_PAGES = [ADMIN_LOGIN_PAGE, '/admin/change-password'];\n/** Merchant pages that must never bounce to login, or the redirect loops. */\nexport const AUTH_ROUTES = ['/login', '/signup', '/auth', '/invite'];\n\nfunction pathOf(url: string): string {\n  return new URL(url, 'http://localhost').pathname;\n}\n\n/** True for a call to the platform-admin API. */\nexport function isAdminRequest(url: string): boolean {\n  return pathOf(url).includes(ADMIN_API);\n}\n\n/** True for a page of the admin console. */\nexport function isAdminPage(pagePath: string): boolean {\n  return pagePath === ADMIN_PAGE || pagePath.startsWith(`${ADMIN_PAGE}/`);\n}\n\n/** A 401 means the session is gone, except wrong admin sign-in details. */\nexport function isSessionExpiryResponse(status: number, url: string): boolean {\n  return status === 401 && !pathOf(url).endsWith(ADMIN_LOGIN_API);\n}\n\n/**\n * Where to send someone whose session has gone, or null to stay put.\n * Admin calls and admin pages go to the admin sign-in; everything else to the\n * merchant sign-in. Either way they come back to the page they were on.\n */\nexport function sessionExpiryTarget(\n  requestUrl: string,\n  pagePath: string,\n  search = '',\n): string | null {\n  const back = encodeURIComponent(pagePath + search);\n  if (isAdminRequest(requestUrl) || isAdminPage(pagePath)) {\n    if (ADMIN_AUTH_PAGES.includes(pagePath)) return null;\n    return isAdminPage(pagePath)\n      ? `${ADMIN_LOGIN_PAGE}?redirect=${back}`\n      : ADMIN_LOGIN_PAGE;\n  }\n  if (AUTH_ROUTES.some((route) => pagePath.startsWith(route))) return null;\n  return `/login?redirect=${back}`;\n}\n\n/**\n * The admin page to open after admin sign-in: the `redirect` it was sent with\n * when that is an admin page on this site, otherwise Overview.\n */\nexport function adminReturnPath(redirect: string | null | undefined): string {\n  if (!redirect || !redirect.startsWith('/') || redirect.startsWith('//')) {\n    return ADMIN_PAGE;\n  }\n  const url = new URL(redirect, 'http://localhost');\n  if (url.origin !== 'http://localhost' || !isAdminPage(url.pathname)) {\n    return ADMIN_PAGE;\n  }\n  if (ADMIN_AUTH_PAGES.includes(url.pathname)) return ADMIN_PAGE;\n  return url.pathname + url.search;\n}\n\n/** The merchant's own headers go only on merchant calls. */\nexport function merchantIdentity(\n  requestUrl: string,\n  accountId: string | null,\n  token: string | null,\n): { accountId: string | null; token: string | null } {\n  if (isAdminRequest(requestUrl)) return { accountId: null, token: null };\n  return { accountId, token };\n}\n"],"mappings":"AAWA,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,aAAa;AACZ,MAAM,mBAAmB;AAEhC,MAAM,mBAAmB,CAAC,kBAAkB,wBAAwB;AAE7D,MAAM,cAAc,CAAC,UAAU,WAAW,SAAS,SAAS;AAEnE,SAAS,OAAO,KAAqB;AACnC,SAAO,IAAI,IAAI,KAAK,kBAAkB,EAAE;AAC1C;AAGO,SAAS,eAAe,KAAsB;AACnD,SAAO,OAAO,GAAG,EAAE,SAAS,SAAS;AACvC;AAGO,SAAS,YAAY,UAA2B;AACrD,SAAO,aAAa,cAAc,SAAS,WAAW,GAAG,UAAU,GAAG;AACxE;AAGO,SAAS,wBAAwB,QAAgB,KAAsB;AAC5E,SAAO,WAAW,OAAO,CAAC,OAAO,GAAG,EAAE,SAAS,eAAe;AAChE;AAOO,SAAS,oBACd,YACA,UACA,SAAS,IACM;AACf,QAAM,OAAO,mBAAmB,WAAW,MAAM;AACjD,MAAI,eAAe,UAAU,KAAK,YAAY,QAAQ,GAAG;AACvD,QAAI,iBAAiB,SAAS,QAAQ,EAAG,QAAO;AAChD,WAAO,YAAY,QAAQ,IACvB,GAAG,gBAAgB,aAAa,IAAI,KACpC;AAAA,EACN;AACA,MAAI,YAAY,KAAK,CAAC,UAAU,SAAS,WAAW,KAAK,CAAC,EAAG,QAAO;AACpE,SAAO,mBAAmB,IAAI;AAChC;AAMO,SAAS,gBAAgB,UAA6C;AAC3E,MAAI,CAAC,YAAY,CAAC,SAAS,WAAW,GAAG,KAAK,SAAS,WAAW,IAAI,GAAG;AACvE,WAAO;AAAA,EACT;AACA,QAAM,MAAM,IAAI,IAAI,UAAU,kBAAkB;AAChD,MAAI,IAAI,WAAW,sBAAsB,CAAC,YAAY,IAAI,QAAQ,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MAAI,iBAAiB,SAAS,IAAI,QAAQ,EAAG,QAAO;AACpD,SAAO,IAAI,WAAW,IAAI;AAC5B;AAGO,SAAS,iBACd,YACA,WACA,OACoD;AACpD,MAAI,eAAe,UAAU,EAAG,QAAO,EAAE,WAAW,MAAM,OAAO,KAAK;AACtE,SAAO,EAAE,WAAW,MAAM;AAC5B;","names":[]}

package/dist/api/settlements.d.ts

@@ -0,0 +1,106 @@
+import type { Settlement, SettlementSummary, MerchantBalance, SettlementReceipt, WithdrawalResult, MerchantBankAccount, Bank, PayoutSchedule } from './types';
+export declare const settlementsApi: {
+    listBankAccounts: (tenantSlug: string) => Promise<{
+        bankAccounts: MerchantBankAccount[];
+    }>;
+    addBankAccount: (tenantSlug: string, data: {
+        bankCode: string;
+        accountNumber: string;
+    }) => Promise<MerchantBankAccount>;
+    setDefaultBankAccount: (tenantSlug: string, id: string) => Promise<MerchantBankAccount>;
+    deleteBankAccount: (tenantSlug: string, id: string) => Promise<void>;
+    listBanks: (tenantSlug: string) => Promise<{
+        banks: Bank[];
+    }>;
+    resolveAccount: (tenantSlug: string, bankCode: string, accountNumber: string) => Promise<{
+        accountName: string;
+        accountNumber: string;
+    }>;
+    /**
+     * Payouts, optionally narrowed to a window.
+     *
+     * The API has accepted `startDate`/`endDate` since the endpoint shipped and
+     * this client never sent them, so payouts was the one table on the money
+     * surface with no way to narrow it at all, against a ledger with four filters.
+     */
+    listSettlements: (tenantSlug: string, params?: {
+        status?: string;
+        page?: number;
+        limit?: number;
+        startDate?: string;
+        endDate?: string;
+    }) => Promise<{
+        settlements: Settlement[];
+        total: number;
+    }>;
+    getSettlementSummary: (tenantSlug: string, params?: {
+        startDate?: string;
+        endDate?: string;
+    }) => Promise<SettlementSummary>;
+    syncSettlements: (tenantSlug: string) => Promise<{
+        synced: number;
+        total: number;
+    }>;
+    /**
+     * Reconcile a payout against the file the bank actually sent.
+     *
+     * No format, deliberately: Box's terminal software goes to whichever banks
+     * buy it, so a settlement report is not one shape and never will be. The
+     * merchant maps their own columns and `amountsIn` says whether the numbers
+     * are naira or kobo — the one thing that is never guessed, because nothing in
+     * a file says which and getting it wrong makes every line look wrong.
+     */
+    importSettlement: (tenantSlug: string, data: {
+        settlementReference: string;
+        settledAt: string;
+        currency?: string;
+        amountsIn: "major" | "minor";
+        rows: Array<{
+            reference: string;
+            amount: number;
+            fee?: number;
+        }>;
+    }) => Promise<{
+        settlementId: string;
+        providerCount: number;
+        settled: number;
+        unrecorded: number;
+        unrecordedAmount: number;
+        amountMismatches: number;
+        feeCorrections: number;
+        currency: string;
+        skipped: number;
+    }>;
+    reconcile: (tenantSlug: string, params?: {
+        startDate?: string;
+        endDate?: string;
+    }) => Promise<{
+        totalTransactions: number;
+        checkedCount: number;
+        affectedCount: number;
+        totalOwed: number;
+        currency: string;
+        reconciliationSettlementsCreated: number;
+    }>;
+    getBalance: (tenantSlug: string) => Promise<MerchantBalance>;
+    /**
+     * How often and when the provider pays out.
+     *
+     * Its own request, not part of `getBalance`: it costs a provider round trip on
+     * the API side, and the balance is the figure the page leads on.
+     */
+    getPayoutSchedule: (tenantSlug: string) => Promise<PayoutSchedule>;
+    /**
+     * Change how often the provider pays out.
+     *
+     * Returns the schedule RE-READ from the provider rather than the value sent,
+     * so a write that did not take cannot leave the surface claiming it did.
+     */
+    setPayoutSchedule: (tenantSlug: string, schedule: "auto" | "weekly" | "monthly" | "manual") => Promise<PayoutSchedule>;
+    /** The payments that made up one payout, straight from the provider. */
+    getReceipt: (tenantSlug: string, settlementId: string) => Promise<SettlementReceipt>;
+    requestWithdrawal: (tenantSlug: string, data?: {
+        amount?: number;
+        bankAccountId?: string;
+    }) => Promise<WithdrawalResult>;
+};

package/dist/api/settlements.js

@@ -0,0 +1,114 @@
+import { apiFetch } from "./core";
+const settlementsApi = {
+  // Bank Accounts
+  listBankAccounts: (tenantSlug) => apiFetch(
+    "/settlements/bank-accounts",
+    { tenantSlug }
+  ),
+  addBankAccount: (tenantSlug, data) => apiFetch("/settlements/bank-accounts", {
+    tenantSlug,
+    method: "POST",
+    body: JSON.stringify(data)
+  }),
+  setDefaultBankAccount: (tenantSlug, id) => apiFetch(`/settlements/bank-accounts/${id}/default`, {
+    tenantSlug,
+    method: "POST"
+  }),
+  deleteBankAccount: (tenantSlug, id) => apiFetch(`/settlements/bank-accounts/${id}`, {
+    tenantSlug,
+    method: "DELETE"
+  }),
+  listBanks: (tenantSlug) => apiFetch("/settlements/banks", { tenantSlug }),
+  resolveAccount: (tenantSlug, bankCode, accountNumber) => apiFetch(
+    `/settlements/banks/resolve?bankCode=${bankCode}&accountNumber=${accountNumber}`,
+    { tenantSlug }
+  ),
+  // Settlements
+  /**
+   * Payouts, optionally narrowed to a window.
+   *
+   * The API has accepted `startDate`/`endDate` since the endpoint shipped and
+   * this client never sent them, so payouts was the one table on the money
+   * surface with no way to narrow it at all, against a ledger with four filters.
+   */
+  listSettlements: (tenantSlug, params) => {
+    const searchParams = new URLSearchParams();
+    if (params?.status) searchParams.set("status", params.status);
+    if (params?.page) searchParams.set("page", String(params.page));
+    if (params?.limit) searchParams.set("limit", String(params.limit));
+    if (params?.startDate) searchParams.set("startDate", params.startDate);
+    if (params?.endDate) searchParams.set("endDate", params.endDate);
+    const query = searchParams.toString() ? `?${searchParams.toString()}` : "";
+    return apiFetch(
+      `/settlements${query}`,
+      { tenantSlug }
+    );
+  },
+  getSettlementSummary: (tenantSlug, params) => {
+    const searchParams = new URLSearchParams();
+    if (params?.startDate) searchParams.set("startDate", params.startDate);
+    if (params?.endDate) searchParams.set("endDate", params.endDate);
+    const query = searchParams.toString() ? `?${searchParams.toString()}` : "";
+    return apiFetch(`/settlements/summary${query}`, {
+      tenantSlug
+    });
+  },
+  // Sync
+  syncSettlements: (tenantSlug) => apiFetch("/settlements/sync", {
+    tenantSlug,
+    method: "POST"
+  }),
+  /**
+   * Reconcile a payout against the file the bank actually sent.
+   *
+   * No format, deliberately: Box's terminal software goes to whichever banks
+   * buy it, so a settlement report is not one shape and never will be. The
+   * merchant maps their own columns and `amountsIn` says whether the numbers
+   * are naira or kobo — the one thing that is never guessed, because nothing in
+   * a file says which and getting it wrong makes every line look wrong.
+   */
+  importSettlement: (tenantSlug, data) => apiFetch("/settlements/import", {
+    tenantSlug,
+    method: "POST",
+    body: JSON.stringify(data)
+  }),
+  // Reconcile
+  reconcile: (tenantSlug, params) => apiFetch("/settlements/reconcile", {
+    tenantSlug,
+    method: "POST",
+    body: JSON.stringify(params || {})
+  }),
+  // Balance & Withdrawals
+  getBalance: (tenantSlug) => apiFetch("/settlements/balance", { tenantSlug }),
+  /**
+   * How often and when the provider pays out.
+   *
+   * Its own request, not part of `getBalance`: it costs a provider round trip on
+   * the API side, and the balance is the figure the page leads on.
+   */
+  getPayoutSchedule: (tenantSlug) => apiFetch("/settlements/payout-schedule", { tenantSlug }),
+  /**
+   * Change how often the provider pays out.
+   *
+   * Returns the schedule RE-READ from the provider rather than the value sent,
+   * so a write that did not take cannot leave the surface claiming it did.
+   */
+  setPayoutSchedule: (tenantSlug, schedule) => apiFetch("/settlements/payout-schedule", {
+    tenantSlug,
+    method: "PUT",
+    body: JSON.stringify({ schedule })
+  }),
+  /** The payments that made up one payout, straight from the provider. */
+  getReceipt: (tenantSlug, settlementId) => apiFetch(`/settlements/${settlementId}/transactions`, {
+    tenantSlug
+  }),
+  requestWithdrawal: (tenantSlug, data) => apiFetch("/settlements/withdraw", {
+    tenantSlug,
+    method: "POST",
+    body: JSON.stringify(data || {})
+  })
+};
+export {
+  settlementsApi
+};
+//# sourceMappingURL=settlements.js.map

package/dist/api/settlements.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/settlements.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  Settlement,\n  SettlementSummary,\n  MerchantBalance,\n  SettlementReceipt,\n  WithdrawalResult,\n  MerchantBankAccount,\n  Bank,\n  PayoutSchedule,\n} from './types';\n\nexport const settlementsApi = {\n  // Bank Accounts\n  listBankAccounts: (tenantSlug: string) =>\n    apiFetch<{ bankAccounts: MerchantBankAccount[] }>(\n      '/settlements/bank-accounts',\n      { tenantSlug },\n    ),\n\n  addBankAccount: (\n    tenantSlug: string,\n    data: { bankCode: string; accountNumber: string },\n  ) =>\n    apiFetch<MerchantBankAccount>('/settlements/bank-accounts', {\n      tenantSlug,\n      method: 'POST',\n      body: JSON.stringify(data),\n    }),\n\n  setDefaultBankAccount: (tenantSlug: string, id: string) =>\n    apiFetch<MerchantBankAccount>(`/settlements/bank-accounts/${id}/default`, {\n      tenantSlug,\n      method: 'POST',\n    }),\n\n  deleteBankAccount: (tenantSlug: string, id: string) =>\n    apiFetch<void>(`/settlements/bank-accounts/${id}`, {\n      tenantSlug,\n      method: 'DELETE',\n    }),\n\n  listBanks: (tenantSlug: string) =>\n    apiFetch<{ banks: Bank[] }>('/settlements/banks', { tenantSlug }),\n\n  resolveAccount: (\n    tenantSlug: string,\n    bankCode: string,\n    accountNumber: string,\n  ) =>\n    apiFetch<{ accountName: string; accountNumber: string }>(\n      `/settlements/banks/resolve?bankCode=${bankCode}&accountNumber=${accountNumber}`,\n      { tenantSlug },\n    ),\n\n  // Settlements\n  /**\n   * Payouts, optionally narrowed to a window.\n   *\n   * The API has accepted `startDate`/`endDate` since the endpoint shipped and\n   * this client never sent them, so payouts was the one table on the money\n   * surface with no way to narrow it at all, against a ledger with four filters.\n   */\n  listSettlements: (\n    tenantSlug: string,\n    params?: {\n      status?: string;\n      page?: number;\n      limit?: number;\n      startDate?: string;\n      endDate?: string;\n    },\n  ) => {\n    const searchParams = new URLSearchParams();\n    if (params?.status) searchParams.set('status', params.status);\n    if (params?.page) searchParams.set('page', String(params.page));\n    if (params?.limit) searchParams.set('limit', String(params.limit));\n    if (params?.startDate) searchParams.set('startDate', params.startDate);\n    if (params?.endDate) searchParams.set('endDate', params.endDate);\n    const query = searchParams.toString() ? `?${searchParams.toString()}` : '';\n    return apiFetch<{ settlements: Settlement[]; total: number }>(\n      `/settlements${query}`,\n      { tenantSlug },\n    );\n  },\n\n  getSettlementSummary: (\n    tenantSlug: string,\n    params?: { startDate?: string; endDate?: string },\n  ) => {\n    const searchParams = new URLSearchParams();\n    if (params?.startDate) searchParams.set('startDate', params.startDate);\n    if (params?.endDate) searchParams.set('endDate', params.endDate);\n    const query = searchParams.toString() ? `?${searchParams.toString()}` : '';\n    return apiFetch<SettlementSummary>(`/settlements/summary${query}`, {\n      tenantSlug,\n    });\n  },\n\n  // Sync\n  syncSettlements: (tenantSlug: string) =>\n    apiFetch<{ synced: number; total: number }>('/settlements/sync', {\n      tenantSlug,\n      method: 'POST',\n    }),\n\n  /**\n   * Reconcile a payout against the file the bank actually sent.\n   *\n   * No format, deliberately: Box's terminal software goes to whichever banks\n   * buy it, so a settlement report is not one shape and never will be. The\n   * merchant maps their own columns and `amountsIn` says whether the numbers\n   * are naira or kobo — the one thing that is never guessed, because nothing in\n   * a file says which and getting it wrong makes every line look wrong.\n   */\n  importSettlement: (\n    tenantSlug: string,\n    data: {\n      settlementReference: string;\n      settledAt: string;\n      currency?: string;\n      amountsIn: 'major' | 'minor';\n      rows: Array<{ reference: string; amount: number; fee?: number }>;\n    },\n  ) =>\n    apiFetch<{\n      settlementId: string;\n      providerCount: number;\n      settled: number;\n      unrecorded: number;\n      unrecordedAmount: number;\n      amountMismatches: number;\n      feeCorrections: number;\n      currency: string;\n      skipped: number;\n    }>('/settlements/import', {\n      tenantSlug,\n      method: 'POST',\n      body: JSON.stringify(data),\n    }),\n\n  // Reconcile\n  reconcile: (\n    tenantSlug: string,\n    params?: { startDate?: string; endDate?: string },\n  ) =>\n    apiFetch<{\n      totalTransactions: number;\n      checkedCount: number;\n      affectedCount: number;\n      totalOwed: number;\n      currency: string;\n      reconciliationSettlementsCreated: number;\n    }>('/settlements/reconcile', {\n      tenantSlug,\n      method: 'POST',\n      body: JSON.stringify(params || {}),\n    }),\n\n  // Balance & Withdrawals\n  getBalance: (tenantSlug: string) =>\n    apiFetch<MerchantBalance>('/settlements/balance', { tenantSlug }),\n\n  /**\n   * How often and when the provider pays out.\n   *\n   * Its own request, not part of `getBalance`: it costs a provider round trip on\n   * the API side, and the balance is the figure the page leads on.\n   */\n  getPayoutSchedule: (tenantSlug: string) =>\n    apiFetch<PayoutSchedule>('/settlements/payout-schedule', { tenantSlug }),\n\n  /**\n   * Change how often the provider pays out.\n   *\n   * Returns the schedule RE-READ from the provider rather than the value sent,\n   * so a write that did not take cannot leave the surface claiming it did.\n   */\n  setPayoutSchedule: (\n    tenantSlug: string,\n    schedule: 'auto' | 'weekly' | 'monthly' | 'manual',\n  ) =>\n    apiFetch<PayoutSchedule>('/settlements/payout-schedule', {\n      tenantSlug,\n      method: 'PUT',\n      body: JSON.stringify({ schedule }),\n    }),\n\n  /** The payments that made up one payout, straight from the provider. */\n  getReceipt: (tenantSlug: string, settlementId: string) =>\n    apiFetch<SettlementReceipt>(`/settlements/${settlementId}/transactions`, {\n      tenantSlug,\n    }),\n\n  requestWithdrawal: (\n    tenantSlug: string,\n    data?: { amount?: number; bankAccountId?: string },\n  ) =>\n    apiFetch<WithdrawalResult>('/settlements/withdraw', {\n      tenantSlug,\n      method: 'POST',\n      body: JSON.stringify(data || {}),\n    }),\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAYlB,MAAM,iBAAiB;AAAA;AAAA,EAE5B,kBAAkB,CAAC,eACjB;AAAA,IACE;AAAA,IACA,EAAE,WAAW;AAAA,EACf;AAAA,EAEF,gBAAgB,CACd,YACA,SAEA,SAA8B,8BAA8B;AAAA,IAC1D;AAAA,IACA,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EAEH,uBAAuB,CAAC,YAAoB,OAC1C,SAA8B,8BAA8B,EAAE,YAAY;AAAA,IACxE;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAEH,mBAAmB,CAAC,YAAoB,OACtC,SAAe,8BAA8B,EAAE,IAAI;AAAA,IACjD;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAEH,WAAW,CAAC,eACV,SAA4B,sBAAsB,EAAE,WAAW,CAAC;AAAA,EAElE,gBAAgB,CACd,YACA,UACA,kBAEA;AAAA,IACE,uCAAuC,QAAQ,kBAAkB,aAAa;AAAA,IAC9E,EAAE,WAAW;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUF,iBAAiB,CACf,YACA,WAOG;AACH,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,QAAQ,OAAQ,cAAa,IAAI,UAAU,OAAO,MAAM;AAC5D,QAAI,QAAQ,KAAM,cAAa,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AAC9D,QAAI,QAAQ,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACjE,QAAI,QAAQ,UAAW,cAAa,IAAI,aAAa,OAAO,SAAS;AACrE,QAAI,QAAQ,QAAS,cAAa,IAAI,WAAW,OAAO,OAAO;AAC/D,UAAM,QAAQ,aAAa,SAAS,IAAI,IAAI,aAAa,SAAS,CAAC,KAAK;AACxE,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB,EAAE,WAAW;AAAA,IACf;AAAA,EACF;AAAA,EAEA,sBAAsB,CACpB,YACA,WACG;AACH,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,QAAQ,UAAW,cAAa,IAAI,aAAa,OAAO,SAAS;AACrE,QAAI,QAAQ,QAAS,cAAa,IAAI,WAAW,OAAO,OAAO;AAC/D,UAAM,QAAQ,aAAa,SAAS,IAAI,IAAI,aAAa,SAAS,CAAC,KAAK;AACxE,WAAO,SAA4B,uBAAuB,KAAK,IAAI;AAAA,MACjE;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,iBAAiB,CAAC,eAChB,SAA4C,qBAAqB;AAAA,IAC/D;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWH,kBAAkB,CAChB,YACA,SAQA,SAUG,uBAAuB;AAAA,IACxB;AAAA,IACA,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA;AAAA,EAGH,WAAW,CACT,YACA,WAEA,SAOG,0BAA0B;AAAA,IAC3B;AAAA,IACA,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,UAAU,CAAC,CAAC;AAAA,EACnC,CAAC;AAAA;AAAA,EAGH,YAAY,CAAC,eACX,SAA0B,wBAAwB,EAAE,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlE,mBAAmB,CAAC,eAClB,SAAyB,gCAAgC,EAAE,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQzE,mBAAmB,CACjB,YACA,aAEA,SAAyB,gCAAgC;AAAA,IACvD;AAAA,IACA,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,EACnC,CAAC;AAAA;AAAA,EAGH,YAAY,CAAC,YAAoB,iBAC/B,SAA4B,gBAAgB,YAAY,iBAAiB;AAAA,IACvE;AAAA,EACF,CAAC;AAAA,EAEH,mBAAmB,CACjB,YACA,SAEA,SAA2B,yBAAyB;AAAA,IAClD;AAAA,IACA,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,EACjC,CAAC;AACL;","names":[]}

package/dist/api/share-links.d.ts

@@ -0,0 +1,46 @@
+/**
+ * A link the merchant puts in a post, so an order can say which post sold it.
+ *
+ * The join between a social post and an item is not a table anybody keeps up
+ * to date — it is a consequence. The merchant shares this link, the redirect
+ * stamps `utm_source`/`utm_medium`/`utm_content`, the storefront writes them
+ * into the order's attribution at checkout, and the item's performance panel
+ * already groups by source.
+ */
+export interface ShareLink {
+    id: string;
+    contentId: string;
+    /** Travels in the URL and lands in `utm_content`. */
+    code: string;
+    /** The merchant's own word for where they put it. Becomes `utm_source`. */
+    channel: string;
+    label: string | null;
+    /** The full link to copy. Already absolute. */
+    url: string;
+    /** Where it lands, attribution attached — shown so the merchant can check it. */
+    destination: string;
+    /**
+     * The middle of the funnel. Clicks with no orders is an offer that is not
+     * landing; no clicks at all is a post nobody watched.
+     */
+    clicks: number;
+    lastClickedAt: string | null;
+    createdAt: string;
+}
+export interface CreateShareLinkInput {
+    contentId: string;
+    channel: string;
+    label?: string;
+}
+export declare const shareLinksApi: {
+    list: (tenantSlug: string, contentId: string) => Promise<ShareLink[]>;
+    create: (tenantSlug: string, body: CreateShareLinkInput) => Promise<ShareLink>;
+    /**
+     * Retiring a link does NOT delete what it earned — the orders keep their
+     * `utm_content`, so the item's history is unchanged. Only the link stops
+     * working.
+     */
+    remove: (tenantSlug: string, id: string) => Promise<{
+        deleted: boolean;
+    }>;
+};

package/dist/api/share-links.js

@@ -0,0 +1,25 @@
+import { apiFetch } from "./core";
+const shareLinksApi = {
+  list: (tenantSlug, contentId) => apiFetch(
+    `/share-links?contentId=${encodeURIComponent(contentId)}`,
+    { tenantSlug }
+  ),
+  create: (tenantSlug, body) => apiFetch("/share-links", {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify(body)
+  }),
+  /**
+   * Retiring a link does NOT delete what it earned — the orders keep their
+   * `utm_content`, so the item's history is unchanged. Only the link stops
+   * working.
+   */
+  remove: (tenantSlug, id) => apiFetch(`/share-links/${id}`, {
+    method: "DELETE",
+    tenantSlug
+  })
+};
+export {
+  shareLinksApi
+};
+//# sourceMappingURL=share-links.js.map

package/dist/api/share-links.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/share-links.ts"],"sourcesContent":["import { apiFetch } from './core';\n\n/**\n * A link the merchant puts in a post, so an order can say which post sold it.\n *\n * The join between a social post and an item is not a table anybody keeps up\n * to date — it is a consequence. The merchant shares this link, the redirect\n * stamps `utm_source`/`utm_medium`/`utm_content`, the storefront writes them\n * into the order's attribution at checkout, and the item's performance panel\n * already groups by source.\n */\nexport interface ShareLink {\n  id: string;\n  contentId: string;\n  /** Travels in the URL and lands in `utm_content`. */\n  code: string;\n  /** The merchant's own word for where they put it. Becomes `utm_source`. */\n  channel: string;\n  label: string | null;\n  /** The full link to copy. Already absolute. */\n  url: string;\n  /** Where it lands, attribution attached — shown so the merchant can check it. */\n  destination: string;\n  /**\n   * The middle of the funnel. Clicks with no orders is an offer that is not\n   * landing; no clicks at all is a post nobody watched.\n   */\n  clicks: number;\n  lastClickedAt: string | null;\n  createdAt: string;\n}\n\nexport interface CreateShareLinkInput {\n  contentId: string;\n  channel: string;\n  label?: string;\n}\n\nexport const shareLinksApi = {\n  list: (tenantSlug: string, contentId: string) =>\n    apiFetch<ShareLink[]>(\n      `/share-links?contentId=${encodeURIComponent(contentId)}`,\n      { tenantSlug },\n    ),\n\n  create: (tenantSlug: string, body: CreateShareLinkInput) =>\n    apiFetch<ShareLink>('/share-links', {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify(body),\n    }),\n\n  /**\n   * Retiring a link does NOT delete what it earned — the orders keep their\n   * `utm_content`, so the item's history is unchanged. Only the link stops\n   * working.\n   */\n  remove: (tenantSlug: string, id: string) =>\n    apiFetch<{ deleted: boolean }>(`/share-links/${id}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAsClB,MAAM,gBAAgB;AAAA,EAC3B,MAAM,CAAC,YAAoB,cACzB;AAAA,IACE,0BAA0B,mBAAmB,SAAS,CAAC;AAAA,IACvD,EAAE,WAAW;AAAA,EACf;AAAA,EAEF,QAAQ,CAAC,YAAoB,SAC3B,SAAoB,gBAAgB;AAAA,IAClC,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOH,QAAQ,CAAC,YAAoB,OAC3B,SAA+B,gBAAgB,EAAE,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AACL;","names":[]}

package/dist/api/shift-notes.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The handover: what the last shift needs the next one to know.
+ *
+ * Scoped server-side to the caller's branches — a member assigned to one
+ * branch reads that branch plus anything addressed to the whole business.
+ * Nothing here narrows it client-side, because a scope enforced in the UI is
+ * decoration.
+ */
+export interface ShiftNote {
+    id: string;
+    body: string;
+    locationId: string | null;
+    authorName: string | null;
+    createdAt: string;
+}
+export declare const shiftNotesApi: {
+    list: (tenantSlug: string) => Promise<ShiftNote[]>;
+    create: (tenantSlug: string, body: string, locationId?: string) => Promise<ShiftNote>;
+};

package/dist/api/shift-notes.js

@@ -0,0 +1,13 @@
+import { apiFetch } from "./core";
+const shiftNotesApi = {
+  list: (tenantSlug) => apiFetch("/shift-notes", { tenantSlug }),
+  create: (tenantSlug, body, locationId) => apiFetch("/shift-notes", {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ body, locationId })
+  })
+};
+export {
+  shiftNotesApi
+};
+//# sourceMappingURL=shift-notes.js.map

package/dist/api/shift-notes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/shift-notes.ts"],"sourcesContent":["import { apiFetch } from './core';\n\n/**\n * The handover: what the last shift needs the next one to know.\n *\n * Scoped server-side to the caller's branches — a member assigned to one\n * branch reads that branch plus anything addressed to the whole business.\n * Nothing here narrows it client-side, because a scope enforced in the UI is\n * decoration.\n */\nexport interface ShiftNote {\n  id: string;\n  body: string;\n  locationId: string | null;\n  authorName: string | null;\n  createdAt: string;\n}\n\nexport const shiftNotesApi = {\n  list: (tenantSlug: string) =>\n    apiFetch<ShiftNote[]>('/shift-notes', { tenantSlug }),\n\n  create: (tenantSlug: string, body: string, locationId?: string) =>\n    apiFetch<ShiftNote>('/shift-notes', {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ body, locationId }),\n    }),\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAkBlB,MAAM,gBAAgB;AAAA,EAC3B,MAAM,CAAC,eACL,SAAsB,gBAAgB,EAAE,WAAW,CAAC;AAAA,EAEtD,QAAQ,CAAC,YAAoB,MAAc,eACzC,SAAoB,gBAAgB;AAAA,IAClC,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAAA,EAC3C,CAAC;AACL;","names":[]}

package/dist/api/shipping.d.ts

@@ -0,0 +1,42 @@
+import type { ShippingRateData, ShippingZoneData, CreateShippingZoneData, CreateShippingRateData, FulfilmentOptions } from './types';
+export declare const shippingApi: {
+    /**
+     * What a customer at this address could actually choose, priced.
+     *
+     * The dashboard asks the same question the storefront asks, so a merchant
+     * can be told their checkout is a dead end before a customer finds out.
+     */
+    fulfilmentOptions: (tenantSlug: string, body: {
+        country: string;
+        state?: string;
+        city?: string;
+        postalCode?: string;
+        subtotal: number;
+        items?: {
+            contentId: string;
+            quantity: number;
+        }[];
+    }) => Promise<{
+        data: FulfilmentOptions;
+    }>;
+    listZones: (tenantSlug: string) => Promise<{
+        data: ShippingZoneData[];
+    }>;
+    getZone: (tenantSlug: string, zoneId: string) => Promise<{
+        data: ShippingZoneData;
+    }>;
+    createZone: (tenantSlug: string, data: CreateShippingZoneData) => Promise<{
+        data: ShippingZoneData;
+    }>;
+    updateZone: (tenantSlug: string, zoneId: string, data: Partial<CreateShippingZoneData>) => Promise<{
+        data: ShippingZoneData;
+    }>;
+    deleteZone: (tenantSlug: string, zoneId: string) => Promise<unknown>;
+    createRate: (tenantSlug: string, zoneId: string, data: CreateShippingRateData) => Promise<{
+        data: ShippingRateData;
+    }>;
+    updateRate: (tenantSlug: string, zoneId: string, rateId: string, data: Partial<CreateShippingRateData>) => Promise<{
+        data: ShippingRateData;
+    }>;
+    deleteRate: (tenantSlug: string, zoneId: string, rateId: string) => Promise<unknown>;
+};

package/dist/api/shipping.js

@@ -0,0 +1,53 @@
+import { apiFetch } from "./core";
+const shippingApi = {
+  /**
+   * What a customer at this address could actually choose, priced.
+   *
+   * The dashboard asks the same question the storefront asks, so a merchant
+   * can be told their checkout is a dead end before a customer finds out.
+   */
+  fulfilmentOptions: (tenantSlug, body) => apiFetch("/shipping/options", {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify(body)
+  }),
+  listZones: (tenantSlug) => apiFetch("/shipping/zones", { tenantSlug }),
+  getZone: (tenantSlug, zoneId) => apiFetch(`/shipping/zones/${zoneId}`, {
+    tenantSlug
+  }),
+  createZone: (tenantSlug, data) => apiFetch("/shipping/zones", {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify(data)
+  }),
+  updateZone: (tenantSlug, zoneId, data) => apiFetch(`/shipping/zones/${zoneId}`, {
+    method: "PATCH",
+    tenantSlug,
+    body: JSON.stringify(data)
+  }),
+  deleteZone: (tenantSlug, zoneId) => apiFetch(`/shipping/zones/${zoneId}`, {
+    method: "DELETE",
+    tenantSlug
+  }),
+  createRate: (tenantSlug, zoneId, data) => apiFetch(`/shipping/zones/${zoneId}/rates`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify(data)
+  }),
+  updateRate: (tenantSlug, zoneId, rateId, data) => apiFetch(
+    `/shipping/zones/${zoneId}/rates/${rateId}`,
+    {
+      method: "PATCH",
+      tenantSlug,
+      body: JSON.stringify(data)
+    }
+  ),
+  deleteRate: (tenantSlug, zoneId, rateId) => apiFetch(`/shipping/zones/${zoneId}/rates/${rateId}`, {
+    method: "DELETE",
+    tenantSlug
+  })
+};
+export {
+  shippingApi
+};
+//# sourceMappingURL=shipping.js.map

package/dist/api/shipping.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/shipping.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  ShippingRateData,\n  ShippingZoneData,\n  CreateShippingZoneData,\n  CreateShippingRateData,\n  FulfilmentOptions,\n} from './types';\n\nexport const shippingApi = {\n  /**\n   * What a customer at this address could actually choose, priced.\n   *\n   * The dashboard asks the same question the storefront asks, so a merchant\n   * can be told their checkout is a dead end before a customer finds out.\n   */\n  fulfilmentOptions: (\n    tenantSlug: string,\n    body: {\n      country: string;\n      state?: string;\n      city?: string;\n      postalCode?: string;\n      subtotal: number;\n      items?: { contentId: string; quantity: number }[];\n    },\n  ) =>\n    apiFetch<{ data: FulfilmentOptions }>('/shipping/options', {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify(body),\n    }),\n\n  listZones: (tenantSlug: string) =>\n    apiFetch<{ data: ShippingZoneData[] }>('/shipping/zones', { tenantSlug }),\n\n  getZone: (tenantSlug: string, zoneId: string) =>\n    apiFetch<{ data: ShippingZoneData }>(`/shipping/zones/${zoneId}`, {\n      tenantSlug,\n    }),\n\n  createZone: (tenantSlug: string, data: CreateShippingZoneData) =>\n    apiFetch<{ data: ShippingZoneData }>('/shipping/zones', {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify(data),\n    }),\n\n  updateZone: (\n    tenantSlug: string,\n    zoneId: string,\n    data: Partial<CreateShippingZoneData>,\n  ) =>\n    apiFetch<{ data: ShippingZoneData }>(`/shipping/zones/${zoneId}`, {\n      method: 'PATCH',\n      tenantSlug,\n      body: JSON.stringify(data),\n    }),\n\n  deleteZone: (tenantSlug: string, zoneId: string) =>\n    apiFetch(`/shipping/zones/${zoneId}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n\n  createRate: (\n    tenantSlug: string,\n    zoneId: string,\n    data: CreateShippingRateData,\n  ) =>\n    apiFetch<{ data: ShippingRateData }>(`/shipping/zones/${zoneId}/rates`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify(data),\n    }),\n\n  updateRate: (\n    tenantSlug: string,\n    zoneId: string,\n    rateId: string,\n    data: Partial<CreateShippingRateData>,\n  ) =>\n    apiFetch<{ data: ShippingRateData }>(\n      `/shipping/zones/${zoneId}/rates/${rateId}`,\n      {\n        method: 'PATCH',\n        tenantSlug,\n        body: JSON.stringify(data),\n      },\n    ),\n\n  deleteRate: (tenantSlug: string, zoneId: string, rateId: string) =>\n    apiFetch(`/shipping/zones/${zoneId}/rates/${rateId}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n};\n\n// =============================================================================\n// GEO REFERENCE API\n// =============================================================================\n"],"mappings":"AAAA,SAAS,gBAAgB;AASlB,MAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOzB,mBAAmB,CACjB,YACA,SASA,SAAsC,qBAAqB;AAAA,IACzD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EAEH,WAAW,CAAC,eACV,SAAuC,mBAAmB,EAAE,WAAW,CAAC;AAAA,EAE1E,SAAS,CAAC,YAAoB,WAC5B,SAAqC,mBAAmB,MAAM,IAAI;AAAA,IAChE;AAAA,EACF,CAAC;AAAA,EAEH,YAAY,CAAC,YAAoB,SAC/B,SAAqC,mBAAmB;AAAA,IACtD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EAEH,YAAY,CACV,YACA,QACA,SAEA,SAAqC,mBAAmB,MAAM,IAAI;AAAA,IAChE,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EAEH,YAAY,CAAC,YAAoB,WAC/B,SAAS,mBAAmB,MAAM,IAAI;AAAA,IACpC,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AAAA,EAEH,YAAY,CACV,YACA,QACA,SAEA,SAAqC,mBAAmB,MAAM,UAAU;AAAA,IACtE,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EAEH,YAAY,CACV,YACA,QACA,QACA,SAEA;AAAA,IACE,mBAAmB,MAAM,UAAU,MAAM;AAAA,IACzC;AAAA,MACE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAAA,EAEF,YAAY,CAAC,YAAoB,QAAgB,WAC/C,SAAS,mBAAmB,MAAM,UAAU,MAAM,IAAI;AAAA,IACpD,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AACL;","names":[]}