@withpotter/lib 0.13.0-next.101

package/dist/api/social-sources.d.ts

@@ -0,0 +1,58 @@
+export type SocialSourceProvider = 'instagram' | 'tiktok' | 'youtube';
+/**
+ * Whether a merchant may sell INSIDE the platform.
+ *
+ * A property of the platform and the merchant's market together, never of
+ * Box, and the reason this endpoint exists at all. Measured against each
+ * provider's own eligibility documentation on 2026-08-31: Meta lists no
+ * African country for Shops, TikTok Shop runs in roughly two dozen markets
+ * with nothing in Africa, and YouTube Shopping is fifteen markets plus
+ * Partner Programme membership.
+ *
+ * `unknown` is not a failure state and must never be rendered as "no". It
+ * means Box has not been told which market the workspace trades in, and
+ * telling somebody they cannot sell on that basis is a refusal nobody made.
+ */
+export type CommerceEligibility = 'eligible' | 'not_in_market' | 'requires_programme' | 'unknown';
+export interface SocialSourceCapabilities {
+    canReadPostInsights: boolean;
+    canReadProfileInsights: boolean;
+    /** The adapter's capability. Gate a control on this AND `commerce`. */
+    canPushCatalogue: boolean;
+    canReadCatalogue: boolean;
+    /** Instagram's 90. Null means the provider publishes no figure, not "forever". */
+    insightRetentionDays: number | null;
+    callsPerHour: number | null;
+    /** Below this the provider withholds metrics, so an empty chart is explicable. */
+    minFollowersForInsights: number | null;
+}
+export interface SocialSourceDescription {
+    provider: SocialSourceProvider;
+    /** The merchant's word for it. Render this, never the provider id. */
+    name: string;
+    capabilities: SocialSourceCapabilities;
+    commerce: CommerceEligibility;
+    /** Always present. Show it beside the verdict — a bare "no" reads as a Box failure. */
+    commerceReason: string;
+}
+export interface SocialSources {
+    /** The ISO-2 code the answers were worked out from, or null. */
+    market: string | null;
+    marketSource: 'default_location' | 'request' | 'unknown';
+    sources: SocialSourceDescription[];
+}
+export declare const socialSourcesApi: {
+    /**
+     * What each platform can do for this workspace.
+     *
+     * Call this rather than hardcoding a platform list anywhere. Both failure
+     * modes of a hardcoded list are real and neither is visible in testing: a
+     * fixed "Sell on Instagram" button is an empty promise for most of the
+     * world, and a fixed absence quietly withholds it from the merchants who
+     * could have used it.
+     *
+     * `market` overrides what the API would work out from the workspace's
+     * default business location. Normally omitted.
+     */
+    list: (tenantSlug: string, market?: string) => Promise<SocialSources>;
+};

package/dist/api/social-sources.js

@@ -0,0 +1,23 @@
+import { apiFetch } from "./core";
+const socialSourcesApi = {
+  /**
+   * What each platform can do for this workspace.
+   *
+   * Call this rather than hardcoding a platform list anywhere. Both failure
+   * modes of a hardcoded list are real and neither is visible in testing: a
+   * fixed "Sell on Instagram" button is an empty promise for most of the
+   * world, and a fixed absence quietly withholds it from the merchants who
+   * could have used it.
+   *
+   * `market` overrides what the API would work out from the workspace's
+   * default business location. Normally omitted.
+   */
+  list: (tenantSlug, market) => {
+    const qs = market ? `?market=${encodeURIComponent(market)}` : "";
+    return apiFetch(`/social-sources${qs}`, { tenantSlug });
+  }
+};
+export {
+  socialSourcesApi
+};
+//# sourceMappingURL=social-sources.js.map

package/dist/api/social-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/social-sources.ts"],"sourcesContent":["import { apiFetch } from './core';\n\nexport type SocialSourceProvider = 'instagram' | 'tiktok' | 'youtube';\n\n/**\n * Whether a merchant may sell INSIDE the platform.\n *\n * A property of the platform and the merchant's market together, never of\n * Box, and the reason this endpoint exists at all. Measured against each\n * provider's own eligibility documentation on 2026-08-31: Meta lists no\n * African country for Shops, TikTok Shop runs in roughly two dozen markets\n * with nothing in Africa, and YouTube Shopping is fifteen markets plus\n * Partner Programme membership.\n *\n * `unknown` is not a failure state and must never be rendered as \"no\". It\n * means Box has not been told which market the workspace trades in, and\n * telling somebody they cannot sell on that basis is a refusal nobody made.\n */\nexport type CommerceEligibility =\n  | 'eligible'\n  | 'not_in_market'\n  | 'requires_programme'\n  | 'unknown';\n\nexport interface SocialSourceCapabilities {\n  canReadPostInsights: boolean;\n  canReadProfileInsights: boolean;\n  /** The adapter's capability. Gate a control on this AND `commerce`. */\n  canPushCatalogue: boolean;\n  canReadCatalogue: boolean;\n  /** Instagram's 90. Null means the provider publishes no figure, not \"forever\". */\n  insightRetentionDays: number | null;\n  callsPerHour: number | null;\n  /** Below this the provider withholds metrics, so an empty chart is explicable. */\n  minFollowersForInsights: number | null;\n}\n\nexport interface SocialSourceDescription {\n  provider: SocialSourceProvider;\n  /** The merchant's word for it. Render this, never the provider id. */\n  name: string;\n  capabilities: SocialSourceCapabilities;\n  commerce: CommerceEligibility;\n  /** Always present. Show it beside the verdict — a bare \"no\" reads as a Box failure. */\n  commerceReason: string;\n}\n\nexport interface SocialSources {\n  /** The ISO-2 code the answers were worked out from, or null. */\n  market: string | null;\n  marketSource: 'default_location' | 'request' | 'unknown';\n  sources: SocialSourceDescription[];\n}\n\nexport const socialSourcesApi = {\n  /**\n   * What each platform can do for this workspace.\n   *\n   * Call this rather than hardcoding a platform list anywhere. Both failure\n   * modes of a hardcoded list are real and neither is visible in testing: a\n   * fixed \"Sell on Instagram\" button is an empty promise for most of the\n   * world, and a fixed absence quietly withholds it from the merchants who\n   * could have used it.\n   *\n   * `market` overrides what the API would work out from the workspace's\n   * default business location. Normally omitted.\n   */\n  list: (tenantSlug: string, market?: string) => {\n    const qs = market ? `?market=${encodeURIComponent(market)}` : '';\n    return apiFetch<SocialSources>(`/social-sources${qs}`, { tenantSlug });\n  },\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAsDlB,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAa9B,MAAM,CAAC,YAAoB,WAAoB;AAC7C,UAAM,KAAK,SAAS,WAAW,mBAAmB,MAAM,CAAC,KAAK;AAC9D,WAAO,SAAwB,kBAAkB,EAAE,IAAI,EAAE,WAAW,CAAC;AAAA,EACvE;AACF;","names":[]}

package/dist/api/tabs.d.ts

@@ -0,0 +1,14 @@
+import type { TabStatus, Tab, OpenTabInput, AddToTabInput, SettleTabInput, SettleTabResult } from './types';
+export declare const tabsApi: {
+    /**
+     * `locationIds` is the branch the dashboard is looking at. Undefined means
+     * every branch — the API reads an omitted filter as "no restriction", the
+     * same convention the member scope uses.
+     */
+    list: (tenantSlug: string, status?: TabStatus, locationIds?: string[]) => Promise<Tab[]>;
+    get: (tenantSlug: string, tabId: string) => Promise<Tab>;
+    open: (tenantSlug: string, data: OpenTabInput) => Promise<Tab>;
+    addItems: (tenantSlug: string, tabId: string, data: AddToTabInput) => Promise<Tab>;
+    settle: (tenantSlug: string, tabId: string, data?: SettleTabInput) => Promise<SettleTabResult>;
+    void: (tenantSlug: string, tabId: string) => Promise<Tab>;
+};

package/dist/api/tabs.js

@@ -0,0 +1,39 @@
+import { apiFetch } from "./core";
+const tabsApi = {
+  /**
+   * `locationIds` is the branch the dashboard is looking at. Undefined means
+   * every branch — the API reads an omitted filter as "no restriction", the
+   * same convention the member scope uses.
+   */
+  list: (tenantSlug, status, locationIds) => {
+    const params = new URLSearchParams();
+    if (status) params.set("status", status);
+    if (locationIds?.length) params.set("locationIds", locationIds.join(","));
+    const query = params.toString();
+    return apiFetch(`/tabs${query ? `?${query}` : ""}`, { tenantSlug });
+  },
+  get: (tenantSlug, tabId) => apiFetch(`/tabs/${tabId}`, { tenantSlug }),
+  open: (tenantSlug, data) => apiFetch("/tabs", {
+    method: "POST",
+    body: JSON.stringify(data),
+    tenantSlug
+  }),
+  addItems: (tenantSlug, tabId, data) => apiFetch(`/tabs/${tabId}/items`, {
+    method: "POST",
+    body: JSON.stringify(data),
+    tenantSlug
+  }),
+  settle: (tenantSlug, tabId, data = {}) => apiFetch(`/tabs/${tabId}/settle`, {
+    method: "POST",
+    body: JSON.stringify(data),
+    tenantSlug
+  }),
+  void: (tenantSlug, tabId) => apiFetch(`/tabs/${tabId}/void`, {
+    method: "POST",
+    tenantSlug
+  })
+};
+export {
+  tabsApi
+};
+//# sourceMappingURL=tabs.js.map

package/dist/api/tabs.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/tabs.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  TabStatus,\n  Tab,\n  OpenTabInput,\n  AddToTabInput,\n  SettleTabInput,\n  SettleTabResult,\n} from './types';\n\nexport const tabsApi = {\n  /**\n   * `locationIds` is the branch the dashboard is looking at. Undefined means\n   * every branch — the API reads an omitted filter as \"no restriction\", the\n   * same convention the member scope uses.\n   */\n  list: (tenantSlug: string, status?: TabStatus, locationIds?: string[]) => {\n    const params = new URLSearchParams();\n    if (status) params.set('status', status);\n    if (locationIds?.length) params.set('locationIds', locationIds.join(','));\n    const query = params.toString();\n    return apiFetch<Tab[]>(`/tabs${query ? `?${query}` : ''}`, { tenantSlug });\n  },\n\n  get: (tenantSlug: string, tabId: string) =>\n    apiFetch<Tab>(`/tabs/${tabId}`, { tenantSlug }),\n\n  open: (tenantSlug: string, data: OpenTabInput) =>\n    apiFetch<Tab>('/tabs', {\n      method: 'POST',\n      body: JSON.stringify(data),\n      tenantSlug,\n    }),\n\n  addItems: (tenantSlug: string, tabId: string, data: AddToTabInput) =>\n    apiFetch<Tab>(`/tabs/${tabId}/items`, {\n      method: 'POST',\n      body: JSON.stringify(data),\n      tenantSlug,\n    }),\n\n  settle: (tenantSlug: string, tabId: string, data: SettleTabInput = {}) =>\n    apiFetch<SettleTabResult>(`/tabs/${tabId}/settle`, {\n      method: 'POST',\n      body: JSON.stringify(data),\n      tenantSlug,\n    }),\n\n  void: (tenantSlug: string, tabId: string) =>\n    apiFetch<Tab>(`/tabs/${tabId}/void`, {\n      method: 'POST',\n      tenantSlug,\n    }),\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAUlB,MAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrB,MAAM,CAAC,YAAoB,QAAoB,gBAA2B;AACxE,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,OAAQ,QAAO,IAAI,UAAU,MAAM;AACvC,QAAI,aAAa,OAAQ,QAAO,IAAI,eAAe,YAAY,KAAK,GAAG,CAAC;AACxE,UAAM,QAAQ,OAAO,SAAS;AAC9B,WAAO,SAAgB,QAAQ,QAAQ,IAAI,KAAK,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC;AAAA,EAC3E;AAAA,EAEA,KAAK,CAAC,YAAoB,UACxB,SAAc,SAAS,KAAK,IAAI,EAAE,WAAW,CAAC;AAAA,EAEhD,MAAM,CAAC,YAAoB,SACzB,SAAc,SAAS;AAAA,IACrB,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB;AAAA,EACF,CAAC;AAAA,EAEH,UAAU,CAAC,YAAoB,OAAe,SAC5C,SAAc,SAAS,KAAK,UAAU;AAAA,IACpC,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB;AAAA,EACF,CAAC;AAAA,EAEH,QAAQ,CAAC,YAAoB,OAAe,OAAuB,CAAC,MAClE,SAA0B,SAAS,KAAK,WAAW;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,IAAI;AAAA,IACzB;AAAA,EACF,CAAC;AAAA,EAEH,MAAM,CAAC,YAAoB,UACzB,SAAc,SAAS,KAAK,SAAS;AAAA,IACnC,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AACL;","names":[]}

package/dist/api/team.d.ts

@@ -0,0 +1,112 @@
+import type { TeamMemberResponse, TeamRoleResponse, PermissionCatalogResponse, TeamActivityPage, PeekInviteResponse } from './types';
+export declare const teamApi: {
+    /**
+     * Fetch the current user's membership + effective permissions for the
+     * current tenant. Returns null if the user is not a member. Used to
+     * gate destructive UI (Add/Edit/Delete buttons) for viewers.
+     */
+    me: (tenantSlug: string) => Promise<TeamMemberResponse | null>;
+    listMembers: (tenantSlug: string) => Promise<TeamMemberResponse[]>;
+    /**
+     * What has been happening in this workspace, newest first.
+     *
+     * `GET /team/activity` has been live with a use case and cursor paging while
+     * nothing in the dashboard called it, so the answer to "what happened here
+     * today" was a question a merchant could only answer by opening four screens
+     * and comparing timestamps.
+     *
+     * Read what it is before trusting it as an audit trail: there is no
+     * per-action log for tenants, so the feed is DERIVED from timestamped domain
+     * rows — orders, members, content. Those entries say what happened and cannot
+     * say who did it.
+     *
+     * Since api#411 there is also an append-only log carrying a real author, and
+     * every entry declares which kind it is via `attribution`. Never infer it
+     * from shape: inferring is what put customer names beside a list of staff.
+     */
+    listActivity: (tenantSlug: string, params?: {
+        cursor?: string;
+        limit?: number;
+        /**
+         * Narrow to one person. Returns ONLY recorded entries — a derived row
+         * cannot say who acted, so padding a per-person feed with them would
+         * answer "what has this member been doing" with somebody else's customer.
+         */
+        memberAccountId?: string;
+    }) => Promise<TeamActivityPage>;
+    /**
+     * Send a pending invite again, with a fresh token.
+     *
+     * `sent: false` means the row was updated but the email did not go out. The
+     * caller must say so — an owner who is shown a success while the invitee
+     * gets nothing has no way to tell the difference.
+     */
+    /**
+     * Hand the workspace to somebody else.
+     *
+     * The api refuses this for anyone who is not the current owner, whatever
+     * grants they hold — see `transfer-ownership.usecase.ts`. Callers should
+     * still hide the control rather than rely on the refusal.
+     */
+    transferOwnership: (tenantSlug: string, memberId: string) => Promise<TeamMemberResponse>;
+    resendInvite: (tenantSlug: string, memberId: string) => Promise<{
+        sent: boolean;
+    }>;
+    invite: (tenantSlug: string, data: {
+        email: string;
+        /**
+         * Who this is. The API has always accepted it; this type used to omit
+         * it, so `tenant_members.name` was written null on every invite and the
+         * team list showed bare email addresses until people accepted — two
+         * pending invites were indistinguishable.
+         */
+        name?: string;
+        phoneNumber?: string;
+        role?: string;
+        roleId?: string;
+        /** Which locations they work at. Empty or absent means all of them. */
+        locationIds?: string[];
+    }) => Promise<TeamMemberResponse>;
+    updateMember: (tenantSlug: string, memberId: string, data: {
+        email?: string;
+        name?: string | null;
+        phoneNumber?: string | null;
+        /**
+         * Omit to leave the scope untouched; `[]` clears it back to every
+         * location. The two are different intents and the API keeps them apart,
+         * so editing a phone number can't silently widen someone's access.
+         */
+        locationIds?: string[];
+    }) => Promise<TeamMemberResponse>;
+    /**
+     * Change a member's role. Prefer `roleId` (custom or system role UUID);
+     * `role` is the legacy enum path kept for backward compatibility.
+     */
+    updateMemberRole: (tenantSlug: string, memberId: string, data: {
+        role?: string;
+        roleId?: string;
+    }) => Promise<TeamMemberResponse>;
+    /**
+     * Per-member permission overrides, layered on top of the member's role.
+     * Used for grants that belong to the person rather than the job — money
+     * especially, which must not be baked into a shared role row where the next
+     * person assigned that role would inherit it.
+     */
+    updateMemberPermissions: (tenantSlug: string, memberId: string, permissions: Record<string, boolean>) => Promise<TeamMemberResponse>;
+    remove: (tenantSlug: string, memberId: string) => Promise<void>;
+    acceptInvite: (token: string) => Promise<TeamMemberResponse>;
+    peekInvite: (token: string) => Promise<PeekInviteResponse>;
+    listRoles: (tenantSlug: string) => Promise<TeamRoleResponse[]>;
+    createRole: (tenantSlug: string, data: {
+        name: string;
+        description?: string;
+        permissions: Record<string, boolean>;
+    }) => Promise<TeamRoleResponse>;
+    updateRole: (tenantSlug: string, roleId: string, data: {
+        name?: string;
+        description?: string;
+        permissions?: Record<string, boolean>;
+    }) => Promise<TeamRoleResponse>;
+    deleteRole: (tenantSlug: string, roleId: string) => Promise<void>;
+    listPermissionCatalog: (tenantSlug: string) => Promise<PermissionCatalogResponse>;
+};

package/dist/api/team.js

@@ -0,0 +1,144 @@
+import { apiFetch } from "./core";
+import { inviteBody } from "./invite-body";
+import { normalizeRole, rolesTakeKeyList, saveRole } from "./role-permissions";
+const teamApi = {
+  /**
+   * Fetch the current user's membership + effective permissions for the
+   * current tenant. Returns null if the user is not a member. Used to
+   * gate destructive UI (Add/Edit/Delete buttons) for viewers.
+   */
+  me: (tenantSlug) => apiFetch("/team/me", { tenantSlug }),
+  listMembers: (tenantSlug) => apiFetch("/team/members", { tenantSlug }),
+  /**
+   * What has been happening in this workspace, newest first.
+   *
+   * `GET /team/activity` has been live with a use case and cursor paging while
+   * nothing in the dashboard called it, so the answer to "what happened here
+   * today" was a question a merchant could only answer by opening four screens
+   * and comparing timestamps.
+   *
+   * Read what it is before trusting it as an audit trail: there is no
+   * per-action log for tenants, so the feed is DERIVED from timestamped domain
+   * rows — orders, members, content. Those entries say what happened and cannot
+   * say who did it.
+   *
+   * Since api#411 there is also an append-only log carrying a real author, and
+   * every entry declares which kind it is via `attribution`. Never infer it
+   * from shape: inferring is what put customer names beside a list of staff.
+   */
+  listActivity: (tenantSlug, params = {}) => {
+    const q = new URLSearchParams();
+    if (params.cursor) q.set("cursor", params.cursor);
+    if (params.limit != null) q.set("limit", String(params.limit));
+    if (params.memberAccountId)
+      q.set("memberAccountId", params.memberAccountId);
+    const qs = q.toString();
+    return apiFetch(`/team/activity${qs ? `?${qs}` : ""}`, {
+      tenantSlug
+    });
+  },
+  /**
+   * Send a pending invite again, with a fresh token.
+   *
+   * `sent: false` means the row was updated but the email did not go out. The
+   * caller must say so — an owner who is shown a success while the invitee
+   * gets nothing has no way to tell the difference.
+   */
+  /**
+   * Hand the workspace to somebody else.
+   *
+   * The api refuses this for anyone who is not the current owner, whatever
+   * grants they hold — see `transfer-ownership.usecase.ts`. Callers should
+   * still hide the control rather than rely on the refusal.
+   */
+  transferOwnership: (tenantSlug, memberId) => apiFetch(
+    `/team/members/${memberId}/transfer-ownership`,
+    { method: "POST", tenantSlug }
+  ),
+  resendInvite: (tenantSlug, memberId) => apiFetch(`/team/members/${memberId}/resend-invite`, {
+    method: "POST",
+    tenantSlug
+  }),
+  invite: (tenantSlug, data) => apiFetch("/team/members/invite", {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify(inviteBody(data))
+  }),
+  updateMember: (tenantSlug, memberId, data) => apiFetch(`/team/members/${memberId}`, {
+    method: "PUT",
+    tenantSlug,
+    body: JSON.stringify(data)
+  }),
+  /**
+   * Change a member's role. Prefer `roleId` (custom or system role UUID);
+   * `role` is the legacy enum path kept for backward compatibility.
+   */
+  updateMemberRole: (tenantSlug, memberId, data) => data.roleId ? (
+    // A custom role has its own route; `/role` takes the built-in key only.
+    apiFetch(`/team/members/${memberId}/custom-role`, {
+      method: "PUT",
+      tenantSlug,
+      body: JSON.stringify({ roleId: data.roleId })
+    })
+  ) : apiFetch(`/team/members/${memberId}/role`, {
+    method: "PUT",
+    tenantSlug,
+    body: JSON.stringify({ role: data.role })
+  }),
+  /**
+   * Per-member permission overrides, layered on top of the member's role.
+   * Used for grants that belong to the person rather than the job — money
+   * especially, which must not be baked into a shared role row where the next
+   * person assigned that role would inherit it.
+   */
+  updateMemberPermissions: (tenantSlug, memberId, permissions) => apiFetch(`/team/members/${memberId}/permissions`, {
+    method: "PUT",
+    tenantSlug,
+    body: JSON.stringify({ permissions })
+  }),
+  remove: (tenantSlug, memberId) => apiFetch(`/team/members/${memberId}`, {
+    method: "DELETE",
+    tenantSlug
+  }),
+  acceptInvite: (token) => apiFetch(`/team/invites/${token}/accept`, {
+    method: "POST"
+  }),
+  peekInvite: (token) => apiFetch(`/team/invites/${token}`),
+  // ---- Roles ----
+  // A box engine answers `{ roles, catalog, grantable, canManage }`; the list is
+  // what every screen here reads, so it is unwrapped once.
+  listRoles: async (tenantSlug) => {
+    const answer = await apiFetch("/team/roles", { tenantSlug });
+    if (Array.isArray(answer)) return answer.map(normalizeRole);
+    rolesTakeKeyList();
+    return Array.isArray(answer?.roles) ? answer.roles.map(normalizeRole) : [];
+  },
+  createRole: (tenantSlug, data) => saveRole(
+    data,
+    (body) => apiFetch("/team/roles", {
+      method: "POST",
+      tenantSlug,
+      body
+    })
+  ),
+  updateRole: (tenantSlug, roleId, data) => saveRole(
+    data,
+    (body) => apiFetch(`/team/roles/${roleId}`, {
+      method: "PUT",
+      tenantSlug,
+      body
+    })
+  ),
+  deleteRole: (tenantSlug, roleId) => apiFetch(`/team/roles/${roleId}`, {
+    method: "DELETE",
+    tenantSlug
+  }),
+  // ---- Permission catalog ----
+  listPermissionCatalog: (tenantSlug) => apiFetch("/team/permissions/catalog", {
+    tenantSlug
+  })
+};
+export {
+  teamApi
+};
+//# sourceMappingURL=team.js.map

package/dist/api/team.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/team.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  TeamMemberResponse,\n  TeamRoleResponse,\n  PermissionCatalogResponse,\n  TeamActivityPage,\n  PeekInviteResponse,\n} from './types';\nimport { inviteBody } from './invite-body';\nimport { normalizeRole, rolesTakeKeyList, saveRole } from './role-permissions';\n\n// Team (workspace members) API\nexport const teamApi = {\n  /**\n   * Fetch the current user's membership + effective permissions for the\n   * current tenant. Returns null if the user is not a member. Used to\n   * gate destructive UI (Add/Edit/Delete buttons) for viewers.\n   */\n  me: (tenantSlug: string) =>\n    apiFetch<TeamMemberResponse | null>('/team/me', { tenantSlug }),\n\n  listMembers: (tenantSlug: string) =>\n    apiFetch<TeamMemberResponse[]>('/team/members', { tenantSlug }),\n\n  /**\n   * What has been happening in this workspace, newest first.\n   *\n   * `GET /team/activity` has been live with a use case and cursor paging while\n   * nothing in the dashboard called it, so the answer to \"what happened here\n   * today\" was a question a merchant could only answer by opening four screens\n   * and comparing timestamps.\n   *\n   * Read what it is before trusting it as an audit trail: there is no\n   * per-action log for tenants, so the feed is DERIVED from timestamped domain\n   * rows — orders, members, content. Those entries say what happened and cannot\n   * say who did it.\n   *\n   * Since api#411 there is also an append-only log carrying a real author, and\n   * every entry declares which kind it is via `attribution`. Never infer it\n   * from shape: inferring is what put customer names beside a list of staff.\n   */\n  listActivity: (\n    tenantSlug: string,\n    params: {\n      cursor?: string;\n      limit?: number;\n      /**\n       * Narrow to one person. Returns ONLY recorded entries — a derived row\n       * cannot say who acted, so padding a per-person feed with them would\n       * answer \"what has this member been doing\" with somebody else's customer.\n       */\n      memberAccountId?: string;\n    } = {},\n  ) => {\n    const q = new URLSearchParams();\n    if (params.cursor) q.set('cursor', params.cursor);\n    if (params.limit != null) q.set('limit', String(params.limit));\n    if (params.memberAccountId)\n      q.set('memberAccountId', params.memberAccountId);\n    const qs = q.toString();\n    return apiFetch<TeamActivityPage>(`/team/activity${qs ? `?${qs}` : ''}`, {\n      tenantSlug,\n    });\n  },\n\n  /**\n   * Send a pending invite again, with a fresh token.\n   *\n   * `sent: false` means the row was updated but the email did not go out. The\n   * caller must say so — an owner who is shown a success while the invitee\n   * gets nothing has no way to tell the difference.\n   */\n  /**\n   * Hand the workspace to somebody else.\n   *\n   * The api refuses this for anyone who is not the current owner, whatever\n   * grants they hold — see `transfer-ownership.usecase.ts`. Callers should\n   * still hide the control rather than rely on the refusal.\n   */\n  transferOwnership: (tenantSlug: string, memberId: string) =>\n    apiFetch<TeamMemberResponse>(\n      `/team/members/${memberId}/transfer-ownership`,\n      { method: 'POST', tenantSlug },\n    ),\n\n  resendInvite: (tenantSlug: string, memberId: string) =>\n    apiFetch<{ sent: boolean }>(`/team/members/${memberId}/resend-invite`, {\n      method: 'POST',\n      tenantSlug,\n    }),\n\n  invite: (\n    tenantSlug: string,\n    data: {\n      email: string;\n      /**\n       * Who this is. The API has always accepted it; this type used to omit\n       * it, so `tenant_members.name` was written null on every invite and the\n       * team list showed bare email addresses until people accepted — two\n       * pending invites were indistinguishable.\n       */\n      name?: string;\n      phoneNumber?: string;\n      role?: string;\n      roleId?: string;\n      /** Which locations they work at. Empty or absent means all of them. */\n      locationIds?: string[];\n    },\n  ) =>\n    apiFetch<TeamMemberResponse>('/team/members/invite', {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify(inviteBody(data)),\n    }),\n\n  updateMember: (\n    tenantSlug: string,\n    memberId: string,\n    data: {\n      email?: string;\n      name?: string | null;\n      phoneNumber?: string | null;\n      /**\n       * Omit to leave the scope untouched; `[]` clears it back to every\n       * location. The two are different intents and the API keeps them apart,\n       * so editing a phone number can't silently widen someone's access.\n       */\n      locationIds?: string[];\n    },\n  ) =>\n    apiFetch<TeamMemberResponse>(`/team/members/${memberId}`, {\n      method: 'PUT',\n      tenantSlug,\n      body: JSON.stringify(data),\n    }),\n\n  /**\n   * Change a member's role. Prefer `roleId` (custom or system role UUID);\n   * `role` is the legacy enum path kept for backward compatibility.\n   */\n  updateMemberRole: (\n    tenantSlug: string,\n    memberId: string,\n    data: { role?: string; roleId?: string },\n  ) =>\n    data.roleId\n      ? // A custom role has its own route; `/role` takes the built-in key only.\n        apiFetch<TeamMemberResponse>(`/team/members/${memberId}/custom-role`, {\n          method: 'PUT',\n          tenantSlug,\n          body: JSON.stringify({ roleId: data.roleId }),\n        })\n      : apiFetch<TeamMemberResponse>(`/team/members/${memberId}/role`, {\n          method: 'PUT',\n          tenantSlug,\n          body: JSON.stringify({ role: data.role }),\n        }),\n\n  /**\n   * Per-member permission overrides, layered on top of the member's role.\n   * Used for grants that belong to the person rather than the job — money\n   * especially, which must not be baked into a shared role row where the next\n   * person assigned that role would inherit it.\n   */\n  updateMemberPermissions: (\n    tenantSlug: string,\n    memberId: string,\n    permissions: Record<string, boolean>,\n  ) =>\n    apiFetch<TeamMemberResponse>(`/team/members/${memberId}/permissions`, {\n      method: 'PUT',\n      tenantSlug,\n      body: JSON.stringify({ permissions }),\n    }),\n\n  remove: (tenantSlug: string, memberId: string) =>\n    apiFetch<void>(`/team/members/${memberId}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n\n  acceptInvite: (token: string) =>\n    apiFetch<TeamMemberResponse>(`/team/invites/${token}/accept`, {\n      method: 'POST',\n    }),\n\n  peekInvite: (token: string) =>\n    apiFetch<PeekInviteResponse>(`/team/invites/${token}`),\n\n  // ---- Roles ----\n  // A box engine answers `{ roles, catalog, grantable, canManage }`; the list is\n  // what every screen here reads, so it is unwrapped once.\n  listRoles: async (tenantSlug: string): Promise<TeamRoleResponse[]> => {\n    const answer = await apiFetch<\n      TeamRoleResponse[] | { roles?: TeamRoleResponse[] }\n    >('/team/roles', { tenantSlug });\n    if (Array.isArray(answer)) return answer.map(normalizeRole);\n    rolesTakeKeyList();\n    return Array.isArray(answer?.roles) ? answer.roles.map(normalizeRole) : [];\n  },\n\n  createRole: (\n    tenantSlug: string,\n    data: {\n      name: string;\n      description?: string;\n      permissions: Record<string, boolean>;\n    },\n  ) =>\n    saveRole(data, (body) =>\n      apiFetch<TeamRoleResponse>('/team/roles', {\n        method: 'POST',\n        tenantSlug,\n        body,\n      }),\n    ),\n\n  updateRole: (\n    tenantSlug: string,\n    roleId: string,\n    data: {\n      name?: string;\n      description?: string;\n      permissions?: Record<string, boolean>;\n    },\n  ) =>\n    saveRole(data, (body) =>\n      apiFetch<TeamRoleResponse>(`/team/roles/${roleId}`, {\n        method: 'PUT',\n        tenantSlug,\n        body,\n      }),\n    ),\n\n  deleteRole: (tenantSlug: string, roleId: string) =>\n    apiFetch<void>(`/team/roles/${roleId}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n\n  // ---- Permission catalog ----\n  listPermissionCatalog: (tenantSlug: string) =>\n    apiFetch<PermissionCatalogResponse>('/team/permissions/catalog', {\n      tenantSlug,\n    }),\n};\n\n// API response types for members\n"],"mappings":"AAAA,SAAS,gBAAgB;AAQzB,SAAS,kBAAkB;AAC3B,SAAS,eAAe,kBAAkB,gBAAgB;AAGnD,MAAM,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrB,IAAI,CAAC,eACH,SAAoC,YAAY,EAAE,WAAW,CAAC;AAAA,EAEhE,aAAa,CAAC,eACZ,SAA+B,iBAAiB,EAAE,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBhE,cAAc,CACZ,YACA,SASI,CAAC,MACF;AACH,UAAM,IAAI,IAAI,gBAAgB;AAC9B,QAAI,OAAO,OAAQ,GAAE,IAAI,UAAU,OAAO,MAAM;AAChD,QAAI,OAAO,SAAS,KAAM,GAAE,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAC7D,QAAI,OAAO;AACT,QAAE,IAAI,mBAAmB,OAAO,eAAe;AACjD,UAAM,KAAK,EAAE,SAAS;AACtB,WAAO,SAA2B,iBAAiB,KAAK,IAAI,EAAE,KAAK,EAAE,IAAI;AAAA,MACvE;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,mBAAmB,CAAC,YAAoB,aACtC;AAAA,IACE,iBAAiB,QAAQ;AAAA,IACzB,EAAE,QAAQ,QAAQ,WAAW;AAAA,EAC/B;AAAA,EAEF,cAAc,CAAC,YAAoB,aACjC,SAA4B,iBAAiB,QAAQ,kBAAkB;AAAA,IACrE,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AAAA,EAEH,QAAQ,CACN,YACA,SAgBA,SAA6B,wBAAwB;AAAA,IACnD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,WAAW,IAAI,CAAC;AAAA,EACvC,CAAC;AAAA,EAEH,cAAc,CACZ,YACA,UACA,SAYA,SAA6B,iBAAiB,QAAQ,IAAI;AAAA,IACxD,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMH,kBAAkB,CAChB,YACA,UACA,SAEA,KAAK;AAAA;AAAA,IAED,SAA6B,iBAAiB,QAAQ,gBAAgB;AAAA,MACpE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IAC9C,CAAC;AAAA,MACD,SAA6B,iBAAiB,QAAQ,SAAS;AAAA,IAC7D,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,KAAK,KAAK,CAAC;AAAA,EAC1C,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQP,yBAAyB,CACvB,YACA,UACA,gBAEA,SAA6B,iBAAiB,QAAQ,gBAAgB;AAAA,IACpE,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,YAAY,CAAC;AAAA,EACtC,CAAC;AAAA,EAEH,QAAQ,CAAC,YAAoB,aAC3B,SAAe,iBAAiB,QAAQ,IAAI;AAAA,IAC1C,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AAAA,EAEH,cAAc,CAAC,UACb,SAA6B,iBAAiB,KAAK,WAAW;AAAA,IAC5D,QAAQ;AAAA,EACV,CAAC;AAAA,EAEH,YAAY,CAAC,UACX,SAA6B,iBAAiB,KAAK,EAAE;AAAA;AAAA;AAAA;AAAA,EAKvD,WAAW,OAAO,eAAoD;AACpE,UAAM,SAAS,MAAM,SAEnB,eAAe,EAAE,WAAW,CAAC;AAC/B,QAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,IAAI,aAAa;AAC1D,qBAAiB;AACjB,WAAO,MAAM,QAAQ,QAAQ,KAAK,IAAI,OAAO,MAAM,IAAI,aAAa,IAAI,CAAC;AAAA,EAC3E;AAAA,EAEA,YAAY,CACV,YACA,SAMA;AAAA,IAAS;AAAA,IAAM,CAAC,SACd,SAA2B,eAAe;AAAA,MACxC,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEF,YAAY,CACV,YACA,QACA,SAMA;AAAA,IAAS;AAAA,IAAM,CAAC,SACd,SAA2B,eAAe,MAAM,IAAI;AAAA,MAClD,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEF,YAAY,CAAC,YAAoB,WAC/B,SAAe,eAAe,MAAM,IAAI;AAAA,IACtC,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AAAA;AAAA,EAGH,uBAAuB,CAAC,eACtB,SAAoC,6BAA6B;AAAA,IAC/D;AAAA,EACF,CAAC;AACL;","names":[]}

package/dist/api/template-settings.d.ts

@@ -0,0 +1,26 @@
+import type { TemplateSettingsDiff, PreviewTokenKind, PreviewTokenResult } from './types';
+export declare const templateSettingsApi: {
+    /**
+     * Server-computed summary of pending draft changes (appearance + pages).
+     * Used by the Publish dialog to show "what would change if I published now."
+     */
+    getDiff: (tenantSlug: string) => Promise<TemplateSettingsDiff>;
+    /** Atomically publishes every pending draft (appearance + all changed pages). */
+    publishAll: (tenantSlug: string) => Promise<{
+        publishedAt: string;
+        pageIds: string[];
+    }>;
+    /** Discards every pending draft (appearance + all changed pages). */
+    discardAll: (tenantSlug: string) => Promise<{
+        discardedAppearance: boolean;
+        pageIds: string[];
+    }>;
+    /**
+     * Mints a short-lived signed JWT for a sharable preview link.
+     * Default kind is `saved` (the merchant-facing label for current draft).
+     */
+    mintPreviewToken: (tenantSlug: string, options?: {
+        kind?: PreviewTokenKind;
+        ttlSeconds?: number;
+    }) => Promise<PreviewTokenResult>;
+};

package/dist/api/template-settings.js

@@ -0,0 +1,36 @@
+import { apiFetch } from "./core";
+const templateSettingsApi = {
+  /**
+   * Server-computed summary of pending draft changes (appearance + pages).
+   * Used by the Publish dialog to show "what would change if I published now."
+   */
+  getDiff: (tenantSlug) => apiFetch("/tenants/current/template-settings/diff", {
+    tenantSlug
+  }),
+  /** Atomically publishes every pending draft (appearance + all changed pages). */
+  publishAll: (tenantSlug) => apiFetch(
+    "/tenants/current/template-settings/publish-all",
+    { method: "POST", tenantSlug }
+  ),
+  /** Discards every pending draft (appearance + all changed pages). */
+  discardAll: (tenantSlug) => apiFetch(
+    "/tenants/current/template-settings/discard-all",
+    { method: "POST", tenantSlug }
+  ),
+  /**
+   * Mints a short-lived signed JWT for a sharable preview link.
+   * Default kind is `saved` (the merchant-facing label for current draft).
+   */
+  mintPreviewToken: (tenantSlug, options) => apiFetch(
+    "/tenants/current/template-settings/preview-token",
+    {
+      method: "POST",
+      tenantSlug,
+      body: JSON.stringify(options ?? {})
+    }
+  )
+};
+export {
+  templateSettingsApi
+};
+//# sourceMappingURL=template-settings.js.map

package/dist/api/template-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/template-settings.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  TemplateSettingsDiff,\n  PreviewTokenKind,\n  PreviewTokenResult,\n} from './types';\n\nexport const templateSettingsApi = {\n  /**\n   * Server-computed summary of pending draft changes (appearance + pages).\n   * Used by the Publish dialog to show \"what would change if I published now.\"\n   */\n  getDiff: (tenantSlug: string) =>\n    apiFetch<TemplateSettingsDiff>('/tenants/current/template-settings/diff', {\n      tenantSlug,\n    }),\n\n  /** Atomically publishes every pending draft (appearance + all changed pages). */\n  publishAll: (tenantSlug: string) =>\n    apiFetch<{ publishedAt: string; pageIds: string[] }>(\n      '/tenants/current/template-settings/publish-all',\n      { method: 'POST', tenantSlug },\n    ),\n\n  /** Discards every pending draft (appearance + all changed pages). */\n  discardAll: (tenantSlug: string) =>\n    apiFetch<{ discardedAppearance: boolean; pageIds: string[] }>(\n      '/tenants/current/template-settings/discard-all',\n      { method: 'POST', tenantSlug },\n    ),\n\n  /**\n   * Mints a short-lived signed JWT for a sharable preview link.\n   * Default kind is `saved` (the merchant-facing label for current draft).\n   */\n  mintPreviewToken: (\n    tenantSlug: string,\n    options?: { kind?: PreviewTokenKind; ttlSeconds?: number },\n  ) =>\n    apiFetch<PreviewTokenResult>(\n      '/tenants/current/template-settings/preview-token',\n      {\n        method: 'POST',\n        tenantSlug,\n        body: JSON.stringify(options ?? {}),\n      },\n    ),\n};\n\n// Organization API\n"],"mappings":"AAAA,SAAS,gBAAgB;AAOlB,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjC,SAAS,CAAC,eACR,SAA+B,2CAA2C;AAAA,IACxE;AAAA,EACF,CAAC;AAAA;AAAA,EAGH,YAAY,CAAC,eACX;AAAA,IACE;AAAA,IACA,EAAE,QAAQ,QAAQ,WAAW;AAAA,EAC/B;AAAA;AAAA,EAGF,YAAY,CAAC,eACX;AAAA,IACE;AAAA,IACA,EAAE,QAAQ,QAAQ,WAAW;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMF,kBAAkB,CAChB,YACA,YAEA;AAAA,IACE;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,WAAW,CAAC,CAAC;AAAA,IACpC;AAAA,EACF;AACJ;","names":[]}

package/dist/api/templates.d.ts

@@ -0,0 +1,21 @@
+import type { TemplateEntitlement, InitiateTemplatePurchaseResult, TemplateSummary } from './types';
+export declare const templatesApi: {
+    /**
+     * Every template the API knows, straight from the templates table.
+     *
+     * NOT the registry. `/templates/registry` reads its manifest from the
+     * storefront renderer and 502s with "Template registry source is unreachable"
+     * whenever that is down — which is every local session without web-render
+     * running, and any moment it is deploying. Onboarding cannot offer a shelf of
+     * starting points and then show nothing, so it asks the source that is up
+     * whenever the API is up.
+     */
+    list: () => Promise<TemplateSummary[]>;
+    /** Premium templates the current tenant owns. */
+    entitlements: (tenantSlug: string) => Promise<TemplateEntitlement[]>;
+    /** Start a premium-template purchase — returns a Paystack payment URL. */
+    purchase: (tenantSlug: string, templateId: string, data: {
+        email: string;
+        callbackUrl: string;
+    }) => Promise<InitiateTemplatePurchaseResult>;
+};

package/dist/api/templates.js

@@ -0,0 +1,25 @@
+import { apiFetch } from "./core";
+const templatesApi = {
+  /**
+   * Every template the API knows, straight from the templates table.
+   *
+   * NOT the registry. `/templates/registry` reads its manifest from the
+   * storefront renderer and 502s with "Template registry source is unreachable"
+   * whenever that is down — which is every local session without web-render
+   * running, and any moment it is deploying. Onboarding cannot offer a shelf of
+   * starting points and then show nothing, so it asks the source that is up
+   * whenever the API is up.
+   */
+  list: () => apiFetch("/templates"),
+  /** Premium templates the current tenant owns. */
+  entitlements: (tenantSlug) => apiFetch("/templates/entitlements", { tenantSlug }),
+  /** Start a premium-template purchase — returns a Paystack payment URL. */
+  purchase: (tenantSlug, templateId, data) => apiFetch(
+    `/templates/${templateId}/purchase`,
+    { method: "POST", tenantSlug, body: JSON.stringify(data) }
+  )
+};
+export {
+  templatesApi
+};
+//# sourceMappingURL=templates.js.map

package/dist/api/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/templates.ts"],"sourcesContent":["import { apiFetch } from './core';\nimport type {\n  TemplateEntitlement,\n  InitiateTemplatePurchaseResult,\n  TemplateSummary,\n} from './types';\n\nexport const templatesApi = {\n  /**\n   * Every template the API knows, straight from the templates table.\n   *\n   * NOT the registry. `/templates/registry` reads its manifest from the\n   * storefront renderer and 502s with \"Template registry source is unreachable\"\n   * whenever that is down — which is every local session without web-render\n   * running, and any moment it is deploying. Onboarding cannot offer a shelf of\n   * starting points and then show nothing, so it asks the source that is up\n   * whenever the API is up.\n   */\n  list: () => apiFetch<TemplateSummary[]>('/templates'),\n\n  /** Premium templates the current tenant owns. */\n  entitlements: (tenantSlug: string) =>\n    apiFetch<TemplateEntitlement[]>('/templates/entitlements', { tenantSlug }),\n\n  /** Start a premium-template purchase — returns a Paystack payment URL. */\n  purchase: (\n    tenantSlug: string,\n    templateId: string,\n    data: { email: string; callbackUrl: string },\n  ) =>\n    apiFetch<InitiateTemplatePurchaseResult>(\n      `/templates/${templateId}/purchase`,\n      { method: 'POST', tenantSlug, body: JSON.stringify(data) },\n    ),\n};\n"],"mappings":"AAAA,SAAS,gBAAgB;AAOlB,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW1B,MAAM,MAAM,SAA4B,YAAY;AAAA;AAAA,EAGpD,cAAc,CAAC,eACb,SAAgC,2BAA2B,EAAE,WAAW,CAAC;AAAA;AAAA,EAG3E,UAAU,CACR,YACA,YACA,SAEA;AAAA,IACE,cAAc,UAAU;AAAA,IACxB,EAAE,QAAQ,QAAQ,YAAY,MAAM,KAAK,UAAU,IAAI,EAAE;AAAA,EAC3D;AACJ;","names":[]}

package/dist/api/tenant-slug.d.ts

@@ -0,0 +1,13 @@
+export type SlugUnavailableReason = 'too-short' | 'too-long' | 'format' | 'reserved' | 'taken';
+export interface SlugCheck {
+    slug: string;
+    available: boolean;
+    reason?: SlugUnavailableReason;
+}
+/** Whether `<slug>` can be this business's address, and why not if it cannot. */
+export declare function checkSiteAddress(slug: string, forTenantId?: string): Promise<SlugCheck>;
+/** Move the business to a new address; the old one keeps redirecting. */
+export declare function changeSiteAddress(slug: string): Promise<{
+    slug: string;
+    previousSlug: string;
+}>;

package/dist/api/tenant-slug.js

@@ -0,0 +1,18 @@
+import { apiFetch } from "./core";
+function checkSiteAddress(slug, forTenantId) {
+  const own = forTenantId ? `&forTenantId=${encodeURIComponent(forTenantId)}` : "";
+  return apiFetch(
+    `/tenants/check-slug?slug=${encodeURIComponent(slug)}${own}`
+  );
+}
+function changeSiteAddress(slug) {
+  return apiFetch("/tenants/current/slug", {
+    method: "PATCH",
+    body: JSON.stringify({ slug })
+  });
+}
+export {
+  changeSiteAddress,
+  checkSiteAddress
+};
+//# sourceMappingURL=tenant-slug.js.map

package/dist/api/tenant-slug.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/tenant-slug.ts"],"sourcesContent":["import { apiFetch } from './core';\n\nexport type SlugUnavailableReason =\n  'too-short' | 'too-long' | 'format' | 'reserved' | 'taken';\n\nexport interface SlugCheck {\n  slug: string;\n  available: boolean;\n  reason?: SlugUnavailableReason;\n}\n\n/** Whether `<slug>` can be this business's address, and why not if it cannot. */\nexport function checkSiteAddress(\n  slug: string,\n  forTenantId?: string,\n): Promise<SlugCheck> {\n  const own = forTenantId\n    ? `&forTenantId=${encodeURIComponent(forTenantId)}`\n    : '';\n\n  return apiFetch<SlugCheck>(\n    `/tenants/check-slug?slug=${encodeURIComponent(slug)}${own}`,\n  );\n}\n\n/** Move the business to a new address; the old one keeps redirecting. */\nexport function changeSiteAddress(\n  slug: string,\n): Promise<{ slug: string; previousSlug: string }> {\n  return apiFetch('/tenants/current/slug', {\n    method: 'PATCH',\n    body: JSON.stringify({ slug }),\n  });\n}\n"],"mappings":"AAAA,SAAS,gBAAgB;AAYlB,SAAS,iBACd,MACA,aACoB;AACpB,QAAM,MAAM,cACR,gBAAgB,mBAAmB,WAAW,CAAC,KAC/C;AAEJ,SAAO;AAAA,IACL,4BAA4B,mBAAmB,IAAI,CAAC,GAAG,GAAG;AAAA,EAC5D;AACF;AAGO,SAAS,kBACd,MACiD;AACjD,SAAO,SAAS,yBAAyB;AAAA,IACvC,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,EAC/B,CAAC;AACH;","names":[]}

package/dist/api/tenant.d.ts

@@ -0,0 +1,33 @@
+import type { Tenant, TenantUpdateInput } from './types';
+import type { StorefrontReadiness } from './types';
+export declare const tenantApi: {
+    getCurrent: (tenantSlug: string) => Promise<Tenant>;
+    getBySlug: (slug: string) => Promise<Tenant>;
+    /**
+     * What still stops this storefront taking an order.
+     *
+     * Asked BEFORE the publish request so the merchant reads what is missing
+     * instead of watching a save fail. The same check runs inside PATCH
+     * /tenants/current, which is the real gate — this is only the early look, so
+     * a stale answer here can never publish something the server would refuse.
+     */
+    readiness: (tenantSlug: string) => Promise<StorefrontReadiness>;
+    update: (tenantSlug: string, data: Partial<TenantUpdateInput>, options?: {
+        target?: "draft" | "live";
+    }) => Promise<Tenant>;
+    updateSettings: (tenantSlug: string, settings: Record<string, unknown>, options?: {
+        target?: "draft" | "live";
+    }) => Promise<Tenant>;
+    publishAppearance: (tenantSlug: string) => Promise<Tenant>;
+    discardAppearanceDraft: (tenantSlug: string) => Promise<Tenant>;
+    deleteCurrent: (tenantSlug: string) => Promise<{
+        deleted: true;
+    }>;
+    suggestColors: (tenantSlug: string, logoUrl: string) => Promise<{
+        primary: string;
+        secondary: string;
+        accent: string;
+        background: string;
+        text: string;
+    }>;
+};