brainerce 1.33.0 → 1.34.0

package/README.md

@@ -409,6 +409,33 @@ The `create-brainerce-store` scaffold ships ready-made components (`<Announcemen
 
 Full guide: [Core Integration "Content"](https://brainerce.com/docs/integration/core#content). Advanced patterns (channel scoping, custom fields, translations, admin writes): [Optional Features "Content"](https://brainerce.com/docs/integration/optional). Validation + sanitize rules: [Rules & Reference "Content"](https://brainerce.com/docs/integration/rules).
 
+### Blog
+
+Merchants publish blog posts in **Content → Blog**. Storefronts choose their own URL scheme — render posts at `/blog/[slug]`, `/articles/[slug]`, or whatever fits the brand.
+
+```typescript
+// List published posts (any SDK mode)
+const { data: posts, meta } = await client.blog.getPosts({ page: 1, limit: 10 });
+
+// Filter by category or tag
+const { data: news } = await client.blog.getPosts({ category: 'news' });
+const { data: tips } = await client.blog.getPosts({ tag: 'tutorial' });
+
+// Fetch one by slug — returns null on 404
+const post = await client.blog.getPost(params.slug);
+if (!post) notFound();
+```
+
+**Security**: `post.content` is merchant-authored HTML. Always sanitize before rendering:
+
+```tsx
+import DOMPurify from 'isomorphic-dompurify';
+const safeHtml = DOMPurify.sanitize(post.content);
+return <div dangerouslySetInnerHTML={{ __html: safeHtml }} className="prose" />;
+```
+
+**Scheduling**: A post is visible once `status === 'PUBLISHED'` and `publishedAt <= now()`. Set a future `publishedAt` when publishing to schedule — no cron needed.
+
 ---
 
 ## Common Mistakes to Avoid

package/dist/index.d.mts

@@ -5168,6 +5168,61 @@ interface ModifierValidationError {
     /** Modifier the error belongs to (when applicable). */
     modifierId?: string;
 }
+type BlogPostStatus = 'DRAFT' | 'SCHEDULED' | 'PUBLISHED';
+interface BlogPost {
+    id: string;
+    storeId: string;
+    title: string;
+    slug: string;
+    category?: string;
+    content: string;
+    excerpt?: string;
+    coverImageUrl?: string;
+    coverImageAlt?: string;
+    author?: string;
+    tags: string[];
+    metadata: Record<string, unknown>;
+    status: BlogPostStatus;
+    publishedAt?: string;
+    seoTitle?: string;
+    seoDescription?: string;
+    ogImageUrl?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface CreateBlogPostInput {
+    title: string;
+    slug?: string;
+    category?: string;
+    content?: string;
+    excerpt?: string;
+    coverImageUrl?: string;
+    coverImageAlt?: string;
+    author?: string;
+    tags?: string[];
+    metadata?: Record<string, unknown>;
+    status?: BlogPostStatus;
+    publishedAt?: string | null;
+    seoTitle?: string;
+    seoDescription?: string;
+    ogImageUrl?: string;
+}
+type UpdateBlogPostInput = Partial<CreateBlogPostInput>;
+interface BlogPostListParams {
+    page?: number;
+    limit?: number;
+    category?: string;
+    tag?: string;
+}
+interface BlogPostListResponse {
+    data: BlogPost[];
+    meta: {
+        page: number;
+        limit: number;
+        total: number;
+        totalPages: number;
+    };
+}
 interface BrainerceApiError {
     statusCode: number;
     message: string;
@@ -6637,6 +6692,42 @@ declare class BrainerceClient {
         /** Hard delete the row. Admin mode only. */
         remove: (id: string) => Promise<void>;
     };
+    /**
+     * Read and manage blog posts.
+     *
+     * ```typescript
+     * // Storefront / vibe-coded: list published posts
+     * const { data: posts } = await brainerce.blog.getPosts({ category: 'news' });
+     *
+     * // Fetch one by slug
+     * const post = await brainerce.blog.getPost('my-first-post');
+     *
+     * // Admin: create a draft
+     * const draft = await brainerce.blog.create({ title: 'Hello World' });
+     * ```
+     */
+    blog: {
+        /**
+         * List published posts. Works in all modes.
+         * Filters: `category`, `tag`, `page`, `limit`.
+         */
+        getPosts: (params?: BlogPostListParams) => Promise<BlogPostListResponse>;
+        /**
+         * Fetch one published post by its slug. Returns `null` on 404.
+         * Works in all modes.
+         */
+        getPost: (slug: string) => Promise<BlogPost | null>;
+        /** Create a blog post in DRAFT status. Admin mode only. */
+        create: (input: CreateBlogPostInput) => Promise<BlogPost>;
+        /** Update a blog post by ID. Admin mode only. */
+        update: (id: string, input: UpdateBlogPostInput) => Promise<BlogPost>;
+        /** Transition status → PUBLISHED (sets publishedAt = now if unset). Admin mode only. */
+        publish: (id: string) => Promise<BlogPost>;
+        /** Transition status PUBLISHED → DRAFT. Admin mode only. */
+        unpublish: (id: string) => Promise<BlogPost>;
+        /** Hard-delete a blog post. Admin mode only. */
+        remove: (id: string) => Promise<void>;
+    };
     /**
      * Submit a contact inquiry from a storefront contact form.
      *

package/dist/index.d.ts

@@ -5168,6 +5168,61 @@ interface ModifierValidationError {
     /** Modifier the error belongs to (when applicable). */
     modifierId?: string;
 }
+type BlogPostStatus = 'DRAFT' | 'SCHEDULED' | 'PUBLISHED';
+interface BlogPost {
+    id: string;
+    storeId: string;
+    title: string;
+    slug: string;
+    category?: string;
+    content: string;
+    excerpt?: string;
+    coverImageUrl?: string;
+    coverImageAlt?: string;
+    author?: string;
+    tags: string[];
+    metadata: Record<string, unknown>;
+    status: BlogPostStatus;
+    publishedAt?: string;
+    seoTitle?: string;
+    seoDescription?: string;
+    ogImageUrl?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface CreateBlogPostInput {
+    title: string;
+    slug?: string;
+    category?: string;
+    content?: string;
+    excerpt?: string;
+    coverImageUrl?: string;
+    coverImageAlt?: string;
+    author?: string;
+    tags?: string[];
+    metadata?: Record<string, unknown>;
+    status?: BlogPostStatus;
+    publishedAt?: string | null;
+    seoTitle?: string;
+    seoDescription?: string;
+    ogImageUrl?: string;
+}
+type UpdateBlogPostInput = Partial<CreateBlogPostInput>;
+interface BlogPostListParams {
+    page?: number;
+    limit?: number;
+    category?: string;
+    tag?: string;
+}
+interface BlogPostListResponse {
+    data: BlogPost[];
+    meta: {
+        page: number;
+        limit: number;
+        total: number;
+        totalPages: number;
+    };
+}
 interface BrainerceApiError {
     statusCode: number;
     message: string;
@@ -6637,6 +6692,42 @@ declare class BrainerceClient {
         /** Hard delete the row. Admin mode only. */
         remove: (id: string) => Promise<void>;
     };
+    /**
+     * Read and manage blog posts.
+     *
+     * ```typescript
+     * // Storefront / vibe-coded: list published posts
+     * const { data: posts } = await brainerce.blog.getPosts({ category: 'news' });
+     *
+     * // Fetch one by slug
+     * const post = await brainerce.blog.getPost('my-first-post');
+     *
+     * // Admin: create a draft
+     * const draft = await brainerce.blog.create({ title: 'Hello World' });
+     * ```
+     */
+    blog: {
+        /**
+         * List published posts. Works in all modes.
+         * Filters: `category`, `tag`, `page`, `limit`.
+         */
+        getPosts: (params?: BlogPostListParams) => Promise<BlogPostListResponse>;
+        /**
+         * Fetch one published post by its slug. Returns `null` on 404.
+         * Works in all modes.
+         */
+        getPost: (slug: string) => Promise<BlogPost | null>;
+        /** Create a blog post in DRAFT status. Admin mode only. */
+        create: (input: CreateBlogPostInput) => Promise<BlogPost>;
+        /** Update a blog post by ID. Admin mode only. */
+        update: (id: string, input: UpdateBlogPostInput) => Promise<BlogPost>;
+        /** Transition status → PUBLISHED (sets publishedAt = now if unset). Admin mode only. */
+        publish: (id: string) => Promise<BlogPost>;
+        /** Transition status PUBLISHED → DRAFT. Admin mode only. */
+        unpublish: (id: string) => Promise<BlogPost>;
+        /** Hard-delete a blog post. Admin mode only. */
+        remove: (id: string) => Promise<void>;
+    };
     /**
      * Submit a contact inquiry from a storefront contact form.
      *

package/dist/index.js

@@ -489,6 +489,120 @@ var BrainerceClient = class {
         remove: removeById
       };
     })();
+    // -------------------- Blog --------------------
+    /**
+     * Read and manage blog posts.
+     *
+     * ```typescript
+     * // Storefront / vibe-coded: list published posts
+     * const { data: posts } = await brainerce.blog.getPosts({ category: 'news' });
+     *
+     * // Fetch one by slug
+     * const post = await brainerce.blog.getPost('my-first-post');
+     *
+     * // Admin: create a draft
+     * const draft = await brainerce.blog.create({ title: 'Hello World' });
+     * ```
+     */
+    this.blog = /* @__PURE__ */ (() => {
+      const publicBase = "/blog/posts";
+      const adminBase = "/blog/posts";
+      const requireAdmin = (action) => {
+        if (this.isVibeCodedMode() || this.storeId && !this.apiKey) {
+          throw new BrainerceError(
+            `client.blog.${action}() requires admin mode (apiKey). Vibe-coded and storefront modes are read-only.`,
+            403
+          );
+        }
+      };
+      const onNotFound = (err) => {
+        if (err instanceof BrainerceError && err.statusCode === 404) return null;
+        throw err;
+      };
+      const buildQuery = (params) => Object.fromEntries(
+        Object.entries(params).filter(([, v]) => v != null).map(([k, v]) => [k, String(v)])
+      );
+      return {
+        /**
+         * List published posts. Works in all modes.
+         * Filters: `category`, `tag`, `page`, `limit`.
+         */
+        getPosts: (params = {}) => {
+          const query = buildQuery(params);
+          if (this.isVibeCodedMode()) {
+            return this.vibeCodedRequest(
+              "GET",
+              publicBase,
+              void 0,
+              query
+            );
+          }
+          if (this.storeId && !this.apiKey) {
+            return this.storefrontRequest(
+              "GET",
+              publicBase,
+              void 0,
+              query
+            );
+          }
+          return this.adminRequest(
+            "GET",
+            adminBase,
+            void 0,
+            query
+          );
+        },
+        /**
+         * Fetch one published post by its slug. Returns `null` on 404.
+         * Works in all modes.
+         */
+        getPost: (slug) => {
+          const path = `${publicBase}/${encodeURIComponent(slug)}`;
+          if (this.isVibeCodedMode()) {
+            return this.vibeCodedRequest("GET", path).catch(onNotFound);
+          }
+          if (this.storeId && !this.apiKey) {
+            return this.storefrontRequest("GET", path).catch(onNotFound);
+          }
+          return this.adminRequest("GET", path).catch(onNotFound);
+        },
+        /** Create a blog post in DRAFT status. Admin mode only. */
+        create: (input) => {
+          requireAdmin("create");
+          return this.adminRequest("POST", adminBase, input);
+        },
+        /** Update a blog post by ID. Admin mode only. */
+        update: (id, input) => {
+          requireAdmin("update");
+          return this.adminRequest(
+            "PATCH",
+            `${adminBase}/${encodeURIComponent(id)}`,
+            input
+          );
+        },
+        /** Transition status → PUBLISHED (sets publishedAt = now if unset). Admin mode only. */
+        publish: (id) => {
+          requireAdmin("publish");
+          return this.adminRequest(
+            "POST",
+            `${adminBase}/${encodeURIComponent(id)}/publish`
+          );
+        },
+        /** Transition status PUBLISHED → DRAFT. Admin mode only. */
+        unpublish: (id) => {
+          requireAdmin("unpublish");
+          return this.adminRequest(
+            "POST",
+            `${adminBase}/${encodeURIComponent(id)}/unpublish`
+          );
+        },
+        /** Hard-delete a blog post. Admin mode only. */
+        remove: async (id) => {
+          requireAdmin("remove");
+          await this.adminRequest("DELETE", `${adminBase}/${encodeURIComponent(id)}`);
+        }
+      };
+    })();
     // -------------------- Local Cart (Client-Side for Guests) --------------------
     // These methods store cart data in localStorage - NO API calls!
     // Use for guest users in vibe-coded sites
@@ -8112,6 +8226,9 @@ var ALLOWED_PAYMENT_HOSTS = [
   "grow.security",
   // CreditGuard
   "creditguard.co.il",
+  // Takbull
+  "takbull.co.il",
+  "api.takbull.co.il",
   // Brainerce-hosted payment embeds (backend payment-embed proxy at
   // `/api/payment/embed/...` that fronts provider apps' embed shells —
   // e.g. cardcom-payments OpenFields wrapper). The match also covers

package/dist/index.mjs

@@ -419,6 +419,120 @@ var BrainerceClient = class {
         remove: removeById
       };
     })();
+    // -------------------- Blog --------------------
+    /**
+     * Read and manage blog posts.
+     *
+     * ```typescript
+     * // Storefront / vibe-coded: list published posts
+     * const { data: posts } = await brainerce.blog.getPosts({ category: 'news' });
+     *
+     * // Fetch one by slug
+     * const post = await brainerce.blog.getPost('my-first-post');
+     *
+     * // Admin: create a draft
+     * const draft = await brainerce.blog.create({ title: 'Hello World' });
+     * ```
+     */
+    this.blog = /* @__PURE__ */ (() => {
+      const publicBase = "/blog/posts";
+      const adminBase = "/blog/posts";
+      const requireAdmin = (action) => {
+        if (this.isVibeCodedMode() || this.storeId && !this.apiKey) {
+          throw new BrainerceError(
+            `client.blog.${action}() requires admin mode (apiKey). Vibe-coded and storefront modes are read-only.`,
+            403
+          );
+        }
+      };
+      const onNotFound = (err) => {
+        if (err instanceof BrainerceError && err.statusCode === 404) return null;
+        throw err;
+      };
+      const buildQuery = (params) => Object.fromEntries(
+        Object.entries(params).filter(([, v]) => v != null).map(([k, v]) => [k, String(v)])
+      );
+      return {
+        /**
+         * List published posts. Works in all modes.
+         * Filters: `category`, `tag`, `page`, `limit`.
+         */
+        getPosts: (params = {}) => {
+          const query = buildQuery(params);
+          if (this.isVibeCodedMode()) {
+            return this.vibeCodedRequest(
+              "GET",
+              publicBase,
+              void 0,
+              query
+            );
+          }
+          if (this.storeId && !this.apiKey) {
+            return this.storefrontRequest(
+              "GET",
+              publicBase,
+              void 0,
+              query
+            );
+          }
+          return this.adminRequest(
+            "GET",
+            adminBase,
+            void 0,
+            query
+          );
+        },
+        /**
+         * Fetch one published post by its slug. Returns `null` on 404.
+         * Works in all modes.
+         */
+        getPost: (slug) => {
+          const path = `${publicBase}/${encodeURIComponent(slug)}`;
+          if (this.isVibeCodedMode()) {
+            return this.vibeCodedRequest("GET", path).catch(onNotFound);
+          }
+          if (this.storeId && !this.apiKey) {
+            return this.storefrontRequest("GET", path).catch(onNotFound);
+          }
+          return this.adminRequest("GET", path).catch(onNotFound);
+        },
+        /** Create a blog post in DRAFT status. Admin mode only. */
+        create: (input) => {
+          requireAdmin("create");
+          return this.adminRequest("POST", adminBase, input);
+        },
+        /** Update a blog post by ID. Admin mode only. */
+        update: (id, input) => {
+          requireAdmin("update");
+          return this.adminRequest(
+            "PATCH",
+            `${adminBase}/${encodeURIComponent(id)}`,
+            input
+          );
+        },
+        /** Transition status → PUBLISHED (sets publishedAt = now if unset). Admin mode only. */
+        publish: (id) => {
+          requireAdmin("publish");
+          return this.adminRequest(
+            "POST",
+            `${adminBase}/${encodeURIComponent(id)}/publish`
+          );
+        },
+        /** Transition status PUBLISHED → DRAFT. Admin mode only. */
+        unpublish: (id) => {
+          requireAdmin("unpublish");
+          return this.adminRequest(
+            "POST",
+            `${adminBase}/${encodeURIComponent(id)}/unpublish`
+          );
+        },
+        /** Hard-delete a blog post. Admin mode only. */
+        remove: async (id) => {
+          requireAdmin("remove");
+          await this.adminRequest("DELETE", `${adminBase}/${encodeURIComponent(id)}`);
+        }
+      };
+    })();
     // -------------------- Local Cart (Client-Side for Guests) --------------------
     // These methods store cart data in localStorage - NO API calls!
     // Use for guest users in vibe-coded sites
@@ -8042,6 +8156,9 @@ var ALLOWED_PAYMENT_HOSTS = [
   "grow.security",
   // CreditGuard
   "creditguard.co.il",
+  // Takbull
+  "takbull.co.il",
+  "api.takbull.co.il",
   // Brainerce-hosted payment embeds (backend payment-embed proxy at
   // `/api/payment/embed/...` that fronts provider apps' embed shells —
   // e.g. cardcom-payments OpenFields wrapper). The match also covers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainerce",
-  "version": "1.33.0",
+  "version": "1.34.0",
   "description": "Official SDK for building e-commerce storefronts with Brainerce Platform. Perfect for vibe-coded sites, AI-built stores (Cursor, Lovable, v0), and custom storefronts.",
   "main": "dist/index.js",
   "module": "dist/index.mjs",