react-shopwave-connect 0.4.3 → 0.4.4

package/dist/core/index.cjs

@@ -382,17 +382,29 @@ const UPLOAD_KINDS = Object.freeze({
 	applicationLogo: "applicaionLogo",
 	applicationImages: "applicaionImages"
 });
+/** Every `UploadPrefix`, longest first so a name check never takes `product` for `product_thumbnail`. */
+const UPLOAD_PREFIXES = Object.freeze([
+	"product_thumbnail",
+	"variant_thumbnail",
+	"product",
+	"variant"
+]);
 /** How uploads are addressed (app route and Shopwave uploader). */
 const SHOPWAVE_UPLOAD = Object.freeze({
 	route: "upload",
 	upstream: "uploader",
 	kindHeader: "contentType",
+	prefixHeader: "prefix",
 	fileField: "file",
-	kindField: "kind"
+	kindField: "kind",
+	prefixField: "prefix"
 });
 function isUploadKind(value) {
 	return typeof value === "string" && Object.prototype.hasOwnProperty.call(UPLOAD_KINDS, value);
 }
+function isUploadPrefix(value) {
+	return typeof value === "string" && UPLOAD_PREFIXES.includes(value);
+}
 const SHOPWAVE_LOOKUPS = Object.freeze({
 	productTags: {
 		route: "products/tags",
@@ -578,443 +590,109 @@ async function submitEntity({ endpoint, method = "POST", payload }, options = {}
 }
 
 //#endregion
-//#region src/core/entities.ts
+//#region src/core/imageFit.ts
 /**
-* Addressing per entity, following the Shopwave API reference
-* (https://developer.merchantstack.com/api-reference.html) and checked against
-* the live API where noted:
-* - category/product/store: GET filtered by `<x>Ids`, POST upsert, DELETE with `<x>Id` → 205.
-* - promotion: no DELETE; promotions are never deleted, only expired. Expiring
-*   reads the promotion and saves the whole record back with `endDate` = now (and
-*   `startDate` = now too if it hadn't started); the live API rejects a partial
-*   `{ id, endDate }` save with error 899. Dates are UTC `YYYY-MM-DD HH:mm:ss`.
-* - employee: POST updates `roleId`, `joinedDate`, `exitDate` (names can't be
-*   changed); no DELETE (live API: "Cannot DELETE /employee") → retired via `exitDate`.
-* - consumer: read-only (`GET` with `ids`, comma-separated); live POST → 404.
+* The centred part of a `srcWidth × srcHeight` image with the aspect ratio of
+* `dstWidth × dstHeight` (like CSS `object-fit: cover`).
 */
-const SHOPWAVE_ENTITIES = Object.freeze({
-	product: {
-		route: "products",
-		collection: "products",
-		upstream: "product",
-		idsHeader: "productIds",
-		idHeader: "productId",
-		writable: true,
-		deleteMode: "delete"
-	},
-	category: {
-		route: "categories",
-		collection: "categories",
-		upstream: "category",
-		idsHeader: "categoryIds",
-		idHeader: "categoryId",
-		writable: true,
-		deleteMode: "delete"
-	},
-	store: {
-		route: "stores",
-		collection: "stores",
-		upstream: "store",
-		idsHeader: "storeIds",
-		idHeader: "storeId",
-		writable: true,
-		deleteMode: "delete"
-	},
-	promotion: {
-		route: "promotions",
-		collection: "promotions",
-		upstream: "promotion",
-		idsHeader: "promotionIds",
-		idHeader: "promotionId",
-		writable: true,
-		deleteMode: "retire",
-		retireField: "endDate",
-		retireWithRecord: true,
-		retireStartField: "startDate"
-	},
-	employee: {
-		route: "employees",
-		collection: "employees",
-		upstream: "employee",
-		idsHeader: "employeeIds",
-		idHeader: "employeeId",
-		writable: true,
-		deleteMode: "retire",
-		retireField: "exitDate"
-	},
-	consumer: {
-		route: "consumer",
-		collection: "consumers",
-		upstream: "consumer",
-		idsHeader: "ids",
-		idHeader: "consumerId",
-		writable: false,
-		deleteMode: "none"
+function coverCrop(srcWidth, srcHeight, dstWidth, dstHeight) {
+	if (![
+		srcWidth,
+		srcHeight,
+		dstWidth,
+		dstHeight
+	].every((n) => Number.isFinite(n) && n > 0)) throw new Error("coverCrop: sizes must be positive numbers");
+	const srcRatio = srcWidth / srcHeight;
+	const dstRatio = dstWidth / dstHeight;
+	if (srcRatio > dstRatio) {
+		const sw = Math.round(srcHeight * dstRatio);
+		return {
+			sx: Math.round((srcWidth - sw) / 2),
+			sy: 0,
+			sw,
+			sh: srcHeight
+		};
 	}
-});
-function definition(kind) {
-	const def = SHOPWAVE_ENTITIES[kind];
-	if (!def) throw new Error(`Unknown Shopwave entity "${kind}"`);
-	return def;
+	const sh = Math.round(srcWidth / dstRatio);
+	return {
+		sx: 0,
+		sy: Math.round((srcHeight - sh) / 2),
+		sw: srcWidth,
+		sh
+	};
 }
-function assertId(kind, id) {
-	const s = id == null ? "" : String(id).trim();
-	if (!s) throw new Error(`${kind} id is missing`);
-	return encodeURIComponent(s);
+function requireBrowserImages(fn) {
+	if (typeof createImageBitmap !== "function") throw new Error(`${fn} needs a browser (createImageBitmap is not available)`);
 }
-/**
-* Creates or updates several entities of one kind in a single request and
-* returns them as saved (with their ids), in the order given.
-*
-* The request is `{ <collection>: { "0": item0, "1": item1, … } }`. Shopwave
-* answers 201 and echoes every entity under the ref it was sent with, so each
-* result is matched back by ref. Throws {@link ShopwaveApiError} when the
-* response carries `api.message.errors` or any ref is missing from it.
-*
-* The API's partial-success semantics for multi-entity saves haven't been
-* confirmed yet; single saves (`saveProduct` etc.) are the tested path.
-*/
-async function saveEntities(kind, items, options = {}) {
-	const def = definition(kind);
-	if (items.length === 0) return [];
-	const refs = items.map((_, i) => String(i));
-	const payload = { [def.collection]: Object.fromEntries(refs.map((ref, i) => [ref, items[i]])) };
-	const { status, body: raw } = await apiRequest(`/api/${def.route}`, {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify(payload)
-	}, options);
-	const body = raw;
-	assertNoApiErrors(body, status);
-	const echoed = body?.[def.collection] ?? {};
-	return refs.map((ref, i) => {
-		const saved = echoed[ref];
-		if (!saved || saved.id == null) throw new ShopwaveApiError(status, `Shopwave API error (${status}): the saved ${kind} (ref "${ref}") was not returned`, { body });
+/** Reads an image file's pixel size (browser only). */
+async function readImageSize(file) {
+	requireBrowserImages("readImageSize");
+	const bitmap = await createImageBitmap(file);
+	try {
 		return {
-			...items[i],
-			...saved,
-			id: Number(saved.id)
+			width: bitmap.width,
+			height: bitmap.height
 		};
-	});
-}
-/** Creates (no `id`) or updates (with `id`) one entity and returns it with its id. */
-async function saveEntity(kind, item, options = {}) {
-	const [saved] = await saveEntities(kind, [item], options);
-	return saved;
+	} finally {
+		bitmap.close?.();
+	}
 }
 /**
-* Deletes one entity (a soft delete: it stays readable with `deleted: true`).
-* Employees and promotions can't be deleted in Shopwave; for them the route
-* sets `exitDate` / `endDate` to now instead (see `SHOPWAVE_ENTITIES`), and a
-* promotion is saved back whole (see {@link deletePromotion}).
-*
-* Shopwave answers 205 with an empty body — also for ids that don't exist — so
-* a resolved promise means "the API accepted the request", not "a record was
-* deleted".
+* Returns the image at exactly `width × height`: scaled and centre-cropped
+* (never stretched). Browser only. The result is a `File` named like the
+* input, with the output type's extension.
 */
-async function deleteEntityById(kind, id, options = {}) {
-	await apiDelete(`/api/${definition(kind).route}/${assertId(kind, id)}`, options);
-}
-/** Reads one entity by id, or `null` when there's no such (non-deleted) record. */
-async function fetchEntityById(kind, id, params = {}, options = {}) {
-	const def = definition(kind);
-	const body = await apiGet(`/api/${def.route}/${assertId(kind, id)}`, { deleted: params.deleted ?? false }, options);
-	assertNoApiErrors(body, 200);
-	const map = body?.[def.collection] ?? {};
-	return map[String(id)] ?? Object.values(map).find((e) => String(e?.id) === String(id)) ?? null;
+async function fitImageToSize(file, width, height, options = {}) {
+	requireBrowserImages("fitImageToSize");
+	const { type = "image/png", quality, keepIfExact = true } = options;
+	const name = file.name || "image";
+	const ext = type === "image/jpeg" ? "jpg" : type.split("/")[1];
+	const outName = `${name.replace(/\.[^.]+$/, "")}.${ext}`;
+	const bitmap = await createImageBitmap(file);
+	try {
+		if (keepIfExact && bitmap.width === width && bitmap.height === height && file.type === type) return file instanceof File ? file : new File([file], outName, { type });
+		const { sx, sy, sw, sh } = coverCrop(bitmap.width, bitmap.height, width, height);
+		let blob;
+		if (typeof OffscreenCanvas === "function") {
+			const canvas = new OffscreenCanvas(width, height);
+			const ctx = canvas.getContext("2d");
+			if (!ctx) throw new Error("fitImageToSize: no 2D canvas context");
+			ctx.imageSmoothingQuality = "high";
+			ctx.drawImage(bitmap, sx, sy, sw, sh, 0, 0, width, height);
+			blob = await canvas.convertToBlob({
+				type,
+				quality
+			});
+		} else {
+			const canvas = document.createElement("canvas");
+			canvas.width = width;
+			canvas.height = height;
+			const ctx = canvas.getContext("2d");
+			if (!ctx) throw new Error("fitImageToSize: no 2D canvas context");
+			ctx.imageSmoothingQuality = "high";
+			ctx.drawImage(bitmap, sx, sy, sw, sh, 0, 0, width, height);
+			blob = await new Promise((resolve, reject) => canvas.toBlob((b) => b ? resolve(b) : reject(/* @__PURE__ */ new Error("fitImageToSize: encoding failed")), type, quality));
+		}
+		return new File([blob], outName, { type });
+	} finally {
+		bitmap.close?.();
+	}
 }
+
+//#endregion
+//#region src/core/upload.ts
 /**
-* Creates (no `id`) or updates (with `id`) a product.
-*
-* Shopwave instances (prices) can't be updated, only replaced. Build
-* `instances` with {@link toProductInstancesForSave} (passing the product as last
-* read) so an edited price is sent as a new instance. As a safeguard, a new
-* product (no `id`, e.g. a duplicate) never sends instance ids: an id copied from
-* another product would otherwise point the save at that product's instances.
-*/
-const saveProduct = (product, options) => {
-	return saveEntity("product", (product.id == null || String(product.id).trim() === "") && product.instances != null ? {
-		...product,
-		instances: toProductInstancesForSave(product.instances)
-	} : product, options);
-};
-const deleteProduct = (id, options) => deleteEntityById("product", id, options);
-const fetchProduct = (id, params, options) => fetchEntityById("product", id, params, options);
-const saveCategory = (category, options) => saveEntity("category", category, options);
-const deleteCategory = (id, options) => deleteEntityById("category", id, options);
-const fetchCategory = (id, params, options) => fetchEntityById("category", id, params, options);
-const saveStore = (store, options) => saveEntity("store", store, options);
-const deleteStore = (id, options) => deleteEntityById("store", id, options);
-const fetchStore = (id, params, options) => fetchEntityById("store", id, params, options);
-const savePromotion = (promotion, options) => saveEntity("promotion", promotion, options);
-/**
-* Expires a promotion (Shopwave never deletes promotions). The route reads the
-* promotion and saves it back with `endDate` set to now; a promotion that hasn't
-* started yet gets `startDate` = `endDate` = now. Rejects if the promotion doesn't
-* exist or the save fails.
+* HTTPS host that serves the Shopwave CDN's images. The API returns
+* `http://static.merchantstack.com/images/…`, which has no HTTPS endpoint
+* (checked Sep 2026), so pages served over HTTPS can't show it.
 */
-const deletePromotion = (id, options) => deleteEntityById("promotion", id, options);
-const fetchPromotion = (id, params, options) => fetchEntityById("promotion", id, params, options);
+const SHOPWAVE_IMAGE_BASE_URL = "https://s3-eu-west-1.amazonaws.com/static.merchantstack.com/images";
+const STATIC_HOST = /^https?:\/\/static\.merchantstack\.com\/images\//i;
 /**
-* Creates an employee, or updates one (with `id`). On update Shopwave only
-* applies `roleId`, `joinedDate` and `exitDate` (and store roles); names and
-* email can't be changed, and the echo only carries the updated fields — re-read
-* with `fetchEmployee` if you need the stored record.
-*/
-const saveEmployee = (employee, options) => saveEntity("employee", employee, options);
-/** Retires an employee: Shopwave has no employee DELETE, so this sets `exitDate` to now. */
-const deleteEmployee = (id, options) => deleteEntityById("employee", id, options);
-const fetchEmployee = (id, params, options) => fetchEntityById("employee", id, params, options);
-const fetchConsumer = (id, params, options) => fetchEntityById("consumer", id, params, options);
-
-//#endregion
-//#region src/core/basket.ts
-const DEFAULT_BASKET_FILTERS = {
-	search: "",
-	dateRange: {
-		start: null,
-		end: null
-	},
-	consumerId: null,
-	status: "all"
-};
-const DEFAULT_PAGINATION = {
-	page: 0,
-	pageSize: 25,
-	total: 0
-};
-/** Formats a date as `YYYY-MM-DD HH:mm:ss` for the report query. */
-function formatDateForQuery(date, isEndOfDay = false) {
-	return `${date.getFullYear()}-${String(date.getMonth() + 1).padStart(2, "0")}-${String(date.getDate()).padStart(2, "0")} ${isEndOfDay ? "23:59:59" : "00:00:00"}`;
-}
-/** Builds the `Basket` report query from a set of filters. */
-function buildBasketReportQuery(filters) {
-	const whereConditions = [];
-	const today = /* @__PURE__ */ new Date();
-	const startDate = filters.dateRange.start ?? today;
-	const endDate = filters.dateRange.end ?? today;
-	whereConditions.push(`Basket.completeDate > '${formatDateForQuery(startDate, false)}'`);
-	whereConditions.push(`Basket.completeDate < '${formatDateForQuery(endDate, true)}'`);
-	if (filters.consumerId) whereConditions.push(`Basket.consumerId = ${filters.consumerId}`);
-	if (filters.status !== "all") whereConditions.push(`Basket.status = '${filters.status}'`);
-	return { baskets: {
-		FROM: "Basket",
-		WHERE: whereConditions.length > 0 ? { AND: whereConditions } : void 0
-	} };
-}
-/** Flattens the raw report rows/keys into structured baskets. */
-function parseBasketReportData(reports) {
-	if (!reports?.baskets?.data || !reports?.baskets?.keys) return [];
-	const { keys, data } = reports.baskets;
-	const keyIndices = {};
-	keys.forEach((key, index) => {
-		keyIndices[key.name] = index;
-	});
-	const productKey = keys.find((k) => k.name === "Basket.Product");
-	const productSubKeys = {};
-	if (productKey?.item) productKey.item.forEach((subKey, index) => {
-		productSubKeys[subKey.name] = index;
-	});
-	return data.map((row) => {
-		const products = (row[keyIndices["Basket.Product"]] || []).map((productRow) => ({
-			productId: productRow[productSubKeys["Basket.Product.productId"]],
-			productName: `Product #${productRow[productSubKeys["Basket.Product.productId"]]}`,
-			quantity: productRow[productSubKeys["Basket.Product.quantity"]] || 1,
-			price: productRow[productSubKeys["Basket.Product.productPrice"]] || 0,
-			tax: productRow[productSubKeys["Basket.Product.productTaxPercentage"]] || 0
-		}));
-		const total = products.reduce((sum, p) => sum + p.price * p.quantity, 0);
-		const taxTotal = products.reduce((sum, p) => sum + p.price * p.quantity * p.tax, 0);
-		const completeDateTimestamp = row[keyIndices["Basket.completeDate"]];
-		const completeDate = completeDateTimestamp ? new Date(completeDateTimestamp).toISOString() : "";
-		return {
-			id: row[keyIndices["Basket.id"]],
-			name: row[keyIndices["Basket.name"]],
-			consumerId: row[keyIndices["Basket.consumerId"]],
-			products,
-			total,
-			taxTotal,
-			status: "completed",
-			completeDate
-		};
-	});
-}
-/** Unique non-null consumer ids referenced by a set of baskets. */
-function collectConsumerIds(baskets) {
-	if (!baskets.length) return null;
-	const ids = baskets.map((b) => b.consumerId).filter((id) => id != null);
-	return ids.length > 0 ? [...new Set(ids)] : null;
-}
-/** Unique product ids referenced by a set of baskets. */
-function collectProductIds(baskets) {
-	if (!baskets.length) return null;
-	const ids = /* @__PURE__ */ new Set();
-	baskets.forEach((basket) => {
-		basket.products.forEach((product) => {
-			if (product.productId) ids.add(product.productId);
-		});
-	});
-	return ids.size > 0 ? [...ids] : null;
-}
-/** Joins baskets with consumer + product lookups, applies search, sorts. */
-function combineBasketRows({ baskets, consumerMap, productMap, search }) {
-	if (!baskets.length) return [];
-	let combinedRows = baskets.map((basket) => {
-		const consumer = basket.consumerId ? consumerMap[basket.consumerId] : null;
-		const productsWithNames = basket.products.map((p) => {
-			const product = productMap[p.productId];
-			return {
-				...p,
-				productName: product?.name || `Product #${p.productId}`
-			};
-		});
-		return {
-			id: basket.id,
-			basketId: basket.id,
-			basketName: basket.name || `Basket #${basket.id}`,
-			consumerId: basket.consumerId,
-			consumerName: consumer ? `${consumer.firstName} ${consumer.lastName}` : "Unknown",
-			consumerEmail: consumer?.email || "-",
-			products: productsWithNames,
-			basketTotal: (basket.total || 0) / 100,
-			tax: basket.taxTotal || 0,
-			dateTime: basket.completeDate,
-			status: basket.status || "pending"
-		};
-	});
-	if (search) {
-		const searchLower = search.toLowerCase();
-		combinedRows = combinedRows.filter((row) => row.basketId.toString().includes(searchLower) || row.basketName.toLowerCase().includes(searchLower) || row.consumerName.toLowerCase().includes(searchLower) || row.consumerEmail.toLowerCase().includes(searchLower));
-	}
-	combinedRows.sort((a, b) => {
-		const dateA = new Date(a.dateTime).getTime();
-		return new Date(b.dateTime).getTime() - dateA;
-	});
-	return combinedRows;
-}
-/** Aggregate totals for a set of report rows. */
-function computeBasketSummary(rows) {
-	const uniqueConsumerIds = new Set(rows.map((row) => row.consumerId));
-	return {
-		totalBaskets: rows.length,
-		totalRevenue: rows.reduce((sum, row) => sum + row.basketTotal, 0),
-		totalTax: rows.reduce((sum, row) => sum + row.tax, 0),
-		uniqueConsumers: uniqueConsumerIds.size
-	};
-}
-/** Builds a consumer id → consumer lookup. */
-function buildConsumerMap(consumers) {
-	const map = {};
-	if (consumers) consumers.forEach((consumer) => {
-		map[consumer.id] = consumer;
-	});
-	return map;
-}
-
-//#endregion
-//#region src/core/imageFit.ts
-/**
-* The centred part of a `srcWidth × srcHeight` image with the aspect ratio of
-* `dstWidth × dstHeight` (like CSS `object-fit: cover`).
-*/
-function coverCrop(srcWidth, srcHeight, dstWidth, dstHeight) {
-	if (![
-		srcWidth,
-		srcHeight,
-		dstWidth,
-		dstHeight
-	].every((n) => Number.isFinite(n) && n > 0)) throw new Error("coverCrop: sizes must be positive numbers");
-	const srcRatio = srcWidth / srcHeight;
-	const dstRatio = dstWidth / dstHeight;
-	if (srcRatio > dstRatio) {
-		const sw = Math.round(srcHeight * dstRatio);
-		return {
-			sx: Math.round((srcWidth - sw) / 2),
-			sy: 0,
-			sw,
-			sh: srcHeight
-		};
-	}
-	const sh = Math.round(srcWidth / dstRatio);
-	return {
-		sx: 0,
-		sy: Math.round((srcHeight - sh) / 2),
-		sw: srcWidth,
-		sh
-	};
-}
-function requireBrowserImages(fn) {
-	if (typeof createImageBitmap !== "function") throw new Error(`${fn} needs a browser (createImageBitmap is not available)`);
-}
-/** Reads an image file's pixel size (browser only). */
-async function readImageSize(file) {
-	requireBrowserImages("readImageSize");
-	const bitmap = await createImageBitmap(file);
-	try {
-		return {
-			width: bitmap.width,
-			height: bitmap.height
-		};
-	} finally {
-		bitmap.close?.();
-	}
-}
-/**
-* Returns the image at exactly `width × height`: scaled and centre-cropped
-* (never stretched). Browser only. The result is a `File` named like the
-* input, with the output type's extension.
-*/
-async function fitImageToSize(file, width, height, options = {}) {
-	requireBrowserImages("fitImageToSize");
-	const { type = "image/png", quality, keepIfExact = true } = options;
-	const name = file.name || "image";
-	const ext = type === "image/jpeg" ? "jpg" : type.split("/")[1];
-	const outName = `${name.replace(/\.[^.]+$/, "")}.${ext}`;
-	const bitmap = await createImageBitmap(file);
-	try {
-		if (keepIfExact && bitmap.width === width && bitmap.height === height && file.type === type) return file instanceof File ? file : new File([file], outName, { type });
-		const { sx, sy, sw, sh } = coverCrop(bitmap.width, bitmap.height, width, height);
-		let blob;
-		if (typeof OffscreenCanvas === "function") {
-			const canvas = new OffscreenCanvas(width, height);
-			const ctx = canvas.getContext("2d");
-			if (!ctx) throw new Error("fitImageToSize: no 2D canvas context");
-			ctx.imageSmoothingQuality = "high";
-			ctx.drawImage(bitmap, sx, sy, sw, sh, 0, 0, width, height);
-			blob = await canvas.convertToBlob({
-				type,
-				quality
-			});
-		} else {
-			const canvas = document.createElement("canvas");
-			canvas.width = width;
-			canvas.height = height;
-			const ctx = canvas.getContext("2d");
-			if (!ctx) throw new Error("fitImageToSize: no 2D canvas context");
-			ctx.imageSmoothingQuality = "high";
-			ctx.drawImage(bitmap, sx, sy, sw, sh, 0, 0, width, height);
-			blob = await new Promise((resolve, reject) => canvas.toBlob((b) => b ? resolve(b) : reject(/* @__PURE__ */ new Error("fitImageToSize: encoding failed")), type, quality));
-		}
-		return new File([blob], outName, { type });
-	} finally {
-		bitmap.close?.();
-	}
-}
-
-//#endregion
-//#region src/core/upload.ts
-/**
-* HTTPS host that serves the Shopwave CDN's images. The API returns
-* `http://static.merchantstack.com/images/…`, which has no HTTPS endpoint
-* (checked Sep 2026), so pages served over HTTPS can't show it.
-*/
-const SHOPWAVE_IMAGE_BASE_URL = "https://s3-eu-west-1.amazonaws.com/static.merchantstack.com/images";
-const STATIC_HOST = /^https?:\/\/static\.merchantstack\.com\/images\//i;
-/**
-* Turns an image path from the API into a URL a page can load over HTTPS:
-* `http://static.merchantstack.com/images/x.png` → `<base>/x.png`, and a
-* relative path (`merchant/5644/logo/x.png`) → `<base>/merchant/5644/logo/x.png`.
-* Other absolute URLs are returned unchanged; empty input gives `""`.
+* Turns an image path from the API into a URL a page can load over HTTPS:
+* `http://static.merchantstack.com/images/x.png` → `<base>/x.png`, and a
+* relative path (`merchant/5644/logo/x.png`) → `<base>/merchant/5644/logo/x.png`.
+* Other absolute URLs are returned unchanged; empty input gives `""`.
 */
 function getImageUrl(path, base = SHOPWAVE_IMAGE_BASE_URL) {
 	if (!path) return "";
@@ -1034,10 +712,12 @@ function getImageUrl(path, base = SHOPWAVE_IMAGE_BASE_URL) {
 async function uploadImage(file, params, options = {}) {
 	if (!file || typeof file.size !== "number") throw new Error("uploadImage: file must be a File or Blob");
 	if (!isUploadKind(params?.kind)) throw new Error(`uploadImage: unknown kind "${params?.kind}"`);
+	if (params.prefix != null && !isUploadPrefix(params.prefix)) throw new Error(`uploadImage: unknown prefix "${params.prefix}"`);
 	const name = params.fileName ?? file.name ?? "upload";
 	const form = new FormData();
 	form.append(SHOPWAVE_UPLOAD.fileField, file, name);
 	form.append(SHOPWAVE_UPLOAD.kindField, params.kind);
+	if (params.prefix != null) form.append(SHOPWAVE_UPLOAD.prefixField, params.prefix);
 	const { status, body: raw } = await apiRequest(`/api/${SHOPWAVE_UPLOAD.route}`, {
 		method: "POST",
 		body: form
@@ -1172,6 +852,382 @@ async function uploadMerchantImage(file, slot, options = {}) {
 	return uploadImage(fit ? await fitImageToSize(file, def.width, def.height, fitOptions) : file, { kind: def.uploadKind }, requestOptions);
 }
 
+//#endregion
+//#region src/core/productImages.ts
+/**
+* Product images, as the live API stores them (merchant 5644, 4 Nov 2026):
+* - A product's `images` is a list. **Reads return full URLs**
+*   (`http://static.merchantstack.com/images/merchant/<id>/product/<file>`);
+*   **writes take the uploader's file names** ({@link toStoredProductImages};
+*   `saveProduct` does this for you).
+* - The uploader takes one file per request. With a `prefix` (see
+*   `UploadPrefix`) it names the file `<prefix>_<hash>.<ext>`
+*   (`product_thumbnail_1bdd…41090b.png`); without one, `<hash>.<ext>`. So an
+*   image's role can be read back from its name ({@link productImageRole}).
+*/
+/**
+* The role in an image's file name or URL, from the uploader's `prefix`:
+* `"…/product_thumbnail_1bdd.png"` → `"product_thumbnail"`. `null` for a name
+* without one (images uploaded without a prefix, e.g. before prefixes existed).
+*/
+function productImageRole(value) {
+	const name = imageFileName(value);
+	if (!name) return null;
+	return UPLOAD_PREFIXES.find((prefix) => name.startsWith(`${prefix}_`)) ?? null;
+}
+/**
+* A product's `images` as the API takes them on a save: file names, not the
+* URLs a read returns. Non-strings, blanks and duplicates are dropped; the
+* order is kept.
+*/
+function toStoredProductImages(images) {
+	if (!Array.isArray(images)) return [];
+	const names = images.map(imageFileName).filter((name) => Boolean(name));
+	return Array.from(new Set(names));
+}
+
+//#endregion
+//#region src/core/entities.ts
+/**
+* Addressing per entity, following the Shopwave API reference
+* (https://developer.merchantstack.com/api-reference.html) and checked against
+* the live API where noted:
+* - category/product/store: GET filtered by `<x>Ids`, POST upsert, DELETE with `<x>Id` → 205.
+* - promotion: no DELETE; promotions are never deleted, only expired. Expiring
+*   reads the promotion and saves the whole record back with `endDate` = now (and
+*   `startDate` = now too if it hadn't started); the live API rejects a partial
+*   `{ id, endDate }` save with error 899. Dates are UTC `YYYY-MM-DD HH:mm:ss`.
+* - employee: POST updates `roleId`, `joinedDate`, `exitDate` (names can't be
+*   changed); no DELETE (live API: "Cannot DELETE /employee") → retired via `exitDate`.
+* - consumer: read-only (`GET` with `ids`, comma-separated); live POST → 404.
+*/
+const SHOPWAVE_ENTITIES = Object.freeze({
+	product: {
+		route: "products",
+		collection: "products",
+		upstream: "product",
+		idsHeader: "productIds",
+		idHeader: "productId",
+		writable: true,
+		deleteMode: "delete"
+	},
+	category: {
+		route: "categories",
+		collection: "categories",
+		upstream: "category",
+		idsHeader: "categoryIds",
+		idHeader: "categoryId",
+		writable: true,
+		deleteMode: "delete"
+	},
+	store: {
+		route: "stores",
+		collection: "stores",
+		upstream: "store",
+		idsHeader: "storeIds",
+		idHeader: "storeId",
+		writable: true,
+		deleteMode: "delete"
+	},
+	promotion: {
+		route: "promotions",
+		collection: "promotions",
+		upstream: "promotion",
+		idsHeader: "promotionIds",
+		idHeader: "promotionId",
+		writable: true,
+		deleteMode: "retire",
+		retireField: "endDate",
+		retireWithRecord: true,
+		retireStartField: "startDate"
+	},
+	employee: {
+		route: "employees",
+		collection: "employees",
+		upstream: "employee",
+		idsHeader: "employeeIds",
+		idHeader: "employeeId",
+		writable: true,
+		deleteMode: "retire",
+		retireField: "exitDate"
+	},
+	consumer: {
+		route: "consumer",
+		collection: "consumers",
+		upstream: "consumer",
+		idsHeader: "ids",
+		idHeader: "consumerId",
+		writable: false,
+		deleteMode: "none"
+	}
+});
+function definition(kind) {
+	const def = SHOPWAVE_ENTITIES[kind];
+	if (!def) throw new Error(`Unknown Shopwave entity "${kind}"`);
+	return def;
+}
+function assertId(kind, id) {
+	const s = id == null ? "" : String(id).trim();
+	if (!s) throw new Error(`${kind} id is missing`);
+	return encodeURIComponent(s);
+}
+/**
+* Creates or updates several entities of one kind in a single request and
+* returns them as saved (with their ids), in the order given.
+*
+* The request is `{ <collection>: { "0": item0, "1": item1, … } }`. Shopwave
+* answers 201 and echoes every entity under the ref it was sent with, so each
+* result is matched back by ref. Throws {@link ShopwaveApiError} when the
+* response carries `api.message.errors` or any ref is missing from it.
+*
+* The API's partial-success semantics for multi-entity saves haven't been
+* confirmed yet; single saves (`saveProduct` etc.) are the tested path.
+*/
+async function saveEntities(kind, items, options = {}) {
+	const def = definition(kind);
+	if (items.length === 0) return [];
+	const refs = items.map((_, i) => String(i));
+	const payload = { [def.collection]: Object.fromEntries(refs.map((ref, i) => [ref, items[i]])) };
+	const { status, body: raw } = await apiRequest(`/api/${def.route}`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(payload)
+	}, options);
+	const body = raw;
+	assertNoApiErrors(body, status);
+	const echoed = body?.[def.collection] ?? {};
+	return refs.map((ref, i) => {
+		const saved = echoed[ref];
+		if (!saved || saved.id == null) throw new ShopwaveApiError(status, `Shopwave API error (${status}): the saved ${kind} (ref "${ref}") was not returned`, { body });
+		return {
+			...items[i],
+			...saved,
+			id: Number(saved.id)
+		};
+	});
+}
+/** Creates (no `id`) or updates (with `id`) one entity and returns it with its id. */
+async function saveEntity(kind, item, options = {}) {
+	const [saved] = await saveEntities(kind, [item], options);
+	return saved;
+}
+/**
+* Deletes one entity (a soft delete: it stays readable with `deleted: true`).
+* Employees and promotions can't be deleted in Shopwave; for them the route
+* sets `exitDate` / `endDate` to now instead (see `SHOPWAVE_ENTITIES`), and a
+* promotion is saved back whole (see {@link deletePromotion}).
+*
+* Shopwave answers 205 with an empty body — also for ids that don't exist — so
+* a resolved promise means "the API accepted the request", not "a record was
+* deleted".
+*/
+async function deleteEntityById(kind, id, options = {}) {
+	await apiDelete(`/api/${definition(kind).route}/${assertId(kind, id)}`, options);
+}
+/** Reads one entity by id, or `null` when there's no such (non-deleted) record. */
+async function fetchEntityById(kind, id, params = {}, options = {}) {
+	const def = definition(kind);
+	const body = await apiGet(`/api/${def.route}/${assertId(kind, id)}`, { deleted: params.deleted ?? false }, options);
+	assertNoApiErrors(body, 200);
+	const map = body?.[def.collection] ?? {};
+	return map[String(id)] ?? Object.values(map).find((e) => String(e?.id) === String(id)) ?? null;
+}
+/**
+* Creates (no `id`) or updates (with `id`) a product.
+*
+* Shopwave instances (prices) can't be updated, only replaced. Build
+* `instances` with {@link toProductInstancesForSave} (passing the product as last
+* read) so an edited price is sent as a new instance. As a safeguard, a new
+* product (no `id`, e.g. a duplicate) never sends instance ids: an id copied from
+* another product would otherwise point the save at that product's instances.
+*
+* `images` is sent as file names ({@link toStoredProductImages}), so the URLs a
+* read returns can be passed straight back; leaving `images` out keeps them.
+*/
+const saveProduct = (product, options) => {
+	let toSave = (product.id == null || String(product.id).trim() === "") && product.instances != null ? {
+		...product,
+		instances: toProductInstancesForSave(product.instances)
+	} : product;
+	if (Array.isArray(toSave.images)) toSave = {
+		...toSave,
+		images: toStoredProductImages(toSave.images)
+	};
+	return saveEntity("product", toSave, options);
+};
+const deleteProduct = (id, options) => deleteEntityById("product", id, options);
+const fetchProduct = (id, params, options) => fetchEntityById("product", id, params, options);
+const saveCategory = (category, options) => saveEntity("category", category, options);
+const deleteCategory = (id, options) => deleteEntityById("category", id, options);
+const fetchCategory = (id, params, options) => fetchEntityById("category", id, params, options);
+const saveStore = (store, options) => saveEntity("store", store, options);
+const deleteStore = (id, options) => deleteEntityById("store", id, options);
+const fetchStore = (id, params, options) => fetchEntityById("store", id, params, options);
+const savePromotion = (promotion, options) => saveEntity("promotion", promotion, options);
+/**
+* Expires a promotion (Shopwave never deletes promotions). The route reads the
+* promotion and saves it back with `endDate` set to now; a promotion that hasn't
+* started yet gets `startDate` = `endDate` = now. Rejects if the promotion doesn't
+* exist or the save fails.
+*/
+const deletePromotion = (id, options) => deleteEntityById("promotion", id, options);
+const fetchPromotion = (id, params, options) => fetchEntityById("promotion", id, params, options);
+/**
+* Creates an employee, or updates one (with `id`). On update Shopwave only
+* applies `roleId`, `joinedDate` and `exitDate` (and store roles); names and
+* email can't be changed, and the echo only carries the updated fields — re-read
+* with `fetchEmployee` if you need the stored record.
+*/
+const saveEmployee = (employee, options) => saveEntity("employee", employee, options);
+/** Retires an employee: Shopwave has no employee DELETE, so this sets `exitDate` to now. */
+const deleteEmployee = (id, options) => deleteEntityById("employee", id, options);
+const fetchEmployee = (id, params, options) => fetchEntityById("employee", id, params, options);
+const fetchConsumer = (id, params, options) => fetchEntityById("consumer", id, params, options);
+
+//#endregion
+//#region src/core/basket.ts
+const DEFAULT_BASKET_FILTERS = {
+	search: "",
+	dateRange: {
+		start: null,
+		end: null
+	},
+	consumerId: null,
+	status: "all"
+};
+const DEFAULT_PAGINATION = {
+	page: 0,
+	pageSize: 25,
+	total: 0
+};
+/** Formats a date as `YYYY-MM-DD HH:mm:ss` for the report query. */
+function formatDateForQuery(date, isEndOfDay = false) {
+	return `${date.getFullYear()}-${String(date.getMonth() + 1).padStart(2, "0")}-${String(date.getDate()).padStart(2, "0")} ${isEndOfDay ? "23:59:59" : "00:00:00"}`;
+}
+/** Builds the `Basket` report query from a set of filters. */
+function buildBasketReportQuery(filters) {
+	const whereConditions = [];
+	const today = /* @__PURE__ */ new Date();
+	const startDate = filters.dateRange.start ?? today;
+	const endDate = filters.dateRange.end ?? today;
+	whereConditions.push(`Basket.completeDate > '${formatDateForQuery(startDate, false)}'`);
+	whereConditions.push(`Basket.completeDate < '${formatDateForQuery(endDate, true)}'`);
+	if (filters.consumerId) whereConditions.push(`Basket.consumerId = ${filters.consumerId}`);
+	if (filters.status !== "all") whereConditions.push(`Basket.status = '${filters.status}'`);
+	return { baskets: {
+		FROM: "Basket",
+		WHERE: whereConditions.length > 0 ? { AND: whereConditions } : void 0
+	} };
+}
+/** Flattens the raw report rows/keys into structured baskets. */
+function parseBasketReportData(reports) {
+	if (!reports?.baskets?.data || !reports?.baskets?.keys) return [];
+	const { keys, data } = reports.baskets;
+	const keyIndices = {};
+	keys.forEach((key, index) => {
+		keyIndices[key.name] = index;
+	});
+	const productKey = keys.find((k) => k.name === "Basket.Product");
+	const productSubKeys = {};
+	if (productKey?.item) productKey.item.forEach((subKey, index) => {
+		productSubKeys[subKey.name] = index;
+	});
+	return data.map((row) => {
+		const products = (row[keyIndices["Basket.Product"]] || []).map((productRow) => ({
+			productId: productRow[productSubKeys["Basket.Product.productId"]],
+			productName: `Product #${productRow[productSubKeys["Basket.Product.productId"]]}`,
+			quantity: productRow[productSubKeys["Basket.Product.quantity"]] || 1,
+			price: productRow[productSubKeys["Basket.Product.productPrice"]] || 0,
+			tax: productRow[productSubKeys["Basket.Product.productTaxPercentage"]] || 0
+		}));
+		const total = products.reduce((sum, p) => sum + p.price * p.quantity, 0);
+		const taxTotal = products.reduce((sum, p) => sum + p.price * p.quantity * p.tax, 0);
+		const completeDateTimestamp = row[keyIndices["Basket.completeDate"]];
+		const completeDate = completeDateTimestamp ? new Date(completeDateTimestamp).toISOString() : "";
+		return {
+			id: row[keyIndices["Basket.id"]],
+			name: row[keyIndices["Basket.name"]],
+			consumerId: row[keyIndices["Basket.consumerId"]],
+			products,
+			total,
+			taxTotal,
+			status: "completed",
+			completeDate
+		};
+	});
+}
+/** Unique non-null consumer ids referenced by a set of baskets. */
+function collectConsumerIds(baskets) {
+	if (!baskets.length) return null;
+	const ids = baskets.map((b) => b.consumerId).filter((id) => id != null);
+	return ids.length > 0 ? [...new Set(ids)] : null;
+}
+/** Unique product ids referenced by a set of baskets. */
+function collectProductIds(baskets) {
+	if (!baskets.length) return null;
+	const ids = /* @__PURE__ */ new Set();
+	baskets.forEach((basket) => {
+		basket.products.forEach((product) => {
+			if (product.productId) ids.add(product.productId);
+		});
+	});
+	return ids.size > 0 ? [...ids] : null;
+}
+/** Joins baskets with consumer + product lookups, applies search, sorts. */
+function combineBasketRows({ baskets, consumerMap, productMap, search }) {
+	if (!baskets.length) return [];
+	let combinedRows = baskets.map((basket) => {
+		const consumer = basket.consumerId ? consumerMap[basket.consumerId] : null;
+		const productsWithNames = basket.products.map((p) => {
+			const product = productMap[p.productId];
+			return {
+				...p,
+				productName: product?.name || `Product #${p.productId}`
+			};
+		});
+		return {
+			id: basket.id,
+			basketId: basket.id,
+			basketName: basket.name || `Basket #${basket.id}`,
+			consumerId: basket.consumerId,
+			consumerName: consumer ? `${consumer.firstName} ${consumer.lastName}` : "Unknown",
+			consumerEmail: consumer?.email || "-",
+			products: productsWithNames,
+			basketTotal: (basket.total || 0) / 100,
+			tax: basket.taxTotal || 0,
+			dateTime: basket.completeDate,
+			status: basket.status || "pending"
+		};
+	});
+	if (search) {
+		const searchLower = search.toLowerCase();
+		combinedRows = combinedRows.filter((row) => row.basketId.toString().includes(searchLower) || row.basketName.toLowerCase().includes(searchLower) || row.consumerName.toLowerCase().includes(searchLower) || row.consumerEmail.toLowerCase().includes(searchLower));
+	}
+	combinedRows.sort((a, b) => {
+		const dateA = new Date(a.dateTime).getTime();
+		return new Date(b.dateTime).getTime() - dateA;
+	});
+	return combinedRows;
+}
+/** Aggregate totals for a set of report rows. */
+function computeBasketSummary(rows) {
+	const uniqueConsumerIds = new Set(rows.map((row) => row.consumerId));
+	return {
+		totalBaskets: rows.length,
+		totalRevenue: rows.reduce((sum, row) => sum + row.basketTotal, 0),
+		totalTax: rows.reduce((sum, row) => sum + row.tax, 0),
+		uniqueConsumers: uniqueConsumerIds.size
+	};
+}
+/** Builds a consumer id → consumer lookup. */
+function buildConsumerMap(consumers) {
+	const map = {};
+	if (consumers) consumers.forEach((consumer) => {
+		map[consumer.id] = consumer;
+	});
+	return map;
+}
+
 //#endregion
 //#region src/core/merchant.ts
 const MERCHANT_PATH = `/api/${SHOPWAVE_RESOURCES.merchant.route}`;
@@ -1366,6 +1422,7 @@ exports.SHOPWAVE_RESOURCES = SHOPWAVE_RESOURCES;
 exports.SHOPWAVE_UPLOAD = SHOPWAVE_UPLOAD;
 exports.ShopwaveApiError = ShopwaveApiError;
 exports.UPLOAD_KINDS = UPLOAD_KINDS;
+exports.UPLOAD_PREFIXES = UPLOAD_PREFIXES;
 exports.apiDelete = apiDelete;
 exports.apiGet = apiGet;
 exports.apiRequest = apiRequest;
@@ -1417,6 +1474,7 @@ exports.getMerchantImageUrl = getMerchantImageUrl;
 exports.imageFileName = imageFileName;
 exports.isSameInstancePrice = isSameInstancePrice;
 exports.isUploadKind = isUploadKind;
+exports.isUploadPrefix = isUploadPrefix;
 exports.loginPath = loginPath;
 exports.logout = logout;
 exports.logoutPath = logoutPath;
@@ -1425,6 +1483,7 @@ exports.merchantLinksToForm = merchantLinksToForm;
 exports.normalizeMerchantLinks = normalizeMerchantLinks;
 exports.normalizeTagList = normalizeTagList;
 exports.parseBasketReportData = parseBasketReportData;
+exports.productImageRole = productImageRole;
 exports.readImageSize = readImageSize;
 exports.rolesById = rolesById;
 exports.saveCategory = saveCategory;
@@ -1439,6 +1498,7 @@ exports.submitEntity = submitEntity;
 exports.toProductInstancesForSave = toProductInstancesForSave;
 exports.toShopwaveApiError = toShopwaveApiError;
 exports.toStoredImageIds = toStoredImageIds;
+exports.toStoredProductImages = toStoredProductImages;
 exports.updateMerchant = updateMerchant;
 exports.uploadImage = uploadImage;
 exports.uploadMerchantImage = uploadMerchantImage;