threeu-sdk 0.1.0

package/dist/theme/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/theme/define.ts","../../src/theme/components.tsx"],"names":[],"mappings":";;;;;;;;;;AAkCO,SAAS,YAAY,OAAA,EAA2C;AACrE,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAE3C,EAAA,MAAM,WAAW,MAAqB;AACpC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,IAAU,EAAC;AACpC,IAAA,MAAM,YAAY,aAAA,EAAc;AAChC,IAAA,MAAM,MAAA,uBAAa,GAAA,EAAgC;AACnD,IAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,SAAA,EAAW,GAAG,QAAQ,CAAA,EAAG,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AACjE,IAAA,OAAO,kBAAA,CAAmB;AAAA,MACxB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,KAAA,EAAO,SAAA;AAAA,MACP,MAAA,EAAQ,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,QAAQ;AAAA,KACnC,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,UAAA,EAAY,QAAQ,UAAA,IAAc,QAAA;AAAA,IAClC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,OAAA,EAAS,CAAC,IAAA,KAAS,OAAA,CAAQ,MAAM,IAAI,CAAA;AAAA,IACrC,QAAA;AAAA,IACA,MAAA,EAAQ;AAAA,GACV;AACF;AAGO,IAAM,WAAA,GAAc;AClDpB,SAAS,MAAA,CAAO,IAAA,EAAc,QAAA,GAAW,SAAA,EAAmB;AACjE,EAAA,aAAA,CAAc,IAAA,EAAM,SAAS,QAAQ,CAAA;AACrC,EAAA,OAAO,YAAA,CAAqB,MAAM,QAAQ,CAAA;AAC5C;AAQO,SAAS,SAAS,KAAA,EAA2D;AAClF,EAAA,uBACE,GAAA,CAAC,SAAA,EAAA,EAAQ,mBAAA,EAAmB,KAAA,CAAM,MAAM,kBAAA,EAAiB,SAAA,EAAU,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,KAAA,EACzG,gBAAM,QAAA,EACT,CAAA;AAEJ;AAEO,SAAS,SAAS,KAAA,EAAoF;AAC3G,EAAA,MAAM,IAAA,GAAO,cAAsB,KAAA,CAAM,IAAA,EAAM,WAAW,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChF,EAAA,MAAM,GAAA,GAAM,MAAM,EAAA,IAAM,IAAA;AACxB,EAAA,uBACE,GAAA,CAAC,GAAA,EAAA,EAAI,mBAAA,EAAmB,KAAA,CAAM,IAAA,EAAM,kBAAA,EAAiB,SAAA,EAAU,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,OACrG,QAAA,EAAA,IAAA,EACH,CAAA;AAEJ;AAEO,SAAS,WAAW,KAAA,EAA2D;AACpF,EAAA,MAAM,IAAA,GAAO,cAAsB,KAAA,CAAM,IAAA,EAAM,aAAa,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAClF,EAAA,uBACE,GAAA,CAAC,GAAA,EAAA,EAAE,mBAAA,EAAmB,KAAA,CAAM,IAAA,EAAM,kBAAA,EAAiB,WAAA,EAAY,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,OACrG,QAAA,EAAA,IAAA,EACH,CAAA;AAEJ;AAEO,SAAS,MAAM,KAAA,EAA2D;AAC/E,EAAA,MAAM,IAAA,GAAO,cAAsB,KAAA,CAAM,IAAA,EAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAC7E,EAAA,uBACE,GAAA,CAAC,MAAA,EAAA,EAAK,mBAAA,EAAmB,KAAA,CAAM,IAAA,EAAM,kBAAA,EAAiB,MAAA,EAAO,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,OACnG,QAAA,EAAA,IAAA,EACH,CAAA;AAEJ;AAEO,SAAS,MAAM,KAAA,EAA2D;AAC/E,EAAA,MAAM,IAAA,GAAO,cAAsB,KAAA,CAAM,IAAA,EAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAC7E,EAAA,uBACE,GAAA,CAAC,MAAA,EAAA,EAAK,mBAAA,EAAmB,KAAA,CAAM,IAAA,EAAM,kBAAA,EAAiB,MAAA,EAAO,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,OACnG,QAAA,EAAA,IAAA,EACH,CAAA;AAEJ;AAEO,SAAS,OACd,KAAA,EACa;AACb,EAAA,MAAM,MAAM,aAAA,CAAsB,KAAA,CAAM,IAAA,EAAM,OAAA,EAAS,MAAM,GAAG,CAAA;AAChE,EAAA,uBACE,GAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,qBAAmB,KAAA,CAAM,IAAA;AAAA,MACzB,kBAAA,EAAiB,OAAA;AAAA,MACjB,GAAA;AAAA,MACA,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,OAAO,KAAA,CAAM;AAAA;AAAA,GACf;AAEJ;AAEO,SAAS,QACd,KAAA,EACa;AACb,EAAA,MAAM,KAAA,GAAQ,cAAsB,KAAA,CAAM,IAAA,EAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAC9E,EAAA,uBACE,GAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,qBAAmB,KAAA,CAAM,IAAA;AAAA,MACzB,kBAAA,EAAiB,MAAA;AAAA,MACjB,IAAA,EAAM,MAAM,IAAA,IAAQ,QAAA;AAAA,MACpB,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,OAAO,KAAA,CAAM,KAAA;AAAA,MAEZ,QAAA,EAAA;AAAA;AAAA,GACH;AAEJ;AAEO,SAAS,MAAM,KAAA,EAAyE;AAC7F,EAAA,MAAM,OAAO,aAAA,CAAsB,KAAA,CAAM,IAAA,EAAM,MAAA,EAAQ,MAAM,IAAI,CAAA;AACjE,EAAA,uBACE,GAAA,CAAC,GAAA,EAAA,EAAE,mBAAA,EAAmB,KAAA,CAAM,MAAM,kBAAA,EAAiB,MAAA,EAAO,IAAA,EAAY,SAAA,EAAW,MAAM,SAAA,EAAW,KAAA,EAAO,KAAA,CAAM,KAAA,EAC5G,gBAAM,QAAA,EACT,CAAA;AAEJ;AAIO,SAAS,aAAa,KAAA,EAA8D;AACzF,EAAA,MAAM,EAAE,SAAQ,GAAI,KAAA;AACpB,EAAA,uBACE,IAAA,CAAC,SAAI,qBAAA,EAAqB,MAAA,CAAO,QAAQ,EAAE,CAAA,EAAG,SAAA,EAAW,KAAA,CAAM,SAAA,EAC7D,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,SAAI,SAAA,EAAU,qBAAA,EAAuB,iBAAO,OAAA,CAAQ,IAAA,IAAQ,EAAE,CAAA,EAAE,CAAA;AAAA,oBACjE,GAAA,CAAC,SAAI,SAAA,EAAU,sBAAA,EAAwB,sBAAY,OAAA,CAAQ,KAAA,EAAO,OAAA,CAAQ,QAAQ,CAAA,EAAE;AAAA,GAAA,EACtF,CAAA;AAEJ;AAEO,SAAS,aAAa,KAAA,EAAmF;AAC9G,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,CAAA;AACjC,EAAA,uBACE,GAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,qBAAqB,CAAA,OAAA,EAAU,OAAO,CAAA,iBAAA,CAAA,EAAqB,GAAA,EAAK,MAAA,EAAO;AAAA,MAEhG,QAAA,EAAA,KAAA,CAAM,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,qBACnB,GAAA,CAAC,YAAA,EAAA,EAAgC,OAAA,EAAS,CAAA,EAAA,EAAvB,MAAA,CAAO,CAAA,CAAE,EAAE,CAAe,CAC9C;AAAA;AAAA,GACH;AAEJ;AAEO,SAAS,gBAAgB,KAAA,EAAuE;AACrG,EAAA,2BACG,KAAA,EAAA,EAAI,SAAA,EAAW,KAAA,CAAM,SAAA,EAAW,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,GAAA,EAAK,QAAO,EACpE,QAAA,EAAA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,qBACtB,GAAA,CAAC,KAAA,EAAA,EAAuB,wBAAA,EAAwB,OAAO,CAAA,CAAE,EAAE,CAAA,EACxD,QAAA,EAAA,MAAA,CAAO,EAAE,KAAA,IAAS,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,EAAE,CAAA,EAAA,EAD3B,MAAA,CAAO,EAAE,EAAE,CAErB,CACD,CAAA,EACH,CAAA;AAEJ;AAEO,SAAS,aAAa,KAAA,EAA4E;AACvG,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,IAAA,EAAM,KAAK,CAAA,GAAK,KAAA,CAAM,IAAA,EAAM,KAAA,GAAsB,EAAC;AACrF,EAAA,uBACE,GAAA,CAAC,SAAI,SAAA,EAAW,KAAA,CAAM,WAAW,0BAAA,EAAwB,IAAA,EACvD,+BAAC,KAAA,EAAA,EAAK,QAAA,EAAA;AAAA,IAAA,KAAA,CAAM,MAAA;AAAA,IAAO;AAAA,GAAA,EAAQ,CAAA,EAC7B,CAAA;AAEJ;AAEO,SAAS,cAAc,KAAA,EAId;AACd,EAAA,uBACE,GAAA;AAAA,IAAC,MAAA;AAAA,IAAA;AAAA,MACC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,2BAAA,EAAyB,IAAA;AAAA,MACzB,QAAA,EAAU,CAAC,CAAA,KAAM;AACf,QAAA,CAAA,CAAE,cAAA,EAAe;AACjB,QAAA,MAAM,IAAA,GAAO,OAAO,WAAA,CAAY,IAAI,SAAS,CAAA,CAAE,aAAa,CAAA,CAAE,OAAA,EAAS,CAAA;AACvE,QAAA,KAAA,CAAM,WAAW,IAAI,CAAA;AAAA,MACvB,CAAA;AAAA,MAEC,QAAA,EAAA,KAAA,CAAM;AAAA;AAAA,GACT;AAEJ;AAEA,SAAS,OAAO,QAAA,EAA6B;AAC3C,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,GAAW,QAAA,GAAW,EAAA;AACnD;AAEA,SAAS,WAAA,CAAY,OAAoC,QAAA,EAAsC;AAC7F,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,EAAA;AAChC,EAAA,MAAM,IAAI,OAAO,KAAA,KAAU,QAAA,GAAW,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AACtD,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,EAAG,OAAO,OAAO,KAAK,CAAA;AAC5C,EAAA,OAAO,CAAA,EAAG,EAAE,OAAA,CAAQ,CAAC,CAAC,CAAA,CAAA,EAAI,QAAA,IAAY,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK;AAClD","file":"index.js","sourcesContent":["/**\n * createTheme / defineTheme — register pages and produce a theme manifest.\n *\n * Editable fields are discovered at render time via the runtime registry, so\n * `manifest()` merges any explicitly declared fields with those collected from\n * the most recent render/extraction pass. A CLI build step can render each page\n * once and then call `manifest()` to capture the full field set.\n */\nimport type { ComponentType } from \"react\";\nimport { buildThemeManifest } from \"../manifests/build\";\nimport type { ThemeEditableField, ThemeManifest, ThemeVisibility } from \"../manifests/types\";\nimport { extractFields } from \"./runtime\";\n\nexport interface CreateThemeOptions {\n  name: string;\n  slug: string;\n  version?: string;\n  visibility?: ThemeVisibility;\n  pages: Record<string, ComponentType<Record<string, unknown>>>;\n  /** Explicitly declared editable fields (merged with render-extracted ones). */\n  fields?: ThemeEditableField[];\n}\n\nexport interface DefinedTheme {\n  readonly name: string;\n  readonly slug: string;\n  readonly visibility: ThemeVisibility;\n  readonly pages: Record<string, ComponentType<Record<string, unknown>>>;\n  getPage(name: string): ComponentType<Record<string, unknown>> | undefined;\n  /** Build the theme manifest, merging declared + render-extracted fields. */\n  manifest(): ThemeManifest;\n  toJSON(): ThemeManifest;\n}\n\nexport function createTheme(options: CreateThemeOptions): DefinedTheme {\n  const pageNames = Object.keys(options.pages);\n\n  const manifest = (): ThemeManifest => {\n    const declared = options.fields ?? [];\n    const extracted = extractFields();\n    const byName = new Map<string, ThemeEditableField>();\n    for (const f of [...extracted, ...declared]) byName.set(f.name, f);\n    return buildThemeManifest({\n      name: options.name,\n      slug: options.slug,\n      version: options.version,\n      visibility: options.visibility,\n      pages: pageNames,\n      fields: Array.from(byName.values()),\n    });\n  };\n\n  return {\n    name: options.name,\n    slug: options.slug,\n    visibility: options.visibility ?? \"public\",\n    pages: options.pages,\n    getPage: (name) => options.pages[name],\n    manifest,\n    toJSON: manifest,\n  };\n}\n\n/** Alias — some authors prefer `defineTheme`. */\nexport const defineTheme = createTheme;\n","/**\n * Type-safe, customizable theme components. Each `T*` component registers the\n * editable field it exposes (so the theme editor / build step can enumerate\n * them) and resolves its current value from the active customization.\n *\n * Editable elements carry a `data-threeu-field` attribute the in-app editor uses\n * to target them.\n */\nimport type { CSSProperties, ReactNode } from \"react\";\nimport { useThemeField } from \"./context\";\nimport { registerField, resolveValue } from \"./runtime\";\nimport type { Collection, Product } from \"../resources/types\";\n\n/** Resolve (and register) a color field. Usable inline: `TColor(\"hero.bg\", \"#000\")`. */\nexport function TColor(name: string, fallback = \"#000000\"): string {\n  registerField(name, \"color\", fallback);\n  return resolveValue<string>(name, fallback);\n}\n\ninterface FieldProps {\n  name: string;\n  className?: string;\n  style?: CSSProperties;\n}\n\nexport function TSection(props: FieldProps & { children?: ReactNode }): JSX.Element {\n  return (\n    <section data-threeu-field={props.name} data-threeu-kind=\"section\" className={props.className} style={props.style}>\n      {props.children}\n    </section>\n  );\n}\n\nexport function THeading(props: FieldProps & { children?: ReactNode; as?: \"h1\" | \"h2\" | \"h3\" }): JSX.Element {\n  const text = useThemeField<string>(props.name, \"heading\", asText(props.children));\n  const Tag = props.as ?? \"h1\";\n  return (\n    <Tag data-threeu-field={props.name} data-threeu-kind=\"heading\" className={props.className} style={props.style}>\n      {text}\n    </Tag>\n  );\n}\n\nexport function TParagraph(props: FieldProps & { children?: ReactNode }): JSX.Element {\n  const text = useThemeField<string>(props.name, \"paragraph\", asText(props.children));\n  return (\n    <p data-threeu-field={props.name} data-threeu-kind=\"paragraph\" className={props.className} style={props.style}>\n      {text}\n    </p>\n  );\n}\n\nexport function TText(props: FieldProps & { children?: ReactNode }): JSX.Element {\n  const text = useThemeField<string>(props.name, \"text\", asText(props.children));\n  return (\n    <span data-threeu-field={props.name} data-threeu-kind=\"text\" className={props.className} style={props.style}>\n      {text}\n    </span>\n  );\n}\n\nexport function TSpan(props: FieldProps & { children?: ReactNode }): JSX.Element {\n  const text = useThemeField<string>(props.name, \"span\", asText(props.children));\n  return (\n    <span data-threeu-field={props.name} data-threeu-kind=\"span\" className={props.className} style={props.style}>\n      {text}\n    </span>\n  );\n}\n\nexport function TImage(\n  props: FieldProps & { src: string; alt: string; width?: number | string; height?: number | string },\n): JSX.Element {\n  const src = useThemeField<string>(props.name, \"image\", props.src);\n  return (\n    <img\n      data-threeu-field={props.name}\n      data-threeu-kind=\"image\"\n      src={src}\n      alt={props.alt}\n      width={props.width}\n      height={props.height}\n      className={props.className}\n      style={props.style}\n    />\n  );\n}\n\nexport function TButton(\n  props: FieldProps & { children?: ReactNode; onClick?: () => void; type?: \"button\" | \"submit\" },\n): JSX.Element {\n  const label = useThemeField<string>(props.name, \"text\", asText(props.children));\n  return (\n    <button\n      data-threeu-field={props.name}\n      data-threeu-kind=\"text\"\n      type={props.type ?? \"button\"}\n      onClick={props.onClick}\n      className={props.className}\n      style={props.style}\n    >\n      {label}\n    </button>\n  );\n}\n\nexport function TLink(props: FieldProps & { href: string; children?: ReactNode }): JSX.Element {\n  const href = useThemeField<string>(props.name, \"link\", props.href);\n  return (\n    <a data-threeu-field={props.name} data-threeu-kind=\"link\" href={href} className={props.className} style={props.style}>\n      {props.children}\n    </a>\n  );\n}\n\n// --- Data display components (not editable; render brand data) --------------\n\nexport function TProductCard(props: { product: Product; className?: string }): JSX.Element {\n  const { product } = props;\n  return (\n    <div data-threeu-product={String(product.id)} className={props.className}>\n      <div className=\"threeu-product-name\">{String(product.name ?? \"\")}</div>\n      <div className=\"threeu-product-price\">{formatPrice(product.price, product.currency)}</div>\n    </div>\n  );\n}\n\nexport function TProductGrid(props: { products: Product[]; columns?: number; className?: string }): JSX.Element {\n  const columns = props.columns ?? 3;\n  return (\n    <div\n      className={props.className}\n      style={{ display: \"grid\", gridTemplateColumns: `repeat(${columns}, minmax(0, 1fr))`, gap: \"1rem\" }}\n    >\n      {props.products.map((p) => (\n        <TProductCard key={String(p.id)} product={p} />\n      ))}\n    </div>\n  );\n}\n\nexport function TCollectionGrid(props: { collections: Collection[]; className?: string }): JSX.Element {\n  return (\n    <div className={props.className} style={{ display: \"grid\", gap: \"1rem\" }}>\n      {props.collections.map((c) => (\n        <div key={String(c.id)} data-threeu-collection={String(c.id)}>\n          {String(c.title ?? c.handle ?? c.id)}\n        </div>\n      ))}\n    </div>\n  );\n}\n\nexport function TCartSummary(props: { cart?: Record<string, unknown>; className?: string }): JSX.Element {\n  const items = Array.isArray(props.cart?.items) ? (props.cart?.items as unknown[]) : [];\n  return (\n    <div className={props.className} data-threeu-cart-summary>\n      <div>{items.length} item(s)</div>\n    </div>\n  );\n}\n\nexport function TCheckoutForm(props: {\n  onSubmit?: (data: Record<string, FormDataEntryValue>) => void;\n  className?: string;\n  children?: ReactNode;\n}): JSX.Element {\n  return (\n    <form\n      className={props.className}\n      data-threeu-checkout-form\n      onSubmit={(e) => {\n        e.preventDefault();\n        const data = Object.fromEntries(new FormData(e.currentTarget).entries());\n        props.onSubmit?.(data);\n      }}\n    >\n      {props.children}\n    </form>\n  );\n}\n\nfunction asText(children: ReactNode): string {\n  return typeof children === \"string\" ? children : \"\";\n}\n\nfunction formatPrice(price: number | string | undefined, currency: string | undefined): string {\n  if (price === undefined) return \"\";\n  const n = typeof price === \"string\" ? Number(price) : price;\n  if (!Number.isFinite(n)) return String(price);\n  return `${n.toFixed(2)} ${currency ?? \"\"}`.trim();\n}\n"]}

package/dist/threeu-BesFjXdw.d.ts

@@ -0,0 +1,143 @@
+import { d as Product, e as ProductInput, O as Order, I as Id, a as Customer, b as InventoryItem, C as Collection, D as Discount, P as Payment, S as ShippingRate, c as Location, T as ThreeuHttpClient, j as TokenType, i as ThreeuClientOptions } from './types-DfyYnoLn.js';
+import { h as CrudResource, R as ResourceContext, g as PosNamespace } from './session-BFDRm-KJ.js';
+
+/**
+ * Concrete brand resources. Each adds domain actions on top of `CrudResource`.
+ * Resource path constants live here so backend route changes are a one-line edit.
+ */
+
+declare class ProductsResource extends CrudResource<Product, ProductInput> {
+    constructor(ctx: ResourceContext);
+}
+declare class OrdersResource extends CrudResource<Order> {
+    constructor(ctx: ResourceContext);
+    fulfill(id: Id, body?: Record<string, unknown>): Promise<Order>;
+    cancel(id: Id, body?: Record<string, unknown>): Promise<Order>;
+}
+declare class CustomersResource extends CrudResource<Customer> {
+    constructor(ctx: ResourceContext);
+}
+declare class CollectionsResource extends CrudResource<Collection> {
+    constructor(ctx: ResourceContext);
+}
+declare class DiscountsResource extends CrudResource<Discount> {
+    constructor(ctx: ResourceContext);
+}
+declare class LocationsResource extends CrudResource<Location> {
+    constructor(ctx: ResourceContext);
+}
+declare class InventoryResource extends CrudResource<InventoryItem> {
+    constructor(ctx: ResourceContext);
+    adjust(body: {
+        product_id: Id;
+        location_id?: Id;
+        delta: number;
+        reason?: string;
+    }): Promise<InventoryItem>;
+    transfer(body: {
+        product_id: Id;
+        from_location_id: Id;
+        to_location_id: Id;
+        quantity: number;
+    }): Promise<InventoryItem>;
+}
+declare class PaymentsResource extends CrudResource<Payment> {
+    constructor(ctx: ResourceContext);
+    refund(id: Id, body?: {
+        amount?: number;
+        reason?: string;
+    }): Promise<Payment>;
+}
+declare class ShippingResource {
+    private readonly ctx;
+    constructor(ctx: ResourceContext);
+    private opts;
+    rates(body: {
+        destination: string;
+        items: unknown[];
+    }): Promise<ShippingRate[]>;
+    createShipment(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    trackShipment(trackingNumber: string): Promise<Record<string, unknown>>;
+}
+declare class AnalyticsResource {
+    private readonly ctx;
+    constructor(ctx: ResourceContext);
+    private opts;
+    summary(params?: {
+        from?: string;
+        to?: string;
+    }): Promise<Record<string, unknown>>;
+    sales(params?: {
+        from?: string;
+        to?: string;
+        interval?: string;
+    }): Promise<Record<string, unknown>>;
+    products(params?: {
+        from?: string;
+        to?: string;
+        limit?: number;
+    }): Promise<Record<string, unknown>>;
+}
+declare class CampaignsResource extends CrudResource {
+    constructor(ctx: ResourceContext);
+}
+declare class MarketingResource {
+    readonly campaigns: CampaignsResource;
+    constructor(ctx: ResourceContext);
+}
+declare class ThemeResource {
+    private readonly ctx;
+    constructor(ctx: ResourceContext);
+    private opts;
+    get(): Promise<Record<string, unknown>>;
+    update(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+}
+
+/**
+ * Scoped brand object returned by `client.brand(slug)`. Every resource call is
+ * automatically scoped to this brand via the `platform-id` header. This is the
+ * SDK object the brief's core DX revolves around (`brand.products.create(...)`).
+ */
+
+declare class BrandClient {
+    readonly id: Id;
+    readonly products: ProductsResource;
+    readonly orders: OrdersResource;
+    readonly customers: CustomersResource;
+    readonly inventory: InventoryResource;
+    readonly collections: CollectionsResource;
+    readonly discounts: DiscountsResource;
+    readonly payments: PaymentsResource;
+    readonly shipping: ShippingResource;
+    readonly locations: LocationsResource;
+    readonly analytics: AnalyticsResource;
+    readonly marketing: MarketingResource;
+    readonly theme: ThemeResource;
+    readonly pos: PosNamespace;
+    constructor(http: ThreeuHttpClient, brand: Id);
+}
+
+/**
+ * `Threeu` — the high-level entry client. Constructed with a secret key, it
+ * yields brand-scoped objects:
+ *
+ *   const threeu = new Threeu(process.env.THREEU_SECRET_KEY!);
+ *   const brand = await threeu.brand("my-store");
+ *   await brand.products.create({ name: "Black Abaya", price: 350, currency: "QAR" });
+ */
+
+type ThreeuOptions = Omit<ThreeuClientOptions, "token" | "tokenType">;
+declare class Threeu {
+    readonly http: ThreeuHttpClient;
+    protected readonly tokenType: TokenType;
+    constructor(token: string, options?: ThreeuOptions, tokenType?: TokenType);
+    /**
+     * Return a brand-scoped client. Synchronous, but returns a value safe to
+     * `await` so both `threeu.brand(x)` and `await threeu.brand(x)` work.
+     */
+    brand(brand: Id): BrandClient;
+    /** Flush telemetry and release timers. */
+    close(): Promise<void>;
+}
+
+export { BrandClient as B, Threeu as T, type ThreeuOptions as a };

package/dist/types-BoGD3IXz.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Manifest type system.
+ *
+ * Two layers:
+ *  - *Definition* types are what developers author (camelCase, ergonomic).
+ *  - *Manifest* types are the normalized JSON contract the backend stores in
+ *    `plugins.manifest` (snake_case — see docs/ARCHITECTURE_MAP.md §1/§4).
+ *
+ * `definePlugin` / `defineApp` / `defineTheme` validate a Definition and emit a
+ * Manifest. `provider_class` is INTERNAL to ThreeU and is never set by a
+ * community developer — they declare `provider.type` and the backend maps it.
+ */
+type PluginCategory = "payment" | "shipping" | "sales_channel" | "marketing" | "analytics" | "accounting" | "inventory" | "customer_service" | "ai" | "custom";
+type SurfaceType = "plugin" | "page";
+type TriggerMode = "manual" | "automatic";
+type Ownership = "official" | "community" | "custom";
+type ProviderType = "remote_http" | "native" | "iframe_app" | "theme_extension" | "webhook_only" | "manual_gateway";
+type Permission = string;
+type HttpVerb = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+type ConfigFieldType = "text" | "secret" | "number" | "boolean" | "select" | "url" | "email";
+interface ConfigFieldDefinition {
+    type: ConfigFieldType;
+    label: string;
+    required?: boolean;
+    default?: unknown;
+    options?: string[];
+    placeholder?: string;
+    help?: string;
+}
+type ConfigSchema = Record<string, ConfigFieldDefinition>;
+interface ActionDefinition {
+    method: HttpVerb;
+    path: string;
+    timeoutMs?: number;
+}
+interface WebhookDefinition {
+    events: string[];
+}
+interface RemoteHttpProviderDefinition {
+    type: "remote_http";
+    baseUrl: string;
+    healthPath?: string;
+    actions?: Record<string, ActionDefinition>;
+    webhooks?: WebhookDefinition;
+}
+interface SimpleProviderDefinition {
+    type: Exclude<ProviderType, "remote_http">;
+    baseUrl?: string;
+    healthPath?: string;
+}
+type ProviderDefinition = RemoteHttpProviderDefinition | SimpleProviderDefinition;
+interface PluginDefinition {
+    name: string;
+    slug: string;
+    version?: string;
+    type?: "plugin";
+    category: PluginCategory;
+    surfaceType?: SurfaceType;
+    triggerMode?: TriggerMode;
+    ownership?: Ownership;
+    description?: string;
+    permissions?: Permission[];
+    settings?: ConfigSchema;
+    provider: ProviderDefinition;
+    subscribedActions?: string[];
+    adminBlocks?: Record<string, AdminBlock>;
+}
+interface AdminBlock {
+    component: string;
+    title?: string;
+}
+interface ExtensionPoint {
+    id: string;
+    surface: string;
+    component: string;
+}
+interface AppDefinition {
+    name: string;
+    slug: string;
+    version?: string;
+    surface: "admin" | "pos";
+    category?: PluginCategory;
+    permissions?: Permission[];
+    settings?: ConfigSchema;
+    blocks?: Record<string, AdminBlock>;
+    extensionPoints?: ExtensionPoint[];
+    provider?: ProviderDefinition;
+}
+type ThemeVisibility = "public" | "exclusive";
+interface ThemeEditableField {
+    name: string;
+    kind: "text" | "image" | "color" | "section" | "link" | "heading" | "paragraph" | "span";
+    default?: unknown;
+    label?: string;
+}
+interface ThemeDefinition {
+    name: string;
+    slug: string;
+    version?: string;
+    visibility?: ThemeVisibility;
+    pages: string[];
+    fields?: ThemeEditableField[];
+}
+interface ActionManifest {
+    method: HttpVerb;
+    path: string;
+    timeout_ms?: number;
+}
+interface ProviderAuthManifest {
+    type: "hmac_sha256";
+    signature_header: string;
+    timestamp_header: string;
+}
+interface ProviderManifest {
+    type: ProviderType;
+    base_url?: string;
+    health_path?: string;
+    auth?: ProviderAuthManifest;
+    actions?: Record<string, ActionManifest>;
+    webhooks?: {
+        inbound_url_mode: "threeu_generated";
+        signature_header: string;
+        brand_header: string;
+        events?: string[];
+    };
+}
+interface PluginManifest {
+    type: "plugin";
+    runtime: ProviderType;
+    name: string;
+    slug: string;
+    version: string;
+    category: PluginCategory;
+    surface_type: SurfaceType;
+    trigger_mode: TriggerMode;
+    ownership: Ownership;
+    description?: string;
+    permissions: Permission[];
+    config_schema?: ConfigSchema;
+    subscribed_actions?: string[];
+    provider: ProviderManifest;
+    admin_blocks?: Record<string, AdminBlock>;
+}
+interface ThemeManifest {
+    type: "theme";
+    name: string;
+    slug: string;
+    version: string;
+    visibility: ThemeVisibility;
+    pages: string[];
+    editable_fields: ThemeEditableField[];
+}
+interface AdminAppManifest {
+    type: "admin_app";
+    name: string;
+    slug: string;
+    version: string;
+    permissions: Permission[];
+    config_schema?: ConfigSchema;
+    blocks?: Record<string, AdminBlock>;
+    extension_points?: ExtensionPoint[];
+    provider?: ProviderManifest;
+}
+interface POSAppManifest extends Omit<AdminAppManifest, "type"> {
+    type: "pos_app";
+}
+type RemoteHttpProviderManifest = ProviderManifest & {
+    type: "remote_http";
+};
+type PluginActionManifest = ActionManifest;
+type PluginWebhookManifest = NonNullable<ProviderManifest["webhooks"]>;
+
+export type { AppDefinition as A, ConfigFieldDefinition as C, ExtensionPoint as E, HttpVerb as H, Ownership as O, PluginManifest as P, RemoteHttpProviderDefinition as R, SimpleProviderDefinition as S, ThemeDefinition as T, WebhookDefinition as W, AdminAppManifest as a, POSAppManifest as b, PluginDefinition as c, ThemeManifest as d, ActionDefinition as e, ActionManifest as f, AdminBlock as g, ConfigFieldType as h, ConfigSchema as i, Permission as j, PluginActionManifest as k, PluginCategory as l, PluginWebhookManifest as m, ProviderAuthManifest as n, ProviderDefinition as o, ProviderManifest as p, ProviderType as q, RemoteHttpProviderManifest as r, SurfaceType as s, TriggerMode as t, ThemeVisibility as u, ThemeEditableField as v };

package/dist/types-DfyYnoLn.d.ts

@@ -0,0 +1,248 @@
+/**
+ * Pagination normalization. The backend wraps a Laravel paginator inside the
+ * `data` field: `{ success, data: { data:[...], current_page, per_page, total,
+ * last_page } }`; some endpoints return a flat array in `data`
+ * (docs/ARCHITECTURE_MAP.md §11). Both shapes normalize to a `Page<T>`.
+ */
+interface PageMeta {
+    page: number;
+    perPage: number;
+    total: number;
+    lastPage: number;
+    hasMore: boolean;
+}
+declare class Page<T> {
+    readonly items: T[];
+    readonly meta: PageMeta;
+    constructor(items: T[], meta: PageMeta);
+    get length(): number;
+    [Symbol.iterator](): Iterator<T>;
+}
+/**
+ * Normalize a parsed response body into a `Page<T>`. Accepts the ThreeU
+ * `{ success, data }` envelope where `data` is either a paginator or a flat array.
+ */
+declare function normalizePage<T>(body: unknown): Page<T>;
+/**
+ * Async generator that walks every page by incrementing `page` until the last
+ * page is reached. `fetchPage` receives the 1-based page number.
+ */
+declare function iteratePages<T>(fetchPage: (page: number) => Promise<Page<T>>): AsyncGenerator<T, void, void>;
+
+/**
+ * Runtime detection + capability probes.
+ *
+ * The SDK behaves differently per runtime: it refuses to attach secret/admin
+ * tokens in a browser, picks Web Crypto vs node:crypto for webhook signing, and
+ * tags telemetry with the runtime name.
+ */
+type ThreeuRuntime = "browser" | "node" | "edge" | "unknown";
+declare function detectRuntime(): ThreeuRuntime;
+/** True in environments where exposing a secret token is a security risk. */
+declare function isBrowserLike(runtime?: ThreeuRuntime): boolean;
+/** True when running in development (used to gate dev-only safety warnings). */
+declare function isDevelopment(): boolean;
+
+/**
+ * Token classes the SDK understands. Each maps to a backend auth context and a
+ * set of safety rules (e.g. `secret_admin` must never run in a browser).
+ * See docs/ARCHITECTURE_MAP.md §9.
+ */
+type TokenType = "secret_admin" | "public_storefront" | "plugin_installation" | "pos" | "theme_dev" | "developer";
+/** Token types that grant privileged/secret access and must stay server-side. */
+declare const SECRET_TOKEN_TYPES: ReadonlySet<TokenType>;
+interface ThreeuAppInfo {
+    name?: string;
+    version?: string;
+}
+interface ThreeuTelemetryOptions {
+    enabled?: boolean;
+    endpoint?: string;
+    sampleRate?: number;
+    flushIntervalMs?: number;
+    maxBatchSize?: number;
+}
+/** Options shared by every client (core, admin, pos, storefront, developer). */
+interface ThreeuClientOptions {
+    baseUrl?: string;
+    token?: string;
+    tokenType?: TokenType;
+    /** Brand/tenant id sent as the `platform-id` header (and `X-Brand-ID` alias). */
+    brand?: string | number;
+    timeoutMs?: number;
+    retries?: number;
+    /** Custom fetch (e.g. undici, node-fetch, a mock). Defaults to global fetch. */
+    fetch?: typeof fetch;
+    logger?: ThreeuLogger;
+    telemetry?: ThreeuTelemetryOptions;
+    app?: ThreeuAppInfo;
+    /** Extra headers merged into every request (never overrides auth/brand). */
+    defaultHeaders?: Record<string, string>;
+    /** Opt out of the dev-only unsafe-usage warnings. */
+    suppressWarnings?: boolean;
+}
+/** Per-request overrides. */
+interface RequestOptions {
+    query?: Record<string, unknown> | undefined;
+    body?: unknown;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+    retries?: number;
+    signal?: AbortSignal;
+    /** Idempotency key for safe retries of mutating requests. */
+    idempotencyKey?: string;
+    /** Mark the request idempotent so the client may auto-retry it. */
+    idempotent?: boolean;
+    /** Override the brand for this single request. */
+    brand?: string | number;
+    /** Raw multipart form data (skips JSON serialization). */
+    form?: FormData;
+}
+type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+/** A structured, safe-to-log SDK event. Never contains tokens/PII/raw bodies. */
+interface ThreeuLogEvent {
+    type: ThreeuEventType;
+    requestId?: string;
+    method?: HttpMethod;
+    /** Path template with ids elided, e.g. `/plugins/:id/webhook`. */
+    pathTemplate?: string;
+    resource?: string;
+    action?: string;
+    statusCode?: number;
+    durationMs?: number;
+    retryCount?: number;
+    runtime?: ThreeuRuntime;
+    sdkVersion?: string;
+    appName?: string;
+    developerId?: string | number;
+    pluginId?: string | number;
+    brandId?: string | number;
+    errorCode?: string;
+    errorType?: string;
+    message?: string;
+}
+type ThreeuEventType = "request:start" | "request:success" | "request:error" | "request:retry" | "request:timeout" | "request:rate_limited" | "request:permission_denied" | "request:validation_failed";
+interface ThreeuLogger {
+    debug?(event: ThreeuLogEvent): void;
+    info?(event: ThreeuLogEvent): void;
+    warn?(event: ThreeuLogEvent): void;
+    error?(event: ThreeuLogEvent): void;
+}
+
+/**
+ * Central fetch-based transport shared by every client. Owns timeouts, safe
+ * retries with backoff, idempotency keys, request-id propagation, query/JSON/
+ * multipart serialization, error normalization, and logger/telemetry emission.
+ */
+declare class ThreeuHttpClient {
+    readonly baseUrl: string;
+    private readonly token?;
+    private readonly tokenType?;
+    private readonly brand?;
+    private readonly timeoutMs;
+    private readonly retries;
+    private readonly fetchImpl;
+    private readonly logger?;
+    private readonly telemetry;
+    private readonly defaultHeaders;
+    private readonly appName?;
+    private readonly runtime;
+    constructor(options?: ThreeuClientOptions);
+    get(path: string, options?: RequestOptions): Promise<unknown>;
+    post(path: string, options?: RequestOptions): Promise<unknown>;
+    put(path: string, options?: RequestOptions): Promise<unknown>;
+    patch(path: string, options?: RequestOptions): Promise<unknown>;
+    delete(path: string, options?: RequestOptions): Promise<unknown>;
+    /** Fetch a single page and normalize it into a `Page<T>`. */
+    list<T>(path: string, options?: RequestOptions): Promise<Page<T>>;
+    /** Async-iterate every item across all pages. */
+    iterate<T>(path: string, options?: RequestOptions): AsyncGenerator<T, void, void>;
+    /** Flush and stop telemetry; call on shutdown. */
+    close(): Promise<void>;
+    request(method: HttpMethod, path: string, options?: RequestOptions): Promise<unknown>;
+    private send;
+    private buildHeaders;
+    private buildUrl;
+    private normalizeThrown;
+    private emit;
+    private emitError;
+}
+
+/**
+ * Domain types. Deliberately permissive — the backend has no single typed
+ * contract and serializes decimals as strings (docs/ARCHITECTURE_MAP.md §14), so
+ * these model the common shape and allow extra fields via index signatures.
+ */
+type Id = string | number;
+interface BaseRecord {
+    id: Id;
+    [key: string]: unknown;
+}
+interface Money {
+    amount: number;
+    currency: string;
+}
+interface Product extends BaseRecord {
+    name?: string;
+    price?: number | string;
+    currency?: string;
+    stock?: number;
+    status?: string;
+}
+interface ProductInput {
+    name: string;
+    price: number;
+    currency?: string;
+    stock?: number;
+    description?: string;
+    [key: string]: unknown;
+}
+interface Order extends BaseRecord {
+    status?: string;
+    total?: number | string;
+    currency?: string;
+    customer_id?: Id;
+}
+interface Customer extends BaseRecord {
+    name?: string;
+    email?: string;
+    phone?: string;
+}
+interface Collection extends BaseRecord {
+    title?: string;
+    handle?: string;
+}
+interface Discount extends BaseRecord {
+    code?: string;
+    type?: "percentage" | "fixed";
+    value?: number;
+}
+interface InventoryItem extends BaseRecord {
+    product_id?: Id;
+    location_id?: Id;
+    quantity?: number;
+}
+interface Location extends BaseRecord {
+    name?: string;
+    address?: string;
+}
+interface Payment extends BaseRecord {
+    status?: string;
+    amount?: number | string;
+    currency?: string;
+}
+interface ShippingRate {
+    service: string;
+    price: number;
+    currency: string;
+    estimatedDays?: number;
+}
+interface ListParams {
+    page?: number;
+    per_page?: number;
+    search?: string;
+    status?: string;
+    [key: string]: unknown;
+}
+
+export { type BaseRecord as B, type Collection as C, type Discount as D, type HttpMethod as H, type Id as I, type ListParams as L, type Money as M, type Order as O, type Payment as P, type RequestOptions as R, type ShippingRate as S, ThreeuHttpClient as T, type Customer as a, type InventoryItem as b, type Location as c, type Product as d, type ProductInput as e, Page as f, type ThreeuLogger as g, type ThreeuTelemetryOptions as h, type ThreeuClientOptions as i, type TokenType as j, type ThreeuLogEvent as k, type PageMeta as l, SECRET_TOKEN_TYPES as m, type ThreeuAppInfo as n, type ThreeuEventType as o, type ThreeuRuntime as p, detectRuntime as q, isBrowserLike as r, isDevelopment as s, iteratePages as t, normalizePage as u };

package/dist/webhooks/index.d.ts

@@ -0,0 +1,36 @@
+/** Constant-time string comparison to avoid timing leaks. */
+declare function timingSafeEqual(a: string, b: string): boolean;
+interface SignWebhookParams {
+    secret: string;
+    rawBody: string;
+    /** Unix seconds. Defaults to now. */
+    timestamp?: number;
+}
+interface SignedWebhook {
+    signature: string;
+    timestamp: number;
+}
+/** Sign a raw body with the target scheme. Returns the `sha256=` header value. */
+declare function signWebhookPayload(params: SignWebhookParams): Promise<SignedWebhook>;
+interface VerifyWebhookParams {
+    secret: string;
+    rawBody: string;
+    timestamp: number | string;
+    signature: string;
+    /** Reject timestamps older/newer than this many seconds. Default 300. */
+    toleranceSeconds?: number;
+    /** Override "now" (unix seconds) — useful in tests. */
+    now?: number;
+}
+/** Verify a raw-body signature with replay-window enforcement. Boolean result. */
+declare function verifyWebhookSignature(params: VerifyWebhookParams): Promise<boolean>;
+/** Like `verifyWebhookSignature` but throws `ThreeuWebhookSignatureError` on failure. */
+declare function assertWebhookSignature(params: VerifyWebhookParams): Promise<void>;
+/** Extract the hex digest from a `sha256=<hex>` header (or pass-through bare hex). */
+declare function parseWebhookSignatureHeader(header: string): string;
+/** Sign the legacy way: HMAC over the JSON-encoded payload, no timestamp. */
+declare function signLegacyWebhook(secret: string, payload: unknown): Promise<string>;
+/** Verify a legacy signature (no timestamp / replay window). */
+declare function verifyLegacyWebhook(secret: string, payload: unknown, signature: string): Promise<boolean>;
+
+export { type SignWebhookParams, type SignedWebhook, type VerifyWebhookParams, assertWebhookSignature, parseWebhookSignatureHeader, signLegacyWebhook, signWebhookPayload, timingSafeEqual, verifyLegacyWebhook, verifyWebhookSignature };

package/dist/webhooks/index.js

@@ -0,0 +1,4 @@
+export { assertWebhookSignature, parseWebhookSignatureHeader, signLegacyWebhook, signWebhookPayload, timingSafeEqual, verifyLegacyWebhook, verifyWebhookSignature } from '../chunk-ZWLFJIAM.js';
+import '../chunk-LFF5LPWT.js';
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}