3y3anaa SDKs

3y3anaa exposes its App Reviews platform through one published package:

`@duabalabs/reviews-sdk`

A framework-agnostic, server-side client for the centralized 3y3anaa reviews platform — the shared review/rating store every Duaba app plugs into.

Framework-agnostic — no React/Next coupling; works in any Node server, edge runtime, or browser (with care).
Server-side — authenticates with one secret per-app key, sent as Authorization: Bearer <key>; call it from your server, never a browser bundle.
Fetch-based — a thin wrapper over POST https://api.3y3anaa.com/v1/reviews/<fn>; supply your own fetch for old Node.
Dual format — ships ESM + CJS with .d.ts types (built with tsup).

Install, createReviewsClient config, every method, types, errors, and the Sellub worked example.

reviews-sdk reference

Install


npm i @duabalabs/reviews-sdk
# or
pnpm add @duabalabs/reviews-sdk

Use 0.4.0 or later: it has every method in the reference — entity resolution, the network view, the Trust Score, entitlements and webhooks as well as the core methods. If you are on 0.2.0, which has only the core methods (submit, read, aggregates, helpful, respond, by-author), upgrade with npm i @duabalabs/reviews-sdk@^0.4.0.

Who uses it

App	Subjects	Notes
Sellub (today)	`product`, `shop`	Product reviews (marked verified when the buyer has a settled order for the product) + shop reviews on the storefront.
ProxyFidelity (today)	`business`	Guest reviews of a property, written against the property’s 3y3anaa business profile.
Future Duaba apps	any scoped subject	Onboard with their own app key + scopes.

The SDK covers the App Reviews platform: submitting and reading your own reviews (aggregates, helpful votes, responses, by-author), finding real 3y3anaa businesses and artisans to review, the cross-app network view and the Trust Score read, and webhooks. The BBB internals (moderation, claims, how the Trust Score is computed) are not part of the SDK surface — they’re driven by the 3y3anaa app and admin tooling.

Configuration & env

Env var	Sent as	Purpose
`THREEYANAA_APP_KEY`	`Authorization: Bearer <key>`	Secret per-app key (`rk_<app>_…`). The only credential you need. Keep server-side.
`THREEYANAA_API_URL`	—	Optional `baseUrl` override (self-host/staging). Defaults to `https://api.3y3anaa.com`.

Get a key self-serve from the 3y3anaa portal (Settings ▸ API keys) — it’s shown once. See the full reference.