@01.software/sdk 0.48.0 → 0.51.0

package/dist/client.cjs

@@ -22,7 +22,22 @@ var client_exports = {};
 __export(client_exports, {
   Client: () => Client,
   ContentClient: () => ContentClient,
-  createClient: () => createClient
+  createClient: () => createClient,
+  isApiError: () => isApiError,
+  isAuthError: () => isAuthError,
+  isCommerceSDKError: () => isCommerceSDKError,
+  isConfigError: () => isConfigError,
+  isConflictError: () => isConflictError,
+  isGoneError: () => isGoneError,
+  isNetworkError: () => isNetworkError,
+  isNotFoundError: () => isNotFoundError,
+  isPermissionError: () => isPermissionError,
+  isRateLimitError: () => isRateLimitError,
+  isSDKError: () => isSDKError,
+  isServiceUnavailableError: () => isServiceUnavailableError,
+  isTimeoutError: () => isTimeoutError,
+  isUsageLimitError: () => isUsageLimitError,
+  isValidationError: () => isValidationError
 });
 module.exports = __toCommonJS(client_exports);
 
@@ -30,6 +45,24 @@ module.exports = __toCommonJS(client_exports);
 var import_qs_esm = require("qs-esm");
 
 // src/core/errors.ts
+var SDK_ERROR_BRAND = /* @__PURE__ */ Symbol.for("@01.software/sdk/SDKError");
+var SDK_ERROR_TYPE_BRAND = /* @__PURE__ */ Symbol.for("@01.software/sdk/SDKError.type");
+function defineSDKErrorBrand(error) {
+  Object.defineProperty(error, SDK_ERROR_BRAND, {
+    value: true,
+    enumerable: false,
+    configurable: false,
+    writable: false
+  });
+}
+function defineSDKErrorType(error, type) {
+  Object.defineProperty(error, SDK_ERROR_TYPE_BRAND, {
+    value: type,
+    enumerable: false,
+    configurable: false,
+    writable: false
+  });
+}
 var SDKError = class extends Error {
   constructor(code, message, status, details, userMessage, suggestion, requestId) {
     super(message);
@@ -40,6 +73,7 @@ var SDKError = class extends Error {
     this.userMessage = userMessage;
     this.suggestion = suggestion;
     this.requestId = requestId;
+    defineSDKErrorBrand(this);
     if (Error.captureStackTrace) {
       Error.captureStackTrace(this, new.target);
     }
@@ -60,6 +94,7 @@ var SDKError = class extends Error {
       ...this.kind !== void 0 && { kind: this.kind },
       ...this.reason !== void 0 && { reason: this.reason },
       ...this.rawReason !== void 0 && { rawReason: this.rawReason },
+      ...this.apiReason !== void 0 && { apiReason: this.apiReason },
       ...this.retryable !== void 0 && { retryable: this.retryable },
       ...this.retryAfter !== void 0 && { retryAfter: this.retryAfter }
     };
@@ -105,6 +140,7 @@ var COMMERCE_ERROR_CODES = [
   "payment_session_not_cancelable",
   "payment_session_conflict",
   "provider_identity_mismatch",
+  "managed_refund_attestation_forbidden",
   "payment_method_unavailable",
   "provider_unavailable",
   "lock_timeout",
@@ -233,8 +269,16 @@ function enhanceCommerceError(error, body, headerRequestId) {
   });
   return error;
 }
+function enhanceNonCommerceError(error, reason) {
+  if (typeof reason === "string") Object.assign(error, { apiReason: reason });
+  return error;
+}
+function getSDKErrorReason(error) {
+  if (error.kind !== "commerce") return error.apiReason;
+  return error.reason === "unknown_commerce_error" ? error.rawReason : error.reason;
+}
 function isCommerceSDKError(error) {
-  if (!(error instanceof SDKError) || error.kind !== "commerce") return false;
+  if (!isSDKError(error) || error.kind !== "commerce") return false;
   if (typeof error.requestId !== "string" || typeof error.retryable !== "boolean" || error.retryAfter !== void 0 && (!Number.isSafeInteger(error.retryAfter) || error.retryAfter < 0) || typeof error.reason !== "string") {
     return false;
   }
@@ -244,12 +288,14 @@ var NetworkError = class extends SDKError {
   constructor(message, status, details, userMessage, suggestion) {
     super("NETWORK_ERROR", message, status, details, userMessage, suggestion);
     this.name = "NetworkError";
+    defineSDKErrorType(this, "NetworkError");
   }
 };
 var ValidationError = class extends SDKError {
   constructor(message, details, userMessage, suggestion, status = 400) {
     super("VALIDATION_ERROR", message, status, details, userMessage, suggestion);
     this.name = "ValidationError";
+    defineSDKErrorType(this, "ValidationError");
   }
 };
 var ApiError = class extends SDKError {
@@ -264,24 +310,28 @@ var ApiError = class extends SDKError {
       requestId
     );
     this.name = "ApiError";
+    defineSDKErrorType(this, "ApiError");
   }
 };
 var ConfigError = class extends SDKError {
   constructor(message, details, userMessage, suggestion) {
     super("CONFIG_ERROR", message, void 0, details, userMessage, suggestion);
     this.name = "ConfigError";
+    defineSDKErrorType(this, "ConfigError");
   }
 };
 var TimeoutError = class extends SDKError {
   constructor(message = "Request timed out.", details, userMessage, suggestion) {
     super("TIMEOUT_ERROR", message, 408, details, userMessage, suggestion);
     this.name = "TimeoutError";
+    defineSDKErrorType(this, "TimeoutError");
   }
 };
 var GoneError = class extends SDKError {
   constructor(message = "The requested resource is no longer available.", details, userMessage, suggestion) {
     super("GONE_ERROR", message, 410, details, userMessage, suggestion);
     this.name = "GoneError";
+    defineSDKErrorType(this, "GoneError");
   }
 };
 var ServiceUnavailableError = class extends SDKError {
@@ -296,6 +346,7 @@ var ServiceUnavailableError = class extends SDKError {
     );
     this.name = "ServiceUnavailableError";
     this.retryAfter = retryAfter;
+    defineSDKErrorType(this, "ServiceUnavailableError");
   }
 };
 var UsageLimitError = class extends SDKError {
@@ -303,6 +354,7 @@ var UsageLimitError = class extends SDKError {
     super("USAGE_LIMIT_ERROR", message, 429, details, userMessage, suggestion);
     this.name = "UsageLimitError";
     this.usage = usage;
+    defineSDKErrorType(this, "UsageLimitError");
   }
   toJSON() {
     return {
@@ -323,6 +375,7 @@ var AuthError = class extends SDKError {
       requestId
     );
     this.name = "AuthError";
+    defineSDKErrorType(this, "AuthError");
   }
 };
 var PermissionError = class extends SDKError {
@@ -337,6 +390,7 @@ var PermissionError = class extends SDKError {
       requestId
     );
     this.name = "PermissionError";
+    defineSDKErrorType(this, "PermissionError");
   }
 };
 var NotFoundError = class extends SDKError {
@@ -351,12 +405,14 @@ var NotFoundError = class extends SDKError {
       requestId
     );
     this.name = "NotFoundError";
+    defineSDKErrorType(this, "NotFoundError");
   }
 };
 var ConflictError = class extends SDKError {
   constructor(message, details, userMessage, suggestion, requestId) {
     super("conflict", message, 409, details, userMessage, suggestion, requestId);
     this.name = "ConflictError";
+    defineSDKErrorType(this, "ConflictError");
   }
 };
 var RateLimitError = class extends SDKError {
@@ -372,8 +428,64 @@ var RateLimitError = class extends SDKError {
     );
     this.name = "RateLimitError";
     this.retryAfter = retryAfter;
+    defineSDKErrorType(this, "RateLimitError");
   }
 };
+function hasBrandedSDKErrorShape(error) {
+  if (error === null || typeof error !== "object") return false;
+  const candidate = error;
+  return candidate[SDK_ERROR_BRAND] === true && typeof candidate.name === "string" && typeof candidate.code === "string" && typeof candidate.message === "string" && (candidate.status === void 0 || typeof candidate.status === "number") && (candidate.userMessage === void 0 || typeof candidate.userMessage === "string") && (candidate.suggestion === void 0 || typeof candidate.suggestion === "string") && (candidate.requestId === void 0 || typeof candidate.requestId === "string") && (candidate.kind === void 0 || candidate.kind === "commerce") && (candidate.reason === void 0 || typeof candidate.reason === "string") && (candidate.rawReason === void 0 || typeof candidate.rawReason === "string") && (candidate.apiReason === void 0 || typeof candidate.apiReason === "string") && (candidate.retryable === void 0 || typeof candidate.retryable === "boolean") && (candidate.retryAfter === void 0 || typeof candidate.retryAfter === "number") && typeof candidate.getUserMessage === "function" && typeof candidate.toJSON === "function";
+}
+function hasSDKErrorType(error, type) {
+  return hasBrandedSDKErrorShape(error) && error[SDK_ERROR_TYPE_BRAND] === type;
+}
+function isSDKError(error) {
+  return error instanceof SDKError || hasBrandedSDKErrorShape(error);
+}
+function isNetworkError(error) {
+  return error instanceof NetworkError || hasSDKErrorType(error, "NetworkError");
+}
+function isValidationError(error) {
+  if (error instanceof ValidationError || hasSDKErrorType(error, "ValidationError")) {
+    return true;
+  }
+  if (error == null || typeof error !== "object") return false;
+  const candidate = error;
+  return candidate.name === "ValidationError" && candidate.code === "VALIDATION_ERROR" && typeof candidate.message === "string" && typeof candidate.getUserMessage === "function" && typeof candidate.toJSON === "function";
+}
+function isApiError(error) {
+  return error instanceof ApiError || hasSDKErrorType(error, "ApiError");
+}
+function isConfigError(error) {
+  return error instanceof ConfigError || hasSDKErrorType(error, "ConfigError");
+}
+function isTimeoutError(error) {
+  return error instanceof TimeoutError || hasSDKErrorType(error, "TimeoutError");
+}
+function isGoneError(error) {
+  return error instanceof GoneError || hasSDKErrorType(error, "GoneError");
+}
+function isServiceUnavailableError(error) {
+  return error instanceof ServiceUnavailableError || hasSDKErrorType(error, "ServiceUnavailableError");
+}
+function isUsageLimitError(error) {
+  return error instanceof UsageLimitError || hasSDKErrorType(error, "UsageLimitError");
+}
+function isAuthError(error) {
+  return error instanceof AuthError || hasSDKErrorType(error, "AuthError");
+}
+function isPermissionError(error) {
+  return error instanceof PermissionError || hasSDKErrorType(error, "PermissionError");
+}
+function isNotFoundError(error) {
+  return error instanceof NotFoundError || hasSDKErrorType(error, "NotFoundError");
+}
+function isConflictError(error) {
+  return error instanceof ConflictError || hasSDKErrorType(error, "ConflictError");
+}
+function isRateLimitError(error) {
+  return error instanceof RateLimitError || hasSDKErrorType(error, "RateLimitError");
+}
 var createNetworkError = (message, status, details, userMessage, suggestion) => new NetworkError(message, status, details, userMessage, suggestion);
 var createValidationError = (message, details, userMessage, suggestion, status) => new ValidationError(message, details, userMessage, suggestion, status);
 var createApiError = (message, status, details, userMessage, suggestion, requestId) => new ApiError(message, status, details, userMessage, suggestion, requestId);
@@ -571,11 +683,11 @@ function parseRetryAfter(response) {
     permitsAutomaticRetry: seconds <= MAX_AUTOMATIC_RETRY_AFTER_SECONDS
   };
 }
-function mapResponseToError(status, parsed, details, requestId, retryAfter, errorFamily) {
+function mapResponseToError(status, parsed, details, requestId, retryAfter, canonicalCommerceError) {
   const errorDetails = {
     ...details,
     ...parsed.errors && { errors: parsed.errors },
-    ...errorFamily !== "commerce" && parsed.body && { body: parsed.body }
+    ...!canonicalCommerceError && parsed.body && { body: parsed.body }
   };
   const suggestion = getParsedErrorSuggestion(status, parsed);
   const finalize = (error) => {
@@ -583,7 +695,7 @@ function mapResponseToError(status, parsed, details, requestId, retryAfter, erro
     if (retryAfter !== void 0) {
       Object.assign(withRequestId, { retryAfter });
     }
-    return errorFamily === "commerce" ? enhanceCommerceError(withRequestId, parsed.body, requestId) : withRequestId;
+    return canonicalCommerceError ? enhanceCommerceError(withRequestId, parsed.body, requestId) : enhanceNonCommerceError(withRequestId, parsed.reason);
   };
   if (status === 400 || status === 422) {
     return finalize(
@@ -689,6 +801,7 @@ async function httpFetch(url, options) {
     retry,
     onUnauthorized,
     errorFamily,
+    typedCommerceErrorReasons,
     ...requestInit
   } = options || {};
   const baseUrl = resolveApiUrl(apiUrl);
@@ -742,7 +855,8 @@ async function httpFetch(url, options) {
       });
       if (!response.ok) {
         const parsed = await parseErrorBody(response);
-        const commerceEnvelope = errorFamily === "commerce" ? parseCommerceErrorEnvelope(parsed.body, requestId) : void 0;
+        const canonicalCommerceError = errorFamily === "commerce" || typeof parsed.reason === "string" && typedCommerceErrorReasons?.includes(parsed.reason) === true;
+        const commerceEnvelope = canonicalCommerceError ? parseCommerceErrorEnvelope(parsed.body, requestId) : void 0;
         if (isUsageLimitExceededResponse(response)) {
           const limit = parseInt(
             response.headers.get("X-Usage-Limit") || "0",
@@ -770,7 +884,7 @@ async function httpFetch(url, options) {
             ),
             requestId
           );
-          throw errorFamily === "commerce" ? enhanceCommerceError(usageError, parsed.body, requestId) : usageError;
+          throw canonicalCommerceError ? enhanceCommerceError(usageError, parsed.body, requestId) : enhanceNonCommerceError(usageError, parsed.reason);
         }
         if (response.status === 401 && onUnauthorized && customerToken && !hasRetried401 && (commerceEnvelope?.reason ?? parsed.reason) === "token_expired") {
           hasRetried401 = true;
@@ -795,7 +909,7 @@ async function httpFetch(url, options) {
           details,
           requestId,
           retryAfter.seconds,
-          errorFamily
+          canonicalCommerceError
         );
         const method2 = (requestInit.method || "GET").toUpperCase();
         const isTerminal = error instanceof RateLimitError || error instanceof UsageLimitError;
@@ -973,15 +1087,15 @@ var HttpClient = class {
       throw err;
     }
   }
-  buildUrl(endpoint2, options) {
-    if (!options) return endpoint2;
+  buildUrl(endpoint, options) {
+    if (!options) return endpoint;
     const { fallbackLocale, ...rest } = options;
     const queryOptions = fallbackLocale === void 0 ? rest : {
       ...rest,
       "fallback-locale": fallbackLocale === false ? "none" : fallbackLocale
     };
     const queryString = (0, import_qs_esm.stringify)(queryOptions, { addQueryPrefix: true });
-    return queryString ? `${endpoint2}${queryString}` : endpoint2;
+    return queryString ? `${endpoint}${queryString}` : endpoint;
   }
   assertJsonResponse(response) {
     const contentType = response.headers.get("content-type");
@@ -1123,39 +1237,39 @@ var ReadOnlyCollectionClient = class extends HttpClient {
   from(collection) {
     return new ReadOnlyCollectionQueryBuilder(this, collection);
   }
-  async requestFind(endpoint2, options) {
-    const url = this.buildUrl(endpoint2, options);
+  async requestFind(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
     const response = await this.fetchWithTracking(url, {
       ...this.defaultOptions,
       method: "GET"
     });
     return this.parseFindResponse(response);
   }
-  async requestFindEndpoint(endpoint2, data) {
-    const response = await this.fetchWithTracking(endpoint2, {
+  async requestFindEndpoint(endpoint, data) {
+    const response = await this.fetchWithTracking(endpoint, {
       ...this.defaultOptions,
       method: "POST",
       body: data ? JSON.stringify(data) : void 0
     });
     return this.parseFindResponse(response);
   }
-  async requestFindEndpointGet(endpoint2) {
-    const response = await this.fetchWithTracking(endpoint2, {
+  async requestFindEndpointGet(endpoint) {
+    const response = await this.fetchWithTracking(endpoint, {
       ...this.defaultOptions,
       method: "GET"
     });
     return this.parseFindResponse(response);
   }
-  async requestFindById(endpoint2, options) {
-    const url = this.buildUrl(endpoint2, options);
+  async requestFindById(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
     const response = await this.fetchWithTracking(url, {
       ...this.defaultOptions,
       method: "GET"
     });
     return this.parseDocumentResponse(response);
   }
-  async requestCount(endpoint2, options) {
-    const url = this.buildUrl(endpoint2, options);
+  async requestCount(endpoint, options) {
+    const url = this.buildUrl(endpoint, options);
     const response = await this.fetchWithTracking(url, {
       ...this.defaultOptions,
       method: "GET"
@@ -1165,7 +1279,7 @@ var ReadOnlyCollectionClient = class extends HttpClient {
 };
 
 // src/core/api/parse-response.ts
-async function parseApiResponse(response, endpoint2, options = {}) {
+async function parseApiResponse(response, endpoint, options = {}) {
   if (response.status === 204 || response.headers.get("content-length") === "0") {
     return void 0;
   }
@@ -1174,7 +1288,7 @@ async function parseApiResponse(response, endpoint2, options = {}) {
     parsed = await response.json();
   } catch {
     throw createApiError(
-      `Invalid JSON response from ${endpoint2}`,
+      `Invalid JSON response from ${endpoint}`,
       response.status,
       void 0,
       "Server returned an invalid response.",
@@ -1217,13 +1331,14 @@ async function parseApiResponse(response, endpoint2, options = {}) {
     }
     const withRequestId = attachRequestId(error, requestId);
     if (retryAfter !== void 0) Object.assign(withRequestId, { retryAfter });
-    throw options.errorFamily === "commerce" ? enhanceCommerceError(withRequestId, data, requestId) : withRequestId;
+    throw options.errorFamily === "commerce" ? enhanceCommerceError(withRequestId, data, requestId) : enhanceNonCommerceError(withRequestId, reason);
   }
   return data;
 }
 
 // ../../internal/http-contracts/src/index.ts
 var operationBrand = /* @__PURE__ */ Symbol("sdk-http-operation");
+var PORTONE_STANDARD_ACTION_CAPABILITIES_MEDIA_TYPE = "application/vnd.01software.portone-action-capabilities.v1+json";
 var operation = (collection, method, path, errorFamily) => Object.freeze({
   [operationBrand]: true,
   collection,
@@ -1232,6 +1347,10 @@ var operation = (collection, method, path, errorFamily) => Object.freeze({
   ...errorFamily && { errorFamily }
 });
 var strictCommerceOperation = (collection, method, path) => operation(collection, method, path, "commerce");
+var selectiveCommerceOperation = (collection, method, path, typedCommerceErrorReasons) => Object.freeze({
+  ...operation(collection, method, path),
+  typedCommerceErrorReasons: Object.freeze([...typedCommerceErrorReasons])
+});
 var COMMERCE_ENDPOINT_OPERATIONS = {
   products: {
     detail: operation("products", "get", "/detail"),
@@ -1263,7 +1382,12 @@ var COMMERCE_ENDPOINT_OPERATIONS = {
     confirmPayment: operation("orders", "post", "/confirm-payment"),
     byPayment: operation("orders", "get", "/by-payment"),
     cancel: operation("orders", "post", "/cancel"),
-    resolveCancelRefund: operation("orders", "post", "/resolve-cancel-refund"),
+    resolveCancelRefund: selectiveCommerceOperation(
+      "orders",
+      "post",
+      "/resolve-cancel-refund",
+      ["managed_refund_attestation_forbidden"]
+    ),
     checkout: strictCommerceOperation("orders", "post", "/checkout"),
     createFulfillment: operation("orders", "post", "/create-fulfillment"),
     updateFulfillment: operation("orders", "post", "/update-fulfillment")
@@ -1334,6 +1458,16 @@ var COMMERCE_ENDPOINT_OPERATIONS = {
         "payment-sessions",
         "post",
         "/server/confirm"
+      ),
+      findPortOne: strictCommerceOperation(
+        "payment-sessions",
+        "post",
+        "/server/portone/find"
+      ),
+      reconcilePortOne: strictCommerceOperation(
+        "payment-sessions",
+        "post",
+        "/server/portone/reconcile"
       )
     },
     custom: {
@@ -1353,12 +1487,26 @@ var COMMERCE_ENDPOINT_OPERATIONS = {
     validate: operation("discounts", "post", "/validate")
   }
 };
+var portOneStandardActionCapabilityOperations = /* @__PURE__ */ new Set([
+  COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.create,
+  COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.retrieve,
+  COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.server.create,
+  COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.server.retrieve
+]);
 var MEMBERSHIP_ENDPOINT_OPERATIONS = {
   subscribe: operation(null, "post", "/memberships/subscribe"),
   cancel: operation(null, "post", "/memberships/:id/cancel"),
   me: operation(null, "get", "/memberships/me")
 };
+var EMBEDDED_ADMIN_ENDPOINT_OPERATIONS = {
+  show: operation("tenants", "get", "/embedded-admin-app"),
+  configure: operation("tenants", "patch", "/embedded-admin-app"),
+  disable: operation("tenants", "delete", "/embedded-admin-app")
+};
 var EVENTS_ENDPOINT_OPERATIONS = {
+  events: {
+    convertSchedule: operation("events", "post", "/:id/schedule")
+  },
   occurrences: {
     range: operation("event-occurrences", "get", "/range"),
     admissionAvailability: operation(
@@ -1399,46 +1547,51 @@ function resolveOperationMethod(descriptor) {
 }
 
 // src/core/api/endpoints.ts
-var endpoint = (method, path) => ({ method, path });
 var sharedEndpoint = (descriptor) => descriptor;
-function resolveOperationMethod2(descriptor) {
-  return "collection" in descriptor ? resolveOperationMethod(descriptor) : descriptor.method;
-}
 function resolveOperationErrorFamily(descriptor) {
-  return "collection" in descriptor ? descriptor.errorFamily : void 0;
-}
-function resolveOperationPath2(descriptor, options) {
-  if ("collection" in descriptor) {
-    return resolveOperationPath(descriptor, options);
-  }
-  const query = options?.query?.toString().replace(/^\?/, "");
-  return query ? `${descriptor.path}?${query}` : descriptor.path;
+  return descriptor.errorFamily;
 }
 var COMMERCE_ENDPOINTS = {
   products: {
-    detail: endpoint("GET", "/api/products/detail"),
-    detailCatalog: endpoint("GET", "/api/products/detail/catalog"),
-    listingGroups: endpoint("GET", "/api/products/listing-groups"),
-    listingGroupsCatalog: endpoint(
-      "GET",
-      "/api/products/listing-groups/catalog"
+    detail: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.products.detail),
+    detailCatalog: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.detailCatalog
+    ),
+    listingGroups: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.listingGroups
+    ),
+    listingGroupsCatalog: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.listingGroupsCatalog
     ),
-    listingGroupsQuery: endpoint("GET", "/api/products/listing-groups/query"),
-    listingGroupsQueryCatalog: endpoint(
-      "GET",
-      "/api/products/listing-groups/query/catalog"
+    // The manifest keeps the GET read and the POST body-query apart; this
+    // semantic name has always resolved to the GET one.
+    listingGroupsQuery: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.listingGroupsQueryGet
     ),
-    stockCheck: endpoint("POST", "/api/products/stock-check"),
-    stockSnapshot: endpoint("GET", "/api/products/stock"),
-    upsert: endpoint("POST", "/api/products/upsert")
+    listingGroupsQueryCatalog: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.listingGroupsQueryCatalog
+    ),
+    stockCheck: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.stockCheck
+    ),
+    stockSnapshot: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.products.stockSnapshot
+    ),
+    upsert: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.products.upsert)
   },
   orders: {
-    update: endpoint("POST", "/api/orders/update"),
-    byPayment: endpoint("GET", "/api/orders/by-payment"),
-    cancel: endpoint("POST", "/api/orders/cancel"),
-    resolveCancelRefund: endpoint("POST", "/api/orders/resolve-cancel-refund"),
-    createFulfillment: endpoint("POST", "/api/orders/create-fulfillment"),
-    updateFulfillment: endpoint("POST", "/api/orders/update-fulfillment")
+    update: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.orders.update),
+    byPayment: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.orders.byPayment),
+    cancel: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.orders.cancel),
+    resolveCancelRefund: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.orders.resolveCancelRefund
+    ),
+    createFulfillment: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.orders.createFulfillment
+    ),
+    updateFulfillment: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.orders.updateFulfillment
+    )
   },
   checkouts: {
     create: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.orders.checkout),
@@ -1450,18 +1603,21 @@ var COMMERCE_ENDPOINTS = {
     }
   },
   returns: {
-    create: endpoint("POST", "/api/returns/create"),
-    update: endpoint("POST", "/api/returns/update"),
-    returnRefund: endpoint("POST", "/api/returns/return-refund")
+    create: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.returns.create),
+    update: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.returns.update),
+    returnRefund: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.returns.returnRefund
+    )
   },
   fulfillmentOrders: {
-    prepare: endpoint(
-      "POST",
-      "/api/fulfillment-orders/prepare-fulfillment-order"
+    prepare: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.fulfillmentOrders.prepare
     )
   },
   fulfillments: {
-    bulkImport: endpoint("POST", "/api/fulfillments/bulk-import")
+    bulkImport: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.fulfillments.bulkImport
+    )
   },
   carts: {
     create: sharedEndpoint(COMMERCE_ENDPOINT_OPERATIONS.carts.create),
@@ -1526,42 +1682,21 @@ var COMMERCE_ENDPOINTS = {
       ),
       confirm: sharedEndpoint(
         COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.server.confirm
+      ),
+      findPortOne: sharedEndpoint(
+        COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.server.findPortOne
+      ),
+      reconcilePortOne: sharedEndpoint(
+        COMMERCE_ENDPOINT_OPERATIONS.paymentSessions.server.reconcilePortOne
       )
     }
   },
   shippingPolicies: {
-    calculate: endpoint("POST", "/api/shipping-policies/calculate")
+    calculate: sharedEndpoint(
+      COMMERCE_ENDPOINT_OPERATIONS.shippingPolicies.calculate
+    )
   }
 };
-function isCommerceEndpointDescriptor(value) {
-  if (!value || typeof value !== "object") return false;
-  const candidate = value;
-  return typeof candidate.method === "string" && typeof candidate.path === "string";
-}
-function flattenEndpointPaths(value) {
-  if (isCommerceEndpointDescriptor(value)) return [resolveOperationPath2(value)];
-  if (!value || typeof value !== "object") return [];
-  return Object.values(value).flatMap((entry) => flattenEndpointPaths(entry));
-}
-function flattenEndpointDescriptors(value) {
-  if (isCommerceEndpointDescriptor(value)) return [value];
-  if (!value || typeof value !== "object") return [];
-  return Object.values(value).flatMap(
-    (entry) => flattenEndpointDescriptors(entry)
-  );
-}
-var COMMERCE_ENDPOINT_PATHS = flattenEndpointPaths(COMMERCE_ENDPOINTS);
-var COMMERCE_ENDPOINT_DESCRIPTORS = flattenEndpointDescriptors(COMMERCE_ENDPOINTS);
-var MEMBERSHIP_ENDPOINTS = {
-  subscribe: "/api/memberships/subscribe",
-  cancel: (id) => `/api/memberships/${id}/cancel`,
-  me: "/api/memberships/me"
-};
-var MEMBERSHIP_ENDPOINT_PATHS = [
-  MEMBERSHIP_ENDPOINTS.subscribe,
-  MEMBERSHIP_ENDPOINTS.cancel(":id"),
-  MEMBERSHIP_ENDPOINTS.me
-];
 
 // src/core/api/customer-scoped-api.ts
 var CustomerScopedTransport = class {
@@ -1582,10 +1717,10 @@ var CustomerScopedTransport = class {
     this.onUnauthorized = options.onUnauthorized;
     this.onRequestId = options.onRequestId;
   }
-  async request(endpoint2, options) {
+  async request(endpoint, options) {
     const token = typeof this.customerToken === "function" ? this.customerToken() : this.customerToken;
     try {
-      const response = await httpFetch(endpoint2, {
+      const response = await httpFetch(endpoint, {
         method: options.method,
         apiUrl: this.apiUrl,
         publishableKey: this.publishableKey,
@@ -1599,7 +1734,7 @@ var CustomerScopedTransport = class {
         ...options.errorFamily && { errorFamily: options.errorFamily }
       });
       this.onRequestId?.(response.headers.get("x-request-id") ?? null);
-      return parseApiResponse(response, endpoint2, {
+      return parseApiResponse(response, endpoint, {
         errorFamily: options.errorFamily
       });
     } catch (err) {
@@ -1613,12 +1748,12 @@ var CustomerScopedApi = class {
   constructor(apiName, options) {
     this.transport = new CustomerScopedTransport(apiName, options);
   }
-  requestEndpoint(endpoint2, body, options) {
-    return this.transport.request(resolveOperationPath2(endpoint2, options), {
-      method: resolveOperationMethod2(endpoint2),
+  requestEndpoint(endpoint, body, options) {
+    return this.transport.request(resolveOperationPath(endpoint, options), {
+      method: resolveOperationMethod(endpoint),
       body,
       headers: options?.headers,
-      errorFamily: resolveOperationErrorFamily(endpoint2)
+      errorFamily: resolveOperationErrorFamily(endpoint)
     });
   }
 };
@@ -1626,8 +1761,8 @@ var RawCustomerScopedApi = class {
   constructor(apiName, options) {
     this.transport = new CustomerScopedTransport(apiName, options);
   }
-  request(endpoint2, options) {
-    return this.transport.request(endpoint2, options);
+  request(endpoint, options) {
+    return this.transport.request(endpoint, options);
   }
 };
 
@@ -1641,13 +1776,7 @@ function unwrapPayloadDoc(value) {
   return value;
 }
 function hasCanonicalNotFoundReason(error) {
-  const details = error.details;
-  if (typeof details !== "object" || details === null) return false;
-  if ("reason" in details && details.reason === "not_found") return true;
-  if (!("body" in details) || typeof details.body !== "object" || details.body === null) {
-    return false;
-  }
-  return "reason" in details.body && details.body.reason === "not_found";
+  return getSDKErrorReason(error) === "not_found";
 }
 var CommunityClient = class extends RawCustomerScopedApi {
   constructor(options) {
@@ -1708,11 +1837,11 @@ var CommunityClient = class extends RawCustomerScopedApi {
     if (params.page !== void 0) urlParams.set("page", String(params.page));
     return `/api/comments/public?${urlParams.toString()}`;
   }
-  async execute(endpoint2, method, body) {
-    return this.request(endpoint2, { method, body });
+  async execute(endpoint, method, body) {
+    return this.request(endpoint, { method, body });
   }
-  async executeDoc(endpoint2, method, body) {
-    const response = await this.execute(endpoint2, method, body);
+  async executeDoc(endpoint, method, body) {
+    const response = await this.execute(endpoint, method, body);
     return unwrapPayloadDoc(response);
   }
   createPost(params) {
@@ -1978,8 +2107,8 @@ var CommunityClient = class extends RawCustomerScopedApi {
 
 // src/core/content/content-client.ts
 var PublicContentApi = class extends RawCustomerScopedApi {
-  get(endpoint2) {
-    return this.request(endpoint2, { method: "GET" });
+  get(endpoint) {
+    return this.request(endpoint, { method: "GET" });
   }
 };
 function appendCommonParams(search, options, defaultSort) {
@@ -2160,6 +2289,9 @@ function nullableString(value, resource, path) {
     fail(resource, path, "string or null");
   }
 }
+function nullableNonEmptyString(value, resource, path) {
+  if (value !== null) string(value, resource, path);
+}
 function cartLineQuantity(value, resource, path) {
   const quantity = positiveInteger(value, resource, path);
   if (quantity > MAX_CART_LINE_QUANTITY) {
@@ -2669,8 +2801,8 @@ function validatePublicOrderItem(value, resource, path) {
     validateReference(item.variant, resource, `${path}.variant`);
   }
   string(item.productTitle, resource, `${path}.productTitle`);
-  nullableString(item.variantTitle, resource, `${path}.variantTitle`);
-  nullableString(item.sku, resource, `${path}.sku`);
+  nullableNonEmptyString(item.variantTitle, resource, `${path}.variantTitle`);
+  nullableNonEmptyString(item.sku, resource, `${path}.sku`);
   validateAdmissions(item.admissions, resource, `${path}.admissions`);
   const quantity = positiveInteger(item.quantity, resource, `${path}.quantity`);
   const unitPrice = safeMinor(
@@ -2921,8 +3053,8 @@ function validateCheckoutItem(value, resource, path) {
   validateReference(item.product, resource, `${path}.product`);
   validateReference(item.variant, resource, `${path}.variant`);
   string(item.productTitle, resource, `${path}.productTitle`);
-  nullableString(item.variantTitle, resource, `${path}.variantTitle`);
-  nullableString(item.sku, resource, `${path}.sku`);
+  nullableNonEmptyString(item.variantTitle, resource, `${path}.variantTitle`);
+  nullableNonEmptyString(item.sku, resource, `${path}.sku`);
   validateAdmissions(item.admissions, resource, `${path}.admissions`);
   cartLineQuantity(item.quantity, resource, `${path}.quantity`);
   const unitPrice = safeMinor(
@@ -3253,9 +3385,96 @@ function validateRequiredReconciliation(value, allowed, resource, path) {
 function validateNextAction(value, provider, resource, path) {
   const action = record(value, resource, path);
   if (provider === "portone") {
+    if (action.type === "portone_sdk") {
+      const hasCancelable = "cancelable" in action;
+      const hasRetryPolicy = "retryPolicy" in action;
+      if (hasCancelable !== hasRetryPolicy) {
+        fail(
+          resource,
+          path,
+          "exact released action or exact negotiated capability action"
+        );
+      }
+      exact(
+        action,
+        [
+          "type",
+          "version",
+          ...hasCancelable ? ["cancelable", "retryPolicy"] : [],
+          "storeId",
+          "channelKey",
+          "paymentId",
+          "orderName",
+          "totalAmount",
+          "currency",
+          "payMethod",
+          "redirectUrl"
+        ],
+        [],
+        resource,
+        path
+      );
+      if (action.version !== "v2") fail(resource, `${path}.version`, "v2");
+      if (hasCancelable && action.cancelable !== false)
+        fail(resource, `${path}.cancelable`, "false");
+      if (hasRetryPolicy && action.retryPolicy !== "same_action_only") {
+        fail(resource, `${path}.retryPolicy`, "same_action_only");
+      }
+      for (const key of ["storeId", "channelKey"]) {
+        boundedString(action[key], 255, resource, `${path}.${key}`);
+      }
+      const paymentId = boundedString(
+        action.paymentId,
+        40,
+        resource,
+        `${path}.paymentId`
+      );
+      if (!/^[A-Za-z0-9]{6,40}$/.test(paymentId)) {
+        fail(
+          resource,
+          `${path}.paymentId`,
+          "6-40 ASCII alphanumeric characters"
+        );
+      }
+      boundedString(
+        action.orderName,
+        MAX_COMMERCE_SHORT_TEXT_LENGTH,
+        resource,
+        `${path}.orderName`
+      );
+      positiveInteger(action.totalAmount, resource, `${path}.totalAmount`);
+      if (action.currency !== "CURRENCY_KRW") {
+        fail(resource, `${path}.currency`, "CURRENCY_KRW");
+      }
+      if (action.payMethod !== "CARD")
+        fail(resource, `${path}.payMethod`, "CARD");
+      const redirectUrl = boundedString(
+        action.redirectUrl,
+        2048,
+        resource,
+        `${path}.redirectUrl`
+      );
+      try {
+        const parsed = new URL(redirectUrl);
+        const loopback = parsed.protocol === "http:" && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1");
+        if (!loopback && parsed.protocol !== "https:" || parsed.username || parsed.password)
+          throw new Error("unsafe redirect URL");
+      } catch {
+        fail(
+          resource,
+          `${path}.redirectUrl`,
+          "HTTPS or loopback URL without embedded credentials"
+        );
+      }
+      if (!hasCancelable) {
+        action.cancelable = false;
+        action.retryPolicy = "same_action_only";
+      }
+      return;
+    }
     exact(action, ["type", "checkoutUrl"], [], resource, path);
     if (action.type !== "portone_checkout") {
-      fail(resource, `${path}.type`, "portone_checkout");
+      fail(resource, `${path}.type`, "portone_checkout | portone_sdk");
     }
     const checkoutUrl = boundedString(
       action.checkoutUrl,
@@ -3981,8 +4200,8 @@ var CartApi = class extends CustomerScopedApi {
   endpoint(key) {
     return this.serverTransport ? COMMERCE_ENDPOINTS.carts.server[key] : COMMERCE_ENDPOINTS.carts[key];
   }
-  execute(endpoint2, body, idempotencyKey) {
-    return this.requestEndpoint(endpoint2, body, {
+  execute(endpoint, body, idempotencyKey) {
+    return this.requestEndpoint(endpoint, body, {
       ...idempotencyKey && {
         headers: { "X-Idempotency-Key": idempotencyKey }
       }
@@ -3999,26 +4218,26 @@ var CartApi = class extends CustomerScopedApi {
     );
   }
   mine(params = {}) {
-    const endpoint2 = this.endpoint("mine");
-    return this.execute(endpoint2, params).then(
+    const endpoint = this.endpoint("mine");
+    return this.execute(endpoint, params).then(
       (value) => validateCartMineResult(value)
     );
   }
   merge(params) {
     const { idempotencyKey, ...body } = params;
     assertCommerceIdempotencyKey(idempotencyKey);
-    const endpoint2 = this.endpoint("merge");
-    return this.execute(endpoint2, body, idempotencyKey).then(
+    const endpoint = this.endpoint("merge");
+    return this.execute(endpoint, body, idempotencyKey).then(
       (value) => validateCartMergeResult(value)
     );
   }
   addItem(params) {
     return this.mutate(this.endpoint("addItem"), params);
   }
-  mutate(endpoint2, params) {
+  mutate(endpoint, params) {
     const { idempotencyKey, ...body } = params;
     assertCommerceIdempotencyKey(idempotencyKey);
-    return this.execute(endpoint2, body, idempotencyKey).then(
+    return this.execute(endpoint, body, idempotencyKey).then(
       (value) => validateCartMutationResult(value)
     );
   }
@@ -4044,8 +4263,8 @@ var CheckoutApi = class extends CustomerScopedApi {
   constructor(options) {
     super("CheckoutApi", { ...options, requiresCredential: false });
   }
-  post(endpoint2, body, idempotencyKey) {
-    return this.requestEndpoint(endpoint2, body, {
+  post(endpoint, body, idempotencyKey) {
+    return this.requestEndpoint(endpoint, body, {
       ...idempotencyKey && {
         headers: { "X-Idempotency-Key": idempotencyKey }
       }
@@ -4112,11 +4331,15 @@ var PaymentSessionApi = class extends CustomerScopedApi {
     super("PaymentSessionApi", { ...options, requiresCredential: false });
     this.serverTransport = Boolean(options.secretKey);
   }
-  post(endpoint2, body, idempotencyKey) {
-    return this.requestEndpoint(endpoint2, body, {
-      ...idempotencyKey && {
-        headers: { "X-Idempotency-Key": idempotencyKey }
+  post(endpoint, body, idempotencyKey, negotiateStandardActionCapabilities = false) {
+    const headers = {
+      ...idempotencyKey && { "X-Idempotency-Key": idempotencyKey },
+      ...negotiateStandardActionCapabilities && {
+        Accept: PORTONE_STANDARD_ACTION_CAPABILITIES_MEDIA_TYPE
       }
+    };
+    return this.requestEndpoint(endpoint, body, {
+      ...Object.keys(headers).length > 0 && { headers }
     });
   }
   async paymentSession(result, expectedProvider) {
@@ -4141,40 +4364,41 @@ var PaymentSessionApi = class extends CustomerScopedApi {
       this.post(
         this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.create : COMMERCE_ENDPOINTS.paymentSessions.create,
         body,
-        idempotencyKey
+        idempotencyKey,
+        body.providerOptions.profile === "standard_v2"
       ),
       "portone"
     );
   }
   retrieve(params) {
-    const endpoint2 = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.retrieve : COMMERCE_ENDPOINTS.paymentSessions.retrieve;
+    const endpoint = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.retrieve : COMMERCE_ENDPOINTS.paymentSessions.retrieve;
     return this.paymentSession(
-      this.post(endpoint2, params),
+      this.post(endpoint, params),
       "toss"
     );
   }
   retrievePortOne(params) {
-    const endpoint2 = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.retrieve : COMMERCE_ENDPOINTS.paymentSessions.retrieve;
+    const endpoint = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.retrieve : COMMERCE_ENDPOINTS.paymentSessions.retrieve;
     return this.paymentSession(
-      this.post(endpoint2, params),
+      this.post(endpoint, params, void 0, true),
       "portone"
     );
   }
   cancel(params) {
     const { idempotencyKey, ...body } = params;
     assertCommerceIdempotencyKey(idempotencyKey);
-    const endpoint2 = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.cancel : COMMERCE_ENDPOINTS.paymentSessions.cancel;
+    const endpoint = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.cancel : COMMERCE_ENDPOINTS.paymentSessions.cancel;
     return this.paymentSession(
-      this.post(endpoint2, body, idempotencyKey),
+      this.post(endpoint, body, idempotencyKey),
       "toss"
     );
   }
   cancelPortOne(params) {
     const { idempotencyKey, ...body } = params;
     assertCommerceIdempotencyKey(idempotencyKey);
-    const endpoint2 = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.cancel : COMMERCE_ENDPOINTS.paymentSessions.cancel;
+    const endpoint = this.serverTransport ? COMMERCE_ENDPOINTS.paymentSessions.server.cancel : COMMERCE_ENDPOINTS.paymentSessions.cancel;
     return this.paymentSession(
-      this.post(endpoint2, body, idempotencyKey),
+      this.post(endpoint, body, idempotencyKey),
       "portone"
     );
   }
@@ -5218,21 +5442,11 @@ var PRODUCT_DETAIL_UNAVAILABLE_REASONS = /* @__PURE__ */ new Set([
   "not_published",
   "feature_disabled"
 ]);
-function isRecord(value) {
-  return typeof value === "object" && value !== null;
-}
-function readProductDetailUnavailableReason(value) {
-  if (!isRecord(value)) return void 0;
-  const directReason = value.reason ?? value.code;
-  if (typeof directReason === "string" && PRODUCT_DETAIL_UNAVAILABLE_REASONS.has(directReason)) {
-    return directReason;
-  }
-  return readProductDetailUnavailableReason(value.body);
-}
 function productDetailResultFromError(error) {
   if (!(error instanceof SDKError) || error.status !== 404) return void 0;
-  const reason = readProductDetailUnavailableReason(error.details);
-  if (!reason) return void 0;
+  const reason = getSDKErrorReason(error);
+  if (!reason || !PRODUCT_DETAIL_UNAVAILABLE_REASONS.has(reason))
+    return void 0;
   return { found: false, reason };
 }
 var MARKET_PRICE_QUERY_UNSUPPORTED_MESSAGE = "Market listing pages do not support base price filters or price sorts.";
@@ -5325,8 +5539,8 @@ function withProductListingCards(response, options) {
 
 // src/core/commerce/commerce-client.ts
 var BrowserCommerceApi = class extends CustomerScopedApi {
-  requestEndpoint(endpoint2, body, options) {
-    return super.requestEndpoint(endpoint2, body, options);
+  requestEndpoint(endpoint, body, options) {
+    return super.requestEndpoint(endpoint, body, options);
   }
 };
 var CommerceClient = class {
@@ -5526,11 +5740,11 @@ var EventsClient = class {
       { useCustomerAuth: false }
     );
   }
-  async execute(endpoint2, method, body, options = {}) {
+  async execute(endpoint, method, body, options = {}) {
     const useCustomerAuth = options.useCustomerAuth === true;
     const token = useCustomerAuth ? typeof this.customerToken === "function" ? this.customerToken() : this.customerToken : void 0;
     try {
-      const response = await httpFetch(endpoint2, {
+      const response = await httpFetch(endpoint, {
         method,
         apiUrl: this.apiUrl,
         publishableKey: this.publishableKey,
@@ -5539,7 +5753,7 @@ var EventsClient = class {
         ...body !== void 0 && { body: JSON.stringify(body) }
       });
       this.onRequestId?.(response.headers.get("x-request-id") ?? null);
-      return parseApiResponse(response, endpoint2);
+      return parseApiResponse(response, endpoint);
     } catch (err) {
       const id = err instanceof SDKError ? err.requestId ?? null : null;
       this.onRequestId?.(id);