@astermd-hq/sdk 0.0.2 → 0.0.5

package/dist/index.d.cts

@@ -561,7 +561,7 @@ interface TransportOptions {
  * building, body serialisation, dispatch through the {@link HttpClient} seam,
  * envelope decoding, and the mapping from HTTP status to error class. Resources
  * never see a `Request`, a `Response`, or a line of JSON - that separation is
- * what keeps seventeen resource classes trivial and testable.
+ * what keeps eighteen resource classes trivial and testable.
  *
  * The 401-retry protocol is built in. On a 401 the transport calls
  * `onUnauthorized` once, which in the production wiring refreshes the token, and
@@ -609,7 +609,7 @@ declare class Transport {
  * Resource classes extend this and call `this.transport.send()` to dispatch every
  * outbound request. A resource never builds a request, touches a header, or
  * decodes JSON - all of that belongs to `Transport` alone. That is what keeps
- * seventeen resource classes small enough to read at a glance and testable
+ * eighteen resource classes small enough to read at a glance and testable
  * without a network.
  */
 declare abstract class AbstractResource {
@@ -626,9 +626,10 @@ interface CartWriteOptions {
     /** The session the cart belongs to. */
     session: string;
     /**
-     * The cart's full contents. Each entry identifies a product and quantity, and
-     * a variant where the product has them. This is the complete list, not a
-     * delta - see the API reference in your AsterMD dashboard for the fields.
+     * The cart's full contents. Each entry requires `product_id`, `name`, and
+     * `qty`, plus an optional `variant_id` when the product has variants. This is
+     * the complete list, not a delta - see the API reference in your AsterMD
+     * dashboard for the fields.
      */
     items: Record<string, unknown>[];
 }
@@ -870,7 +871,13 @@ declare class CheckoutEvents extends AbstractResource {
      * Send one call per state the visitor reaches: an upsell offered, then accepted
      * or declined, then the order placed or declined. The payload carries whatever
      * context that state needs, but it can never override `event` - the state
-     * recorded is always the one you passed explicitly.
+     * recorded is always the one you passed explicitly. For an `OrderPlaced` event,
+     * `data` may include an optional `payment` object describing the settled
+     * payment method: `type` (`paypal` | `apple_pay` | `gpay` | `credit_card` |
+     * `pre_paid`), `pre_auth` (boolean), `pre_auth_qa` and `pre_auth_amount`
+     * (optional), and an optional `card` object (`type` - `amex` | `visa` |
+     * `mastercard` | `discover` | `diners_club` | `jcb`, optional `bin`, required
+     * `exp`).
      *
      * @param options The session, the new state, and any context for it.
      * @returns The updated checkout-event record.
@@ -882,6 +889,97 @@ declare class CheckoutEvents extends AbstractResource {
     update<T = Record<string, unknown>>(options: CheckoutEventUpdateOptions): Promise<Response$1<T>>;
 }
 
+/**
+ * One cart line for {@link Coupons.validate}: either a subscription plan, or a
+ * product with its variant - never both. Never an amount; AsterMD prices the
+ * line itself.
+ */
+type CouponCartItem = {
+    /** The subscription plan the line is sold on. Priced at the plan's first payment. */
+    plan_id: string;
+    /** Units of the line, an integer from 1 to 999. */
+    quantity: number;
+} | {
+    /** The AsterMD product. */
+    product_id: string;
+    /** The product's variant; the product id again for a product without variants. */
+    variant_id: string;
+    /** Units of the line, an integer from 1 to 999. */
+    quantity: number;
+};
+/** Options for {@link Coupons.validate}. */
+interface CouponValidateOptions {
+    /** The code the shopper typed. Not case sensitive. */
+    code: string;
+    /** The cart, main item first. Between 1 and 6 lines. */
+    items: CouponCartItem[];
+    /**
+     * The AsterMD patient id of the shopper, when already a patient. Sent only
+     * when provided. When several of `patientId`, `email` and `opportunityId` are
+     * given, the server uses them in that order.
+     */
+    patientId?: string;
+    /** The shopper's email; used when `patientId` is not sent. Sent only when provided. */
+    email?: string;
+    /**
+     * The shopper's opportunity id; used when neither `patientId` nor `email` is
+     * sent. Sent only when provided.
+     */
+    opportunityId?: string;
+}
+/**
+ * Coupons - checking a code the shopper typed against their cart.
+ *
+ * Use this resource just before creating the payment: it tells the storefront
+ * whether a coupon code can be used on the current cart, and what it takes off.
+ * AsterMD prices the cart itself from its catalogue, so callers send product,
+ * variant or plan identifiers and quantities - never amounts.
+ *
+ * The call applies to a channel whose payment provider is a storefront gateway.
+ * Nothing is counted against the coupon by a check; redemption is recorded later,
+ * when the order is synced.
+ *
+ * ```ts
+ * const { discount_cents, amount_cents } = (
+ *   await client.coupons().validate<{ discount_cents: number; amount_cents: number }>({
+ *     code: 'WELCOME20',
+ *     items: [{ plan_id: planId, quantity: 1 }],
+ *     email: 'jane.doe@example.com',
+ *   })
+ * ).data();
+ * ```
+ */
+declare class Coupons extends AbstractResource {
+    /**
+     * @param transport The shared transport.
+     */
+    constructor(transport: Transport);
+    /**
+     * Checks a coupon code against a cart without redeeming it.
+     *
+     * Call this when the shopper applies a code at checkout, before the payment is
+     * created. The server validates the coupon's status, validity window, patient,
+     * products, budget, scope and redemption limits, and prices the cart. The check
+     * has no side effects. Inspect `data()` on the response for the coupon terms,
+     * the price before and after the discount, and the discounted lines. A shopper
+     * who is not a patient yet only fits a coupon open to anyone.
+     *
+     * @param options The code, the cart, and optionally who the shopper is
+     *   (`patientId`, `email` or `opportunityId`). Each optional identifier is sent
+     *   only when provided.
+     * @returns The coupon check; `data()` holds `coupon_id`, `name`,
+     *   `discount_type`, `value`, `tiers`, `default_scope`, `gross_amount_cents`,
+     *   `discount_cents`, `amount_cents`, `currency` and the discounted `items`.
+     * @throws {NotFoundError} If no coupon exists with this code.
+     * @throws {ValidationError} If the coupon cannot be used on this cart, or the
+     *   cart cannot be priced.
+     * @throws {AuthenticationError} If the credentials are refused.
+     * @throws {ApiError} On any other non-2xx status.
+     * @throws {TransportError} If the request never completed.
+     */
+    validate<T = Record<string, unknown>>(options: CouponValidateOptions): Promise<Response$1<T>>;
+}
+
 /**
  * Doctors' networks - handing a case to the clinicians who will review it.
  *
@@ -1535,7 +1633,7 @@ interface SubmitHealthInformationOptions {
  *
  * Handling this data does not by itself make your application HIPAA compliant -
  * that depends on your own infrastructure, policies, and agreements. Contact
- * info@astermd.com regarding a Business Associate Agreement.
+ * hello@astermd.com regarding a Business Associate Agreement.
  */
 declare class Patients extends AbstractResource {
     /**
@@ -1698,7 +1796,11 @@ interface SessionCreateOptions {
     /**
      * Attribution and context to record against the session - UTM parameters,
      * referrer, landing page. Forwarded unmodified; see the API reference in your
-     * AsterMD dashboard for the recognised keys.
+     * AsterMD dashboard for the recognised keys. May include an optional
+     * `verification` object recording identity/contact verification already
+     * performed by the caller - every field inside it is optional too: `email`
+     * (boolean), `address` (boolean), and `id` (`verified` boolean, `method` -
+     * `ssn` | `dob` | `cross_check` | `document_upload`, `value` string).
      */
     data?: Record<string, unknown>;
     /** The visitor's user agent, forwarded as the `User-Agent` header. */
@@ -1786,7 +1888,8 @@ declare class Sessions extends AbstractResource {
      *
      * @param session The session identifier to update.
      * @param data Fields to record. Forwarded unmodified; see the API reference in
-     *   your AsterMD dashboard for the recognised keys.
+     *   your AsterMD dashboard for the recognised keys. Accepts the same optional
+     *   `verification` object documented on {@link Sessions.create}.
      * @returns The updated session.
      * @throws {NotFoundError} If the session does not exist.
      * @throws {ValidationError} If the payload is rejected.
@@ -1903,16 +2006,70 @@ declare class Teleforms extends AbstractResource {
     view<T = Record<string, unknown>>(id: string): Promise<Response$1<T>>;
 }
 
+/** The card network for {@link TreatmentCardOptions.type}. */
+type TreatmentCardType = 'amex' | 'visa' | 'mastercard' | 'discover' | 'diners_club' | 'jcb';
+/** The settled payment method for {@link TreatmentPaymentOptions.type}. */
+type TreatmentPaymentType = 'paypal' | 'apple_pay' | 'gpay' | 'credit_card' | 'pre_paid';
+/** The identity check performed for {@link TreatmentIdVerificationOptions.method}. */
+type TreatmentIdVerificationMethod = 'ssn' | 'dob' | 'cross_check' | 'document_upload';
+/** Card details nested inside {@link TreatmentPaymentOptions.card}. */
+interface TreatmentCardOptions {
+    /** The card network. */
+    type: TreatmentCardType;
+    /** The card's last four digits, when available. */
+    last_4?: string;
+    /** The card's expiry, in the format your integration agreed with AsterMD. */
+    exp: string;
+}
+/** The settled payment method for {@link Treatments.sync}. */
+interface TreatmentPaymentOptions {
+    /** How the order was paid for. */
+    type: TreatmentPaymentType;
+    /** Whether the payment was a pre-authorisation rather than a capture. */
+    preAuth: boolean;
+    /** Whether the pre-authorisation was a quality-assurance hold rather than a real charge. */
+    preAuthQa?: boolean;
+    /** The pre-authorised amount, when `preAuth` is true. */
+    preAuthAmount?: number;
+    /** Card details, when the payment method is card-based. */
+    card?: TreatmentCardOptions;
+}
+/** The identity check nested inside {@link TreatmentVerificationOptions.id}. */
+interface TreatmentIdVerificationOptions {
+    /** Whether the check passed. */
+    verified: boolean;
+    /** Which identity check was performed. */
+    method: TreatmentIdVerificationMethod;
+    /** The value that was checked, e.g. the SSN or date of birth submitted. */
+    value: string;
+}
+/** Identity/contact verification already performed by the caller, for {@link Treatments.sync}. */
+interface TreatmentVerificationOptions {
+    /** Whether the patient's email was verified. */
+    email: boolean;
+    /** Whether the patient's address was verified. */
+    address: boolean;
+    /** The identity check performed, if any. */
+    id?: TreatmentIdVerificationOptions;
+}
 /** Options for {@link Treatments.sync}. */
 interface TreatmentSyncOptions {
     /** The session the orders belong to. */
     session: string;
     /** Order identifiers from your own commerce system. */
     orderIds: string[];
+    /**
+     * The visitor's user agent, forwarded as the required `User-Agent` header.
+     * Since the SDK runs server-to-server, only the consuming application knows
+     * the real value - read it from the incoming request and pass it here.
+     */
+    userAgent: string;
     /** Campaign attribution to record alongside the orders. */
     utmSource?: string;
-    /** The visitor's user agent, forwarded as the `User-Agent` header. */
-    userAgent?: string;
+    /** The settled payment method for the order. */
+    payment?: TreatmentPaymentOptions;
+    /** Identity/contact verification already performed by the caller. */
+    verification?: TreatmentVerificationOptions;
 }
 /**
  * Treatments - the order, once money has actually changed hands.
@@ -1991,10 +2148,15 @@ declare class Treatments extends AbstractResource {
      * The alternative to {@link Treatments.create} for flows where checkout happens
      * outside your storefront: hand over the session and your order identifiers and
      * the server creates the treatments and attributes them to that session's
-     * journey. Several orders can be reconciled in one call.
+     * journey. Several orders can be reconciled in one call. `payment`, when
+     * supplied, carries the settled payment method for the order; `verification`,
+     * when supplied, records identity/contact verification already performed by
+     * the caller.
      *
-     * @param options The session, your order identifiers, and optional attribution.
+     * @param options The session, your order identifiers, the required user agent,
+     *   and optional attribution, payment, and verification details.
      * @returns The created treatments.
+     * @throws {TypeError} If `userAgent` is missing or empty.
      * @throws {ValidationError} If the session or an order identifier is rejected.
      * @throws {NotFoundError} If the session does not exist.
      * @throws {ApiError} On any other non-2xx status.
@@ -2164,7 +2326,7 @@ interface AsterMDClientOptions {
     debugRetentionDays?: number;
 }
 /**
- * The SDK's entry point: one client, seventeen resources.
+ * The SDK's entry point: one client, eighteen resources.
  *
  * Construct it once at application start and share it. It holds the credentials,
  * caches the bearer token, and owns the single transport every resource dispatches
@@ -2245,6 +2407,8 @@ declare class AsterMDClient {
     opportunities(): Opportunities;
     /** Treatments - the order, once payment has settled. */
     treatments(): Treatments;
+    /** Coupons - checking a code the shopper typed against their cart. */
+    coupons(): Coupons;
     /** Doctors' networks - handing a case to the clinicians who review it. */
     doctorsNetworks(): DoctorsNetworks;
     /** Channels - the storefront's own server-side configuration. */
@@ -2772,7 +2936,7 @@ declare class ChannelDetail {
  *
  * The AES key is **never** stored in this SDK. Supply it at every call site from
  * your own configuration - an environment variable, a secrets manager - and keep
- * it in step with whichever service mints the tokens. Contact info@astermd.com to
+ * it in step with whichever service mints the tokens. Contact hello@astermd.com to
  * obtain or rotate the key for your organisation.
  *
  * **On integrity:** AES-CBC provides confidentiality but not authentication, so a
@@ -2822,4 +2986,5 @@ declare class QueryParamCipher {
     static encrypt(params: Record<string, string>, keyHex: string): string;
 }
 
-export { AbstractResource, ApiError, AsterMDClient, type AsterMDClientOptions, AsterMDError, AuthenticationError, type CartWriteOptions, Carts, Categories, ChannelDetail, type ChannelDetailView, type ChannelPaymentProcessor, type ChannelProduct, type ChannelProductMapping, type ChannelProductSingle, type ChannelProductVariant, Channels, CheckoutEvent, type CheckoutEventUpdateOptions, CheckoutEvents, Config, type ConfigOptions, DailyFileLogSink, type DailyFileLogSinkOptions, type DebugSink, DoctorsNetworks, Event, FetchHttpClient, FileTokenStore, FileUpload, type FileUploadFromContentsOptions, type FileUploadFromPathOptions, type FinishMultipartOptions, Geo, type HttpClient, IdentityCheck, InMemoryTokenStore, type InitiateMultipartOptions, IntakeSubmissions, type IntakeViewOptions, type IntakeWriteOptions, LabTests, Medications, type MultipartPart, NotFoundError, Opportunities, Patients, Products, QueryParamCipher, RateLimitError, Response$1 as Response, type ResponseOptions, type SessionCreateOptions, type SessionViewOptions, Sessions, Shippings, type SubmitHealthInformationOptions, Teleforms, Token, type TokenStore, TransportError, type TreatmentSyncOptions, Treatments, type UploadFileOptions, type UploadLargeFileOptions, type UploadPartOptions, ValidationError, Verification };
+export { AbstractResource, ApiError, AsterMDClient, AsterMDError, AuthenticationError, Carts, Categories, ChannelDetail, Channels, CheckoutEvent, CheckoutEvents, Config, Coupons, DailyFileLogSink, DoctorsNetworks, Event, FetchHttpClient, FileTokenStore, FileUpload, Geo, IdentityCheck, InMemoryTokenStore, IntakeSubmissions, LabTests, Medications, NotFoundError, Opportunities, Patients, Products, QueryParamCipher, RateLimitError, Response$1 as Response, Sessions, Shippings, Teleforms, Token, TransportError, Treatments, ValidationError, Verification };
+export type { AsterMDClientOptions, CartWriteOptions, ChannelDetailView, ChannelPaymentProcessor, ChannelProduct, ChannelProductMapping, ChannelProductSingle, ChannelProductVariant, CheckoutEventUpdateOptions, ConfigOptions, CouponCartItem, CouponValidateOptions, DailyFileLogSinkOptions, DebugSink, FileUploadFromContentsOptions, FileUploadFromPathOptions, FinishMultipartOptions, HttpClient, InitiateMultipartOptions, IntakeViewOptions, IntakeWriteOptions, MultipartPart, ResponseOptions, SessionCreateOptions, SessionViewOptions, SubmitHealthInformationOptions, TokenStore, TreatmentCardOptions, TreatmentCardType, TreatmentIdVerificationMethod, TreatmentIdVerificationOptions, TreatmentPaymentOptions, TreatmentPaymentType, TreatmentSyncOptions, TreatmentVerificationOptions, UploadFileOptions, UploadLargeFileOptions, UploadPartOptions };

package/dist/index.d.ts

@@ -561,7 +561,7 @@ interface TransportOptions {
  * building, body serialisation, dispatch through the {@link HttpClient} seam,
  * envelope decoding, and the mapping from HTTP status to error class. Resources
  * never see a `Request`, a `Response`, or a line of JSON - that separation is
- * what keeps seventeen resource classes trivial and testable.
+ * what keeps eighteen resource classes trivial and testable.
  *
  * The 401-retry protocol is built in. On a 401 the transport calls
  * `onUnauthorized` once, which in the production wiring refreshes the token, and
@@ -609,7 +609,7 @@ declare class Transport {
  * Resource classes extend this and call `this.transport.send()` to dispatch every
  * outbound request. A resource never builds a request, touches a header, or
  * decodes JSON - all of that belongs to `Transport` alone. That is what keeps
- * seventeen resource classes small enough to read at a glance and testable
+ * eighteen resource classes small enough to read at a glance and testable
  * without a network.
  */
 declare abstract class AbstractResource {
@@ -626,9 +626,10 @@ interface CartWriteOptions {
     /** The session the cart belongs to. */
     session: string;
     /**
-     * The cart's full contents. Each entry identifies a product and quantity, and
-     * a variant where the product has them. This is the complete list, not a
-     * delta - see the API reference in your AsterMD dashboard for the fields.
+     * The cart's full contents. Each entry requires `product_id`, `name`, and
+     * `qty`, plus an optional `variant_id` when the product has variants. This is
+     * the complete list, not a delta - see the API reference in your AsterMD
+     * dashboard for the fields.
      */
     items: Record<string, unknown>[];
 }
@@ -870,7 +871,13 @@ declare class CheckoutEvents extends AbstractResource {
      * Send one call per state the visitor reaches: an upsell offered, then accepted
      * or declined, then the order placed or declined. The payload carries whatever
      * context that state needs, but it can never override `event` - the state
-     * recorded is always the one you passed explicitly.
+     * recorded is always the one you passed explicitly. For an `OrderPlaced` event,
+     * `data` may include an optional `payment` object describing the settled
+     * payment method: `type` (`paypal` | `apple_pay` | `gpay` | `credit_card` |
+     * `pre_paid`), `pre_auth` (boolean), `pre_auth_qa` and `pre_auth_amount`
+     * (optional), and an optional `card` object (`type` - `amex` | `visa` |
+     * `mastercard` | `discover` | `diners_club` | `jcb`, optional `bin`, required
+     * `exp`).
      *
      * @param options The session, the new state, and any context for it.
      * @returns The updated checkout-event record.
@@ -882,6 +889,97 @@ declare class CheckoutEvents extends AbstractResource {
     update<T = Record<string, unknown>>(options: CheckoutEventUpdateOptions): Promise<Response$1<T>>;
 }
 
+/**
+ * One cart line for {@link Coupons.validate}: either a subscription plan, or a
+ * product with its variant - never both. Never an amount; AsterMD prices the
+ * line itself.
+ */
+type CouponCartItem = {
+    /** The subscription plan the line is sold on. Priced at the plan's first payment. */
+    plan_id: string;
+    /** Units of the line, an integer from 1 to 999. */
+    quantity: number;
+} | {
+    /** The AsterMD product. */
+    product_id: string;
+    /** The product's variant; the product id again for a product without variants. */
+    variant_id: string;
+    /** Units of the line, an integer from 1 to 999. */
+    quantity: number;
+};
+/** Options for {@link Coupons.validate}. */
+interface CouponValidateOptions {
+    /** The code the shopper typed. Not case sensitive. */
+    code: string;
+    /** The cart, main item first. Between 1 and 6 lines. */
+    items: CouponCartItem[];
+    /**
+     * The AsterMD patient id of the shopper, when already a patient. Sent only
+     * when provided. When several of `patientId`, `email` and `opportunityId` are
+     * given, the server uses them in that order.
+     */
+    patientId?: string;
+    /** The shopper's email; used when `patientId` is not sent. Sent only when provided. */
+    email?: string;
+    /**
+     * The shopper's opportunity id; used when neither `patientId` nor `email` is
+     * sent. Sent only when provided.
+     */
+    opportunityId?: string;
+}
+/**
+ * Coupons - checking a code the shopper typed against their cart.
+ *
+ * Use this resource just before creating the payment: it tells the storefront
+ * whether a coupon code can be used on the current cart, and what it takes off.
+ * AsterMD prices the cart itself from its catalogue, so callers send product,
+ * variant or plan identifiers and quantities - never amounts.
+ *
+ * The call applies to a channel whose payment provider is a storefront gateway.
+ * Nothing is counted against the coupon by a check; redemption is recorded later,
+ * when the order is synced.
+ *
+ * ```ts
+ * const { discount_cents, amount_cents } = (
+ *   await client.coupons().validate<{ discount_cents: number; amount_cents: number }>({
+ *     code: 'WELCOME20',
+ *     items: [{ plan_id: planId, quantity: 1 }],
+ *     email: 'jane.doe@example.com',
+ *   })
+ * ).data();
+ * ```
+ */
+declare class Coupons extends AbstractResource {
+    /**
+     * @param transport The shared transport.
+     */
+    constructor(transport: Transport);
+    /**
+     * Checks a coupon code against a cart without redeeming it.
+     *
+     * Call this when the shopper applies a code at checkout, before the payment is
+     * created. The server validates the coupon's status, validity window, patient,
+     * products, budget, scope and redemption limits, and prices the cart. The check
+     * has no side effects. Inspect `data()` on the response for the coupon terms,
+     * the price before and after the discount, and the discounted lines. A shopper
+     * who is not a patient yet only fits a coupon open to anyone.
+     *
+     * @param options The code, the cart, and optionally who the shopper is
+     *   (`patientId`, `email` or `opportunityId`). Each optional identifier is sent
+     *   only when provided.
+     * @returns The coupon check; `data()` holds `coupon_id`, `name`,
+     *   `discount_type`, `value`, `tiers`, `default_scope`, `gross_amount_cents`,
+     *   `discount_cents`, `amount_cents`, `currency` and the discounted `items`.
+     * @throws {NotFoundError} If no coupon exists with this code.
+     * @throws {ValidationError} If the coupon cannot be used on this cart, or the
+     *   cart cannot be priced.
+     * @throws {AuthenticationError} If the credentials are refused.
+     * @throws {ApiError} On any other non-2xx status.
+     * @throws {TransportError} If the request never completed.
+     */
+    validate<T = Record<string, unknown>>(options: CouponValidateOptions): Promise<Response$1<T>>;
+}
+
 /**
  * Doctors' networks - handing a case to the clinicians who will review it.
  *
@@ -1535,7 +1633,7 @@ interface SubmitHealthInformationOptions {
  *
  * Handling this data does not by itself make your application HIPAA compliant -
  * that depends on your own infrastructure, policies, and agreements. Contact
- * info@astermd.com regarding a Business Associate Agreement.
+ * hello@astermd.com regarding a Business Associate Agreement.
  */
 declare class Patients extends AbstractResource {
     /**
@@ -1698,7 +1796,11 @@ interface SessionCreateOptions {
     /**
      * Attribution and context to record against the session - UTM parameters,
      * referrer, landing page. Forwarded unmodified; see the API reference in your
-     * AsterMD dashboard for the recognised keys.
+     * AsterMD dashboard for the recognised keys. May include an optional
+     * `verification` object recording identity/contact verification already
+     * performed by the caller - every field inside it is optional too: `email`
+     * (boolean), `address` (boolean), and `id` (`verified` boolean, `method` -
+     * `ssn` | `dob` | `cross_check` | `document_upload`, `value` string).
      */
     data?: Record<string, unknown>;
     /** The visitor's user agent, forwarded as the `User-Agent` header. */
@@ -1786,7 +1888,8 @@ declare class Sessions extends AbstractResource {
      *
      * @param session The session identifier to update.
      * @param data Fields to record. Forwarded unmodified; see the API reference in
-     *   your AsterMD dashboard for the recognised keys.
+     *   your AsterMD dashboard for the recognised keys. Accepts the same optional
+     *   `verification` object documented on {@link Sessions.create}.
      * @returns The updated session.
      * @throws {NotFoundError} If the session does not exist.
      * @throws {ValidationError} If the payload is rejected.
@@ -1903,16 +2006,70 @@ declare class Teleforms extends AbstractResource {
     view<T = Record<string, unknown>>(id: string): Promise<Response$1<T>>;
 }
 
+/** The card network for {@link TreatmentCardOptions.type}. */
+type TreatmentCardType = 'amex' | 'visa' | 'mastercard' | 'discover' | 'diners_club' | 'jcb';
+/** The settled payment method for {@link TreatmentPaymentOptions.type}. */
+type TreatmentPaymentType = 'paypal' | 'apple_pay' | 'gpay' | 'credit_card' | 'pre_paid';
+/** The identity check performed for {@link TreatmentIdVerificationOptions.method}. */
+type TreatmentIdVerificationMethod = 'ssn' | 'dob' | 'cross_check' | 'document_upload';
+/** Card details nested inside {@link TreatmentPaymentOptions.card}. */
+interface TreatmentCardOptions {
+    /** The card network. */
+    type: TreatmentCardType;
+    /** The card's last four digits, when available. */
+    last_4?: string;
+    /** The card's expiry, in the format your integration agreed with AsterMD. */
+    exp: string;
+}
+/** The settled payment method for {@link Treatments.sync}. */
+interface TreatmentPaymentOptions {
+    /** How the order was paid for. */
+    type: TreatmentPaymentType;
+    /** Whether the payment was a pre-authorisation rather than a capture. */
+    preAuth: boolean;
+    /** Whether the pre-authorisation was a quality-assurance hold rather than a real charge. */
+    preAuthQa?: boolean;
+    /** The pre-authorised amount, when `preAuth` is true. */
+    preAuthAmount?: number;
+    /** Card details, when the payment method is card-based. */
+    card?: TreatmentCardOptions;
+}
+/** The identity check nested inside {@link TreatmentVerificationOptions.id}. */
+interface TreatmentIdVerificationOptions {
+    /** Whether the check passed. */
+    verified: boolean;
+    /** Which identity check was performed. */
+    method: TreatmentIdVerificationMethod;
+    /** The value that was checked, e.g. the SSN or date of birth submitted. */
+    value: string;
+}
+/** Identity/contact verification already performed by the caller, for {@link Treatments.sync}. */
+interface TreatmentVerificationOptions {
+    /** Whether the patient's email was verified. */
+    email: boolean;
+    /** Whether the patient's address was verified. */
+    address: boolean;
+    /** The identity check performed, if any. */
+    id?: TreatmentIdVerificationOptions;
+}
 /** Options for {@link Treatments.sync}. */
 interface TreatmentSyncOptions {
     /** The session the orders belong to. */
     session: string;
     /** Order identifiers from your own commerce system. */
     orderIds: string[];
+    /**
+     * The visitor's user agent, forwarded as the required `User-Agent` header.
+     * Since the SDK runs server-to-server, only the consuming application knows
+     * the real value - read it from the incoming request and pass it here.
+     */
+    userAgent: string;
     /** Campaign attribution to record alongside the orders. */
     utmSource?: string;
-    /** The visitor's user agent, forwarded as the `User-Agent` header. */
-    userAgent?: string;
+    /** The settled payment method for the order. */
+    payment?: TreatmentPaymentOptions;
+    /** Identity/contact verification already performed by the caller. */
+    verification?: TreatmentVerificationOptions;
 }
 /**
  * Treatments - the order, once money has actually changed hands.
@@ -1991,10 +2148,15 @@ declare class Treatments extends AbstractResource {
      * The alternative to {@link Treatments.create} for flows where checkout happens
      * outside your storefront: hand over the session and your order identifiers and
      * the server creates the treatments and attributes them to that session's
-     * journey. Several orders can be reconciled in one call.
+     * journey. Several orders can be reconciled in one call. `payment`, when
+     * supplied, carries the settled payment method for the order; `verification`,
+     * when supplied, records identity/contact verification already performed by
+     * the caller.
      *
-     * @param options The session, your order identifiers, and optional attribution.
+     * @param options The session, your order identifiers, the required user agent,
+     *   and optional attribution, payment, and verification details.
      * @returns The created treatments.
+     * @throws {TypeError} If `userAgent` is missing or empty.
      * @throws {ValidationError} If the session or an order identifier is rejected.
      * @throws {NotFoundError} If the session does not exist.
      * @throws {ApiError} On any other non-2xx status.
@@ -2164,7 +2326,7 @@ interface AsterMDClientOptions {
     debugRetentionDays?: number;
 }
 /**
- * The SDK's entry point: one client, seventeen resources.
+ * The SDK's entry point: one client, eighteen resources.
  *
  * Construct it once at application start and share it. It holds the credentials,
  * caches the bearer token, and owns the single transport every resource dispatches
@@ -2245,6 +2407,8 @@ declare class AsterMDClient {
     opportunities(): Opportunities;
     /** Treatments - the order, once payment has settled. */
     treatments(): Treatments;
+    /** Coupons - checking a code the shopper typed against their cart. */
+    coupons(): Coupons;
     /** Doctors' networks - handing a case to the clinicians who review it. */
     doctorsNetworks(): DoctorsNetworks;
     /** Channels - the storefront's own server-side configuration. */
@@ -2772,7 +2936,7 @@ declare class ChannelDetail {
  *
  * The AES key is **never** stored in this SDK. Supply it at every call site from
  * your own configuration - an environment variable, a secrets manager - and keep
- * it in step with whichever service mints the tokens. Contact info@astermd.com to
+ * it in step with whichever service mints the tokens. Contact hello@astermd.com to
  * obtain or rotate the key for your organisation.
  *
  * **On integrity:** AES-CBC provides confidentiality but not authentication, so a
@@ -2822,4 +2986,5 @@ declare class QueryParamCipher {
     static encrypt(params: Record<string, string>, keyHex: string): string;
 }
 
-export { AbstractResource, ApiError, AsterMDClient, type AsterMDClientOptions, AsterMDError, AuthenticationError, type CartWriteOptions, Carts, Categories, ChannelDetail, type ChannelDetailView, type ChannelPaymentProcessor, type ChannelProduct, type ChannelProductMapping, type ChannelProductSingle, type ChannelProductVariant, Channels, CheckoutEvent, type CheckoutEventUpdateOptions, CheckoutEvents, Config, type ConfigOptions, DailyFileLogSink, type DailyFileLogSinkOptions, type DebugSink, DoctorsNetworks, Event, FetchHttpClient, FileTokenStore, FileUpload, type FileUploadFromContentsOptions, type FileUploadFromPathOptions, type FinishMultipartOptions, Geo, type HttpClient, IdentityCheck, InMemoryTokenStore, type InitiateMultipartOptions, IntakeSubmissions, type IntakeViewOptions, type IntakeWriteOptions, LabTests, Medications, type MultipartPart, NotFoundError, Opportunities, Patients, Products, QueryParamCipher, RateLimitError, Response$1 as Response, type ResponseOptions, type SessionCreateOptions, type SessionViewOptions, Sessions, Shippings, type SubmitHealthInformationOptions, Teleforms, Token, type TokenStore, TransportError, type TreatmentSyncOptions, Treatments, type UploadFileOptions, type UploadLargeFileOptions, type UploadPartOptions, ValidationError, Verification };
+export { AbstractResource, ApiError, AsterMDClient, AsterMDError, AuthenticationError, Carts, Categories, ChannelDetail, Channels, CheckoutEvent, CheckoutEvents, Config, Coupons, DailyFileLogSink, DoctorsNetworks, Event, FetchHttpClient, FileTokenStore, FileUpload, Geo, IdentityCheck, InMemoryTokenStore, IntakeSubmissions, LabTests, Medications, NotFoundError, Opportunities, Patients, Products, QueryParamCipher, RateLimitError, Response$1 as Response, Sessions, Shippings, Teleforms, Token, TransportError, Treatments, ValidationError, Verification };
+export type { AsterMDClientOptions, CartWriteOptions, ChannelDetailView, ChannelPaymentProcessor, ChannelProduct, ChannelProductMapping, ChannelProductSingle, ChannelProductVariant, CheckoutEventUpdateOptions, ConfigOptions, CouponCartItem, CouponValidateOptions, DailyFileLogSinkOptions, DebugSink, FileUploadFromContentsOptions, FileUploadFromPathOptions, FinishMultipartOptions, HttpClient, InitiateMultipartOptions, IntakeViewOptions, IntakeWriteOptions, MultipartPart, ResponseOptions, SessionCreateOptions, SessionViewOptions, SubmitHealthInformationOptions, TokenStore, TreatmentCardOptions, TreatmentCardType, TreatmentIdVerificationMethod, TreatmentIdVerificationOptions, TreatmentPaymentOptions, TreatmentPaymentType, TreatmentSyncOptions, TreatmentVerificationOptions, UploadFileOptions, UploadLargeFileOptions, UploadPartOptions };