@delopay/sdk 0.112.0 → 0.113.0

package/dist/index.d.cts

@@ -6485,13 +6485,15 @@ interface CheckoutBrandingUpdate {
     payment_link_config?: BusinessPaymentLinkConfig | null;
 }
 /**
- * Response of `GET /shops/{merchant_id}/{shop_id}/checkout-branding`.
+ * Response of both checkout-branding routes: the `GET` on
+ * `/shops/{merchant_id}/{shop_id}/checkout-branding`, and the `POST` echoing
+ * back what it persisted.
  *
  * Deliberately not a `ProfileResponse`: that carries `payment_response_hash_key`
  * — the webhook signing secret — plus the card-vault and authentication
  * configuration, and a role that may only restyle a checkout has no business
- * reading any of it. This carries what the branding editor renders and nothing
- * else.
+ * reading any of it, whether it asked to load the checkout or has just saved
+ * it. This carries what the branding editor renders and nothing else.
  */
 interface CheckoutBrandingResponse {
     /** The shop (business profile) this branding belongs to. */
@@ -8972,9 +8974,12 @@ declare class Shops {
      * @param merchantId - The merchant account ID.
      * @param shopId - The shop (business profile) ID to restyle.
      * @param params - The new `payment_link_config` blob (full replacement).
-     * @returns The updated business profile.
+     * @returns The saved branding — the same shape `retrieveCheckoutBranding`
+     * returns, not the whole shop. A role whose only power is restyling a
+     * checkout must not receive the webhook signing key or the card-vault
+     * configuration back from a save.
      */
-    updateCheckoutBranding(merchantId: string, shopId: string, params: CheckoutBrandingUpdate, options?: RequestExtras): Promise<ProfileResponse>;
+    updateCheckoutBranding(merchantId: string, shopId: string, params: CheckoutBrandingUpdate, options?: RequestExtras): Promise<CheckoutBrandingResponse>;
     /**
      * Read only the checkout appearance of a shop, so the role that may restyle a
      * checkout can load the checkout it may restyle.

package/dist/index.d.ts

@@ -6485,13 +6485,15 @@ interface CheckoutBrandingUpdate {
     payment_link_config?: BusinessPaymentLinkConfig | null;
 }
 /**
- * Response of `GET /shops/{merchant_id}/{shop_id}/checkout-branding`.
+ * Response of both checkout-branding routes: the `GET` on
+ * `/shops/{merchant_id}/{shop_id}/checkout-branding`, and the `POST` echoing
+ * back what it persisted.
  *
  * Deliberately not a `ProfileResponse`: that carries `payment_response_hash_key`
  * — the webhook signing secret — plus the card-vault and authentication
  * configuration, and a role that may only restyle a checkout has no business
- * reading any of it. This carries what the branding editor renders and nothing
- * else.
+ * reading any of it, whether it asked to load the checkout or has just saved
+ * it. This carries what the branding editor renders and nothing else.
  */
 interface CheckoutBrandingResponse {
     /** The shop (business profile) this branding belongs to. */
@@ -8972,9 +8974,12 @@ declare class Shops {
      * @param merchantId - The merchant account ID.
      * @param shopId - The shop (business profile) ID to restyle.
      * @param params - The new `payment_link_config` blob (full replacement).
-     * @returns The updated business profile.
+     * @returns The saved branding — the same shape `retrieveCheckoutBranding`
+     * returns, not the whole shop. A role whose only power is restyling a
+     * checkout must not receive the webhook signing key or the card-vault
+     * configuration back from a save.
      */
-    updateCheckoutBranding(merchantId: string, shopId: string, params: CheckoutBrandingUpdate, options?: RequestExtras): Promise<ProfileResponse>;
+    updateCheckoutBranding(merchantId: string, shopId: string, params: CheckoutBrandingUpdate, options?: RequestExtras): Promise<CheckoutBrandingResponse>;
     /**
      * Read only the checkout appearance of a shop, so the role that may restyle a
      * checkout can load the checkout it may restyle.

package/dist/index.js

@@ -110,7 +110,7 @@ import {
   validatePanes,
   verticalGapValue,
   visibleCustomFields
-} from "./chunk-3O5MU6FP.js";
+} from "./chunk-NY5O6S5X.js";
 export {
   ALL_CUSTOM_FIELD_CONDITION_SOURCES,
   ALL_CUSTOM_FIELD_OPERATORS,

package/dist/internal.cjs

@@ -2978,7 +2978,10 @@ var Shops = class {
    * @param merchantId - The merchant account ID.
    * @param shopId - The shop (business profile) ID to restyle.
    * @param params - The new `payment_link_config` blob (full replacement).
-   * @returns The updated business profile.
+   * @returns The saved branding — the same shape `retrieveCheckoutBranding`
+   * returns, not the whole shop. A role whose only power is restyling a
+   * checkout must not receive the webhook signing key or the card-vault
+   * configuration back from a save.
    */
   async updateCheckoutBranding(merchantId, shopId, params, options) {
     return this.request(
@@ -7132,6 +7135,13 @@ var AdminPortal = class {
    * against signup policy + JWT blacklist). `reset_2fa` clears TOTP state
    * so the user re-enrolls on next login. `is_active` supports both
    * directions: false soft-disables, true reactivates a soft-disabled user.
+   *
+   * Throws a `400` with `code === 'UR_66'` when the change would leave a
+   * merchant with no administrator — `is_active: false` or `is_verified:
+   * false` on, or a `role_id` demoting, the only active user whose role can
+   * manage that merchant's users. Nothing is written. `error.data` carries a
+   * {@link LastAdministratorRefusal} naming the merchant and which change was
+   * refused; render that rather than the generic message.
    */
   async updateUser(userId, body) {
     return this.request("PATCH", `/admin-portal/users/${encodeURIComponent(userId)}`, { body });
@@ -7140,6 +7150,9 @@ var AdminPortal = class {
    * Soft-delete a user globally: deactivates the row, blacklists existing
    * JWTs, and wipes credentials. Distinct from `deleteUserRole`, which
    * removes a single role binding while leaving the user signed-in elsewhere.
+   *
+   * Throws the same `UR_66` as {@link updateUser} when the user is the last
+   * administrator of any merchant they belong to, with `route: 'delete'`.
    */
   async deleteUser(userId) {
     return this.request("DELETE", `/admin-portal/users/${encodeURIComponent(userId)}`);