@delopay/sdk 0.112.0 → 0.115.0

package/dist/index.cjs

@@ -2524,6 +2524,19 @@ var Routing = class {
   async getDefaultProfile() {
     return this.request("GET", "/routing/default/profile");
   }
+  /**
+   * Retrieve one profile's default config. `GET /routing/default/profile/{profileId}`
+   *
+   * The narrow counterpart of `getDefaultProfile()`: that one returns every
+   * profile of the merchant and needs merchant-level routing read, so a
+   * profile-scoped (shop) role could write its own default through
+   * `updateDefaultProfile()` but never read it back. This read is gated on
+   * profile-level routing read and pinned to the caller's own profile — a shop
+   * role asking for a sibling profile is refused.
+   */
+  async getDefaultForProfile(profileId) {
+    return this.request("GET", `/routing/default/profile/${encodeURIComponent(profileId)}`);
+  }
   /** Update default config for a profile. `POST /routing/default/profile/{profileId}` */
   async updateDefaultProfile(profileId, params) {
     return this.request("POST", `/routing/default/profile/${encodeURIComponent(profileId)}`, {
@@ -2966,7 +2979,10 @@ var Shops = class {
    * @param merchantId - The merchant account ID.
    * @param shopId - The shop (business profile) ID to restyle.
    * @param params - The new `payment_link_config` blob (full replacement).
-   * @returns The updated business profile.
+   * @returns The saved branding — the same shape `retrieveCheckoutBranding`
+   * returns, not the whole shop. A role whose only power is restyling a
+   * checkout must not receive the webhook signing key or the card-vault
+   * configuration back from a save.
    */
   async updateCheckoutBranding(merchantId, shopId, params, options) {
     return this.request(