@delopay/sdk 0.127.0 → 0.129.0

package/dist/index.cjs

@@ -3373,6 +3373,19 @@ var Users = class {
   async acceptInvitation(params) {
     return this.request("POST", "/user/employees/invite/accept", { body: params });
   }
+  /**
+   * Accept invitations before a session exists.
+   *
+   * Sign-in issues a `token_type: "accept_invite"` step token instead of a
+   * session when the caller has no active role yet — every role is still an
+   * unaccepted invitation. With that token set via `setJwtToken`, pass the
+   * entities from `listInvitations` here; the response is the next step of
+   * the sign-in flow (`user_info` for the session, or `force_set_password`
+   * first). Rejected when none of the entities carries a pending invitation.
+   */
+  async acceptInvitationsPreAuth(params) {
+    return this.request("POST", "/user/employees/invite/accept/pre-auth", { body: params });
+  }
   /**
    * Accept an invitation via the email-link flow.
    *
@@ -3467,7 +3480,12 @@ var Users = class {
   async transferKey(params) {
     return this.request("POST", "/user/key/transfer", { body: params });
   }
-  /** List invitations. `GET /user/list/invitation` */
+  /**
+   * Invitations still waiting on the caller. `GET /user/list/invitation`
+   *
+   * Accepts an `accept_invite` step token as well as a session JWT, so it
+   * can feed `acceptInvitationsPreAuth` during sign-in.
+   */
   async listInvitations() {
     return this.request("GET", "/user/list/invitation");
   }
@@ -7189,6 +7207,30 @@ var CheckoutSession = class {
       headers: this.pkHeaders(options?.headers)
     });
   }
+  /**
+   * Mint the processor-side session a browser SDK completes — the PayPal
+   * order that PayPal's buttons or Card Fields attach the buyer's choice to.
+   * The client secret is attached automatically.
+   *
+   * For PayPal Card Fields (be#1387) pass `payment_method: 'card'` and the
+   * `merchant_connector_id` the checkout was rendered with; the order id comes
+   * back in `next_action.next_action_data.order_id` and is what the SDK's
+   * `createOrder` returns. The confirm that captures it sends the same order
+   * and account as `payment_method_data.card_reference`.
+   *
+   * `POST /payments/{paymentId}/post-session-tokens` (publishable key)
+   */
+  async postSessionTokens(params, options) {
+    return this.client.request(
+      "POST",
+      `/payments/${encodeURIComponent(this.paymentId)}/post-session-tokens`,
+      {
+        body: { ...params, client_secret: this.requireClientSecret() },
+        ...options,
+        headers: this.pkHeaders(options?.headers)
+      }
+    );
+  }
   /**
    * Abandon the attempt the buyer left open on a connector's hosted page
    * (the payment sits in `requires_customer_action`) and open a fresh attempt