@delopay/sdk 0.145.0 → 0.147.0

package/dist/index.cjs

@@ -2063,6 +2063,62 @@ var Payments = class {
       options
     );
   }
+  /**
+   * Open a playback of the payment's stored checkout recording
+   * (delopay-backend#1501, delopay-control-center#779): the audited act of
+   * watching. Answers the manifest — which slices exist, how long the
+   * recording runs, whether a pause in it is expected — and the
+   * `playback_id` every {@link Payments.replaySlice} call carries.
+   *
+   * A payment that was never recorded answers `200` with `slices: []` and
+   * `session_id: null` — the ordinary case for every payment made before the
+   * checkout started recording — not a `404`. `404` means the payment does not
+   * exist. Fetch the slices in `sequence` order; a number missing from the
+   * list is a gap, not the end.
+   *
+   * A `POST`, because it writes one audit row: the SDK retries `GET` on its
+   * own, and a lost response must not open three playbacks. Calling this
+   * again deliberately opens another playback.
+   *
+   * Requires the `PaymentReplay` permission on a dashboard session in addition
+   * to payment read access.
+   *
+   * `POST /payments/{paymentId}/replay/playback`
+   *
+   * @param paymentId - The payment intent ID.
+   * @param options - Optional per-call extras: extra `headers`, a `timeout`
+   *   override, and an `AbortSignal`.
+   */
+  async openReplayPlayback(paymentId, options) {
+    return this.request(
+      "POST",
+      `/payments/${encodeURIComponent(paymentId)}/replay/playback`,
+      options
+    );
+  }
+  /**
+   * One slice of the payment's stored checkout recording, read against an
+   * open playback: the rrweb events the checkout recorded under that number.
+   * `playbackId` and the numbers come from {@link Payments.openReplayPlayback};
+   * a `playbackId` that names no playback of this payment opened by this
+   * caller, and a number the manifest does not list, both answer `404`.
+   * Not audited per slice — the playback was.
+   *
+   * `GET /payments/{paymentId}/replay/playback/{playbackId}/slices/{sequence}`
+   *
+   * @param paymentId - The payment intent ID.
+   * @param playbackId - The playback, from `openReplayPlayback`.
+   * @param sequence - The slice number, from the playback's manifest.
+   * @param options - Optional per-call extras: extra `headers`, a `timeout`
+   *   override, and an `AbortSignal`.
+   */
+  async replaySlice(paymentId, playbackId, sequence, options) {
+    return this.request(
+      "GET",
+      `/payments/${encodeURIComponent(paymentId)}/replay/playback/${encodeURIComponent(playbackId)}/slices/${encodeURIComponent(String(sequence))}`,
+      options
+    );
+  }
   /**
    * Soft-delete a payment. Only payments whose status is in the merchant's
    * delete policy (see {@link Payments.getDeletePolicy}) can be deleted;
@@ -7601,6 +7657,42 @@ var CheckoutSession = class {
     } catch {
     }
   }
+  /**
+   * Store one slice of the buyer's checkout recording on our own side
+   * (delopay-backend#1501, delopay-control-center#779). Called by the hosted
+   * checkout as the buyer works through the page; the client secret is
+   * attached automatically.
+   *
+   * **Not telemetry semantics, on purpose.** Unlike
+   * {@link CheckoutSession.recordEvent}, this rejects with a `DelopayError`
+   * like every other payment call, because the recorder has to tell the
+   * answers apart: a `400` with code `IR_16` means the backend will not take
+   * this recording (recording is off on that deployment, the recording is
+   * full, the payment is already recording a different session, or this
+   * number is stored with different content) and the recorder must stop; any
+   * other `400` is the slice itself being refused; a transport failure may be
+   * retried with the **same** bytes under the **same** number, which the
+   * backend answers with `duplicate: true`.
+   *
+   * Pass `keepalive: true` for the last slice of a page that is navigating
+   * away (a redirect rail); browsers refuse keepalive bodies over ~64 KiB, so
+   * only a small final slice should carry it.
+   *
+   * `POST /payments/{paymentId}/replay/slice` (publishable key)
+   */
+  async storeReplaySlice(params, options) {
+    const { keepalive, ...extras } = options ?? {};
+    return this.client.request(
+      "POST",
+      `/payments/${encodeURIComponent(this.paymentId)}/replay/slice`,
+      {
+        body: { ...params, client_secret: this.requireClientSecret() },
+        ...keepalive !== void 0 ? { keepalive } : {},
+        ...extras,
+        headers: this.pkHeaders(extras.headers)
+      }
+    );
+  }
   /**
    * Confirm a subscription (PayPal approval rail). The client secret is
    * attached automatically; the shop's profile id travels as the