@delopay/sdk 0.146.0 → 0.149.0

package/dist/index.cjs

@@ -1348,7 +1348,7 @@ var Events = class {
   }
   /**
    * Fire an outgoing webhook event by hand for one object.
-   * `POST /events/{merchant_id}/trigger` (be#318)
+   * `POST /events/{merchant_id}/trigger`
    *
    * Not a replay — see {@link EventManualTriggerRequest}. Needs the
    * `WebhookEventTrigger` permission, which is separate from the one that
@@ -1371,7 +1371,7 @@ var Events = class {
   }
   /**
    * Fire an outgoing webhook event by hand (profile-scoped).
-   * `POST /events/profile/trigger` (be#318)
+   * `POST /events/profile/trigger`
    *
    * The shop-user twin of {@link trigger}; the shop is taken from the auth
    * context, so `profile_id` on the body is ignored.
@@ -2063,6 +2063,61 @@ var Payments = class {
       options
     );
   }
+  /**
+   * Open a playback of the payment's stored checkout recording: the audited
+   * act of watching. Answers the manifest — which slices exist, how long the
+   * recording runs, whether a pause in it is expected — and the
+   * `playback_id` every {@link Payments.replaySlice} call carries.
+   *
+   * A payment that was never recorded answers `200` with `slices: []` and
+   * `session_id: null` — the ordinary case for every payment made before the
+   * checkout started recording — not a `404`. `404` means the payment does not
+   * exist. Fetch the slices in `sequence` order; a number missing from the
+   * list is a gap, not the end.
+   *
+   * A `POST`, because it writes one audit row: the SDK retries `GET` on its
+   * own, and a lost response must not open three playbacks. Calling this
+   * again deliberately opens another playback.
+   *
+   * Requires the `PaymentReplay` permission on a dashboard session in addition
+   * to payment read access.
+   *
+   * `POST /payments/{paymentId}/replay/playback`
+   *
+   * @param paymentId - The payment intent ID.
+   * @param options - Optional per-call extras: extra `headers`, a `timeout`
+   *   override, and an `AbortSignal`.
+   */
+  async openReplayPlayback(paymentId, options) {
+    return this.request(
+      "POST",
+      `/payments/${encodeURIComponent(paymentId)}/replay/playback`,
+      options
+    );
+  }
+  /**
+   * One slice of the payment's stored checkout recording, read against an
+   * open playback: the rrweb events the checkout recorded under that number.
+   * `playbackId` and the numbers come from {@link Payments.openReplayPlayback};
+   * a `playbackId` that names no playback of this payment opened by this
+   * caller, and a number the manifest does not list, both answer `404`.
+   * Not audited per slice — the playback was.
+   *
+   * `GET /payments/{paymentId}/replay/playback/{playbackId}/slices/{sequence}`
+   *
+   * @param paymentId - The payment intent ID.
+   * @param playbackId - The playback, from `openReplayPlayback`.
+   * @param sequence - The slice number, from the playback's manifest.
+   * @param options - Optional per-call extras: extra `headers`, a `timeout`
+   *   override, and an `AbortSignal`.
+   */
+  async replaySlice(paymentId, playbackId, sequence, options) {
+    return this.request(
+      "GET",
+      `/payments/${encodeURIComponent(paymentId)}/replay/playback/${encodeURIComponent(playbackId)}/slices/${encodeURIComponent(String(sequence))}`,
+      options
+    );
+  }
   /**
    * Soft-delete a payment. Only payments whose status is in the merchant's
    * delete policy (see {@link Payments.getDeletePolicy}) can be deleted;
@@ -4620,6 +4675,15 @@ var Audit = class {
 };
 
 // src/resources/settlement.ts
+function exportHeaders(options, accept) {
+  const headers = new Headers(options?.headers);
+  headers.set("Accept", accept);
+  const output = {};
+  headers.forEach((value, key) => {
+    output[key] = value;
+  });
+  return output;
+}
 var Settlement = class {
   constructor(request) {
     this.request = request;
@@ -4772,6 +4836,45 @@ var Settlement = class {
       { body: params, ...options }
     );
   }
+  /** Append one external transfer record. Send a stable idempotency_key for safe retries. */
+  async recordStatementPayout(statementId, params, options) {
+    return this.request(
+      "POST",
+      `/settlement/statements/${encodeURIComponent(statementId)}/payout`,
+      {
+        body: params,
+        ...options,
+        bodyIdempotencyKey: params.idempotency_key ?? null
+      }
+    );
+  }
+  /** Read individual transfer records, their signed total, and any overpayment. */
+  async listStatementPayouts(statementId, options) {
+    return this.request(
+      "GET",
+      `/settlement/statements/${encodeURIComponent(statementId)}/payouts`,
+      options
+    );
+  }
+  /** Record a transfer against a shop's month before its statement exists. */
+  async recordAdvance(params, options) {
+    return this.request("POST", "/settlement/advances", {
+      body: params,
+      ...options,
+      bodyIdempotencyKey: params.idempotency_key ?? null
+    });
+  }
+  async listAdvances(params, options) {
+    return this.request("GET", "/settlement/advances", {
+      query: {
+        profile_id: params.profile_id,
+        year: params.year,
+        month: params.month,
+        test_mode: params.test_mode
+      },
+      ...options
+    });
+  }
   /**
    * Export a statement as PDF. Returns the raw PDF bytes as a `Blob`, with
    * the same auth, retries and error handling as every other call — persist
@@ -4889,6 +4992,109 @@ var Settlement = class {
       options
     );
   }
+  /**
+   * Calculate a period in its transaction currency. Requires a host-level
+   * dashboard JWT and settlement read permission. Profile users and roles
+   * restricted to selected connector accounts cannot read this aggregate.
+   * Rates apply once to the period total. Unknown or estimated fees keep
+   * dependent amounts provisional. Native money values remain integer strings.
+   */
+  async previewNative(params, options) {
+    return this.request("POST", "/settlement/native/preview", { body: params, ...options });
+  }
+  /**
+   * Recalculate and freeze an immutable report version. Requires settlement
+   * edit permission. Explicitly allow provisional figures when source fees
+   * are incomplete. A report records a calculation and sends no money.
+   * Reuse the same idempotency key when retrying the same request.
+   */
+  async createNativeReport(params, options) {
+    return this.request("POST", "/settlement/native/reports", {
+      body: params,
+      ...options,
+      bodyIdempotencyKey: params.idempotency_key
+    });
+  }
+  async retrieveNativeReport(reportId, options) {
+    return this.request(
+      "GET",
+      `/settlement/native/reports/${encodeURIComponent(reportId)}`,
+      options
+    );
+  }
+  /** List report summaries without fetching every source row in each saved snapshot. */
+  async listNativeReports(params, options) {
+    return this.request("GET", "/settlement/native/reports", {
+      query: {
+        profile_id: params.profile_id,
+        currency: params.currency,
+        test_mode: params.test_mode,
+        limit: params.limit,
+        offset: params.offset
+      },
+      ...options
+    });
+  }
+  /**
+   * Record a transfer already made, under settlement write permission and
+   * the caller's payout limits. This method never sends money. Native minor
+   * units remain strings; negative records must name a same-scope reversal.
+   * These records belong to the native ledger, separate from monthly USD
+   * statement payouts and advances.
+   */
+  async recordNativePayout(params, options) {
+    return this.request("POST", "/settlement/native/payouts", {
+      body: params,
+      ...options,
+      bodyIdempotencyKey: params.idempotency_key
+    });
+  }
+  async listNativePayouts(params, options) {
+    return this.request("GET", "/settlement/native/payouts", {
+      query: {
+        profile_id: params.profile_id,
+        currency: params.currency,
+        test_mode: params.test_mode,
+        limit: params.limit,
+        offset: params.offset
+      },
+      ...options
+    });
+  }
+  /** Refresh a bounded page of provider fee evidence. Follow next_offset while has_more is true. */
+  async refreshNativeFees(params, options) {
+    return this.request("POST", "/settlement/native/fees/refresh", { body: params, ...options });
+  }
+  async downloadNativeReportPdf(reportId, params, options) {
+    return this.request("GET", `/settlement/native/reports/${encodeURIComponent(reportId)}/pdf`, {
+      query: { include_transactions: params?.include_transactions },
+      responseType: "blob",
+      ...options
+    });
+  }
+  /** Download the frozen source rows and calculation as CSV. */
+  async downloadNativeReportCsv(reportId, options) {
+    return this.request(
+      "GET",
+      `/settlement/native/reports/${encodeURIComponent(reportId)}/export`,
+      {
+        ...options,
+        headers: exportHeaders(options, "text/csv"),
+        responseType: "blob"
+      }
+    );
+  }
+  /** Export the frozen report as JSON, excluding host account-level costs. */
+  async exportNativeReportJson(reportId, options) {
+    return this.request(
+      "GET",
+      `/settlement/native/reports/${encodeURIComponent(reportId)}/export`,
+      {
+        ...options,
+        headers: exportHeaders(options, "application/json")
+      }
+    );
+  }
 };
 
 // src/resources/operationLimits.ts
@@ -5246,7 +5452,7 @@ var Delopay = class {
         url += `?${qs}`;
       }
     }
-    const headers = {
+    let headers = {
       ...this.jwtToken ? { Authorization: `Bearer ${this.jwtToken}` } : this.apiKey ? { "api-key": this.apiKey } : {},
       ...options?.headers
     };
@@ -5254,14 +5460,40 @@ var Delopay = class {
     if (options?.body && !isRawBody) {
       headers["Content-Type"] = "application/json";
     }
-    const idempotencyKey = findIdempotencyKey(headers)?.trim();
-    const isRetryable = method === "GET" || method === "DELETE" || idempotencyKey !== void 0 && idempotencyKey !== "";
     let serializedBody;
     if (isRawBody) {
       serializedBody = options?.body;
     } else if (options?.body) {
       serializedBody = JSON.stringify(options.body);
     }
+    let idempotencyKey = findIdempotencyKey(headers)?.trim();
+    if (options && Object.prototype.hasOwnProperty.call(options, "bodyIdempotencyKey")) {
+      const bodyKey = options?.bodyIdempotencyKey;
+      const serialized = !isRawBody && typeof serializedBody === "string" ? JSON.parse(serializedBody) : null;
+      const actualKey = serialized && typeof serialized === "object" && !Array.isArray(serialized) ? serialized.idempotency_key ?? null : null;
+      const suppliedHeaders = Object.keys(headers).filter(
+        (name) => name.toLowerCase() === "idempotency-key"
+      );
+      if (bodyKey !== null && typeof bodyKey !== "string" || actualKey !== bodyKey || suppliedHeaders.some(
+        (name) => headers[name] !== bodyKey || headers[name]?.trim() !== headers[name]
+      )) {
+        throw new DelopayError("Request retry keys must match the JSON body key", {
+          status: 0,
+          code: "IDEMPOTENCY_KEY_MISMATCH",
+          type: "invalid_request"
+        });
+      }
+      idempotencyKey = bodyKey?.trim();
+      if (suppliedHeaders.length > 0) {
+        headers = {
+          ...Object.fromEntries(
+            Object.entries(headers).filter(([name]) => name.toLowerCase() !== "idempotency-key")
+          ),
+          "Idempotency-Key": idempotencyKey ?? ""
+        };
+      }
+    }
+    const isRetryable = method === "GET" || method === "DELETE" || idempotencyKey !== void 0 && idempotencyKey !== "";
     const callerSignal = options?.signal;
     if (callerSignal?.aborted) {
       throw new DelopayError("Request aborted", {
@@ -7601,6 +7833,41 @@ var CheckoutSession = class {
     } catch {
     }
   }
+  /**
+   * Store one slice of the buyer's checkout recording on our own side.
+   * Called by the hosted checkout as the buyer works through the page; the
+   * client secret is attached automatically.
+   *
+   * **Not telemetry semantics, on purpose.** Unlike
+   * {@link CheckoutSession.recordEvent}, this rejects with a `DelopayError`
+   * like every other payment call, because the recorder has to tell the
+   * answers apart: a `400` with code `IR_16` means the backend will not take
+   * this recording (recording is off on that deployment, the recording is
+   * full, the payment is already recording a different session, or this
+   * number is stored with different content) and the recorder must stop; any
+   * other `400` is the slice itself being refused; a transport failure may be
+   * retried with the **same** bytes under the **same** number, which the
+   * backend answers with `duplicate: true`.
+   *
+   * Pass `keepalive: true` for the last slice of a page that is navigating
+   * away (a redirect rail); browsers refuse keepalive bodies over ~64 KiB, so
+   * only a small final slice should carry it.
+   *
+   * `POST /payments/{paymentId}/replay/slice` (publishable key)
+   */
+  async storeReplaySlice(params, options) {
+    const { keepalive, ...extras } = options ?? {};
+    return this.client.request(
+      "POST",
+      `/payments/${encodeURIComponent(this.paymentId)}/replay/slice`,
+      {
+        body: { ...params, client_secret: this.requireClientSecret() },
+        ...keepalive !== void 0 ? { keepalive } : {},
+        ...extras,
+        headers: this.pkHeaders(extras.headers)
+      }
+    );
+  }
   /**
    * Confirm a subscription (PayPal approval rail). The client secret is
    * attached automatically; the shop's profile id travels as the
@@ -7625,20 +7892,6 @@ var CheckoutSession = class {
       }
     );
   }
-  /**
-   * The Paysepro rail catalog for the buyer's country.
-   *
-   * `GET /payment-link/{merchantId}/{paymentId}/paysepro/methods`
-   *
-   * @param country - Lowercase ISO 3166-1 alpha-2 country code.
-   */
-  async payseproMethods(country, options) {
-    return this.client.request("GET", `${this.linkBase}/paysepro/methods`, {
-      query: { cc: country },
-      ...options,
-      headers: this.bearerHeaders(options?.headers)
-    });
-  }
   /**
    * The e-Payouts rail catalog for the buyer's country, plus the set of
    * countries that have at least one vendor.