@delopay/sdk 0.2.0 → 0.3.1

package/dist/index.cjs

@@ -79,16 +79,27 @@ var Admin = class {
   async createTenant(params) {
     return this.request("POST", "/admin/tenant_signup", { body: params });
   }
-  // --- Advanced operations (Task 4.10) ---
-  /** Set signup settings. `POST /admin/settings/signup` */
+  /**
+   * Create a new merchant admin user and merchant account atomically.
+   *
+   * This is the correct endpoint for bootstrapping the first admin user in a
+   * fresh deployment — `internal_signup`/`tenant_signup` both require
+   * pre-existing merchant records that don't exist on a clean database.
+   *
+   * `POST /admin/signup_with_merchant_id`
+   */
+  async signupWithMerchantId(params) {
+    return this.request("POST", "/admin/signup_with_merchant_id", { body: params });
+  }
+  /** Toggle public signup on/off. `POST /admin/settings/signup` */
   async setSignupSettings(params) {
     return this.request("POST", "/admin/settings/signup", { body: params });
   }
-  /** Get signup settings. `GET /admin/settings/signup` */
+  /** Read current public-signup status. `GET /admin/settings/signup` */
   async getSignupSettings() {
     return this.request("GET", "/admin/settings/signup");
   }
-  /** Onboard a merchant. `POST /admin/onboard_merchant` */
+  /** Full merchant bootstrap — user + merchant + project + profile + keys. `POST /admin/onboard_merchant` */
   async onboardMerchant(params) {
     return this.request("POST", "/admin/onboard_merchant", { body: params });
   }
@@ -2058,8 +2069,21 @@ var Users = class {
   async forgotPassword(params) {
     return this.request("POST", "/user/forgot_password", { body: params });
   }
+  /**
+   * Reset a user's password using the single-purpose JWT delivered by the
+   * forgot-password email.
+   *
+   * The backend's `SinglePurposeJWTAuth` reads the token from the
+   * `Authorization: Bearer …` header, not from the request body, so the
+   * SDK lifts the `token` field out of `params` and sends it as the header.
+   * Callers still pass `{ password, token }` — the shape is unchanged.
+   */
   async resetPassword(params) {
-    return this.request("POST", "/user/reset_password", { body: params });
+    const { token, password } = params;
+    return this.request("POST", "/user/reset_password", {
+      body: { password },
+      headers: { Authorization: `Bearer ${token}` }
+    });
   }
   async verifyEmail(params) {
     return this.request("POST", "/user/verify_email", { body: params });