@delopay/sdk 0.234.0 → 0.235.0

package/dist/index.cjs

@@ -11569,6 +11569,21 @@ function withoutCredentialHeaders(extra) {
   }
   return out;
 }
+function vaultFormQuery(params) {
+  const look = params?.appearance;
+  return {
+    locale: params?.locale,
+    form_surface: look?.surface,
+    form_text: look?.text,
+    form_border: look?.border,
+    form_accent: look?.accent,
+    form_danger: look?.danger,
+    form_font: look?.font,
+    form_radius: look?.radius,
+    form_size: look?.size,
+    form_labels: look?.labels
+  };
+}
 function withoutHeader(headers, name) {
   const out = {};
   for (const [key, value] of Object.entries(headers)) {
@@ -11988,21 +12003,31 @@ var CheckoutSession = class {
    * `GET /payment-link/{merchantId}/{paymentId}/vault/collect-session`
    */
   async vaultCollectSession(options, params) {
-    const look = params?.appearance;
     return this.client.request("GET", `${this.linkBase}/vault/collect-session`, {
       ...options,
-      query: {
-        locale: params?.locale,
-        form_surface: look?.surface,
-        form_text: look?.text,
-        form_border: look?.border,
-        form_accent: look?.accent,
-        form_danger: look?.danger,
-        form_font: look?.font,
-        form_radius: look?.radius,
-        form_size: look?.size,
-        form_labels: look?.labels
-      },
+      query: vaultFormQuery(params),
+      headers: this.bearerHeaders(options?.headers)
+    });
+  }
+  /**
+   * The saved cards the buyer of this payment can pay with, on a shop whose
+   * vault keeps the security code itself (Enigma Vault): the cards of the
+   * payment's own customer that the shop's vault holds, most recently used
+   * first. A payment without a customer answers an empty list.
+   *
+   * Draw saved cards from this list, not from the customer's payment-method
+   * list: that one also carries cards the security-code form cannot open.
+   * To pay with one, mint its form with {@link vaultSecurityCodeSession},
+   * and confirm with its `payment_token` once the form reports the code
+   * stored.
+   *
+   * A shop without a vault, and a VGS shop, answer `400`.
+   *
+   * `GET /payment-link/{merchantId}/{paymentId}/vault/saved-cards`
+   */
+  async vaultSavedCards(options) {
+    return this.client.request("GET", `${this.linkBase}/vault/saved-cards`, {
+      ...options,
       headers: this.bearerHeaders(options?.headers)
     });
   }
@@ -12012,15 +12037,24 @@ var CheckoutSession = class {
    * vault's own form, so it never reaches the checkout; confirm with the saved
    * card's `payment_token` once the form reports it stored.
    *
-   * `paymentToken` is the saved card's token from the payment-method list. A
+   * `paymentToken` is the saved card's token from {@link vaultSavedCards}. A
    * VGS shop answers `400`: VGS re-collects the code with Collect.
    *
+   * `params.appearance` asks for a form styled to match the page, as on
+   * {@link vaultCollectSession}. The styled form is the security-code field
+   * alone, with no label: draw the label beside the frame, and size the frame
+   * to the answer's `height`. `labels` is ignored. If the vault refuses the
+   * styled form the answer is the plain one, without `height`.
+   *
+   * The form stores one code and then disables itself. After a failed
+   * payment, mint a new form before the buyer tries again.
+   *
    * `GET /payment-link/{merchantId}/{paymentId}/vault/security-code-session`
    */
-  async vaultSecurityCodeSession(paymentToken, options) {
+  async vaultSecurityCodeSession(paymentToken, options, params) {
     return this.client.request("GET", `${this.linkBase}/vault/security-code-session`, {
       ...options,
-      query: { payment_token: paymentToken },
+      query: { payment_token: paymentToken, ...vaultFormQuery(params) },
       headers: this.bearerHeaders(options?.headers)
     });
   }