@delopay/sdk 0.234.0 → 0.238.0

package/dist/internal.cjs

@@ -3243,6 +3243,44 @@ var Refunds = class {
     return this.request("POST", "/refunds/list", { body: params });
   }
   // --- OLAP extensions (Task 4.3) ---
+  /**
+   * Refund requests buyers raised from the customer portal, newest first.
+   * Limited to the caller's shop when the caller is scoped to one.
+   * `GET /refund-requests`
+   */
+  async listRequests(params) {
+    return this.request("GET", "/refund-requests", {
+      query: params
+    });
+  }
+  /**
+   * Approve a buyer's refund request with a refund of its payment that has
+   * succeeded, made with `create()` after the buyer asked. Approving records
+   * the decision and moves no money. A refund that is still `pending` or in
+   * `review` is refused: check it again later with `retrieve()` under the same
+   * refund ID and approve once it has succeeded, rather than creating another
+   * refund. `POST /refund-requests/{id}/approve`
+   *
+   * @example
+   * ```typescript
+   * const refund = await delopay.refunds.create({ payment_id: request.payment_id, amount: request.amount });
+   * if (refund.status === 'succeeded') {
+   *   await delopay.refunds.approveRequest(request.id, { refund_id: refund.refund_id });
+   * }
+   * // Otherwise keep refund.refund_id, check it with retrieve() and approve once it has succeeded.
+   * ```
+   */
+  async approveRequest(requestId, params) {
+    return this.request("POST", `/refund-requests/${encodeURIComponent(requestId)}/approve`, {
+      body: params
+    });
+  }
+  /** Decline a buyer's refund request. The buyer sees the reply. `POST /refund-requests/{id}/decline` */
+  async declineRequest(requestId, params) {
+    return this.request("POST", `/refund-requests/${encodeURIComponent(requestId)}/decline`, {
+      body: params
+    });
+  }
   /** List refunds (profile-scoped). `POST /refunds/profile/list` */
   async listByProfile(params) {
     return this.request("POST", "/refunds/profile/list", { body: params });
@@ -7007,6 +7045,29 @@ var BuyerPortal = class {
   async getSession(options) {
     return this.request("GET", "/buyer-portal/session", { ...options });
   }
+  /** The buyer's contact and billing details, and what they may change. */
+  async getProfile(options) {
+    return this.request("GET", "/buyer-portal/profile", { ...options });
+  }
+  /**
+   * Change the buyer's contact and billing details. Fields left out stay as
+   * they are; the merchant decides whether buyers may change them at all.
+   */
+  async updateProfile(params, options) {
+    return this.request("POST", "/buyer-portal/profile", { body: params, ...options });
+  }
+  /**
+   * Ask the shop for a refund of one of the buyer's purchases, named by its
+   * `id` from `listPurchases()`. Nothing is refunded until the shop approves
+   * the request with a refund.
+   */
+  async createRefundRequest(purchaseId, params, options) {
+    return this.request(
+      "POST",
+      `/buyer-portal/purchases/${encodeURIComponent(purchaseId)}/refund-requests`,
+      { body: params, ...options }
+    );
+  }
   async listInvoices(params, options) {
     return this.request("GET", "/buyer-portal/invoices", {
       query: params,
@@ -11585,6 +11646,21 @@ function withoutCredentialHeaders(extra) {
   }
   return out;
 }
+function vaultFormQuery(params) {
+  const look = params?.appearance;
+  return {
+    locale: params?.locale,
+    form_surface: look?.surface,
+    form_text: look?.text,
+    form_border: look?.border,
+    form_accent: look?.accent,
+    form_danger: look?.danger,
+    form_font: look?.font,
+    form_radius: look?.radius,
+    form_size: look?.size,
+    form_labels: look?.labels
+  };
+}
 function withoutHeader(headers, name) {
   const out = {};
   for (const [key, value] of Object.entries(headers)) {
@@ -12004,21 +12080,31 @@ var CheckoutSession = class {
    * `GET /payment-link/{merchantId}/{paymentId}/vault/collect-session`
    */
   async vaultCollectSession(options, params) {
-    const look = params?.appearance;
     return this.client.request("GET", `${this.linkBase}/vault/collect-session`, {
       ...options,
-      query: {
-        locale: params?.locale,
-        form_surface: look?.surface,
-        form_text: look?.text,
-        form_border: look?.border,
-        form_accent: look?.accent,
-        form_danger: look?.danger,
-        form_font: look?.font,
-        form_radius: look?.radius,
-        form_size: look?.size,
-        form_labels: look?.labels
-      },
+      query: vaultFormQuery(params),
+      headers: this.bearerHeaders(options?.headers)
+    });
+  }
+  /**
+   * The saved cards the buyer of this payment can pay with, on a shop whose
+   * vault keeps the security code itself (Enigma Vault): the cards of the
+   * payment's own customer that the shop's vault holds, most recently used
+   * first. A payment without a customer answers an empty list.
+   *
+   * Draw saved cards from this list, not from the customer's payment-method
+   * list: that one also carries cards the security-code form cannot open.
+   * To pay with one, mint its form with {@link vaultSecurityCodeSession},
+   * and confirm with its `payment_token` once the form reports the code
+   * stored.
+   *
+   * A shop without a vault, and a VGS shop, answer `400`.
+   *
+   * `GET /payment-link/{merchantId}/{paymentId}/vault/saved-cards`
+   */
+  async vaultSavedCards(options) {
+    return this.client.request("GET", `${this.linkBase}/vault/saved-cards`, {
+      ...options,
       headers: this.bearerHeaders(options?.headers)
     });
   }
@@ -12028,15 +12114,24 @@ var CheckoutSession = class {
    * vault's own form, so it never reaches the checkout; confirm with the saved
    * card's `payment_token` once the form reports it stored.
    *
-   * `paymentToken` is the saved card's token from the payment-method list. A
+   * `paymentToken` is the saved card's token from {@link vaultSavedCards}. A
    * VGS shop answers `400`: VGS re-collects the code with Collect.
    *
+   * `params.appearance` asks for a form styled to match the page, as on
+   * {@link vaultCollectSession}. The styled form is the security-code field
+   * alone, with no label: draw the label beside the frame, and size the frame
+   * to the answer's `height`. `labels` is ignored. If the vault refuses the
+   * styled form the answer is the plain one, without `height`.
+   *
+   * The form stores one code and then disables itself. After a failed
+   * payment, mint a new form before the buyer tries again.
+   *
    * `GET /payment-link/{merchantId}/{paymentId}/vault/security-code-session`
    */
-  async vaultSecurityCodeSession(paymentToken, options) {
+  async vaultSecurityCodeSession(paymentToken, options, params) {
     return this.client.request("GET", `${this.linkBase}/vault/security-code-session`, {
       ...options,
-      query: { payment_token: paymentToken },
+      query: { payment_token: paymentToken, ...vaultFormQuery(params) },
       headers: this.bearerHeaders(options?.headers)
     });
   }