@delopay/sdk 0.332.0 → 0.337.0

package/dist/index.cjs

@@ -1021,7 +1021,7 @@ var Connectors = class {
     );
   }
   /**
-   * Share a connector with more shops of the same merchant (todos#320).
+   * Share a connector with more shops of the same merchant.
    * `POST /account/{accountId}/connectors/{connectorId}/shops`
    *
    * Nothing is copied: every shop sends payments to the same account, on the
@@ -1035,7 +1035,7 @@ var Connectors = class {
     );
   }
   /**
-   * Fold copies of the same provider account into this connector (todos#395).
+   * Fold copies of the same provider account into this connector.
    * `POST /account/{accountId}/connectors/{connectorId}/consolidate`
    *
    * The copies' shops move to the connector with their on/off state, routing,
@@ -1063,7 +1063,7 @@ var Connectors = class {
     );
   }
   /**
-   * Stop a connector serving one shop (todos#407). Any shop may leave, the
+   * Stop a connector serving one shop. Any shop may leave, the
    * one the connector was created in included, while another one stays: the
    * last shop is refused, and the connector is deleted instead. The account,
    * its limits and every other shop on it are unaffected.
@@ -1078,7 +1078,7 @@ var Connectors = class {
   /**
    * Read the transaction currencies a connector may process: its own list,
    * what the provider is known to accept with its methods, and the effective
-   * currencies in each shop it serves (todos#333).
+   * currencies in each shop it serves.
    * `GET /account/{accountId}/connectors/{connectorId}/currencies`
    */
   async getCurrencies(accountId, connectorId) {
@@ -6725,6 +6725,77 @@ var SellToRestrictions = class {
       options
     );
   }
+  /**
+   * One project's own policy, if it has one.
+   * `GET /sell-to-restrictions/projects/{project_id}`
+   */
+  async retrieveProject(projectId) {
+    return this.request("GET", `/sell-to-restrictions/projects/${encodeURIComponent(projectId)}`);
+  }
+  /**
+   * Give one project its own policy. It replaces the merchant-wide policy for
+   * every shop of the project's subtree without an override or a nearer
+   * project policy, from their next payment on. An empty `blocked_countries`
+   * lifts every restriction for them. Recorded in the audit log first.
+   * `PUT /sell-to-restrictions/projects/{project_id}`
+   */
+  async updateProjectPolicy(projectId, params, options) {
+    return this.request("PUT", `/sell-to-restrictions/projects/${encodeURIComponent(projectId)}`, {
+      body: params,
+      ...options
+    });
+  }
+  /**
+   * Remove one project's policy, so its subtree inherits from above again.
+   * Removing a policy the project does not have changes nothing.
+   * `DELETE /sell-to-restrictions/projects/{project_id}`
+   */
+  async deleteProjectPolicy(projectId, options) {
+    return this.request(
+      "DELETE",
+      `/sell-to-restrictions/projects/${encodeURIComponent(projectId)}`,
+      options
+    );
+  }
+  /**
+   * One payment connector account's own policy, and which buyer
+   * signals its payments can be judged on. Needs the merchant-level `Read`
+   * rung; a shop-scoped role is refused.
+   * `GET /sell-to-restrictions/connectors/{merchant_connector_id}`
+   */
+  async retrieveConnectorPolicy(merchantConnectorId) {
+    return this.request(
+      "GET",
+      `/sell-to-restrictions/connectors/${encodeURIComponent(merchantConnectorId)}`
+    );
+  }
+  /**
+   * Give one payment connector account its own policy. It applies on top of
+   * each shop's policy, in every shop the account serves, from the next
+   * payment on: a buyer it refuses is routed to another account of the shop.
+   * Needs the merchant-wide `Write` rung and write visibility for the
+   * processor; recorded in the audit log first.
+   * `PUT /sell-to-restrictions/connectors/{merchant_connector_id}`
+   */
+  async updateConnectorPolicy(merchantConnectorId, params, options) {
+    return this.request(
+      "PUT",
+      `/sell-to-restrictions/connectors/${encodeURIComponent(merchantConnectorId)}`,
+      { body: params, ...options }
+    );
+  }
+  /**
+   * Remove one connector account's own policy; each shop's policy still
+   * applies. Removing a policy the account does not have changes nothing.
+   * `DELETE /sell-to-restrictions/connectors/{merchant_connector_id}`
+   */
+  async deleteConnectorPolicy(merchantConnectorId, options) {
+    return this.request(
+      "DELETE",
+      `/sell-to-restrictions/connectors/${encodeURIComponent(merchantConnectorId)}`,
+      options
+    );
+  }
   /**
    * Which checks each payment path performs, and how this deployment resolves
    * a buyer's country — read before relying on a restriction for a path.
@@ -10795,6 +10866,9 @@ var Delopay = class {
     this.maxRetries = options?.maxRetries ?? 2;
     this.debug = options?.debug ?? false;
     if (options?.logger !== void 0) this.logger = options.logger;
+    if (options?.profileId !== void 0 && options.profileId !== "") {
+      this.profileId = options.profileId;
+    }
     if (options?.baseUrl !== void 0) {
       this.baseUrl = options.baseUrl;
     } else if (options?.sandbox) {
@@ -10943,6 +11017,17 @@ var Delopay = class {
     return url;
   }
   /** The credential header: the JWT when one is set, else the API key. */
+  /**
+   * The client's `X-Profile-Id`, unless the call names one itself (in any
+   * letter case: two spellings would be sent as one joined value).
+   */
+  profileHeaders(callHeaders) {
+    if (this.profileId === void 0) return {};
+    const named = Object.keys(callHeaders ?? {}).some(
+      (name) => name.toLowerCase() === "x-profile-id"
+    );
+    return named ? {} : { "X-Profile-Id": this.profileId };
+  }
   authHeaders() {
     if (this.jwtToken) return { Authorization: `Bearer ${this.jwtToken}` };
     if (this.apiKey) return { "api-key": this.apiKey };
@@ -10986,6 +11071,7 @@ var Delopay = class {
     const lastEventId = options.lastEventId ?? "";
     const headers = {
       ...this.authHeaders(),
+      ...this.profileHeaders(options.headers),
       Accept: "text/event-stream",
       ...lastEventId ? { "Last-Event-ID": lastEventId } : {},
       ...options.headers
@@ -11123,6 +11209,7 @@ var Delopay = class {
     const url = this.buildUrl(path, options?.query);
     let headers = {
       ...this.authHeaders(),
+      ...this.profileHeaders(options?.headers),
       ...options?.headers
     };
     const isRawBody = options?.body !== void 0 && options?.body !== null && (options.body instanceof FormData || options.body instanceof Blob || options.body instanceof ArrayBuffer || options.body instanceof URLSearchParams);
@@ -13712,7 +13799,7 @@ function decodeBranding(source) {
       DEFAULT_BRANDING.whopSelection
     ),
     paypalValidTint: parseBool(extras["paypalValidTint"], DEFAULT_BRANDING.paypalValidTint),
-    // A look stored before todos#412 has no e-Payouts keys: the form keeps
+    // A look stored before e-Payouts had its own keys has none: the form keeps
     // the PayPal values it was drawn with until then.
     epayoutsCardLayout: pickEnum(
       extras["epayoutsCardLayout"],
@@ -14401,7 +14488,7 @@ function parseImportedBranding(raw) {
       dflt.whopSelection
     ),
     paypalValidTint: parseBool(root["paypalValidTint"], dflt.paypalValidTint),
-    // A look stored before todos#412 has no e-Payouts keys: the form keeps
+    // A look stored before e-Payouts had its own keys has none: the form keeps
     // the PayPal values it was drawn with until then.
     epayoutsCardLayout: pickEnum(
       root["epayoutsCardLayout"],
@@ -14861,6 +14948,47 @@ var CheckoutSession = class {
       }
     );
   }
+  /**
+   * The methods the buyer may pick for a subscription that waits for the
+   * choice (`method_choice_pending`), judged for the buyer. Call it from the
+   * buyer's browser: the sell-to country is read from this request's own
+   * connection. Authenticated with the subscription's client secret.
+   *
+   * `GET /subscriptions/method-options/{merchantId}/{subscriptionId}`
+   */
+  async subscriptionMethodOptions(options) {
+    return this.client.request(
+      "GET",
+      `/subscriptions/method-options/${encodeURIComponent(this.merchantId)}/${encodeURIComponent(this.paymentId)}`,
+      {
+        ...options,
+        headers: this.bearerHeaders(options?.headers)
+      }
+    );
+  }
+  /**
+   * Bind a waiting subscription to the method the buyer picked and open its
+   * first cycle on that method's billing account. The methods are judged
+   * again from this request; afterwards
+   * {@link CheckoutSession.fetchSubscriptionData} describes the bound
+   * subscription (Stripe's Payment Element for `card`, `confirmSubscription`
+   * for the others). A subscription that no longer waits answers 409
+   * (`DE_20`). Authenticated with the subscription's client secret.
+   *
+   * `POST /subscriptions/select-method/{merchantId}/{subscriptionId}`
+   */
+  async selectSubscriptionMethod(method, options) {
+    const body = { method };
+    return this.client.request(
+      "POST",
+      `/subscriptions/select-method/${encodeURIComponent(this.merchantId)}/${encodeURIComponent(this.paymentId)}`,
+      {
+        body,
+        ...options,
+        headers: this.bearerHeaders(options?.headers)
+      }
+    );
+  }
   /**
    * Confirm a subscription (PayPal approval rail). The client secret is
    * attached automatically; the shop's profile id travels as the
@@ -15134,7 +15262,8 @@ var CheckoutSession = class {
    * Only `authorized: true` permits the form to contact its processor. A
    * competing flow receives `false` and must reload; an unresolved provider
    * outcome stays reserved, regardless of elapsed time. A buyer-blocklist
-   * refusal throws a `DelopayError` with code `DE_14`.
+   * refusal throws a `DelopayError` with code `DE_14`; a shop whose payments
+   * DeloPay stopped is refused with `DE_22`.
    *
    * `POST /payment-link/{merchantId}/{paymentId}/browser-card-claim`
    */
@@ -15160,7 +15289,8 @@ var CheckoutSession = class {
    * against the shop's sell-to restrictions before Stripe authorises, and a
    * refusal throws a `DelopayError` with code `DE_10`. A buyer on the
    * merchant's buyer blocklist is refused before any Stripe call with code
-   * `DE_14` (`buyer_blocked`, 422), which names no entry. When the answer's
+   * `DE_14` (`buyer_blocked`, 422), which names no entry, and a shop whose
+   * payments DeloPay stopped with `DE_22`. When the answer's
    * `status` is `requires_action`, run `stripe.handleNextAction` with its
    * `client_secret` — safe, because the intent is `confirmation_method=manual`
    * and that secret confirms nothing without the secret key — then call this
@@ -15391,7 +15521,7 @@ var CheckoutSession = class {
   /**
    * Reopen a provider session the buyer switched away from, when they pick the
    * same method again, instead of opening a second session at the provider
-   * (delopay-todos#401). Pass an `attempt_id` from the checkout's
+   *. Pass an `attempt_id` from the checkout's
    * `reopenable_attempts`; the attempt becomes the payment's active one again
    * and `redirect_url` sends the buyer back to it. Refused (`IR_16`) when the
    * payment no longer awaits a method, a payment is under way on the checkout,