@delopay/sdk 0.87.0 → 0.91.0

package/dist/index.cjs

@@ -5378,6 +5378,14 @@ function withoutCredentialHeaders(extra) {
   }
   return out;
 }
+function withoutHeader(headers, name) {
+  const out = {};
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === name) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var CheckoutSession = class {
   constructor(options) {
     this.merchantId = options.merchantId;
@@ -5424,6 +5432,112 @@ var CheckoutSession = class {
     }
     return this.clientSecret;
   }
+  /**
+   * The hosted checkout's bootstrap payload for a one-time payment —
+   * `CheckoutDetails` while payable, a status view once settled.
+   *
+   * Deliberately unauthenticated: a `pay_` link bootstraps before any
+   * credential exists, so no credential header is ever attached (caller
+   * extras are still stripped of credentials). The response is a large
+   * discriminated union owned by the consuming checkout, which keeps its
+   * own types and runtime gates — hence the loose return type.
+   *
+   * `theme` is the route's one declared query parameter (a named checkout
+   * variant, backend#793). `locale` travels as `Accept-Language` — the only
+   * channel the backend's locale resolution reads; a `?locale=` query is
+   * silently ignored by this route.
+   *
+   * `GET /payment-link/data/{merchantId}/{paymentId}`
+   */
+  async fetchCheckoutData(params, options) {
+    return this.client.request(
+      "GET",
+      `/payment-link/data/${encodeURIComponent(this.merchantId)}/${encodeURIComponent(this.paymentId)}`,
+      {
+        query: { theme: params?.theme },
+        ...options,
+        headers: {
+          ...params?.locale ? {
+            ...withoutHeader(withoutCredentialHeaders(options?.headers), "accept-language"),
+            "Accept-Language": params.locale
+          } : withoutCredentialHeaders(options?.headers)
+        }
+      }
+    );
+  }
+  /**
+   * The subscription twin of {@link CheckoutSession.fetchCheckoutData}: the
+   * bootstrap payload for a `sub_` checkout. Authenticated with the
+   * subscription's client secret (construct the session with the `sub_…` id
+   * in the `paymentId` slot). `locale` travels as `Accept-Language`, same
+   * as {@link CheckoutSession.fetchCheckoutData}.
+   *
+   * `GET /subscriptions/data/{merchantId}/{subscriptionId}`
+   */
+  async fetchSubscriptionData(params, options) {
+    return this.client.request(
+      "GET",
+      `/subscriptions/data/${encodeURIComponent(this.merchantId)}/${encodeURIComponent(this.paymentId)}`,
+      {
+        ...options,
+        headers: {
+          ...params?.locale ? {
+            ...withoutHeader(this.bearerHeaders(options?.headers), "accept-language"),
+            "Accept-Language": params.locale
+          } : this.bearerHeaders(options?.headers)
+        }
+      }
+    );
+  }
+  /**
+   * Report buyer/device signals for rails that never reach
+   * `/payments/{id}/confirm` (the Stripe SAQ-A rail: raw cards, Apple Pay,
+   * Google Pay). Same telemetry contract as
+   * {@link CheckoutSession.recordEvent}: sent with `keepalive: true`, and
+   * failures resolve instead of rejecting — signals must never block or
+   * break a checkout. Unauthenticated by design.
+   *
+   * `POST /payment-link/client-signals/{merchantId}/{paymentId}`
+   */
+  async reportClientSignals(params, options) {
+    try {
+      await this.client.request(
+        "POST",
+        `/payment-link/client-signals/${encodeURIComponent(this.merchantId)}/${encodeURIComponent(this.paymentId)}`,
+        {
+          body: params,
+          keepalive: true,
+          ...options,
+          headers: withoutCredentialHeaders(options?.headers)
+        }
+      );
+    } catch {
+    }
+  }
+  /**
+   * Confirm a subscription (PayPal approval rail). The client secret is
+   * attached automatically; the shop's profile id travels as the
+   * `X-Profile-Id` header the subscription routes require.
+   *
+   * `POST /subscriptions/{subscriptionId}/confirm` (publishable key)
+   */
+  async confirmSubscription(subscriptionId, profileId, params, options) {
+    return this.client.request(
+      "POST",
+      `/subscriptions/${encodeURIComponent(subscriptionId)}/confirm`,
+      {
+        body: { ...params, client_secret: this.requireClientSecret() },
+        ...options,
+        // Strip any caller-supplied x-profile-id first (case-insensitively):
+        // Fetch folds duplicate headers into `caller, pro_x`, and the
+        // subscription routes must see exactly one profile scope.
+        headers: {
+          ...withoutHeader(this.pkHeaders(options?.headers), "x-profile-id"),
+          "X-Profile-Id": profileId
+        }
+      }
+    );
+  }
   /**
    * The Paysepro rail catalog for the buyer's country.
    *