@delopay/sdk 0.93.0 → 0.95.0

package/dist/index.cjs

@@ -2203,6 +2203,7 @@ var Routing = class {
     this.request = request;
     this.decision = new RoutingDecisionManager(request);
     this.surchargeRules = new SurchargeRules(request);
+    this.checkoutThemeRules = new CheckoutThemeRules(request);
   }
   /**
    * Create a new routing algorithm.
@@ -2431,6 +2432,90 @@ var SurchargeRules = class {
     });
   }
 };
+var CheckoutThemeRules = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * Create or replace the theme program for a scope.
+   *
+   * `PUT /routing/checkout-theme/rules`
+   *
+   * Supersedes rather than overwrites: the previous active version is retired
+   * and a new one stored, so the record of which look was live when survives.
+   * Pass `active: false` to store a revision **without** retiring the live one —
+   * that is where a program drafted against a variant you have not built yet
+   * belongs.
+   *
+   * @example A phone in Germany gets the compact look; everyone else the house style.
+   * ```typescript
+   * await delopay.routing.checkoutThemeRules.upsert({
+   *   name: 'Autumn targeting',
+   *   profile_id: 'pro_...',
+   *   algorithm: {
+   *     rules: [
+   *       {
+   *         name: 'German phones',
+   *         connectorSelection: { theme: { variant: 'compact' } },
+   *         statements: [
+   *           {
+   *             condition: [
+   *               {
+   *                 lhs: 'device_class',
+   *                 comparison: 'equal',
+   *                 value: { type: 'enum_variant', value: 'phone' },
+   *                 metadata: {},
+   *               },
+   *               {
+   *                 lhs: 'browser_language',
+   *                 comparison: 'equal',
+   *                 value: { type: 'enum_variant', value: 'de' },
+   *                 metadata: {},
+   *               },
+   *             ],
+   *           },
+   *         ],
+   *       },
+   *     ],
+   *     defaultSelection: { theme: { variant: 'house' } },
+   *     metadata: {},
+   *   },
+   * });
+   * ```
+   */
+  async upsert(params) {
+    return this.request("PUT", "/routing/checkout-theme/rules", { body: params });
+  }
+  /**
+   * Retrieve the active theme program for a scope, or `null` when none is set.
+   *
+   * `GET /routing/checkout-theme/rules?profile_id={profileId}`
+   *
+   * @param profileId - Shop scope. Omit for the merchant-wide program. A
+   *   shop-scoped caller that omits it gets its own shop's program.
+   */
+  async retrieve(profileId) {
+    return this.request("GET", "/routing/checkout-theme/rules", {
+      query: { profile_id: profileId }
+    });
+  }
+  /**
+   * Deactivate the active theme program for a scope. Idempotent.
+   *
+   * `DELETE /routing/checkout-theme/rules?profile_id={profileId}`
+   *
+   * Deactivation, not deletion — the stored row is what says which look was
+   * live when, and that history cannot be reconstructed after the fact. Shops
+   * go back to their default appearance immediately.
+   *
+   * @param profileId - Shop scope. Omit for the merchant-wide program.
+   */
+  async delete(profileId) {
+    return this.request("DELETE", "/routing/checkout-theme/rules", {
+      query: { profile_id: profileId }
+    });
+  }
+};
 
 // src/resources/search.ts
 var Search = class {
@@ -2706,6 +2791,33 @@ var Users = class {
   async signOut() {
     return this.request("POST", "/user/signout");
   }
+  /**
+   * Sliding-session refresh: exchange the current (still-valid) login JWT
+   * for a fresh one with the same claims and a full lifetime. The backend
+   * keeps the session's identity (`jti`), slides `user_session.expires_at`
+   * forward and re-sets the `login_token` cookie.
+   *
+   * Requires a token backed by a revocable session (a `jti` claim). Signin
+   * and switch-merchant/-profile tokens have one; **session-less tokens do
+   * not and are rejected with 400** — team-impersonation tokens are the
+   * case in practice, and they are deliberately tab-scoped and
+   * time-bounded rather than renewable. A 400 here is not a dead session:
+   * the token remains valid for ordinary calls, it simply cannot slide.
+   *
+   * Rejected (401) for expired, blacklisted or revoked tokens — refresh can
+   * only extend a session that is still alive. Rate-limited server-side
+   * (429) to one mint per session per minute; treat a 429 as "still fresh
+   * enough", not as an error.
+   *
+   * The returned token is NOT applied to this client automatically — pass
+   * it to `setJwtToken()`, or use {@link Delopay.refreshSession} which does
+   * both.
+   *
+   * `POST /user/token/refresh`. Requires a logged-in JWT.
+   */
+  async refreshToken() {
+    return this.request("POST", "/user/token/refresh");
+  }
   /**
    * Paginated login history for the authenticated user -- IP, User-Agent,
    * country / city / lat-lon (when GeoIP is enabled), success and failure
@@ -3973,6 +4085,41 @@ var Delopay = class {
   clearJwtToken() {
     this.jwtToken = void 0;
   }
+  /**
+   * Refresh the current login JWT (see {@link Users.refreshToken}) and
+   * apply the fresh token to this client, so subsequent requests use it.
+   * Returns the fresh token for the caller to persist (e.g. session
+   * storage) — the backend has already re-set the `login_token` cookie.
+   *
+   * If the client's auth state changes while the refresh is pending —
+   * `clearJwtToken()` on sign-out, or `setJwtToken()` switching to another
+   * session — the stale completion is discarded and this rejects with a
+   * `session_changed` `DelopayError` (status 0), so the explicit change
+   * wins and the caller never persists a token for a session that is gone.
+   *
+   * Otherwise throws like any other request; in particular a 401 means the
+   * session is dead (expired/blacklisted/revoked), a 429 means a refresh
+   * was already minted for this session within the last minute, and a 400
+   * means this token has no revocable session to slide (no `jti` — team
+   * impersonation is the case in practice) and can never be refreshed,
+   * though it stays valid for ordinary calls.
+   */
+  async refreshSession() {
+    const originatingToken = this.jwtToken;
+    const response = await this.users.refreshToken();
+    if (this.jwtToken !== originatingToken) {
+      throw new DelopayError(
+        "Auth state changed while the refresh was pending; refreshed token discarded",
+        {
+          status: 0,
+          code: "session_changed",
+          type: "session_changed"
+        }
+      );
+    }
+    this.setJwtToken(response.token);
+    return response;
+  }
   /**
    * Make a raw HTTP request to the Delopay API.
    *