@delopay/sdk 0.98.0 → 0.100.0

package/dist/index.cjs

@@ -3248,6 +3248,45 @@ var Users = class {
   async deleteRole(roleId) {
     return this.request("DELETE", `/user/role/${encodeURIComponent(roleId)}`);
   }
+  /**
+   * Read which individual connector accounts a role may see.
+   *
+   * `GET /user/role/{roleId}/connectors`
+   *
+   * **Check `restricted` before reading `connectors`.** An empty list is
+   * ambiguous by itself, so the backend states which case it is: `false` means
+   * the role holds no grant and sees whatever its entity and profile scope
+   * already allowed. Rendering an empty `connectors` array as "this role sees
+   * nothing" inverts the meaning.
+   *
+   * Requires the permission that *edits a role*, not a connector permission.
+   */
+  async getRoleConnectors(roleId) {
+    return this.request("GET", `/user/role/${encodeURIComponent(roleId)}/connectors`);
+  }
+  /**
+   * Replace the set of connector accounts a role may see.
+   *
+   * `PUT /user/role/{roleId}/connectors`
+   *
+   * The call **replaces** the whole set rather than adding to it, so send the
+   * complete list every time. An empty `merchant_connector_ids` clears the
+   * grant and returns the role to unrestricted.
+   *
+   * The backend refuses an id that is not a connector account of the caller's
+   * own merchant, an `Organization`-scoped role (a connector account belongs to
+   * exactly one merchant, so an org-spanning role cannot hold one coherently),
+   * and any predefined role (one static entry shared by every tenant).
+   *
+   * Editing a grant invalidates the role cache and blacklists tokens minted
+   * before the edit, so **users holding this role must sign in again**. Worth
+   * saying in the UI before the save, not after.
+   */
+  async updateRoleConnectors(roleId, params) {
+    return this.request("PUT", `/user/role/${encodeURIComponent(roleId)}/connectors`, {
+      body: params
+    });
+  }
 };
 
 // src/resources/verification.ts
@@ -3400,6 +3439,33 @@ var Analytics = class {
       query: params
     });
   }
+  /**
+   * The recent payments behind one clicked geo target: a map country (in the
+   * active claim mode), optionally narrowed to an IP-resolved city, or one
+   * buyer-local heatmap cell (`dow` + `hour`, paid sessions only). Same
+   * window/scope/filter and gating contract as `geo`; capped at 50 rows,
+   * newest first, with the full match count alongside.
+   * `GET /analytics/geo/transactions`
+   */
+  async geoTransactions(params) {
+    return this.request("GET", "/analytics/geo/transactions", {
+      query: params
+    });
+  }
+  /**
+   * The recent payments behind one clicked device target: exactly one of a
+   * browser family, a platform family, an identified device-model label, or
+   * a device class. Family/model targets are resolved server-side with the
+   * same classifiers the cards use. Same window/scope/filter and gating
+   * contract as `devices`; 50 rows per page (`offset` for the next page),
+   * newest first, with the full match count alongside.
+   * `GET /analytics/devices/transactions`
+   */
+  async deviceTransactions(params) {
+    return this.request("GET", "/analytics/devices/transactions", {
+      query: params
+    });
+  }
   /** Global search. `POST /analytics/search` */
   async search(params) {
     return this.request("POST", "/analytics/search", { body: params });