@grupolapa/desarrollos-sdk 0.3.0 → 0.4.0

package/README.md

@@ -34,15 +34,43 @@ OpenAPI metadata is available at:
 https://grupolapa.com/api/public/v1/desarrollos/openapi.json
 ```
 
-UONDR and external configurable-cotizador agents should use the dedicated
-cross-project guide:
+Building a partner website that hosts the configurable cotizador? Read this
+single self-contained guide; it needs no other document:
+
+```txt
+https://grupolapa.com/api/public/v1/desarrollos/partner-agent.json
+```
+
+It covers environment setup, the journey call order, every error code, the
+frozen UONDR embed protocol `1.0` contract, and the host page requirements.
+
+Maintaining UONDR itself uses the cross-project contract reference:
 
 ```txt
 https://grupolapa.com/api/public/v1/desarrollos/uondr-agent.json
 ```
 
-It distinguishes already available Lapa and SDK tools from the required UONDR
-partner APIs, iframe protocol, and production website work.
+## Embed Protocol
+
+`@grupolapa/desarrollos-sdk/embed` carries the iframe contract shared with
+UONDR. `UONDR_EMBED_PROTOCOL_CONTRACT` is a frozen literal mirrored
+byte-for-byte in the UONDR repository and verified by contract tests in both;
+`UONDR_EMBED_PROTOCOL_CONTRACT_DIGEST` lets a consumer confirm it matches the
+deployed guide.
+
+```ts
+import {
+  createUondrCommand,
+  postUondrCommand,
+  UondrEventGuard,
+  UONDR_EMBED_PROTOCOL_CONTRACT,
+  UONDR_EMBED_PROTOCOL_CONTRACT_DIGEST,
+} from "@grupolapa/desarrollos-sdk/embed";
+```
+
+Never post to a wildcard target origin. Derive it from the `embedUrl` Lapa
+returns, and note that the configurator resolves its parent origin from
+`document.referrer`, so the host page must not send a strict `Referrer-Policy`.
 
 ## Browser Reads and Quotes
 

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { DesarrollosApiError } from "./http.js";
 import type { CompleteJourneyConfigurationRequest, CreateJourneyCheckoutRequest, CreateJourneyConfiguratorSessionRequest, CreateJourneyQuoteRequest, CreateJourneyRequest, DesarrollosApiBaseOptions, CreatePublicReservationRequest, GetJourneyRequest, GetPublicReservationRequest, UpdateJourneyLeadRequest, UpdateJourneySelectionRequest } from "./types.js";
 export { DesarrollosApiError };
+export { JOURNEY_STATUSES } from "./types.js";
 export type * from "./types.js";
 export * from "./embed-protocol.js";
 export declare function createDesarrollosClient(options: DesarrollosApiBaseOptions): {

package/dist/index.js

@@ -1,5 +1,6 @@
 import { DesarrollosApiError, createDesarrollosApiRequester } from "./http.js";
 export { DesarrollosApiError };
+export { JOURNEY_STATUSES } from "./types.js";
 export * from "./embed-protocol.js";
 export function createDesarrollosClient(options) {
     const api = createDesarrollosApiRequester(options);

package/dist/types.d.ts

@@ -422,7 +422,15 @@ export interface PublicSessionResponse {
     tokenType: "Bearer";
 }
 export type JourneyErrorCode = "origin_denied" | "mapping_not_found" | "configuration_required" | "configuration_invalid" | "quote_expired" | "unit_unavailable" | "hold_conflict" | "payment_conflict" | "rate_limited" | "session_expired";
-export type JourneyStatus = "active" | "payment_pending" | "operation_pending" | "completed" | "paid_conflict" | "expired";
+/**
+ * Every journey status the public API can return, in lifecycle order.
+ *
+ * These are wire values, not Lapa's internal persisted statuses. The serializer
+ * collapses `checkout_started` and `paid` into `payment_pending`, and reports
+ * `cancelled` as `expired`. Branch on these; the internal names never arrive.
+ */
+export declare const JOURNEY_STATUSES: readonly ["active", "payment_pending", "operation_pending", "completed", "paid_conflict", "expired"];
+export type JourneyStatus = (typeof JOURNEY_STATUSES)[number];
 export type JourneyConfigurationStatus = "required" | "completed" | "invalid" | "superseded";
 export type JourneyQuoteStatus = "active" | "expired" | "superseded" | "consumed";
 export type JourneyHoldStatus = "acquiring" | "active" | "confirmed" | "released" | "expired" | "conflict";

package/dist/types.js

@@ -1 +1,15 @@
-export {};
+/**
+ * Every journey status the public API can return, in lifecycle order.
+ *
+ * These are wire values, not Lapa's internal persisted statuses. The serializer
+ * collapses `checkout_started` and `paid` into `payment_pending`, and reports
+ * `cancelled` as `expired`. Branch on these; the internal names never arrive.
+ */
+export const JOURNEY_STATUSES = [
+    "active",
+    "payment_pending",
+    "operation_pending",
+    "completed",
+    "paid_conflict",
+    "expired",
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grupolapa/desarrollos-sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Framework-agnostic TypeScript SDK for Grupo LAPA public desarrollo integrations.",
   "type": "module",
   "license": "UNLICENSED",