@medalsocial/sdk 1.9.0 → 1.10.0

package/dist/src/index.d.mts

@@ -635,6 +635,20 @@ type BookingStatus = "pending" | "confirmed" | "completed" | "cancelled" | "no_s
 type BookingCancelledBy = "customer" | "staff" | "system";
 /** Payment state of a booking. */
 type BookingPaymentStatus = "none" | "reserved" | "captured" | "refunded";
+/**
+ * What a booking must have paid before the business honours it: nothing, a
+ * reservation taken at booking time and captured later, or the full amount up
+ * front.
+ */
+type BookingPaymentMode = "none" | "reserve" | "prepay";
+/**
+ * The state of one attempt at paying for a booking.
+ *
+ * This is Medal's vocabulary, not the wallet's — a Vipps payment stays
+ * `AUTHORIZED` after a capture, so read the øre aggregates on
+ * {@link BookingPayment} to learn what actually moved.
+ */
+type BookingPaymentState = "created" | "authorized" | "captured" | "cancelled" | "refunded" | "failed" | "expired";
 /** Surface a booking was created through. API-created bookings are `api`. */
 type BookingCreatedVia = "web" | "dashboard" | "walk_in" | "api";
 /** Kind of bookable resource a booking lands on. */
@@ -669,6 +683,13 @@ interface Booking {
     /** Set on the booking a reschedule created, pointing at the one it replaced. */
     rescheduled_from_id: string | null;
     payment_status: BookingPaymentStatus;
+    /**
+     * What this booking required when it was made — frozen at creation, so
+     * changing the workspace or service rule later does not rewrite history.
+     * `payment_status` alone cannot tell "owes nothing" from "has not paid yet";
+     * this is the field that does.
+     */
+    payment_mode: BookingPaymentMode;
     /** Price in integer øre. */
     amount_ore: number | null;
     /** Customer-visible note. */
@@ -694,6 +715,11 @@ interface BookingService {
     /** Resource types this service needs, e.g. `["staff"]`. */
     resource_requirements: string[];
     bookable_online: boolean;
+    /**
+     * Per-service payment requirement. `null` means "no override" — the
+     * workspace rule decides.
+     */
+    payment: BookingPaymentMode | null;
     max_per_booking: number | null;
     color: string | null;
     sort_order: number | null;
@@ -837,6 +863,12 @@ interface ManageSummary {
     /** Price in integer øre. */
     amount_ore: number | null;
     payment_status: BookingPaymentStatus | null;
+    /**
+     * What this booking requires. `payment_status: "none"` is the same answer
+     * for a booking that owes nothing and one that has not paid yet, so this is
+     * what a manage page checks before offering «Betal nå».
+     */
+    payment_mode: BookingPaymentMode;
     /** IANA zone the booking's local times should be rendered in. */
     time_zone: string | null;
     cancel_window_hours: number | null;
@@ -874,6 +906,78 @@ interface RescheduleBookingInput {
     new_start_ts: BookingTimestampInput;
     new_resource_id?: string;
 }
+/**
+ * One payment attempt on a booking.
+ *
+ * Money is integer øre, and the four aggregates are numbers rather than nulls:
+ * "nothing has been captured" is `0`, so summing them never needs a null
+ * guard. `redirect_url` is deliberately absent — it is handed over once by
+ * {@link BookingPaymentStart} and never re-read.
+ */
+interface BookingPayment {
+    reference: string;
+    provider: "vipps";
+    state: BookingPaymentState;
+    mode: Exclude<BookingPaymentMode, "none">;
+    /** 1 for the first attempt on this booking, incrementing per retry. */
+    attempt: number;
+    /** The amount the attempt is for, in integer øre. */
+    amount_ore: number;
+    authorized_ore: number;
+    captured_ore: number;
+    refunded_ore: number;
+    cancelled_ore: number;
+    currency: "NOK";
+    /**
+     * The last moment a capture is GUARANTEED to succeed. The card behind the
+     * wallet may release the reservation after this, so a capture past it can
+     * fail even though the payment still looks authorized. Null until the
+     * customer has approved.
+     */
+    capture_guaranteed_until: string | null;
+    terms_version: string | null;
+    terms_accepted_at: string | null;
+    /**
+     * The wallet's numeric error code from the last failed operation. Branch on
+     * this; the human-readable reason and the trace id stay in Medal's own logs.
+     */
+    failure_code: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+}
+/** What `payment.start(...)` hands back. The redirect URL is shown ONCE. */
+interface BookingPaymentStart {
+    reference: string;
+    /**
+     * Send the customer here UNCHANGED — hand it to the Vipps Widget SDK, do not
+     * put it in an iframe of your own and do not rewrite it. It is not returned
+     * again by `payment.get(...)`: the payment behind it expires after ten
+     * minutes, so a cached redirect leads into a payment that no longer exists.
+     * Start a new attempt instead of caching this.
+     */
+    redirect_url: string;
+    state: BookingPaymentState;
+}
+/** Input for `bookings.payment.start(...)` and its manage-token twin. */
+interface StartBookingPaymentInput {
+    /**
+     * Where the wallet returns the customer. Must be a URL one of your own sites
+     * vouches for — anything else is refused with 422, not 400: the URL is
+     * well-formed, it is just not yours.
+     */
+    return_url: string;
+    /**
+     * REQUIRED, and must be `true`. The customer has to actively accept your
+     * terms BEFORE a payment is initiated — sending them to a payment link with
+     * no acceptance step makes the integration non-compliant, so the API refuses
+     * a body that omits it or sends `false` with a 400.
+     */
+    terms_accepted: true;
+    /** Your own version label for the terms they accepted. */
+    terms_version?: string;
+    /** The exact text they accepted, stored with the consent record. */
+    terms_text?: string;
+}
 /**
  * Pagination for a bookings page.
  *
@@ -1034,6 +1138,62 @@ interface CreateBookingEventInput {
     resource_ids: string[];
 }
 
+/**
+ * Payments on a booking addressed by BOOKING ID — the business starting or
+ * inspecting a payment for one of its own bookings.
+ *
+ * The outcome reaches your system through Medal, never through the browser: a
+ * customer can close the tab, hit back, or edit the return URL, so treat the
+ * return redirect as a hint to re-read and nothing more. Poll {@link get} on
+ * your return page, or read the booking's `payment_status`.
+ *
+ * @example
+ * ```ts
+ * const { data } = await medal.bookings.payment.start("bk_1", {
+ *   return_url: "https://example.no/retur",
+ *   terms_accepted: true,
+ * });
+ * // Hand data.redirect_url to the Vipps Widget SDK, unchanged.
+ * ```
+ */
+declare class BookingsPayment {
+    private client;
+    constructor(client: BaseClient);
+    /**
+     * Reserve (or charge) the booking's amount and get the wallet redirect.
+     *
+     * Automatically idempotent: the SDK mints an `Idempotency-Key` so its own
+     * 5xx retries replay instead of reserving twice. One live payment per
+     * booking — starting a second while one is outstanding answers 409; wait for
+     * the first to be approved, aborted, or to expire (ten minutes).
+     *
+     * A `return_url` the workspace's own sites do not vouch for is refused with
+     * 422, not 400: the URL parses, it is just not yours.
+     */
+    start(id: string, input: StartBookingPaymentInput, options?: RequestOptions): Promise<ApiResponse<BookingPaymentStart>>;
+    /**
+     * The newest payment attempt on the booking.
+     *
+     * Throws `MedalApiError` with status 404 when the booking has no payment at
+     * all — "not started" and "unknown booking" answer alike, so this is not an
+     * existence oracle. Earlier attempts are not returned; attempt N+1 is what
+     * "the payment" means to a caller polling a retry.
+     */
+    get(id: string): Promise<ApiResponse<BookingPayment>>;
+}
+/**
+ * The same two payment operations, authorized by the customer's manage token
+ * instead of by booking id — for relaying a click on their own confirmation
+ * link. Identical wire shapes; only the credential differs.
+ */
+declare class BookingsManagePayment {
+    private client;
+    constructor(client: BaseClient);
+    /** Start a payment on the customer's behalf. See {@link BookingsPayment.start}. */
+    start(token: string, input: StartBookingPaymentInput, options?: RequestOptions): Promise<ApiResponse<BookingPaymentStart>>;
+    /** Read the payment on the customer's own booking. 404 when there is none. */
+    get(token: string): Promise<ApiResponse<BookingPayment>>;
+}
 /**
  * Customer-side booking management, addressed by the show-once manage token
  * from `bookings.create(...)` rather than by booking id.
@@ -1048,6 +1208,8 @@ interface CreateBookingEventInput {
  */
 declare class BookingsManage {
     private client;
+    /** Payments authorized by the manage token rather than by booking id. */
+    readonly payment: BookingsManagePayment;
     constructor(client: BaseClient);
     /**
      * Read what the holder of a manage token may see and do. Honour
@@ -1137,6 +1299,8 @@ declare class Bookings {
     readonly relations: BookingsRelations;
     /** Arrangementer — scheduled group sessions bookings register against. */
     readonly events: BookingsEvents;
+    /** Vipps payments on a booking, as the business. */
+    readonly payment: BookingsPayment;
     constructor(client: BaseClient);
     /** List the bookable service catalogue. Active-only unless asked otherwise. */
     listServices(options?: ListBookingServicesOptions): Promise<ApiResponse<BookingService[]>>;
@@ -2823,4 +2987,4 @@ declare class Medal {
 /** Convenience factory — equivalent to `new Medal(apiKey, options)`. */
 declare function createMedalClient(apiKey: string, options?: MedalOptions): Medal;
 
-export { type Activity, type AddNoteInput, type ApiResponse, type AutoConfirmContext, type AutoConfirmOptions, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, type Booking, type BookingActionResult, type BookingAvailabilityOptions, type BookingCancelledBy, type BookingClaimableCreatedVia, type BookingContactInput, type BookingCreateResult, type BookingCreatedVia, type BookingEvent, type BookingEventStatus, type BookingEventTemplateKey, type BookingPaymentStatus, type BookingRescheduleResult, type BookingResource, type BookingResourceType, type BookingScheduleDay, type BookingScheduleOptions, type BookingService, type BookingSlot, type BookingStatus, type BookingTimestampInput, Bookings, type BookingsPage, type BookingsPagination, CAPABILITY_IDS, CAPABILITY_ROUTES, type CancelBookingInput, type CapabilityConfirmation, CapabilityConfirmations, CapabilityConfirmer, type CapabilityId, type CapabilityPathParamValue, type CapabilityRoute, type CapabilityWriteBodies, type CapabilityWriteRequest, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactPerson, type ContactRelation, type ContactRelations, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateBookingEventInput, type CreateBookingInput, type CreateBookingItemInput, type CreateConnectLinkInput, type CreateContactInput, type CreateContactPersonInput, type CreateContactRelationInput, type CreateContactRelationResult, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, type CreatedBooking, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type IssueCapabilityConfirmationInput, type ListBookingEventsOptions, type ListBookingServicesOptions, type ListBookingsOptions, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, type ManageSummary, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryStatus, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, Portal, type PortalBooking, type PortalBookingStatus, type PortalBookings, type PortalConsentRecord, type PortalContactSummary, type PortalExport, type PortalExportRelation, type PortalFamilyMember, type PortalLabels, type PortalLoginStartInput, type PortalLoginStartResult, type PortalPerson, type PortalProfile, type PortalProfilePatch, type PortalSession, type PortalVerifyInput, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type RelationType, type ReplyCreateResult, type RequestOptions, type RescheduleBookingInput, Scan, type ScanCompany, type ScanCreateInput, type ScanCreateResult, type ScanJob, type ScanResultPayload, type ScanStatus, type ScanSubScores, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type TestPingEvent, type UpdateBookingInput, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WaitForScanOptions, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };
+export { type Activity, type AddNoteInput, type ApiResponse, type AutoConfirmContext, type AutoConfirmOptions, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, type Booking, type BookingActionResult, type BookingAvailabilityOptions, type BookingCancelledBy, type BookingClaimableCreatedVia, type BookingContactInput, type BookingCreateResult, type BookingCreatedVia, type BookingEvent, type BookingEventStatus, type BookingEventTemplateKey, type BookingPayment, type BookingPaymentMode, type BookingPaymentStart, type BookingPaymentState, type BookingPaymentStatus, type BookingRescheduleResult, type BookingResource, type BookingResourceType, type BookingScheduleDay, type BookingScheduleOptions, type BookingService, type BookingSlot, type BookingStatus, type BookingTimestampInput, Bookings, type BookingsPage, type BookingsPagination, CAPABILITY_IDS, CAPABILITY_ROUTES, type CancelBookingInput, type CapabilityConfirmation, CapabilityConfirmations, CapabilityConfirmer, type CapabilityId, type CapabilityPathParamValue, type CapabilityRoute, type CapabilityWriteBodies, type CapabilityWriteRequest, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactPerson, type ContactRelation, type ContactRelations, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateBookingEventInput, type CreateBookingInput, type CreateBookingItemInput, type CreateConnectLinkInput, type CreateContactInput, type CreateContactPersonInput, type CreateContactRelationInput, type CreateContactRelationResult, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, type CreatedBooking, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type IssueCapabilityConfirmationInput, type ListBookingEventsOptions, type ListBookingServicesOptions, type ListBookingsOptions, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, type ManageSummary, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryStatus, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, Portal, type PortalBooking, type PortalBookingStatus, type PortalBookings, type PortalConsentRecord, type PortalContactSummary, type PortalExport, type PortalExportRelation, type PortalFamilyMember, type PortalLabels, type PortalLoginStartInput, type PortalLoginStartResult, type PortalPerson, type PortalProfile, type PortalProfilePatch, type PortalSession, type PortalVerifyInput, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type RelationType, type ReplyCreateResult, type RequestOptions, type RescheduleBookingInput, Scan, type ScanCompany, type ScanCreateInput, type ScanCreateResult, type ScanJob, type ScanResultPayload, type ScanStatus, type ScanSubScores, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type StartBookingPaymentInput, type TestPingEvent, type UpdateBookingInput, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WaitForScanOptions, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };

package/dist/src/index.d.ts

@@ -635,6 +635,20 @@ type BookingStatus = "pending" | "confirmed" | "completed" | "cancelled" | "no_s
 type BookingCancelledBy = "customer" | "staff" | "system";
 /** Payment state of a booking. */
 type BookingPaymentStatus = "none" | "reserved" | "captured" | "refunded";
+/**
+ * What a booking must have paid before the business honours it: nothing, a
+ * reservation taken at booking time and captured later, or the full amount up
+ * front.
+ */
+type BookingPaymentMode = "none" | "reserve" | "prepay";
+/**
+ * The state of one attempt at paying for a booking.
+ *
+ * This is Medal's vocabulary, not the wallet's — a Vipps payment stays
+ * `AUTHORIZED` after a capture, so read the øre aggregates on
+ * {@link BookingPayment} to learn what actually moved.
+ */
+type BookingPaymentState = "created" | "authorized" | "captured" | "cancelled" | "refunded" | "failed" | "expired";
 /** Surface a booking was created through. API-created bookings are `api`. */
 type BookingCreatedVia = "web" | "dashboard" | "walk_in" | "api";
 /** Kind of bookable resource a booking lands on. */
@@ -669,6 +683,13 @@ interface Booking {
     /** Set on the booking a reschedule created, pointing at the one it replaced. */
     rescheduled_from_id: string | null;
     payment_status: BookingPaymentStatus;
+    /**
+     * What this booking required when it was made — frozen at creation, so
+     * changing the workspace or service rule later does not rewrite history.
+     * `payment_status` alone cannot tell "owes nothing" from "has not paid yet";
+     * this is the field that does.
+     */
+    payment_mode: BookingPaymentMode;
     /** Price in integer øre. */
     amount_ore: number | null;
     /** Customer-visible note. */
@@ -694,6 +715,11 @@ interface BookingService {
     /** Resource types this service needs, e.g. `["staff"]`. */
     resource_requirements: string[];
     bookable_online: boolean;
+    /**
+     * Per-service payment requirement. `null` means "no override" — the
+     * workspace rule decides.
+     */
+    payment: BookingPaymentMode | null;
     max_per_booking: number | null;
     color: string | null;
     sort_order: number | null;
@@ -837,6 +863,12 @@ interface ManageSummary {
     /** Price in integer øre. */
     amount_ore: number | null;
     payment_status: BookingPaymentStatus | null;
+    /**
+     * What this booking requires. `payment_status: "none"` is the same answer
+     * for a booking that owes nothing and one that has not paid yet, so this is
+     * what a manage page checks before offering «Betal nå».
+     */
+    payment_mode: BookingPaymentMode;
     /** IANA zone the booking's local times should be rendered in. */
     time_zone: string | null;
     cancel_window_hours: number | null;
@@ -874,6 +906,78 @@ interface RescheduleBookingInput {
     new_start_ts: BookingTimestampInput;
     new_resource_id?: string;
 }
+/**
+ * One payment attempt on a booking.
+ *
+ * Money is integer øre, and the four aggregates are numbers rather than nulls:
+ * "nothing has been captured" is `0`, so summing them never needs a null
+ * guard. `redirect_url` is deliberately absent — it is handed over once by
+ * {@link BookingPaymentStart} and never re-read.
+ */
+interface BookingPayment {
+    reference: string;
+    provider: "vipps";
+    state: BookingPaymentState;
+    mode: Exclude<BookingPaymentMode, "none">;
+    /** 1 for the first attempt on this booking, incrementing per retry. */
+    attempt: number;
+    /** The amount the attempt is for, in integer øre. */
+    amount_ore: number;
+    authorized_ore: number;
+    captured_ore: number;
+    refunded_ore: number;
+    cancelled_ore: number;
+    currency: "NOK";
+    /**
+     * The last moment a capture is GUARANTEED to succeed. The card behind the
+     * wallet may release the reservation after this, so a capture past it can
+     * fail even though the payment still looks authorized. Null until the
+     * customer has approved.
+     */
+    capture_guaranteed_until: string | null;
+    terms_version: string | null;
+    terms_accepted_at: string | null;
+    /**
+     * The wallet's numeric error code from the last failed operation. Branch on
+     * this; the human-readable reason and the trace id stay in Medal's own logs.
+     */
+    failure_code: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+}
+/** What `payment.start(...)` hands back. The redirect URL is shown ONCE. */
+interface BookingPaymentStart {
+    reference: string;
+    /**
+     * Send the customer here UNCHANGED — hand it to the Vipps Widget SDK, do not
+     * put it in an iframe of your own and do not rewrite it. It is not returned
+     * again by `payment.get(...)`: the payment behind it expires after ten
+     * minutes, so a cached redirect leads into a payment that no longer exists.
+     * Start a new attempt instead of caching this.
+     */
+    redirect_url: string;
+    state: BookingPaymentState;
+}
+/** Input for `bookings.payment.start(...)` and its manage-token twin. */
+interface StartBookingPaymentInput {
+    /**
+     * Where the wallet returns the customer. Must be a URL one of your own sites
+     * vouches for — anything else is refused with 422, not 400: the URL is
+     * well-formed, it is just not yours.
+     */
+    return_url: string;
+    /**
+     * REQUIRED, and must be `true`. The customer has to actively accept your
+     * terms BEFORE a payment is initiated — sending them to a payment link with
+     * no acceptance step makes the integration non-compliant, so the API refuses
+     * a body that omits it or sends `false` with a 400.
+     */
+    terms_accepted: true;
+    /** Your own version label for the terms they accepted. */
+    terms_version?: string;
+    /** The exact text they accepted, stored with the consent record. */
+    terms_text?: string;
+}
 /**
  * Pagination for a bookings page.
  *
@@ -1034,6 +1138,62 @@ interface CreateBookingEventInput {
     resource_ids: string[];
 }
 
+/**
+ * Payments on a booking addressed by BOOKING ID — the business starting or
+ * inspecting a payment for one of its own bookings.
+ *
+ * The outcome reaches your system through Medal, never through the browser: a
+ * customer can close the tab, hit back, or edit the return URL, so treat the
+ * return redirect as a hint to re-read and nothing more. Poll {@link get} on
+ * your return page, or read the booking's `payment_status`.
+ *
+ * @example
+ * ```ts
+ * const { data } = await medal.bookings.payment.start("bk_1", {
+ *   return_url: "https://example.no/retur",
+ *   terms_accepted: true,
+ * });
+ * // Hand data.redirect_url to the Vipps Widget SDK, unchanged.
+ * ```
+ */
+declare class BookingsPayment {
+    private client;
+    constructor(client: BaseClient);
+    /**
+     * Reserve (or charge) the booking's amount and get the wallet redirect.
+     *
+     * Automatically idempotent: the SDK mints an `Idempotency-Key` so its own
+     * 5xx retries replay instead of reserving twice. One live payment per
+     * booking — starting a second while one is outstanding answers 409; wait for
+     * the first to be approved, aborted, or to expire (ten minutes).
+     *
+     * A `return_url` the workspace's own sites do not vouch for is refused with
+     * 422, not 400: the URL parses, it is just not yours.
+     */
+    start(id: string, input: StartBookingPaymentInput, options?: RequestOptions): Promise<ApiResponse<BookingPaymentStart>>;
+    /**
+     * The newest payment attempt on the booking.
+     *
+     * Throws `MedalApiError` with status 404 when the booking has no payment at
+     * all — "not started" and "unknown booking" answer alike, so this is not an
+     * existence oracle. Earlier attempts are not returned; attempt N+1 is what
+     * "the payment" means to a caller polling a retry.
+     */
+    get(id: string): Promise<ApiResponse<BookingPayment>>;
+}
+/**
+ * The same two payment operations, authorized by the customer's manage token
+ * instead of by booking id — for relaying a click on their own confirmation
+ * link. Identical wire shapes; only the credential differs.
+ */
+declare class BookingsManagePayment {
+    private client;
+    constructor(client: BaseClient);
+    /** Start a payment on the customer's behalf. See {@link BookingsPayment.start}. */
+    start(token: string, input: StartBookingPaymentInput, options?: RequestOptions): Promise<ApiResponse<BookingPaymentStart>>;
+    /** Read the payment on the customer's own booking. 404 when there is none. */
+    get(token: string): Promise<ApiResponse<BookingPayment>>;
+}
 /**
  * Customer-side booking management, addressed by the show-once manage token
  * from `bookings.create(...)` rather than by booking id.
@@ -1048,6 +1208,8 @@ interface CreateBookingEventInput {
  */
 declare class BookingsManage {
     private client;
+    /** Payments authorized by the manage token rather than by booking id. */
+    readonly payment: BookingsManagePayment;
     constructor(client: BaseClient);
     /**
      * Read what the holder of a manage token may see and do. Honour
@@ -1137,6 +1299,8 @@ declare class Bookings {
     readonly relations: BookingsRelations;
     /** Arrangementer — scheduled group sessions bookings register against. */
     readonly events: BookingsEvents;
+    /** Vipps payments on a booking, as the business. */
+    readonly payment: BookingsPayment;
     constructor(client: BaseClient);
     /** List the bookable service catalogue. Active-only unless asked otherwise. */
     listServices(options?: ListBookingServicesOptions): Promise<ApiResponse<BookingService[]>>;
@@ -2823,4 +2987,4 @@ declare class Medal {
 /** Convenience factory — equivalent to `new Medal(apiKey, options)`. */
 declare function createMedalClient(apiKey: string, options?: MedalOptions): Medal;
 
-export { type Activity, type AddNoteInput, type ApiResponse, type AutoConfirmContext, type AutoConfirmOptions, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, type Booking, type BookingActionResult, type BookingAvailabilityOptions, type BookingCancelledBy, type BookingClaimableCreatedVia, type BookingContactInput, type BookingCreateResult, type BookingCreatedVia, type BookingEvent, type BookingEventStatus, type BookingEventTemplateKey, type BookingPaymentStatus, type BookingRescheduleResult, type BookingResource, type BookingResourceType, type BookingScheduleDay, type BookingScheduleOptions, type BookingService, type BookingSlot, type BookingStatus, type BookingTimestampInput, Bookings, type BookingsPage, type BookingsPagination, CAPABILITY_IDS, CAPABILITY_ROUTES, type CancelBookingInput, type CapabilityConfirmation, CapabilityConfirmations, CapabilityConfirmer, type CapabilityId, type CapabilityPathParamValue, type CapabilityRoute, type CapabilityWriteBodies, type CapabilityWriteRequest, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactPerson, type ContactRelation, type ContactRelations, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateBookingEventInput, type CreateBookingInput, type CreateBookingItemInput, type CreateConnectLinkInput, type CreateContactInput, type CreateContactPersonInput, type CreateContactRelationInput, type CreateContactRelationResult, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, type CreatedBooking, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type IssueCapabilityConfirmationInput, type ListBookingEventsOptions, type ListBookingServicesOptions, type ListBookingsOptions, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, type ManageSummary, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryStatus, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, Portal, type PortalBooking, type PortalBookingStatus, type PortalBookings, type PortalConsentRecord, type PortalContactSummary, type PortalExport, type PortalExportRelation, type PortalFamilyMember, type PortalLabels, type PortalLoginStartInput, type PortalLoginStartResult, type PortalPerson, type PortalProfile, type PortalProfilePatch, type PortalSession, type PortalVerifyInput, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type RelationType, type ReplyCreateResult, type RequestOptions, type RescheduleBookingInput, Scan, type ScanCompany, type ScanCreateInput, type ScanCreateResult, type ScanJob, type ScanResultPayload, type ScanStatus, type ScanSubScores, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type TestPingEvent, type UpdateBookingInput, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WaitForScanOptions, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };
+export { type Activity, type AddNoteInput, type ApiResponse, type AutoConfirmContext, type AutoConfirmOptions, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, type Booking, type BookingActionResult, type BookingAvailabilityOptions, type BookingCancelledBy, type BookingClaimableCreatedVia, type BookingContactInput, type BookingCreateResult, type BookingCreatedVia, type BookingEvent, type BookingEventStatus, type BookingEventTemplateKey, type BookingPayment, type BookingPaymentMode, type BookingPaymentStart, type BookingPaymentState, type BookingPaymentStatus, type BookingRescheduleResult, type BookingResource, type BookingResourceType, type BookingScheduleDay, type BookingScheduleOptions, type BookingService, type BookingSlot, type BookingStatus, type BookingTimestampInput, Bookings, type BookingsPage, type BookingsPagination, CAPABILITY_IDS, CAPABILITY_ROUTES, type CancelBookingInput, type CapabilityConfirmation, CapabilityConfirmations, CapabilityConfirmer, type CapabilityId, type CapabilityPathParamValue, type CapabilityRoute, type CapabilityWriteBodies, type CapabilityWriteRequest, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactPerson, type ContactRelation, type ContactRelations, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateBookingEventInput, type CreateBookingInput, type CreateBookingItemInput, type CreateConnectLinkInput, type CreateContactInput, type CreateContactPersonInput, type CreateContactRelationInput, type CreateContactRelationResult, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, type CreatedBooking, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type IssueCapabilityConfirmationInput, type ListBookingEventsOptions, type ListBookingServicesOptions, type ListBookingsOptions, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, type ManageSummary, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryStatus, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, Portal, type PortalBooking, type PortalBookingStatus, type PortalBookings, type PortalConsentRecord, type PortalContactSummary, type PortalExport, type PortalExportRelation, type PortalFamilyMember, type PortalLabels, type PortalLoginStartInput, type PortalLoginStartResult, type PortalPerson, type PortalProfile, type PortalProfilePatch, type PortalSession, type PortalVerifyInput, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type RelationType, type ReplyCreateResult, type RequestOptions, type RescheduleBookingInput, Scan, type ScanCompany, type ScanCreateInput, type ScanCreateResult, type ScanJob, type ScanResultPayload, type ScanStatus, type ScanSubScores, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type StartBookingPaymentInput, type TestPingEvent, type UpdateBookingInput, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WaitForScanOptions, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };

package/dist/src/index.js

@@ -340,11 +340,67 @@ var CapabilityConfirmer = class {
 };
 
 // src/resources/bookings.ts
+var BookingsPayment = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /**
+   * Reserve (or charge) the booking's amount and get the wallet redirect.
+   *
+   * Automatically idempotent: the SDK mints an `Idempotency-Key` so its own
+   * 5xx retries replay instead of reserving twice. One live payment per
+   * booking — starting a second while one is outstanding answers 409; wait for
+   * the first to be approved, aborted, or to expire (ten minutes).
+   *
+   * A `return_url` the workspace's own sites do not vouch for is refused with
+   * 422, not 400: the URL parses, it is just not yours.
+   */
+  async start(id, input, options) {
+    return this.client.postOnce(
+      `/api/v1/bookings/${encodeURIComponent(id)}/payment`,
+      input,
+      options
+    );
+  }
+  /**
+   * The newest payment attempt on the booking.
+   *
+   * Throws `MedalApiError` with status 404 when the booking has no payment at
+   * all — "not started" and "unknown booking" answer alike, so this is not an
+   * existence oracle. Earlier attempts are not returned; attempt N+1 is what
+   * "the payment" means to a caller polling a retry.
+   */
+  async get(id) {
+    return this.client.get(`/api/v1/bookings/${encodeURIComponent(id)}/payment`);
+  }
+};
+var BookingsManagePayment = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** Start a payment on the customer's behalf. See {@link BookingsPayment.start}. */
+  async start(token, input, options) {
+    return this.client.postOnce(
+      `/api/v1/bookings/manage/${encodeURIComponent(token)}/payment`,
+      input,
+      options
+    );
+  }
+  /** Read the payment on the customer's own booking. 404 when there is none. */
+  async get(token) {
+    return this.client.get(`/api/v1/bookings/manage/${encodeURIComponent(token)}/payment`);
+  }
+};
 var BookingsManage = class {
   constructor(client) {
     this.client = client;
+    this.payment = new BookingsManagePayment(client);
   }
   client;
+  /** Payments authorized by the manage token rather than by booking id. */
+  payment;
   /**
    * Read what the holder of a manage token may see and do. Honour
    * `can_cancel` / `can_reschedule` — they already apply the policy windows.
@@ -432,6 +488,7 @@ var Bookings = class {
     this.persons = new BookingsPersons(client);
     this.relations = new BookingsRelations(client);
     this.events = new BookingsEvents(client);
+    this.payment = new BookingsPayment(client);
   }
   client;
   /** Customer-side actions addressed by manage token. */
@@ -442,6 +499,8 @@ var Bookings = class {
   relations;
   /** Arrangementer — scheduled group sessions bookings register against. */
   events;
+  /** Vipps payments on a booking, as the business. */
+  payment;
   /** List the bookable service catalogue. Active-only unless asked otherwise. */
   async listServices(options) {
     const params = {};