@vivoa/partner-sdk 0.1.1 → 0.2.0

package/dist/cjs/adapters/in-memory/fake-vivoa.js

@@ -155,7 +155,7 @@ class FakeVivoa {
     async route(op, method, url, rawBody) {
         const path = url.pathname.replace(/^\/partner\/v1/, '');
         const body = rawBody ? JSON.parse(rawBody) : {};
-        const merchantRoute = path.match(/^\/merchants\/([^/]+)\/(status|activate|suspend|reactivate)$/);
+        const merchantRoute = path.match(/^\/merchants\/([^/]+)\/(status|activate|suspend|reactivate|admin-ticket)$/);
         if (method === 'GET' && path === '/me')
             return this.profile(op);
         if (method === 'POST' && path === '/me/rotate-secret') {
@@ -192,6 +192,16 @@ class FakeVivoa {
                     this.emit(op, 'merchant.reactivated', merchant);
                     return { storeId: merchant.id, status: 'active' };
                 }
+                if (action === 'admin-ticket') {
+                    if (merchant.status !== 'active')
+                        throw new HttpError(403, 'Store is not active');
+                    const rawPath = typeof body.returnPath === 'string' ? body.returnPath : '/admin';
+                    const returnPath = rawPath.startsWith('/') && !rawPath.startsWith('//') ? rawPath : '/admin';
+                    const base = merchant.domain ? `https://${merchant.domain}` : `https://${merchant.handle}.vivoa.test`;
+                    return {
+                        redirectUrl: `${base}/auth/admin-redeem?token=fake-${merchant.id}${returnPath === '/admin' ? '' : `&rp=${encodeURIComponent(returnPath)}`}`,
+                    };
+                }
             }
         }
         if (method === 'GET' && path === '/fleet/analytics')

package/dist/cjs/application/resources/merchants.d.ts

@@ -1,5 +1,5 @@
 import type { SignedHttpClient } from '../signed-http.ts';
-import { type CreateMerchantInput, type ListMerchantsQuery, type Merchant, type MerchantStatus, type Page } from '../../domain/merchant.ts';
+import { type AdminTicketOptions, type CreateMerchantInput, type ListMerchantsQuery, type Merchant, type MerchantAdminTicket, type MerchantStatus, type Page } from '../../domain/merchant.ts';
 /** Provisioning is synchronous on the platform: allow it minutes, not seconds. */
 export declare const DEFAULT_ACTIVATE_TIMEOUT_MS: number;
 export declare class MerchantsResource {
@@ -33,5 +33,11 @@ export declare class MerchantsResource {
         storeId: string;
         status: 'active';
     }>;
+    /**
+     * Mints a single-use SSO URL into this merchant's store admin, signed in AS
+     * the store owner. The link expires in ~60s — redirect to it right away, do
+     * not store it. 403 if the merchant is not in your fleet or is not active.
+     */
+    adminTicket(merchantId: string, options?: AdminTicketOptions): Promise<MerchantAdminTicket>;
 }
 export declare function validateCreate(input: CreateMerchantInput): void;

package/dist/cjs/application/resources/merchants.js

@@ -62,6 +62,16 @@ class MerchantsResource {
     async reactivate(merchantId) {
         return this.http.request('POST', `/partner/v1/merchants/${encodeId(merchantId)}/reactivate`);
     }
+    /**
+     * Mints a single-use SSO URL into this merchant's store admin, signed in AS
+     * the store owner. The link expires in ~60s — redirect to it right away, do
+     * not store it. 403 if the merchant is not in your fleet or is not active.
+     */
+    async adminTicket(merchantId, options = {}) {
+        return this.http.request('POST', `/partner/v1/merchants/${encodeId(merchantId)}/admin-ticket`, {
+            body: options.returnPath ? { returnPath: options.returnPath } : {},
+        });
+    }
 }
 exports.MerchantsResource = MerchantsResource;
 function encodeId(id) {

package/dist/cjs/domain/merchant.d.ts

@@ -49,6 +49,22 @@ export interface CreateMerchantInput {
      */
     externalId?: string;
 }
+/** Options for `merchants.adminTicket()`. */
+export interface AdminTicketOptions {
+    /**
+     * Same-origin absolute path to land on inside the store admin (defaults to
+     * `/admin`). Must start with a single `/` — the platform re-validates and
+     * falls back to `/admin` on anything scheme-relative or malformed.
+     */
+    returnPath?: string;
+}
+/**
+ * Single-use SSO handoff into a merchant's store admin. `redirectUrl` is signed
+ * in AS the store owner and expires in ~60s — open it immediately, never cache.
+ */
+export interface MerchantAdminTicket {
+    redirectUrl: string;
+}
 export interface ListMerchantsQuery {
     page?: number;
     /** Max 100. */

package/dist/cjs/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.1.1";
+export declare const SDK_VERSION = "0.2.0";

package/dist/cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = '0.1.1';
+exports.SDK_VERSION = '0.2.0';

package/dist/esm/adapters/in-memory/fake-vivoa.js

@@ -152,7 +152,7 @@ export class FakeVivoa {
     async route(op, method, url, rawBody) {
         const path = url.pathname.replace(/^\/partner\/v1/, '');
         const body = rawBody ? JSON.parse(rawBody) : {};
-        const merchantRoute = path.match(/^\/merchants\/([^/]+)\/(status|activate|suspend|reactivate)$/);
+        const merchantRoute = path.match(/^\/merchants\/([^/]+)\/(status|activate|suspend|reactivate|admin-ticket)$/);
         if (method === 'GET' && path === '/me')
             return this.profile(op);
         if (method === 'POST' && path === '/me/rotate-secret') {
@@ -189,6 +189,16 @@ export class FakeVivoa {
                     this.emit(op, 'merchant.reactivated', merchant);
                     return { storeId: merchant.id, status: 'active' };
                 }
+                if (action === 'admin-ticket') {
+                    if (merchant.status !== 'active')
+                        throw new HttpError(403, 'Store is not active');
+                    const rawPath = typeof body.returnPath === 'string' ? body.returnPath : '/admin';
+                    const returnPath = rawPath.startsWith('/') && !rawPath.startsWith('//') ? rawPath : '/admin';
+                    const base = merchant.domain ? `https://${merchant.domain}` : `https://${merchant.handle}.vivoa.test`;
+                    return {
+                        redirectUrl: `${base}/auth/admin-redeem?token=fake-${merchant.id}${returnPath === '/admin' ? '' : `&rp=${encodeURIComponent(returnPath)}`}`,
+                    };
+                }
             }
         }
         if (method === 'GET' && path === '/fleet/analytics')

package/dist/esm/application/resources/merchants.d.ts

@@ -1,5 +1,5 @@
 import type { SignedHttpClient } from '../signed-http.ts';
-import { type CreateMerchantInput, type ListMerchantsQuery, type Merchant, type MerchantStatus, type Page } from '../../domain/merchant.ts';
+import { type AdminTicketOptions, type CreateMerchantInput, type ListMerchantsQuery, type Merchant, type MerchantAdminTicket, type MerchantStatus, type Page } from '../../domain/merchant.ts';
 /** Provisioning is synchronous on the platform: allow it minutes, not seconds. */
 export declare const DEFAULT_ACTIVATE_TIMEOUT_MS: number;
 export declare class MerchantsResource {
@@ -33,5 +33,11 @@ export declare class MerchantsResource {
         storeId: string;
         status: 'active';
     }>;
+    /**
+     * Mints a single-use SSO URL into this merchant's store admin, signed in AS
+     * the store owner. The link expires in ~60s — redirect to it right away, do
+     * not store it. 403 if the merchant is not in your fleet or is not active.
+     */
+    adminTicket(merchantId: string, options?: AdminTicketOptions): Promise<MerchantAdminTicket>;
 }
 export declare function validateCreate(input: CreateMerchantInput): void;

package/dist/esm/application/resources/merchants.js

@@ -58,6 +58,16 @@ export class MerchantsResource {
     async reactivate(merchantId) {
         return this.http.request('POST', `/partner/v1/merchants/${encodeId(merchantId)}/reactivate`);
     }
+    /**
+     * Mints a single-use SSO URL into this merchant's store admin, signed in AS
+     * the store owner. The link expires in ~60s — redirect to it right away, do
+     * not store it. 403 if the merchant is not in your fleet or is not active.
+     */
+    async adminTicket(merchantId, options = {}) {
+        return this.http.request('POST', `/partner/v1/merchants/${encodeId(merchantId)}/admin-ticket`, {
+            body: options.returnPath ? { returnPath: options.returnPath } : {},
+        });
+    }
 }
 function encodeId(id) {
     if (!id)

package/dist/esm/cli.js

@@ -13,6 +13,7 @@ const USAGE = `vivoa-partner <command> [options]
   merchants list [--search s] [--external-id id] [--page n] [--limit n]
   merchants status <id>
   merchants suspend <id> | reactivate <id>
+  merchants admin-ticket <id> [--return-path /admin/team]
   store create --external-id id --name n --email e --countries SV,GT [--industry i] --yes
                                          Create (or resume) + activate + wait until live.
                                          The platform assigns the handle; --external-id is
@@ -36,6 +37,7 @@ async function main(argv) {
             industry: { type: 'string' },
             url: { type: 'string' },
             events: { type: 'string' },
+            'return-path': { type: 'string' },
             yes: { type: 'boolean', default: false },
             help: { type: 'boolean', short: 'h', default: false },
         },
@@ -69,6 +71,10 @@ async function main(argv) {
             return client.merchants.suspend(required(arg, '<id>'));
         case 'merchants reactivate':
             return client.merchants.reactivate(required(arg, '<id>'));
+        case 'merchants admin-ticket':
+            return client.merchants.adminTicket(required(arg, '<id>'), {
+                returnPath: values['return-path'],
+            });
         case 'store create': {
             if (!values.yes)
                 throw new VivoaError('store create provisions REAL infrastructure — re-run with --yes');

package/dist/esm/domain/merchant.d.ts

@@ -49,6 +49,22 @@ export interface CreateMerchantInput {
      */
     externalId?: string;
 }
+/** Options for `merchants.adminTicket()`. */
+export interface AdminTicketOptions {
+    /**
+     * Same-origin absolute path to land on inside the store admin (defaults to
+     * `/admin`). Must start with a single `/` — the platform re-validates and
+     * falls back to `/admin` on anything scheme-relative or malformed.
+     */
+    returnPath?: string;
+}
+/**
+ * Single-use SSO handoff into a merchant's store admin. `redirectUrl` is signed
+ * in AS the store owner and expires in ~60s — open it immediately, never cache.
+ */
+export interface MerchantAdminTicket {
+    redirectUrl: string;
+}
 export interface ListMerchantsQuery {
     page?: number;
     /** Max 100. */

package/dist/esm/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.1.1";
+export declare const SDK_VERSION = "0.2.0";

package/dist/esm/version.js

@@ -1 +1 @@
-export const SDK_VERSION = '0.1.1';
+export const SDK_VERSION = '0.2.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vivoa/partner-sdk",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Official SDK for the Vivoa Partner API — create and operate stores for your merchants",
   "license": "UNLICENSED",
   "type": "module",