@waffo/pancake-nextjs 0.7.0 → 0.9.0

package/dist/server.d.cts

@@ -1,20 +1,37 @@
-import { IssueSessionTokenParams, SessionToken, AnonymousCheckoutParams, AuthenticatedCheckoutParams, CheckoutSessionResult, AuthenticatedCheckoutResult, GraphQLParams, GraphQLResponse, WaffoPancakeConfig } from '@waffo/pancake-ts';
+import { RequestOptions, IssueSessionTokenParams, SessionToken, AnonymousCheckoutParams, AuthenticatedCheckoutParams, CreatePlanChangeSessionParams, AuthenticatedPlanChangeParams, CheckoutSessionResult, AuthenticatedCheckoutResult, GraphQLParams, GraphQLResponse, WaffoPancakeConfig } from '@waffo/pancake-ts';
 
-/** Parameters for the checkout server action */
+/**
+ * Parameters for the checkout server action.
+ *
+ * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)
+ * or a plan change for an existing subscription (`planChange` /
+ * `authenticatedPlanChange`, which carry the required `originOrderId`).
+ */
 type CheckoutActionParams = ({
     type?: "anonymous";
 } & AnonymousCheckoutParams) | ({
     type: "authenticated";
-} & AuthenticatedCheckoutParams);
+} & AuthenticatedCheckoutParams) | ({
+    type: "planChange";
+} & CreatePlanChangeSessionParams) | ({
+    type: "authenticatedPlanChange";
+} & AuthenticatedPlanChangeParams);
 /** Result of the checkout server action */
 type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;
-/** Server action signature for checkout */
-type CheckoutAction = (params: CheckoutActionParams) => Promise<CheckoutActionResult>;
+/**
+ * Server action signature for checkout.
+ *
+ * The optional `options` carries an `idempotencyKey`; without one no key is sent
+ * and a retried call creates a second session.
+ */
+type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;
 /**
  * Create a server action that handles checkout session creation.
  *
  * The private key is captured in the closure and never sent to the client.
  *
+ * Handles both new purchases and plan changes; `params.type` selects the flow.
+ *
  * @param config - WaffoPancake client configuration (merchantId + privateKey)
  * @returns A server action function
  *
@@ -28,13 +45,32 @@ type CheckoutAction = (params: CheckoutActionParams) => Promise<CheckoutActionRe
  *   privateKey: process.env.WAFFO_PRIVATE_KEY!,
  * });
  * ```
+ *
+ * @example
+ * ```ts
+ * // Plan change link for an existing subscription — originOrderId is required
+ * const session = await checkout({
+ *   type: "planChange",
+ *   originOrderId: "ORD_xxx",
+ *   productId: "PROD_target_plan",
+ *   currency: "USD",
+ * });
+ * // session.checkoutUrl points at the change confirmation page
+ * ```
  */
 declare function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction;
 /** Server action signature for issuing customer tokens */
-type CustomerTokenAction = (params: IssueSessionTokenParams) => Promise<SessionToken>;
+type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;
 /**
  * Create a server action that issues customer session tokens.
  *
+ * This is a generic token primitive: it signs whatever `buyerIdentity` it is
+ * handed. Never expose it to the browser as a portal or sign-in entry — a
+ * Server Action is callable with arbitrary arguments, so a client-chosen
+ * `buyerIdentity` would yield another customer's token. To send a signed-in
+ * customer to the customer portal, use {@link createCustomerPortalRedirect},
+ * which derives identity from your own session.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -50,16 +86,126 @@ type CustomerTokenAction = (params: IssueSessionTokenParams) => Promise<SessionT
  * ```
  */
 declare function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction;
+/**
+ * Store and customer identity for a customer portal link, resolved by the
+ * merchant app from its own authenticated session.
+ */
+interface AuthenticatedPortalCustomer {
+    /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */
+    storeId: string;
+    /** Customer identity in your system — the same value used for authenticated checkout */
+    buyerIdentity: string;
+}
+/** Options for {@link createCustomerPortalRedirect}. */
+interface CustomerPortalRedirectOptions {
+    /**
+     * Resolve the signed-in customer from YOUR app's authenticated session
+     * (session cookie, auth library, …). Return `null` when nobody is signed in.
+     *
+     * Must not read `buyerIdentity` or `storeId` from anything the browser
+     * controls — query string, body, form fields or custom headers. Whoever
+     * controls `buyerIdentity` gets that customer's portal.
+     */
+    resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;
+    /**
+     * Where to send a visitor for whom the resolver returned `null`. A path or
+     * absolute URL, resolved against the request URL; a function receives the
+     * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.
+     *
+     * Build it from constants or an allow-list, never by copying request
+     * parameters verbatim (e.g. a `?next=` value) — that turns this route into an
+     * open redirect.
+     */
+    loginUrl?: string | ((request: Request) => string);
+    /**
+     * Build the response when creating the portal link fails (API error, invalid
+     * store ID, network error). This is the place for your own logging and error
+     * reporting. Defaults to a 502 JSON `{ error }` response with a generic
+     * message, after one `console.error` line carrying only the error message;
+     * the error itself is not echoed to the browser.
+     */
+    onError?: (error: unknown, request: Request) => Response | Promise<Response>;
+}
+/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */
+type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;
+/**
+ * Create a GET Route Handler that sends the signed-in customer to your store's
+ * Pancake customer portal, without the portal's email verification step.
+ *
+ * Behavior:
+ * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to
+ *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query
+ *   string, body or headers by the SDK
+ * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`
+ *   and answers `302` to `portalUrl` (which carries `#token=...`)
+ * - Not signed in: `302` to `loginUrl` when set, otherwise `401`
+ * - Link creation fails: `onError(error, request)`, or by default one server-side
+ *   `console.error` line with the error message and a generic `502 { error }`
+ *
+ * Side effects:
+ * - One signed API request per signed-in visit; each visit issues a new portal session
+ * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`
+ *   so the tokenized `Location` is neither cached nor forwarded as a Referer
+ *
+ * Boundary conditions:
+ * - The portal environment is the environment of the API Key in `config`
+ *   (test key → test portal, prod key → prod portal)
+ * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)
+ * - The default error log is the message only, with any `#token=` fragment redacted;
+ *   pass `onError` to log or report failures your own way
+ * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect
+ *
+ * A Route Handler rather than a Server Action: the portal entry is a plain link
+ * navigation, and only an HTTP redirect keeps the tokenized URL out of client
+ * JavaScript while letting the response carry `no-store` / `no-referrer`.
+ *
+ * @param config - WaffoPancake client configuration (merchantId + privateKey)
+ * @param options - Session resolver, login redirect and error handling
+ * @returns A Next.js GET Route Handler
+ *
+ * @example
+ * ```ts
+ * // app/account/billing-portal/route.ts
+ * import { createCustomerPortalRedirect } from "@waffo/pancake-nextjs/server";
+ * import { auth } from "@/lib/auth"; // your auth library
+ *
+ * export const dynamic = "force-dynamic";
+ *
+ * export const GET = createCustomerPortalRedirect(
+ *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },
+ *   {
+ *     resolveAuthenticatedCustomer: async () => {
+ *       const session = await auth();
+ *       if (!session?.user) return null;
+ *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };
+ *     },
+ *     loginUrl: "/login?returnTo=/account/billing-portal",
+ *   },
+ * );
+ * // In a page: <a href="/account/billing-portal">Manage billing</a>
+ * ```
+ */
+declare function createCustomerPortalRedirect(config: WaffoPancakeConfig, options: CustomerPortalRedirectOptions): CustomerPortalRouteHandler;
 /** Customer action types */
-type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "query";
+type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "createPlanChangeSession" | "query";
 /** Server action signature for customer session operations */
-type CustomerSessionAction = (token: string, actionType: CustomerSessionActionType, params: unknown) => Promise<unknown>;
+type CustomerSessionAction = (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions) => Promise<unknown>;
 /**
  * Create a server action that executes customer self-service operations.
  *
  * `config.environment` is required — session tokens carry no environment, and the
  * gateway rejects a session request without the matching header.
  *
+ * `createPlanChangeSession` is the customer-driven half of a plan change: it returns
+ * a confirmation-page URL, and the platform allows it only when the subscription
+ * belongs to that customer, the target plan is in the same product group, and that
+ * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing
+ * fields are not part of its params; the platform drops them on this path silently.
+ *
+ * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,
+ * the last argument) — the same rule as every other method in the SDK — so a write
+ * retried after a timeout executes twice.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -107,4 +253,4 @@ type BuyerSessionAction = CustomerSessionAction;
 /** @deprecated Use {@link createCustomerSessionAction} instead. */
 declare const createBuyerSessionAction: typeof createCustomerSessionAction;
 
-export { type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };
+export { type AuthenticatedPortalCustomer, type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerPortalRedirectOptions, type CustomerPortalRouteHandler, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerPortalRedirect, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };

package/dist/server.d.ts

@@ -1,20 +1,37 @@
-import { IssueSessionTokenParams, SessionToken, AnonymousCheckoutParams, AuthenticatedCheckoutParams, CheckoutSessionResult, AuthenticatedCheckoutResult, GraphQLParams, GraphQLResponse, WaffoPancakeConfig } from '@waffo/pancake-ts';
+import { RequestOptions, IssueSessionTokenParams, SessionToken, AnonymousCheckoutParams, AuthenticatedCheckoutParams, CreatePlanChangeSessionParams, AuthenticatedPlanChangeParams, CheckoutSessionResult, AuthenticatedCheckoutResult, GraphQLParams, GraphQLResponse, WaffoPancakeConfig } from '@waffo/pancake-ts';
 
-/** Parameters for the checkout server action */
+/**
+ * Parameters for the checkout server action.
+ *
+ * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)
+ * or a plan change for an existing subscription (`planChange` /
+ * `authenticatedPlanChange`, which carry the required `originOrderId`).
+ */
 type CheckoutActionParams = ({
     type?: "anonymous";
 } & AnonymousCheckoutParams) | ({
     type: "authenticated";
-} & AuthenticatedCheckoutParams);
+} & AuthenticatedCheckoutParams) | ({
+    type: "planChange";
+} & CreatePlanChangeSessionParams) | ({
+    type: "authenticatedPlanChange";
+} & AuthenticatedPlanChangeParams);
 /** Result of the checkout server action */
 type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;
-/** Server action signature for checkout */
-type CheckoutAction = (params: CheckoutActionParams) => Promise<CheckoutActionResult>;
+/**
+ * Server action signature for checkout.
+ *
+ * The optional `options` carries an `idempotencyKey`; without one no key is sent
+ * and a retried call creates a second session.
+ */
+type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;
 /**
  * Create a server action that handles checkout session creation.
  *
  * The private key is captured in the closure and never sent to the client.
  *
+ * Handles both new purchases and plan changes; `params.type` selects the flow.
+ *
  * @param config - WaffoPancake client configuration (merchantId + privateKey)
  * @returns A server action function
  *
@@ -28,13 +45,32 @@ type CheckoutAction = (params: CheckoutActionParams) => Promise<CheckoutActionRe
  *   privateKey: process.env.WAFFO_PRIVATE_KEY!,
  * });
  * ```
+ *
+ * @example
+ * ```ts
+ * // Plan change link for an existing subscription — originOrderId is required
+ * const session = await checkout({
+ *   type: "planChange",
+ *   originOrderId: "ORD_xxx",
+ *   productId: "PROD_target_plan",
+ *   currency: "USD",
+ * });
+ * // session.checkoutUrl points at the change confirmation page
+ * ```
  */
 declare function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction;
 /** Server action signature for issuing customer tokens */
-type CustomerTokenAction = (params: IssueSessionTokenParams) => Promise<SessionToken>;
+type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;
 /**
  * Create a server action that issues customer session tokens.
  *
+ * This is a generic token primitive: it signs whatever `buyerIdentity` it is
+ * handed. Never expose it to the browser as a portal or sign-in entry — a
+ * Server Action is callable with arbitrary arguments, so a client-chosen
+ * `buyerIdentity` would yield another customer's token. To send a signed-in
+ * customer to the customer portal, use {@link createCustomerPortalRedirect},
+ * which derives identity from your own session.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -50,16 +86,126 @@ type CustomerTokenAction = (params: IssueSessionTokenParams) => Promise<SessionT
  * ```
  */
 declare function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction;
+/**
+ * Store and customer identity for a customer portal link, resolved by the
+ * merchant app from its own authenticated session.
+ */
+interface AuthenticatedPortalCustomer {
+    /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */
+    storeId: string;
+    /** Customer identity in your system — the same value used for authenticated checkout */
+    buyerIdentity: string;
+}
+/** Options for {@link createCustomerPortalRedirect}. */
+interface CustomerPortalRedirectOptions {
+    /**
+     * Resolve the signed-in customer from YOUR app's authenticated session
+     * (session cookie, auth library, …). Return `null` when nobody is signed in.
+     *
+     * Must not read `buyerIdentity` or `storeId` from anything the browser
+     * controls — query string, body, form fields or custom headers. Whoever
+     * controls `buyerIdentity` gets that customer's portal.
+     */
+    resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;
+    /**
+     * Where to send a visitor for whom the resolver returned `null`. A path or
+     * absolute URL, resolved against the request URL; a function receives the
+     * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.
+     *
+     * Build it from constants or an allow-list, never by copying request
+     * parameters verbatim (e.g. a `?next=` value) — that turns this route into an
+     * open redirect.
+     */
+    loginUrl?: string | ((request: Request) => string);
+    /**
+     * Build the response when creating the portal link fails (API error, invalid
+     * store ID, network error). This is the place for your own logging and error
+     * reporting. Defaults to a 502 JSON `{ error }` response with a generic
+     * message, after one `console.error` line carrying only the error message;
+     * the error itself is not echoed to the browser.
+     */
+    onError?: (error: unknown, request: Request) => Response | Promise<Response>;
+}
+/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */
+type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;
+/**
+ * Create a GET Route Handler that sends the signed-in customer to your store's
+ * Pancake customer portal, without the portal's email verification step.
+ *
+ * Behavior:
+ * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to
+ *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query
+ *   string, body or headers by the SDK
+ * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`
+ *   and answers `302` to `portalUrl` (which carries `#token=...`)
+ * - Not signed in: `302` to `loginUrl` when set, otherwise `401`
+ * - Link creation fails: `onError(error, request)`, or by default one server-side
+ *   `console.error` line with the error message and a generic `502 { error }`
+ *
+ * Side effects:
+ * - One signed API request per signed-in visit; each visit issues a new portal session
+ * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`
+ *   so the tokenized `Location` is neither cached nor forwarded as a Referer
+ *
+ * Boundary conditions:
+ * - The portal environment is the environment of the API Key in `config`
+ *   (test key → test portal, prod key → prod portal)
+ * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)
+ * - The default error log is the message only, with any `#token=` fragment redacted;
+ *   pass `onError` to log or report failures your own way
+ * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect
+ *
+ * A Route Handler rather than a Server Action: the portal entry is a plain link
+ * navigation, and only an HTTP redirect keeps the tokenized URL out of client
+ * JavaScript while letting the response carry `no-store` / `no-referrer`.
+ *
+ * @param config - WaffoPancake client configuration (merchantId + privateKey)
+ * @param options - Session resolver, login redirect and error handling
+ * @returns A Next.js GET Route Handler
+ *
+ * @example
+ * ```ts
+ * // app/account/billing-portal/route.ts
+ * import { createCustomerPortalRedirect } from "@waffo/pancake-nextjs/server";
+ * import { auth } from "@/lib/auth"; // your auth library
+ *
+ * export const dynamic = "force-dynamic";
+ *
+ * export const GET = createCustomerPortalRedirect(
+ *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },
+ *   {
+ *     resolveAuthenticatedCustomer: async () => {
+ *       const session = await auth();
+ *       if (!session?.user) return null;
+ *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };
+ *     },
+ *     loginUrl: "/login?returnTo=/account/billing-portal",
+ *   },
+ * );
+ * // In a page: <a href="/account/billing-portal">Manage billing</a>
+ * ```
+ */
+declare function createCustomerPortalRedirect(config: WaffoPancakeConfig, options: CustomerPortalRedirectOptions): CustomerPortalRouteHandler;
 /** Customer action types */
-type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "query";
+type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "createPlanChangeSession" | "query";
 /** Server action signature for customer session operations */
-type CustomerSessionAction = (token: string, actionType: CustomerSessionActionType, params: unknown) => Promise<unknown>;
+type CustomerSessionAction = (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions) => Promise<unknown>;
 /**
  * Create a server action that executes customer self-service operations.
  *
  * `config.environment` is required — session tokens carry no environment, and the
  * gateway rejects a session request without the matching header.
  *
+ * `createPlanChangeSession` is the customer-driven half of a plan change: it returns
+ * a confirmation-page URL, and the platform allows it only when the subscription
+ * belongs to that customer, the target plan is in the same product group, and that
+ * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing
+ * fields are not part of its params; the platform drops them on this path silently.
+ *
+ * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,
+ * the last argument) — the same rule as every other method in the SDK — so a write
+ * retried after a timeout executes twice.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -107,4 +253,4 @@ type BuyerSessionAction = CustomerSessionAction;
 /** @deprecated Use {@link createCustomerSessionAction} instead. */
 declare const createBuyerSessionAction: typeof createCustomerSessionAction;
 
-export { type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };
+export { type AuthenticatedPortalCustomer, type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerPortalRedirectOptions, type CustomerPortalRouteHandler, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerPortalRedirect, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };

package/dist/server.js

@@ -2,36 +2,95 @@
 import { WaffoPancake } from "@waffo/pancake-ts";
 function createCheckoutAction(config) {
   const client = new WaffoPancake(config);
-  return async (params) => {
+  return async (params, options) => {
     if (params.type === "authenticated") {
       const { type: type2, ...sdkParams2 } = params;
-      return client.checkout.authenticated.create(sdkParams2);
+      return client.checkout.authenticated.create(sdkParams2, options);
+    }
+    if (params.type === "planChange") {
+      const { type: type2, ...sdkParams2 } = params;
+      return client.checkout.createPlanChangeSession(sdkParams2, options);
+    }
+    if (params.type === "authenticatedPlanChange") {
+      const { type: type2, ...sdkParams2 } = params;
+      return client.checkout.authenticated.createPlanChange(sdkParams2, options);
     }
     const { type, ...sdkParams } = params;
-    return client.checkout.anonymous.create(sdkParams);
+    return client.checkout.anonymous.create(sdkParams, options);
   };
 }
 function createCustomerTokenAction(config) {
   const client = new WaffoPancake(config);
-  return async (params) => {
-    return client.auth.issueSessionToken(params);
+  return async (params, options) => {
+    return client.auth.issueSessionToken(params, options);
+  };
+}
+function portalHeaders(extra) {
+  const headers = new Headers(extra);
+  headers.set("Cache-Control", "no-store");
+  headers.set("Referrer-Policy", "no-referrer");
+  return headers;
+}
+function safeErrorMessage(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.replace(/#token=[^\s"'&]*/g, "#token=[redacted]").replace(/\s+/g, " ");
+}
+function createCustomerPortalRedirect(config, options) {
+  const client = new WaffoPancake(config);
+  return async function GET(request) {
+    const customer = await options.resolveAuthenticatedCustomer(request);
+    if (!customer) {
+      if (options.loginUrl === void 0) {
+        return new Response(JSON.stringify({ error: "Unauthorized" }), {
+          status: 401,
+          headers: portalHeaders({ "Content-Type": "application/json" })
+        });
+      }
+      const loginUrl = typeof options.loginUrl === "function" ? options.loginUrl(request) : options.loginUrl;
+      return new Response(null, {
+        status: 302,
+        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() })
+      });
+    }
+    let portalUrl;
+    try {
+      ({ portalUrl } = await client.auth.createCustomerPortalLink({
+        storeId: customer.storeId,
+        buyerIdentity: customer.buyerIdentity
+      }));
+    } catch (error) {
+      if (options.onError) {
+        return options.onError(error, request);
+      }
+      console.error("[waffo-pancake] createCustomerPortalRedirect failed:", safeErrorMessage(error));
+      return new Response(JSON.stringify({ error: "Failed to create customer portal link" }), {
+        status: 502,
+        headers: portalHeaders({ "Content-Type": "application/json" })
+      });
+    }
+    return new Response(null, {
+      status: 302,
+      headers: portalHeaders({ Location: portalUrl })
+    });
   };
 }
 function createCustomerSessionAction(config) {
   const client = new WaffoPancake(config);
-  return async (token, actionType, params) => {
+  return async (token, actionType, params, options) => {
     const customer = client.buyer(token);
     switch (actionType) {
       case "cancelSubscription":
-        return customer.cancelSubscription(params);
+        return customer.cancelSubscription(params, options);
       case "cancelOnetimeOrder":
-        return customer.cancelOnetimeOrder(params);
+        return customer.cancelOnetimeOrder(params, options);
       case "reactivateSubscription":
-        return customer.reactivateSubscription(params);
+        return customer.reactivateSubscription(params, options);
       case "createRefundTicket":
-        return customer.createRefundTicket(params);
+        return customer.createRefundTicket(params, options);
       case "resubmitRefundTicket":
-        return customer.resubmitRefundTicket(params);
+        return customer.resubmitRefundTicket(params, options);
+      case "createPlanChangeSession":
+        return customer.createPlanChangeSession(params, options);
       case "query":
         return customer.graphql.query(params);
       default:
@@ -51,6 +110,7 @@ export {
   createBuyerSessionAction,
   createBuyerTokenAction,
   createCheckoutAction,
+  createCustomerPortalRedirect,
   createCustomerSessionAction,
   createCustomerTokenAction,
   createMerchantQueryAction

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/** Parameters for the checkout server action */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/** Server action signature for checkout */\nexport type CheckoutAction = (params: CheckoutActionParams) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params);\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (token: string, actionType: CustomerSessionActionType, params: unknown) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0]);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0]);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0]);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0]);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0]);\n      case \"query\":\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";AAsBA,SAAS,oBAAoB;AAgDtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAAgE;AAC5E,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,UAAS;AAAA,IACvD;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,SAAS;AAAA,EACnD;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAA2D;AACvE,WAAO,OAAO,KAAK,kBAAkB,MAAM;AAAA,EAC7C;AACF;AAuCO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,WAAsC;AACxG,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,MAA2D;AAAA,MAChG,KAAK;AACH,eAAO,SAAS,mBAAmB,MAA2D;AAAA,MAChG,KAAK;AACH,eAAO,SAAS,uBAAuB,MAA+D;AAAA,MACxG,KAAK;AACH,eAAO,SAAS,mBAAmB,MAA2D;AAAA,MAChG,KAAK;AACH,eAAO,SAAS,qBAAqB,MAA6D;AAAA,MACpG,KAAK;AACH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts — customer portal entry from your own login\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n *\n * export const GET = createCustomerPortalRedirect(config, {\n *   resolveAuthenticatedCustomer: async (request) => getSignedInCustomer(request), // your session\n * });\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  RequestOptions,\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  AuthenticatedPlanChangeParams,\n  CreatePlanChangeSessionParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/**\n * Parameters for the checkout server action.\n *\n * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)\n * or a plan change for an existing subscription (`planChange` /\n * `authenticatedPlanChange`, which carry the required `originOrderId`).\n */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams)\n  | ({ type: \"planChange\" } & CreatePlanChangeSessionParams)\n  | ({ type: \"authenticatedPlanChange\" } & AuthenticatedPlanChangeParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/**\n * Server action signature for checkout.\n *\n * The optional `options` carries an `idempotencyKey`; without one no key is sent\n * and a retried call creates a second session.\n */\nexport type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * Handles both new purchases and plan changes; `params.type` selects the flow.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n *\n * @example\n * ```ts\n * // Plan change link for an existing subscription — originOrderId is required\n * const session = await checkout({\n *   type: \"planChange\",\n *   originOrderId: \"ORD_xxx\",\n *   productId: \"PROD_target_plan\",\n *   currency: \"USD\",\n * });\n * // session.checkoutUrl points at the change confirmation page\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams, options?: RequestOptions): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams, options);\n    }\n    if (params.type === \"planChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.createPlanChangeSession(sdkParams, options);\n    }\n    if (params.type === \"authenticatedPlanChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.createPlanChange(sdkParams, options);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams, options);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * This is a generic token primitive: it signs whatever `buyerIdentity` it is\n * handed. Never expose it to the browser as a portal or sign-in entry — a\n * Server Action is callable with arbitrary arguments, so a client-chosen\n * `buyerIdentity` would yield another customer's token. To send a signed-in\n * customer to the customer portal, use {@link createCustomerPortalRedirect},\n * which derives identity from your own session.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams, options?: RequestOptions): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params, options);\n  };\n}\n\n// ============================================================\n// Customer Portal Redirect\n// ============================================================\n\n/**\n * Store and customer identity for a customer portal link, resolved by the\n * merchant app from its own authenticated session.\n */\nexport interface AuthenticatedPortalCustomer {\n  /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */\n  storeId: string;\n  /** Customer identity in your system — the same value used for authenticated checkout */\n  buyerIdentity: string;\n}\n\n/** Options for {@link createCustomerPortalRedirect}. */\nexport interface CustomerPortalRedirectOptions {\n  /**\n   * Resolve the signed-in customer from YOUR app's authenticated session\n   * (session cookie, auth library, …). Return `null` when nobody is signed in.\n   *\n   * Must not read `buyerIdentity` or `storeId` from anything the browser\n   * controls — query string, body, form fields or custom headers. Whoever\n   * controls `buyerIdentity` gets that customer's portal.\n   */\n  resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;\n  /**\n   * Where to send a visitor for whom the resolver returned `null`. A path or\n   * absolute URL, resolved against the request URL; a function receives the\n   * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.\n   *\n   * Build it from constants or an allow-list, never by copying request\n   * parameters verbatim (e.g. a `?next=` value) — that turns this route into an\n   * open redirect.\n   */\n  loginUrl?: string | ((request: Request) => string);\n  /**\n   * Build the response when creating the portal link fails (API error, invalid\n   * store ID, network error). This is the place for your own logging and error\n   * reporting. Defaults to a 502 JSON `{ error }` response with a generic\n   * message, after one `console.error` line carrying only the error message;\n   * the error itself is not echoed to the browser.\n   */\n  onError?: (error: unknown, request: Request) => Response | Promise<Response>;\n}\n\n/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */\nexport type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;\n\n/**\n * Build headers for a portal route response. Every response — redirect, 401 or\n * error — is `no-store` and `no-referrer`, so a tokenized `Location` is neither\n * cached nor forwarded as a Referer.\n */\nfunction portalHeaders(extra: Record<string, string>): Headers {\n  const headers = new Headers(extra);\n  headers.set(\"Cache-Control\", \"no-store\");\n  headers.set(\"Referrer-Policy\", \"no-referrer\");\n  return headers;\n}\n\n/**\n * One-line, log-safe description of a portal link failure: the error message\n * only (never the error object, which may carry a response body), with any\n * `#token=...` fragment redacted.\n */\nfunction safeErrorMessage(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message.replace(/#token=[^\\s\"'&]*/g, \"#token=[redacted]\").replace(/\\s+/g, \" \");\n}\n\n/**\n * Create a GET Route Handler that sends the signed-in customer to your store's\n * Pancake customer portal, without the portal's email verification step.\n *\n * Behavior:\n * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to\n *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query\n *   string, body or headers by the SDK\n * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`\n *   and answers `302` to `portalUrl` (which carries `#token=...`)\n * - Not signed in: `302` to `loginUrl` when set, otherwise `401`\n * - Link creation fails: `onError(error, request)`, or by default one server-side\n *   `console.error` line with the error message and a generic `502 { error }`\n *\n * Side effects:\n * - One signed API request per signed-in visit; each visit issues a new portal session\n * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`\n *   so the tokenized `Location` is neither cached nor forwarded as a Referer\n *\n * Boundary conditions:\n * - The portal environment is the environment of the API Key in `config`\n *   (test key → test portal, prod key → prod portal)\n * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)\n * - The default error log is the message only, with any `#token=` fragment redacted;\n *   pass `onError` to log or report failures your own way\n * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect\n *\n * A Route Handler rather than a Server Action: the portal entry is a plain link\n * navigation, and only an HTTP redirect keeps the tokenized URL out of client\n * JavaScript while letting the response carry `no-store` / `no-referrer`.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @param options - Session resolver, login redirect and error handling\n * @returns A Next.js GET Route Handler\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n * import { auth } from \"@/lib/auth\"; // your auth library\n *\n * export const dynamic = \"force-dynamic\";\n *\n * export const GET = createCustomerPortalRedirect(\n *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },\n *   {\n *     resolveAuthenticatedCustomer: async () => {\n *       const session = await auth();\n *       if (!session?.user) return null;\n *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };\n *     },\n *     loginUrl: \"/login?returnTo=/account/billing-portal\",\n *   },\n * );\n * // In a page: <a href=\"/account/billing-portal\">Manage billing</a>\n * ```\n */\nexport function createCustomerPortalRedirect(\n  config: WaffoPancakeConfig,\n  options: CustomerPortalRedirectOptions,\n): CustomerPortalRouteHandler {\n  const client = new WaffoPancake(config);\n\n  return async function GET(request: Request): Promise<Response> {\n    const customer = await options.resolveAuthenticatedCustomer(request);\n\n    if (!customer) {\n      if (options.loginUrl === undefined) {\n        return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n          status: 401,\n          headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n        });\n      }\n      const loginUrl = typeof options.loginUrl === \"function\" ? options.loginUrl(request) : options.loginUrl;\n      return new Response(null, {\n        status: 302,\n        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() }),\n      });\n    }\n\n    let portalUrl: string;\n    try {\n      ({ portalUrl } = await client.auth.createCustomerPortalLink({\n        storeId: customer.storeId,\n        buyerIdentity: customer.buyerIdentity,\n      }));\n    } catch (error) {\n      if (options.onError) {\n        return options.onError(error, request);\n      }\n      console.error(\"[waffo-pancake] createCustomerPortalRedirect failed:\", safeErrorMessage(error));\n      return new Response(JSON.stringify({ error: \"Failed to create customer portal link\" }), {\n        status: 502,\n        headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n      });\n    }\n\n    return new Response(null, {\n      status: 302,\n      headers: portalHeaders({ Location: portalUrl }),\n    });\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"createPlanChangeSession\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (\n  token: string,\n  actionType: CustomerSessionActionType,\n  params: unknown,\n  options?: RequestOptions,\n) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * `createPlanChangeSession` is the customer-driven half of a plan change: it returns\n * a confirmation-page URL, and the platform allows it only when the subscription\n * belongs to that customer, the target plan is in the same product group, and that\n * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing\n * fields are not part of its params; the platform drops them on this path silently.\n *\n * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,\n * the last argument) — the same rule as every other method in the SDK — so a write\n * retried after a timeout executes twice.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0], options);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0], options);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0], options);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0], options);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0], options);\n      case \"createPlanChangeSession\":\n        return customer.createPlanChangeSession(params as Parameters<typeof customer.createPlanChangeSession>[0], options);\n      case \"query\":\n        // Reads take no key: a cached replay would serve stale data.\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";AAgCA,SAAS,oBAAoB;AA8EtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAA8B,YAA4D;AACtG,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,YAAW,OAAO;AAAA,IAChE;AACA,QAAI,OAAO,SAAS,cAAc;AAEhC,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,wBAAwBA,YAAW,OAAO;AAAA,IACnE;AACA,QAAI,OAAO,SAAS,2BAA2B;AAE7C,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,iBAAiBA,YAAW,OAAO;AAAA,IAC1E;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,WAAW,OAAO;AAAA,EAC5D;AACF;AAiCO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAAiC,YAAoD;AACjG,WAAO,OAAO,KAAK,kBAAkB,QAAQ,OAAO;AAAA,EACtD;AACF;AAwDA,SAAS,cAAc,OAAwC;AAC7D,QAAM,UAAU,IAAI,QAAQ,KAAK;AACjC,UAAQ,IAAI,iBAAiB,UAAU;AACvC,UAAQ,IAAI,mBAAmB,aAAa;AAC5C,SAAO;AACT;AAOA,SAAS,iBAAiB,OAAwB;AAChD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QAAQ,QAAQ,qBAAqB,mBAAmB,EAAE,QAAQ,QAAQ,GAAG;AACtF;AA2DO,SAAS,6BACd,QACA,SAC4B;AAC5B,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,eAAe,IAAI,SAAqC;AAC7D,UAAM,WAAW,MAAM,QAAQ,6BAA6B,OAAO;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ,aAAa,QAAW;AAClC,eAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,eAAe,CAAC,GAAG;AAAA,UAC7D,QAAQ;AAAA,UACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,QAC/D,CAAC;AAAA,MACH;AACA,YAAM,WAAW,OAAO,QAAQ,aAAa,aAAa,QAAQ,SAAS,OAAO,IAAI,QAAQ;AAC9F,aAAO,IAAI,SAAS,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,UAAU,IAAI,IAAI,UAAU,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,MAChF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,OAAC,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK,yBAAyB;AAAA,QAC1D,SAAS,SAAS;AAAA,QAClB,eAAe,SAAS;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,QAAQ,SAAS;AACnB,eAAO,QAAQ,QAAQ,OAAO,OAAO;AAAA,MACvC;AACA,cAAQ,MAAM,wDAAwD,iBAAiB,KAAK,CAAC;AAC7F,aAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC,GAAG;AAAA,QACtF,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,MAC/D,CAAC;AAAA,IACH;AAEA,WAAO,IAAI,SAAS,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS,cAAc,EAAE,UAAU,UAAU,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAuDO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,QAAiB,YAA+C;AAClI,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,uBAAuB,QAAiE,OAAO;AAAA,MACjH,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,qBAAqB,QAA+D,OAAO;AAAA,MAC7G,KAAK;AACH,eAAO,SAAS,wBAAwB,QAAkE,OAAO;AAAA,MACnH,KAAK;AAEH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waffo/pancake-nextjs",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Next.js SDK for Waffo Pancake — checkout components and hooks",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -48,7 +48,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@waffo/pancake-ts": "^0.20.0",
+    "@waffo/pancake-ts": "^0.26.0",
     "next": ">=14.0.0",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"