@waffo/pancake-nextjs 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to `@waffo/pancake-nextjs` will be documented in this file.
 
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.9.0] - 2026-10-10
+
+Customers signed in to a merchant's app can enter the store's customer portal without email verification.
+
+### Added
+
+- **`createCustomerPortalRedirect(config, { resolveAuthenticatedCustomer, loginUrl?, onError? })`** in `@waffo/pancake-nextjs/server` — returns a GET Route Handler. It asks your `resolveAuthenticatedCustomer(request)` for `{ storeId, buyerIdentity }` from your own authenticated session, calls `client.auth.createCustomerPortalLink()` and answers `302` to the tokenized portal URL. A `null` resolver result answers `302` to `loginUrl`, or `401` when it is not set; a failed link creation goes to `onError`, or a generic `502`. Every response the handler builds sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`. The SDK reads no identity from the request itself.
+- **Default error logging in `createCustomerPortalRedirect`.** Without `onError`, a failed link creation writes one `console.error` line — `[waffo-pancake] createCustomerPortalRedirect failed: <error message>` — before the generic `502`. Only the message is logged, never the error object; a `#token=` fragment is redacted. With `onError` nothing is logged: that is where your own logging goes.
+- **`AuthenticatedPortalCustomer`, `CustomerPortalRedirectOptions`, `CustomerPortalRouteHandler`** types.
+
+### Changed
+
+- **`createCustomerTokenAction` documentation** states that it is a generic token primitive and must not be used as an unauthenticated portal entry. Its behavior is unchanged.
+- **`@waffo/pancake-ts` dependency raised to `^0.26.0`** — the version that adds `auth.createCustomerPortalLink()`. The range also picks up 0.24.0 (webhook amount fields; the six generic amount fields are deprecated, not removed) and 0.25.0 (refund payloads carry what the refunded payment collected); neither is breaking.
+
 ## [0.8.0] - 2026-09-20
 
 Picks up plan change links from `@waffo/pancake-ts` 0.23.0, **and its idempotency change** — see the BREAKING entries under Changed before upgrading.

package/README.md

@@ -386,6 +386,53 @@ function AccountPage() {
 
 Action hooks return `{ execute, isLoading, error, data }`. Data hooks return `{ data, isLoading, error, refetch }`.
 
+## Customer Portal (SSO)
+
+Send a customer who is signed in to **your** app straight into your store's Pancake customer portal — orders, subscriptions and payments — without the portal's email verification step. `createCustomerPortalRedirect` returns a GET Route Handler; link to it from your UI.
+
+```ts
+// app/account/billing-portal/route.ts
+import { createCustomerPortalRedirect } from "@waffo/pancake-nextjs/server";
+import { auth } from "@/lib/auth"; // your auth library
+
+export const dynamic = "force-dynamic"; // per-visit session check and redirect, never statically cached
+
+export const GET = createCustomerPortalRedirect(
+  { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },
+  {
+    // Identity comes from YOUR session — never from the request's query, body or headers
+    resolveAuthenticatedCustomer: async () => {
+      const session = await auth();
+      if (!session?.user) return null;
+      return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };
+    },
+    loginUrl: "/login?returnTo=/account/billing-portal", // omit to answer 401
+  },
+);
+```
+
+```tsx
+<a href="/account/billing-portal">Manage billing</a>
+```
+
+| Situation                   | Response                                                                                                          |
+| --------------------------- | ----------------------------------------------------------------------------------------------------------------- |
+| Resolver returns a customer | `302` to the portal URL (carries `#token=...`)                                                                    |
+| Resolver returns `null`     | `302` to `loginUrl`, or `401 { error: "Unauthorized" }` when `loginUrl` is not set                                |
+| Portal link creation fails  | `onError(error, request)` if given, otherwise one `console.error` line and `502 { error }` with a generic message |
+| Resolver throws             | The error propagates (Next.js answers 500)                                                                        |
+
+Every response the handler builds (all but a custom `onError` one) carries `Cache-Control: no-store` and `Referrer-Policy: no-referrer`, so the tokenized `Location` is neither cached nor forwarded as a Referer.
+
+- **Why a Route Handler, not a Server Action**: the portal entry is a plain link navigation. An HTTP redirect keeps the tokenized portal URL out of client JavaScript and lets the response set `no-store` / `no-referrer`; a Server Action would have to hand the URL to the browser to navigate. It follows the same factory shape as `Webhook()`, but lives in `/server` because it holds the private key.
+- **`buyerIdentity` must be the value you use for authenticated checkout**, so the portal shows the orders placed under it. Whoever controls `buyerIdentity` gets that customer's portal — the resolver is the security boundary.
+- **Environment follows the API Key** in `config`: a test key opens the test portal, a prod key the prod portal. `config.environment` is not used here.
+- **When the portal session expires**, the customer comes back through this route and gets a new link.
+- **Logging is yours to add in `onError`.** Without it, the handler writes one server-side line — `[waffo-pancake] createCustomerPortalRedirect failed: <error message>`, with any `#token=` fragment redacted — and never the error object, the portal URL or the request. Pass `onError` to send failures to your own logger or error tracker, and keep tokens and portal URLs out of what you record.
+- **Do not build `loginUrl` by copying request parameters verbatim.** A string or function that echoes, say, `?next=` from the request into the redirect turns this route into an open redirect. Use constants, or validate against an allow-list of your own paths.
+
+> **Do not build a portal entry on `createCustomerTokenAction`.** It is a generic token primitive that signs whatever `buyerIdentity` it is called with, and a Server Action can be invoked from the browser with arbitrary arguments. Exposed as an unauthenticated portal or sign-in entry, it hands out any customer's token. Use `createCustomerPortalRedirect`, which only takes identity from your resolver.
+
 ## Business-Side Identifiers
 
 Attach your own internal references to a checkout or a refund ticket so cross-system reconciliation does not require Waffo IDs. Two flat keys, both optional (max 128 chars):
@@ -459,14 +506,15 @@ All merchant hooks return `{ data, isLoading, error, refetch }`.
 
 ## Server Actions
 
-| Factory                               | Returns                 | Description                                                                                                            |
-| ------------------------------------- | ----------------------- | ---------------------------------------------------------------------------------------------------------------------- |
-| `createCheckoutAction(config)`        | `CheckoutAction`        | Checkout session creation (anonymous + authenticated) and plan change links (`planChange` + `authenticatedPlanChange`) |
-| `createCustomerTokenAction(config)`   | `CustomerTokenAction`   | Customer session token issuance                                                                                        |
-| `createCustomerSessionAction(config)` | `CustomerSessionAction` | Customer self-service operations                                                                                       |
-| `createMerchantQueryAction(config)`   | `MerchantQueryAction`   | Merchant GraphQL queries                                                                                               |
+| Factory                                         | Returns                      | Description                                                                                                                                      |
+| ----------------------------------------------- | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `createCheckoutAction(config)`                  | `CheckoutAction`             | Checkout session creation (anonymous + authenticated) and plan change links (`planChange` + `authenticatedPlanChange`)                           |
+| `createCustomerTokenAction(config)`             | `CustomerTokenAction`        | Customer session token issuance                                                                                                                  |
+| `createCustomerPortalRedirect(config, options)` | `CustomerPortalRouteHandler` | GET Route Handler: 302 to the customer portal for the customer your session resolver returns — see [Customer Portal (SSO)](#customer-portal-sso) |
+| `createCustomerSessionAction(config)`           | `CustomerSessionAction`      | Customer self-service operations                                                                                                                 |
+| `createMerchantQueryAction(config)`             | `MerchantQueryAction`        | Merchant GraphQL queries                                                                                                                         |
 
-Import from `@waffo/pancake-nextjs/server`. Config requires `merchantId` and `privateKey`.
+Import from `@waffo/pancake-nextjs/server`. Config requires `merchantId` and `privateKey`. `createCustomerTokenAction` signs any `buyerIdentity` it receives: call it only with identity from your own session, never as an unauthenticated portal or sign-in entry.
 
 ## Idempotency
 
@@ -499,7 +547,7 @@ Uniqueness is yours to guarantee (at most 256 characters of letters, numbers, hy
 
 ### Types
 
-Key types: `PriceInfo`, `PriceSnapshot`, `BillingDetail`, `RequestOptions`, `WebhookEvent`, `CheckoutAction`, `CustomerTokenAction`, `CustomerSessionAction`, `MerchantQueryAction`, `CustomerConfig`, `CheckoutButtonProps`, `CheckoutMode`, `CashierLanguage`, `UseCheckoutReturn`, `UseCustomerReturn`, `CustomerActionState<T>`, `QueryState<T>`, `SalesOverview`, `SubscriptionOverview`, `WebhookConfig`.
+Key types: `PriceInfo`, `PriceSnapshot`, `BillingDetail`, `RequestOptions`, `WebhookEvent`, `CheckoutAction`, `CustomerTokenAction`, `CustomerSessionAction`, `MerchantQueryAction`, `CustomerPortalRouteHandler`, `CustomerPortalRedirectOptions`, `AuthenticatedPortalCustomer`, `CustomerConfig`, `CheckoutButtonProps`, `CheckoutMode`, `CashierLanguage`, `UseCheckoutReturn`, `UseCustomerReturn`, `CustomerActionState<T>`, `QueryState<T>`, `SalesOverview`, `SubscriptionOverview`, `WebhookConfig`.
 
 ## Development
 

package/dist/server.cjs

@@ -23,6 +23,7 @@ __export(server_exports, {
   createBuyerSessionAction: () => createBuyerSessionAction,
   createBuyerTokenAction: () => createBuyerTokenAction,
   createCheckoutAction: () => createCheckoutAction,
+  createCustomerPortalRedirect: () => createCustomerPortalRedirect,
   createCustomerSessionAction: () => createCustomerSessionAction,
   createCustomerTokenAction: () => createCustomerTokenAction,
   createMerchantQueryAction: () => createMerchantQueryAction
@@ -54,6 +55,55 @@ function createCustomerTokenAction(config) {
     return client.auth.issueSessionToken(params, options);
   };
 }
+function portalHeaders(extra) {
+  const headers = new Headers(extra);
+  headers.set("Cache-Control", "no-store");
+  headers.set("Referrer-Policy", "no-referrer");
+  return headers;
+}
+function safeErrorMessage(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.replace(/#token=[^\s"'&]*/g, "#token=[redacted]").replace(/\s+/g, " ");
+}
+function createCustomerPortalRedirect(config, options) {
+  const client = new import_pancake_ts.WaffoPancake(config);
+  return async function GET(request) {
+    const customer = await options.resolveAuthenticatedCustomer(request);
+    if (!customer) {
+      if (options.loginUrl === void 0) {
+        return new Response(JSON.stringify({ error: "Unauthorized" }), {
+          status: 401,
+          headers: portalHeaders({ "Content-Type": "application/json" })
+        });
+      }
+      const loginUrl = typeof options.loginUrl === "function" ? options.loginUrl(request) : options.loginUrl;
+      return new Response(null, {
+        status: 302,
+        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() })
+      });
+    }
+    let portalUrl;
+    try {
+      ({ portalUrl } = await client.auth.createCustomerPortalLink({
+        storeId: customer.storeId,
+        buyerIdentity: customer.buyerIdentity
+      }));
+    } catch (error) {
+      if (options.onError) {
+        return options.onError(error, request);
+      }
+      console.error("[waffo-pancake] createCustomerPortalRedirect failed:", safeErrorMessage(error));
+      return new Response(JSON.stringify({ error: "Failed to create customer portal link" }), {
+        status: 502,
+        headers: portalHeaders({ "Content-Type": "application/json" })
+      });
+    }
+    return new Response(null, {
+      status: 302,
+      headers: portalHeaders({ Location: portalUrl })
+    });
+  };
+}
 function createCustomerSessionAction(config) {
   const client = new import_pancake_ts.WaffoPancake(config);
   return async (token, actionType, params, options) => {
@@ -91,6 +141,7 @@ var createBuyerSessionAction = createCustomerSessionAction;
   createBuyerSessionAction,
   createBuyerTokenAction,
   createCheckoutAction,
+  createCustomerPortalRedirect,
   createCustomerSessionAction,
   createCustomerTokenAction,
   createMerchantQueryAction

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  RequestOptions,\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  AuthenticatedPlanChangeParams,\n  CreatePlanChangeSessionParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/**\n * Parameters for the checkout server action.\n *\n * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)\n * or a plan change for an existing subscription (`planChange` /\n * `authenticatedPlanChange`, which carry the required `originOrderId`).\n */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams)\n  | ({ type: \"planChange\" } & CreatePlanChangeSessionParams)\n  | ({ type: \"authenticatedPlanChange\" } & AuthenticatedPlanChangeParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/**\n * Server action signature for checkout.\n *\n * The optional `options` carries an `idempotencyKey`; without one no key is sent\n * and a retried call creates a second session.\n */\nexport type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * Handles both new purchases and plan changes; `params.type` selects the flow.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n *\n * @example\n * ```ts\n * // Plan change link for an existing subscription — originOrderId is required\n * const session = await checkout({\n *   type: \"planChange\",\n *   originOrderId: \"ORD_xxx\",\n *   productId: \"PROD_target_plan\",\n *   currency: \"USD\",\n * });\n * // session.checkoutUrl points at the change confirmation page\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams, options?: RequestOptions): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams, options);\n    }\n    if (params.type === \"planChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.createPlanChangeSession(sdkParams, options);\n    }\n    if (params.type === \"authenticatedPlanChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.createPlanChange(sdkParams, options);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams, options);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams, options?: RequestOptions): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params, options);\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"createPlanChangeSession\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (\n  token: string,\n  actionType: CustomerSessionActionType,\n  params: unknown,\n  options?: RequestOptions,\n) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * `createPlanChangeSession` is the customer-driven half of a plan change: it returns\n * a confirmation-page URL, and the platform allows it only when the subscription\n * belongs to that customer, the target plan is in the same product group, and that\n * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing\n * fields are not part of its params; the platform drops them on this path silently.\n *\n * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,\n * the last argument) — the same rule as every other method in the SDK — so a write\n * retried after a timeout executes twice.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0], options);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0], options);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0], options);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0], options);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0], options);\n      case \"createPlanChangeSession\":\n        return customer.createPlanChangeSession(params as Parameters<typeof customer.createPlanChangeSession>[0], options);\n      case \"query\":\n        // Reads take no key: a cached replay would serve stale data.\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,wBAA6B;AA8EtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,QAA8B,YAA4D;AACtG,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,YAAW,OAAO;AAAA,IAChE;AACA,QAAI,OAAO,SAAS,cAAc;AAEhC,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,wBAAwBA,YAAW,OAAO;AAAA,IACnE;AACA,QAAI,OAAO,SAAS,2BAA2B;AAE7C,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,iBAAiBA,YAAW,OAAO;AAAA,IAC1E;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,WAAW,OAAO;AAAA,EAC5D;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,QAAiC,YAAoD;AACjG,WAAO,OAAO,KAAK,kBAAkB,QAAQ,OAAO;AAAA,EACtD;AACF;AAuDO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,QAAiB,YAA+C;AAClI,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,uBAAuB,QAAiE,OAAO;AAAA,MACjH,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,qBAAqB,QAA+D,OAAO;AAAA,MAC7G,KAAK;AACH,eAAO,SAAS,wBAAwB,QAAkE,OAAO;AAAA,MACnH,KAAK;AAEH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts — customer portal entry from your own login\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n *\n * export const GET = createCustomerPortalRedirect(config, {\n *   resolveAuthenticatedCustomer: async (request) => getSignedInCustomer(request), // your session\n * });\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  RequestOptions,\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  AuthenticatedPlanChangeParams,\n  CreatePlanChangeSessionParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/**\n * Parameters for the checkout server action.\n *\n * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)\n * or a plan change for an existing subscription (`planChange` /\n * `authenticatedPlanChange`, which carry the required `originOrderId`).\n */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams)\n  | ({ type: \"planChange\" } & CreatePlanChangeSessionParams)\n  | ({ type: \"authenticatedPlanChange\" } & AuthenticatedPlanChangeParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/**\n * Server action signature for checkout.\n *\n * The optional `options` carries an `idempotencyKey`; without one no key is sent\n * and a retried call creates a second session.\n */\nexport type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * Handles both new purchases and plan changes; `params.type` selects the flow.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n *\n * @example\n * ```ts\n * // Plan change link for an existing subscription — originOrderId is required\n * const session = await checkout({\n *   type: \"planChange\",\n *   originOrderId: \"ORD_xxx\",\n *   productId: \"PROD_target_plan\",\n *   currency: \"USD\",\n * });\n * // session.checkoutUrl points at the change confirmation page\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams, options?: RequestOptions): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams, options);\n    }\n    if (params.type === \"planChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.createPlanChangeSession(sdkParams, options);\n    }\n    if (params.type === \"authenticatedPlanChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.createPlanChange(sdkParams, options);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams, options);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * This is a generic token primitive: it signs whatever `buyerIdentity` it is\n * handed. Never expose it to the browser as a portal or sign-in entry — a\n * Server Action is callable with arbitrary arguments, so a client-chosen\n * `buyerIdentity` would yield another customer's token. To send a signed-in\n * customer to the customer portal, use {@link createCustomerPortalRedirect},\n * which derives identity from your own session.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams, options?: RequestOptions): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params, options);\n  };\n}\n\n// ============================================================\n// Customer Portal Redirect\n// ============================================================\n\n/**\n * Store and customer identity for a customer portal link, resolved by the\n * merchant app from its own authenticated session.\n */\nexport interface AuthenticatedPortalCustomer {\n  /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */\n  storeId: string;\n  /** Customer identity in your system — the same value used for authenticated checkout */\n  buyerIdentity: string;\n}\n\n/** Options for {@link createCustomerPortalRedirect}. */\nexport interface CustomerPortalRedirectOptions {\n  /**\n   * Resolve the signed-in customer from YOUR app's authenticated session\n   * (session cookie, auth library, …). Return `null` when nobody is signed in.\n   *\n   * Must not read `buyerIdentity` or `storeId` from anything the browser\n   * controls — query string, body, form fields or custom headers. Whoever\n   * controls `buyerIdentity` gets that customer's portal.\n   */\n  resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;\n  /**\n   * Where to send a visitor for whom the resolver returned `null`. A path or\n   * absolute URL, resolved against the request URL; a function receives the\n   * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.\n   *\n   * Build it from constants or an allow-list, never by copying request\n   * parameters verbatim (e.g. a `?next=` value) — that turns this route into an\n   * open redirect.\n   */\n  loginUrl?: string | ((request: Request) => string);\n  /**\n   * Build the response when creating the portal link fails (API error, invalid\n   * store ID, network error). This is the place for your own logging and error\n   * reporting. Defaults to a 502 JSON `{ error }` response with a generic\n   * message, after one `console.error` line carrying only the error message;\n   * the error itself is not echoed to the browser.\n   */\n  onError?: (error: unknown, request: Request) => Response | Promise<Response>;\n}\n\n/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */\nexport type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;\n\n/**\n * Build headers for a portal route response. Every response — redirect, 401 or\n * error — is `no-store` and `no-referrer`, so a tokenized `Location` is neither\n * cached nor forwarded as a Referer.\n */\nfunction portalHeaders(extra: Record<string, string>): Headers {\n  const headers = new Headers(extra);\n  headers.set(\"Cache-Control\", \"no-store\");\n  headers.set(\"Referrer-Policy\", \"no-referrer\");\n  return headers;\n}\n\n/**\n * One-line, log-safe description of a portal link failure: the error message\n * only (never the error object, which may carry a response body), with any\n * `#token=...` fragment redacted.\n */\nfunction safeErrorMessage(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message.replace(/#token=[^\\s\"'&]*/g, \"#token=[redacted]\").replace(/\\s+/g, \" \");\n}\n\n/**\n * Create a GET Route Handler that sends the signed-in customer to your store's\n * Pancake customer portal, without the portal's email verification step.\n *\n * Behavior:\n * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to\n *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query\n *   string, body or headers by the SDK\n * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`\n *   and answers `302` to `portalUrl` (which carries `#token=...`)\n * - Not signed in: `302` to `loginUrl` when set, otherwise `401`\n * - Link creation fails: `onError(error, request)`, or by default one server-side\n *   `console.error` line with the error message and a generic `502 { error }`\n *\n * Side effects:\n * - One signed API request per signed-in visit; each visit issues a new portal session\n * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`\n *   so the tokenized `Location` is neither cached nor forwarded as a Referer\n *\n * Boundary conditions:\n * - The portal environment is the environment of the API Key in `config`\n *   (test key → test portal, prod key → prod portal)\n * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)\n * - The default error log is the message only, with any `#token=` fragment redacted;\n *   pass `onError` to log or report failures your own way\n * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect\n *\n * A Route Handler rather than a Server Action: the portal entry is a plain link\n * navigation, and only an HTTP redirect keeps the tokenized URL out of client\n * JavaScript while letting the response carry `no-store` / `no-referrer`.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @param options - Session resolver, login redirect and error handling\n * @returns A Next.js GET Route Handler\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n * import { auth } from \"@/lib/auth\"; // your auth library\n *\n * export const dynamic = \"force-dynamic\";\n *\n * export const GET = createCustomerPortalRedirect(\n *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },\n *   {\n *     resolveAuthenticatedCustomer: async () => {\n *       const session = await auth();\n *       if (!session?.user) return null;\n *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };\n *     },\n *     loginUrl: \"/login?returnTo=/account/billing-portal\",\n *   },\n * );\n * // In a page: <a href=\"/account/billing-portal\">Manage billing</a>\n * ```\n */\nexport function createCustomerPortalRedirect(\n  config: WaffoPancakeConfig,\n  options: CustomerPortalRedirectOptions,\n): CustomerPortalRouteHandler {\n  const client = new WaffoPancake(config);\n\n  return async function GET(request: Request): Promise<Response> {\n    const customer = await options.resolveAuthenticatedCustomer(request);\n\n    if (!customer) {\n      if (options.loginUrl === undefined) {\n        return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n          status: 401,\n          headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n        });\n      }\n      const loginUrl = typeof options.loginUrl === \"function\" ? options.loginUrl(request) : options.loginUrl;\n      return new Response(null, {\n        status: 302,\n        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() }),\n      });\n    }\n\n    let portalUrl: string;\n    try {\n      ({ portalUrl } = await client.auth.createCustomerPortalLink({\n        storeId: customer.storeId,\n        buyerIdentity: customer.buyerIdentity,\n      }));\n    } catch (error) {\n      if (options.onError) {\n        return options.onError(error, request);\n      }\n      console.error(\"[waffo-pancake] createCustomerPortalRedirect failed:\", safeErrorMessage(error));\n      return new Response(JSON.stringify({ error: \"Failed to create customer portal link\" }), {\n        status: 502,\n        headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n      });\n    }\n\n    return new Response(null, {\n      status: 302,\n      headers: portalHeaders({ Location: portalUrl }),\n    });\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"createPlanChangeSession\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (\n  token: string,\n  actionType: CustomerSessionActionType,\n  params: unknown,\n  options?: RequestOptions,\n) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * `createPlanChangeSession` is the customer-driven half of a plan change: it returns\n * a confirmation-page URL, and the platform allows it only when the subscription\n * belongs to that customer, the target plan is in the same product group, and that\n * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing\n * fields are not part of its params; the platform drops them on this path silently.\n *\n * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,\n * the last argument) — the same rule as every other method in the SDK — so a write\n * retried after a timeout executes twice.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0], options);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0], options);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0], options);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0], options);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0], options);\n      case \"createPlanChangeSession\":\n        return customer.createPlanChangeSession(params as Parameters<typeof customer.createPlanChangeSession>[0], options);\n      case \"query\":\n        // Reads take no key: a cached replay would serve stale data.\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgCA,wBAA6B;AA8EtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,QAA8B,YAA4D;AACtG,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,YAAW,OAAO;AAAA,IAChE;AACA,QAAI,OAAO,SAAS,cAAc;AAEhC,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,wBAAwBA,YAAW,OAAO;AAAA,IACnE;AACA,QAAI,OAAO,SAAS,2BAA2B;AAE7C,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,iBAAiBA,YAAW,OAAO;AAAA,IAC1E;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,WAAW,OAAO;AAAA,EAC5D;AACF;AAiCO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,QAAiC,YAAoD;AACjG,WAAO,OAAO,KAAK,kBAAkB,QAAQ,OAAO;AAAA,EACtD;AACF;AAwDA,SAAS,cAAc,OAAwC;AAC7D,QAAM,UAAU,IAAI,QAAQ,KAAK;AACjC,UAAQ,IAAI,iBAAiB,UAAU;AACvC,UAAQ,IAAI,mBAAmB,aAAa;AAC5C,SAAO;AACT;AAOA,SAAS,iBAAiB,OAAwB;AAChD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QAAQ,QAAQ,qBAAqB,mBAAmB,EAAE,QAAQ,QAAQ,GAAG;AACtF;AA2DO,SAAS,6BACd,QACA,SAC4B;AAC5B,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,eAAe,IAAI,SAAqC;AAC7D,UAAM,WAAW,MAAM,QAAQ,6BAA6B,OAAO;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ,aAAa,QAAW;AAClC,eAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,eAAe,CAAC,GAAG;AAAA,UAC7D,QAAQ;AAAA,UACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,QAC/D,CAAC;AAAA,MACH;AACA,YAAM,WAAW,OAAO,QAAQ,aAAa,aAAa,QAAQ,SAAS,OAAO,IAAI,QAAQ;AAC9F,aAAO,IAAI,SAAS,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,UAAU,IAAI,IAAI,UAAU,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,MAChF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,OAAC,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK,yBAAyB;AAAA,QAC1D,SAAS,SAAS;AAAA,QAClB,eAAe,SAAS;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,QAAQ,SAAS;AACnB,eAAO,QAAQ,QAAQ,OAAO,OAAO;AAAA,MACvC;AACA,cAAQ,MAAM,wDAAwD,iBAAiB,KAAK,CAAC;AAC7F,aAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC,GAAG;AAAA,QACtF,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,MAC/D,CAAC;AAAA,IACH;AAEA,WAAO,IAAI,SAAS,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS,cAAc,EAAE,UAAU,UAAU,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAuDO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,QAAiB,YAA+C;AAClI,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,uBAAuB,QAAiE,OAAO;AAAA,MACjH,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,qBAAqB,QAA+D,OAAO;AAAA,MAC7G,KAAK;AACH,eAAO,SAAS,wBAAwB,QAAkE,OAAO;AAAA,MACnH,KAAK;AAEH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,+BAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}

package/dist/server.d.cts

@@ -64,6 +64,13 @@ type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOp
 /**
  * Create a server action that issues customer session tokens.
  *
+ * This is a generic token primitive: it signs whatever `buyerIdentity` it is
+ * handed. Never expose it to the browser as a portal or sign-in entry — a
+ * Server Action is callable with arbitrary arguments, so a client-chosen
+ * `buyerIdentity` would yield another customer's token. To send a signed-in
+ * customer to the customer portal, use {@link createCustomerPortalRedirect},
+ * which derives identity from your own session.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -79,6 +86,106 @@ type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOp
  * ```
  */
 declare function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction;
+/**
+ * Store and customer identity for a customer portal link, resolved by the
+ * merchant app from its own authenticated session.
+ */
+interface AuthenticatedPortalCustomer {
+    /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */
+    storeId: string;
+    /** Customer identity in your system — the same value used for authenticated checkout */
+    buyerIdentity: string;
+}
+/** Options for {@link createCustomerPortalRedirect}. */
+interface CustomerPortalRedirectOptions {
+    /**
+     * Resolve the signed-in customer from YOUR app's authenticated session
+     * (session cookie, auth library, …). Return `null` when nobody is signed in.
+     *
+     * Must not read `buyerIdentity` or `storeId` from anything the browser
+     * controls — query string, body, form fields or custom headers. Whoever
+     * controls `buyerIdentity` gets that customer's portal.
+     */
+    resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;
+    /**
+     * Where to send a visitor for whom the resolver returned `null`. A path or
+     * absolute URL, resolved against the request URL; a function receives the
+     * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.
+     *
+     * Build it from constants or an allow-list, never by copying request
+     * parameters verbatim (e.g. a `?next=` value) — that turns this route into an
+     * open redirect.
+     */
+    loginUrl?: string | ((request: Request) => string);
+    /**
+     * Build the response when creating the portal link fails (API error, invalid
+     * store ID, network error). This is the place for your own logging and error
+     * reporting. Defaults to a 502 JSON `{ error }` response with a generic
+     * message, after one `console.error` line carrying only the error message;
+     * the error itself is not echoed to the browser.
+     */
+    onError?: (error: unknown, request: Request) => Response | Promise<Response>;
+}
+/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */
+type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;
+/**
+ * Create a GET Route Handler that sends the signed-in customer to your store's
+ * Pancake customer portal, without the portal's email verification step.
+ *
+ * Behavior:
+ * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to
+ *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query
+ *   string, body or headers by the SDK
+ * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`
+ *   and answers `302` to `portalUrl` (which carries `#token=...`)
+ * - Not signed in: `302` to `loginUrl` when set, otherwise `401`
+ * - Link creation fails: `onError(error, request)`, or by default one server-side
+ *   `console.error` line with the error message and a generic `502 { error }`
+ *
+ * Side effects:
+ * - One signed API request per signed-in visit; each visit issues a new portal session
+ * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`
+ *   so the tokenized `Location` is neither cached nor forwarded as a Referer
+ *
+ * Boundary conditions:
+ * - The portal environment is the environment of the API Key in `config`
+ *   (test key → test portal, prod key → prod portal)
+ * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)
+ * - The default error log is the message only, with any `#token=` fragment redacted;
+ *   pass `onError` to log or report failures your own way
+ * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect
+ *
+ * A Route Handler rather than a Server Action: the portal entry is a plain link
+ * navigation, and only an HTTP redirect keeps the tokenized URL out of client
+ * JavaScript while letting the response carry `no-store` / `no-referrer`.
+ *
+ * @param config - WaffoPancake client configuration (merchantId + privateKey)
+ * @param options - Session resolver, login redirect and error handling
+ * @returns A Next.js GET Route Handler
+ *
+ * @example
+ * ```ts
+ * // app/account/billing-portal/route.ts
+ * import { createCustomerPortalRedirect } from "@waffo/pancake-nextjs/server";
+ * import { auth } from "@/lib/auth"; // your auth library
+ *
+ * export const dynamic = "force-dynamic";
+ *
+ * export const GET = createCustomerPortalRedirect(
+ *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },
+ *   {
+ *     resolveAuthenticatedCustomer: async () => {
+ *       const session = await auth();
+ *       if (!session?.user) return null;
+ *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };
+ *     },
+ *     loginUrl: "/login?returnTo=/account/billing-portal",
+ *   },
+ * );
+ * // In a page: <a href="/account/billing-portal">Manage billing</a>
+ * ```
+ */
+declare function createCustomerPortalRedirect(config: WaffoPancakeConfig, options: CustomerPortalRedirectOptions): CustomerPortalRouteHandler;
 /** Customer action types */
 type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "createPlanChangeSession" | "query";
 /** Server action signature for customer session operations */
@@ -146,4 +253,4 @@ type BuyerSessionAction = CustomerSessionAction;
 /** @deprecated Use {@link createCustomerSessionAction} instead. */
 declare const createBuyerSessionAction: typeof createCustomerSessionAction;
 
-export { type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };
+export { type AuthenticatedPortalCustomer, type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerPortalRedirectOptions, type CustomerPortalRouteHandler, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerPortalRedirect, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };

package/dist/server.d.ts

@@ -64,6 +64,13 @@ type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOp
 /**
  * Create a server action that issues customer session tokens.
  *
+ * This is a generic token primitive: it signs whatever `buyerIdentity` it is
+ * handed. Never expose it to the browser as a portal or sign-in entry — a
+ * Server Action is callable with arbitrary arguments, so a client-chosen
+ * `buyerIdentity` would yield another customer's token. To send a signed-in
+ * customer to the customer portal, use {@link createCustomerPortalRedirect},
+ * which derives identity from your own session.
+ *
  * @param config - WaffoPancake client configuration
  * @returns A server action function
  *
@@ -79,6 +86,106 @@ type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOp
  * ```
  */
 declare function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction;
+/**
+ * Store and customer identity for a customer portal link, resolved by the
+ * merchant app from its own authenticated session.
+ */
+interface AuthenticatedPortalCustomer {
+    /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */
+    storeId: string;
+    /** Customer identity in your system — the same value used for authenticated checkout */
+    buyerIdentity: string;
+}
+/** Options for {@link createCustomerPortalRedirect}. */
+interface CustomerPortalRedirectOptions {
+    /**
+     * Resolve the signed-in customer from YOUR app's authenticated session
+     * (session cookie, auth library, …). Return `null` when nobody is signed in.
+     *
+     * Must not read `buyerIdentity` or `storeId` from anything the browser
+     * controls — query string, body, form fields or custom headers. Whoever
+     * controls `buyerIdentity` gets that customer's portal.
+     */
+    resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;
+    /**
+     * Where to send a visitor for whom the resolver returned `null`. A path or
+     * absolute URL, resolved against the request URL; a function receives the
+     * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.
+     *
+     * Build it from constants or an allow-list, never by copying request
+     * parameters verbatim (e.g. a `?next=` value) — that turns this route into an
+     * open redirect.
+     */
+    loginUrl?: string | ((request: Request) => string);
+    /**
+     * Build the response when creating the portal link fails (API error, invalid
+     * store ID, network error). This is the place for your own logging and error
+     * reporting. Defaults to a 502 JSON `{ error }` response with a generic
+     * message, after one `console.error` line carrying only the error message;
+     * the error itself is not echoed to the browser.
+     */
+    onError?: (error: unknown, request: Request) => Response | Promise<Response>;
+}
+/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */
+type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;
+/**
+ * Create a GET Route Handler that sends the signed-in customer to your store's
+ * Pancake customer portal, without the portal's email verification step.
+ *
+ * Behavior:
+ * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to
+ *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query
+ *   string, body or headers by the SDK
+ * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`
+ *   and answers `302` to `portalUrl` (which carries `#token=...`)
+ * - Not signed in: `302` to `loginUrl` when set, otherwise `401`
+ * - Link creation fails: `onError(error, request)`, or by default one server-side
+ *   `console.error` line with the error message and a generic `502 { error }`
+ *
+ * Side effects:
+ * - One signed API request per signed-in visit; each visit issues a new portal session
+ * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`
+ *   so the tokenized `Location` is neither cached nor forwarded as a Referer
+ *
+ * Boundary conditions:
+ * - The portal environment is the environment of the API Key in `config`
+ *   (test key → test portal, prod key → prod portal)
+ * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)
+ * - The default error log is the message only, with any `#token=` fragment redacted;
+ *   pass `onError` to log or report failures your own way
+ * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect
+ *
+ * A Route Handler rather than a Server Action: the portal entry is a plain link
+ * navigation, and only an HTTP redirect keeps the tokenized URL out of client
+ * JavaScript while letting the response carry `no-store` / `no-referrer`.
+ *
+ * @param config - WaffoPancake client configuration (merchantId + privateKey)
+ * @param options - Session resolver, login redirect and error handling
+ * @returns A Next.js GET Route Handler
+ *
+ * @example
+ * ```ts
+ * // app/account/billing-portal/route.ts
+ * import { createCustomerPortalRedirect } from "@waffo/pancake-nextjs/server";
+ * import { auth } from "@/lib/auth"; // your auth library
+ *
+ * export const dynamic = "force-dynamic";
+ *
+ * export const GET = createCustomerPortalRedirect(
+ *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },
+ *   {
+ *     resolveAuthenticatedCustomer: async () => {
+ *       const session = await auth();
+ *       if (!session?.user) return null;
+ *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };
+ *     },
+ *     loginUrl: "/login?returnTo=/account/billing-portal",
+ *   },
+ * );
+ * // In a page: <a href="/account/billing-portal">Manage billing</a>
+ * ```
+ */
+declare function createCustomerPortalRedirect(config: WaffoPancakeConfig, options: CustomerPortalRedirectOptions): CustomerPortalRouteHandler;
 /** Customer action types */
 type CustomerSessionActionType = "cancelSubscription" | "cancelOnetimeOrder" | "reactivateSubscription" | "createRefundTicket" | "resubmitRefundTicket" | "createPlanChangeSession" | "query";
 /** Server action signature for customer session operations */
@@ -146,4 +253,4 @@ type BuyerSessionAction = CustomerSessionAction;
 /** @deprecated Use {@link createCustomerSessionAction} instead. */
 declare const createBuyerSessionAction: typeof createCustomerSessionAction;
 
-export { type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };
+export { type AuthenticatedPortalCustomer, type BuyerSessionAction, type BuyerSessionActionType, type BuyerTokenAction, type CheckoutAction, type CheckoutActionParams, type CheckoutActionResult, type CustomerPortalRedirectOptions, type CustomerPortalRouteHandler, type CustomerSessionAction, type CustomerSessionActionType, type CustomerTokenAction, type MerchantQueryAction, createBuyerSessionAction, createBuyerTokenAction, createCheckoutAction, createCustomerPortalRedirect, createCustomerSessionAction, createCustomerTokenAction, createMerchantQueryAction };

package/dist/server.js

@@ -25,6 +25,55 @@ function createCustomerTokenAction(config) {
     return client.auth.issueSessionToken(params, options);
   };
 }
+function portalHeaders(extra) {
+  const headers = new Headers(extra);
+  headers.set("Cache-Control", "no-store");
+  headers.set("Referrer-Policy", "no-referrer");
+  return headers;
+}
+function safeErrorMessage(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.replace(/#token=[^\s"'&]*/g, "#token=[redacted]").replace(/\s+/g, " ");
+}
+function createCustomerPortalRedirect(config, options) {
+  const client = new WaffoPancake(config);
+  return async function GET(request) {
+    const customer = await options.resolveAuthenticatedCustomer(request);
+    if (!customer) {
+      if (options.loginUrl === void 0) {
+        return new Response(JSON.stringify({ error: "Unauthorized" }), {
+          status: 401,
+          headers: portalHeaders({ "Content-Type": "application/json" })
+        });
+      }
+      const loginUrl = typeof options.loginUrl === "function" ? options.loginUrl(request) : options.loginUrl;
+      return new Response(null, {
+        status: 302,
+        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() })
+      });
+    }
+    let portalUrl;
+    try {
+      ({ portalUrl } = await client.auth.createCustomerPortalLink({
+        storeId: customer.storeId,
+        buyerIdentity: customer.buyerIdentity
+      }));
+    } catch (error) {
+      if (options.onError) {
+        return options.onError(error, request);
+      }
+      console.error("[waffo-pancake] createCustomerPortalRedirect failed:", safeErrorMessage(error));
+      return new Response(JSON.stringify({ error: "Failed to create customer portal link" }), {
+        status: 502,
+        headers: portalHeaders({ "Content-Type": "application/json" })
+      });
+    }
+    return new Response(null, {
+      status: 302,
+      headers: portalHeaders({ Location: portalUrl })
+    });
+  };
+}
 function createCustomerSessionAction(config) {
   const client = new WaffoPancake(config);
   return async (token, actionType, params, options) => {
@@ -61,6 +110,7 @@ export {
   createBuyerSessionAction,
   createBuyerTokenAction,
   createCheckoutAction,
+  createCustomerPortalRedirect,
   createCustomerSessionAction,
   createCustomerTokenAction,
   createMerchantQueryAction

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  RequestOptions,\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  AuthenticatedPlanChangeParams,\n  CreatePlanChangeSessionParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/**\n * Parameters for the checkout server action.\n *\n * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)\n * or a plan change for an existing subscription (`planChange` /\n * `authenticatedPlanChange`, which carry the required `originOrderId`).\n */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams)\n  | ({ type: \"planChange\" } & CreatePlanChangeSessionParams)\n  | ({ type: \"authenticatedPlanChange\" } & AuthenticatedPlanChangeParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/**\n * Server action signature for checkout.\n *\n * The optional `options` carries an `idempotencyKey`; without one no key is sent\n * and a retried call creates a second session.\n */\nexport type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * Handles both new purchases and plan changes; `params.type` selects the flow.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n *\n * @example\n * ```ts\n * // Plan change link for an existing subscription — originOrderId is required\n * const session = await checkout({\n *   type: \"planChange\",\n *   originOrderId: \"ORD_xxx\",\n *   productId: \"PROD_target_plan\",\n *   currency: \"USD\",\n * });\n * // session.checkoutUrl points at the change confirmation page\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams, options?: RequestOptions): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams, options);\n    }\n    if (params.type === \"planChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.createPlanChangeSession(sdkParams, options);\n    }\n    if (params.type === \"authenticatedPlanChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.createPlanChange(sdkParams, options);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams, options);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams, options?: RequestOptions): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params, options);\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"createPlanChangeSession\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (\n  token: string,\n  actionType: CustomerSessionActionType,\n  params: unknown,\n  options?: RequestOptions,\n) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * `createPlanChangeSession` is the customer-driven half of a plan change: it returns\n * a confirmation-page URL, and the platform allows it only when the subscription\n * belongs to that customer, the target plan is in the same product group, and that\n * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing\n * fields are not part of its params; the platform drops them on this path silently.\n *\n * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,\n * the last argument) — the same rule as every other method in the SDK — so a write\n * retried after a timeout executes twice.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0], options);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0], options);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0], options);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0], options);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0], options);\n      case \"createPlanChangeSession\":\n        return customer.createPlanChangeSession(params as Parameters<typeof customer.createPlanChangeSession>[0], options);\n      case \"query\":\n        // Reads take no key: a cached replay would serve stale data.\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";AAsBA,SAAS,oBAAoB;AA8EtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAA8B,YAA4D;AACtG,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,YAAW,OAAO;AAAA,IAChE;AACA,QAAI,OAAO,SAAS,cAAc;AAEhC,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,wBAAwBA,YAAW,OAAO;AAAA,IACnE;AACA,QAAI,OAAO,SAAS,2BAA2B;AAE7C,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,iBAAiBA,YAAW,OAAO;AAAA,IAC1E;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,WAAW,OAAO;AAAA,EAC5D;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAAiC,YAAoD;AACjG,WAAO,OAAO,KAAK,kBAAkB,QAAQ,OAAO;AAAA,EACtD;AACF;AAuDO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,QAAiB,YAA+C;AAClI,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,uBAAuB,QAAiE,OAAO;AAAA,MACjH,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,qBAAqB,QAA+D,OAAO;AAAA,MAC7G,KAAK;AACH,eAAO,SAAS,wBAAwB,QAAkE,OAAO;AAAA,MACnH,KAAK;AAEH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side entry point for @waffo/pancake-nextjs.\n *\n * All functions in this module use the private key for RSA signing\n * and must only run on the server (Next.js Server Actions / Route Handlers).\n *\n * @example\n * ```ts\n * // app/lib/waffo.ts\n * \"use server\";\n * import { createCheckoutAction, createCustomerTokenAction, createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * const config = {\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * };\n *\n * export const checkout = createCheckoutAction(config);\n * export const issueCustomerToken = createCustomerTokenAction(config);\n * export const merchantQuery = createMerchantQueryAction(config);\n * ```\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts — customer portal entry from your own login\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n *\n * export const GET = createCustomerPortalRedirect(config, {\n *   resolveAuthenticatedCustomer: async (request) => getSignedInCustomer(request), // your session\n * });\n * ```\n */\nimport { WaffoPancake } from \"@waffo/pancake-ts\";\n\nimport type {\n  RequestOptions,\n  WaffoPancakeConfig,\n  AnonymousCheckoutParams,\n  AuthenticatedCheckoutParams,\n  AuthenticatedPlanChangeParams,\n  CreatePlanChangeSessionParams,\n  CheckoutSessionResult,\n  AuthenticatedCheckoutResult,\n  IssueSessionTokenParams,\n  SessionToken,\n  GraphQLParams,\n  GraphQLResponse,\n} from \"@waffo/pancake-ts\";\n\n// ============================================================\n// Checkout Action\n// ============================================================\n\n/**\n * Parameters for the checkout server action.\n *\n * The `type` field selects the flow: a new purchase (`anonymous` / `authenticated`)\n * or a plan change for an existing subscription (`planChange` /\n * `authenticatedPlanChange`, which carry the required `originOrderId`).\n */\nexport type CheckoutActionParams =\n  | ({ type?: \"anonymous\" } & AnonymousCheckoutParams)\n  | ({ type: \"authenticated\" } & AuthenticatedCheckoutParams)\n  | ({ type: \"planChange\" } & CreatePlanChangeSessionParams)\n  | ({ type: \"authenticatedPlanChange\" } & AuthenticatedPlanChangeParams);\n\n/** Result of the checkout server action */\nexport type CheckoutActionResult = CheckoutSessionResult | AuthenticatedCheckoutResult;\n\n/**\n * Server action signature for checkout.\n *\n * The optional `options` carries an `idempotencyKey`; without one no key is sent\n * and a retried call creates a second session.\n */\nexport type CheckoutAction = (params: CheckoutActionParams, options?: RequestOptions) => Promise<CheckoutActionResult>;\n\n/**\n * Create a server action that handles checkout session creation.\n *\n * The private key is captured in the closure and never sent to the client.\n *\n * Handles both new purchases and plan changes; `params.type` selects the flow.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCheckoutAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const checkout = createCheckoutAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n *\n * @example\n * ```ts\n * // Plan change link for an existing subscription — originOrderId is required\n * const session = await checkout({\n *   type: \"planChange\",\n *   originOrderId: \"ORD_xxx\",\n *   productId: \"PROD_target_plan\",\n *   currency: \"USD\",\n * });\n * // session.checkoutUrl points at the change confirmation page\n * ```\n */\nexport function createCheckoutAction(config: WaffoPancakeConfig): CheckoutAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: CheckoutActionParams, options?: RequestOptions): Promise<CheckoutActionResult> => {\n    if (params.type === \"authenticated\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.create(sdkParams, options);\n    }\n    if (params.type === \"planChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.createPlanChangeSession(sdkParams, options);\n    }\n    if (params.type === \"authenticatedPlanChange\") {\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n      const { type, ...sdkParams } = params;\n      return client.checkout.authenticated.createPlanChange(sdkParams, options);\n    }\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars -- remove type field before passing to SDK\n    const { type, ...sdkParams } = params;\n    return client.checkout.anonymous.create(sdkParams, options);\n  };\n}\n\n// ============================================================\n// Customer Token Action\n// ============================================================\n\n/** Server action signature for issuing customer tokens */\nexport type CustomerTokenAction = (params: IssueSessionTokenParams, options?: RequestOptions) => Promise<SessionToken>;\n\n/**\n * Create a server action that issues customer session tokens.\n *\n * This is a generic token primitive: it signs whatever `buyerIdentity` it is\n * handed. Never expose it to the browser as a portal or sign-in entry — a\n * Server Action is callable with arbitrary arguments, so a client-chosen\n * `buyerIdentity` would yield another customer's token. To send a signed-in\n * customer to the customer portal, use {@link createCustomerPortalRedirect},\n * which derives identity from your own session.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerTokenAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const issueCustomerToken = createCustomerTokenAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createCustomerTokenAction(config: WaffoPancakeConfig): CustomerTokenAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: IssueSessionTokenParams, options?: RequestOptions): Promise<SessionToken> => {\n    return client.auth.issueSessionToken(params, options);\n  };\n}\n\n// ============================================================\n// Customer Portal Redirect\n// ============================================================\n\n/**\n * Store and customer identity for a customer portal link, resolved by the\n * merchant app from its own authenticated session.\n */\nexport interface AuthenticatedPortalCustomer {\n  /** Store ID (Short ID `STO_xxx`) whose portal the customer enters */\n  storeId: string;\n  /** Customer identity in your system — the same value used for authenticated checkout */\n  buyerIdentity: string;\n}\n\n/** Options for {@link createCustomerPortalRedirect}. */\nexport interface CustomerPortalRedirectOptions {\n  /**\n   * Resolve the signed-in customer from YOUR app's authenticated session\n   * (session cookie, auth library, …). Return `null` when nobody is signed in.\n   *\n   * Must not read `buyerIdentity` or `storeId` from anything the browser\n   * controls — query string, body, form fields or custom headers. Whoever\n   * controls `buyerIdentity` gets that customer's portal.\n   */\n  resolveAuthenticatedCustomer: (request: Request) => Promise<AuthenticatedPortalCustomer | null> | AuthenticatedPortalCustomer | null;\n  /**\n   * Where to send a visitor for whom the resolver returned `null`. A path or\n   * absolute URL, resolved against the request URL; a function receives the\n   * request (e.g. to add your own `returnTo`). Omit to answer 401 instead.\n   *\n   * Build it from constants or an allow-list, never by copying request\n   * parameters verbatim (e.g. a `?next=` value) — that turns this route into an\n   * open redirect.\n   */\n  loginUrl?: string | ((request: Request) => string);\n  /**\n   * Build the response when creating the portal link fails (API error, invalid\n   * store ID, network error). This is the place for your own logging and error\n   * reporting. Defaults to a 502 JSON `{ error }` response with a generic\n   * message, after one `console.error` line carrying only the error message;\n   * the error itself is not echoed to the browser.\n   */\n  onError?: (error: unknown, request: Request) => Response | Promise<Response>;\n}\n\n/** GET Route Handler returned by {@link createCustomerPortalRedirect}. */\nexport type CustomerPortalRouteHandler = (request: Request) => Promise<Response>;\n\n/**\n * Build headers for a portal route response. Every response — redirect, 401 or\n * error — is `no-store` and `no-referrer`, so a tokenized `Location` is neither\n * cached nor forwarded as a Referer.\n */\nfunction portalHeaders(extra: Record<string, string>): Headers {\n  const headers = new Headers(extra);\n  headers.set(\"Cache-Control\", \"no-store\");\n  headers.set(\"Referrer-Policy\", \"no-referrer\");\n  return headers;\n}\n\n/**\n * One-line, log-safe description of a portal link failure: the error message\n * only (never the error object, which may carry a response body), with any\n * `#token=...` fragment redacted.\n */\nfunction safeErrorMessage(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message.replace(/#token=[^\\s\"'&]*/g, \"#token=[redacted]\").replace(/\\s+/g, \" \");\n}\n\n/**\n * Create a GET Route Handler that sends the signed-in customer to your store's\n * Pancake customer portal, without the portal's email verification step.\n *\n * Behavior:\n * - Calls `resolveAuthenticatedCustomer(request)` — your own session check — to\n *   get `{ storeId, buyerIdentity }`. Nothing is read from the request's query\n *   string, body or headers by the SDK\n * - Signed in: creates a portal link with `client.auth.createCustomerPortalLink()`\n *   and answers `302` to `portalUrl` (which carries `#token=...`)\n * - Not signed in: `302` to `loginUrl` when set, otherwise `401`\n * - Link creation fails: `onError(error, request)`, or by default one server-side\n *   `console.error` line with the error message and a generic `502 { error }`\n *\n * Side effects:\n * - One signed API request per signed-in visit; each visit issues a new portal session\n * - Every response it builds (not a custom `onError` one) sets `Cache-Control: no-store` and `Referrer-Policy: no-referrer`\n *   so the tokenized `Location` is neither cached nor forwarded as a Referer\n *\n * Boundary conditions:\n * - The portal environment is the environment of the API Key in `config`\n *   (test key → test portal, prod key → prod portal)\n * - Errors thrown by `resolveAuthenticatedCustomer` propagate (Next.js answers 500)\n * - The default error log is the message only, with any `#token=` fragment redacted;\n *   pass `onError` to log or report failures your own way\n * - `loginUrl` must not echo request parameters verbatim, or the route becomes an open redirect\n *\n * A Route Handler rather than a Server Action: the portal entry is a plain link\n * navigation, and only an HTTP redirect keeps the tokenized URL out of client\n * JavaScript while letting the response carry `no-store` / `no-referrer`.\n *\n * @param config - WaffoPancake client configuration (merchantId + privateKey)\n * @param options - Session resolver, login redirect and error handling\n * @returns A Next.js GET Route Handler\n *\n * @example\n * ```ts\n * // app/account/billing-portal/route.ts\n * import { createCustomerPortalRedirect } from \"@waffo/pancake-nextjs/server\";\n * import { auth } from \"@/lib/auth\"; // your auth library\n *\n * export const dynamic = \"force-dynamic\";\n *\n * export const GET = createCustomerPortalRedirect(\n *   { merchantId: process.env.WAFFO_MERCHANT_ID!, privateKey: process.env.WAFFO_PRIVATE_KEY! },\n *   {\n *     resolveAuthenticatedCustomer: async () => {\n *       const session = await auth();\n *       if (!session?.user) return null;\n *       return { storeId: process.env.WAFFO_STORE_ID!, buyerIdentity: session.user.id };\n *     },\n *     loginUrl: \"/login?returnTo=/account/billing-portal\",\n *   },\n * );\n * // In a page: <a href=\"/account/billing-portal\">Manage billing</a>\n * ```\n */\nexport function createCustomerPortalRedirect(\n  config: WaffoPancakeConfig,\n  options: CustomerPortalRedirectOptions,\n): CustomerPortalRouteHandler {\n  const client = new WaffoPancake(config);\n\n  return async function GET(request: Request): Promise<Response> {\n    const customer = await options.resolveAuthenticatedCustomer(request);\n\n    if (!customer) {\n      if (options.loginUrl === undefined) {\n        return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n          status: 401,\n          headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n        });\n      }\n      const loginUrl = typeof options.loginUrl === \"function\" ? options.loginUrl(request) : options.loginUrl;\n      return new Response(null, {\n        status: 302,\n        headers: portalHeaders({ Location: new URL(loginUrl, request.url).toString() }),\n      });\n    }\n\n    let portalUrl: string;\n    try {\n      ({ portalUrl } = await client.auth.createCustomerPortalLink({\n        storeId: customer.storeId,\n        buyerIdentity: customer.buyerIdentity,\n      }));\n    } catch (error) {\n      if (options.onError) {\n        return options.onError(error, request);\n      }\n      console.error(\"[waffo-pancake] createCustomerPortalRedirect failed:\", safeErrorMessage(error));\n      return new Response(JSON.stringify({ error: \"Failed to create customer portal link\" }), {\n        status: 502,\n        headers: portalHeaders({ \"Content-Type\": \"application/json\" }),\n      });\n    }\n\n    return new Response(null, {\n      status: 302,\n      headers: portalHeaders({ Location: portalUrl }),\n    });\n  };\n}\n\n// ============================================================\n// Customer Session Action\n// ============================================================\n\n/** Customer action types */\nexport type CustomerSessionActionType =\n  | \"cancelSubscription\"\n  | \"cancelOnetimeOrder\"\n  | \"reactivateSubscription\"\n  | \"createRefundTicket\"\n  | \"resubmitRefundTicket\"\n  | \"createPlanChangeSession\"\n  | \"query\";\n\n/** Server action signature for customer session operations */\nexport type CustomerSessionAction = (\n  token: string,\n  actionType: CustomerSessionActionType,\n  params: unknown,\n  options?: RequestOptions,\n) => Promise<unknown>;\n\n/**\n * Create a server action that executes customer self-service operations.\n *\n * `config.environment` is required — session tokens carry no environment, and the\n * gateway rejects a session request without the matching header.\n *\n * `createPlanChangeSession` is the customer-driven half of a plan change: it returns\n * a confirmation-page URL, and the platform allows it only when the subscription\n * belongs to that customer, the target plan is in the same product group, and that\n * group's `selfServicePlanChange` is on — otherwise 403. The merchant-only pricing\n * fields are not part of its params; the platform drops them on this path silently.\n *\n * No call sends an idempotency key unless you pass one (`options.idempotencyKey`,\n * the last argument) — the same rule as every other method in the SDK — so a write\n * retried after a timeout executes twice.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createCustomerSessionAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const customerAction = createCustomerSessionAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n *   environment: \"test\",\n * });\n * ```\n */\nexport function createCustomerSessionAction(config: WaffoPancakeConfig): CustomerSessionAction {\n  const client = new WaffoPancake(config);\n\n  return async (token: string, actionType: CustomerSessionActionType, params: unknown, options?: RequestOptions): Promise<unknown> => {\n    const customer = client.buyer(token);\n    switch (actionType) {\n      case \"cancelSubscription\":\n        return customer.cancelSubscription(params as Parameters<typeof customer.cancelSubscription>[0], options);\n      case \"cancelOnetimeOrder\":\n        return customer.cancelOnetimeOrder(params as Parameters<typeof customer.cancelOnetimeOrder>[0], options);\n      case \"reactivateSubscription\":\n        return customer.reactivateSubscription(params as Parameters<typeof customer.reactivateSubscription>[0], options);\n      case \"createRefundTicket\":\n        return customer.createRefundTicket(params as Parameters<typeof customer.createRefundTicket>[0], options);\n      case \"resubmitRefundTicket\":\n        return customer.resubmitRefundTicket(params as Parameters<typeof customer.resubmitRefundTicket>[0], options);\n      case \"createPlanChangeSession\":\n        return customer.createPlanChangeSession(params as Parameters<typeof customer.createPlanChangeSession>[0], options);\n      case \"query\":\n        // Reads take no key: a cached replay would serve stale data.\n        return customer.graphql.query(params as GraphQLParams);\n      default:\n        throw new Error(`Unknown customer action: ${actionType}`);\n    }\n  };\n}\n\n// ============================================================\n// Merchant Query Action\n// ============================================================\n\n/** Server action signature for merchant GraphQL queries */\nexport type MerchantQueryAction = (params: GraphQLParams) => Promise<GraphQLResponse>;\n\n/**\n * Create a server action that executes merchant GraphQL queries.\n *\n * @param config - WaffoPancake client configuration\n * @returns A server action function\n *\n * @example\n * ```ts\n * \"use server\";\n * import { createMerchantQueryAction } from \"@waffo/pancake-nextjs/server\";\n *\n * export const merchantQuery = createMerchantQueryAction({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createMerchantQueryAction(config: WaffoPancakeConfig): MerchantQueryAction {\n  const client = new WaffoPancake(config);\n\n  return async (params: GraphQLParams): Promise<GraphQLResponse> => {\n    return client.graphql.query(params);\n  };\n}\n\n// ============================================================\n// Deprecated Aliases\n// ============================================================\n\n/** @deprecated Use {@link CustomerTokenAction} instead. */\nexport type BuyerTokenAction = CustomerTokenAction;\n\n/** @deprecated Use {@link createCustomerTokenAction} instead. */\nexport const createBuyerTokenAction = createCustomerTokenAction;\n\n/** @deprecated Use {@link CustomerSessionActionType} instead. */\nexport type BuyerSessionActionType = CustomerSessionActionType;\n\n/** @deprecated Use {@link CustomerSessionAction} instead. */\nexport type BuyerSessionAction = CustomerSessionAction;\n\n/** @deprecated Use {@link createCustomerSessionAction} instead. */\nexport const createBuyerSessionAction = createCustomerSessionAction;\n"],"mappings":";AAgCA,SAAS,oBAAoB;AA8EtB,SAAS,qBAAqB,QAA4C;AAC/E,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAA8B,YAA4D;AACtG,QAAI,OAAO,SAAS,iBAAiB;AAEnC,YAAM,EAAE,MAAAA,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,OAAOA,YAAW,OAAO;AAAA,IAChE;AACA,QAAI,OAAO,SAAS,cAAc;AAEhC,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,wBAAwBA,YAAW,OAAO;AAAA,IACnE;AACA,QAAI,OAAO,SAAS,2BAA2B;AAE7C,YAAM,EAAE,MAAAD,OAAM,GAAGC,WAAU,IAAI;AAC/B,aAAO,OAAO,SAAS,cAAc,iBAAiBA,YAAW,OAAO;AAAA,IAC1E;AAEA,UAAM,EAAE,MAAM,GAAG,UAAU,IAAI;AAC/B,WAAO,OAAO,SAAS,UAAU,OAAO,WAAW,OAAO;AAAA,EAC5D;AACF;AAiCO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,QAAiC,YAAoD;AACjG,WAAO,OAAO,KAAK,kBAAkB,QAAQ,OAAO;AAAA,EACtD;AACF;AAwDA,SAAS,cAAc,OAAwC;AAC7D,QAAM,UAAU,IAAI,QAAQ,KAAK;AACjC,UAAQ,IAAI,iBAAiB,UAAU;AACvC,UAAQ,IAAI,mBAAmB,aAAa;AAC5C,SAAO;AACT;AAOA,SAAS,iBAAiB,OAAwB;AAChD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QAAQ,QAAQ,qBAAqB,mBAAmB,EAAE,QAAQ,QAAQ,GAAG;AACtF;AA2DO,SAAS,6BACd,QACA,SAC4B;AAC5B,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,eAAe,IAAI,SAAqC;AAC7D,UAAM,WAAW,MAAM,QAAQ,6BAA6B,OAAO;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ,aAAa,QAAW;AAClC,eAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,eAAe,CAAC,GAAG;AAAA,UAC7D,QAAQ;AAAA,UACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,QAC/D,CAAC;AAAA,MACH;AACA,YAAM,WAAW,OAAO,QAAQ,aAAa,aAAa,QAAQ,SAAS,OAAO,IAAI,QAAQ;AAC9F,aAAO,IAAI,SAAS,MAAM;AAAA,QACxB,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,UAAU,IAAI,IAAI,UAAU,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,MAChF,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,OAAC,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK,yBAAyB;AAAA,QAC1D,SAAS,SAAS;AAAA,QAClB,eAAe,SAAS;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,QAAQ,SAAS;AACnB,eAAO,QAAQ,QAAQ,OAAO,OAAO;AAAA,MACvC;AACA,cAAQ,MAAM,wDAAwD,iBAAiB,KAAK,CAAC;AAC7F,aAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wCAAwC,CAAC,GAAG;AAAA,QACtF,QAAQ;AAAA,QACR,SAAS,cAAc,EAAE,gBAAgB,mBAAmB,CAAC;AAAA,MAC/D,CAAC;AAAA,IACH;AAEA,WAAO,IAAI,SAAS,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS,cAAc,EAAE,UAAU,UAAU,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAuDO,SAAS,4BAA4B,QAAmD;AAC7F,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,OAAe,YAAuC,QAAiB,YAA+C;AAClI,UAAM,WAAW,OAAO,MAAM,KAAK;AACnC,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,uBAAuB,QAAiE,OAAO;AAAA,MACjH,KAAK;AACH,eAAO,SAAS,mBAAmB,QAA6D,OAAO;AAAA,MACzG,KAAK;AACH,eAAO,SAAS,qBAAqB,QAA+D,OAAO;AAAA,MAC7G,KAAK;AACH,eAAO,SAAS,wBAAwB,QAAkE,OAAO;AAAA,MACnH,KAAK;AAEH,eAAO,SAAS,QAAQ,MAAM,MAAuB;AAAA,MACvD;AACE,cAAM,IAAI,MAAM,4BAA4B,UAAU,EAAE;AAAA,IAC5D;AAAA,EACF;AACF;AA0BO,SAAS,0BAA0B,QAAiD;AACzF,QAAM,SAAS,IAAI,aAAa,MAAM;AAEtC,SAAO,OAAO,WAAoD;AAChE,WAAO,OAAO,QAAQ,MAAM,MAAM;AAAA,EACpC;AACF;AAUO,IAAM,yBAAyB;AAS/B,IAAM,2BAA2B;","names":["type","sdkParams"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waffo/pancake-nextjs",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Next.js SDK for Waffo Pancake — checkout components and hooks",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -48,7 +48,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@waffo/pancake-ts": "^0.23.0",
+    "@waffo/pancake-ts": "^0.26.0",
     "next": ">=14.0.0",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"