@waffo/pancake-ts 0.1.7 → 0.2.0

package/dist/index.js

@@ -1,6 +1,3 @@
-// src/http-client.ts
-import { createHash as createHash2 } from "crypto";
-
 // src/errors.ts
 var WaffoPancakeError = class extends Error {
   status;
@@ -14,6 +11,45 @@ var WaffoPancakeError = class extends Error {
   }
 };
 
+// src/buyer-http-client.ts
+var DEFAULT_BASE_URL = "https://api.waffo.ai";
+var BuyerHttpClient = class {
+  token;
+  baseUrl;
+  _fetch;
+  constructor(token, config) {
+    this.token = token;
+    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this._fetch = config.fetch ?? fetch;
+  }
+  /**
+   * Send a Bearer-authenticated POST request and return the parsed `data` field.
+   *
+   * @param path - API path
+   * @param body - Request body object
+   * @returns Parsed `data` field from the response
+   * @throws {WaffoPancakeError} When the API returns errors
+   */
+  async post(path, body) {
+    const response = await this._fetch(`${this.baseUrl}${path}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "Authorization": `Bearer ${this.token}`
+      },
+      body: JSON.stringify(body)
+    });
+    const result = await response.json();
+    if ("errors" in result && result.errors) {
+      throw new WaffoPancakeError(response.status, result.errors);
+    }
+    return result.data;
+  }
+};
+
+// src/http-client.ts
+import { createHash as createHash2 } from "crypto";
+
 // src/signing.ts
 import { createHash, createPrivateKey, createPublicKey, createSign } from "crypto";
 var PKCS8_HEADER = "-----BEGIN PRIVATE KEY-----";
@@ -126,7 +162,7 @@ ${bodyHash}`;
 }
 
 // src/http-client.ts
-var DEFAULT_BASE_URL = "https://waffo-pancake-auth-service.vercel.app";
+var DEFAULT_BASE_URL2 = "https://api.waffo.ai";
 var HttpClient = class {
   merchantId;
   privateKey;
@@ -135,7 +171,7 @@ var HttpClient = class {
   constructor(config) {
     this.merchantId = config.merchantId;
     this.privateKey = normalizePrivateKey(config.privateKey);
-    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL2).replace(/\/+$/, "");
     this._fetch = config.fetch ?? fetch;
   }
   /**
@@ -187,7 +223,7 @@ var AuthResource = class {
    *
    * @example
    * const { token, expiresAt } = await client.auth.issueSessionToken({
-   *   storeId: "store_xxx",
+   *   storeId: "STO_xxx",
    *   buyerIdentity: "customer@example.com",
    * });
    */
@@ -196,21 +232,222 @@ var AuthResource = class {
   }
 };
 
+// src/resources/buyer.ts
+var BuyerSession = class {
+  constructor(http) {
+    this.http = http;
+    this.graphql = new BuyerGraphQL(http);
+  }
+  /** GraphQL query access scoped to the buyer's data. */
+  graphql;
+  /**
+   * Cancel a subscription order.
+   *
+   * @param params - Order to cancel
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.cancelSubscription({ orderId: "ORD_xxx" });
+   * // status: "canceled" (was pending) or "canceling" (was active)
+   */
+  async cancelSubscription(params) {
+    return this.http.post(
+      "/v1/actions/subscription-order/cancel-order",
+      params
+    );
+  }
+  /**
+   * Cancel a one-time order (only while payment is still pending).
+   *
+   * @param params - Order to cancel
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.cancelOnetimeOrder({ orderId: "ORD_xxx" });
+   */
+  async cancelOnetimeOrder(params) {
+    return this.http.post(
+      "/v1/actions/onetime-order/cancel-order",
+      params
+    );
+  }
+  /**
+   * Reactivate a subscription that is in `canceling` status.
+   *
+   * @param params - Order to reactivate
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.reactivateSubscription({ orderId: "ORD_xxx" });
+   * // status: "active"
+   */
+  async reactivateSubscription(params) {
+    return this.http.post(
+      "/v1/actions/subscription-order/reactivate-order",
+      params
+    );
+  }
+  /**
+   * Submit a refund request for a payment.
+   *
+   * @param params - Refund ticket details
+   * @returns Created refund ticket
+   *
+   * @example
+   * const { ticket } = await buyer.createRefundTicket({
+   *   paymentId: "PAY_xxx",
+   *   reason: "Product not as described",
+   *   requestedAmount: { amount: "29.00", currency: "USD" },
+   * });
+   */
+  async createRefundTicket(params) {
+    return this.http.post(
+      "/v1/actions/refund-ticket/create-ticket",
+      params
+    );
+  }
+  /**
+   * Resubmit a previously rejected refund ticket with updated details.
+   *
+   * @param params - Updated ticket details
+   * @returns Updated refund ticket
+   *
+   * @example
+   * const { ticket } = await buyer.resubmitRefundTicket({
+   *   ticketId: "TKT_xxx",
+   *   paymentId: "PAY_xxx",
+   *   reason: "Updated reason with more detail",
+   *   requestedAmount: { amount: "29.00", currency: "USD" },
+   * });
+   */
+  async resubmitRefundTicket(params) {
+    return this.http.post(
+      "/v1/actions/refund-ticket/resubmit-ticket",
+      params
+    );
+  }
+};
+var BuyerGraphQL = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * Execute a GraphQL query scoped to the buyer's data.
+   *
+   * @param params - GraphQL query and variables
+   * @returns GraphQL response
+   *
+   * @example
+   * const result = await buyer.graphql.query({
+   *   query: `query { orders { id status } }`,
+   * });
+   */
+  async query(params) {
+    return this.http.post("/v1/graphql", params);
+  }
+};
+
+// src/resources/checkout-anonymous.ts
+var CheckoutAnonymousResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * Create an anonymous checkout session.
+   *
+   * @param params - Checkout parameters (no buyer identity required)
+   * @returns Session ID, checkout URL, and expiration
+   *
+   * @example
+   * const result = await client.checkout.anonymous.create({
+   *   storeId: "STO_xxx",
+   *   productId: "PROD_xxx",
+   *   productType: "onetime",
+   *   currency: "USD",
+   * });
+   * // Redirect to result.checkoutUrl
+   */
+  async create(params) {
+    return this.http.post(
+      "/v1/actions/checkout/create-session",
+      params
+    );
+  }
+};
+
+// src/resources/checkout-authenticated.ts
+var CheckoutAuthenticatedResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * Create an authenticated checkout session.
+   *
+   * Behavior:
+   * - Issues a session token via `issue-session-token`
+   * - Creates a checkout session via `create-session`
+   * - Appends the token to the checkout URL as a URL fragment
+   * - Defaults `buyerEmail` to `buyerIdentity` when omitted
+   *
+   * @param params - Checkout parameters including buyer identity
+   * @returns Session details with token-appended checkout URL
+   *
+   * @example
+   * const result = await client.checkout.authenticated.create({
+   *   storeId: "STO_xxx",
+   *   productId: "PROD_xxx",
+   *   productType: "onetime",
+   *   currency: "USD",
+   *   buyerIdentity: "customer@example.com",
+   * });
+   * // Redirect to result.checkoutUrl (includes #token=...)
+   */
+  async create(params) {
+    const { buyerIdentity, buyerEmail, ...sessionFields } = params;
+    const [tokenResult, sessionResult] = await Promise.all([
+      this.http.post("/v1/actions/auth/issue-session-token", {
+        storeId: params.storeId,
+        buyerIdentity
+      }),
+      this.http.post("/v1/actions/checkout/create-session", {
+        ...sessionFields,
+        buyerEmail: buyerEmail ?? buyerIdentity
+      })
+    ]);
+    return {
+      sessionId: sessionResult.sessionId,
+      checkoutUrl: `${sessionResult.checkoutUrl}#token=${tokenResult.token}`,
+      expiresAt: sessionResult.expiresAt,
+      token: tokenResult.token,
+      tokenExpiresAt: tokenResult.expiresAt
+    };
+  }
+};
+
 // src/resources/checkout.ts
 var CheckoutResource = class {
   constructor(http) {
     this.http = http;
+    this.anonymous = new CheckoutAnonymousResource(http);
+    this.authenticated = new CheckoutAuthenticatedResource(http);
   }
+  /** Anonymous checkout — no buyer identity, empty form. */
+  anonymous;
+  /** Authenticated checkout — merchant provides buyer identity. */
+  authenticated;
   /**
-   * Create a checkout session. Returns a URL to redirect the customer to.
+   * Create a checkout session (low-level). Returns a URL to redirect the customer to.
+   *
+   * For most use cases, prefer `checkout.anonymous.create()` or
+   * `checkout.authenticated.create()` which handle the full flow automatically.
    *
    * @param params - Checkout session parameters
    * @returns Session ID, checkout URL, and expiration
    *
    * @example
    * const session = await client.checkout.createSession({
-   *   storeId: "store_xxx",
-   *   productId: "prod_xxx",
+   *   storeId: "STO_xxx",
+   *   productId: "PROD_xxx",
    *   productType: "onetime",
    *   currency: "USD",
    *   buyerEmail: "customer@example.com",
@@ -242,7 +479,7 @@ var GraphQLResource = class {
    * @example
    * const result = await client.graphql.query({
    *   query: `query ($id: ID!) { onetimeProduct(id: $id) { id name prices } }`,
-   *   variables: { id: "prod_xxx" },
+   *   variables: { id: "PROD_xxx" },
    * });
    */
   async query(params) {
@@ -263,9 +500,9 @@ var OnetimeProductsResource = class {
    *
    * @example
    * const { product } = await client.onetimeProducts.create({
-   *   storeId: "store_xxx",
+   *   storeId: "STO_xxx",
    *   name: "E-Book",
-   *   prices: { USD: { amount: 2900, taxCategory: "digital_goods" } },
+   *   prices: { USD: { amount: "29.00", taxCategory: "digital_goods" } },
    * });
    */
   async create(params) {
@@ -279,9 +516,9 @@ var OnetimeProductsResource = class {
    *
    * @example
    * const { product } = await client.onetimeProducts.update({
-   *   id: "prod_xxx",
+   *   id: "PROD_xxx",
    *   name: "E-Book v2",
-   *   prices: { USD: { amount: 3900, taxCategory: "digital_goods" } },
+   *   prices: { USD: { amount: "39.00", taxCategory: "digital_goods" } },
    * });
    */
   async update(params) {
@@ -294,7 +531,7 @@ var OnetimeProductsResource = class {
    * @returns Published product detail
    *
    * @example
-   * const { product } = await client.onetimeProducts.publish({ id: "prod_xxx" });
+   * const { product } = await client.onetimeProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
     return this.http.post("/v1/actions/onetime-product/publish-product", params);
@@ -307,7 +544,7 @@ var OnetimeProductsResource = class {
    *
    * @example
    * const { product } = await client.onetimeProducts.updateStatus({
-   *   id: "prod_xxx",
+   *   id: "PROD_xxx",
    *   status: ProductVersionStatus.Inactive,
    * });
    */
@@ -332,7 +569,7 @@ var OrdersResource = class {
    *
    * @example
    * const { orderId, status } = await client.orders.cancelSubscription({
-   *   orderId: "order_xxx",
+   *   orderId: "ORD_xxx",
    * });
    * // status: "canceled" or "canceling"
    */
@@ -354,7 +591,7 @@ var StoreMerchantsResource = class {
    *
    * @example
    * const result = await client.storeMerchants.add({
-   *   storeId: "store_xxx",
+   *   storeId: "STO_xxx",
    *   email: "member@example.com",
    *   role: "admin",
    * });
@@ -370,8 +607,8 @@ var StoreMerchantsResource = class {
    *
    * @example
    * const result = await client.storeMerchants.remove({
-   *   storeId: "store_xxx",
-   *   merchantId: "merchant_xxx",
+   *   storeId: "STO_xxx",
+   *   merchantId: "MER_xxx",
    * });
    */
   async remove(params) {
@@ -385,8 +622,8 @@ var StoreMerchantsResource = class {
    *
    * @example
    * const result = await client.storeMerchants.updateRole({
-   *   storeId: "store_xxx",
-   *   merchantId: "merchant_xxx",
+   *   storeId: "STO_xxx",
+   *   merchantId: "MER_xxx",
    *   role: "member",
    * });
    */
@@ -420,7 +657,7 @@ var StoresResource = class {
    *
    * @example
    * const { store } = await client.stores.update({
-   *   id: "store_xxx",
+   *   id: "STO_xxx",
    *   name: "Updated Name",
    * });
    */
@@ -434,7 +671,7 @@ var StoresResource = class {
    * @returns Deleted store entity (with `deletedAt` set)
    *
    * @example
-   * const { store } = await client.stores.delete({ id: "store_xxx" });
+   * const { store } = await client.stores.delete({ id: "STO_xxx" });
    */
   async delete(params) {
     return this.http.post("/v1/actions/store/delete-store", params);
@@ -454,10 +691,10 @@ var SubscriptionProductGroupsResource = class {
    *
    * @example
    * const { group } = await client.subscriptionProductGroups.create({
-   *   storeId: "store_xxx",
+   *   storeId: "STO_xxx",
    *   name: "Pro Plans",
    *   rules: { sharedTrial: true },
-   *   productIds: ["prod_aaa", "prod_bbb"],
+   *   productIds: ["PROD_aaa", "PROD_bbb"],
    * });
    */
   async create(params) {
@@ -471,8 +708,8 @@ var SubscriptionProductGroupsResource = class {
    *
    * @example
    * const { group } = await client.subscriptionProductGroups.update({
-   *   id: "group_xxx",
-   *   productIds: ["prod_aaa", "prod_bbb", "prod_ccc"],
+   *   id: "GRP_xxx",
+   *   productIds: ["PROD_aaa", "PROD_bbb", "PROD_ccc"],
    * });
    */
   async update(params) {
@@ -485,7 +722,7 @@ var SubscriptionProductGroupsResource = class {
    * @returns Deleted group entity
    *
    * @example
-   * const { group } = await client.subscriptionProductGroups.delete({ id: "group_xxx" });
+   * const { group } = await client.subscriptionProductGroups.delete({ id: "GRP_xxx" });
    */
   async delete(params) {
     return this.http.post("/v1/actions/subscription-product-group/delete-group", params);
@@ -497,7 +734,7 @@ var SubscriptionProductGroupsResource = class {
    * @returns Published group entity
    *
    * @example
-   * const { group } = await client.subscriptionProductGroups.publish({ id: "group_xxx" });
+   * const { group } = await client.subscriptionProductGroups.publish({ id: "GRP_xxx" });
    */
   async publish(params) {
     return this.http.post("/v1/actions/subscription-product-group/publish-group", params);
@@ -517,10 +754,10 @@ var SubscriptionProductsResource = class {
    *
    * @example
    * const { product } = await client.subscriptionProducts.create({
-   *   storeId: "store_xxx",
+   *   storeId: "STO_xxx",
    *   name: "Pro Plan",
    *   billingPeriod: "monthly",
-   *   prices: { USD: { amount: 999, taxCategory: "saas" } },
+   *   prices: { USD: { amount: "9.99", taxCategory: "saas" } },
    * });
    */
   async create(params) {
@@ -534,10 +771,10 @@ var SubscriptionProductsResource = class {
    *
    * @example
    * const { product } = await client.subscriptionProducts.update({
-   *   id: "prod_xxx",
+   *   id: "PROD_xxx",
    *   name: "Pro Plan v2",
    *   billingPeriod: "monthly",
-   *   prices: { USD: { amount: 1499, taxCategory: "saas" } },
+   *   prices: { USD: { amount: "14.99", taxCategory: "saas" } },
    * });
    */
   async update(params) {
@@ -550,7 +787,7 @@ var SubscriptionProductsResource = class {
    * @returns Published product detail
    *
    * @example
-   * const { product } = await client.subscriptionProducts.publish({ id: "prod_xxx" });
+   * const { product } = await client.subscriptionProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
     return this.http.post("/v1/actions/subscription-product/publish-product", params);
@@ -563,7 +800,7 @@ var SubscriptionProductsResource = class {
    *
    * @example
    * const { product } = await client.subscriptionProducts.updateStatus({
-   *   id: "prod_xxx",
+   *   id: "PROD_xxx",
    *   status: ProductVersionStatus.Active,
    * });
    */
@@ -719,6 +956,7 @@ var WebhooksResource = class {
 // src/client.ts
 var WaffoPancake = class {
   http;
+  config;
   auth;
   stores;
   storeMerchants;
@@ -730,6 +968,7 @@ var WaffoPancake = class {
   graphql;
   webhooks;
   constructor(config) {
+    this.config = config;
     this.http = new HttpClient(config);
     this.auth = new AuthResource(this.http);
     this.stores = new StoresResource(this.http);
@@ -742,6 +981,31 @@ var WaffoPancake = class {
     this.graphql = new GraphQLResource(this.http);
     this.webhooks = new WebhooksResource(config.webhookPublicKey);
   }
+  /**
+   * Create a buyer session for self-service operations.
+   *
+   * The returned session uses Bearer token authentication and provides
+   * methods for order cancellation, subscription management, refund tickets,
+   * and scoped GraphQL queries.
+   *
+   * @param token - Session token from `client.auth.issueSessionToken()`
+   * @returns A buyer session with self-service methods
+   *
+   * @example
+   * const { token } = await client.auth.issueSessionToken({
+   *   storeId: "STO_xxx",
+   *   buyerIdentity: "customer@example.com",
+   * });
+   * const buyer = client.buyer(token);
+   * await buyer.cancelSubscription({ orderId: "ORD_xxx" });
+   */
+  buyer(token) {
+    const buyerHttp = new BuyerHttpClient(token, {
+      baseUrl: this.config.baseUrl,
+      fetch: this.config.fetch
+    });
+    return new BuyerSession(buyerHttp);
+  }
 };
 
 // src/types.ts
@@ -794,8 +1058,9 @@ var SubscriptionOrderStatus = /* @__PURE__ */ ((SubscriptionOrderStatus2) => {
   SubscriptionOrderStatus2["Pending"] = "pending";
   SubscriptionOrderStatus2["Active"] = "active";
   SubscriptionOrderStatus2["Canceling"] = "canceling";
-  SubscriptionOrderStatus2["Canceled"] = "canceled";
   SubscriptionOrderStatus2["PastDue"] = "past_due";
+  SubscriptionOrderStatus2["Closed"] = "closed";
+  SubscriptionOrderStatus2["Canceled"] = "canceled";
   SubscriptionOrderStatus2["Expired"] = "expired";
   return SubscriptionOrderStatus2;
 })(SubscriptionOrderStatus || {});
@@ -836,6 +1101,7 @@ var ErrorLayer = /* @__PURE__ */ ((ErrorLayer2) => {
   ErrorLayer2["Store"] = "store";
   ErrorLayer2["Product"] = "product";
   ErrorLayer2["Order"] = "order";
+  ErrorLayer2["Ticket"] = "ticket";
   ErrorLayer2["GraphQL"] = "graphql";
   ErrorLayer2["Resource"] = "resource";
   ErrorLayer2["Email"] = "email";