@waffo/pancake-ts 0.1.9 → 0.2.1

package/dist/index.js

@@ -1,6 +1,3 @@
-// src/http-client.ts
-import { createHash as createHash2 } from "crypto";
-
 // src/errors.ts
 var WaffoPancakeError = class extends Error {
   status;
@@ -14,6 +11,45 @@ var WaffoPancakeError = class extends Error {
   }
 };
 
+// src/buyer-http-client.ts
+var DEFAULT_BASE_URL = "https://api.waffo.ai";
+var BuyerHttpClient = class {
+  token;
+  baseUrl;
+  _fetch;
+  constructor(token, config) {
+    this.token = token;
+    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this._fetch = config.fetch ?? fetch;
+  }
+  /**
+   * Send a Bearer-authenticated POST request and return the parsed `data` field.
+   *
+   * @param path - API path
+   * @param body - Request body object
+   * @returns Parsed `data` field from the response
+   * @throws {WaffoPancakeError} When the API returns errors
+   */
+  async post(path, body) {
+    const response = await this._fetch(`${this.baseUrl}${path}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "Authorization": `Bearer ${this.token}`
+      },
+      body: JSON.stringify(body)
+    });
+    const result = await response.json();
+    if ("errors" in result && result.errors) {
+      throw new WaffoPancakeError(response.status, result.errors);
+    }
+    return result.data;
+  }
+};
+
+// src/http-client.ts
+import { createHash as createHash2 } from "crypto";
+
 // src/signing.ts
 import { createHash, createPrivateKey, createPublicKey, createSign } from "crypto";
 var PKCS8_HEADER = "-----BEGIN PRIVATE KEY-----";
@@ -126,7 +162,7 @@ ${bodyHash}`;
 }
 
 // src/http-client.ts
-var DEFAULT_BASE_URL = "https://api.waffo.ai";
+var DEFAULT_BASE_URL2 = "https://api.waffo.ai";
 var HttpClient = class {
   merchantId;
   privateKey;
@@ -135,7 +171,7 @@ var HttpClient = class {
   constructor(config) {
     this.merchantId = config.merchantId;
     this.privateKey = normalizePrivateKey(config.privateKey);
-    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL2).replace(/\/+$/, "");
     this._fetch = config.fetch ?? fetch;
   }
   /**
@@ -174,6 +210,105 @@ var HttpClient = class {
   }
 };
 
+// src/validation.ts
+var SHORT_ID_REGEX = /^[A-Z]{2,4}_[A-Za-z0-9]+$/;
+var CURRENCY_CODE_REGEX = /^[A-Z]{3}$/;
+var COUNTRY_CODE_REGEX = /^[A-Z]{2}$/;
+var AMOUNT_STRING_REGEX = /^\d+(\.\d+)?$/;
+var SHORT_ID_LABELS = {
+  STO: "Store",
+  PROD: "Product",
+  ORD: "Order",
+  PAY: "Payment",
+  REF: "Refund",
+  TKT: "Ticket",
+  MER: "Merchant"
+};
+function fail(message) {
+  throw new WaffoPancakeError(400, [{ message, layer: "sdk" }]);
+}
+function validateRequired(field, value) {
+  if (value === void 0 || value === null) {
+    fail(`Missing required field: ${field}`);
+  }
+  if (typeof value === "string" && value.trim() === "") {
+    fail(`${field} cannot be empty`);
+  }
+}
+function validateShortId(field, value, prefix) {
+  validateRequired(field, value);
+  const label = SHORT_ID_LABELS[prefix] ?? prefix;
+  if (!SHORT_ID_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected ${label} Short ID format (${prefix}_xxx), got "${value}"`);
+  }
+  if (!value.startsWith(`${prefix}_`)) {
+    fail(`Invalid ${field}: expected ${prefix}_ prefix (${label}), got "${value.split("_")[0]}_"`);
+  }
+}
+function validateCurrencyCode(field, value) {
+  validateRequired(field, value);
+  if (!CURRENCY_CODE_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected 3-letter ISO 4217 currency code (e.g., "USD"), got "${value}"`);
+  }
+}
+function validateAmountString(field, value) {
+  validateRequired(field, value);
+  if (!AMOUNT_STRING_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected numeric string in display format (e.g., "9.99", "1000"), got "${value}"`);
+  }
+}
+function validateEnum(field, value, allowed) {
+  validateRequired(field, value);
+  if (!allowed.includes(value)) {
+    fail(`Invalid ${field}: expected one of [${allowed.join(", ")}], got "${value}"`);
+  }
+}
+function validatePositiveInteger(field, value) {
+  if (!Number.isInteger(value) || value <= 0) {
+    fail(`Invalid ${field}: expected positive integer, got ${value}`);
+  }
+}
+function validateCountryCode(field, value) {
+  validateRequired(field, value);
+  if (!COUNTRY_CODE_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected 2-letter ISO 3166-1 country code (e.g., "US"), got "${value}"`);
+  }
+}
+function validatePrices(field, prices) {
+  validateRequired(field, prices);
+  const entries = Object.entries(prices);
+  if (entries.length === 0) {
+    fail(`${field} must contain at least one currency`);
+  }
+  for (const [currency, info] of entries) {
+    validateCurrencyCode(`${field}.${currency} (key)`, currency);
+    validateAmountString(`${field}.${currency}.amount`, info.amount);
+    validateRequired(`${field}.${currency}.taxCategory`, info.taxCategory);
+  }
+}
+function validateBillingDetail(detail) {
+  validateCountryCode("billingDetail.country", detail.country);
+  if (typeof detail.isBusiness !== "boolean") {
+    fail(`Invalid billingDetail.isBusiness: expected boolean, got ${typeof detail.isBusiness}`);
+  }
+}
+function validateCheckoutCommon(params) {
+  validateShortId("storeId", params.storeId, "STO");
+  validateShortId("productId", params.productId, "PROD");
+  validateEnum("productType", params.productType, ["onetime", "subscription"]);
+  validateCurrencyCode("currency", params.currency);
+  if (params.priceSnapshot) {
+    validateAmountString("priceSnapshot.amount", params.priceSnapshot.amount);
+    validateRequired("priceSnapshot.taxCategory", params.priceSnapshot.taxCategory);
+  }
+  if (params.billingDetail) {
+    validateBillingDetail(params.billingDetail);
+  }
+  if (params.expiresInSeconds !== void 0) {
+    validatePositiveInteger("expiresInSeconds", params.expiresInSeconds);
+  }
+}
+
 // src/resources/auth.ts
 var AuthResource = class {
   constructor(http) {
@@ -192,10 +327,140 @@ var AuthResource = class {
    * });
    */
   async issueSessionToken(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("buyerIdentity", params.buyerIdentity);
     return this.http.post("/v1/actions/auth/issue-session-token", params);
   }
 };
 
+// src/resources/buyer.ts
+var BuyerSession = class {
+  constructor(http) {
+    this.http = http;
+    this.graphql = new BuyerGraphQL(http);
+  }
+  /** GraphQL query access scoped to the buyer's data. */
+  graphql;
+  /**
+   * Cancel a subscription order.
+   *
+   * @param params - Order to cancel
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.cancelSubscription({ orderId: "ORD_xxx" });
+   * // status: "canceled" (was pending) or "canceling" (was active)
+   */
+  async cancelSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
+    return this.http.post(
+      "/v1/actions/subscription-order/cancel-order",
+      params
+    );
+  }
+  /**
+   * Cancel a one-time order (only while payment is still pending).
+   *
+   * @param params - Order to cancel
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.cancelOnetimeOrder({ orderId: "ORD_xxx" });
+   */
+  async cancelOnetimeOrder(params) {
+    validateShortId("orderId", params.orderId, "ORD");
+    return this.http.post(
+      "/v1/actions/onetime-order/cancel-order",
+      params
+    );
+  }
+  /**
+   * Reactivate a subscription that is in `canceling` status.
+   *
+   * @param params - Order to reactivate
+   * @returns Order ID and resulting status
+   *
+   * @example
+   * const { orderId, status } = await buyer.reactivateSubscription({ orderId: "ORD_xxx" });
+   * // status: "active"
+   */
+  async reactivateSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
+    return this.http.post(
+      "/v1/actions/subscription-order/reactivate-order",
+      params
+    );
+  }
+  /**
+   * Submit a refund request for a payment.
+   *
+   * @param params - Refund ticket details
+   * @returns Created refund ticket
+   *
+   * @example
+   * const { ticket } = await buyer.createRefundTicket({
+   *   paymentId: "PAY_xxx",
+   *   reason: "Product not as described",
+   *   requestedAmount: { amount: "29.00", currency: "USD" },
+   * });
+   */
+  async createRefundTicket(params) {
+    validateShortId("paymentId", params.paymentId, "PAY");
+    validateRequired("reason", params.reason);
+    validateAmountString("requestedAmount.amount", params.requestedAmount.amount);
+    validateCurrencyCode("requestedAmount.currency", params.requestedAmount.currency);
+    return this.http.post(
+      "/v1/actions/refund-ticket/create-ticket",
+      params
+    );
+  }
+  /**
+   * Resubmit a previously rejected refund ticket with updated details.
+   *
+   * @param params - Updated ticket details
+   * @returns Updated refund ticket
+   *
+   * @example
+   * const { ticket } = await buyer.resubmitRefundTicket({
+   *   ticketId: "TKT_xxx",
+   *   paymentId: "PAY_xxx",
+   *   reason: "Updated reason with more detail",
+   *   requestedAmount: { amount: "29.00", currency: "USD" },
+   * });
+   */
+  async resubmitRefundTicket(params) {
+    validateShortId("ticketId", params.ticketId, "TKT");
+    validateShortId("paymentId", params.paymentId, "PAY");
+    validateRequired("reason", params.reason);
+    validateAmountString("requestedAmount.amount", params.requestedAmount.amount);
+    validateCurrencyCode("requestedAmount.currency", params.requestedAmount.currency);
+    return this.http.post(
+      "/v1/actions/refund-ticket/resubmit-ticket",
+      params
+    );
+  }
+};
+var BuyerGraphQL = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * Execute a GraphQL query scoped to the buyer's data.
+   *
+   * @param params - GraphQL query and variables
+   * @returns GraphQL response
+   *
+   * @example
+   * const result = await buyer.graphql.query({
+   *   query: `query { orders { id status } }`,
+   * });
+   */
+  async query(params) {
+    validateRequired("query", params.query);
+    return this.http.post("/v1/graphql", params);
+  }
+};
+
 // src/resources/checkout-anonymous.ts
 var CheckoutAnonymousResource = class {
   constructor(http) {
@@ -217,6 +482,7 @@ var CheckoutAnonymousResource = class {
    * // Redirect to result.checkoutUrl
    */
   async create(params) {
+    validateCheckoutCommon(params);
     return this.http.post(
       "/v1/actions/checkout/create-session",
       params
@@ -252,6 +518,8 @@ var CheckoutAuthenticatedResource = class {
    * // Redirect to result.checkoutUrl (includes #token=...)
    */
   async create(params) {
+    validateCheckoutCommon(params);
+    validateRequired("buyerIdentity", params.buyerIdentity);
     const { buyerIdentity, buyerEmail, ...sessionFields } = params;
     const [tokenResult, sessionResult] = await Promise.all([
       this.http.post("/v1/actions/auth/issue-session-token", {
@@ -280,7 +548,7 @@ var CheckoutResource = class {
     this.anonymous = new CheckoutAnonymousResource(http);
     this.authenticated = new CheckoutAuthenticatedResource(http);
   }
-  /** Anonymous checkout — visitor enters without a session token. */
+  /** Anonymous checkout — no buyer identity, empty form. */
   anonymous;
   /** Authenticated checkout — merchant provides buyer identity. */
   authenticated;
@@ -332,6 +600,7 @@ var GraphQLResource = class {
    * });
    */
   async query(params) {
+    validateRequired("query", params.query);
     return this.http.post("/v1/graphql", params);
   }
 };
@@ -355,6 +624,9 @@ var OnetimeProductsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/onetime-product/create-product", params);
   }
   /**
@@ -371,6 +643,9 @@ var OnetimeProductsResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "PROD");
+    validateRequired("name", params.name);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/onetime-product/update-product", params);
   }
   /**
@@ -383,6 +658,7 @@ var OnetimeProductsResource = class {
    * const { product } = await client.onetimeProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
+    validateShortId("id", params.id, "PROD");
     return this.http.post("/v1/actions/onetime-product/publish-product", params);
   }
   /**
@@ -398,6 +674,8 @@ var OnetimeProductsResource = class {
    * });
    */
   async updateStatus(params) {
+    validateShortId("id", params.id, "PROD");
+    validateEnum("status", params.status, ["active", "inactive"]);
     return this.http.post("/v1/actions/onetime-product/update-status", params);
   }
 };
@@ -423,6 +701,7 @@ var OrdersResource = class {
    * // status: "canceled" or "canceling"
    */
   async cancelSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
     return this.http.post("/v1/actions/subscription-order/cancel-order", params);
   }
 };
@@ -446,6 +725,9 @@ var StoreMerchantsResource = class {
    * });
    */
   async add(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("email", params.email);
+    validateEnum("role", params.role, ["admin", "member"]);
     return this.http.post("/v1/actions/store-merchant/add-merchant", params);
   }
   /**
@@ -461,6 +743,8 @@ var StoreMerchantsResource = class {
    * });
    */
   async remove(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateShortId("merchantId", params.merchantId, "MER");
     return this.http.post("/v1/actions/store-merchant/remove-merchant", params);
   }
   /**
@@ -477,6 +761,9 @@ var StoreMerchantsResource = class {
    * });
    */
   async updateRole(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateShortId("merchantId", params.merchantId, "MER");
+    validateEnum("role", params.role, ["admin", "member"]);
     return this.http.post("/v1/actions/store-merchant/update-role", params);
   }
 };
@@ -496,6 +783,7 @@ var StoresResource = class {
    * const { store } = await client.stores.create({ name: "My Store" });
    */
   async create(params) {
+    validateRequired("name", params.name);
     return this.http.post("/v1/actions/store/create-store", params);
   }
   /**
@@ -511,6 +799,7 @@ var StoresResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "STO");
     return this.http.post("/v1/actions/store/update-store", params);
   }
   /**
@@ -523,6 +812,7 @@ var StoresResource = class {
    * const { store } = await client.stores.delete({ id: "STO_xxx" });
    */
   async delete(params) {
+    validateShortId("id", params.id, "STO");
     return this.http.post("/v1/actions/store/delete-store", params);
   }
 };
@@ -547,6 +837,8 @@ var SubscriptionProductGroupsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
     return this.http.post("/v1/actions/subscription-product-group/create-group", params);
   }
   /**
@@ -562,6 +854,7 @@ var SubscriptionProductGroupsResource = class {
    * });
    */
   async update(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/update-group", params);
   }
   /**
@@ -574,6 +867,7 @@ var SubscriptionProductGroupsResource = class {
    * const { group } = await client.subscriptionProductGroups.delete({ id: "GRP_xxx" });
    */
   async delete(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/delete-group", params);
   }
   /**
@@ -586,6 +880,7 @@ var SubscriptionProductGroupsResource = class {
    * const { group } = await client.subscriptionProductGroups.publish({ id: "GRP_xxx" });
    */
   async publish(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/publish-group", params);
   }
 };
@@ -610,6 +905,10 @@ var SubscriptionProductsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
+    validateEnum("billingPeriod", params.billingPeriod, ["weekly", "monthly", "quarterly", "yearly"]);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/subscription-product/create-product", params);
   }
   /**
@@ -627,6 +926,10 @@ var SubscriptionProductsResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "PROD");
+    validateRequired("name", params.name);
+    validateEnum("billingPeriod", params.billingPeriod, ["weekly", "monthly", "quarterly", "yearly"]);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/subscription-product/update-product", params);
   }
   /**
@@ -639,6 +942,7 @@ var SubscriptionProductsResource = class {
    * const { product } = await client.subscriptionProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
+    validateShortId("id", params.id, "PROD");
     return this.http.post("/v1/actions/subscription-product/publish-product", params);
   }
   /**
@@ -654,6 +958,8 @@ var SubscriptionProductsResource = class {
    * });
    */
   async updateStatus(params) {
+    validateShortId("id", params.id, "PROD");
+    validateEnum("status", params.status, ["active", "inactive"]);
     return this.http.post("/v1/actions/subscription-product/update-status", params);
   }
 };
@@ -805,6 +1111,7 @@ var WebhooksResource = class {
 // src/client.ts
 var WaffoPancake = class {
   http;
+  config;
   auth;
   stores;
   storeMerchants;
@@ -816,6 +1123,7 @@ var WaffoPancake = class {
   graphql;
   webhooks;
   constructor(config) {
+    this.config = config;
     this.http = new HttpClient(config);
     this.auth = new AuthResource(this.http);
     this.stores = new StoresResource(this.http);
@@ -828,6 +1136,31 @@ var WaffoPancake = class {
     this.graphql = new GraphQLResource(this.http);
     this.webhooks = new WebhooksResource(config.webhookPublicKey);
   }
+  /**
+   * Create a buyer session for self-service operations.
+   *
+   * The returned session uses Bearer token authentication and provides
+   * methods for order cancellation, subscription management, refund tickets,
+   * and scoped GraphQL queries.
+   *
+   * @param token - Session token from `client.auth.issueSessionToken()`
+   * @returns A buyer session with self-service methods
+   *
+   * @example
+   * const { token } = await client.auth.issueSessionToken({
+   *   storeId: "STO_xxx",
+   *   buyerIdentity: "customer@example.com",
+   * });
+   * const buyer = client.buyer(token);
+   * await buyer.cancelSubscription({ orderId: "ORD_xxx" });
+   */
+  buyer(token) {
+    const buyerHttp = new BuyerHttpClient(token, {
+      baseUrl: this.config.baseUrl,
+      fetch: this.config.fetch
+    });
+    return new BuyerSession(buyerHttp);
+  }
 };
 
 // src/types.ts
@@ -895,11 +1228,14 @@ var PaymentStatus = /* @__PURE__ */ ((PaymentStatus2) => {
 })(PaymentStatus || {});
 var RefundTicketStatus = /* @__PURE__ */ ((RefundTicketStatus2) => {
   RefundTicketStatus2["Pending"] = "pending";
+  RefundTicketStatus2["UnderReview"] = "under_review";
   RefundTicketStatus2["Approved"] = "approved";
   RefundTicketStatus2["Rejected"] = "rejected";
+  RefundTicketStatus2["Returned"] = "returned";
   RefundTicketStatus2["Processing"] = "processing";
   RefundTicketStatus2["Succeeded"] = "succeeded";
   RefundTicketStatus2["Failed"] = "failed";
+  RefundTicketStatus2["Cancelled"] = "cancelled";
   return RefundTicketStatus2;
 })(RefundTicketStatus || {});
 var RefundStatus = /* @__PURE__ */ ((RefundStatus2) => {
@@ -927,6 +1263,7 @@ var ErrorLayer = /* @__PURE__ */ ((ErrorLayer2) => {
   ErrorLayer2["GraphQL"] = "graphql";
   ErrorLayer2["Resource"] = "resource";
   ErrorLayer2["Email"] = "email";
+  ErrorLayer2["Sdk"] = "sdk";
   return ErrorLayer2;
 })(ErrorLayer || {});
 var WebhookEventType = /* @__PURE__ */ ((WebhookEventType2) => {