@waffo/pancake-ts 0.12.0 → 0.14.0

package/CHANGELOG.md

@@ -4,6 +4,24 @@ All notable changes to `@waffo/pancake-ts` will be documented in this file.
 
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.14.0] - 2026-07-18
+
+Adds content-safety prompt scanning for AIGC generation.
+
+### Added
+
+- `client.contentSafety.scanPrompt(params)` — scan a user prompt before AIGC generation; returns a redacted verdict (`action` = allow / review / block, continue only when `allow`). Stateless (prompt text never stored); fails closed to `review` if the safety service is briefly unavailable.
+- Types: `ScanPromptParams`, `ScanResult`; enums `ScanAction`, `ScanReasonCode`, `ScanPolicyCategory`, `ScanSemanticMode`, `ScanSemanticStatus`.
+
+## [0.13.0] - 2026-07-17
+
+Adds cashier language selection to checkout sessions.
+
+### Added
+
+- **`CashierLanguage`** — exported union type of the 22 supported checkout cashier languages (IETF BCP 47, e.g. `"en"`, `"pt-BR"`, `"zh-Hant-TW"`).
+- **`CreateCheckoutSessionParams.language`** — optional cashier language, forwarded to `create-session`. Sets the hosted checkout page's default language; the customer can still switch it on the page. Omit to let the payment provider infer.
+
 ## [0.12.0] - 2026-07-14
 
 Renames the "buyer" persona to "customer" across the SDK's public API — "customer" is the Waffo term for the merchant's end consumer (the session-token JWT role). Old names remain available as deprecated aliases. Wire-level request and webhook field names (`buyerIdentity`, `buyerEmail`, `merchantProvidedBuyerIdentity`) are part of the server contract and are unchanged.

package/README.md

@@ -133,6 +133,7 @@ const result = await client.checkout.anonymous.create({
   priceSnapshot: { amount: "4.99", taxCategory: "saas" },
   withTrial: false, // skip trial for this session
   orderMerchantExternalId: "ORDER-2026-00891", // optional, API Key auth only
+  language: "pt-BR", // optional, sets the default checkout language (IETF BCP 47)
 });
 
 window.open(result.checkoutUrl, "_blank", "noopener,noreferrer");
@@ -506,6 +507,17 @@ const { orderId, status } = await client.orders.cancelSubscription({
 // status: "canceled" (was pending) or "canceling" (was active, PSP notified)
 ```
 
+### Content Safety
+
+Scan a user's prompt for content-safety compliance before AIGC generation — continue only when `action` is `allow`. Stateless (prompt text is never stored); fails closed to `review` if the safety service is briefly unavailable.
+
+```typescript
+const verdict = await client.contentSafety.scanPrompt({ prompt: "a cat riding a bike" });
+if (verdict.action !== "allow") {
+  // do not generate — verdict.action is "review" or "block"
+}
+```
+
 ## Error Handling
 
 API errors throw `WaffoPancakeError` with the HTTP status code and a call-stack-ordered errors array.
@@ -542,6 +554,7 @@ try {
 | `client.subscriptionProducts`      | `create()` `update()` `publish()` `updateStatus()`                                                                       | Subscription products                   |
 | `client.subscriptionProductGroups` | `create()` `update()` `delete()` `publish()`                                                                             | Product groups                          |
 | `client.orders`                    | `cancelSubscription()`                                                                                                   | Order management                        |
+| `client.contentSafety`             | `scanPrompt()`                                                                                                           | AIGC prompt content-safety scan         |
 
 ## Documentation
 
@@ -584,7 +597,7 @@ try {
 
 ### Types
 
-Key types: `WaffoPancakeConfig`, `AuthenticatedCheckoutParams`, `AuthenticatedCheckoutResult`, `AnonymousCheckoutParams`, `CheckoutSessionResult`, `Store`, `OnetimeProductDetail`, `SubscriptionProductDetail`, `WebhookEvent<T>`, `WebhookEventData`, `GraphQLResponse<T>`, and 30+ more. `WebhookEventData` includes rich fields organized by section: order info, amounts, product, payment, subscription, and refund (conditional by event type). See [API Reference](docs/api-reference.md#types) for the full list.
+Key types: `WaffoPancakeConfig`, `AuthenticatedCheckoutParams`, `AuthenticatedCheckoutResult`, `AnonymousCheckoutParams`, `CheckoutSessionResult`, `CashierLanguage`, `Store`, `OnetimeProductDetail`, `SubscriptionProductDetail`, `WebhookEvent<T>`, `WebhookEventData`, `GraphQLResponse<T>`, and 30+ more. `WebhookEventData` includes rich fields organized by section: order info, amounts, product, payment, subscription, and refund (conditional by event type). See [API Reference](docs/api-reference.md#types) for the full list.
 
 ## Development
 

package/dist/index.cjs

@@ -30,6 +30,11 @@ __export(index_exports, {
   ProductVersionStatus: () => ProductVersionStatus,
   RefundStatus: () => RefundStatus,
   RefundTicketStatus: () => RefundTicketStatus,
+  ScanAction: () => ScanAction,
+  ScanPolicyCategory: () => ScanPolicyCategory,
+  ScanReasonCode: () => ScanReasonCode,
+  ScanSemanticMode: () => ScanSemanticMode,
+  ScanSemanticStatus: () => ScanSemanticStatus,
   StoreRole: () => StoreRole,
   SubscriptionOrderStatus: () => SubscriptionOrderStatus,
   TaxCategory: () => TaxCategory,
@@ -532,6 +537,35 @@ var CheckoutResource = class {
   }
 };
 
+// src/resources/content-safety.ts
+var ContentSafetyResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * Scan a user's text prompt for content-safety compliance before AIGC
+   * generation. Call this before invoking your image/video model and continue
+   * only when `action` is `allow`.
+   *
+   * Stateless — the check never stores prompt text. If the safety service is
+   * briefly unavailable, the verdict fails closed to `review` so an
+   * unmoderated prompt is never let through.
+   *
+   * @param params - Scan parameters (prompt required; locale / semantic optional)
+   * @returns Redacted scan verdict
+   *
+   * @example
+   * const verdict = await client.contentSafety.scanPrompt({ prompt: "a cat riding a bike" });
+   * if (verdict.action !== "allow") {
+   *   // do not generate
+   * }
+   */
+  async scanPrompt(params) {
+    validateRequired("prompt", params.prompt);
+    return unwrapAction(await this.http.post("/v1/actions/verification/scan-prompt", params));
+  }
+};
+
 // src/resources/customer.ts
 var CustomerSession = class {
   constructor(http) {
@@ -1323,6 +1357,7 @@ var WaffoPancake = class {
   checkout;
   graphql;
   webhooks;
+  contentSafety;
   constructor(config) {
     validateShortId("merchantId", config.merchantId, "MER");
     this.config = config;
@@ -1337,6 +1372,7 @@ var WaffoPancake = class {
     this.checkout = new CheckoutResource(this.http);
     this.graphql = new GraphQLResource(this.http);
     this.webhooks = new WebhooksResource(this.http, config.webhookPublicKey);
+    this.contentSafety = new ContentSafetyResource(this.http);
   }
   /**
    * Create a customer session for self-service operations.
@@ -1492,6 +1528,44 @@ var WebhookEventType = /* @__PURE__ */ ((WebhookEventType2) => {
   WebhookEventType2["RefundFailed"] = "refund.failed";
   return WebhookEventType2;
 })(WebhookEventType || {});
+var ScanAction = /* @__PURE__ */ ((ScanAction2) => {
+  ScanAction2["Allow"] = "allow";
+  ScanAction2["Review"] = "review";
+  ScanAction2["Block"] = "block";
+  return ScanAction2;
+})(ScanAction || {});
+var ScanReasonCode = /* @__PURE__ */ ((ScanReasonCode2) => {
+  ScanReasonCode2["Allowed"] = "allowed";
+  ScanReasonCode2["ReviewRequired"] = "review_required";
+  ScanReasonCode2["RestrictedContent"] = "restricted_content";
+  ScanReasonCode2["ServiceDegraded"] = "service_degraded";
+  return ScanReasonCode2;
+})(ScanReasonCode || {});
+var ScanPolicyCategory = /* @__PURE__ */ ((ScanPolicyCategory2) => {
+  ScanPolicyCategory2["CsamMinor"] = "csam_minor";
+  ScanPolicyCategory2["SexualViolenceNonconsensual"] = "sexual_violence_nonconsensual";
+  ScanPolicyCategory2["UndressTransform"] = "undress_transform";
+  ScanPolicyCategory2["FaceSwapIdentity"] = "face_swap_identity";
+  ScanPolicyCategory2["BestialityRestricted"] = "bestiality_restricted";
+  ScanPolicyCategory2["AdultNsfw"] = "adult_nsfw";
+  return ScanPolicyCategory2;
+})(ScanPolicyCategory || {});
+var ScanSemanticMode = /* @__PURE__ */ ((ScanSemanticMode2) => {
+  ScanSemanticMode2["Off"] = "off";
+  ScanSemanticMode2["Shadow"] = "shadow";
+  ScanSemanticMode2["Enforce"] = "enforce";
+  return ScanSemanticMode2;
+})(ScanSemanticMode || {});
+var ScanSemanticStatus = /* @__PURE__ */ ((ScanSemanticStatus2) => {
+  ScanSemanticStatus2["Disabled"] = "disabled";
+  ScanSemanticStatus2["Scored"] = "scored";
+  ScanSemanticStatus2["ShadowScored"] = "shadow_scored";
+  ScanSemanticStatus2["SkippedRulesBlock"] = "skipped_rules_block";
+  ScanSemanticStatus2["SkippedBudget"] = "skipped_budget";
+  ScanSemanticStatus2["ProviderTimeout"] = "provider_timeout";
+  ScanSemanticStatus2["ProviderError"] = "provider_error";
+  return ScanSemanticStatus2;
+})(ScanSemanticStatus || {});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BillingPeriod,
@@ -1504,6 +1578,11 @@ var WebhookEventType = /* @__PURE__ */ ((WebhookEventType2) => {
   ProductVersionStatus,
   RefundStatus,
   RefundTicketStatus,
+  ScanAction,
+  ScanPolicyCategory,
+  ScanReasonCode,
+  ScanSemanticMode,
+  ScanSemanticStatus,
   StoreRole,
   SubscriptionOrderStatus,
   TaxCategory,