@waffo/pancake-ts 0.2.0 → 0.2.2

package/dist/index.d.cts

@@ -18,6 +18,18 @@ interface WaffoPancakeConfig {
      */
     webhookPublicKey?: WebhookPublicKeys;
 }
+/**
+ * Options for {@link HttpClient.post}.
+ * Not exported publicly — used by resource classes.
+ */
+interface PostOptions {
+    /**
+     * Time window in seconds for idempotency key rotation.
+     * When set, a floored timestamp is mixed into the key so identical params
+     * produce a new key after the window elapses (e.g. 60 = per-minute dedup).
+     */
+    idempotencyWindow?: number;
+}
 /**
  * Single error object within the `errors` array.
  *
@@ -150,11 +162,14 @@ declare enum PaymentStatus {
  */
 declare enum RefundTicketStatus {
     Pending = "pending",
+    UnderReview = "under_review",
     Approved = "approved",
     Rejected = "rejected",
+    Returned = "returned",
     Processing = "processing",
     Succeeded = "succeeded",
-    Failed = "failed"
+    Failed = "failed",
+    Cancelled = "cancelled"
 }
 /**
  * Refund status.
@@ -191,7 +206,9 @@ declare enum ErrorLayer {
     GraphQL = "graphql",
     Resource = "resource",
     /** SDK-specific layer for email delivery errors (not part of the service-side error layers). */
-    Email = "email"
+    Email = "email",
+    /** SDK-side input validation (caught before network request). */
+    Sdk = "sdk"
 }
 /**
  * Parameters for issuing a buyer session token.
@@ -367,7 +384,7 @@ interface UpdateRoleResult {
  *
  * @example
  * // JPY ¥1000
- * { amount: 1000, taxCategory: "software" }
+ * { amount: "1000", taxCategory: "software" }
  */
 interface PriceInfo {
     /** Price amount as display string (e.g., "9.99" for USD, "1000" for JPY) */
@@ -383,7 +400,7 @@ interface PriceInfo {
  * @example
  * {
  *   "USD": { amount: "9.99", taxCategory: "saas" },
- *   "EUR": { amount: 899, taxCategory: "saas" }
+ *   "EUR": { amount: "8.99", taxCategory: "saas" }
  * }
  */
 type Prices = Record<string, PriceInfo>;
@@ -710,7 +727,7 @@ interface RefundTicket {
     /** Submitter type (e.g., `"customer"`, `"merchant"`) */
     submitterType: string;
     /** Current version ID */
-    currentVersionId: string;
+    currentVersionId: string | null;
     /** Reviewer ID (null if not yet reviewed) */
     reviewerId: string | null;
     /** Review timestamp (ISO 8601, null if not yet reviewed) */
@@ -724,9 +741,13 @@ interface RefundTicket {
     /** Custom metadata */
     metadata: Record<string, unknown>;
     /** Current version number */
-    versionNumber: number;
+    versionNumber: number | null;
     /** Current version data (includes reason, amount, etc.) */
-    versionData: Record<string, unknown>;
+    versionData: Record<string, unknown> | null;
+    /** Creation timestamp (ISO 8601) */
+    createdAt: string;
+    /** Last update timestamp (ISO 8601) */
+    updatedAt: string;
 }
 /**
  * Parameters for anonymous checkout.
@@ -898,7 +919,7 @@ interface WebhookEventData {
  *   eventId: "PAY_5xK9mRtYvWnPqLsJ3hBfDe",
  *   storeId: "STO_2aUyqjCzEIiEcYMKj7TZtw",
  *   mode: "prod",
- *   data: { orderId: "...", buyerEmail: "...", currency: "USD", amount: 2900, taxAmount: 290, productName: "Pro Plan" }
+ *   data: { orderId: "...", buyerEmail: "...", currency: "USD", amount: "29.00", taxAmount: "2.90", productName: "Pro Plan" }
  * }
  */
 interface WebhookEvent<T = WebhookEventData> {
@@ -980,15 +1001,19 @@ declare class HttpClient {
      *
      * Behavior:
      * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)
+     * - When `idempotencyWindow` is set, a floored timestamp is mixed into the key so identical params produce
+     *   a new key after the window elapses (useful for checkout where repeated creation is intentional)
      * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)
      * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure
      *
      * @param path - API path (e.g. `/v1/actions/store/create-store`)
      * @param body - Request body object
+     * @param options - Optional settings
+     * @param options.idempotencyWindow - Time window in seconds for idempotency key rotation (e.g. 60 = per-minute dedup)
      * @returns Parsed `data` field from the response
      * @throws {WaffoPancakeError} When the API returns errors
      */
-    post<T>(path: string, body: object): Promise<T>;
+    post<T>(path: string, body: object, options?: PostOptions): Promise<T>;
 }
 
 /** Authentication resource — issue session tokens for buyers. */

package/dist/index.d.ts

@@ -18,6 +18,18 @@ interface WaffoPancakeConfig {
      */
     webhookPublicKey?: WebhookPublicKeys;
 }
+/**
+ * Options for {@link HttpClient.post}.
+ * Not exported publicly — used by resource classes.
+ */
+interface PostOptions {
+    /**
+     * Time window in seconds for idempotency key rotation.
+     * When set, a floored timestamp is mixed into the key so identical params
+     * produce a new key after the window elapses (e.g. 60 = per-minute dedup).
+     */
+    idempotencyWindow?: number;
+}
 /**
  * Single error object within the `errors` array.
  *
@@ -150,11 +162,14 @@ declare enum PaymentStatus {
  */
 declare enum RefundTicketStatus {
     Pending = "pending",
+    UnderReview = "under_review",
     Approved = "approved",
     Rejected = "rejected",
+    Returned = "returned",
     Processing = "processing",
     Succeeded = "succeeded",
-    Failed = "failed"
+    Failed = "failed",
+    Cancelled = "cancelled"
 }
 /**
  * Refund status.
@@ -191,7 +206,9 @@ declare enum ErrorLayer {
     GraphQL = "graphql",
     Resource = "resource",
     /** SDK-specific layer for email delivery errors (not part of the service-side error layers). */
-    Email = "email"
+    Email = "email",
+    /** SDK-side input validation (caught before network request). */
+    Sdk = "sdk"
 }
 /**
  * Parameters for issuing a buyer session token.
@@ -367,7 +384,7 @@ interface UpdateRoleResult {
  *
  * @example
  * // JPY ¥1000
- * { amount: 1000, taxCategory: "software" }
+ * { amount: "1000", taxCategory: "software" }
  */
 interface PriceInfo {
     /** Price amount as display string (e.g., "9.99" for USD, "1000" for JPY) */
@@ -383,7 +400,7 @@ interface PriceInfo {
  * @example
  * {
  *   "USD": { amount: "9.99", taxCategory: "saas" },
- *   "EUR": { amount: 899, taxCategory: "saas" }
+ *   "EUR": { amount: "8.99", taxCategory: "saas" }
  * }
  */
 type Prices = Record<string, PriceInfo>;
@@ -710,7 +727,7 @@ interface RefundTicket {
     /** Submitter type (e.g., `"customer"`, `"merchant"`) */
     submitterType: string;
     /** Current version ID */
-    currentVersionId: string;
+    currentVersionId: string | null;
     /** Reviewer ID (null if not yet reviewed) */
     reviewerId: string | null;
     /** Review timestamp (ISO 8601, null if not yet reviewed) */
@@ -724,9 +741,13 @@ interface RefundTicket {
     /** Custom metadata */
     metadata: Record<string, unknown>;
     /** Current version number */
-    versionNumber: number;
+    versionNumber: number | null;
     /** Current version data (includes reason, amount, etc.) */
-    versionData: Record<string, unknown>;
+    versionData: Record<string, unknown> | null;
+    /** Creation timestamp (ISO 8601) */
+    createdAt: string;
+    /** Last update timestamp (ISO 8601) */
+    updatedAt: string;
 }
 /**
  * Parameters for anonymous checkout.
@@ -898,7 +919,7 @@ interface WebhookEventData {
  *   eventId: "PAY_5xK9mRtYvWnPqLsJ3hBfDe",
  *   storeId: "STO_2aUyqjCzEIiEcYMKj7TZtw",
  *   mode: "prod",
- *   data: { orderId: "...", buyerEmail: "...", currency: "USD", amount: 2900, taxAmount: 290, productName: "Pro Plan" }
+ *   data: { orderId: "...", buyerEmail: "...", currency: "USD", amount: "29.00", taxAmount: "2.90", productName: "Pro Plan" }
  * }
  */
 interface WebhookEvent<T = WebhookEventData> {
@@ -980,15 +1001,19 @@ declare class HttpClient {
      *
      * Behavior:
      * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)
+     * - When `idempotencyWindow` is set, a floored timestamp is mixed into the key so identical params produce
+     *   a new key after the window elapses (useful for checkout where repeated creation is intentional)
      * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)
      * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure
      *
      * @param path - API path (e.g. `/v1/actions/store/create-store`)
      * @param body - Request body object
+     * @param options - Optional settings
+     * @param options.idempotencyWindow - Time window in seconds for idempotency key rotation (e.g. 60 = per-minute dedup)
      * @returns Parsed `data` field from the response
      * @throws {WaffoPancakeError} When the API returns errors
      */
-    post<T>(path: string, body: object): Promise<T>;
+    post<T>(path: string, body: object, options?: PostOptions): Promise<T>;
 }
 
 /** Authentication resource — issue session tokens for buyers. */

package/dist/index.js

@@ -179,18 +179,26 @@ var HttpClient = class {
    *
    * Behavior:
    * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)
+   * - When `idempotencyWindow` is set, a floored timestamp is mixed into the key so identical params produce
+   *   a new key after the window elapses (useful for checkout where repeated creation is intentional)
    * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)
    * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure
    *
    * @param path - API path (e.g. `/v1/actions/store/create-store`)
    * @param body - Request body object
+   * @param options - Optional settings
+   * @param options.idempotencyWindow - Time window in seconds for idempotency key rotation (e.g. 60 = per-minute dedup)
    * @returns Parsed `data` field from the response
    * @throws {WaffoPancakeError} When the API returns errors
    */
-  async post(path, body) {
+  async post(path, body, options) {
     const bodyStr = JSON.stringify(body);
-    const timestamp = Math.floor(Date.now() / 1e3).toString();
+    const now = Date.now();
+    const timestampSec = Math.floor(now / 1e3);
+    const timestamp = timestampSec.toString();
     const signature = signRequest("POST", path, timestamp, bodyStr, this.privateKey);
+    const idempotencyBase = `${this.merchantId}:${path}:${bodyStr}`;
+    const idempotencyInput = options?.idempotencyWindow ? `${idempotencyBase}:${Math.floor(timestampSec / options.idempotencyWindow)}` : idempotencyBase;
     const response = await this._fetch(`${this.baseUrl}${path}`, {
       method: "POST",
       headers: {
@@ -198,7 +206,7 @@ var HttpClient = class {
         "X-Merchant-Id": this.merchantId,
         "X-Timestamp": timestamp,
         "X-Signature": signature,
-        "X-Idempotency-Key": createHash2("sha256").update(`${this.merchantId}:${path}:${bodyStr}`).digest("hex")
+        "X-Idempotency-Key": createHash2("sha256").update(idempotencyInput).digest("hex")
       },
       body: bodyStr
     });
@@ -210,6 +218,105 @@ var HttpClient = class {
   }
 };
 
+// src/validation.ts
+var SHORT_ID_REGEX = /^[A-Z]{2,4}_[A-Za-z0-9]+$/;
+var CURRENCY_CODE_REGEX = /^[A-Z]{3}$/;
+var COUNTRY_CODE_REGEX = /^[A-Z]{2}$/;
+var AMOUNT_STRING_REGEX = /^\d+(\.\d+)?$/;
+var SHORT_ID_LABELS = {
+  STO: "Store",
+  PROD: "Product",
+  ORD: "Order",
+  PAY: "Payment",
+  REF: "Refund",
+  TKT: "Ticket",
+  MER: "Merchant"
+};
+function fail(message) {
+  throw new WaffoPancakeError(400, [{ message, layer: "sdk" }]);
+}
+function validateRequired(field, value) {
+  if (value === void 0 || value === null) {
+    fail(`Missing required field: ${field}`);
+  }
+  if (typeof value === "string" && value.trim() === "") {
+    fail(`${field} cannot be empty`);
+  }
+}
+function validateShortId(field, value, prefix) {
+  validateRequired(field, value);
+  const label = SHORT_ID_LABELS[prefix] ?? prefix;
+  if (!SHORT_ID_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected ${label} Short ID format (${prefix}_xxx), got "${value}"`);
+  }
+  if (!value.startsWith(`${prefix}_`)) {
+    fail(`Invalid ${field}: expected ${prefix}_ prefix (${label}), got "${value.split("_")[0]}_"`);
+  }
+}
+function validateCurrencyCode(field, value) {
+  validateRequired(field, value);
+  if (!CURRENCY_CODE_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected 3-letter ISO 4217 currency code (e.g., "USD"), got "${value}"`);
+  }
+}
+function validateAmountString(field, value) {
+  validateRequired(field, value);
+  if (!AMOUNT_STRING_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected numeric string in display format (e.g., "9.99", "1000"), got "${value}"`);
+  }
+}
+function validateEnum(field, value, allowed) {
+  validateRequired(field, value);
+  if (!allowed.includes(value)) {
+    fail(`Invalid ${field}: expected one of [${allowed.join(", ")}], got "${value}"`);
+  }
+}
+function validatePositiveInteger(field, value) {
+  if (!Number.isInteger(value) || value <= 0) {
+    fail(`Invalid ${field}: expected positive integer, got ${value}`);
+  }
+}
+function validateCountryCode(field, value) {
+  validateRequired(field, value);
+  if (!COUNTRY_CODE_REGEX.test(value)) {
+    fail(`Invalid ${field}: expected 2-letter ISO 3166-1 country code (e.g., "US"), got "${value}"`);
+  }
+}
+function validatePrices(field, prices) {
+  validateRequired(field, prices);
+  const entries = Object.entries(prices);
+  if (entries.length === 0) {
+    fail(`${field} must contain at least one currency`);
+  }
+  for (const [currency, info] of entries) {
+    validateCurrencyCode(`${field}.${currency} (key)`, currency);
+    validateAmountString(`${field}.${currency}.amount`, info.amount);
+    validateRequired(`${field}.${currency}.taxCategory`, info.taxCategory);
+  }
+}
+function validateBillingDetail(detail) {
+  validateCountryCode("billingDetail.country", detail.country);
+  if (typeof detail.isBusiness !== "boolean") {
+    fail(`Invalid billingDetail.isBusiness: expected boolean, got ${typeof detail.isBusiness}`);
+  }
+}
+function validateCheckoutCommon(params) {
+  validateShortId("storeId", params.storeId, "STO");
+  validateShortId("productId", params.productId, "PROD");
+  validateEnum("productType", params.productType, ["onetime", "subscription"]);
+  validateCurrencyCode("currency", params.currency);
+  if (params.priceSnapshot) {
+    validateAmountString("priceSnapshot.amount", params.priceSnapshot.amount);
+    validateRequired("priceSnapshot.taxCategory", params.priceSnapshot.taxCategory);
+  }
+  if (params.billingDetail) {
+    validateBillingDetail(params.billingDetail);
+  }
+  if (params.expiresInSeconds !== void 0) {
+    validatePositiveInteger("expiresInSeconds", params.expiresInSeconds);
+  }
+}
+
 // src/resources/auth.ts
 var AuthResource = class {
   constructor(http) {
@@ -228,6 +335,8 @@ var AuthResource = class {
    * });
    */
   async issueSessionToken(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("buyerIdentity", params.buyerIdentity);
     return this.http.post("/v1/actions/auth/issue-session-token", params);
   }
 };
@@ -251,6 +360,7 @@ var BuyerSession = class {
    * // status: "canceled" (was pending) or "canceling" (was active)
    */
   async cancelSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
     return this.http.post(
       "/v1/actions/subscription-order/cancel-order",
       params
@@ -266,6 +376,7 @@ var BuyerSession = class {
    * const { orderId, status } = await buyer.cancelOnetimeOrder({ orderId: "ORD_xxx" });
    */
   async cancelOnetimeOrder(params) {
+    validateShortId("orderId", params.orderId, "ORD");
     return this.http.post(
       "/v1/actions/onetime-order/cancel-order",
       params
@@ -282,6 +393,7 @@ var BuyerSession = class {
    * // status: "active"
    */
   async reactivateSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
     return this.http.post(
       "/v1/actions/subscription-order/reactivate-order",
       params
@@ -301,6 +413,10 @@ var BuyerSession = class {
    * });
    */
   async createRefundTicket(params) {
+    validateShortId("paymentId", params.paymentId, "PAY");
+    validateRequired("reason", params.reason);
+    validateAmountString("requestedAmount.amount", params.requestedAmount.amount);
+    validateCurrencyCode("requestedAmount.currency", params.requestedAmount.currency);
     return this.http.post(
       "/v1/actions/refund-ticket/create-ticket",
       params
@@ -321,6 +437,11 @@ var BuyerSession = class {
    * });
    */
   async resubmitRefundTicket(params) {
+    validateShortId("ticketId", params.ticketId, "TKT");
+    validateShortId("paymentId", params.paymentId, "PAY");
+    validateRequired("reason", params.reason);
+    validateAmountString("requestedAmount.amount", params.requestedAmount.amount);
+    validateCurrencyCode("requestedAmount.currency", params.requestedAmount.currency);
     return this.http.post(
       "/v1/actions/refund-ticket/resubmit-ticket",
       params
@@ -343,6 +464,7 @@ var BuyerGraphQL = class {
    * });
    */
   async query(params) {
+    validateRequired("query", params.query);
     return this.http.post("/v1/graphql", params);
   }
 };
@@ -368,9 +490,11 @@ var CheckoutAnonymousResource = class {
    * // Redirect to result.checkoutUrl
    */
   async create(params) {
+    validateCheckoutCommon(params);
     return this.http.post(
       "/v1/actions/checkout/create-session",
-      params
+      params,
+      { idempotencyWindow: 60 }
     );
   }
 };
@@ -403,16 +527,18 @@ var CheckoutAuthenticatedResource = class {
    * // Redirect to result.checkoutUrl (includes #token=...)
    */
   async create(params) {
+    validateCheckoutCommon(params);
+    validateRequired("buyerIdentity", params.buyerIdentity);
     const { buyerIdentity, buyerEmail, ...sessionFields } = params;
     const [tokenResult, sessionResult] = await Promise.all([
       this.http.post("/v1/actions/auth/issue-session-token", {
         storeId: params.storeId,
         buyerIdentity
-      }),
+      }, { idempotencyWindow: 60 }),
       this.http.post("/v1/actions/checkout/create-session", {
         ...sessionFields,
         buyerEmail: buyerEmail ?? buyerIdentity
-      })
+      }, { idempotencyWindow: 60 })
     ]);
     return {
       sessionId: sessionResult.sessionId,
@@ -455,7 +581,7 @@ var CheckoutResource = class {
    * // Redirect to session.checkoutUrl
    */
   async createSession(params) {
-    return this.http.post("/v1/actions/checkout/create-session", params);
+    return this.http.post("/v1/actions/checkout/create-session", params, { idempotencyWindow: 60 });
   }
 };
 
@@ -483,6 +609,7 @@ var GraphQLResource = class {
    * });
    */
   async query(params) {
+    validateRequired("query", params.query);
     return this.http.post("/v1/graphql", params);
   }
 };
@@ -506,6 +633,9 @@ var OnetimeProductsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/onetime-product/create-product", params);
   }
   /**
@@ -522,6 +652,9 @@ var OnetimeProductsResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "PROD");
+    validateRequired("name", params.name);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/onetime-product/update-product", params);
   }
   /**
@@ -534,6 +667,7 @@ var OnetimeProductsResource = class {
    * const { product } = await client.onetimeProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
+    validateShortId("id", params.id, "PROD");
     return this.http.post("/v1/actions/onetime-product/publish-product", params);
   }
   /**
@@ -549,6 +683,8 @@ var OnetimeProductsResource = class {
    * });
    */
   async updateStatus(params) {
+    validateShortId("id", params.id, "PROD");
+    validateEnum("status", params.status, ["active", "inactive"]);
     return this.http.post("/v1/actions/onetime-product/update-status", params);
   }
 };
@@ -574,6 +710,7 @@ var OrdersResource = class {
    * // status: "canceled" or "canceling"
    */
   async cancelSubscription(params) {
+    validateShortId("orderId", params.orderId, "ORD");
     return this.http.post("/v1/actions/subscription-order/cancel-order", params);
   }
 };
@@ -597,6 +734,9 @@ var StoreMerchantsResource = class {
    * });
    */
   async add(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("email", params.email);
+    validateEnum("role", params.role, ["admin", "member"]);
     return this.http.post("/v1/actions/store-merchant/add-merchant", params);
   }
   /**
@@ -612,6 +752,8 @@ var StoreMerchantsResource = class {
    * });
    */
   async remove(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateShortId("merchantId", params.merchantId, "MER");
     return this.http.post("/v1/actions/store-merchant/remove-merchant", params);
   }
   /**
@@ -628,6 +770,9 @@ var StoreMerchantsResource = class {
    * });
    */
   async updateRole(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateShortId("merchantId", params.merchantId, "MER");
+    validateEnum("role", params.role, ["admin", "member"]);
     return this.http.post("/v1/actions/store-merchant/update-role", params);
   }
 };
@@ -647,6 +792,7 @@ var StoresResource = class {
    * const { store } = await client.stores.create({ name: "My Store" });
    */
   async create(params) {
+    validateRequired("name", params.name);
     return this.http.post("/v1/actions/store/create-store", params);
   }
   /**
@@ -662,6 +808,7 @@ var StoresResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "STO");
     return this.http.post("/v1/actions/store/update-store", params);
   }
   /**
@@ -674,6 +821,7 @@ var StoresResource = class {
    * const { store } = await client.stores.delete({ id: "STO_xxx" });
    */
   async delete(params) {
+    validateShortId("id", params.id, "STO");
     return this.http.post("/v1/actions/store/delete-store", params);
   }
 };
@@ -698,6 +846,8 @@ var SubscriptionProductGroupsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
     return this.http.post("/v1/actions/subscription-product-group/create-group", params);
   }
   /**
@@ -713,6 +863,7 @@ var SubscriptionProductGroupsResource = class {
    * });
    */
   async update(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/update-group", params);
   }
   /**
@@ -725,6 +876,7 @@ var SubscriptionProductGroupsResource = class {
    * const { group } = await client.subscriptionProductGroups.delete({ id: "GRP_xxx" });
    */
   async delete(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/delete-group", params);
   }
   /**
@@ -737,6 +889,7 @@ var SubscriptionProductGroupsResource = class {
    * const { group } = await client.subscriptionProductGroups.publish({ id: "GRP_xxx" });
    */
   async publish(params) {
+    validateRequired("id", params.id);
     return this.http.post("/v1/actions/subscription-product-group/publish-group", params);
   }
 };
@@ -761,6 +914,10 @@ var SubscriptionProductsResource = class {
    * });
    */
   async create(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("name", params.name);
+    validateEnum("billingPeriod", params.billingPeriod, ["weekly", "monthly", "quarterly", "yearly"]);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/subscription-product/create-product", params);
   }
   /**
@@ -778,6 +935,10 @@ var SubscriptionProductsResource = class {
    * });
    */
   async update(params) {
+    validateShortId("id", params.id, "PROD");
+    validateRequired("name", params.name);
+    validateEnum("billingPeriod", params.billingPeriod, ["weekly", "monthly", "quarterly", "yearly"]);
+    validatePrices("prices", params.prices);
     return this.http.post("/v1/actions/subscription-product/update-product", params);
   }
   /**
@@ -790,6 +951,7 @@ var SubscriptionProductsResource = class {
    * const { product } = await client.subscriptionProducts.publish({ id: "PROD_xxx" });
    */
   async publish(params) {
+    validateShortId("id", params.id, "PROD");
     return this.http.post("/v1/actions/subscription-product/publish-product", params);
   }
   /**
@@ -805,6 +967,8 @@ var SubscriptionProductsResource = class {
    * });
    */
   async updateStatus(params) {
+    validateShortId("id", params.id, "PROD");
+    validateEnum("status", params.status, ["active", "inactive"]);
     return this.http.post("/v1/actions/subscription-product/update-status", params);
   }
 };
@@ -1073,11 +1237,14 @@ var PaymentStatus = /* @__PURE__ */ ((PaymentStatus2) => {
 })(PaymentStatus || {});
 var RefundTicketStatus = /* @__PURE__ */ ((RefundTicketStatus2) => {
   RefundTicketStatus2["Pending"] = "pending";
+  RefundTicketStatus2["UnderReview"] = "under_review";
   RefundTicketStatus2["Approved"] = "approved";
   RefundTicketStatus2["Rejected"] = "rejected";
+  RefundTicketStatus2["Returned"] = "returned";
   RefundTicketStatus2["Processing"] = "processing";
   RefundTicketStatus2["Succeeded"] = "succeeded";
   RefundTicketStatus2["Failed"] = "failed";
+  RefundTicketStatus2["Cancelled"] = "cancelled";
   return RefundTicketStatus2;
 })(RefundTicketStatus || {});
 var RefundStatus = /* @__PURE__ */ ((RefundStatus2) => {
@@ -1105,6 +1272,7 @@ var ErrorLayer = /* @__PURE__ */ ((ErrorLayer2) => {
   ErrorLayer2["GraphQL"] = "graphql";
   ErrorLayer2["Resource"] = "resource";
   ErrorLayer2["Email"] = "email";
+  ErrorLayer2["Sdk"] = "sdk";
   return ErrorLayer2;
 })(ErrorLayer || {});
 var WebhookEventType = /* @__PURE__ */ ((WebhookEventType2) => {