@01.software/sdk 0.71.0 → 0.72.1

package/dist/client.d.cts

@@ -1,10 +1,10 @@
-import { d0 as CustomerScopedApi, bm as ListMyBenefitVouchersRequest, bn as ListMyBenefitVouchersResponse, d1 as CustomerCreditsApi, d2 as CommerceClient, l as CommunityClient, d3 as ContentClient, aN as EventsClient, d4 as CustomerNamespace, M as MarketDiscovery, au as CustomerMembershipView, C as CancelMembershipParams, e as CancelMembershipResponse, o as ClientState, d5 as ClientConfig } from './types-DLHEIsAx.cjs';
-export { A as AddItemParams, d6 as ApiQueryOptions, d7 as CancelBrowserPaymentSessionParams, d8 as CartMergeParams, z as CartMergeResult, D as CartMineResult, F as CartMutationResult, G as CheckoutAbandonedReason, H as CheckoutAmounts, N as CheckoutOrderReference, O as CheckoutPaymentSessionRef, W as CheckoutShippingAddress, Z as ClearCartParams, d9 as ClientMetadata, da as ContentClientOptions, a7 as CreateCartParams, a8 as CreateCartResult, db as CreateCheckoutParams, dc as CreateCheckoutResult, ab as CreatePaymentSessionParams, ac as CreatePortOnePaymentSessionParams, av as CustomerSnapshot, dd as DebugConfig, de as DeepPartial, df as ExtractArrayType, bo as MembershipStatus, bq as Money, bx as OpenCheckoutPaymentState, dg as PayloadFindResponse, dh as PayloadMutationResponse, by as PaymentFailureReason, bz as PaymentNextAction, bA as PaymentProviderStatus, bB as PaymentReconciliationReason, bE as PaymentSessionRole, bF as PortOneHostedPaymentMethod, bH as PortOnePaymentNextAction, bK as PortOnePublicPaymentSession, bO as ProductUpsertInput, bP as ProductUpsertParams, bQ as ProductUpsertResponse, bR as ProductUpsertVariantInput, bS as PublicAttribute, bT as PublicCaptureEvidence, bU as PublicCart, bV as PublicCartItem, bW as PublicCartItemAdmission, bX as PublicCartMarket, bY as PublicCartReference, bZ as PublicCheckout, b_ as PublicCheckoutItem, b$ as PublicMediaAsset, c0 as PublicMediaSize, c1 as PublicOrder, c2 as PublicOrderAmounts, c3 as PublicOrderItem, c4 as PublicOrderReference, c5 as PublicPaymentSession, c8 as ReconciliationRequired, cb as RemoveItemParams, di as RetrieveBrowserPaymentSessionParams, ce as RetrieveCartParams, cf as RetrieveCheckoutParams, dj as RetryConfig, dk as RootClient, dk as RootClientType, dl as RootCollectionClient, dm as RootReadOnlyQueryBuilder, ct as ShippingLine, dn as Sort, cu as SpentCheckoutPaymentState, dp as StorefrontContentListOptions, dq as StorefrontContentReference, dr as StorefrontGalleryItem, ds as StorefrontGalleryItemsListOptions, dt as StorefrontGalleryItemsSort, du as StorefrontLink, dv as StorefrontLinksListOptions, dw as StorefrontLinksSort, cL as UpdateCartAttributesParams, cM as UpdateDiscountCodesParams, cN as UpdateItemParams, cO as VariantInput, dx as Where } from './types-DLHEIsAx.cjs';
-import { R as ReadOnlyCollectionClient } from './collection-client-D18xyUq_.cjs';
+import { d0 as CustomerScopedApi, bm as ListMyBenefitVouchersRequest, bn as ListMyBenefitVouchersResponse, d1 as CustomerCreditsApi, d2 as CommerceClient, l as CommunityClient, d3 as ContentClient, aN as EventsClient, d4 as CustomerNamespace, M as MarketDiscovery, au as CustomerMembershipView, C as CancelMembershipParams, e as CancelMembershipResponse, o as ClientState, d5 as ClientConfig } from './types-CnkJQUez.cjs';
+export { A as AddItemParams, d6 as ApiQueryOptions, d7 as CancelBrowserPaymentSessionParams, d8 as CartMergeParams, z as CartMergeResult, D as CartMineResult, F as CartMutationResult, G as CheckoutAbandonedReason, H as CheckoutAmounts, N as CheckoutOrderReference, O as CheckoutPaymentSessionRef, W as CheckoutShippingAddress, Z as ClearCartParams, d9 as ClientMetadata, da as ContentClientOptions, a7 as CreateCartParams, a8 as CreateCartResult, db as CreateCheckoutParams, dc as CreateCheckoutResult, ab as CreatePaymentSessionParams, ac as CreatePortOnePaymentSessionParams, av as CustomerSnapshot, dd as DebugConfig, de as DeepPartial, df as ExtractArrayType, bo as MembershipStatus, bq as Money, bx as OpenCheckoutPaymentState, dg as PayloadFindResponse, dh as PayloadMutationResponse, by as PaymentFailureReason, bz as PaymentNextAction, bA as PaymentProviderStatus, bB as PaymentReconciliationReason, bE as PaymentSessionRole, bF as PortOneHostedPaymentMethod, bH as PortOnePaymentNextAction, bK as PortOnePublicPaymentSession, bO as ProductUpsertInput, bP as ProductUpsertParams, bQ as ProductUpsertResponse, bR as ProductUpsertVariantInput, bS as PublicAttribute, bT as PublicCaptureEvidence, bU as PublicCart, bV as PublicCartItem, bW as PublicCartItemAdmission, bX as PublicCartMarket, bY as PublicCartReference, bZ as PublicCheckout, b_ as PublicCheckoutItem, b$ as PublicMediaAsset, c0 as PublicMediaSize, c1 as PublicOrder, c2 as PublicOrderAmounts, c3 as PublicOrderItem, c4 as PublicOrderReference, c5 as PublicPaymentSession, c8 as ReconciliationRequired, cb as RemoveItemParams, di as RetrieveBrowserPaymentSessionParams, ce as RetrieveCartParams, cf as RetrieveCheckoutParams, dj as RetryConfig, dk as RootClient, dk as RootClientType, dl as RootCollectionClient, dm as RootReadOnlyQueryBuilder, ct as ShippingLine, dn as Sort, cu as SpentCheckoutPaymentState, dp as StorefrontContentListOptions, dq as StorefrontContentReference, dr as StorefrontGalleryItem, ds as StorefrontGalleryItemsListOptions, dt as StorefrontGalleryItemsSort, du as StorefrontLink, dv as StorefrontLinksListOptions, dw as StorefrontLinksSort, cL as UpdateCartAttributesParams, cM as UpdateDiscountCodesParams, cN as UpdateItemParams, cO as VariantInput, dx as Where } from './types-CnkJQUez.cjs';
+import { R as ReadOnlyCollectionClient } from './collection-client-B3CnqMDQ.cjs';
 export { isApiError, isAuthError, isCommerceSDKError, isConfigError, isConflictError, isGoneError, isNetworkError, isNotFoundError, isPermissionError, isRateLimitError, isSDKError, isServiceUnavailableError, isTimeoutError, isUsageLimitError, isValidationError } from './errors.cjs';
-export { C as Collection, P as PublicCollection } from './const-oGEoxCXZ.cjs';
-import './types-BzG3NO7R.cjs';
-import './payload-types-BgOEk6Y9.cjs';
+export { C as Collection, P as PublicCollection } from './const-_ZfJjRQG.cjs';
+import './types-FyklqLAk.cjs';
+import './payload-types-BRg8Yary.cjs';
 import './metadata.cjs';
 
 declare class CustomerBenefitVouchersApi extends CustomerScopedApi {

package/dist/client.d.ts

@@ -1,10 +1,10 @@
-import { d0 as CustomerScopedApi, bm as ListMyBenefitVouchersRequest, bn as ListMyBenefitVouchersResponse, d1 as CustomerCreditsApi, d2 as CommerceClient, l as CommunityClient, d3 as ContentClient, aN as EventsClient, d4 as CustomerNamespace, M as MarketDiscovery, au as CustomerMembershipView, C as CancelMembershipParams, e as CancelMembershipResponse, o as ClientState, d5 as ClientConfig } from './types-nyOvcO0K.js';
-export { A as AddItemParams, d6 as ApiQueryOptions, d7 as CancelBrowserPaymentSessionParams, d8 as CartMergeParams, z as CartMergeResult, D as CartMineResult, F as CartMutationResult, G as CheckoutAbandonedReason, H as CheckoutAmounts, N as CheckoutOrderReference, O as CheckoutPaymentSessionRef, W as CheckoutShippingAddress, Z as ClearCartParams, d9 as ClientMetadata, da as ContentClientOptions, a7 as CreateCartParams, a8 as CreateCartResult, db as CreateCheckoutParams, dc as CreateCheckoutResult, ab as CreatePaymentSessionParams, ac as CreatePortOnePaymentSessionParams, av as CustomerSnapshot, dd as DebugConfig, de as DeepPartial, df as ExtractArrayType, bo as MembershipStatus, bq as Money, bx as OpenCheckoutPaymentState, dg as PayloadFindResponse, dh as PayloadMutationResponse, by as PaymentFailureReason, bz as PaymentNextAction, bA as PaymentProviderStatus, bB as PaymentReconciliationReason, bE as PaymentSessionRole, bF as PortOneHostedPaymentMethod, bH as PortOnePaymentNextAction, bK as PortOnePublicPaymentSession, bO as ProductUpsertInput, bP as ProductUpsertParams, bQ as ProductUpsertResponse, bR as ProductUpsertVariantInput, bS as PublicAttribute, bT as PublicCaptureEvidence, bU as PublicCart, bV as PublicCartItem, bW as PublicCartItemAdmission, bX as PublicCartMarket, bY as PublicCartReference, bZ as PublicCheckout, b_ as PublicCheckoutItem, b$ as PublicMediaAsset, c0 as PublicMediaSize, c1 as PublicOrder, c2 as PublicOrderAmounts, c3 as PublicOrderItem, c4 as PublicOrderReference, c5 as PublicPaymentSession, c8 as ReconciliationRequired, cb as RemoveItemParams, di as RetrieveBrowserPaymentSessionParams, ce as RetrieveCartParams, cf as RetrieveCheckoutParams, dj as RetryConfig, dk as RootClient, dk as RootClientType, dl as RootCollectionClient, dm as RootReadOnlyQueryBuilder, ct as ShippingLine, dn as Sort, cu as SpentCheckoutPaymentState, dp as StorefrontContentListOptions, dq as StorefrontContentReference, dr as StorefrontGalleryItem, ds as StorefrontGalleryItemsListOptions, dt as StorefrontGalleryItemsSort, du as StorefrontLink, dv as StorefrontLinksListOptions, dw as StorefrontLinksSort, cL as UpdateCartAttributesParams, cM as UpdateDiscountCodesParams, cN as UpdateItemParams, cO as VariantInput, dx as Where } from './types-nyOvcO0K.js';
-import { R as ReadOnlyCollectionClient } from './collection-client-CUGJcTpl.js';
+import { d0 as CustomerScopedApi, bm as ListMyBenefitVouchersRequest, bn as ListMyBenefitVouchersResponse, d1 as CustomerCreditsApi, d2 as CommerceClient, l as CommunityClient, d3 as ContentClient, aN as EventsClient, d4 as CustomerNamespace, M as MarketDiscovery, au as CustomerMembershipView, C as CancelMembershipParams, e as CancelMembershipResponse, o as ClientState, d5 as ClientConfig } from './types-Cmnxxvuv.js';
+export { A as AddItemParams, d6 as ApiQueryOptions, d7 as CancelBrowserPaymentSessionParams, d8 as CartMergeParams, z as CartMergeResult, D as CartMineResult, F as CartMutationResult, G as CheckoutAbandonedReason, H as CheckoutAmounts, N as CheckoutOrderReference, O as CheckoutPaymentSessionRef, W as CheckoutShippingAddress, Z as ClearCartParams, d9 as ClientMetadata, da as ContentClientOptions, a7 as CreateCartParams, a8 as CreateCartResult, db as CreateCheckoutParams, dc as CreateCheckoutResult, ab as CreatePaymentSessionParams, ac as CreatePortOnePaymentSessionParams, av as CustomerSnapshot, dd as DebugConfig, de as DeepPartial, df as ExtractArrayType, bo as MembershipStatus, bq as Money, bx as OpenCheckoutPaymentState, dg as PayloadFindResponse, dh as PayloadMutationResponse, by as PaymentFailureReason, bz as PaymentNextAction, bA as PaymentProviderStatus, bB as PaymentReconciliationReason, bE as PaymentSessionRole, bF as PortOneHostedPaymentMethod, bH as PortOnePaymentNextAction, bK as PortOnePublicPaymentSession, bO as ProductUpsertInput, bP as ProductUpsertParams, bQ as ProductUpsertResponse, bR as ProductUpsertVariantInput, bS as PublicAttribute, bT as PublicCaptureEvidence, bU as PublicCart, bV as PublicCartItem, bW as PublicCartItemAdmission, bX as PublicCartMarket, bY as PublicCartReference, bZ as PublicCheckout, b_ as PublicCheckoutItem, b$ as PublicMediaAsset, c0 as PublicMediaSize, c1 as PublicOrder, c2 as PublicOrderAmounts, c3 as PublicOrderItem, c4 as PublicOrderReference, c5 as PublicPaymentSession, c8 as ReconciliationRequired, cb as RemoveItemParams, di as RetrieveBrowserPaymentSessionParams, ce as RetrieveCartParams, cf as RetrieveCheckoutParams, dj as RetryConfig, dk as RootClient, dk as RootClientType, dl as RootCollectionClient, dm as RootReadOnlyQueryBuilder, ct as ShippingLine, dn as Sort, cu as SpentCheckoutPaymentState, dp as StorefrontContentListOptions, dq as StorefrontContentReference, dr as StorefrontGalleryItem, ds as StorefrontGalleryItemsListOptions, dt as StorefrontGalleryItemsSort, du as StorefrontLink, dv as StorefrontLinksListOptions, dw as StorefrontLinksSort, cL as UpdateCartAttributesParams, cM as UpdateDiscountCodesParams, cN as UpdateItemParams, cO as VariantInput, dx as Where } from './types-Cmnxxvuv.js';
+import { R as ReadOnlyCollectionClient } from './collection-client-uOgS_1bC.js';
 export { isApiError, isAuthError, isCommerceSDKError, isConfigError, isConflictError, isGoneError, isNetworkError, isNotFoundError, isPermissionError, isRateLimitError, isSDKError, isServiceUnavailableError, isTimeoutError, isUsageLimitError, isValidationError } from './errors.js';
-export { C as Collection, P as PublicCollection } from './const-Dlu0mXmj.js';
-import './types-CSvp2fJ_.js';
-import './payload-types-BgOEk6Y9.js';
+export { C as Collection, P as PublicCollection } from './const-BJBK7jBl.js';
+import './types-DLjSqL0P.js';
+import './payload-types-BRg8Yary.js';
 import './metadata.js';
 
 declare class CustomerBenefitVouchersApi extends CustomerScopedApi {

package/dist/client.js

@@ -2570,7 +2570,18 @@ var ABANDONED_REASONS = ["expired", "customer", "operator"];
 function managedPaymentProviders(providers) {
   return providers;
 }
-var PAYMENT_PROVIDERS = managedPaymentProviders(["toss", "portone"]);
+var PAYMENT_PROVIDERS = managedPaymentProviders([
+  "toss",
+  "portone",
+  "stripe"
+]);
+var CANCEL_RECOVERY_METHODS = {
+  toss: "cancel()",
+  portone: "cancelPortOne()",
+  stripe: null
+};
+var STRIPE_RETURN_URL_RAW_CHARACTERS = /^[^\s\u0000-\u001F\u007F\\]+$/;
+var STRIPE_RETURN_URL_AUTHORITY = /^[A-Za-z][A-Za-z0-9+.-]*:\/\/[^/?#@]+(?:[/?#]|$)/;
 var PAYMENT_PROVIDER_STATUSES = [
   "requires_payment_method",
   "requires_action",
@@ -2619,11 +2630,8 @@ function fail(resource, path, expected) {
   invalidCanonicalResponse(resource, { path, expected });
 }
 function providerMismatch(resource, expected, actual, operation2) {
-  if (operation2 === "cancel") {
-    const method = {
-      toss: "cancel()",
-      portone: "cancelPortOne()"
-    }[actual];
+  const method = CANCEL_RECOVERY_METHODS[actual];
+  if (operation2 === "cancel" && method !== null) {
     throw createApiError(
       `Canonical ${resource} response provider mismatch: expected ${expected}, received ${actual}.`,
       502,
@@ -3867,6 +3875,65 @@ function validateRequiredReconciliation(value, allowed, resource, path) {
 }
 function validateNextAction(value, provider, resource, path) {
   const action = record(value, resource, path);
+  if (provider === "stripe") {
+    exact(
+      action,
+      ["type", "clientSecret", "publishableKey", "returnUrl"],
+      [],
+      resource,
+      path
+    );
+    if (action.type !== "stripe_payment_element")
+      fail(resource, `${path}.type`, "stripe_payment_element");
+    const clientSecret = boundedString(
+      action.clientSecret,
+      255,
+      resource,
+      `${path}.clientSecret`
+    );
+    if (!/^pi_[A-Za-z0-9]+_secret_[A-Za-z0-9]+$/.test(clientSecret)) {
+      fail(
+        resource,
+        `${path}.clientSecret`,
+        "Stripe PaymentIntent client secret"
+      );
+    }
+    const publishableKey = boundedString(
+      action.publishableKey,
+      255,
+      resource,
+      `${path}.publishableKey`
+    );
+    if (!/^pk_(?:test|live)_[A-Za-z0-9]+$/.test(publishableKey)) {
+      fail(resource, `${path}.publishableKey`, "Stripe publishable key");
+    }
+    const returnUrl = boundedString(
+      action.returnUrl,
+      2048,
+      resource,
+      `${path}.returnUrl`
+    );
+    if (!STRIPE_RETURN_URL_RAW_CHARACTERS.test(returnUrl) || !STRIPE_RETURN_URL_AUTHORITY.test(returnUrl)) {
+      fail(
+        resource,
+        `${path}.returnUrl`,
+        "HTTPS or loopback URL without embedded credentials"
+      );
+    }
+    try {
+      const parsed = new URL(returnUrl);
+      const loopback = parsed.protocol === "http:" && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1");
+      if (!loopback && parsed.protocol !== "https:" || parsed.username || parsed.password)
+        throw new Error("unsafe return URL");
+    } catch {
+      fail(
+        resource,
+        `${path}.returnUrl`,
+        "HTTPS or loopback URL without embedded credentials"
+      );
+    }
+    return;
+  }
   if (provider === "portone") {
     if (action.type === "portone_sdk") {
       const hasCancelable = "cancelable" in action;
@@ -4242,7 +4309,7 @@ function validatePublicPaymentSession(value, expectedProvider, operation2) {
     );
   }
   if (expectedProvider !== void 0 && provider !== expectedProvider) {
-    if (operation2 === "cancel" && status !== "canceling" && status !== "canceled") {
+    if (operation2 === "cancel" && CANCEL_RECOVERY_METHODS[provider] !== null && status !== "canceling" && status !== "canceled") {
       fail(
         resource,
         "$.providerStatus",