@01.software/sdk 0.71.0 → 0.73.1

package/dist/{collection-client-D18xyUq_.d.cts → collection-client-BH4dIZ6c.d.cts}

@@ -1,8 +1,8 @@
-import { dd as DebugConfig, dj as RetryConfig, d6 as ApiQueryOptions, dg as PayloadFindResponse, dh as PayloadMutationResponse, dy as ApiDocumentWriteOptions, dz as ApiWriteOptions, dA as ApiDeleteOptions, dB as PublicReadQueryOptions } from './types-DLHEIsAx.cjs';
-import './payload-types-BgOEk6Y9.cjs';
+import { df as DebugConfig, dl as RetryConfig, d8 as ApiQueryOptions, di as PayloadFindResponse, dj as PayloadMutationResponse, dA as ApiDocumentWriteOptions, dB as ApiWriteOptions, dC as ApiDeleteOptions, dD as PublicReadQueryOptions } from './types-Chwgg4CQ.cjs';
+import './payload-types-PXkmefhZ.cjs';
 import { GenerateMetadataOptions, Metadata } from './metadata.cjs';
-import { C as Collection, S as ServerCollection, P as PublicCollection } from './const-oGEoxCXZ.cjs';
-import { C as CollectionType } from './types-BzG3NO7R.cjs';
+import { C as Collection, S as ServerCollection, P as PublicCollection } from './const-BS2EaIp4.cjs';
+import { C as CollectionType } from './types-CyMz0Kzc.cjs';
 
 interface FetchOptions extends RequestInit {
     apiUrl?: string;

package/dist/{collection-client-CUGJcTpl.d.ts → collection-client-lLAl3xCZ.d.ts}

@@ -1,8 +1,8 @@
-import { dd as DebugConfig, dj as RetryConfig, d6 as ApiQueryOptions, dg as PayloadFindResponse, dh as PayloadMutationResponse, dy as ApiDocumentWriteOptions, dz as ApiWriteOptions, dA as ApiDeleteOptions, dB as PublicReadQueryOptions } from './types-nyOvcO0K.js';
-import './payload-types-BgOEk6Y9.js';
+import { df as DebugConfig, dl as RetryConfig, d8 as ApiQueryOptions, di as PayloadFindResponse, dj as PayloadMutationResponse, dA as ApiDocumentWriteOptions, dB as ApiWriteOptions, dC as ApiDeleteOptions, dD as PublicReadQueryOptions } from './types-lbzbJSZh.js';
+import './payload-types-PXkmefhZ.js';
 import { GenerateMetadataOptions, Metadata } from './metadata.js';
-import { C as Collection, S as ServerCollection, P as PublicCollection } from './const-Dlu0mXmj.js';
-import { C as CollectionType } from './types-CSvp2fJ_.js';
+import { C as Collection, S as ServerCollection, P as PublicCollection } from './const-CCvoknRY.js';
+import { C as CollectionType } from './types-CQRsG6sA.js';
 
 interface FetchOptions extends RequestInit {
     apiUrl?: string;

package/dist/{const-oGEoxCXZ.d.cts → const-BS2EaIp4.d.cts}

@@ -1,4 +1,4 @@
-import './payload-types-BgOEk6Y9.cjs';
+import './payload-types-PXkmefhZ.cjs';
 
 /**
  * Internal collections that should not be exposed via SDK.

package/dist/{const-Dlu0mXmj.d.ts → const-CCvoknRY.d.ts}

@@ -1,4 +1,4 @@
-import './payload-types-BgOEk6Y9.js';
+import './payload-types-PXkmefhZ.js';
 
 /**
  * Internal collections that should not be exposed via SDK.

package/dist/{index-HHVtIKXs.d.cts → index-CHdrzJ8-.d.cts}

@@ -1,6 +1,6 @@
-import { C as Collection } from './const-oGEoxCXZ.cjs';
-import { C as CollectionType } from './types-BzG3NO7R.cjs';
-import './payload-types-BgOEk6Y9.cjs';
+import { C as Collection } from './const-BS2EaIp4.cjs';
+import { C as CollectionType } from './types-CyMz0Kzc.cjs';
+import './payload-types-PXkmefhZ.cjs';
 
 type WebhookOperation = string;
 /**

package/dist/{index-Ccd4NYTL.d.ts → index-DVqNpmsc.d.ts}

@@ -1,6 +1,6 @@
-import { C as Collection } from './const-Dlu0mXmj.js';
-import { C as CollectionType } from './types-CSvp2fJ_.js';
-import './payload-types-BgOEk6Y9.js';
+import { C as Collection } from './const-CCvoknRY.js';
+import { C as CollectionType } from './types-CQRsG6sA.js';
+import './payload-types-PXkmefhZ.js';
 
 type WebhookOperation = string;
 /**

package/dist/index.cjs

@@ -996,7 +996,7 @@ async function httpFetch(url, options) {
           );
           const usageError = attachRequestId(
             createUsageLimitError(
-              `Monthly API usage limit exceeded (${current.toLocaleString()}/${limit.toLocaleString()})`,
+              `Monthly API usage limit exceeded (${current.toLocaleString("en-US")}/${limit.toLocaleString("en-US")})`,
               { limit, current, remaining },
               {
                 url,
@@ -2720,7 +2720,18 @@ var ABANDONED_REASONS = ["expired", "customer", "operator"];
 function managedPaymentProviders(providers) {
   return providers;
 }
-var PAYMENT_PROVIDERS = managedPaymentProviders(["toss", "portone"]);
+var PAYMENT_PROVIDERS = managedPaymentProviders([
+  "toss",
+  "portone",
+  "stripe"
+]);
+var CANCEL_RECOVERY_METHODS = {
+  toss: "cancel()",
+  portone: "cancelPortOne()",
+  stripe: null
+};
+var STRIPE_RETURN_URL_RAW_CHARACTERS = /^[^\s\u0000-\u001F\u007F\\]+$/;
+var STRIPE_RETURN_URL_AUTHORITY = /^[A-Za-z][A-Za-z0-9+.-]*:\/\/[^/?#@]+(?:[/?#]|$)/;
 var PAYMENT_PROVIDER_STATUSES = [
   "requires_payment_method",
   "requires_action",
@@ -2769,11 +2780,8 @@ function fail(resource, path, expected) {
   invalidCanonicalResponse(resource, { path, expected });
 }
 function providerMismatch(resource, expected, actual, operation2) {
-  if (operation2 === "cancel") {
-    const method = {
-      toss: "cancel()",
-      portone: "cancelPortOne()"
-    }[actual];
+  const method = CANCEL_RECOVERY_METHODS[actual];
+  if (operation2 === "cancel" && method !== null) {
     throw createApiError(
       `Canonical ${resource} response provider mismatch: expected ${expected}, received ${actual}.`,
       502,
@@ -4017,6 +4025,65 @@ function validateRequiredReconciliation(value, allowed, resource, path) {
 }
 function validateNextAction(value, provider, resource, path) {
   const action = record(value, resource, path);
+  if (provider === "stripe") {
+    exact(
+      action,
+      ["type", "clientSecret", "publishableKey", "returnUrl"],
+      [],
+      resource,
+      path
+    );
+    if (action.type !== "stripe_payment_element")
+      fail(resource, `${path}.type`, "stripe_payment_element");
+    const clientSecret = boundedString(
+      action.clientSecret,
+      255,
+      resource,
+      `${path}.clientSecret`
+    );
+    if (!/^pi_[A-Za-z0-9]+_secret_[A-Za-z0-9]+$/.test(clientSecret)) {
+      fail(
+        resource,
+        `${path}.clientSecret`,
+        "Stripe PaymentIntent client secret"
+      );
+    }
+    const publishableKey = boundedString(
+      action.publishableKey,
+      255,
+      resource,
+      `${path}.publishableKey`
+    );
+    if (!/^pk_(?:test|live)_[A-Za-z0-9]+$/.test(publishableKey)) {
+      fail(resource, `${path}.publishableKey`, "Stripe publishable key");
+    }
+    const returnUrl = boundedString(
+      action.returnUrl,
+      2048,
+      resource,
+      `${path}.returnUrl`
+    );
+    if (!STRIPE_RETURN_URL_RAW_CHARACTERS.test(returnUrl) || !STRIPE_RETURN_URL_AUTHORITY.test(returnUrl)) {
+      fail(
+        resource,
+        `${path}.returnUrl`,
+        "HTTPS or loopback URL without embedded credentials"
+      );
+    }
+    try {
+      const parsed = new URL(returnUrl);
+      const loopback = parsed.protocol === "http:" && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1");
+      if (!loopback && parsed.protocol !== "https:" || parsed.username || parsed.password)
+        throw new Error("unsafe return URL");
+    } catch {
+      fail(
+        resource,
+        `${path}.returnUrl`,
+        "HTTPS or loopback URL without embedded credentials"
+      );
+    }
+    return;
+  }
   if (provider === "portone") {
     if (action.type === "portone_sdk") {
       const hasCancelable = "cancelable" in action;
@@ -4392,7 +4459,7 @@ function validatePublicPaymentSession(value, expectedProvider, operation2) {
     );
   }
   if (expectedProvider !== void 0 && provider !== expectedProvider) {
-    if (operation2 === "cancel" && status !== "canceling" && status !== "canceled") {
+    if (operation2 === "cancel" && CANCEL_RECOVERY_METHODS[provider] !== null && status !== "canceling" && status !== "canceled") {
       fail(
         resource,
         "$.providerStatus",
@@ -5701,8 +5768,13 @@ function getRelationID(value) {
   }
   return void 0;
 }
+function compareOrdinal(left, right) {
+  if (left < right) return -1;
+  if (left > right) return 1;
+  return 0;
+}
 function compareOrder(left, right) {
-  return (left ?? "").localeCompare(right ?? "");
+  return compareOrdinal(left ?? "", right ?? "");
 }
 function isProductOptionValueDoc(value) {
   return typeof value === "object" && value !== null && "id" in value && ("value" in value || "slug" in value);
@@ -6914,7 +6986,7 @@ function compareVariantOrder(a, b) {
   }
   const aId = String(getRelationID(a.id) ?? "");
   const bId = String(getRelationID(b.id) ?? "");
-  return aId.localeCompare(bId);
+  return compareOrdinal(aId, bId);
 }
 function getVariantAvailableForSale(variant) {
   if (variant.isActive === false) return false;
@@ -7590,6 +7662,8 @@ function buildRangeEndpoint(params) {
 function buildAdmissionAvailabilityEndpoint(params) {
   const urlParams = new URLSearchParams();
   urlParams.set("occurrence", params.occurrence);
+  const normalizedMarket2 = params.market?.trim();
+  if (normalizedMarket2) urlParams.set("market", normalizedMarket2);
   return resolveOperationPath(
     EVENTS_ENDPOINT_OPERATIONS.occurrences.admissionAvailability,
     { query: urlParams }