@alphawebai/hs-prism 0.1.0-rc.45 → 0.1.0-rc.46

package/dist/src/alphaweb/manifest.d.ts

@@ -1,7 +1,7 @@
 export declare const ALPHAWEB_STRIPE_WEBHOOK_EVENTS: readonly ["charge.dispute.closed", "charge.dispute.created", "charge.dispute.funds_reinstated", "charge.dispute.funds_withdrawn", "charge.dispute.updated", "mandate.updated", "payment_intent.amount_capturable_updated", "payment_intent.canceled", "payment_intent.payment_failed", "payment_intent.processing", "payment_intent.requires_action", "payment_intent.succeeded", "payment_method.attached", "payment_method.automatically_updated", "payment_method.detached", "payment_method.updated", "refund.created", "refund.failed", "refund.updated", "setup_intent.canceled", "setup_intent.requires_action", "setup_intent.setup_failed", "setup_intent.succeeded"];
 export declare const ALPHAWEB_PAYPAL_WEBHOOK_EVENTS: readonly ["CHECKOUT.ORDER.APPROVED", "CHECKOUT.ORDER.COMPLETED", "CHECKOUT.ORDER.PROCESSED", "CHECKOUT.PAYMENT-APPROVAL.REVERSED", "CUSTOMER.DISPUTE.CREATED", "CUSTOMER.DISPUTE.RESOLVED", "CUSTOMER.DISPUTE.UPDATED", "PAYMENT.AUTHORIZATION.CREATED", "PAYMENT.AUTHORIZATION.VOIDED", "PAYMENT.CAPTURE.COMPLETED", "PAYMENT.CAPTURE.DECLINED", "PAYMENT.CAPTURE.PENDING", "PAYMENT.CAPTURE.REFUNDED", "PAYMENT.CAPTURE.REVERSED", "PAYMENT.REFUND.FAILED", "PAYMENT.REFUND.PENDING", "RISK.DISPUTE.CREATED", "VAULT.PAYMENT-TOKEN.CREATED", "VAULT.PAYMENT-TOKEN.DELETED", "VAULT.PAYMENT-TOKEN.DELETION-INITIATED"];
 export declare const ALPHAWEB_PRISM_COMPATIBILITY_MANIFEST: Readonly<{
-    readonly release: "0.1.0-rc.45";
+    readonly release: "0.1.0-rc.46";
     readonly upstreamCommit: "b07af7d9dac271de729548e74217ddcf895c602b";
     readonly medusaRange: ">=2.17.2 <2.18.0";
     readonly stripeApiVersion: "2026-06-24.dahlia";

package/dist/src/alphaweb/manifest.js

@@ -49,7 +49,7 @@ exports.ALPHAWEB_PAYPAL_WEBHOOK_EVENTS = Object.freeze([
     'VAULT.PAYMENT-TOKEN.DELETION-INITIATED',
 ]);
 exports.ALPHAWEB_PRISM_COMPATIBILITY_MANIFEST = Object.freeze({
-    release: '0.1.0-rc.45',
+    release: '0.1.0-rc.46',
     upstreamCommit: 'b07af7d9dac271de729548e74217ddcf895c602b',
     medusaRange: '>=2.17.2 <2.18.0',
     stripeApiVersion: '2026-06-24.dahlia',

package/dist/src/alphaweb/stripe-connector.d.ts

@@ -30,6 +30,7 @@ export declare class PrismStripeConnector implements PrismStripeConnectorV1 {
     private assertOperation;
     private recoverRepeatPayment;
     private stripeRequest;
+    private checkoutPaymentMethodSelection;
     createPayment(input: PrismMerchantOperation): Promise<PrismPaymentResult>;
     repeatPayment(input: PrismMerchantOperation): Promise<PrismPaymentResult>;
     retryPayment(input: PrismRetryPaymentInput): Promise<PrismPaymentResult>;

package/dist/src/alphaweb/stripe-connector.js

@@ -167,9 +167,8 @@ function buildResult(response, money, fallbackConnectorPaymentId = null) {
  * Package-owned intersection of Stripe's API support contract and the payment
  * method types represented by Prism's recurring-payment ABI.
  *
- * An interactive PaymentIntent can still use any method Stripe exposes through
- * automatic payment methods. This table only governs server-side reuse after
- * Stripe has attached the method to the proven Customer.
+ * One-time interactive payments retain Stripe's dynamic methods. Future-use
+ * checkout and server-side reuse share this capability authority.
  */
 const STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES = Object.freeze({
     amazon_pay: {
@@ -191,6 +190,7 @@ const STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES = Object.freeze({
         prismPaymentMethodType: proto_1.types.PaymentMethodType.IDEAL,
         supportsFutureUsage: true,
         supportsManualCapture: false,
+        requiresGeneratedDebit: true,
     },
     link: {
         prismPaymentMethodType: proto_1.types.PaymentMethodType.CREDIT,
@@ -207,6 +207,11 @@ const STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES = Object.freeze({
         supportsFutureUsage: true,
         supportsManualCapture: true,
     },
+    satispay: {
+        prismPaymentMethodType: proto_1.types.PaymentMethodType.SATISPAY,
+        supportsFutureUsage: true,
+        supportsManualCapture: true,
+    },
     sepa_debit: {
         prismPaymentMethodType: proto_1.types.PaymentMethodType.SEPA,
         supportsFutureUsage: true,
@@ -223,13 +228,20 @@ const STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES = Object.freeze({
         supportsManualCapture: false,
     },
 });
-function reusablePaymentMethodProfile(type) {
+function reusablePaymentMethodProfile(type, manualCapture = false) {
     const profile = STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES[type];
     if (!profile?.supportsFutureUsage) {
         throw configurationError('The saved Stripe payment method is not supported for a reusable Prism payment.', 'PRISM_REUSABLE_METHOD_UNSUPPORTED');
     }
+    if (manualCapture && !profile.supportsManualCapture) {
+        throw configurationError('The saved Stripe payment method does not support manual capture.', 'PRISM_REUSABLE_CAPTURE_UNSUPPORTED');
+    }
     return profile;
 }
+function supportsStripeFutureUse(profile, purposes) {
+    return profile.supportsFutureUsage &&
+        (!purposes.includes('post_purchase') || profile.supportsManualCapture);
+}
 const STRIPE_HARD_DECLINE_CODES = new Set([
     'authentication_required',
     'highest_risk_level',
@@ -749,6 +761,49 @@ class PrismStripeConnector {
             clearTimeout(timeout);
         }
     }
+    async checkoutPaymentMethodSelection(input) {
+        const purposes = input.futureUse?.purposes ??
+            (input.metadata.alphaweb_setup_future_usage === 'off_session' ? ['post_purchase'] : []);
+        if (purposes.length === 0)
+            return undefined;
+        const configurationId = input.methodSelection.kind === 'interactive_dynamic'
+            ? input.methodSelection.paymentMethodConfigurationId : undefined;
+        let configuration;
+        if (configurationId) {
+            configuration = recordOf(await this.stripeRequest('GET', `/payment_method_configurations/${encodeURIComponent(configurationId)}`));
+        }
+        else {
+            let after = null;
+            do {
+                const params = new URLSearchParams({ limit: '100', ...(after ? { starting_after: after } : {}) });
+                const page = recordOf(await this.stripeRequest('GET', `/payment_method_configurations?${params}`));
+                const configurations = Array.isArray(page.data) ? page.data.map(recordOf) : [];
+                configuration = configurations.find((entry) => entry.is_default === true);
+                if (configuration)
+                    break;
+                after = page.has_more === true ? stringOf(configurations.at(-1)?.id) : null;
+            } while (after);
+        }
+        const selectedId = stringOf(configuration?.id);
+        if (configuration?.active !== true || !selectedId) {
+            throw configurationError('Stripe payment method configuration is unavailable.', 'PRISM_METHOD_CONFIGURATION_UNAVAILABLE');
+        }
+        // Keep Stripe's configuration (including wallet controls). Translate our
+        // supported-flow table into native exclusions using Stripe's own method list.
+        const methods = Object.entries(configuration).filter(([, value]) => recordOf(value).display_preference);
+        const excludedPaymentMethodTypes = methods.filter(([type]) => {
+            // These configuration controls are card wallets/networks, not distinct PM types.
+            const method = ['apple_pay', 'google_pay', 'cartes_bancaires'].includes(type) ? 'card' : type;
+            const profile = STRIPE_REUSABLE_PAYMENT_METHOD_PROFILES[method];
+            return !profile || !supportsStripeFutureUse(profile, purposes) || profile.requiresGeneratedDebit ||
+                (input.metadata.alphaweb_capture_method === 'manual' && !profile.supportsManualCapture);
+        }).map(([type]) => type);
+        if (!methods.some(([type, value]) => !excludedPaymentMethodTypes.includes(type) &&
+            recordOf(value).available === true && recordOf(recordOf(value).display_preference).value === 'on')) {
+            throw configurationError('No enabled Stripe payment method supports this purchase and its future payments.', 'PRISM_PAYMENT_METHOD_FLOW_UNSUPPORTED');
+        }
+        return { paymentMethodConfigurationId: selectedId, excludedPaymentMethodTypes };
+    }
     async createPayment(input) {
         this.assertOperation(input);
         if (input.methodSelection.kind !== 'interactive_dynamic' || input.reusableReference) {
@@ -758,6 +813,7 @@ class PrismStripeConnector {
             throw configurationError('Interactive Stripe checkout requires a publishable key.', 'PRISM_PUBLISHABLE_KEY_REQUIRED');
         }
         try {
+            const methodSelection = await this.checkoutPaymentMethodSelection(input);
             const response = await this.dependencies.merchantAuthentication.createClientAuthenticationToken({
                 merchantClientSessionId: input.idempotencyKey,
                 testMode: this.options.environment === 'test',
@@ -771,7 +827,9 @@ class PrismStripeConnector {
                     captureMethod: input.metadata.alphaweb_capture_method === 'manual'
                         ? proto_1.types.CaptureMethod.MANUAL
                         : proto_1.types.CaptureMethod.AUTOMATIC,
-                    paymentMethodConfigurationId: input.methodSelection.paymentMethodConfigurationId,
+                    paymentMethodConfigurationId: methodSelection?.paymentMethodConfigurationId ??
+                        input.methodSelection.paymentMethodConfigurationId,
+                    excludedPaymentMethodTypes: methodSelection?.excludedPaymentMethodTypes,
                     merchantMetadata: operationMetadata(input),
                 },
             });
@@ -838,7 +896,7 @@ class PrismStripeConnector {
                     ? proto_1.types.CaptureMethod.MANUAL
                     : proto_1.types.CaptureMethod.AUTOMATIC,
                 connectorCustomerId: reference.connectorCustomerId,
-                paymentMethodType: reusablePaymentMethodProfile(paymentMethod.type).prismPaymentMethodType,
+                paymentMethodType: reusablePaymentMethodProfile(paymentMethod.type, input.metadata.alphaweb_capture_method === 'manual').prismPaymentMethodType,
                 offSession: true,
                 metadata: secret(JSON.stringify(operationMetadata(input))),
             });
@@ -892,7 +950,7 @@ class PrismStripeConnector {
             paymentMethod.livemode !== reference.livemode) {
             throw configurationError('Existing Stripe PaymentIntent is not eligible for this retry.', 'PRISM_RETRY_OWNERSHIP');
         }
-        reusablePaymentMethodProfile(paymentMethod.type);
+        reusablePaymentMethodProfile(paymentMethod.type, input.metadata.alphaweb_capture_method === 'manual');
         const body = new URLSearchParams({
             payment_method: reference.connectorPaymentMethodId,
             off_session: 'true',
@@ -989,7 +1047,7 @@ class PrismStripeConnector {
         }
         const requested = new Set(input.purposes);
         const capabilities = ['off_session'];
-        if (requested.has('post_purchase') && profile.supportsManualCapture) {
+        if (requested.has('post_purchase') && supportsStripeFutureUse(profile, ['post_purchase'])) {
             capabilities.push('post_purchase', 'manual_capture');
         }
         if (requested.has('subscription'))

package/dist/src/payments/generated/libconnector_service_ffi.so

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/src/payments/generated/libconnector_service_ffi.so
-size: 105627896 bytes
-sha256: 338db46bdefabbbfe0a0bad89f21961c800ddb7d2dca338005861f4c6a8c49d0
+size: 105630648 bytes
+sha256: 93607402e9d0d7ffa2a03ca3c6ca04573d10d767acc8dca694864c2f65280ffc

package/dist/src/payments/generated/proto.d.ts

@@ -14793,6 +14793,9 @@ export namespace types {
 
         /** PaymentClientAuthenticationContext merchantMetadata */
         merchantMetadata?: ({ [k: string]: string }|null);
+
+        /** Flow-specific exclusions; empty retains the connector's dynamic defaults. */
+        excludedPaymentMethodTypes?: (string[]|null);
     }
 
     /** Payment-specific context for client authentication token creation */
@@ -14843,6 +14846,9 @@ export namespace types {
         /** PaymentClientAuthenticationContext merchantMetadata. */
         public merchantMetadata: { [k: string]: string };
 
+        /** Flow-specific exclusions; empty retains the connector's dynamic defaults. */
+        public excludedPaymentMethodTypes: string[];
+
         /**
          * Creates a new PaymentClientAuthenticationContext instance using the specified properties.
          * @param [properties] Properties to set

package/dist/src/payments/generated/proto.js

@@ -45916,6 +45916,7 @@ $root.types = (function() {
          * @property {types.CaptureMethod|null} [captureMethod] PaymentClientAuthenticationContext captureMethod
          * @property {string|null} [paymentMethodConfigurationId] PaymentClientAuthenticationContext paymentMethodConfigurationId
          * @property {Object.<string,string>|null} [merchantMetadata] PaymentClientAuthenticationContext merchantMetadata
+         * @property {Array.<string>|null} [excludedPaymentMethodTypes] Flow-specific exclusions; empty retains the connector's dynamic defaults.
          */
 
         /**
@@ -45928,6 +45929,7 @@ $root.types = (function() {
          */
         function PaymentClientAuthenticationContext(properties) {
             this.merchantMetadata = {};
+            this.excludedPaymentMethodTypes = [];
             if (properties)
                 for (var keys = Object.keys(properties), i = 0; i < keys.length; ++i)
                     if (properties[keys[i]] != null && keys[i] !== "__proto__")
@@ -46038,6 +46040,14 @@ $root.types = (function() {
          */
         PaymentClientAuthenticationContext.prototype.merchantMetadata = $util.emptyObject;
 
+        /**
+         * Flow-specific exclusions; empty retains the connector's dynamic defaults.
+         * @member {Array.<string>} excludedPaymentMethodTypes
+         * @memberof types.PaymentClientAuthenticationContext
+         * @instance
+         */
+        PaymentClientAuthenticationContext.prototype.excludedPaymentMethodTypes = $util.emptyArray;
+
         // OneOf field names bound to virtual getters and setters
         var $oneOfFields;
 
@@ -46162,6 +46172,9 @@ $root.types = (function() {
             if (message.merchantMetadata != null && Object.hasOwnProperty.call(message, "merchantMetadata"))
                 for (var keys = Object.keys(message.merchantMetadata), i = 0; i < keys.length; ++i)
                     writer.uint32(/* id 13, wireType 2 =*/106).fork().uint32(/* id 1, wireType 2 =*/10).string(keys[i]).uint32(/* id 2, wireType 2 =*/18).string(message.merchantMetadata[keys[i]]).ldelim();
+            if (message.excludedPaymentMethodTypes != null && message.excludedPaymentMethodTypes.length)
+                for (var i = 0; i < message.excludedPaymentMethodTypes.length; ++i)
+                    writer.uint32(/* id 14, wireType 2 =*/114).string(message.excludedPaymentMethodTypes[i]);
             return writer;
         };
 
@@ -46262,6 +46275,12 @@ $root.types = (function() {
                         message.merchantMetadata[key] = value;
                         break;
                     }
+                case 14: {
+                        if (!(message.excludedPaymentMethodTypes && message.excludedPaymentMethodTypes.length))
+                            message.excludedPaymentMethodTypes = [];
+                        message.excludedPaymentMethodTypes.push(reader.string());
+                        break;
+                    }
                 default:
                     reader.skipType(tag & 7, long);
                     break;
@@ -46746,6 +46765,13 @@ $root.types = (function() {
                     if (!$util.isString(message.merchantMetadata[key[i]]))
                         return "merchantMetadata: string{k:string} expected";
             }
+            if (message.excludedPaymentMethodTypes != null && Object.hasOwnProperty.call(message, "excludedPaymentMethodTypes")) {
+                if (!Array.isArray(message.excludedPaymentMethodTypes))
+                    return "excludedPaymentMethodTypes: array expected";
+                for (var i = 0; i < message.excludedPaymentMethodTypes.length; ++i)
+                    if (!$util.isString(message.excludedPaymentMethodTypes[i]))
+                        return "excludedPaymentMethodTypes: string[] expected";
+            }
             return null;
         };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alphawebai/hs-prism",
-  "version": "0.1.0-rc.45",
+  "version": "0.1.0-rc.46",
   "description": "Hyperswitch Payments SDK — Node.js client for connector integrations via UniFFI FFI",
   "main": "dist/src/index.js",
   "exports": {