@appfunnel-dev/sdk 2.0.0-canary.0 → 2.0.0-canary.2

package/dist/chunk-LJYLGLFS.cjs

@@ -0,0 +1,153 @@
+'use strict';
+
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/commerce/capabilities.ts
+var INLINE_SURFACES = /* @__PURE__ */ new Set([
+  "express",
+  "element",
+  "embedded"
+]);
+function isInlineSurface(surface) {
+  return INLINE_SURFACES.has(surface);
+}
+var ON = { purchase: true, wallets: true, offSession: "reliable" };
+var MANAGED = { purchase: true, wallets: true, offSession: "conditional" };
+var ROUTED = { purchase: true, wallets: true, offSession: "conditional" };
+var ALL_UPSELLS = ["subscription", "one-time", "upgrade"];
+var PROVIDER_PROFILES = {
+  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on
+  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)
+  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.
+  // No provider "popup" surface.
+  stripe: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: false,
+    status: "full",
+    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED }
+  },
+  // Merchant-of-Record; card entry is always Paddle's frame → no own element/sheet/
+  // express. Off-session via subscription one-time charge / collection_mode, but
+  // **no 2nd concurrent subscription** (upgrade + one-time only), provider-initiated.
+  paddle: {
+    isMoR: true,
+    offSessionUpsells: ["one-time", "upgrade"],
+    tokenModel: "provider",
+    orchestrator: false,
+    status: "full",
+    surfaces: { embedded: ON, popup: ON, redirect: ON }
+  },
+  // Merchant-of-Record; iframe-only (no raw card field). Off-session works
+  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.
+  whop: {
+    isMoR: true,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "provider",
+    orchestrator: false,
+    status: "planned",
+    surfaces: { embedded: ON, redirect: ON, sheet: ON }
+  },
+  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.
+  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —
+  // the vault lives with whichever processor Primer routed to (data matches this
+  // comment as of 2026-07-02; it previously said conditional but coded reliable).
+  primer: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: true,
+    status: "planned",
+    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED }
+  },
+  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/
+  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.
+  // Strong native off-session (Recurring API). No popup.
+  solidgate: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: true,
+    status: "planned",
+    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON }
+  }
+};
+function surfacesFor(provider) {
+  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {});
+}
+function isMerchantOfRecord(provider) {
+  return PROVIDER_PROFILES[provider]?.isMoR ?? false;
+}
+function isOrchestrator(provider) {
+  return PROVIDER_PROFILES[provider]?.orchestrator ?? false;
+}
+function validateCheckout(provider, surface) {
+  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface];
+  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` };
+  return cap.purchase ? { ok: true } : { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` };
+}
+function validateUpsell(provider, paywallSurface, kind = "subscription") {
+  const profile = PROVIDER_PROFILES[provider];
+  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` };
+  if (!profile.offSessionUpsells.includes(kind)) {
+    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(", ")})` : "";
+    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` };
+  }
+  const cap = profile.surfaces[paywallSurface];
+  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` };
+  if (cap.offSession === "none") {
+    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` };
+  }
+  if (cap.offSession === "conditional") {
+    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline \u2014 prefer a reliable surface or wire an on-session fallback` };
+  }
+  return { ok: true };
+}
+function checkoutError(category, message, extra = {}) {
+  const retryable = extra.retryable ?? (category === "authentication_required" || category === "requires_payment_method" || category === "processing_error");
+  return { category, message, declineCode: extra.declineCode, retryable };
+}
+
+exports.INLINE_SURFACES = INLINE_SURFACES;
+exports.PROVIDER_PROFILES = PROVIDER_PROFILES;
+exports.__commonJS = __commonJS;
+exports.__export = __export;
+exports.__toESM = __toESM;
+exports.checkoutError = checkoutError;
+exports.isInlineSurface = isInlineSurface;
+exports.isMerchantOfRecord = isMerchantOfRecord;
+exports.isOrchestrator = isOrchestrator;
+exports.surfacesFor = surfacesFor;
+exports.validateCheckout = validateCheckout;
+exports.validateUpsell = validateUpsell;
+//# sourceMappingURL=chunk-LJYLGLFS.cjs.map
+//# sourceMappingURL=chunk-LJYLGLFS.cjs.map

package/dist/chunk-LJYLGLFS.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commerce/capabilities.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBO,IAAM,eAAA,uBAAoD,GAAA,CAAqB;AAAA,EACpF,SAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,OAAA,EAAmC;AACjE,EAAA,OAAO,eAAA,CAAgB,IAAI,OAAO,CAAA;AACpC;AAgDA,IAAM,KAAwB,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,UAAA,EAAW;AAEtF,IAAM,UAA6B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAE9F,IAAM,SAA4B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAC7F,IAAM,WAAA,GAA4B,CAAC,cAAA,EAAgB,UAAA,EAAY,SAAS,CAAA;AAmBjE,IAAM,iBAAA,GAA+D;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1E,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA,IACnG,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAA;AAAQ,GACxF;AAAA;AAAA;AAAA;AAAA,EAIA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,CAAC,UAAA,EAAY,SAAS,CAAA;AAAA,IAAG,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA,IAC9G,UAAU,EAAE,QAAA,EAAU,IAAI,KAAA,EAAO,EAAA,EAAI,UAAU,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA,EAGA,IAAA,EAAM;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,SAAA;AAAA,IAClG,UAAU,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,QAAA,EAAU,EAAE,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA;AAAO,GAChF;AAAA;AAAA;AAAA;AAAA,EAIA,SAAA,EAAW;AAAA,IACT,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA;AAAG;AAEhF;AAUO,SAAS,YAAY,QAAA,EAA+C;AACzE,EAAA,OAAO,OAAO,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA,IAAY,EAAE,CAAA;AAChE;AAGO,SAAS,mBAAmB,QAAA,EAAqC;AACtE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAA,IAAS,KAAA;AAC/C;AAGO,SAAS,eAAe,QAAA,EAAqC;AAClE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,YAAA,IAAgB,KAAA;AACtD;AAOO,SAAS,gBAAA,CAAiB,UAA4B,OAAA,EAA4C;AACvG,EAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,QAAQ,CAAA,EAAG,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,OAAO,CAAA,SAAA,CAAA,EAAY;AAChF,EAAA,OAAO,GAAA,CAAI,QAAA,GAAW,EAAE,EAAA,EAAI,MAAK,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,CAAA,EAAI,OAAO,CAAA,2BAAA,EAA8B,QAAQ,CAAA,CAAA,EAAG;AAChH;AAQO,SAAS,cAAA,CACd,QAAA,EACA,cAAA,EACA,IAAA,GAAmB,cAAA,EACD;AAClB,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,IAAI,CAAC,OAAA,CAAQ,iBAAA,CAAkB,QAAA,CAAS,IAAI,CAAA,EAAG;AAC7C,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,iBAAA,CAAkB,MAAA,GAAS,CAAA,eAAA,EAAkB,QAAQ,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC3G,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,iBAAA,EAAoB,IAAI,CAAA,oBAAA,EAAuB,GAAG,CAAA,CAAA,EAAG;AAAA,EAC9F;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,cAAc,CAAA;AAC3C,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,cAAc,CAAA,yBAAA,CAAA,EAA4B;AACvG,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,eAAA,EAAkB,cAAc,CAAA,4CAAA,CAAA,EAA+C;AAAA,EAC7G;AACA,EAAA,IAAI,GAAA,CAAI,eAAe,aAAA,EAAe;AACpC,IAAA,OAAO,EAAE,IAAI,IAAA,EAAM,IAAA,EAAM,4BAA4B,QAAQ,CAAA,EAAA,EAAK,cAAc,CAAA,6EAAA,CAAA,EAA2E;AAAA,EAC7J;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AA+BO,SAAS,aAAA,CACd,QAAA,EACA,OAAA,EACA,KAAA,GAAuD,EAAC,EACzC;AACf,EAAA,MAAM,YAAY,KAAA,CAAM,SAAA,KAAc,aAAa,yBAAA,IAA6B,QAAA,KAAa,6BAA6B,QAAA,KAAa,kBAAA,CAAA;AACvI,EAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,WAAA,EAAa,KAAA,CAAM,aAAa,SAAA,EAAU;AACxE","file":"chunk-LJYLGLFS.cjs","sourcesContent":["/**\n * The provider capability matrix + checkout error taxonomy — the PURE half of the\n * checkout seam, extracted from checkout.tsx so it ships through the **manifest\n * entry** (no React): the API's publish validation, the editor, AI authoring, and\n * local dev all run the SAME checks the runtime primitives use (phase-3 §3.1b —\n * \"the SDK ships this as data\"). The React half (driver seam, `useCheckout`,\n * `<Checkout>`/`<Upsell>`) stays in ./checkout, which re-exports everything here.\n */\n\nexport type CheckoutSurface =\n  | 'express' // wallet quick-buttons (Apple/Google Pay) — inline\n  | 'element' // inline card form — inline\n  | 'embedded' // provider-managed inline checkout — inline\n  | 'sheet' // bottom-sheet popup — opens on click\n  | 'popup' // provider-hosted overlay — opens on click\n  | 'redirect' // provider-hosted page — opens on click\n\nexport type CheckoutProvider = 'stripe' | 'paddle' | 'whop' | 'primer' | 'solidgate'\nexport type CheckoutIntent = 'purchase' | 'upsell'\n\n/** Surfaces that render inline (vs. those that open on click). */\nexport const INLINE_SURFACES: ReadonlySet<CheckoutSurface> = new Set<CheckoutSurface>([\n  'express',\n  'element',\n  'embedded',\n])\n\nexport function isInlineSurface(surface: CheckoutSurface): boolean {\n  return INLINE_SURFACES.has(surface)\n}\n\n/**\n * The kind of off-session upsell (researched against Funnelfox's changelog, which\n * ships these as distinct features). The discriminating real-world constraint is\n * **stacking a 2nd concurrent subscription** — Paddle can't, SolidGate/Stripe can.\n */\nexport type UpsellKind =\n  | 'subscription' // charge a NEW, 2nd concurrent subscription off-session (stacking)\n  | 'one-time' // charge a one-time add-on off-session\n  | 'upgrade' // change the existing subscription's plan\n\n/** Reliability of an off-session upsell charge AFTER a purchase on a surface. */\nexport type OffSessionReliability =\n  | 'reliable' // we hold the saved method (Stripe Elements / SolidGate) or the provider charges it (Paddle / Whop API)\n  | 'conditional' // possible but may decline — Stripe **managed** checkout (vault charge, SCA not guaranteed) or an orchestrator's PSP-dependent routing (Primer)\n  | 'none'\n\nexport interface SurfaceCapability {\n  purchase: boolean\n  /** Apple/Google Pay available on this surface. */\n  wallets: boolean\n  /** Reliability of an off-session upsell after a purchase on this surface. */\n  offSession: OffSessionReliability\n}\n\nexport interface ProviderProfile {\n  /** Merchant-of-Record (handles tax/compliance) vs. a PSP you settle through. */\n  isMoR: boolean\n  /** Upsell kinds this provider can charge off-session (one-click, no re-entry). */\n  offSessionUpsells: UpsellKind[]\n  /** Who charges the saved method off-session: you (PSP) or the provider (MoR/managed). */\n  tokenModel: 'merchant' | 'provider'\n  /** Routes across multiple processors (Primer; SolidGate also offers this) vs. a single acquirer. */\n  orchestrator: boolean\n  /**\n   * Driver tier (Wave-4 decision, Simon 2026-07-02): `full` = a real driver ships\n   * (Stripe, Paddle); `planned` = profile only — authoring/publish validate against\n   * it, but no charge path exists yet (Whop, Primer, SolidGate). A new provider\n   * becomes buildable by writing a driver; its profile already gates what authors\n   * can express, so funnels written today stay valid when the driver lands.\n   */\n  status: 'full' | 'planned'\n  /** Supported surfaces → per-surface capabilities. **Absent = not supported.** */\n  surfaces: Partial<Record<CheckoutSurface, SurfaceCapability>>\n}\n\n/** Reliable off-session after this surface (we/the provider hold a chargeable method). */\nconst ON: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable' }\n/** Stripe-managed checkout: a purchase works, but the off-session upsell may decline. */\nconst MANAGED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/** Orchestrator-routed (Primer): off-session depends on which PSP vaulted the method. */\nconst ROUTED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\nconst ALL_UPSELLS: UpsellKind[] = ['subscription', 'one-time', 'upgrade']\n\n/**\n * Provider capabilities (researched 2026-06-23 against provider docs + Funnelfox;\n * trial mechanics re-verified 2026-07-02, doc 09 §4.4).\n *\n * Three real-world corrections to the naive model:\n *  1. **Off-session upsell support is per-provider by *kind*** (`offSessionUpsells`):\n *     Paddle can't stack a 2nd concurrent subscription (upgrade + one-time only);\n *     Stripe/SolidGate/Whop/Primer can do all kinds.\n *  2. **Off-session *reliability* varies by the paywall surface** (`SurfaceCapability.\n *     offSession`): Stripe **managed** checkout (`embedded`/`redirect`) upsells as a\n *     direct charge against Stripe's vault → `conditional` (may decline); Elements\n *     surfaces are `reliable`. Primer is `conditional` everywhere (PSP-dependent).\n *  3. **Surface availability is a hard constraint.** MoR/managed providers can't\n *     expose a raw card field to your own UI: Paddle has no `express`/`element`/your\n *     `sheet`; Whop has no raw `element`/`express`; Primer has no hosted `redirect`;\n *     Stripe/SolidGate have no `popup`. A missing entry means \"not possible.\"\n */\nexport const PROVIDER_PROFILES: Record<CheckoutProvider, ProviderProfile> = {\n  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on\n  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)\n  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.\n  // No provider \"popup\" surface.\n  stripe: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: false, status: 'full',\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED },\n  },\n  // Merchant-of-Record; card entry is always Paddle's frame → no own element/sheet/\n  // express. Off-session via subscription one-time charge / collection_mode, but\n  // **no 2nd concurrent subscription** (upgrade + one-time only), provider-initiated.\n  paddle: {\n    isMoR: true, offSessionUpsells: ['one-time', 'upgrade'], tokenModel: 'provider', orchestrator: false, status: 'full',\n    surfaces: { embedded: ON, popup: ON, redirect: ON },\n  },\n  // Merchant-of-Record; iframe-only (no raw card field). Off-session works\n  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.\n  whop: {\n    isMoR: true, offSessionUpsells: ALL_UPSELLS, tokenModel: 'provider', orchestrator: false, status: 'planned',\n    surfaces: { embedded: ON, redirect: ON, sheet: ON },\n  },\n  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.\n  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —\n  // the vault lives with whichever processor Primer routed to (data matches this\n  // comment as of 2026-07-02; it previously said conditional but coded reliable).\n  primer: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED },\n  },\n  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/\n  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.\n  // Strong native off-session (Recurring API). No popup.\n  solidgate: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON },\n  },\n}\n\nexport interface ValidationResult {\n  ok: boolean\n  reason?: string\n  /** Non-fatal caveat (e.g. Paddle upgrade-only). */\n  note?: string\n}\n\n/** Surfaces a provider supports, for the editor/AI to steer authors. */\nexport function surfacesFor(provider: CheckoutProvider): CheckoutSurface[] {\n  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {}) as CheckoutSurface[]\n}\n\n/** Whether a provider is a Merchant of Record (it owns tax/compliance). */\nexport function isMerchantOfRecord(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.isMoR ?? false\n}\n\n/** Whether a provider routes across multiple processors (Primer, SolidGate). */\nexport function isOrchestrator(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.orchestrator ?? false\n}\n\n/**\n * Validate a (provider, surface) for a **purchase**: the surface must exist for\n * the provider and accept a payment. Surface availability is the real constraint\n * (e.g. Paddle has no `element`).\n */\nexport function validateCheckout(provider: CheckoutProvider, surface: CheckoutSurface): ValidationResult {\n  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` }\n  return cap.purchase ? { ok: true } : { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` }\n}\n\n/**\n * Validate an **off-session upsell** of `kind` after a purchase made on\n * `paywallSurface`. Combines provider support for the kind (Paddle can't stack a\n * 2nd subscription) with the paywall surface's off-session reliability (Stripe\n * managed checkout is `conditional` — returned as a `note`, not a hard block).\n */\nexport function validateUpsell(\n  provider: CheckoutProvider,\n  paywallSurface: CheckoutSurface,\n  kind: UpsellKind = 'subscription',\n): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  if (!profile.offSessionUpsells.includes(kind)) {\n    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(', ')})` : ''\n    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` }\n  }\n  const cap = profile.surfaces[paywallSurface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` }\n  if (cap.offSession === 'none') {\n    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` }\n  }\n  if (cap.offSession === 'conditional') {\n    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline — prefer a reliable surface or wire an on-session fallback` }\n  }\n  return { ok: true }\n}\n\n// ── Checkout error taxonomy (pure — drivers + server both normalize into it) ──\n\n/**\n * Normalized failure category — the driver/platform maps each provider's decline\n * codes into one of these so funnels can route/recover by reason. `authentication_\n * required` (3DS/SCA) and `requires_payment_method` are the cases an **off-session**\n * upsell can't satisfy → recover on-session (re-collect a card).\n */\nexport type CheckoutErrorCategory =\n  | 'card_declined'\n  | 'insufficient_funds'\n  | 'expired_card'\n  | 'prepaid_card' // card funding is prepaid — trials/subscriptions commonly decline; route to a real-card recapture page\n  | 'authentication_required' // SCA/3DS needed — off-session can't challenge\n  | 'requires_payment_method' // no usable saved method\n  | 'processing_error'\n  | 'canceled'\n  | 'unknown'\n\nexport interface CheckoutError {\n  category: CheckoutErrorCategory\n  message: string\n  /** Raw provider decline code, if any (e.g. Stripe `card_declined`/`insufficient_funds`). */\n  declineCode?: string\n  /** Whether re-attempting (e.g. an on-session re-collection) may succeed. */\n  retryable: boolean\n}\n\n/** Build a {@link CheckoutError} (driver/test helper). */\nexport function checkoutError(\n  category: CheckoutErrorCategory,\n  message: string,\n  extra: { declineCode?: string; retryable?: boolean } = {},\n): CheckoutError {\n  const retryable = extra.retryable ?? (category === 'authentication_required' || category === 'requires_payment_method' || category === 'processing_error')\n  return { category, message, declineCode: extra.declineCode, retryable }\n}\n"]}

package/dist/chunk-UIR6TGEW.js

@@ -0,0 +1,97 @@
+import { checkoutError } from './chunk-YY375F2B.js';
+
+// src/drivers/wire.ts
+function endpoint(ctx, path = "") {
+  const base = ctx.apiBase.replace(/\/+$/, "");
+  return `${base}/campaign/${encodeURIComponent(ctx.campaignId)}/v2/checkout${path}`;
+}
+async function postJson(url, body) {
+  const res = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  if (!res.ok) throw checkoutError("processing_error", `checkout request failed (HTTP ${res.status})`);
+  return await res.json();
+}
+function toCheckoutError(e) {
+  if (e && typeof e === "object" && "category" in e && "message" in e && "retryable" in e) {
+    return e;
+  }
+  return checkoutError("processing_error", e instanceof Error ? e.message : "Checkout request failed");
+}
+function postSession(ctx, req, correlationId) {
+  const body = {
+    funnelId: ctx.funnelId,
+    mode: ctx.mode,
+    productKey: req.product,
+    intent: req.intent,
+    kind: req.kind,
+    // null (not absent) = explicit off-session — the server validates surfaces
+    // against the capability matrix, so never let one default in transit.
+    surface: req.surface ?? null,
+    sessionId: ctx.sessionId ?? void 0,
+    visitorId: ctx.visitorId ?? void 0,
+    // Buyer email collected by the funnel (user.email) — Stripe Customer creation,
+    // receipts, Paddle prefill. Injected at attempt time by the FunnelProvider seam.
+    email: req.email,
+    correlationId
+  };
+  return postJson(endpoint(ctx), body);
+}
+function postComplete(ctx, correlationId, providerRef) {
+  const body = { providerRef };
+  return postJson(
+    endpoint(ctx, `/${encodeURIComponent(correlationId)}/complete`),
+    body
+  );
+}
+function settlementToResult(s) {
+  return { ok: true, amountMinor: s.amountMinor, currency: s.currency, eventId: s.eventId };
+}
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function completeWithPoll(ctx, correlationId, opts = {}) {
+  const attempts = opts.attempts ?? 5;
+  const intervalMs = opts.intervalMs ?? 2e3;
+  try {
+    for (let i = 0; i < attempts; i++) {
+      const res = await postComplete(ctx, correlationId, opts.providerRef);
+      if (res.step === "settled") return settlementToResult(res.result);
+      if (res.step === "failed") return { ok: false, error: res.error };
+      if (i < attempts - 1) await sleep(intervalMs);
+    }
+  } catch (e) {
+    return { ok: false, error: toCheckoutError(e) };
+  }
+  return {
+    ok: false,
+    error: checkoutError(
+      "processing_error",
+      opts.timeoutMessage ?? "The payment has not been confirmed yet \u2014 please check back shortly.",
+      // `completion_timeout` marks "the poll ran out while the attempt was still
+      // pending" — drivers key double-charge guards on it (the attempt may still
+      // settle server-side; it was never refused).
+      { retryable: true, declineCode: "completion_timeout" }
+    )
+  };
+}
+function leaveForRedirect(url) {
+  return new Promise((resolve) => {
+    if (typeof window !== "undefined") {
+      const onPageshow = (event) => {
+        if (!event.persisted) return;
+        window.removeEventListener("pageshow", onPageshow);
+        resolve({
+          ok: false,
+          error: checkoutError("canceled", "Returned from the hosted checkout without completing")
+        });
+      };
+      window.addEventListener("pageshow", onPageshow);
+    }
+    window.location.assign(url);
+  });
+}
+
+export { completeWithPoll, leaveForRedirect, postComplete, postSession, settlementToResult, toCheckoutError };
+//# sourceMappingURL=chunk-UIR6TGEW.js.map
+//# sourceMappingURL=chunk-UIR6TGEW.js.map

package/dist/chunk-UIR6TGEW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/drivers/wire.ts"],"names":[],"mappings":";;;AAqBA,SAAS,QAAA,CAAS,GAAA,EAA4B,IAAA,GAAO,EAAA,EAAY;AAC/D,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC3C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,kBAAA,CAAmB,IAAI,UAAU,CAAC,eAAe,IAAI,CAAA,CAAA;AAClF;AAEA,eAAe,QAAA,CAAY,KAAa,IAAA,EAA2B;AACjE,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAC3B,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC1B,CAAA;AAGD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,cAAc,kBAAA,EAAoB,CAAA,8BAAA,EAAiC,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACnG,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AACzB;AAGO,SAAS,gBAAgB,CAAA,EAA2B;AACzD,EAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAY,cAAc,CAAA,IAAK,SAAA,IAAa,CAAA,IAAK,WAAA,IAAe,CAAA,EAAG;AACvF,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,cAAc,kBAAA,EAAoB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,yBAAyB,CAAA;AACrG;AAOO,SAAS,WAAA,CACd,GAAA,EACA,GAAA,EACA,aAAA,EACkC;AAClC,EAAA,MAAM,IAAA,GAA+B;AAAA,IACnC,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,YAAY,GAAA,CAAI,OAAA;AAAA,IAChB,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,MAAM,GAAA,CAAI,IAAA;AAAA;AAAA;AAAA,IAGV,OAAA,EAAS,IAAI,OAAA,IAAW,IAAA;AAAA,IACxB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,IAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA;AAAA;AAAA,IAG5B,OAAO,GAAA,CAAI,KAAA;AAAA,IACX;AAAA,GACF;AACA,EAAA,OAAO,QAAA,CAAkC,QAAA,CAAS,GAAG,CAAA,EAAG,IAAI,CAAA;AAC9D;AAGO,SAAS,YAAA,CACd,GAAA,EACA,aAAA,EACA,WAAA,EACmC;AACnC,EAAA,MAAM,IAAA,GAAgC,EAAE,WAAA,EAAY;AACpD,EAAA,OAAO,QAAA;AAAA,IACL,SAAS,GAAA,EAAK,CAAA,CAAA,EAAI,kBAAA,CAAmB,aAAa,CAAC,CAAA,SAAA,CAAW,CAAA;AAAA,IAC9D;AAAA,GACF;AACF;AAGO,SAAS,mBAAmB,CAAA,EAAuC;AACxE,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,WAAA,EAAa,CAAA,CAAE,WAAA,EAAa,QAAA,EAAU,CAAA,CAAE,QAAA,EAAU,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ;AAC1F;AAYA,IAAM,KAAA,GAAQ,CAAC,EAAA,KAAe,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAUpF,eAAsB,gBAAA,CACpB,GAAA,EACA,aAAA,EACA,IAAA,GAA4B,EAAC,EACJ;AACzB,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,GAAA;AACtC,EAAA,IAAI;AACF,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,MAAM,MAAM,YAAA,CAAa,GAAA,EAAK,aAAA,EAAe,KAAK,WAAW,CAAA;AACnE,MAAA,IAAI,IAAI,IAAA,KAAS,SAAA,EAAW,OAAO,kBAAA,CAAmB,IAAI,MAAM,CAAA;AAChE,MAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM;AAChE,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,MAAM,UAAU,CAAA;AAAA,IAC9C;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,eAAA,CAAgB,CAAC,CAAA,EAAE;AAAA,EAChD;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,KAAA,EAAO,aAAA;AAAA,MACL,kBAAA;AAAA,MACA,KAAK,cAAA,IAAkB,0EAAA;AAAA;AAAA;AAAA;AAAA,MAIvB,EAAE,SAAA,EAAW,IAAA,EAAM,WAAA,EAAa,oBAAA;AAAqB;AACvD,GACF;AACF;AAkBO,SAAS,iBAAiB,GAAA,EAAsC;AACrE,EAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,KAAY;AAC9C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAA+B;AACjD,QAAA,IAAI,CAAC,MAAM,SAAA,EAAW;AACtB,QAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,UAAU,CAAA;AACjD,QAAA,OAAA,CAAQ;AAAA,UACN,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,aAAA,CAAc,UAAA,EAAY,sDAAsD;AAAA,SACxF,CAAA;AAAA,MACH,CAAA;AACA,MAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,UAAU,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAC5B,CAAC,CAAA;AACH","file":"chunk-UIR6TGEW.js","sourcesContent":["/**\n * Shared wire plumbing for the checkout drivers — the CLIENT half of the v2\n * checkout contract (commerce/checkout-api.ts). Lives under drivers/ (not\n * commerce/) on purpose: it ships only inside the `driver-*` subpath entries,\n * so the core funnel entry never bundles a checkout fetch — the core SDK talks\n * to a {@link CheckoutDriver}, never to the wire.\n *\n * Only `import type` from commerce/checkout(.tsx) here — a runtime import would\n * drag the React checkout primitives into every driver chunk. The one runtime\n * dependency is the pure error taxonomy (capabilities.ts).\n */\nimport type {\n  CheckoutCompleteRequest,\n  CheckoutCompleteResponse,\n  CheckoutSessionRequest,\n  CheckoutSessionResponse,\n  CheckoutSettlement,\n} from '../commerce/checkout-api'\nimport type { CheckoutDriverContext, CheckoutRequest, CheckoutResult } from '../commerce/checkout'\nimport { checkoutError, type CheckoutError } from '../commerce/capabilities'\n\nfunction endpoint(ctx: CheckoutDriverContext, path = ''): string {\n  const base = ctx.apiBase.replace(/\\/+$/, '')\n  return `${base}/campaign/${encodeURIComponent(ctx.campaignId)}/v2/checkout${path}`\n}\n\nasync function postJson<T>(url: string, body: unknown): Promise<T> {\n  const res = await fetch(url, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  })\n  // The contract speaks in `step` responses, not HTTP errors — a non-2xx means the\n  // request never reached the checkout service properly (proxy, deploy, outage).\n  if (!res.ok) throw checkoutError('processing_error', `checkout request failed (HTTP ${res.status})`)\n  return (await res.json()) as T\n}\n\n/** Normalize any thrown value into the taxonomy (network drops → `processing_error`). */\nexport function toCheckoutError(e: unknown): CheckoutError {\n  if (e && typeof e === 'object' && 'category' in e && 'message' in e && 'retryable' in e) {\n    return e as CheckoutError\n  }\n  return checkoutError('processing_error', e instanceof Error ? e.message : 'Checkout request failed')\n}\n\n/**\n * Open a checkout attempt: `POST {apiBase}/campaign/{campaignId}/v2/checkout`.\n * The correlationId is client-minted per ATTEMPT (idempotency key + the id the\n * server stamps into provider metadata) — mint it once, reuse it on retries.\n */\nexport function postSession(\n  ctx: CheckoutDriverContext,\n  req: CheckoutRequest,\n  correlationId: string,\n): Promise<CheckoutSessionResponse> {\n  const body: CheckoutSessionRequest = {\n    funnelId: ctx.funnelId,\n    mode: ctx.mode,\n    productKey: req.product,\n    intent: req.intent,\n    kind: req.kind,\n    // null (not absent) = explicit off-session — the server validates surfaces\n    // against the capability matrix, so never let one default in transit.\n    surface: req.surface ?? null,\n    sessionId: ctx.sessionId ?? undefined,\n    visitorId: ctx.visitorId ?? undefined,\n    // Buyer email collected by the funnel (user.email) — Stripe Customer creation,\n    // receipts, Paddle prefill. Injected at attempt time by the FunnelProvider seam.\n    email: req.email,\n    correlationId,\n  }\n  return postJson<CheckoutSessionResponse>(endpoint(ctx), body)\n}\n\n/** Ask the server to VERIFY with the provider and write the money facts (idempotent). */\nexport function postComplete(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  providerRef?: string,\n): Promise<CheckoutCompleteResponse> {\n  const body: CheckoutCompleteRequest = { providerRef }\n  return postJson<CheckoutCompleteResponse>(\n    endpoint(ctx, `/${encodeURIComponent(correlationId)}/complete`),\n    body,\n  )\n}\n\n/** Server settlement → the SDK's CheckoutResult (eventId passes through for pixel dedup). */\nexport function settlementToResult(s: CheckoutSettlement): CheckoutResult {\n  return { ok: true, amountMinor: s.amountMinor, currency: s.currency, eventId: s.eventId }\n}\n\nexport interface CompletePollOptions {\n  providerRef?: string\n  /** Total complete attempts before giving up (default 5). */\n  attempts?: number\n  /** Delay between attempts (default 2000ms). */\n  intervalMs?: number\n  /** Error message when the provider hasn't confirmed inside the window (MoR/async). */\n  timeoutMessage?: string\n}\n\nconst sleep = (ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms))\n\n/**\n * Complete with a bounded poll. Sync providers (Stripe) settle on the first\n * attempt — the server verifies against the provider inline. MoR/async providers\n * (Paddle) settle via webhook, so `pending` is normal: re-poll a few times, then\n * stop holding the UI hostage — the charge may still land server-side, which is\n * why the timeout error is `retryable` and the message should say the receipt\n * can still arrive (the server's money facts don't depend on this browser).\n */\nexport async function completeWithPoll(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  opts: CompletePollOptions = {},\n): Promise<CheckoutResult> {\n  const attempts = opts.attempts ?? 5\n  const intervalMs = opts.intervalMs ?? 2000\n  try {\n    for (let i = 0; i < attempts; i++) {\n      const res = await postComplete(ctx, correlationId, opts.providerRef)\n      if (res.step === 'settled') return settlementToResult(res.result)\n      if (res.step === 'failed') return { ok: false, error: res.error }\n      if (i < attempts - 1) await sleep(intervalMs)\n    }\n  } catch (e) {\n    return { ok: false, error: toCheckoutError(e) }\n  }\n  return {\n    ok: false,\n    error: checkoutError(\n      'processing_error',\n      opts.timeoutMessage ?? 'The payment has not been confirmed yet — please check back shortly.',\n      // `completion_timeout` marks \"the poll ran out while the attempt was still\n      // pending\" — drivers key double-charge guards on it (the attempt may still\n      // settle server-side; it was never refused).\n      { retryable: true, declineCode: 'completion_timeout' },\n    ),\n  }\n}\n\n/**\n * The `redirect` step hand-off: navigate to the provider-hosted page and return a\n * promise that settles ONLY if the buyer comes back to this very page. The page\n * is leaving — resolving early would fire `purchase.complete`/navigation for a\n * charge that hasn't happened, and rejecting would flash an error during the\n * (successful) hand-off — so while the navigation proceeds the promise stays\n * pending and `useCheckout` stays in `loading`, the truthful UI for a page\n * mid-navigation. The hosted page's SUCCESS return URL re-enters the funnel with\n * `af_checkout={correlationId}` (a fresh load — this promise is gone; the SDK's\n * resume leg settles the attempt).\n *\n * The one way THIS page comes back to life is a bfcache restore (browser Back\n * from the hosted page): `pageshow` with `persisted: true`. That is a buyer who\n * abandoned the hosted checkout — resolve `canceled` so the trigger re-enables\n * and inline redirect placeholders recover instead of spinning forever.\n */\nexport function leaveForRedirect(url: string): Promise<CheckoutResult> {\n  return new Promise<CheckoutResult>((resolve) => {\n    if (typeof window !== 'undefined') {\n      const onPageshow = (event: PageTransitionEvent) => {\n        if (!event.persisted) return\n        window.removeEventListener('pageshow', onPageshow)\n        resolve({\n          ok: false,\n          error: checkoutError('canceled', 'Returned from the hosted checkout without completing'),\n        })\n      }\n      window.addEventListener('pageshow', onPageshow)\n    }\n    window.location.assign(url)\n  })\n}\n"]}

package/dist/chunk-VQOD2Z6Q.cjs

@@ -0,0 +1,104 @@
+'use strict';
+
+var chunkLJYLGLFS_cjs = require('./chunk-LJYLGLFS.cjs');
+
+// src/drivers/wire.ts
+function endpoint(ctx, path = "") {
+  const base = ctx.apiBase.replace(/\/+$/, "");
+  return `${base}/campaign/${encodeURIComponent(ctx.campaignId)}/v2/checkout${path}`;
+}
+async function postJson(url, body) {
+  const res = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  if (!res.ok) throw chunkLJYLGLFS_cjs.checkoutError("processing_error", `checkout request failed (HTTP ${res.status})`);
+  return await res.json();
+}
+function toCheckoutError(e) {
+  if (e && typeof e === "object" && "category" in e && "message" in e && "retryable" in e) {
+    return e;
+  }
+  return chunkLJYLGLFS_cjs.checkoutError("processing_error", e instanceof Error ? e.message : "Checkout request failed");
+}
+function postSession(ctx, req, correlationId) {
+  const body = {
+    funnelId: ctx.funnelId,
+    mode: ctx.mode,
+    productKey: req.product,
+    intent: req.intent,
+    kind: req.kind,
+    // null (not absent) = explicit off-session — the server validates surfaces
+    // against the capability matrix, so never let one default in transit.
+    surface: req.surface ?? null,
+    sessionId: ctx.sessionId ?? void 0,
+    visitorId: ctx.visitorId ?? void 0,
+    // Buyer email collected by the funnel (user.email) — Stripe Customer creation,
+    // receipts, Paddle prefill. Injected at attempt time by the FunnelProvider seam.
+    email: req.email,
+    correlationId
+  };
+  return postJson(endpoint(ctx), body);
+}
+function postComplete(ctx, correlationId, providerRef) {
+  const body = { providerRef };
+  return postJson(
+    endpoint(ctx, `/${encodeURIComponent(correlationId)}/complete`),
+    body
+  );
+}
+function settlementToResult(s) {
+  return { ok: true, amountMinor: s.amountMinor, currency: s.currency, eventId: s.eventId };
+}
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function completeWithPoll(ctx, correlationId, opts = {}) {
+  const attempts = opts.attempts ?? 5;
+  const intervalMs = opts.intervalMs ?? 2e3;
+  try {
+    for (let i = 0; i < attempts; i++) {
+      const res = await postComplete(ctx, correlationId, opts.providerRef);
+      if (res.step === "settled") return settlementToResult(res.result);
+      if (res.step === "failed") return { ok: false, error: res.error };
+      if (i < attempts - 1) await sleep(intervalMs);
+    }
+  } catch (e) {
+    return { ok: false, error: toCheckoutError(e) };
+  }
+  return {
+    ok: false,
+    error: chunkLJYLGLFS_cjs.checkoutError(
+      "processing_error",
+      opts.timeoutMessage ?? "The payment has not been confirmed yet \u2014 please check back shortly.",
+      // `completion_timeout` marks "the poll ran out while the attempt was still
+      // pending" — drivers key double-charge guards on it (the attempt may still
+      // settle server-side; it was never refused).
+      { retryable: true, declineCode: "completion_timeout" }
+    )
+  };
+}
+function leaveForRedirect(url) {
+  return new Promise((resolve) => {
+    if (typeof window !== "undefined") {
+      const onPageshow = (event) => {
+        if (!event.persisted) return;
+        window.removeEventListener("pageshow", onPageshow);
+        resolve({
+          ok: false,
+          error: chunkLJYLGLFS_cjs.checkoutError("canceled", "Returned from the hosted checkout without completing")
+        });
+      };
+      window.addEventListener("pageshow", onPageshow);
+    }
+    window.location.assign(url);
+  });
+}
+
+exports.completeWithPoll = completeWithPoll;
+exports.leaveForRedirect = leaveForRedirect;
+exports.postComplete = postComplete;
+exports.postSession = postSession;
+exports.settlementToResult = settlementToResult;
+exports.toCheckoutError = toCheckoutError;
+//# sourceMappingURL=chunk-VQOD2Z6Q.cjs.map
+//# sourceMappingURL=chunk-VQOD2Z6Q.cjs.map

package/dist/chunk-VQOD2Z6Q.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/drivers/wire.ts"],"names":["checkoutError"],"mappings":";;;;;AAqBA,SAAS,QAAA,CAAS,GAAA,EAA4B,IAAA,GAAO,EAAA,EAAY;AAC/D,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC3C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,kBAAA,CAAmB,IAAI,UAAU,CAAC,eAAe,IAAI,CAAA,CAAA;AAClF;AAEA,eAAe,QAAA,CAAY,KAAa,IAAA,EAA2B;AACjE,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAC3B,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC1B,CAAA;AAGD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAMA,gCAAc,kBAAA,EAAoB,CAAA,8BAAA,EAAiC,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACnG,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AACzB;AAGO,SAAS,gBAAgB,CAAA,EAA2B;AACzD,EAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAY,cAAc,CAAA,IAAK,SAAA,IAAa,CAAA,IAAK,WAAA,IAAe,CAAA,EAAG;AACvF,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAOA,gCAAc,kBAAA,EAAoB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,yBAAyB,CAAA;AACrG;AAOO,SAAS,WAAA,CACd,GAAA,EACA,GAAA,EACA,aAAA,EACkC;AAClC,EAAA,MAAM,IAAA,GAA+B;AAAA,IACnC,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,YAAY,GAAA,CAAI,OAAA;AAAA,IAChB,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,MAAM,GAAA,CAAI,IAAA;AAAA;AAAA;AAAA,IAGV,OAAA,EAAS,IAAI,OAAA,IAAW,IAAA;AAAA,IACxB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,IAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA;AAAA;AAAA,IAG5B,OAAO,GAAA,CAAI,KAAA;AAAA,IACX;AAAA,GACF;AACA,EAAA,OAAO,QAAA,CAAkC,QAAA,CAAS,GAAG,CAAA,EAAG,IAAI,CAAA;AAC9D;AAGO,SAAS,YAAA,CACd,GAAA,EACA,aAAA,EACA,WAAA,EACmC;AACnC,EAAA,MAAM,IAAA,GAAgC,EAAE,WAAA,EAAY;AACpD,EAAA,OAAO,QAAA;AAAA,IACL,SAAS,GAAA,EAAK,CAAA,CAAA,EAAI,kBAAA,CAAmB,aAAa,CAAC,CAAA,SAAA,CAAW,CAAA;AAAA,IAC9D;AAAA,GACF;AACF;AAGO,SAAS,mBAAmB,CAAA,EAAuC;AACxE,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,WAAA,EAAa,CAAA,CAAE,WAAA,EAAa,QAAA,EAAU,CAAA,CAAE,QAAA,EAAU,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ;AAC1F;AAYA,IAAM,KAAA,GAAQ,CAAC,EAAA,KAAe,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAUpF,eAAsB,gBAAA,CACpB,GAAA,EACA,aAAA,EACA,IAAA,GAA4B,EAAC,EACJ;AACzB,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,GAAA;AACtC,EAAA,IAAI;AACF,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,MAAM,MAAM,YAAA,CAAa,GAAA,EAAK,aAAA,EAAe,KAAK,WAAW,CAAA;AACnE,MAAA,IAAI,IAAI,IAAA,KAAS,SAAA,EAAW,OAAO,kBAAA,CAAmB,IAAI,MAAM,CAAA;AAChE,MAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM;AAChE,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,MAAM,UAAU,CAAA;AAAA,IAC9C;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,eAAA,CAAgB,CAAC,CAAA,EAAE;AAAA,EAChD;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,KAAA,EAAOA,+BAAA;AAAA,MACL,kBAAA;AAAA,MACA,KAAK,cAAA,IAAkB,0EAAA;AAAA;AAAA;AAAA;AAAA,MAIvB,EAAE,SAAA,EAAW,IAAA,EAAM,WAAA,EAAa,oBAAA;AAAqB;AACvD,GACF;AACF;AAkBO,SAAS,iBAAiB,GAAA,EAAsC;AACrE,EAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,KAAY;AAC9C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAA+B;AACjD,QAAA,IAAI,CAAC,MAAM,SAAA,EAAW;AACtB,QAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,UAAU,CAAA;AACjD,QAAA,OAAA,CAAQ;AAAA,UACN,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAOA,+BAAA,CAAc,UAAA,EAAY,sDAAsD;AAAA,SACxF,CAAA;AAAA,MACH,CAAA;AACA,MAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,UAAU,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAC5B,CAAC,CAAA;AACH","file":"chunk-VQOD2Z6Q.cjs","sourcesContent":["/**\n * Shared wire plumbing for the checkout drivers — the CLIENT half of the v2\n * checkout contract (commerce/checkout-api.ts). Lives under drivers/ (not\n * commerce/) on purpose: it ships only inside the `driver-*` subpath entries,\n * so the core funnel entry never bundles a checkout fetch — the core SDK talks\n * to a {@link CheckoutDriver}, never to the wire.\n *\n * Only `import type` from commerce/checkout(.tsx) here — a runtime import would\n * drag the React checkout primitives into every driver chunk. The one runtime\n * dependency is the pure error taxonomy (capabilities.ts).\n */\nimport type {\n  CheckoutCompleteRequest,\n  CheckoutCompleteResponse,\n  CheckoutSessionRequest,\n  CheckoutSessionResponse,\n  CheckoutSettlement,\n} from '../commerce/checkout-api'\nimport type { CheckoutDriverContext, CheckoutRequest, CheckoutResult } from '../commerce/checkout'\nimport { checkoutError, type CheckoutError } from '../commerce/capabilities'\n\nfunction endpoint(ctx: CheckoutDriverContext, path = ''): string {\n  const base = ctx.apiBase.replace(/\\/+$/, '')\n  return `${base}/campaign/${encodeURIComponent(ctx.campaignId)}/v2/checkout${path}`\n}\n\nasync function postJson<T>(url: string, body: unknown): Promise<T> {\n  const res = await fetch(url, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  })\n  // The contract speaks in `step` responses, not HTTP errors — a non-2xx means the\n  // request never reached the checkout service properly (proxy, deploy, outage).\n  if (!res.ok) throw checkoutError('processing_error', `checkout request failed (HTTP ${res.status})`)\n  return (await res.json()) as T\n}\n\n/** Normalize any thrown value into the taxonomy (network drops → `processing_error`). */\nexport function toCheckoutError(e: unknown): CheckoutError {\n  if (e && typeof e === 'object' && 'category' in e && 'message' in e && 'retryable' in e) {\n    return e as CheckoutError\n  }\n  return checkoutError('processing_error', e instanceof Error ? e.message : 'Checkout request failed')\n}\n\n/**\n * Open a checkout attempt: `POST {apiBase}/campaign/{campaignId}/v2/checkout`.\n * The correlationId is client-minted per ATTEMPT (idempotency key + the id the\n * server stamps into provider metadata) — mint it once, reuse it on retries.\n */\nexport function postSession(\n  ctx: CheckoutDriverContext,\n  req: CheckoutRequest,\n  correlationId: string,\n): Promise<CheckoutSessionResponse> {\n  const body: CheckoutSessionRequest = {\n    funnelId: ctx.funnelId,\n    mode: ctx.mode,\n    productKey: req.product,\n    intent: req.intent,\n    kind: req.kind,\n    // null (not absent) = explicit off-session — the server validates surfaces\n    // against the capability matrix, so never let one default in transit.\n    surface: req.surface ?? null,\n    sessionId: ctx.sessionId ?? undefined,\n    visitorId: ctx.visitorId ?? undefined,\n    // Buyer email collected by the funnel (user.email) — Stripe Customer creation,\n    // receipts, Paddle prefill. Injected at attempt time by the FunnelProvider seam.\n    email: req.email,\n    correlationId,\n  }\n  return postJson<CheckoutSessionResponse>(endpoint(ctx), body)\n}\n\n/** Ask the server to VERIFY with the provider and write the money facts (idempotent). */\nexport function postComplete(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  providerRef?: string,\n): Promise<CheckoutCompleteResponse> {\n  const body: CheckoutCompleteRequest = { providerRef }\n  return postJson<CheckoutCompleteResponse>(\n    endpoint(ctx, `/${encodeURIComponent(correlationId)}/complete`),\n    body,\n  )\n}\n\n/** Server settlement → the SDK's CheckoutResult (eventId passes through for pixel dedup). */\nexport function settlementToResult(s: CheckoutSettlement): CheckoutResult {\n  return { ok: true, amountMinor: s.amountMinor, currency: s.currency, eventId: s.eventId }\n}\n\nexport interface CompletePollOptions {\n  providerRef?: string\n  /** Total complete attempts before giving up (default 5). */\n  attempts?: number\n  /** Delay between attempts (default 2000ms). */\n  intervalMs?: number\n  /** Error message when the provider hasn't confirmed inside the window (MoR/async). */\n  timeoutMessage?: string\n}\n\nconst sleep = (ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms))\n\n/**\n * Complete with a bounded poll. Sync providers (Stripe) settle on the first\n * attempt — the server verifies against the provider inline. MoR/async providers\n * (Paddle) settle via webhook, so `pending` is normal: re-poll a few times, then\n * stop holding the UI hostage — the charge may still land server-side, which is\n * why the timeout error is `retryable` and the message should say the receipt\n * can still arrive (the server's money facts don't depend on this browser).\n */\nexport async function completeWithPoll(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  opts: CompletePollOptions = {},\n): Promise<CheckoutResult> {\n  const attempts = opts.attempts ?? 5\n  const intervalMs = opts.intervalMs ?? 2000\n  try {\n    for (let i = 0; i < attempts; i++) {\n      const res = await postComplete(ctx, correlationId, opts.providerRef)\n      if (res.step === 'settled') return settlementToResult(res.result)\n      if (res.step === 'failed') return { ok: false, error: res.error }\n      if (i < attempts - 1) await sleep(intervalMs)\n    }\n  } catch (e) {\n    return { ok: false, error: toCheckoutError(e) }\n  }\n  return {\n    ok: false,\n    error: checkoutError(\n      'processing_error',\n      opts.timeoutMessage ?? 'The payment has not been confirmed yet — please check back shortly.',\n      // `completion_timeout` marks \"the poll ran out while the attempt was still\n      // pending\" — drivers key double-charge guards on it (the attempt may still\n      // settle server-side; it was never refused).\n      { retryable: true, declineCode: 'completion_timeout' },\n    ),\n  }\n}\n\n/**\n * The `redirect` step hand-off: navigate to the provider-hosted page and return a\n * promise that settles ONLY if the buyer comes back to this very page. The page\n * is leaving — resolving early would fire `purchase.complete`/navigation for a\n * charge that hasn't happened, and rejecting would flash an error during the\n * (successful) hand-off — so while the navigation proceeds the promise stays\n * pending and `useCheckout` stays in `loading`, the truthful UI for a page\n * mid-navigation. The hosted page's SUCCESS return URL re-enters the funnel with\n * `af_checkout={correlationId}` (a fresh load — this promise is gone; the SDK's\n * resume leg settles the attempt).\n *\n * The one way THIS page comes back to life is a bfcache restore (browser Back\n * from the hosted page): `pageshow` with `persisted: true`. That is a buyer who\n * abandoned the hosted checkout — resolve `canceled` so the trigger re-enables\n * and inline redirect placeholders recover instead of spinning forever.\n */\nexport function leaveForRedirect(url: string): Promise<CheckoutResult> {\n  return new Promise<CheckoutResult>((resolve) => {\n    if (typeof window !== 'undefined') {\n      const onPageshow = (event: PageTransitionEvent) => {\n        if (!event.persisted) return\n        window.removeEventListener('pageshow', onPageshow)\n        resolve({\n          ok: false,\n          error: checkoutError('canceled', 'Returned from the hosted checkout without completing'),\n        })\n      }\n      window.addEventListener('pageshow', onPageshow)\n    }\n    window.location.assign(url)\n  })\n}\n"]}

package/dist/chunk-YY375F2B.js

@@ -0,0 +1,140 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/commerce/capabilities.ts
+var INLINE_SURFACES = /* @__PURE__ */ new Set([
+  "express",
+  "element",
+  "embedded"
+]);
+function isInlineSurface(surface) {
+  return INLINE_SURFACES.has(surface);
+}
+var ON = { purchase: true, wallets: true, offSession: "reliable" };
+var MANAGED = { purchase: true, wallets: true, offSession: "conditional" };
+var ROUTED = { purchase: true, wallets: true, offSession: "conditional" };
+var ALL_UPSELLS = ["subscription", "one-time", "upgrade"];
+var PROVIDER_PROFILES = {
+  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on
+  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)
+  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.
+  // No provider "popup" surface.
+  stripe: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: false,
+    status: "full",
+    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED }
+  },
+  // Merchant-of-Record; card entry is always Paddle's frame → no own element/sheet/
+  // express. Off-session via subscription one-time charge / collection_mode, but
+  // **no 2nd concurrent subscription** (upgrade + one-time only), provider-initiated.
+  paddle: {
+    isMoR: true,
+    offSessionUpsells: ["one-time", "upgrade"],
+    tokenModel: "provider",
+    orchestrator: false,
+    status: "full",
+    surfaces: { embedded: ON, popup: ON, redirect: ON }
+  },
+  // Merchant-of-Record; iframe-only (no raw card field). Off-session works
+  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.
+  whop: {
+    isMoR: true,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "provider",
+    orchestrator: false,
+    status: "planned",
+    surfaces: { embedded: ON, redirect: ON, sheet: ON }
+  },
+  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.
+  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —
+  // the vault lives with whichever processor Primer routed to (data matches this
+  // comment as of 2026-07-02; it previously said conditional but coded reliable).
+  primer: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: true,
+    status: "planned",
+    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED }
+  },
+  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/
+  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.
+  // Strong native off-session (Recurring API). No popup.
+  solidgate: {
+    isMoR: false,
+    offSessionUpsells: ALL_UPSELLS,
+    tokenModel: "merchant",
+    orchestrator: true,
+    status: "planned",
+    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON }
+  }
+};
+function surfacesFor(provider) {
+  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {});
+}
+function isMerchantOfRecord(provider) {
+  return PROVIDER_PROFILES[provider]?.isMoR ?? false;
+}
+function isOrchestrator(provider) {
+  return PROVIDER_PROFILES[provider]?.orchestrator ?? false;
+}
+function validateCheckout(provider, surface) {
+  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface];
+  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` };
+  return cap.purchase ? { ok: true } : { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` };
+}
+function validateUpsell(provider, paywallSurface, kind = "subscription") {
+  const profile = PROVIDER_PROFILES[provider];
+  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` };
+  if (!profile.offSessionUpsells.includes(kind)) {
+    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(", ")})` : "";
+    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` };
+  }
+  const cap = profile.surfaces[paywallSurface];
+  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` };
+  if (cap.offSession === "none") {
+    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` };
+  }
+  if (cap.offSession === "conditional") {
+    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline \u2014 prefer a reliable surface or wire an on-session fallback` };
+  }
+  return { ok: true };
+}
+function checkoutError(category, message, extra = {}) {
+  const retryable = extra.retryable ?? (category === "authentication_required" || category === "requires_payment_method" || category === "processing_error");
+  return { category, message, declineCode: extra.declineCode, retryable };
+}
+
+export { INLINE_SURFACES, PROVIDER_PROFILES, __commonJS, __export, __toESM, checkoutError, isInlineSurface, isMerchantOfRecord, isOrchestrator, surfacesFor, validateCheckout, validateUpsell };
+//# sourceMappingURL=chunk-YY375F2B.js.map
+//# sourceMappingURL=chunk-YY375F2B.js.map

package/dist/chunk-YY375F2B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commerce/capabilities.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBO,IAAM,eAAA,uBAAoD,GAAA,CAAqB;AAAA,EACpF,SAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,OAAA,EAAmC;AACjE,EAAA,OAAO,eAAA,CAAgB,IAAI,OAAO,CAAA;AACpC;AAgDA,IAAM,KAAwB,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,UAAA,EAAW;AAEtF,IAAM,UAA6B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAE9F,IAAM,SAA4B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAC7F,IAAM,WAAA,GAA4B,CAAC,cAAA,EAAgB,UAAA,EAAY,SAAS,CAAA;AAmBjE,IAAM,iBAAA,GAA+D;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1E,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA,IACnG,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAA;AAAQ,GACxF;AAAA;AAAA;AAAA;AAAA,EAIA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,CAAC,UAAA,EAAY,SAAS,CAAA;AAAA,IAAG,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA,IAC9G,UAAU,EAAE,QAAA,EAAU,IAAI,KAAA,EAAO,EAAA,EAAI,UAAU,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA,EAGA,IAAA,EAAM;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,SAAA;AAAA,IAClG,UAAU,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,QAAA,EAAU,EAAE,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA;AAAO,GAChF;AAAA;AAAA;AAAA;AAAA,EAIA,SAAA,EAAW;AAAA,IACT,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA;AAAG;AAEhF;AAUO,SAAS,YAAY,QAAA,EAA+C;AACzE,EAAA,OAAO,OAAO,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA,IAAY,EAAE,CAAA;AAChE;AAGO,SAAS,mBAAmB,QAAA,EAAqC;AACtE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAA,IAAS,KAAA;AAC/C;AAGO,SAAS,eAAe,QAAA,EAAqC;AAClE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,YAAA,IAAgB,KAAA;AACtD;AAOO,SAAS,gBAAA,CAAiB,UAA4B,OAAA,EAA4C;AACvG,EAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,QAAQ,CAAA,EAAG,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,OAAO,CAAA,SAAA,CAAA,EAAY;AAChF,EAAA,OAAO,GAAA,CAAI,QAAA,GAAW,EAAE,EAAA,EAAI,MAAK,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,CAAA,EAAI,OAAO,CAAA,2BAAA,EAA8B,QAAQ,CAAA,CAAA,EAAG;AAChH;AAQO,SAAS,cAAA,CACd,QAAA,EACA,cAAA,EACA,IAAA,GAAmB,cAAA,EACD;AAClB,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,IAAI,CAAC,OAAA,CAAQ,iBAAA,CAAkB,QAAA,CAAS,IAAI,CAAA,EAAG;AAC7C,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,iBAAA,CAAkB,MAAA,GAAS,CAAA,eAAA,EAAkB,QAAQ,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC3G,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,iBAAA,EAAoB,IAAI,CAAA,oBAAA,EAAuB,GAAG,CAAA,CAAA,EAAG;AAAA,EAC9F;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,cAAc,CAAA;AAC3C,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,cAAc,CAAA,yBAAA,CAAA,EAA4B;AACvG,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,eAAA,EAAkB,cAAc,CAAA,4CAAA,CAAA,EAA+C;AAAA,EAC7G;AACA,EAAA,IAAI,GAAA,CAAI,eAAe,aAAA,EAAe;AACpC,IAAA,OAAO,EAAE,IAAI,IAAA,EAAM,IAAA,EAAM,4BAA4B,QAAQ,CAAA,EAAA,EAAK,cAAc,CAAA,6EAAA,CAAA,EAA2E;AAAA,EAC7J;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AA+BO,SAAS,aAAA,CACd,QAAA,EACA,OAAA,EACA,KAAA,GAAuD,EAAC,EACzC;AACf,EAAA,MAAM,YAAY,KAAA,CAAM,SAAA,KAAc,aAAa,yBAAA,IAA6B,QAAA,KAAa,6BAA6B,QAAA,KAAa,kBAAA,CAAA;AACvI,EAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,WAAA,EAAa,KAAA,CAAM,aAAa,SAAA,EAAU;AACxE","file":"chunk-YY375F2B.js","sourcesContent":["/**\n * The provider capability matrix + checkout error taxonomy — the PURE half of the\n * checkout seam, extracted from checkout.tsx so it ships through the **manifest\n * entry** (no React): the API's publish validation, the editor, AI authoring, and\n * local dev all run the SAME checks the runtime primitives use (phase-3 §3.1b —\n * \"the SDK ships this as data\"). The React half (driver seam, `useCheckout`,\n * `<Checkout>`/`<Upsell>`) stays in ./checkout, which re-exports everything here.\n */\n\nexport type CheckoutSurface =\n  | 'express' // wallet quick-buttons (Apple/Google Pay) — inline\n  | 'element' // inline card form — inline\n  | 'embedded' // provider-managed inline checkout — inline\n  | 'sheet' // bottom-sheet popup — opens on click\n  | 'popup' // provider-hosted overlay — opens on click\n  | 'redirect' // provider-hosted page — opens on click\n\nexport type CheckoutProvider = 'stripe' | 'paddle' | 'whop' | 'primer' | 'solidgate'\nexport type CheckoutIntent = 'purchase' | 'upsell'\n\n/** Surfaces that render inline (vs. those that open on click). */\nexport const INLINE_SURFACES: ReadonlySet<CheckoutSurface> = new Set<CheckoutSurface>([\n  'express',\n  'element',\n  'embedded',\n])\n\nexport function isInlineSurface(surface: CheckoutSurface): boolean {\n  return INLINE_SURFACES.has(surface)\n}\n\n/**\n * The kind of off-session upsell (researched against Funnelfox's changelog, which\n * ships these as distinct features). The discriminating real-world constraint is\n * **stacking a 2nd concurrent subscription** — Paddle can't, SolidGate/Stripe can.\n */\nexport type UpsellKind =\n  | 'subscription' // charge a NEW, 2nd concurrent subscription off-session (stacking)\n  | 'one-time' // charge a one-time add-on off-session\n  | 'upgrade' // change the existing subscription's plan\n\n/** Reliability of an off-session upsell charge AFTER a purchase on a surface. */\nexport type OffSessionReliability =\n  | 'reliable' // we hold the saved method (Stripe Elements / SolidGate) or the provider charges it (Paddle / Whop API)\n  | 'conditional' // possible but may decline — Stripe **managed** checkout (vault charge, SCA not guaranteed) or an orchestrator's PSP-dependent routing (Primer)\n  | 'none'\n\nexport interface SurfaceCapability {\n  purchase: boolean\n  /** Apple/Google Pay available on this surface. */\n  wallets: boolean\n  /** Reliability of an off-session upsell after a purchase on this surface. */\n  offSession: OffSessionReliability\n}\n\nexport interface ProviderProfile {\n  /** Merchant-of-Record (handles tax/compliance) vs. a PSP you settle through. */\n  isMoR: boolean\n  /** Upsell kinds this provider can charge off-session (one-click, no re-entry). */\n  offSessionUpsells: UpsellKind[]\n  /** Who charges the saved method off-session: you (PSP) or the provider (MoR/managed). */\n  tokenModel: 'merchant' | 'provider'\n  /** Routes across multiple processors (Primer; SolidGate also offers this) vs. a single acquirer. */\n  orchestrator: boolean\n  /**\n   * Driver tier (Wave-4 decision, Simon 2026-07-02): `full` = a real driver ships\n   * (Stripe, Paddle); `planned` = profile only — authoring/publish validate against\n   * it, but no charge path exists yet (Whop, Primer, SolidGate). A new provider\n   * becomes buildable by writing a driver; its profile already gates what authors\n   * can express, so funnels written today stay valid when the driver lands.\n   */\n  status: 'full' | 'planned'\n  /** Supported surfaces → per-surface capabilities. **Absent = not supported.** */\n  surfaces: Partial<Record<CheckoutSurface, SurfaceCapability>>\n}\n\n/** Reliable off-session after this surface (we/the provider hold a chargeable method). */\nconst ON: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable' }\n/** Stripe-managed checkout: a purchase works, but the off-session upsell may decline. */\nconst MANAGED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/** Orchestrator-routed (Primer): off-session depends on which PSP vaulted the method. */\nconst ROUTED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\nconst ALL_UPSELLS: UpsellKind[] = ['subscription', 'one-time', 'upgrade']\n\n/**\n * Provider capabilities (researched 2026-06-23 against provider docs + Funnelfox;\n * trial mechanics re-verified 2026-07-02, doc 09 §4.4).\n *\n * Three real-world corrections to the naive model:\n *  1. **Off-session upsell support is per-provider by *kind*** (`offSessionUpsells`):\n *     Paddle can't stack a 2nd concurrent subscription (upgrade + one-time only);\n *     Stripe/SolidGate/Whop/Primer can do all kinds.\n *  2. **Off-session *reliability* varies by the paywall surface** (`SurfaceCapability.\n *     offSession`): Stripe **managed** checkout (`embedded`/`redirect`) upsells as a\n *     direct charge against Stripe's vault → `conditional` (may decline); Elements\n *     surfaces are `reliable`. Primer is `conditional` everywhere (PSP-dependent).\n *  3. **Surface availability is a hard constraint.** MoR/managed providers can't\n *     expose a raw card field to your own UI: Paddle has no `express`/`element`/your\n *     `sheet`; Whop has no raw `element`/`express`; Primer has no hosted `redirect`;\n *     Stripe/SolidGate have no `popup`. A missing entry means \"not possible.\"\n */\nexport const PROVIDER_PROFILES: Record<CheckoutProvider, ProviderProfile> = {\n  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on\n  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)\n  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.\n  // No provider \"popup\" surface.\n  stripe: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: false, status: 'full',\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED },\n  },\n  // Merchant-of-Record; card entry is always Paddle's frame → no own element/sheet/\n  // express. Off-session via subscription one-time charge / collection_mode, but\n  // **no 2nd concurrent subscription** (upgrade + one-time only), provider-initiated.\n  paddle: {\n    isMoR: true, offSessionUpsells: ['one-time', 'upgrade'], tokenModel: 'provider', orchestrator: false, status: 'full',\n    surfaces: { embedded: ON, popup: ON, redirect: ON },\n  },\n  // Merchant-of-Record; iframe-only (no raw card field). Off-session works\n  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.\n  whop: {\n    isMoR: true, offSessionUpsells: ALL_UPSELLS, tokenModel: 'provider', orchestrator: false, status: 'planned',\n    surfaces: { embedded: ON, redirect: ON, sheet: ON },\n  },\n  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.\n  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —\n  // the vault lives with whichever processor Primer routed to (data matches this\n  // comment as of 2026-07-02; it previously said conditional but coded reliable).\n  primer: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED },\n  },\n  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/\n  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.\n  // Strong native off-session (Recurring API). No popup.\n  solidgate: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON },\n  },\n}\n\nexport interface ValidationResult {\n  ok: boolean\n  reason?: string\n  /** Non-fatal caveat (e.g. Paddle upgrade-only). */\n  note?: string\n}\n\n/** Surfaces a provider supports, for the editor/AI to steer authors. */\nexport function surfacesFor(provider: CheckoutProvider): CheckoutSurface[] {\n  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {}) as CheckoutSurface[]\n}\n\n/** Whether a provider is a Merchant of Record (it owns tax/compliance). */\nexport function isMerchantOfRecord(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.isMoR ?? false\n}\n\n/** Whether a provider routes across multiple processors (Primer, SolidGate). */\nexport function isOrchestrator(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.orchestrator ?? false\n}\n\n/**\n * Validate a (provider, surface) for a **purchase**: the surface must exist for\n * the provider and accept a payment. Surface availability is the real constraint\n * (e.g. Paddle has no `element`).\n */\nexport function validateCheckout(provider: CheckoutProvider, surface: CheckoutSurface): ValidationResult {\n  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` }\n  return cap.purchase ? { ok: true } : { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` }\n}\n\n/**\n * Validate an **off-session upsell** of `kind` after a purchase made on\n * `paywallSurface`. Combines provider support for the kind (Paddle can't stack a\n * 2nd subscription) with the paywall surface's off-session reliability (Stripe\n * managed checkout is `conditional` — returned as a `note`, not a hard block).\n */\nexport function validateUpsell(\n  provider: CheckoutProvider,\n  paywallSurface: CheckoutSurface,\n  kind: UpsellKind = 'subscription',\n): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  if (!profile.offSessionUpsells.includes(kind)) {\n    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(', ')})` : ''\n    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` }\n  }\n  const cap = profile.surfaces[paywallSurface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` }\n  if (cap.offSession === 'none') {\n    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` }\n  }\n  if (cap.offSession === 'conditional') {\n    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline — prefer a reliable surface or wire an on-session fallback` }\n  }\n  return { ok: true }\n}\n\n// ── Checkout error taxonomy (pure — drivers + server both normalize into it) ──\n\n/**\n * Normalized failure category — the driver/platform maps each provider's decline\n * codes into one of these so funnels can route/recover by reason. `authentication_\n * required` (3DS/SCA) and `requires_payment_method` are the cases an **off-session**\n * upsell can't satisfy → recover on-session (re-collect a card).\n */\nexport type CheckoutErrorCategory =\n  | 'card_declined'\n  | 'insufficient_funds'\n  | 'expired_card'\n  | 'prepaid_card' // card funding is prepaid — trials/subscriptions commonly decline; route to a real-card recapture page\n  | 'authentication_required' // SCA/3DS needed — off-session can't challenge\n  | 'requires_payment_method' // no usable saved method\n  | 'processing_error'\n  | 'canceled'\n  | 'unknown'\n\nexport interface CheckoutError {\n  category: CheckoutErrorCategory\n  message: string\n  /** Raw provider decline code, if any (e.g. Stripe `card_declined`/`insufficient_funds`). */\n  declineCode?: string\n  /** Whether re-attempting (e.g. an on-session re-collection) may succeed. */\n  retryable: boolean\n}\n\n/** Build a {@link CheckoutError} (driver/test helper). */\nexport function checkoutError(\n  category: CheckoutErrorCategory,\n  message: string,\n  extra: { declineCode?: string; retryable?: boolean } = {},\n): CheckoutError {\n  const retryable = extra.retryable ?? (category === 'authentication_required' || category === 'requires_payment_method' || category === 'processing_error')\n  return { category, message, declineCode: extra.declineCode, retryable }\n}\n"]}