@appfunnel-dev/sdk 2.0.0-canary.5 → 2.0.0-canary.8

package/dist/chunk-RVJLR4RS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commerce/capabilities.ts"],"names":[],"mappings":";AAqBO,IAAM,eAAA,uBAAoD,GAAA,CAAqB;AAAA,EACpF,SAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,OAAA,EAAmC;AACjE,EAAA,OAAO,eAAA,CAAgB,IAAI,OAAO,CAAA;AACpC;AAyEA,IAAM,KAAwB,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,UAAA,EAAW;AAEtF,IAAM,UAA6B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAE9F,IAAM,SAA4B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAW7F,IAAM,cAAA,GAAoC,EAAE,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAM,UAAA,EAAY,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAU;AACrH,IAAM,WAAA,GAA4B,CAAC,cAAA,EAAgB,UAAA,EAAY,SAAS,CAAA;AAmBjE,IAAM,iBAAA,GAA+D;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1E,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA;AAAA;AAAA,IAGnG,WAAA,EAAa,CAAC,eAAA,EAAiB,YAAY,CAAA;AAAA,IAC3C,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAA;AAAQ,GACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,CAAC,UAAA,EAAY,SAAS,CAAA;AAAA,IAAG,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA;AAAA;AAAA,IAG9G,WAAA,EAAa,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IAC1C,QAAA,EAAU,EAAE,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,OAAA,EAAS,cAAA;AAAe,GAC7E;AAAA;AAAA;AAAA;AAAA,EAIA,IAAA,EAAM;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,UAAU,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,QAAA,EAAU,EAAE,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA;AAAO,GAChF;AAAA;AAAA;AAAA;AAAA,EAIA,SAAA,EAAW;AAAA,IACT,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA;AAAG;AAEhF;AAUO,SAAS,YAAY,QAAA,EAA+C;AACzE,EAAA,OAAO,OAAO,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA,IAAY,EAAE,CAAA;AAChE;AAGO,SAAS,mBAAmB,QAAA,EAAqC;AACtE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAA,IAAS,KAAA;AAC/C;AAGO,SAAS,eAAe,QAAA,EAAqC;AAClE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,YAAA,IAAgB,KAAA;AACtD;AAOO,SAAS,gBAAA,CAAiB,UAA4B,OAAA,EAA4C;AACvG,EAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,QAAQ,CAAA,EAAG,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,OAAO,CAAA,SAAA,CAAA,EAAY;AAChF,EAAA,IAAI,CAAC,GAAA,CAAI,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,CAAA,EAAI,OAAO,CAAA,2BAAA,EAA8B,QAAQ,CAAA,CAAA,EAAG;AAGnG,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,EAAA,EAAK,OAAO,CAAA,yFAAA,CAAA,EAA4F;AAC7K,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AAGO,SAAS,eAAe,QAAA,EAA0C;AACvE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,WAAA,IAAe,EAAC;AACtD;AAQO,SAAS,aAAA,CAAc,UAA4B,KAAA,EAAsC;AAC9F,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,MAAM,SAAS,OAAA,CAAQ,WAAA;AACvB,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,4BAAA,CAAA,EAA+B;AAC/F,EAAA,IAAI,KAAA,IAAS,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AACpC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,oBAAA,EAAuB,KAAK,CAAA,sBAAA,EAAyB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,EAAI;AAAA,EACnH;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AAQO,SAAS,cAAA,CACd,QAAA,EACA,cAAA,EACA,IAAA,GAAmB,cAAA,EACD;AAClB,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,IAAI,CAAC,OAAA,CAAQ,iBAAA,CAAkB,QAAA,CAAS,IAAI,CAAA,EAAG;AAC7C,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,iBAAA,CAAkB,MAAA,GAAS,CAAA,eAAA,EAAkB,QAAQ,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC3G,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,iBAAA,EAAoB,IAAI,CAAA,oBAAA,EAAuB,GAAG,CAAA,CAAA,EAAG;AAAA,EAC9F;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,cAAc,CAAA;AAC3C,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,cAAc,CAAA,yBAAA,CAAA,EAA4B;AACvG,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,eAAA,EAAkB,cAAc,CAAA,4CAAA,CAAA,EAA+C;AAAA,EAC7G;AACA,EAAA,IAAI,GAAA,CAAI,eAAe,aAAA,EAAe;AACpC,IAAA,OAAO,EAAE,IAAI,IAAA,EAAM,IAAA,EAAM,4BAA4B,QAAQ,CAAA,EAAA,EAAK,cAAc,CAAA,6EAAA,CAAA,EAA2E;AAAA,EAC7J;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AA+BO,SAAS,aAAA,CACd,QAAA,EACA,OAAA,EACA,KAAA,GAAuD,EAAC,EACzC;AACf,EAAA,MAAM,YAAY,KAAA,CAAM,SAAA,KAAc,aAAa,yBAAA,IAA6B,QAAA,KAAa,6BAA6B,QAAA,KAAa,kBAAA,CAAA;AACvI,EAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,WAAA,EAAa,KAAA,CAAM,aAAa,SAAA,EAAU;AACxE","file":"chunk-RVJLR4RS.js","sourcesContent":["/**\n * The provider capability matrix + checkout error taxonomy — the PURE half of the\n * checkout seam, extracted from checkout.tsx so it ships through the **manifest\n * entry** (no React): the API's publish validation, the editor, AI authoring, and\n * local dev all run the SAME checks the runtime primitives use (phase-3 §3.1b —\n * \"the SDK ships this as data\"). The React half (driver seam, `useCheckout`,\n * `<Checkout>`/`<Upsell>`) stays in ./checkout, which re-exports everything here.\n */\n\nexport type CheckoutSurface =\n  | 'express' // wallet quick-buttons (Apple/Google Pay) — inline\n  | 'element' // inline card form — inline\n  | 'embedded' // provider-managed inline checkout — inline\n  | 'sheet' // bottom-sheet popup — opens on click\n  | 'popup' // provider-hosted overlay — opens on click\n  | 'redirect' // provider-hosted page — opens on click\n\nexport type CheckoutProvider = 'stripe' | 'paddle' | 'whop' | 'primer' | 'solidgate'\nexport type CheckoutIntent = 'purchase' | 'upsell'\n\n/** Surfaces that render inline (vs. those that open on click). */\nexport const INLINE_SURFACES: ReadonlySet<CheckoutSurface> = new Set<CheckoutSurface>([\n  'express',\n  'element',\n  'embedded',\n])\n\nexport function isInlineSurface(surface: CheckoutSurface): boolean {\n  return INLINE_SURFACES.has(surface)\n}\n\n/**\n * The kind of off-session upsell (researched against Funnelfox's changelog, which\n * ships these as distinct features). The discriminating real-world constraint is\n * **stacking a 2nd concurrent subscription** — Paddle can't, SolidGate/Stripe can.\n */\nexport type UpsellKind =\n  | 'subscription' // charge a NEW, 2nd concurrent subscription off-session (stacking)\n  | 'one-time' // charge a one-time add-on off-session\n  | 'upgrade' // change the existing subscription's plan\n\n/** Reliability of an off-session upsell charge AFTER a purchase on a surface. */\nexport type OffSessionReliability =\n  | 'reliable' // we hold the saved method (Stripe Elements / SolidGate) or the provider charges it (Paddle / Whop API)\n  | 'conditional' // possible but may decline — Stripe **managed** checkout (vault charge, SCA not guaranteed) or an orchestrator's PSP-dependent routing (Primer)\n  | 'none'\n\nexport interface SurfaceCapability {\n  purchase: boolean\n  /** Apple/Google Pay available on this surface. */\n  wallets: boolean\n  /** Reliability of an off-session upsell after a purchase on this surface. */\n  offSession: OffSessionReliability\n  /**\n   * Per-surface DRIVER readiness. Absent = renderable now (the provider's driver mounts it).\n   * `'planned'` = the provider genuinely ships this surface (cite it in the profile) but OUR\n   * driver doesn't render it yet — publish validation FAILS CLOSED on it so we never promise a\n   * surface the runtime can't produce. Mirrors the provider-level {@link ProviderProfile.status}\n   * seam at surface granularity: implement the driver, drop the flag, and it flips on cleanly.\n   */\n  driver?: 'planned'\n}\n\n/**\n * How a provider composes a TRIAL — the scattered provider `if`s made a matrix dimension\n * (§7 item 4). Stripe trials are **composed** (a separate fee/vault step precedes the sub);\n * Paddle trials are **native** (the price itself carries the trial, MoR collects up front):\n *  - `paid_composed` — Stripe: trial-fee PaymentIntent → subscription with `trial_period_days`.\n *  - `free_vault`    — Stripe: SetupIntent vaults the card (no charge) → trial subscription.\n *  - `paid_native`   — Paddle: the price carries the paid trial; one item, collected up front.\n *  - `free_native`   — Paddle: native free trial on the price.\n * A provider with an EMPTY `trialShapes` can't run a trial offer (planned providers → fail closed).\n */\nexport type TrialShape = 'paid_composed' | 'free_vault' | 'paid_native' | 'free_native'\n\nexport interface ProviderProfile {\n  /** Merchant-of-Record (handles tax/compliance) vs. a PSP you settle through. */\n  isMoR: boolean\n  /** Upsell kinds this provider can charge off-session (one-click, no re-entry). */\n  offSessionUpsells: UpsellKind[]\n  /** Who charges the saved method off-session: you (PSP) or the provider (MoR/managed). */\n  tokenModel: 'merchant' | 'provider'\n  /** Routes across multiple processors (Primer; SolidGate also offers this) vs. a single acquirer. */\n  orchestrator: boolean\n  /**\n   * Driver tier (Wave-4 decision, Simon 2026-07-02): `full` = a real driver ships\n   * (Stripe, Paddle); `planned` = profile only — authoring/publish validate against\n   * it, but no charge path exists yet (Whop, Primer, SolidGate). A new provider\n   * becomes buildable by writing a driver; its profile already gates what authors\n   * can express, so funnels written today stay valid when the driver lands.\n   */\n  status: 'full' | 'planned'\n  /**\n   * TRIAL shapes this provider can run (§7 item 4). Empty = no trial path (fail closed at\n   * publish — a paid/free-trial funnel on this provider can't be produced yet).\n   */\n  trialShapes: TrialShape[]\n  /** Supported surfaces → per-surface capabilities. **Absent = not supported.** */\n  surfaces: Partial<Record<CheckoutSurface, SurfaceCapability>>\n}\n\n/** Reliable off-session after this surface (we/the provider hold a chargeable method). */\nconst ON: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable' }\n/** Stripe-managed checkout: a purchase works, but the off-session upsell may decline. */\nconst MANAGED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/** Orchestrator-routed (Primer): off-session depends on which PSP vaulted the method. */\nconst ROUTED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/**\n * Paddle **Express Checkout** (Apple-Pay-first mobile variant of Paddle.js checkout, shipped\n * 2026-04-27 — https://developer.paddle.com/changelog/2026/apple-pay-express-checkout/). Paddle\n * genuinely offers it (MoR, so it's their hosted/inline frame surfaced wallet-first, NOT a raw\n * wallet element in our UI), which is why it's a distinct `express` surface here rather than only\n * the `wallets` flag already true on Paddle's embedded/popup. But our Paddle DRIVER doesn't render\n * it yet (drivers/paddle.tsx opens the standard embedded/overlay checkout regardless of surface),\n * so `driver: 'planned'` fails it closed at publish — the matrix records reality without promising\n * a wallet-first render the runtime can't produce. Off-session stays reliable (provider-token, MoR).\n */\nconst PADDLE_EXPRESS: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable', driver: 'planned' }\nconst ALL_UPSELLS: UpsellKind[] = ['subscription', 'one-time', 'upgrade']\n\n/**\n * Provider capabilities (researched 2026-06-23 against provider docs + Funnelfox;\n * trial mechanics re-verified 2026-07-02, doc 09 §4.4).\n *\n * Three real-world corrections to the naive model:\n *  1. **Off-session upsell support is per-provider by *kind*** (`offSessionUpsells`):\n *     Paddle can't stack a 2nd concurrent subscription (upgrade + one-time only);\n *     Stripe/SolidGate/Whop/Primer can do all kinds.\n *  2. **Off-session *reliability* varies by the paywall surface** (`SurfaceCapability.\n *     offSession`): Stripe **managed** checkout (`embedded`/`redirect`) upsells as a\n *     direct charge against Stripe's vault → `conditional` (may decline); Elements\n *     surfaces are `reliable`. Primer is `conditional` everywhere (PSP-dependent).\n *  3. **Surface availability is a hard constraint.** MoR/managed providers can't\n *     expose a raw card field to your own UI: Paddle has no `express`/`element`/your\n *     `sheet`; Whop has no raw `element`/`express`; Primer has no hosted `redirect`;\n *     Stripe/SolidGate have no `popup`. A missing entry means \"not possible.\"\n */\nexport const PROVIDER_PROFILES: Record<CheckoutProvider, ProviderProfile> = {\n  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on\n  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)\n  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.\n  // No provider \"popup\" surface.\n  stripe: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: false, status: 'full',\n    // Composed trials: paid = fee PaymentIntent + sub (trial_period_days); free = SetupIntent vault\n    // + trial sub (services/checkout/stripe-trial.ts).\n    trialShapes: ['paid_composed', 'free_vault'],\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED },\n  },\n  // Merchant-of-Record; raw card entry is always Paddle's frame → no own element/sheet.\n  // `express` IS now present (Apple-Pay-first Express Checkout, shipped 2026-04-27) but is\n  // driver-planned (PADDLE_EXPRESS) → publish fails it closed until the driver renders it.\n  // Off-session via subscription one-time charge / collection_mode, but **no 2nd concurrent\n  // subscription** (upgrade + one-time only), provider-initiated.\n  paddle: {\n    isMoR: true, offSessionUpsells: ['one-time', 'upgrade'], tokenModel: 'provider', orchestrator: false, status: 'full',\n    // Native trials: the price itself carries the trial, Paddle collects up front / vaults\n    // (services/checkout/paddle-checkout.ts — \"Paddle paid trials are NATIVE\").\n    trialShapes: ['paid_native', 'free_native'],\n    surfaces: { embedded: ON, popup: ON, redirect: ON, express: PADDLE_EXPRESS },\n  },\n  // Merchant-of-Record; iframe-only (no raw card field). Off-session works\n  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.\n  // Trial shape not yet researched → empty (fail closed until the driver + profile land).\n  whop: {\n    isMoR: true, offSessionUpsells: ALL_UPSELLS, tokenModel: 'provider', orchestrator: false, status: 'planned',\n    trialShapes: [],\n    surfaces: { embedded: ON, redirect: ON, sheet: ON },\n  },\n  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.\n  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —\n  // the vault lives with whichever processor Primer routed to (data matches this\n  // comment as of 2026-07-02; it previously said conditional but coded reliable).\n  primer: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    trialShapes: [],\n    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED },\n  },\n  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/\n  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.\n  // Strong native off-session (Recurring API). No popup.\n  solidgate: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    trialShapes: [],\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON },\n  },\n}\n\nexport interface ValidationResult {\n  ok: boolean\n  reason?: string\n  /** Non-fatal caveat (e.g. Paddle upgrade-only). */\n  note?: string\n}\n\n/** Surfaces a provider supports, for the editor/AI to steer authors. */\nexport function surfacesFor(provider: CheckoutProvider): CheckoutSurface[] {\n  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {}) as CheckoutSurface[]\n}\n\n/** Whether a provider is a Merchant of Record (it owns tax/compliance). */\nexport function isMerchantOfRecord(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.isMoR ?? false\n}\n\n/** Whether a provider routes across multiple processors (Primer, SolidGate). */\nexport function isOrchestrator(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.orchestrator ?? false\n}\n\n/**\n * Validate a (provider, surface) for a **purchase**: the surface must exist for\n * the provider and accept a payment. Surface availability is the real constraint\n * (e.g. Paddle has no `element`).\n */\nexport function validateCheckout(provider: CheckoutProvider, surface: CheckoutSurface): ValidationResult {\n  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` }\n  if (!cap.purchase) return { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` }\n  // The provider offers this surface but our driver can't render it yet (e.g. Paddle Express\n  // Checkout) → fail closed so publish never promises a surface the runtime can't produce.\n  if (cap.driver === 'planned') return { ok: false, reason: `${provider} '${surface}' checkout isn't renderable yet (the provider ships it, but our driver doesn't render it)` }\n  return { ok: true }\n}\n\n/** Trial shapes a provider can compose (empty = it can't run a trial offer yet). */\nexport function trialShapesFor(provider: CheckoutProvider): TrialShape[] {\n  return PROVIDER_PROFILES[provider]?.trialShapes ?? []\n}\n\n/**\n * Validate that a provider can run a TRIAL (§7 item 4). Pass a specific {@link TrialShape} to\n * check that exact shape; omit it to assert the provider supports *any* trial (the cheap gate\n * check when only the offering's TRIAL-role binding existence is known). A provider with no\n * trial shapes (every planned provider) fails closed.\n */\nexport function validateTrial(provider: CheckoutProvider, shape?: TrialShape): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  const shapes = profile.trialShapes\n  if (shapes.length === 0) return { ok: false, reason: `${provider} can't run a trial offer yet` }\n  if (shape && !shapes.includes(shape)) {\n    return { ok: false, reason: `${provider} doesn't support a '${shape}' trial (it supports: ${shapes.join(', ')})` }\n  }\n  return { ok: true }\n}\n\n/**\n * Validate an **off-session upsell** of `kind` after a purchase made on\n * `paywallSurface`. Combines provider support for the kind (Paddle can't stack a\n * 2nd subscription) with the paywall surface's off-session reliability (Stripe\n * managed checkout is `conditional` — returned as a `note`, not a hard block).\n */\nexport function validateUpsell(\n  provider: CheckoutProvider,\n  paywallSurface: CheckoutSurface,\n  kind: UpsellKind = 'subscription',\n): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  if (!profile.offSessionUpsells.includes(kind)) {\n    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(', ')})` : ''\n    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` }\n  }\n  const cap = profile.surfaces[paywallSurface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` }\n  if (cap.offSession === 'none') {\n    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` }\n  }\n  if (cap.offSession === 'conditional') {\n    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline — prefer a reliable surface or wire an on-session fallback` }\n  }\n  return { ok: true }\n}\n\n// ── Checkout error taxonomy (pure — drivers + server both normalize into it) ──\n\n/**\n * Normalized failure category — the driver/platform maps each provider's decline\n * codes into one of these so funnels can route/recover by reason. `authentication_\n * required` (3DS/SCA) and `requires_payment_method` are the cases an **off-session**\n * upsell can't satisfy → recover on-session (re-collect a card).\n */\nexport type CheckoutErrorCategory =\n  | 'card_declined'\n  | 'insufficient_funds'\n  | 'expired_card'\n  | 'prepaid_card' // card funding is prepaid — trials/subscriptions commonly decline; route to a real-card recapture page\n  | 'authentication_required' // SCA/3DS needed — off-session can't challenge\n  | 'requires_payment_method' // no usable saved method\n  | 'processing_error'\n  | 'canceled'\n  | 'unknown'\n\nexport interface CheckoutError {\n  category: CheckoutErrorCategory\n  message: string\n  /** Raw provider decline code, if any (e.g. Stripe `card_declined`/`insufficient_funds`). */\n  declineCode?: string\n  /** Whether re-attempting (e.g. an on-session re-collection) may succeed. */\n  retryable: boolean\n}\n\n/** Build a {@link CheckoutError} (driver/test helper). */\nexport function checkoutError(\n  category: CheckoutErrorCategory,\n  message: string,\n  extra: { declineCode?: string; retryable?: boolean } = {},\n): CheckoutError {\n  const retryable = extra.retryable ?? (category === 'authentication_required' || category === 'requires_payment_method' || category === 'processing_error')\n  return { category, message, declineCode: extra.declineCode, retryable }\n}\n"]}

package/dist/{chunk-QMAZGLGV.cjs → chunk-RY3LOSVZ.cjs}

@@ -12,6 +12,7 @@ function isInlineSurface(surface) {
 var ON = { purchase: true, wallets: true, offSession: "reliable" };
 var MANAGED = { purchase: true, wallets: true, offSession: "conditional" };
 var ROUTED = { purchase: true, wallets: true, offSession: "conditional" };
+var PADDLE_EXPRESS = { purchase: true, wallets: true, offSession: "reliable", driver: "planned" };
 var ALL_UPSELLS = ["subscription", "one-time", "upgrade"];
 var PROVIDER_PROFILES = {
   // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on
@@ -24,27 +25,37 @@ var PROVIDER_PROFILES = {
     tokenModel: "merchant",
     orchestrator: false,
     status: "full",
+    // Composed trials: paid = fee PaymentIntent + sub (trial_period_days); free = SetupIntent vault
+    // + trial sub (services/checkout/stripe-trial.ts).
+    trialShapes: ["paid_composed", "free_vault"],
     surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED }
   },
-  // Merchant-of-Record; card entry is always Paddle's frame → no own element/sheet/
-  // express. Off-session via subscription one-time charge / collection_mode, but
-  // **no 2nd concurrent subscription** (upgrade + one-time only), provider-initiated.
+  // Merchant-of-Record; raw card entry is always Paddle's frame → no own element/sheet.
+  // `express` IS now present (Apple-Pay-first Express Checkout, shipped 2026-04-27) but is
+  // driver-planned (PADDLE_EXPRESS) → publish fails it closed until the driver renders it.
+  // Off-session via subscription one-time charge / collection_mode, but **no 2nd concurrent
+  // subscription** (upgrade + one-time only), provider-initiated.
   paddle: {
     isMoR: true,
     offSessionUpsells: ["one-time", "upgrade"],
     tokenModel: "provider",
     orchestrator: false,
     status: "full",
-    surfaces: { embedded: ON, popup: ON, redirect: ON }
+    // Native trials: the price itself carries the trial, Paddle collects up front / vaults
+    // (services/checkout/paddle-checkout.ts — "Paddle paid trials are NATIVE").
+    trialShapes: ["paid_native", "free_native"],
+    surfaces: { embedded: ON, popup: ON, redirect: ON, express: PADDLE_EXPRESS }
   },
   // Merchant-of-Record; iframe-only (no raw card field). Off-session works
   // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.
+  // Trial shape not yet researched → empty (fail closed until the driver + profile land).
   whop: {
     isMoR: true,
     offSessionUpsells: ALL_UPSELLS,
     tokenModel: "provider",
     orchestrator: false,
     status: "planned",
+    trialShapes: [],
     surfaces: { embedded: ON, redirect: ON, sheet: ON }
   },
   // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.
@@ -57,6 +68,7 @@ var PROVIDER_PROFILES = {
     tokenModel: "merchant",
     orchestrator: true,
     status: "planned",
+    trialShapes: [],
     surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED }
   },
   // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/
@@ -68,6 +80,7 @@ var PROVIDER_PROFILES = {
     tokenModel: "merchant",
     orchestrator: true,
     status: "planned",
+    trialShapes: [],
     surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON }
   }
 };
@@ -83,7 +96,22 @@ function isOrchestrator(provider) {
 function validateCheckout(provider, surface) {
   const cap = PROVIDER_PROFILES[provider]?.surfaces[surface];
   if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` };
-  return cap.purchase ? { ok: true } : { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` };
+  if (!cap.purchase) return { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` };
+  if (cap.driver === "planned") return { ok: false, reason: `${provider} '${surface}' checkout isn't renderable yet (the provider ships it, but our driver doesn't render it)` };
+  return { ok: true };
+}
+function trialShapesFor(provider) {
+  return PROVIDER_PROFILES[provider]?.trialShapes ?? [];
+}
+function validateTrial(provider, shape) {
+  const profile = PROVIDER_PROFILES[provider];
+  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` };
+  const shapes = profile.trialShapes;
+  if (shapes.length === 0) return { ok: false, reason: `${provider} can't run a trial offer yet` };
+  if (shape && !shapes.includes(shape)) {
+    return { ok: false, reason: `${provider} doesn't support a '${shape}' trial (it supports: ${shapes.join(", ")})` };
+  }
+  return { ok: true };
 }
 function validateUpsell(provider, paywallSurface, kind = "subscription") {
   const profile = PROVIDER_PROFILES[provider];
@@ -114,7 +142,9 @@ exports.isInlineSurface = isInlineSurface;
 exports.isMerchantOfRecord = isMerchantOfRecord;
 exports.isOrchestrator = isOrchestrator;
 exports.surfacesFor = surfacesFor;
+exports.trialShapesFor = trialShapesFor;
 exports.validateCheckout = validateCheckout;
+exports.validateTrial = validateTrial;
 exports.validateUpsell = validateUpsell;
-//# sourceMappingURL=chunk-QMAZGLGV.cjs.map
-//# sourceMappingURL=chunk-QMAZGLGV.cjs.map
+//# sourceMappingURL=chunk-RY3LOSVZ.cjs.map
+//# sourceMappingURL=chunk-RY3LOSVZ.cjs.map

package/dist/chunk-RY3LOSVZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commerce/capabilities.ts"],"names":[],"mappings":";;;AAqBO,IAAM,eAAA,uBAAoD,GAAA,CAAqB;AAAA,EACpF,SAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,OAAA,EAAmC;AACjE,EAAA,OAAO,eAAA,CAAgB,IAAI,OAAO,CAAA;AACpC;AAyEA,IAAM,KAAwB,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,UAAA,EAAW;AAEtF,IAAM,UAA6B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAE9F,IAAM,SAA4B,EAAE,QAAA,EAAU,MAAM,OAAA,EAAS,IAAA,EAAM,YAAY,aAAA,EAAc;AAW7F,IAAM,cAAA,GAAoC,EAAE,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAM,UAAA,EAAY,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAU;AACrH,IAAM,WAAA,GAA4B,CAAC,cAAA,EAAgB,UAAA,EAAY,SAAS,CAAA;AAmBjE,IAAM,iBAAA,GAA+D;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1E,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA;AAAA;AAAA,IAGnG,WAAA,EAAa,CAAC,eAAA,EAAiB,YAAY,CAAA;AAAA,IAC3C,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,OAAA;AAAQ,GACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,CAAC,UAAA,EAAY,SAAS,CAAA;AAAA,IAAG,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,MAAA;AAAA;AAAA;AAAA,IAG9G,WAAA,EAAa,CAAC,aAAA,EAAe,aAAa,CAAA;AAAA,IAC1C,QAAA,EAAU,EAAE,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,OAAA,EAAS,cAAA;AAAe,GAC7E;AAAA;AAAA;AAAA;AAAA,EAIA,IAAA,EAAM;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IAAM,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,KAAA;AAAA,IAAO,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,UAAU,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,EAAA,EAAI,OAAO,EAAA;AAAG,GACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,QAAA,EAAU,EAAE,OAAA,EAAS,MAAA,EAAQ,SAAS,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAU,MAAA;AAAO,GAChF;AAAA;AAAA;AAAA;AAAA,EAIA,SAAA,EAAW;AAAA,IACT,KAAA,EAAO,KAAA;AAAA,IAAO,iBAAA,EAAmB,WAAA;AAAA,IAAa,UAAA,EAAY,UAAA;AAAA,IAAY,YAAA,EAAc,IAAA;AAAA,IAAM,MAAA,EAAQ,SAAA;AAAA,IAClG,aAAa,EAAC;AAAA,IACd,QAAA,EAAU,EAAE,OAAA,EAAS,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA;AAAG;AAEhF;AAUO,SAAS,YAAY,QAAA,EAA+C;AACzE,EAAA,OAAO,OAAO,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA,EAAG,QAAA,IAAY,EAAE,CAAA;AAChE;AAGO,SAAS,mBAAmB,QAAA,EAAqC;AACtE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAA,IAAS,KAAA;AAC/C;AAGO,SAAS,eAAe,QAAA,EAAqC;AAClE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,YAAA,IAAgB,KAAA;AACtD;AAOO,SAAS,gBAAA,CAAiB,UAA4B,OAAA,EAA4C;AACvG,EAAA,MAAM,GAAA,GAAM,iBAAA,CAAkB,QAAQ,CAAA,EAAG,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,OAAO,CAAA,SAAA,CAAA,EAAY;AAChF,EAAA,IAAI,CAAC,GAAA,CAAI,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,CAAA,EAAI,OAAO,CAAA,2BAAA,EAA8B,QAAQ,CAAA,CAAA,EAAG;AAGnG,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,EAAA,EAAK,OAAO,CAAA,yFAAA,CAAA,EAA4F;AAC7K,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AAGO,SAAS,eAAe,QAAA,EAA0C;AACvE,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,EAAG,WAAA,IAAe,EAAC;AACtD;AAQO,SAAS,aAAA,CAAc,UAA4B,KAAA,EAAsC;AAC9F,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,MAAM,SAAS,OAAA,CAAQ,WAAA;AACvB,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,4BAAA,CAAA,EAA+B;AAC/F,EAAA,IAAI,KAAA,IAAS,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AACpC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,oBAAA,EAAuB,KAAK,CAAA,sBAAA,EAAyB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,EAAI;AAAA,EACnH;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AAQO,SAAS,cAAA,CACd,QAAA,EACA,cAAA,EACA,IAAA,GAAmB,cAAA,EACD;AAClB,EAAA,MAAM,OAAA,GAAU,kBAAkB,QAAQ,CAAA;AAC1C,EAAA,IAAI,CAAC,SAAS,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAI;AAC3E,EAAA,IAAI,CAAC,OAAA,CAAQ,iBAAA,CAAkB,QAAA,CAAS,IAAI,CAAA,EAAG;AAC7C,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,iBAAA,CAAkB,MAAA,GAAS,CAAA,eAAA,EAAkB,QAAQ,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,GAAM,EAAA;AAC3G,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,iBAAA,EAAoB,IAAI,CAAA,oBAAA,EAAuB,GAAG,CAAA,CAAA,EAAG;AAAA,EAC9F;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,cAAc,CAAA;AAC3C,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,EAAG,QAAQ,CAAA,SAAA,EAAY,cAAc,CAAA,yBAAA,CAAA,EAA4B;AACvG,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,CAAA,eAAA,EAAkB,cAAc,CAAA,4CAAA,CAAA,EAA+C;AAAA,EAC7G;AACA,EAAA,IAAI,GAAA,CAAI,eAAe,aAAA,EAAe;AACpC,IAAA,OAAO,EAAE,IAAI,IAAA,EAAM,IAAA,EAAM,4BAA4B,QAAQ,CAAA,EAAA,EAAK,cAAc,CAAA,6EAAA,CAAA,EAA2E;AAAA,EAC7J;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AACpB;AA+BO,SAAS,aAAA,CACd,QAAA,EACA,OAAA,EACA,KAAA,GAAuD,EAAC,EACzC;AACf,EAAA,MAAM,YAAY,KAAA,CAAM,SAAA,KAAc,aAAa,yBAAA,IAA6B,QAAA,KAAa,6BAA6B,QAAA,KAAa,kBAAA,CAAA;AACvI,EAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,WAAA,EAAa,KAAA,CAAM,aAAa,SAAA,EAAU;AACxE","file":"chunk-RY3LOSVZ.cjs","sourcesContent":["/**\n * The provider capability matrix + checkout error taxonomy — the PURE half of the\n * checkout seam, extracted from checkout.tsx so it ships through the **manifest\n * entry** (no React): the API's publish validation, the editor, AI authoring, and\n * local dev all run the SAME checks the runtime primitives use (phase-3 §3.1b —\n * \"the SDK ships this as data\"). The React half (driver seam, `useCheckout`,\n * `<Checkout>`/`<Upsell>`) stays in ./checkout, which re-exports everything here.\n */\n\nexport type CheckoutSurface =\n  | 'express' // wallet quick-buttons (Apple/Google Pay) — inline\n  | 'element' // inline card form — inline\n  | 'embedded' // provider-managed inline checkout — inline\n  | 'sheet' // bottom-sheet popup — opens on click\n  | 'popup' // provider-hosted overlay — opens on click\n  | 'redirect' // provider-hosted page — opens on click\n\nexport type CheckoutProvider = 'stripe' | 'paddle' | 'whop' | 'primer' | 'solidgate'\nexport type CheckoutIntent = 'purchase' | 'upsell'\n\n/** Surfaces that render inline (vs. those that open on click). */\nexport const INLINE_SURFACES: ReadonlySet<CheckoutSurface> = new Set<CheckoutSurface>([\n  'express',\n  'element',\n  'embedded',\n])\n\nexport function isInlineSurface(surface: CheckoutSurface): boolean {\n  return INLINE_SURFACES.has(surface)\n}\n\n/**\n * The kind of off-session upsell (researched against Funnelfox's changelog, which\n * ships these as distinct features). The discriminating real-world constraint is\n * **stacking a 2nd concurrent subscription** — Paddle can't, SolidGate/Stripe can.\n */\nexport type UpsellKind =\n  | 'subscription' // charge a NEW, 2nd concurrent subscription off-session (stacking)\n  | 'one-time' // charge a one-time add-on off-session\n  | 'upgrade' // change the existing subscription's plan\n\n/** Reliability of an off-session upsell charge AFTER a purchase on a surface. */\nexport type OffSessionReliability =\n  | 'reliable' // we hold the saved method (Stripe Elements / SolidGate) or the provider charges it (Paddle / Whop API)\n  | 'conditional' // possible but may decline — Stripe **managed** checkout (vault charge, SCA not guaranteed) or an orchestrator's PSP-dependent routing (Primer)\n  | 'none'\n\nexport interface SurfaceCapability {\n  purchase: boolean\n  /** Apple/Google Pay available on this surface. */\n  wallets: boolean\n  /** Reliability of an off-session upsell after a purchase on this surface. */\n  offSession: OffSessionReliability\n  /**\n   * Per-surface DRIVER readiness. Absent = renderable now (the provider's driver mounts it).\n   * `'planned'` = the provider genuinely ships this surface (cite it in the profile) but OUR\n   * driver doesn't render it yet — publish validation FAILS CLOSED on it so we never promise a\n   * surface the runtime can't produce. Mirrors the provider-level {@link ProviderProfile.status}\n   * seam at surface granularity: implement the driver, drop the flag, and it flips on cleanly.\n   */\n  driver?: 'planned'\n}\n\n/**\n * How a provider composes a TRIAL — the scattered provider `if`s made a matrix dimension\n * (§7 item 4). Stripe trials are **composed** (a separate fee/vault step precedes the sub);\n * Paddle trials are **native** (the price itself carries the trial, MoR collects up front):\n *  - `paid_composed` — Stripe: trial-fee PaymentIntent → subscription with `trial_period_days`.\n *  - `free_vault`    — Stripe: SetupIntent vaults the card (no charge) → trial subscription.\n *  - `paid_native`   — Paddle: the price carries the paid trial; one item, collected up front.\n *  - `free_native`   — Paddle: native free trial on the price.\n * A provider with an EMPTY `trialShapes` can't run a trial offer (planned providers → fail closed).\n */\nexport type TrialShape = 'paid_composed' | 'free_vault' | 'paid_native' | 'free_native'\n\nexport interface ProviderProfile {\n  /** Merchant-of-Record (handles tax/compliance) vs. a PSP you settle through. */\n  isMoR: boolean\n  /** Upsell kinds this provider can charge off-session (one-click, no re-entry). */\n  offSessionUpsells: UpsellKind[]\n  /** Who charges the saved method off-session: you (PSP) or the provider (MoR/managed). */\n  tokenModel: 'merchant' | 'provider'\n  /** Routes across multiple processors (Primer; SolidGate also offers this) vs. a single acquirer. */\n  orchestrator: boolean\n  /**\n   * Driver tier (Wave-4 decision, Simon 2026-07-02): `full` = a real driver ships\n   * (Stripe, Paddle); `planned` = profile only — authoring/publish validate against\n   * it, but no charge path exists yet (Whop, Primer, SolidGate). A new provider\n   * becomes buildable by writing a driver; its profile already gates what authors\n   * can express, so funnels written today stay valid when the driver lands.\n   */\n  status: 'full' | 'planned'\n  /**\n   * TRIAL shapes this provider can run (§7 item 4). Empty = no trial path (fail closed at\n   * publish — a paid/free-trial funnel on this provider can't be produced yet).\n   */\n  trialShapes: TrialShape[]\n  /** Supported surfaces → per-surface capabilities. **Absent = not supported.** */\n  surfaces: Partial<Record<CheckoutSurface, SurfaceCapability>>\n}\n\n/** Reliable off-session after this surface (we/the provider hold a chargeable method). */\nconst ON: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable' }\n/** Stripe-managed checkout: a purchase works, but the off-session upsell may decline. */\nconst MANAGED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/** Orchestrator-routed (Primer): off-session depends on which PSP vaulted the method. */\nconst ROUTED: SurfaceCapability = { purchase: true, wallets: true, offSession: 'conditional' }\n/**\n * Paddle **Express Checkout** (Apple-Pay-first mobile variant of Paddle.js checkout, shipped\n * 2026-04-27 — https://developer.paddle.com/changelog/2026/apple-pay-express-checkout/). Paddle\n * genuinely offers it (MoR, so it's their hosted/inline frame surfaced wallet-first, NOT a raw\n * wallet element in our UI), which is why it's a distinct `express` surface here rather than only\n * the `wallets` flag already true on Paddle's embedded/popup. But our Paddle DRIVER doesn't render\n * it yet (drivers/paddle.tsx opens the standard embedded/overlay checkout regardless of surface),\n * so `driver: 'planned'` fails it closed at publish — the matrix records reality without promising\n * a wallet-first render the runtime can't produce. Off-session stays reliable (provider-token, MoR).\n */\nconst PADDLE_EXPRESS: SurfaceCapability = { purchase: true, wallets: true, offSession: 'reliable', driver: 'planned' }\nconst ALL_UPSELLS: UpsellKind[] = ['subscription', 'one-time', 'upgrade']\n\n/**\n * Provider capabilities (researched 2026-06-23 against provider docs + Funnelfox;\n * trial mechanics re-verified 2026-07-02, doc 09 §4.4).\n *\n * Three real-world corrections to the naive model:\n *  1. **Off-session upsell support is per-provider by *kind*** (`offSessionUpsells`):\n *     Paddle can't stack a 2nd concurrent subscription (upgrade + one-time only);\n *     Stripe/SolidGate/Whop/Primer can do all kinds.\n *  2. **Off-session *reliability* varies by the paywall surface** (`SurfaceCapability.\n *     offSession`): Stripe **managed** checkout (`embedded`/`redirect`) upsells as a\n *     direct charge against Stripe's vault → `conditional` (may decline); Elements\n *     surfaces are `reliable`. Primer is `conditional` everywhere (PSP-dependent).\n *  3. **Surface availability is a hard constraint.** MoR/managed providers can't\n *     expose a raw card field to your own UI: Paddle has no `express`/`element`/your\n *     `sheet`; Whop has no raw `element`/`express`; Primer has no hosted `redirect`;\n *     Stripe/SolidGate have no `popup`. A missing entry means \"not possible.\"\n */\nexport const PROVIDER_PROFILES: Record<CheckoutProvider, ProviderProfile> = {\n  // PSP; you hold the PaymentMethod and fire your own off-session PaymentIntent on\n  // the Elements surfaces (reliable). **Managed** Checkout (`embedded`/`redirect`)\n  // upsells too, but as a direct charge against Stripe's vaulted card → conditional.\n  // No provider \"popup\" surface.\n  stripe: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: false, status: 'full',\n    // Composed trials: paid = fee PaymentIntent + sub (trial_period_days); free = SetupIntent vault\n    // + trial sub (services/checkout/stripe-trial.ts).\n    trialShapes: ['paid_composed', 'free_vault'],\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: MANAGED, redirect: MANAGED },\n  },\n  // Merchant-of-Record; raw card entry is always Paddle's frame → no own element/sheet.\n  // `express` IS now present (Apple-Pay-first Express Checkout, shipped 2026-04-27) but is\n  // driver-planned (PADDLE_EXPRESS) → publish fails it closed until the driver renders it.\n  // Off-session via subscription one-time charge / collection_mode, but **no 2nd concurrent\n  // subscription** (upgrade + one-time only), provider-initiated.\n  paddle: {\n    isMoR: true, offSessionUpsells: ['one-time', 'upgrade'], tokenModel: 'provider', orchestrator: false, status: 'full',\n    // Native trials: the price itself carries the trial, Paddle collects up front / vaults\n    // (services/checkout/paddle-checkout.ts — \"Paddle paid trials are NATIVE\").\n    trialShapes: ['paid_native', 'free_native'],\n    surfaces: { embedded: ON, popup: ON, redirect: ON, express: PADDLE_EXPRESS },\n  },\n  // Merchant-of-Record; iframe-only (no raw card field). Off-session works\n  // (provider-initiated, async via webhooks). `sheet` = our chrome hosting their embed.\n  // Trial shape not yet researched → empty (fail closed until the driver + profile land).\n  whop: {\n    isMoR: true, offSessionUpsells: ALL_UPSELLS, tokenModel: 'provider', orchestrator: false, status: 'planned',\n    trialShapes: [],\n    surfaces: { embedded: ON, redirect: ON, sheet: ON },\n  },\n  // Pure orchestrator (PSP-side); Headless renders express/element/sheet/embedded.\n  // No hosted redirect page, no popup checkout. Off-session is PSP-conditional —\n  // the vault lives with whichever processor Primer routed to (data matches this\n  // comment as of 2026-07-02; it previously said conditional but coded reliable).\n  primer: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    trialShapes: [],\n    surfaces: { express: ROUTED, element: ROUTED, sheet: ROUTED, embedded: ROUTED },\n  },\n  // PSP **and** orchestrator (own acquiring + connectors routing across Stripe/Adyen/\n  // PayPal). One Payment Form (element/sheet/embedded) + hosted page + wallet button.\n  // Strong native off-session (Recurring API). No popup.\n  solidgate: {\n    isMoR: false, offSessionUpsells: ALL_UPSELLS, tokenModel: 'merchant', orchestrator: true, status: 'planned',\n    trialShapes: [],\n    surfaces: { express: ON, element: ON, sheet: ON, embedded: ON, redirect: ON },\n  },\n}\n\nexport interface ValidationResult {\n  ok: boolean\n  reason?: string\n  /** Non-fatal caveat (e.g. Paddle upgrade-only). */\n  note?: string\n}\n\n/** Surfaces a provider supports, for the editor/AI to steer authors. */\nexport function surfacesFor(provider: CheckoutProvider): CheckoutSurface[] {\n  return Object.keys(PROVIDER_PROFILES[provider]?.surfaces ?? {}) as CheckoutSurface[]\n}\n\n/** Whether a provider is a Merchant of Record (it owns tax/compliance). */\nexport function isMerchantOfRecord(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.isMoR ?? false\n}\n\n/** Whether a provider routes across multiple processors (Primer, SolidGate). */\nexport function isOrchestrator(provider: CheckoutProvider): boolean {\n  return PROVIDER_PROFILES[provider]?.orchestrator ?? false\n}\n\n/**\n * Validate a (provider, surface) for a **purchase**: the surface must exist for\n * the provider and accept a payment. Surface availability is the real constraint\n * (e.g. Paddle has no `element`).\n */\nexport function validateCheckout(provider: CheckoutProvider, surface: CheckoutSurface): ValidationResult {\n  const cap = PROVIDER_PROFILES[provider]?.surfaces[surface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${surface}' surface` }\n  if (!cap.purchase) return { ok: false, reason: `'${surface}' can't take a purchase on ${provider}` }\n  // The provider offers this surface but our driver can't render it yet (e.g. Paddle Express\n  // Checkout) → fail closed so publish never promises a surface the runtime can't produce.\n  if (cap.driver === 'planned') return { ok: false, reason: `${provider} '${surface}' checkout isn't renderable yet (the provider ships it, but our driver doesn't render it)` }\n  return { ok: true }\n}\n\n/** Trial shapes a provider can compose (empty = it can't run a trial offer yet). */\nexport function trialShapesFor(provider: CheckoutProvider): TrialShape[] {\n  return PROVIDER_PROFILES[provider]?.trialShapes ?? []\n}\n\n/**\n * Validate that a provider can run a TRIAL (§7 item 4). Pass a specific {@link TrialShape} to\n * check that exact shape; omit it to assert the provider supports *any* trial (the cheap gate\n * check when only the offering's TRIAL-role binding existence is known). A provider with no\n * trial shapes (every planned provider) fails closed.\n */\nexport function validateTrial(provider: CheckoutProvider, shape?: TrialShape): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  const shapes = profile.trialShapes\n  if (shapes.length === 0) return { ok: false, reason: `${provider} can't run a trial offer yet` }\n  if (shape && !shapes.includes(shape)) {\n    return { ok: false, reason: `${provider} doesn't support a '${shape}' trial (it supports: ${shapes.join(', ')})` }\n  }\n  return { ok: true }\n}\n\n/**\n * Validate an **off-session upsell** of `kind` after a purchase made on\n * `paywallSurface`. Combines provider support for the kind (Paddle can't stack a\n * 2nd subscription) with the paywall surface's off-session reliability (Stripe\n * managed checkout is `conditional` — returned as a `note`, not a hard block).\n */\nexport function validateUpsell(\n  provider: CheckoutProvider,\n  paywallSurface: CheckoutSurface,\n  kind: UpsellKind = 'subscription',\n): ValidationResult {\n  const profile = PROVIDER_PROFILES[provider]\n  if (!profile) return { ok: false, reason: `unknown provider '${provider}'` }\n  if (!profile.offSessionUpsells.includes(kind)) {\n    const can = profile.offSessionUpsells.length ? ` (it supports: ${profile.offSessionUpsells.join(', ')})` : ''\n    return { ok: false, reason: `${provider} can't charge a '${kind}' upsell off-session${can}` }\n  }\n  const cap = profile.surfaces[paywallSurface]\n  if (!cap) return { ok: false, reason: `${provider} has no '${paywallSurface}' surface to upsell after` }\n  if (cap.offSession === 'none') {\n    return { ok: false, reason: `a purchase on '${paywallSurface}' retains no chargeable method for an upsell` }\n  }\n  if (cap.offSession === 'conditional') {\n    return { ok: true, note: `off-session upsell after ${provider} '${paywallSurface}' may decline — prefer a reliable surface or wire an on-session fallback` }\n  }\n  return { ok: true }\n}\n\n// ── Checkout error taxonomy (pure — drivers + server both normalize into it) ──\n\n/**\n * Normalized failure category — the driver/platform maps each provider's decline\n * codes into one of these so funnels can route/recover by reason. `authentication_\n * required` (3DS/SCA) and `requires_payment_method` are the cases an **off-session**\n * upsell can't satisfy → recover on-session (re-collect a card).\n */\nexport type CheckoutErrorCategory =\n  | 'card_declined'\n  | 'insufficient_funds'\n  | 'expired_card'\n  | 'prepaid_card' // card funding is prepaid — trials/subscriptions commonly decline; route to a real-card recapture page\n  | 'authentication_required' // SCA/3DS needed — off-session can't challenge\n  | 'requires_payment_method' // no usable saved method\n  | 'processing_error'\n  | 'canceled'\n  | 'unknown'\n\nexport interface CheckoutError {\n  category: CheckoutErrorCategory\n  message: string\n  /** Raw provider decline code, if any (e.g. Stripe `card_declined`/`insufficient_funds`). */\n  declineCode?: string\n  /** Whether re-attempting (e.g. an on-session re-collection) may succeed. */\n  retryable: boolean\n}\n\n/** Build a {@link CheckoutError} (driver/test helper). */\nexport function checkoutError(\n  category: CheckoutErrorCategory,\n  message: string,\n  extra: { declineCode?: string; retryable?: boolean } = {},\n): CheckoutError {\n  const retryable = extra.retryable ?? (category === 'authentication_required' || category === 'requires_payment_method' || category === 'processing_error')\n  return { category, message, declineCode: extra.declineCode, retryable }\n}\n"]}

package/dist/{chunk-AXXG3ODP.js → chunk-VW2HVPR4.js}

@@ -37,7 +37,7 @@ function intervalLabel(interval, count) {
   }
   return { period: `${count} ${interval}s`, periodly: `every ${count} ${interval}s` };
 }
-function resolveProduct(input) {
+function resolveOffering(input) {
   const interval = input.interval ?? "one_time";
   const count = input.intervalCount ?? 1;
   const days = periodDays(interval, count);
@@ -65,7 +65,7 @@ function resolveProduct(input) {
   };
 }
 function buildCatalog(inputs) {
-  return new Map(inputs.map((i) => [i.id, resolveProduct(i)]));
+  return new Map(inputs.map((i) => [i.id, resolveOffering(i)]));
 }
 var EXPONENT_CACHE = /* @__PURE__ */ new Map();
 function currencyExponent(currency) {
@@ -93,7 +93,7 @@ function formatMoney(minor, currency, locale) {
   }
   return { amount, minor, currency: code, formatted };
 }
-function formatProduct(r, locale) {
+function formatOffering(r, locale) {
   const m = (minor) => formatMoney(minor, r.currency, locale);
   return {
     id: r.id,
@@ -143,7 +143,8 @@ function evaluateCondition(cond, s) {
       return typeof val === "number" && typeof value === "number" && val <= value;
     case "contains":
       if (typeof val === "string") return val.includes(String(value));
-      if (Array.isArray(val)) return val.includes(value);
+      if (Array.isArray(val))
+        return val.includes(value);
       return false;
     case "exists":
       return val !== void 0 && val !== null && val !== "";
@@ -207,13 +208,21 @@ function expectedPathLength(pages, startKey, s) {
 function defineFunnel(def) {
   return def;
 }
-function normalizeProducts(products) {
-  if (!products) return [];
-  if (Array.isArray(products)) return products.map((k) => ({ slot: k, catalogKey: k }));
-  return Object.entries(products).map(([slot, catalogKey]) => ({ slot, catalogKey: catalogKey ?? null }));
+function normalizeOfferings(offerings) {
+  if (!offerings) return [];
+  if (Array.isArray(offerings))
+    return offerings.map((k) => ({ slot: k, catalogKey: k }));
+  return Object.entries(offerings).map(([slot, catalogKey]) => ({
+    slot,
+    catalogKey: catalogKey ?? null
+  }));
 }
-function funnelCatalogKeys(products) {
-  return [...new Set(normalizeProducts(products).map((s) => s.catalogKey).filter((k) => !!k))];
+function funnelCatalogKeys(offerings) {
+  return [
+    ...new Set(
+      normalizeOfferings(offerings).map((s) => s.catalogKey).filter((k) => !!k)
+    )
+  ];
 }
 
 // src/flow/experiments.ts
@@ -258,28 +267,21 @@ function weightsOf(variants) {
   for (const [label, v] of Object.entries(variants)) out[label] = v.weight;
   return out;
 }
-function statusOf(exp) {
-  return exp.status ?? "running";
-}
 function resolveExperiments(pages, experiments, seed) {
   const assignments = {};
   const render = {};
   const experimentOf = {};
   const versionOf = {};
-  const pageKeys = new Set(pages.map((p) => p.key));
-  for (const exp of experiments) {
-    const status = statusOf(exp);
-    let label;
-    if (status === "stopped" && exp.winner) label = exp.winner;
-    else if (status === "running" && seed) label = assignVariant(exp.id, seed, weightsOf(exp.variants));
-    else continue;
-    const arm = exp.variants[label];
-    if (!arm) continue;
-    if (!pageKeys.has(arm.page) || !pageKeys.has(exp.slot)) continue;
-    assignments[exp.id] = label;
-    experimentOf[exp.slot] = exp.id;
-    if (exp.version !== void 0) versionOf[exp.id] = exp.version;
-    if (arm.page !== exp.slot) render[exp.slot] = arm.page;
+  if (seed) {
+    for (const exp of experiments) {
+      const label = assignVariant(exp.id, seed, weightsOf(exp.variants));
+      const arm = exp.variants[label];
+      if (!arm) continue;
+      assignments[exp.id] = label;
+      experimentOf[exp.slot] = exp.id;
+      if (exp.version !== void 0) versionOf[exp.id] = exp.version;
+      if (arm.page !== exp.slot) render[exp.slot] = arm.page;
+    }
   }
   const slotOf = {};
   const activeKeys = [];
@@ -290,55 +292,6 @@ function resolveExperiments(pages, experiments, seed) {
   }
   return { assignments, activeKeys, render, slotOf, experimentOf, versionOf };
 }
-function validateExperiments(experiments, pages) {
-  const errors = [];
-  const warnings = [];
-  const pageKeys = new Set(pages.map((p) => p.key));
-  const seenIds = /* @__PURE__ */ new Set();
-  const slotOwner = /* @__PURE__ */ new Map();
-  for (const exp of experiments) {
-    const err = (code, message) => errors.push({ experimentId: exp.id, code, message });
-    const warn = (code, message) => warnings.push({ experimentId: exp.id, code, message });
-    if (seenIds.has(exp.id)) err("duplicate_id", `Experiment id "${exp.id}" is used more than once.`);
-    seenIds.add(exp.id);
-    if (!pageKeys.has(exp.slot)) err("slot_missing", `Slot "${exp.slot}" is not a page in the funnel.`);
-    if (isVariantKey(exp.slot)) err("slot_is_variant", `Slot "${exp.slot}" is a variant page; a slot must be a real flow page.`);
-    if (slotOwner.has(exp.slot)) {
-      err("slot_conflict", `Slot "${exp.slot}" is already targeted by experiment "${slotOwner.get(exp.slot)}".`);
-    } else {
-      slotOwner.set(exp.slot, exp.id);
-    }
-    const arms = Object.entries(exp.variants);
-    if (arms.length < 2) warn("single_arm", `Experiment "${exp.id}" has fewer than two variants \u2014 nothing to test.`);
-    let hasControl = false;
-    let totalWeight = 0;
-    for (const [label, arm] of arms) {
-      if (!pageKeys.has(arm.page)) {
-        err("variant_page_missing", `Variant "${label}" references page "${arm.page}", which doesn't exist.`);
-      }
-      if (arm.page === exp.slot) hasControl = true;
-      else if (isVariantKey(arm.page) && parseSlotKey(arm.page).slot !== exp.slot) {
-        err("variant_slot_mismatch", `Variant "${label}" page "${arm.page}" belongs to a different slot than "${exp.slot}".`);
-      }
-      if (arm.weight < 0) err("negative_weight", `Variant "${label}" has a negative weight (${arm.weight}).`);
-      totalWeight += arm.weight;
-    }
-    if (!hasControl) err("no_control", `No variant of "${exp.id}" renders the slot "${exp.slot}" itself (the control/baseline).`);
-    if (totalWeight <= 0) err("no_traffic", `Experiment "${exp.id}" has no positive weight \u2014 no traffic would enter it.`);
-    if (statusOf(exp) === "stopped" && exp.winner && !exp.variants[exp.winner]) {
-      err("bad_winner", `Stopped experiment "${exp.id}" names winner "${exp.winner}", which isn't one of its variants.`);
-    }
-  }
-  const running = new Set(experiments.filter((e) => statusOf(e) === "running").flatMap(
-    (e) => Object.values(e.variants).map((v) => v.page)
-  ));
-  for (const p of pages) {
-    if (isVariantKey(p.key) && !running.has(p.key)) {
-      warnings.push({ experimentId: "*", code: "orphan_variant", message: `Variant page "${p.key}" is rendered by no running experiment.` });
-    }
-  }
-  return { ok: errors.length === 0, errors, warnings };
-}
 
 // src/manifest/manifest.ts
 function isVariantNode(page) {
@@ -376,7 +329,16 @@ function compileManifest(input) {
     return void 0;
   };
   pages.forEach((p, i) => {
-    if (isVariantNode(p)) return;
+    if (isVariantNode(p)) {
+      for (const route of p.meta?.next ?? []) {
+        if (!keys.has(route.to)) {
+          badTargets.push({ from: p.key, to: route.to });
+          continue;
+        }
+        edges.push({ from: p.key, to: route.to, kind: "branch", variant: true, condition: serializeGate(route.when) });
+      }
+      return;
+    }
     const routes = p.meta?.next ?? [];
     let hasUnconditional = false;
     for (const route of routes) {
@@ -395,20 +357,25 @@ function compileManifest(input) {
   const startPage = pages.find((p) => !isVariantNode(p));
   const start = startPage?.key ?? null;
   const variantKeys = new Set(pages.filter(isVariantNode).map((p) => p.key));
-  const productSlots = normalizeProducts(funnel.products);
-  const validation = validate(manifestPages, edges, badTargets, start, variantKeys, productSlots, input.productRefs);
+  const offeringSlots = normalizeOfferings(funnel.offerings);
+  const validation = validate(manifestPages, edges, badTargets, start, variantKeys, offeringSlots, input.offeringRefs);
   return {
     id: funnel.id,
     pages: manifestPages,
     flow: { start, nodes: manifestPages.map((p) => p.id), edges },
-    products: funnelCatalogKeys(funnel.products),
-    productSlots,
-    productRefs: input.productRefs,
+    offerings: funnelCatalogKeys(funnel.offerings),
+    offeringSlots,
+    offeringRefs: input.offeringRefs,
+    // Carry the funnel.ts `checkout:` bundle + the scanned checkout-surface usage for the publish
+    // capability gate. Both are provider-agnostic here (the SDK can't resolve offering→provider);
+    // the API gate combines them with the DB-resolved provider to run the (provider × surface) matrix.
+    checkout: funnel.checkout,
+    checkoutRefs: input.checkoutRefs,
     locales: funnel.locales,
     validation
   };
 }
-function validate(pages, edges, badTargets, start, variantKeys, slots, productRefs) {
+function validate(pages, edges, badTargets, start, variantKeys, slots, offeringRefs) {
   const outgoing = /* @__PURE__ */ new Map();
   for (const e of edges) outgoing.set(e.from, (outgoing.get(e.from) ?? 0) + 1);
   const deadEnds = pages.filter((p) => p.type !== "finish" && !variantKeys.has(p.id) && !(outgoing.get(p.id) > 0)).map((p) => p.id);
@@ -420,6 +387,12 @@ function validate(pages, edges, badTargets, start, variantKeys, slots, productRe
       if (list) list.push(e.to);
       else adj.set(e.from, [e.to]);
     }
+    for (const p of pages) {
+      if (p.variantOf === void 0) continue;
+      const list = adj.get(p.variantOf);
+      if (list) list.push(p.id);
+      else adj.set(p.variantOf, [p.id]);
+    }
     const stack = [start];
     while (stack.length) {
       const id = stack.pop();
@@ -449,12 +422,12 @@ function validate(pages, edges, badTargets, start, variantKeys, slots, productRe
   const noReachableFinish = start !== null && !pages.some((p) => p.type === "finish" && reachable.has(p.id));
   const declaredSlots = new Set(slots.map((s) => s.slot));
   const assignedSlots = new Set(slots.filter((s) => s.catalogKey).map((s) => s.slot));
-  const refs = productRefs ?? [];
-  const unknownProductRefs = [...new Set(refs.filter((r) => !declaredSlots.has(r)))];
+  const refs = offeringRefs ?? [];
+  const unknownOfferingRefs = [...new Set(refs.filter((r) => !declaredSlots.has(r)))];
   const unassignedSlots = [...new Set(refs.filter((r) => declaredSlots.has(r) && !assignedSlots.has(r)))];
   return {
     // Original hard errors AND the structural ones; slug collisions stay a warning.
-    ok: deadEnds.length === 0 && unreachable.length === 0 && badTargets.length === 0 && !missingEmailCapture && duplicateKeys.length === 0 && orphanVariants.length === 0 && !noReachableFinish && unknownProductRefs.length === 0 && unassignedSlots.length === 0,
+    ok: deadEnds.length === 0 && unreachable.length === 0 && badTargets.length === 0 && !missingEmailCapture && duplicateKeys.length === 0 && orphanVariants.length === 0 && !noReachableFinish && unknownOfferingRefs.length === 0 && unassignedSlots.length === 0,
     deadEnds,
     unreachable,
     badTargets,
@@ -463,11 +436,11 @@ function validate(pages, edges, badTargets, start, variantKeys, slots, productRe
     slugCollisions,
     orphanVariants,
     noReachableFinish,
-    unknownProductRefs,
+    unknownOfferingRefs,
     unassignedSlots
   };
 }
 
-export { assignVariant, bucketingSeed, buildCatalog, compileManifest, currencyExponent, defineFunnel, definePage, entryGuard, evaluateCondition, evaluateGate, expectedPathLength, fnv1a, formatMoney, formatProduct, funnelCatalogKeys, hashToUnit, isRtl, isVariantKey, nextPage, normalizeProducts, outgoingKeys, pageMeta, parseSlotKey, pickByWeight, resolveExperiments, resolveLocale, resolveProduct, resolveRoute, validateExperiments, weightsOf };
-//# sourceMappingURL=chunk-AXXG3ODP.js.map
-//# sourceMappingURL=chunk-AXXG3ODP.js.map
+export { assignVariant, bucketingSeed, buildCatalog, compileManifest, currencyExponent, defineFunnel, definePage, entryGuard, evaluateCondition, evaluateGate, expectedPathLength, fnv1a, formatMoney, formatOffering, funnelCatalogKeys, hashToUnit, isRtl, isVariantKey, nextPage, normalizeOfferings, outgoingKeys, pageMeta, parseSlotKey, pickByWeight, resolveExperiments, resolveLocale, resolveOffering, resolveRoute, weightsOf };
+//# sourceMappingURL=chunk-VW2HVPR4.js.map
+//# sourceMappingURL=chunk-VW2HVPR4.js.map