@appfunnel-dev/sdk 2.0.0 → 2.1.0

package/dist/{chunk-KVMNVX6J.js → chunk-USAECFWO.js}

@@ -72,7 +72,15 @@ function postComplete(ctx, correlationId, providerRef) {
   );
 }
 function settlementToResult(s) {
-  return { ok: true, amountMinor: s.amountMinor, currency: s.currency, eventId: s.eventId };
+  return {
+    ok: true,
+    amountMinor: s.amountMinor,
+    currency: s.currency,
+    eventId: s.eventId,
+    // Carried through so the checkout hook can tell a trial start from a purchase — it decides
+    // which conversion event fires, and the browser has no other honest source for it.
+    acquisition: s.acquisition
+  };
 }
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 async function completeWithPoll(ctx, correlationId, opts = {}) {
@@ -118,5 +126,5 @@ function leaveForRedirect(url) {
 }
 
 export { completeWithPoll, leaveForRedirect, postComplete, postSession, settlementToResult, toCheckoutError };
-//# sourceMappingURL=chunk-KVMNVX6J.js.map
-//# sourceMappingURL=chunk-KVMNVX6J.js.map
+//# sourceMappingURL=chunk-USAECFWO.js.map
+//# sourceMappingURL=chunk-USAECFWO.js.map

package/dist/chunk-USAECFWO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/drivers/wire.ts"],"names":[],"mappings":";;;AAiCA,SAAS,QAAA,CAAS,GAAA,EAA4B,IAAA,GAAO,EAAA,EAAY;AAC/D,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC3C,EAAA,IAAI,IAAI,OAAA,EAAS;AACf,IAAA,MAAM,IAAA,GAAO,CAAA,SAAA,EAAY,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,OAAO,CAAC,CAAA,GAAA,EAAM,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,KAAK,CAAC,CAAA,CAAA;AAC3G,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,YAAA,EAAe,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAC,CAAA,iBAAA,EAAoB,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA;AAAA,EAC9F;AACA,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,kBAAA,CAAmB,IAAI,UAAA,IAAc,EAAE,CAAC,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA;AACxF;AAEA,eAAe,QAAA,CAAY,KAAa,IAAA,EAA2B;AACjE,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAC3B,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC1B,CAAA;AAGD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,cAAc,kBAAA,EAAoB,CAAA,8BAAA,EAAiC,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACnG,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AACzB;AAGO,SAAS,gBAAgB,CAAA,EAA2B;AACzD,EAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,IAAY,cAAc,CAAA,IAAK,SAAA,IAAa,CAAA,IAAK,WAAA,IAAe,CAAA,EAAG;AACvF,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,cAAc,kBAAA,EAAoB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,yBAAyB,CAAA;AACrG;AAmBA,SAAS,gBAAA,GAAuC;AAC9C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAA;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,MAAA,CAAO,SAAS,IAAI,CAAA;AACxC,IAAA,GAAA,CAAI,YAAA,CAAa,OAAO,aAAa,CAAA;AACrC,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEO,SAAS,WAAA,CACd,GAAA,EACA,GAAA,EACA,aAAA,EACkC;AAClC,EAAA,MAAM,IAAA,GAA+B;AAAA,IACnC,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,MAAM,GAAA,CAAI,IAAA;AAAA;AAAA;AAAA,IAGV,UAAA,EAAY,GAAA,CAAI,UAAA,IAAc,GAAA,CAAI,OAAA;AAAA,IAClC,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,MAAM,GAAA,CAAI,IAAA;AAAA;AAAA;AAAA,IAGV,OAAA,EAAS,IAAI,OAAA,IAAW,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKxB,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,IAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA;AAAA;AAAA,IAG5B,OAAO,GAAA,CAAI,KAAA;AAAA;AAAA;AAAA;AAAA,IAIX,WAAW,gBAAA,EAAiB;AAAA,IAC5B;AAAA,GACF;AACA,EAAA,OAAO,QAAA,CAAkC,QAAA,CAAS,GAAG,CAAA,EAAG,IAAI,CAAA;AAC9D;AAGO,SAAS,YAAA,CACd,GAAA,EACA,aAAA,EACA,WAAA,EACmC;AACnC,EAAA,MAAM,IAAA,GAAgC,EAAE,WAAA,EAAY;AACpD,EAAA,OAAO,QAAA;AAAA,IACL,SAAS,GAAA,EAAK,CAAA,CAAA,EAAI,kBAAA,CAAmB,aAAa,CAAC,CAAA,SAAA,CAAW,CAAA;AAAA,IAC9D;AAAA,GACF;AACF;AAGO,SAAS,mBAAmB,CAAA,EAAuC;AACxE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,SAAS,CAAA,CAAE,OAAA;AAAA;AAAA;AAAA,IAGX,aAAa,CAAA,CAAE;AAAA,GACjB;AACF;AAYA,IAAM,KAAA,GAAQ,CAAC,EAAA,KAAe,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAUpF,eAAsB,gBAAA,CACpB,GAAA,EACA,aAAA,EACA,IAAA,GAA4B,EAAC,EACJ;AACzB,EAAA,MAAM,QAAA,GAAW,KAAK,QAAA,IAAY,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,GAAA;AACtC,EAAA,IAAI;AACF,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,CAAA,EAAA,EAAK;AACjC,MAAA,MAAM,MAAM,MAAM,YAAA,CAAa,GAAA,EAAK,aAAA,EAAe,KAAK,WAAW,CAAA;AACnE,MAAA,IAAI,IAAI,IAAA,KAAS,SAAA,EAAW,OAAO,kBAAA,CAAmB,IAAI,MAAM,CAAA;AAChE,MAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM;AAChE,MAAA,IAAI,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,MAAM,MAAM,UAAU,CAAA;AAAA,IAC9C;AAAA,EACF,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,eAAA,CAAgB,CAAC,CAAA,EAAE;AAAA,EAChD;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,KAAA,EAAO,aAAA;AAAA,MACL,kBAAA;AAAA,MACA,KAAK,cAAA,IAAkB,0EAAA;AAAA;AAAA;AAAA;AAAA,MAIvB,EAAE,SAAA,EAAW,IAAA,EAAM,WAAA,EAAa,oBAAA;AAAqB;AACvD,GACF;AACF;AAkBO,SAAS,iBAAiB,GAAA,EAAsC;AACrE,EAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,KAAY;AAC9C,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAA+B;AACjD,QAAA,IAAI,CAAC,MAAM,SAAA,EAAW;AACtB,QAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,UAAU,CAAA;AACjD,QAAA,OAAA,CAAQ;AAAA,UACN,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,aAAA,CAAc,UAAA,EAAY,sDAAsD;AAAA,SACxF,CAAA;AAAA,MACH,CAAA;AACA,MAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,UAAU,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAC5B,CAAC,CAAA;AACH","file":"chunk-USAECFWO.js","sourcesContent":["/**\n * Shared wire plumbing for the checkout drivers — the CLIENT half of the v2\n * checkout contract (commerce/checkout-api.ts). Lives under drivers/ (not\n * commerce/) on purpose: it ships only inside the `driver-*` subpath entries,\n * so the core funnel entry never bundles a checkout fetch — the core SDK talks\n * to a {@link CheckoutDriver}, never to the wire.\n *\n * Only `import type` from commerce/checkout(.tsx) here — a runtime import would\n * drag the React checkout primitives into every driver chunk. The one runtime\n * dependency is the pure error taxonomy (capabilities.ts).\n */\nimport type {\n  CheckoutCompleteRequest,\n  CheckoutCompleteResponse,\n  CheckoutSessionRequest,\n  CheckoutSessionResponse,\n  CheckoutSettlement,\n} from '../commerce/checkout-api'\nimport type { CheckoutDriverContext, CheckoutRequest, CheckoutResult } from '../commerce/checkout'\nimport { checkoutError, type CheckoutError } from '../commerce/capabilities'\n\n/**\n * The ONE place a driver's URL is decided — which is why adding the preview surface needed no\n * change in driver-stripe / driver-paddle, and needs none in whatever driver ships next. Two\n * surfaces, one wire contract:\n *\n *  - campaign  → `{apiBase}/campaign/{campaignId}/v2/checkout{path}`\n *  - preview   → `{apiBase}/v2/funnels/{funnelId}/preview-checkout{path}?buildId=…&t=…`\n *\n * The preview surface carries its auth in the query string (the build id + the HMAC token the\n * renderer already served the page with); the request BODY is byte-identical between the two, so\n * the server parses one schema either way.\n */\nfunction endpoint(ctx: CheckoutDriverContext, path = ''): string {\n  const base = ctx.apiBase.replace(/\\/+$/, '')\n  if (ctx.preview) {\n    const auth = `?buildId=${encodeURIComponent(ctx.preview.buildId)}&t=${encodeURIComponent(ctx.preview.token)}`\n    return `${base}/v2/funnels/${encodeURIComponent(ctx.funnelId)}/preview-checkout${path}${auth}`\n  }\n  return `${base}/campaign/${encodeURIComponent(ctx.campaignId ?? '')}/v2/checkout${path}`\n}\n\nasync function postJson<T>(url: string, body: unknown): Promise<T> {\n  const res = await fetch(url, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  })\n  // The contract speaks in `step` responses, not HTTP errors — a non-2xx means the\n  // request never reached the checkout service properly (proxy, deploy, outage).\n  if (!res.ok) throw checkoutError('processing_error', `checkout request failed (HTTP ${res.status})`)\n  return (await res.json()) as T\n}\n\n/** Normalize any thrown value into the taxonomy (network drops → `processing_error`). */\nexport function toCheckoutError(e: unknown): CheckoutError {\n  if (e && typeof e === 'object' && 'category' in e && 'message' in e && 'retryable' in e) {\n    return e as CheckoutError\n  }\n  return checkoutError('processing_error', e instanceof Error ? e.message : 'Checkout request failed')\n}\n\n/**\n * Open a checkout attempt: `POST {apiBase}/campaign/{campaignId}/v2/checkout`.\n * The correlationId is client-minted per ATTEMPT (idempotency key + the id the\n * server stamps into provider metadata) — mint it once, reuse it on retries.\n */\n/**\n * The current page as a hosted checkout's return target — with `af_checkout` REMOVED.\n *\n * That param is the settle leg's correlation id, and it is not always cleaned up: a resume that\n * ends in `completion_timeout` (a slow webhook, an async/MoR settlement) deliberately leaves it in\n * the address bar so a reload can retry, and the URL sync then carries it onto every later page.\n * Sending it back would make the server append a SECOND `af_checkout`, and `searchParams.get()`\n * returns the FIRST — so the buyer's new, paid attempt would never settle client-side while a\n * stale one replayed. Same reason a seeded `?af_checkout=` in an ad URL must not survive to here.\n *\n * Everything else (utm, click ids) is kept: the return load re-reads it for attribution.\n */\nfunction currentReturnUrl(): string | undefined {\n  if (typeof window === 'undefined') return undefined\n  try {\n    const url = new URL(window.location.href)\n    url.searchParams.delete('af_checkout')\n    return url.toString()\n  } catch {\n    return undefined\n  }\n}\n\nexport function postSession(\n  ctx: CheckoutDriverContext,\n  req: CheckoutRequest,\n  correlationId: string,\n): Promise<CheckoutSessionResponse> {\n  const body: CheckoutSessionRequest = {\n    funnelId: ctx.funnelId,\n    mode: ctx.mode,\n    // The CHARGE identity is the catalog key (resolved from the slot by driverWithCatalog); fall back\n    // to `product` for legacy builds where the page named the catalog key directly.\n    productKey: req.catalogKey ?? req.product,\n    intent: req.intent,\n    kind: req.kind,\n    // null (not absent) = explicit off-session — the server validates surfaces\n    // against the capability matrix, so never let one default in transit.\n    surface: req.surface ?? null,\n    // The provider VARIANT the author chose for this checkout (Stripe Managed Payments today).\n    // Forwarded verbatim, never defaulted: `undefined` drops out of the JSON entirely, so a\n    // non-managed attempt puts the exact same bytes on the wire it always has. The server owns\n    // the other half of the gate — it re-validates the claim against the store's eligibility.\n    managed: req.managed,\n    sessionId: ctx.sessionId ?? undefined,\n    visitorId: ctx.visitorId ?? undefined,\n    // Buyer email collected by the funnel (user.email) — Stripe Customer creation,\n    // receipts, Paddle prefill. Injected at attempt time by the FunnelProvider seam.\n    email: req.email,\n    // The page the buyer is leaving, so a hosted checkout returns them TO IT (with `?af_checkout=`)\n    // instead of to the site root. The server keeps only path+query and re-derives the origin from\n    // the request headers, so this can't redirect anyone off-domain. Absent during SSR.\n    returnUrl: currentReturnUrl(),\n    correlationId,\n  }\n  return postJson<CheckoutSessionResponse>(endpoint(ctx), body)\n}\n\n/** Ask the server to VERIFY with the provider and write the money facts (idempotent). */\nexport function postComplete(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  providerRef?: string,\n): Promise<CheckoutCompleteResponse> {\n  const body: CheckoutCompleteRequest = { providerRef }\n  return postJson<CheckoutCompleteResponse>(\n    endpoint(ctx, `/${encodeURIComponent(correlationId)}/complete`),\n    body,\n  )\n}\n\n/** Server settlement → the SDK's CheckoutResult (eventId passes through for pixel dedup). */\nexport function settlementToResult(s: CheckoutSettlement): CheckoutResult {\n  return {\n    ok: true,\n    amountMinor: s.amountMinor,\n    currency: s.currency,\n    eventId: s.eventId,\n    // Carried through so the checkout hook can tell a trial start from a purchase — it decides\n    // which conversion event fires, and the browser has no other honest source for it.\n    acquisition: s.acquisition,\n  }\n}\n\nexport interface CompletePollOptions {\n  providerRef?: string\n  /** Total complete attempts before giving up (default 5). */\n  attempts?: number\n  /** Delay between attempts (default 2000ms). */\n  intervalMs?: number\n  /** Error message when the provider hasn't confirmed inside the window (MoR/async). */\n  timeoutMessage?: string\n}\n\nconst sleep = (ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms))\n\n/**\n * Complete with a bounded poll. Sync providers (Stripe) settle on the first\n * attempt — the server verifies against the provider inline. MoR/async providers\n * (Paddle) settle via webhook, so `pending` is normal: re-poll a few times, then\n * stop holding the UI hostage — the charge may still land server-side, which is\n * why the timeout error is `retryable` and the message should say the receipt\n * can still arrive (the server's money facts don't depend on this browser).\n */\nexport async function completeWithPoll(\n  ctx: CheckoutDriverContext,\n  correlationId: string,\n  opts: CompletePollOptions = {},\n): Promise<CheckoutResult> {\n  const attempts = opts.attempts ?? 5\n  const intervalMs = opts.intervalMs ?? 2000\n  try {\n    for (let i = 0; i < attempts; i++) {\n      const res = await postComplete(ctx, correlationId, opts.providerRef)\n      if (res.step === 'settled') return settlementToResult(res.result)\n      if (res.step === 'failed') return { ok: false, error: res.error }\n      if (i < attempts - 1) await sleep(intervalMs)\n    }\n  } catch (e) {\n    return { ok: false, error: toCheckoutError(e) }\n  }\n  return {\n    ok: false,\n    error: checkoutError(\n      'processing_error',\n      opts.timeoutMessage ?? 'The payment has not been confirmed yet — please check back shortly.',\n      // `completion_timeout` marks \"the poll ran out while the attempt was still\n      // pending\" — drivers key double-charge guards on it (the attempt may still\n      // settle server-side; it was never refused).\n      { retryable: true, declineCode: 'completion_timeout' },\n    ),\n  }\n}\n\n/**\n * The `redirect` step hand-off: navigate to the provider-hosted page and return a\n * promise that settles ONLY if the buyer comes back to this very page. The page\n * is leaving — resolving early would fire `purchase.complete`/navigation for a\n * charge that hasn't happened, and rejecting would flash an error during the\n * (successful) hand-off — so while the navigation proceeds the promise stays\n * pending and `useCheckout` stays in `loading`, the truthful UI for a page\n * mid-navigation. The hosted page's SUCCESS return URL re-enters the funnel with\n * `af_checkout={correlationId}` (a fresh load — this promise is gone; the SDK's\n * resume leg settles the attempt).\n *\n * The one way THIS page comes back to life is a bfcache restore (browser Back\n * from the hosted page): `pageshow` with `persisted: true`. That is a buyer who\n * abandoned the hosted checkout — resolve `canceled` so the trigger re-enables\n * and inline redirect placeholders recover instead of spinning forever.\n */\nexport function leaveForRedirect(url: string): Promise<CheckoutResult> {\n  return new Promise<CheckoutResult>((resolve) => {\n    if (typeof window !== 'undefined') {\n      const onPageshow = (event: PageTransitionEvent) => {\n        if (!event.persisted) return\n        window.removeEventListener('pageshow', onPageshow)\n        resolve({\n          ok: false,\n          error: checkoutError('canceled', 'Returned from the hosted checkout without completing'),\n        })\n      }\n      window.addEventListener('pageshow', onPageshow)\n    }\n    window.location.assign(url)\n  })\n}\n"]}

package/dist/driver-paddle.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkMBTHQP4Z_cjs = require('./chunk-MBTHQP4Z.cjs');
+var chunkDTSLJ24T_cjs = require('./chunk-DTSLJ24T.cjs');
 var chunkRUYT27DT_cjs = require('./chunk-RUYT27DT.cjs');
 require('./chunk-O7I5CWRX.cjs');
 var react = require('react');
@@ -653,7 +653,7 @@ async function openCheckout(ctx, session, correlationId, appearance, display) {
       if (event.name === "checkout.completed") {
         done = true;
         listeners.delete(listener);
-        void chunkMBTHQP4Z_cjs.completeWithPoll(ctx, correlationId, {
+        void chunkDTSLJ24T_cjs.completeWithPoll(ctx, correlationId, {
           attempts: 10,
           intervalMs: 3e3,
           timeoutMessage: PADDLE_TIMEOUT_MESSAGE
@@ -692,29 +692,29 @@ function paddleCheckoutDriver(ctx) {
       if (prior) {
         pendingTimeouts.delete(priorKey);
         try {
-          const check = await chunkMBTHQP4Z_cjs.postComplete(ctx, prior);
-          if (check.step === "settled") return chunkMBTHQP4Z_cjs.settlementToResult(check.result);
+          const check = await chunkDTSLJ24T_cjs.postComplete(ctx, prior);
+          if (check.step === "settled") return chunkDTSLJ24T_cjs.settlementToResult(check.result);
         } catch {
         }
       }
       const correlationId = crypto.randomUUID();
       try {
-        const session = await chunkMBTHQP4Z_cjs.postSession(ctx, req, correlationId);
+        const session = await chunkDTSLJ24T_cjs.postSession(ctx, req, correlationId);
         switch (session.step) {
           case "settled":
-            return chunkMBTHQP4Z_cjs.settlementToResult(session.result);
+            return chunkDTSLJ24T_cjs.settlementToResult(session.result);
           case "pending":
             return rememberIfStillPending(
               req,
               correlationId,
-              await chunkMBTHQP4Z_cjs.completeWithPoll(ctx, correlationId, {
+              await chunkDTSLJ24T_cjs.completeWithPoll(ctx, correlationId, {
                 timeoutMessage: PADDLE_PENDING_TIMEOUT_MESSAGE
               })
             );
           case "failed":
             return { ok: false, error: session.error };
           case "redirect":
-            return chunkMBTHQP4Z_cjs.leaveForRedirect(session.url);
+            return chunkDTSLJ24T_cjs.leaveForRedirect(session.url);
           case "provider_checkout":
             return rememberIfStillPending(
               req,
@@ -733,7 +733,7 @@ function paddleCheckoutDriver(ctx) {
             };
         }
       } catch (e) {
-        return { ok: false, error: chunkMBTHQP4Z_cjs.toCheckoutError(e) };
+        return { ok: false, error: chunkDTSLJ24T_cjs.toCheckoutError(e) };
       }
     },
     renderInline(req, cb) {
@@ -742,7 +742,7 @@ function paddleCheckoutDriver(ctx) {
     // Redirect-return resume: verify an existing attempt. Webhook-dependent, so it
     // gets the same ~10×3s window the overlay completion poll uses.
     resume(correlationId) {
-      return chunkMBTHQP4Z_cjs.completeWithPoll(ctx, correlationId, {
+      return chunkDTSLJ24T_cjs.completeWithPoll(ctx, correlationId, {
         attempts: 10,
         intervalMs: 3e3,
         timeoutMessage: PADDLE_TIMEOUT_MESSAGE
@@ -764,7 +764,7 @@ function PaddleInline({
     let disposed = false;
     void (async () => {
       try {
-        const session = await chunkMBTHQP4Z_cjs.postSession(ctx, req, correlationId);
+        const session = await chunkDTSLJ24T_cjs.postSession(ctx, req, correlationId);
         if (disposed) return;
         switch (session.step) {
           case "provider_checkout": {
@@ -784,13 +784,13 @@ function PaddleInline({
             return;
           }
           case "settled":
-            cbRef.current.onSuccess(chunkMBTHQP4Z_cjs.settlementToResult(session.result));
+            cbRef.current.onSuccess(chunkDTSLJ24T_cjs.settlementToResult(session.result));
             return;
           case "failed":
             cbRef.current.onError(session.error);
             return;
           case "redirect": {
-            const result = await chunkMBTHQP4Z_cjs.leaveForRedirect(session.url);
+            const result = await chunkDTSLJ24T_cjs.leaveForRedirect(session.url);
             if (!disposed && !result.ok) {
               cbRef.current.onError(result.error ?? chunkRUYT27DT_cjs.checkoutError("canceled", "Checkout was canceled"));
             }
@@ -802,7 +802,7 @@ function PaddleInline({
             );
         }
       } catch (e) {
-        if (!disposed) cbRef.current.onError(chunkMBTHQP4Z_cjs.toCheckoutError(e));
+        if (!disposed) cbRef.current.onError(chunkDTSLJ24T_cjs.toCheckoutError(e));
       }
     })();
     return () => {

package/dist/driver-paddle.d.cts

@@ -1,4 +1,4 @@
-import { C as CheckoutDriverContext, a as CheckoutDriver } from './checkout-BM1T-u6_.cjs';
+import { C as CheckoutDriverContext, a as CheckoutDriver } from './checkout-BzP__Mxe.cjs';
 import 'react';
 import '@stripe/stripe-js';
 import '@paddle/paddle-js';

package/dist/driver-paddle.d.ts

@@ -1,4 +1,4 @@
-import { C as CheckoutDriverContext, a as CheckoutDriver } from './checkout-BYcOfyg_.js';
+import { C as CheckoutDriverContext, a as CheckoutDriver } from './checkout-BPYU4wXF.js';
 import 'react';
 import '@stripe/stripe-js';
 import '@paddle/paddle-js';

package/dist/driver-paddle.js

@@ -1,4 +1,4 @@
-import { completeWithPoll, postComplete, settlementToResult, postSession, leaveForRedirect, toCheckoutError } from './chunk-KVMNVX6J.js';
+import { completeWithPoll, postComplete, settlementToResult, postSession, leaveForRedirect, toCheckoutError } from './chunk-USAECFWO.js';
 import { checkoutError } from './chunk-QENSJ6JB.js';
 import './chunk-PR4QN5HX.js';
 import { createElement, useState, useId, useRef, useEffect } from 'react';

package/dist/driver-stripe.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkNA7DRFOA_cjs = require('./chunk-NA7DRFOA.cjs');
+var chunkMBSXEIXT_cjs = require('./chunk-MBSXEIXT.cjs');
 require('./chunk-6KTFVZA4.cjs');
 require('./chunk-JL42MNGM.cjs');
 require('./chunk-5HUJEI26.cjs');
-var chunkMBTHQP4Z_cjs = require('./chunk-MBTHQP4Z.cjs');
+var chunkDTSLJ24T_cjs = require('./chunk-DTSLJ24T.cjs');
 var chunkRUYT27DT_cjs = require('./chunk-RUYT27DT.cjs');
 var chunkO7I5CWRX_cjs = require('./chunk-O7I5CWRX.cjs');
 var React = require('react');
@@ -2073,14 +2073,14 @@ function stripeCheckoutDriver(ctx) {
     async start(req) {
       const correlationId = crypto.randomUUID();
       try {
-        const session = await chunkMBTHQP4Z_cjs.postSession(ctx, req, correlationId);
+        const session = await chunkDTSLJ24T_cjs.postSession(ctx, req, correlationId);
         switch (session.step) {
           case "settled":
-            return chunkMBTHQP4Z_cjs.settlementToResult(session.result);
+            return chunkDTSLJ24T_cjs.settlementToResult(session.result);
           case "failed":
             return { ok: false, error: session.error };
           case "redirect":
-            return chunkMBTHQP4Z_cjs.leaveForRedirect(session.url);
+            return chunkDTSLJ24T_cjs.leaveForRedirect(session.url);
           case "pending":
             return {
               ok: false,
@@ -2099,7 +2099,7 @@ function stripeCheckoutDriver(ctx) {
             };
         }
       } catch (e) {
-        return { ok: false, error: chunkMBTHQP4Z_cjs.toCheckoutError(e) };
+        return { ok: false, error: chunkDTSLJ24T_cjs.toCheckoutError(e) };
       }
     },
     renderInline(req, cb) {
@@ -2108,7 +2108,7 @@ function stripeCheckoutDriver(ctx) {
     // Redirect-return resume: verify an existing attempt (Stripe settles /complete
     // synchronously — the bounded poll only covers a `processing` intent tail).
     resume(correlationId) {
-      return chunkMBTHQP4Z_cjs.completeWithPoll(ctx, correlationId);
+      return chunkDTSLJ24T_cjs.completeWithPoll(ctx, correlationId);
     }
   };
 }
@@ -2125,7 +2125,7 @@ function StripeInline({
     let disposed = false;
     void (async () => {
       try {
-        const session = await chunkMBTHQP4Z_cjs.postSession(ctx, req, correlationId);
+        const session = await chunkDTSLJ24T_cjs.postSession(ctx, req, correlationId);
         if (disposed) return;
         switch (session.step) {
           case "client_confirm":
@@ -2138,13 +2138,13 @@ function StripeInline({
             return;
           }
           case "settled":
-            cbRef.current.onSuccess(chunkMBTHQP4Z_cjs.settlementToResult(session.result));
+            cbRef.current.onSuccess(chunkDTSLJ24T_cjs.settlementToResult(session.result));
             return;
           case "failed":
             cbRef.current.onError(session.error);
             return;
           case "redirect": {
-            const result = await chunkMBTHQP4Z_cjs.leaveForRedirect(session.url);
+            const result = await chunkDTSLJ24T_cjs.leaveForRedirect(session.url);
             if (!disposed && !result.ok) {
               cbRef.current.onError(result.error ?? chunkRUYT27DT_cjs.checkoutError("canceled", "Checkout was canceled"));
             }
@@ -2156,7 +2156,7 @@ function StripeInline({
             );
         }
       } catch (e) {
-        if (!disposed) cbRef.current.onError(chunkMBTHQP4Z_cjs.toCheckoutError(e));
+        if (!disposed) cbRef.current.onError(chunkDTSLJ24T_cjs.toCheckoutError(e));
       }
     })();
     return () => {
@@ -2170,12 +2170,12 @@ function StripeInline({
     cbRef.current.onStart?.();
   }, [phase.at]);
   const finish = async (providerRef) => {
-    const result = await chunkMBTHQP4Z_cjs.completeWithPoll(ctx, correlationId, { providerRef });
+    const result = await chunkDTSLJ24T_cjs.completeWithPoll(ctx, correlationId, { providerRef });
     if (result.ok) cbRef.current.onSuccess(result);
     else cbRef.current.onError(result.error ?? chunkRUYT27DT_cjs.checkoutError("unknown", "Checkout failed"));
   };
   const reportFailure = (providerRef) => {
-    void chunkMBTHQP4Z_cjs.postComplete(ctx, correlationId, providerRef).catch(() => {
+    void chunkDTSLJ24T_cjs.postComplete(ctx, correlationId, providerRef).catch(() => {
     });
   };
   let inner = null;
@@ -2292,12 +2292,12 @@ function ConfirmForm({
         await finish(paymentIntent?.id);
       }
     } catch (e) {
-      onError(chunkMBTHQP4Z_cjs.toCheckoutError(e));
+      onError(chunkDTSLJ24T_cjs.toCheckoutError(e));
     } finally {
       setSubmitting(false);
     }
   };
-  chunkNA7DRFOA_cjs.ensureCheckoutButtonStyles();
+  chunkMBSXEIXT_cjs.ensureCheckoutButtonStyles();
   const submit = React.createElement(
     "button",
     {
@@ -2360,6 +2360,22 @@ function ConfirmForm({
     "div",
     { "data-checkout-express": "" },
     React.createElement(rsj.ExpressCheckoutElement, {
+      // The author's `options.express` is Stripe's own options, passed through — layout, button
+      // height/theme/type. Wallets default to Apple Pay and Google Pay only, merged per wallet: left
+      // unset, Stripe would also offer whatever else the account has enabled (Link, PayPal, Amazon
+      // Pay, Klarna) as buttons here.
+      options: {
+        ...methods?.express,
+        paymentMethods: {
+          applePay: "always",
+          googlePay: "always",
+          link: "never",
+          paypal: "never",
+          amazonPay: "never",
+          klarna: "never",
+          ...methods?.express?.paymentMethods
+        }
+      },
       // The wallet sheet IS the collection UI — Stripe fires onConfirm once the buyer authorizes,
       // and we confirm the intent right after.
       onConfirm: () => void confirm(),