@cedros/pay-react 0.1.0

package/dist/utils/eventEmitter.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Payment Lifecycle Event Emitter
+ *
+ * Provides browser-native CustomEvent emission for payment lifecycle tracking.
+ * Enables integration with analytics platforms (Google Analytics, Mixpanel, etc.)
+ * outside the React component tree.
+ *
+ * Events:
+ * - cedros:payment:start - Payment attempt initiated (button clicked)
+ * - cedros:wallet:connect - Wallet connection initiated
+ * - cedros:wallet:connected - Wallet successfully connected
+ * - cedros:wallet:error - Wallet connection failed
+ * - cedros:payment:processing - Payment transaction in progress
+ * - cedros:payment:success - Payment completed successfully
+ * - cedros:payment:error - Payment failed
+ */
+/**
+ * Payment method type
+ */
+export type PaymentMethod = 'stripe' | 'crypto';
+/**
+ * Wallet provider type
+ */
+export type WalletProvider = 'phantom' | 'solflare' | 'backpack' | string;
+/**
+ * Base event detail interface
+ */
+interface BaseEventDetail {
+    timestamp: number;
+    method: PaymentMethod;
+}
+/**
+ * Payment start event detail
+ */
+export interface PaymentStartDetail extends BaseEventDetail {
+    resource?: string;
+    itemCount?: number;
+}
+/**
+ * Wallet connect event detail
+ */
+export interface WalletConnectDetail {
+    timestamp: number;
+    wallet: WalletProvider;
+    publicKey?: string;
+}
+/**
+ * Wallet error event detail
+ */
+export interface WalletErrorDetail {
+    timestamp: number;
+    wallet?: WalletProvider;
+    error: string;
+}
+/**
+ * Payment processing event detail
+ */
+export interface PaymentProcessingDetail extends BaseEventDetail {
+    resource?: string;
+    itemCount?: number;
+}
+/**
+ * Payment success event detail
+ */
+export interface PaymentSuccessDetail extends BaseEventDetail {
+    transactionId: string;
+    resource?: string;
+    itemCount?: number;
+}
+/**
+ * Payment error event detail
+ */
+export interface PaymentErrorDetail extends BaseEventDetail {
+    error: string;
+    resource?: string;
+    itemCount?: number;
+}
+/**
+ * Event name constants
+ */
+export declare const CEDROS_EVENTS: {
+    readonly PAYMENT_START: "cedros:payment:start";
+    readonly WALLET_CONNECT: "cedros:wallet:connect";
+    readonly WALLET_CONNECTED: "cedros:wallet:connected";
+    readonly WALLET_ERROR: "cedros:wallet:error";
+    readonly PAYMENT_PROCESSING: "cedros:payment:processing";
+    readonly PAYMENT_SUCCESS: "cedros:payment:success";
+    readonly PAYMENT_ERROR: "cedros:payment:error";
+};
+/**
+ * Emit payment start event
+ */
+export declare function emitPaymentStart(method: PaymentMethod, resource?: string, itemCount?: number): void;
+/**
+ * Emit wallet connect event (connection initiated)
+ */
+export declare function emitWalletConnect(wallet: WalletProvider): void;
+/**
+ * Emit wallet connected event (connection successful)
+ */
+export declare function emitWalletConnected(wallet: WalletProvider, publicKey: string): void;
+/**
+ * Emit wallet error event
+ */
+export declare function emitWalletError(error: string, wallet?: WalletProvider): void;
+/**
+ * Emit payment processing event
+ */
+export declare function emitPaymentProcessing(method: PaymentMethod, resource?: string, itemCount?: number): void;
+/**
+ * Emit payment success event
+ */
+export declare function emitPaymentSuccess(method: PaymentMethod, transactionId: string, resource?: string, itemCount?: number): void;
+/**
+ * Emit payment error event
+ */
+export declare function emitPaymentError(method: PaymentMethod, error: string, resource?: string, itemCount?: number): void;
+export {};
+//# sourceMappingURL=eventEmitter.d.ts.map

package/dist/utils/eventEmitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventEmitter.d.ts","sourceRoot":"","sources":["../../src/utils/eventEmitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1E;;GAEG;AACH,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,eAAe;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;CAQhB,CAAC;AAsBX;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAON;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAK9D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAM5E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAON;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAQN"}

package/dist/utils/exponentialBackoff.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Exponential Backoff and Retry Logic
+ *
+ * Implements retry logic with exponential backoff for failed requests.
+ * Prevents hammering failing services and gives them time to recover.
+ *
+ * Features:
+ * - Exponential delay with jitter
+ * - Configurable max retries and max delay
+ * - Automatic retry for retryable errors
+ * - Respects Retry-After header (429 responses)
+ *
+ * Usage:
+ * ```typescript
+ * const result = await retryWithBackoff(
+ *   async () => await fetch('/api/payment'),
+ *   { maxRetries: 3, initialDelayMs: 1000 }
+ * );
+ * ```
+ */
+export interface RetryConfig {
+    /** Maximum number of retry attempts (default: 3) */
+    maxRetries?: number;
+    /** Initial delay in milliseconds (default: 1000) */
+    initialDelayMs?: number;
+    /** Backoff multiplier (default: 2) */
+    backoffFactor?: number;
+    /** Maximum delay in milliseconds (default: 30000) */
+    maxDelayMs?: number;
+    /** Add random jitter to prevent thundering herd (default: true) */
+    jitter?: boolean;
+    /** Custom function to determine if error is retryable */
+    shouldRetry?: (error: Error, attempt: number) => boolean;
+    /** Optional name for logging */
+    name?: string;
+}
+export interface RetryStats {
+    attempts: number;
+    totalDelay: number;
+    lastError: Error | null;
+}
+/**
+ * Retry a function with exponential backoff
+ *
+ * @param fn - Async function to retry
+ * @param config - Retry configuration
+ * @returns Promise that resolves with function result
+ * @throws Last error if all retries fail
+ *
+ * @example
+ * ```typescript
+ * // Retry payment creation with default config
+ * const session = await retryWithBackoff(
+ *   async () => await createPaymentSession(),
+ *   { name: 'create-session' }
+ * );
+ *
+ * // Custom retry policy
+ * const result = await retryWithBackoff(
+ *   async () => await fetchQuote(),
+ *   {
+ *     maxRetries: 5,
+ *     initialDelayMs: 500,
+ *     backoffFactor: 1.5,
+ *     shouldRetry: (error) => error.message.includes('TEMP'),
+ *   }
+ * );
+ * ```
+ */
+export declare function retryWithBackoff<T>(fn: () => Promise<T>, config?: RetryConfig): Promise<T>;
+/**
+ * Preset retry configurations
+ */
+export declare const RETRY_PRESETS: {
+    /** Quick retries for transient errors (3 retries, 1s initial, 2x backoff) */
+    readonly QUICK: {
+        readonly maxRetries: 3;
+        readonly initialDelayMs: 1000;
+        readonly backoffFactor: 2;
+        readonly maxDelayMs: 10000;
+    };
+    /** Standard retries (3 retries, 2s initial, 2x backoff) */
+    readonly STANDARD: {
+        readonly maxRetries: 3;
+        readonly initialDelayMs: 2000;
+        readonly backoffFactor: 2;
+        readonly maxDelayMs: 30000;
+    };
+    /** Aggressive retries for critical operations (5 retries, 500ms initial) */
+    readonly AGGRESSIVE: {
+        readonly maxRetries: 5;
+        readonly initialDelayMs: 500;
+        readonly backoffFactor: 1.5;
+        readonly maxDelayMs: 15000;
+    };
+    /** Patient retries for slow backends (5 retries, 5s initial) */
+    readonly PATIENT: {
+        readonly maxRetries: 5;
+        readonly initialDelayMs: 5000;
+        readonly backoffFactor: 2;
+        readonly maxDelayMs: 60000;
+    };
+};
+//# sourceMappingURL=exponentialBackoff.d.ts.map

package/dist/utils/exponentialBackoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exponentialBackoff.d.ts","sourceRoot":"","sources":["../../src/utils/exponentialBackoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,WAAW,WAAW;IAC1B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,IAAI,CAAC;CACzB;AA8ED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,MAAM,GAAE,WAAgB,GACvB,OAAO,CAAC,CAAC,CAAC,CAuDZ;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;IACxB,6EAA6E;;;;;;;IAO7E,2DAA2D;;;;;;;IAO3D,4EAA4E;;;;;;;IAO5E,gEAAgE;;;;;;;CAOxD,CAAC"}

package/dist/utils/fetchWithTimeout.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Default timeout for HTTP requests (30 seconds)
+ */
+export declare const DEFAULT_FETCH_TIMEOUT_MS = 30000;
+/**
+ * Fetch with timeout utility
+ *
+ * Wraps fetch() with an AbortController to enforce timeout
+ * Properly handles external AbortSignals while adding timeout functionality
+ * Default timeout: 30 seconds
+ */
+export declare function fetchWithTimeout(url: string, options?: RequestInit, timeoutMs?: number): Promise<Response>;
+//# sourceMappingURL=fetchWithTimeout.d.ts.map

package/dist/utils/fetchWithTimeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchWithTimeout.d.ts","sourceRoot":"","sources":["../../src/utils/fetchWithTimeout.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,WAAgB,EACzB,SAAS,GAAE,MAAiC,GAC3C,OAAO,CAAC,QAAQ,CAAC,CA8CnB"}

package/dist/utils/index.d.ts

@@ -0,0 +1,15 @@
+export { validateConfig } from './validateConfig';
+export { parseCouponCodes, formatCouponCodes, calculateDiscountPercentage } from './couponHelpers';
+export { isCartCheckout, normalizeCartItems, type NormalizedCartItem } from './cartHelpers';
+export { formatError, parseErrorResponse } from './errorHandling';
+export { ERROR_MESSAGES, getUserFriendlyError, formatUserError, type ErrorMessage, } from './errorMessages';
+export { deduplicateRequest, createDedupedClickHandler, isButtonInCooldown, setButtonCooldown, isDuplicateRequest, markRequestProcessed, getInFlightRequest, trackInFlightRequest, clearDeduplicationCache, getDeduplicationStats, DEFAULT_COOLDOWN_MS, DEFAULT_DEDUP_WINDOW_MS, } from './requestDeduplication';
+export { getModalCloseButtonStyles } from './modalStyles';
+export { createWalletPool, WalletPool } from './walletPool';
+export { CEDROS_EVENTS, emitPaymentStart, emitWalletConnect, emitWalletConnected, emitWalletError, emitPaymentProcessing, emitPaymentSuccess, emitPaymentError, type PaymentMethod, type WalletProvider, type PaymentStartDetail, type WalletConnectDetail, type WalletErrorDetail, type PaymentProcessingDetail, type PaymentSuccessDetail, type PaymentErrorDetail, } from './eventEmitter';
+export { parseErrorResponse as parseStructuredErrorResponse, isRetryableError, getUserErrorMessage, } from './errorParser';
+export { createRateLimiter, RATE_LIMITER_PRESETS, type RateLimiter, type RateLimiterConfig, } from './rateLimiter';
+export { createCircuitBreaker, CircuitState, CircuitBreakerOpenError, CIRCUIT_BREAKER_PRESETS, type CircuitBreaker, type CircuitBreakerConfig, type CircuitBreakerStats, } from './circuitBreaker';
+export { retryWithBackoff, RETRY_PRESETS, type RetryConfig, type RetryStats, } from './exponentialBackoff';
+export { generateCSP, generateCSPDirectives, formatCSP, RPC_PROVIDERS, CSP_PRESETS, type CSPConfig, type CSPDirectives, type CSPFormat, } from './cspHelper';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,IAAI,4BAA4B,EAClD,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,WAAW,EACX,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,aAAa,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Structured logging with configurable log levels
+ *
+ * Supports filtering logs by severity level to control verbosity.
+ * Production deployments should use LogLevel.ERROR or LogLevel.WARN.
+ */
+/**
+ * Log severity levels (lowest to highest)
+ */
+export declare enum LogLevel {
+    DEBUG = 0,// Detailed debug information
+    INFO = 1,// Informational messages
+    WARN = 2,// Warning messages
+    ERROR = 3,// Error messages
+    SILENT = 4
+}
+/**
+ * Logger configuration
+ */
+export interface LoggerConfig {
+    level: LogLevel;
+    prefix?: string;
+}
+/**
+ * Structured logger with level-based filtering
+ */
+export declare class Logger {
+    private config;
+    constructor(config: LoggerConfig);
+    /**
+     * Update the log level dynamically
+     */
+    setLevel(level: LogLevel): void;
+    /**
+     * Get the current log level
+     */
+    getLevel(): LogLevel;
+    /**
+     * Debug-level logging (most verbose)
+     * Use for detailed debugging information
+     */
+    debug(...args: unknown[]): void;
+    /**
+     * Info-level logging
+     * Use for general informational messages
+     */
+    info(...args: unknown[]): void;
+    /**
+     * Warning-level logging
+     * Use for potentially problematic situations
+     */
+    warn(...args: unknown[]): void;
+    /**
+     * Error-level logging
+     * Use for error conditions
+     */
+    error(...args: unknown[]): void;
+    /**
+     * Internal log method with formatting
+     */
+    private log;
+}
+/**
+ * Get or create the default logger instance
+ */
+export declare function getLogger(): Logger;
+/**
+ * Set the global logger instance
+ * Called by CedrosProvider to apply user configuration
+ */
+export declare function setLogger(logger: Logger): void;
+/**
+ * Create a new logger instance with custom configuration
+ */
+export declare function createLogger(config: LoggerConfig): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,oBAAY,QAAQ;IAClB,KAAK,IAAI,CAAI,6BAA6B;IAC1C,IAAI,IAAI,CAAK,yBAAyB;IACtC,IAAI,IAAI,CAAK,mBAAmB;IAChC,KAAK,IAAI,CAAI,iBAAiB;IAC9B,MAAM,IAAI;CACX;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,YAAY;IAIhC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAI/B;;OAEG;IACH,QAAQ,IAAI,QAAQ;IAIpB;;;OAGG;IACH,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAM/B;;;OAGG;IACH,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAM9B;;;OAGG;IACH,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAM9B;;;OAGG;IACH,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAM/B;;OAEG;IACH,OAAO,CAAC,GAAG;CAKZ;AAkBD;;GAEG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAQlC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAEzD"}

package/dist/utils/modalStyles.d.ts

@@ -0,0 +1,13 @@
+import { CSSProperties } from 'react';
+/**
+ * Shared modal UI utilities
+ *
+ * Provides consistent styling for modal components to avoid duplication
+ */
+/**
+ * Get styles for modal close button (×)
+ * @param surfaceText - Text color from theme tokens
+ * @returns CSS properties for close button
+ */
+export declare function getModalCloseButtonStyles(surfaceText: string): CSSProperties;
+//# sourceMappingURL=modalStyles.d.ts.map

package/dist/utils/modalStyles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modalStyles.d.ts","sourceRoot":"","sources":["../../src/utils/modalStyles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C;;;;GAIG;AAEH;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAW5E"}

package/dist/utils/rateLimiter.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Rate Limiter - Token Bucket Algorithm
+ *
+ * Prevents spamming backend with payment requests by enforcing
+ * a maximum number of requests per time window.
+ *
+ * Features:
+ * - Token bucket algorithm (allows bursts, enforces long-term rate)
+ * - Automatic token refill over time
+ * - Thread-safe (uses timestamps, not intervals)
+ * - Memory efficient (no timers or intervals)
+ *
+ * Usage:
+ * ```typescript
+ * const limiter = createRateLimiter({ maxRequests: 10, windowMs: 60000 });
+ *
+ * if (limiter.tryConsume()) {
+ *   await makePaymentRequest();
+ * } else {
+ *   console.error('Rate limit exceeded');
+ * }
+ * ```
+ */
+export interface RateLimiterConfig {
+    /** Maximum number of requests allowed per time window */
+    maxRequests: number;
+    /** Time window in milliseconds */
+    windowMs: number;
+}
+export interface RateLimiter {
+    /** Try to consume a token. Returns true if request is allowed, false if rate limited */
+    tryConsume: () => boolean;
+    /** Get remaining tokens available */
+    getAvailableTokens: () => number;
+    /** Get time until next token refill (in ms) */
+    getTimeUntilRefill: () => number;
+    /** Reset the rate limiter (useful for testing or manual override) */
+    reset: () => void;
+}
+/**
+ * Creates a rate limiter using token bucket algorithm
+ *
+ * @param config - Rate limiter configuration
+ * @returns Rate limiter instance
+ *
+ * @example
+ * ```typescript
+ * // Allow 5 payment requests per minute
+ * const paymentLimiter = createRateLimiter({
+ *   maxRequests: 5,
+ *   windowMs: 60000
+ * });
+ *
+ * async function handlePayment() {
+ *   if (!paymentLimiter.tryConsume()) {
+ *     throw new Error('Rate limit exceeded. Please wait before trying again.');
+ *   }
+ *   await processPayment();
+ * }
+ * ```
+ */
+export declare function createRateLimiter(config: RateLimiterConfig): RateLimiter;
+/**
+ * Preset rate limiter configurations for common use cases
+ */
+export declare const RATE_LIMITER_PRESETS: {
+    /** 10 requests per minute - recommended for payment requests */
+    readonly PAYMENT: {
+        readonly maxRequests: 10;
+        readonly windowMs: 60000;
+    };
+    /** 30 requests per minute - for quote fetching */
+    readonly QUOTE: {
+        readonly maxRequests: 30;
+        readonly windowMs: 60000;
+    };
+    /** 5 requests per minute - strict limit for sensitive operations */
+    readonly STRICT: {
+        readonly maxRequests: 5;
+        readonly windowMs: 60000;
+    };
+    /** 100 requests per minute - permissive for UI interactions */
+    readonly PERMISSIVE: {
+        readonly maxRequests: 100;
+        readonly windowMs: 60000;
+    };
+};
+//# sourceMappingURL=rateLimiter.d.ts.map

package/dist/utils/rateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.d.ts","sourceRoot":"","sources":["../../src/utils/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,qCAAqC;IACrC,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,qEAAqE;IACrE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA8ExE;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB;IAC/B,gEAAgE;;;;;IAEhE,kDAAkD;;;;;IAElD,oEAAoE;;;;;IAEpE,+DAA+D;;;;;CAEvD,CAAC"}

package/dist/utils/requestDeduplication.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Request Deduplication Utilities
+ *
+ * Prevents duplicate API calls when users rapidly click payment buttons.
+ * Includes:
+ * - Request deduplication (prevents same request ID from firing multiple times)
+ * - Button cooldown (0.2s timeout to prevent accidental double-clicks)
+ * - In-flight request tracking
+ */
+/**
+ * Default cooldown period (200ms = 0.2s)
+ * Prevents accidental double-clicks while not feeling laggy
+ */
+export declare const DEFAULT_COOLDOWN_MS = 200;
+/**
+ * Default deduplication window (2 seconds)
+ * Prevents identical requests within this time window
+ */
+export declare const DEFAULT_DEDUP_WINDOW_MS = 2000;
+/**
+ * Check if a button is currently in cooldown
+ *
+ * @param buttonId - Unique button identifier
+ * @returns true if button is in cooldown, false otherwise
+ */
+export declare function isButtonInCooldown(buttonId: string): boolean;
+/**
+ * Set button cooldown
+ *
+ * @param buttonId - Unique button identifier
+ * @param cooldownMs - Cooldown duration in milliseconds (default: 200ms)
+ */
+export declare function setButtonCooldown(buttonId: string, cooldownMs?: number): void;
+/**
+ * Check if a request is a duplicate
+ *
+ * @param requestId - Unique request identifier
+ * @param windowMs - Deduplication window in milliseconds (default: 2000ms)
+ * @returns true if request is a duplicate, false otherwise
+ */
+export declare function isDuplicateRequest(requestId: string, windowMs?: number): boolean;
+/**
+ * Mark a request as processed
+ *
+ * @param requestId - Unique request identifier
+ */
+export declare function markRequestProcessed(requestId: string): void;
+/**
+ * Check if a request is currently in flight
+ *
+ * @param requestId - Unique request identifier
+ * @returns Promise if request is in flight, null otherwise
+ */
+export declare function getInFlightRequest<T>(requestId: string): Promise<T> | null;
+/**
+ * Track an in-flight request
+ *
+ * @param requestId - Unique request identifier
+ * @param promise - Promise representing the request
+ * @returns The same promise (for chaining)
+ */
+export declare function trackInFlightRequest<T>(requestId: string, promise: Promise<T>): Promise<T>;
+/**
+ * Deduplicate a request
+ *
+ * Combines duplicate detection, in-flight tracking, and request execution.
+ * If an identical request is already in flight, returns the existing promise.
+ * If the request was recently completed, blocks it.
+ *
+ * @param requestId - Unique request identifier
+ * @param executor - Function that executes the request
+ * @param options - Deduplication options
+ * @returns Promise with request result
+ *
+ * @example
+ * ```ts
+ * const result = await deduplicateRequest(
+ *   `stripe-session-${resourceId}`,
+ *   () => createStripeSession(resourceId)
+ * );
+ * ```
+ */
+export declare function deduplicateRequest<T>(requestId: string, executor: () => Promise<T>, options?: {
+    windowMs?: number;
+    throwOnDuplicate?: boolean;
+}): Promise<T>;
+/**
+ * Create a deduplicated button click handler
+ *
+ * Wraps a click handler with deduplication and cooldown protection.
+ *
+ * @param buttonId - Unique button identifier
+ * @param handler - Original click handler
+ * @param options - Deduplication options
+ * @returns Wrapped click handler
+ *
+ * @example
+ * ```tsx
+ * const handleClick = createDedupedClickHandler(
+ *   'pay-button-stripe',
+ *   async () => {
+ *     const session = await createStripeSession(resourceId);
+ *     window.location.href = session.url;
+ *   }
+ * );
+ * ```
+ */
+export declare function createDedupedClickHandler(buttonId: string, handler: () => Promise<void> | void, options?: {
+    cooldownMs?: number;
+    deduplicationWindowMs?: number;
+}): () => Promise<void>;
+/**
+ * Clear all deduplication caches (for testing)
+ */
+export declare function clearDeduplicationCache(): void;
+/**
+ * Get deduplication stats (for debugging)
+ */
+export declare function getDeduplicationStats(): {
+    cachedRequests: number;
+    inFlightRequests: number;
+    activeCooldowns: number;
+};
+//# sourceMappingURL=requestDeduplication.d.ts.map

package/dist/utils/requestDeduplication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestDeduplication.d.ts","sourceRoot":"","sources":["../../src/utils/requestDeduplication.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsBH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAc5D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAE,MAA4B,GAAG,IAAI,CAGlG;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAgC,GAAG,OAAO,CAezG;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAY1F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC1B,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACvB,GACL,OAAO,CAAC,CAAC,CAAC,CAuBZ;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EACnC,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACL,MAAM,OAAO,CAAC,IAAI,CAAC,CAmCrB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAI9C;AAED;;GAEG;AACH,wBAAgB,qBAAqB;;;;EAMpC"}

package/dist/utils/securityValidation.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Security Validation Utilities
+ *
+ * Provides runtime security checks and recommendations for Cedros Pay deployments.
+ * Helps developers identify potential security issues during development.
+ */
+/**
+ * Security check result
+ */
+export interface SecurityCheckResult {
+    passed: boolean;
+    severity: 'info' | 'warning' | 'error';
+    message: string;
+    recommendation?: string;
+}
+/**
+ * Security validation report
+ */
+export interface SecurityReport {
+    checks: SecurityCheckResult[];
+    overallStatus: 'secure' | 'warnings' | 'vulnerable';
+    summary: string;
+}
+/**
+ * Run all security checks and generate a report
+ *
+ * @returns Security validation report with all checks
+ *
+ * @example
+ * ```typescript
+ * import { validateSecurity } from '@cedros/pay-react';
+ *
+ * const report = validateSecurity();
+ * console.log(report.summary);
+ *
+ * if (report.overallStatus === 'vulnerable') {
+ *   console.error('Security issues detected:');
+ *   report.checks.forEach(check => {
+ *     if (!check.passed) {
+ *       console.error(`- ${check.message}`);
+ *       if (check.recommendation) {
+ *         console.error(`  Recommendation: ${check.recommendation}`);
+ *       }
+ *     }
+ *   });
+ * }
+ * ```
+ */
+export declare function validateSecurity(): SecurityReport;
+/**
+ * Log security report to console (development only)
+ *
+ * @param report - Security report from validateSecurity()
+ *
+ * @example
+ * ```typescript
+ * import { validateSecurity, logSecurityReport } from '@cedros/pay-react';
+ *
+ * const report = validateSecurity();
+ * logSecurityReport(report);
+ * ```
+ */
+export declare function logSecurityReport(report: SecurityReport): void;
+/**
+ * Security recommendations for production deployment
+ */
+export declare const SECURITY_RECOMMENDATIONS: {
+    readonly CSP: "Use generateCSP() from @cedros/pay-react to generate Content Security Policy headers";
+    readonly HTTPS: "Always serve payment pages over HTTPS in production";
+    readonly PACKAGE_UPDATES: "Keep @stripe/stripe-js and @cedros/pay-react updated for security patches";
+    readonly AUDIT: "Run npm audit regularly to check for known vulnerabilities";
+    readonly MONITORING: "Monitor Stripe security advisories and apply updates promptly";
+    readonly NO_SRI: "Do NOT use SRI hashes for Stripe.js - use CSP instead";
+};
+//# sourceMappingURL=securityValidation.d.ts.map

package/dist/utils/securityValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityValidation.d.ts","sourceRoot":"","sources":["../../src/utils/securityValidation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,aAAa,EAAE,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;CACjB;AAuID;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAgCjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAmB9D;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;CAO3B,CAAC"}