@djangocfg/payments 2.1.547 → 2.1.549

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/payments",
-  "version": "2.1.547",
+  "version": "2.1.549",
   "description": "Provider-agnostic React payments module (Stripe-first): checkout state machine, Payment Element wrapper, close-guard context, mock adapter for keyless development",
   "keywords": [
     "payments",
@@ -54,15 +54,15 @@
     "@stripe/stripe-js": "^9.9.0"
   },
   "peerDependencies": {
-    "@djangocfg/ui-core": "^2.1.547",
+    "@djangocfg/ui-core": "^2.1.549",
     "lucide-react": "^0.545.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@djangocfg/eslint-config": "^2.1.547",
-    "@djangocfg/typescript-config": "^2.1.547",
-    "@djangocfg/ui-core": "^2.1.547",
+    "@djangocfg/eslint-config": "^2.1.549",
+    "@djangocfg/typescript-config": "^2.1.549",
+    "@djangocfg/ui-core": "^2.1.549",
     "@storybook/react-vite": "^10.5.0",
     "@types/node": "^25.9.5",
     "@types/react": "19.2.15",

package/src/components/CheckoutForm.tsx

@@ -100,17 +100,34 @@ export function CheckoutForm({
   const isDone = status === 'succeeded';
   const needsAction = status === 'requires_action';
 
+  // A ref, because the disabled button is not a lock. `start` leaves status at
+  // `requires_payment` before `confirm` sets `processing`, so between the two
+  // awaits `isBusy` is false and the button is live again — and a second Enter
+  // there would skip `start` (intent now set) and confirm the SAME intent
+  // twice. A ref flips synchronously, with no render in between.
+  const submittingRef = React.useRef(false);
+
   const handlePay = useCallback(
     async (e: React.FormEvent) => {
       e.preventDefault();
-      // Self-driving mode only: lazily create the one-time intent on first
-      // submit. In shared mode the parent already created the intent/subscription
-      // (start / startSubscription) — creating another here would duplicate it,
-      // so we go straight to confirm.
-      if (!isShared && !intent) {
-        await start({ amount, currency, reference: _reference });
+      if (submittingRef.current) return;
+      submittingRef.current = true;
+      try {
+        // Self-driving mode only: lazily create the one-time intent on first
+        // submit. In shared mode the parent already created the intent/subscription
+        // (start / startSubscription) — creating another here would duplicate it,
+        // so we go straight to confirm.
+        if (!isShared && !intent) {
+          // `start` reports its own failure through status/error. Confirming
+          // anyway would replace that reason with a generic "not ready to
+          // confirm", hiding why the payment could not be created.
+          const created = await start({ amount, currency, reference: _reference });
+          if (!created) return;
+        }
+        await confirm(elementsContext, returnUrl);
+      } finally {
+        submittingRef.current = false;
       }
-      await confirm(elementsContext, returnUrl);
     },
     [isShared, intent, start, amount, currency, _reference, confirm, elementsContext, returnUrl],
   );

package/src/hooks/useCheckout.ts

@@ -25,7 +25,8 @@ export interface UseCheckoutResult {
   /** Set when the provider needs a redirect / 3DS step. */
   nextActionUrl: string | null;
   /** Step 1 (one-time): create the PaymentIntent → client_secret ready. */
-  start: (input: CreatePaymentInput) => Promise<void>;
+  /** Resolves with the created intent, or undefined when creation failed. */
+  start: (input: CreatePaymentInput) => Promise<PaymentIntent | undefined>;
   /**
    * Step 1 (subscription, deferred flow): create an `incomplete` Stripe
    * subscription on the backend → client_secret + confirmType ready. `confirm`
@@ -76,9 +77,13 @@ export function useCheckout(): UseCheckoutResult {
         intentRef.current = created;
         setIntent(created);
         setStatus(created.status === 'idle' ? 'requires_payment' : created.status);
+        // Returned so a caller can tell success from failure without reading
+        // state that has not re-rendered yet.
+        return created;
       } catch (e) {
         setStatus('failed');
         setError(e instanceof Error ? e.message : 'Failed to start payment.');
+        return undefined;
       }
     },
     [adapter],