@flopay/react 1.0.3 → 1.1.3

package/dist/index.cjs

@@ -36,6 +36,7 @@ __export(index_exports, {
   CardExpiryElement: () => CardExpiryElement,
   CardNumberElement: () => CardNumberElement,
   CheckoutForm: () => CheckoutForm,
+  DirectPayPalButton: () => DirectPayPalButton,
   FloPayAutomaticPaymentButton: () => FloPayAutomaticPaymentButton,
   FloPayCheckout: () => FloPayCheckout,
   FloPayProvider: () => FloPayProvider,
@@ -151,9 +152,9 @@ function FloPayProvider({
 }
 
 // src/flopay-checkout.tsx
-var import_react8 = __toESM(require("react"), 1);
-var import_js3 = require("@flopay/js");
-var import_shared7 = require("@flopay/shared");
+var import_react9 = __toESM(require("react"), 1);
+var import_js4 = require("@flopay/js");
+var import_shared8 = require("@flopay/shared");
 
 // src/card-button-content.tsx
 var import_react3 = require("react");
@@ -284,9 +285,9 @@ var AddressElement = createElementComponent("address", "AddressElement");
 
 // src/split-card-form.tsx
 var import_react_stripe_js = require("@stripe/react-stripe-js");
-var import_shared4 = require("@flopay/shared");
-var import_js = require("@flopay/js");
-var import_react7 = require("react");
+var import_shared5 = require("@flopay/shared");
+var import_js2 = require("@flopay/js");
+var import_react8 = require("react");
 
 // src/hooks.ts
 var import_react5 = require("react");
@@ -494,15 +495,37 @@ function mergeInlineSessionPatch(params, patch) {
   };
 }
 function buildSyntheticSession(params, checkoutModeOverride) {
-  const totalAmount = [
-    ...(params.items ?? []).map((item) => item.overrideAmount ?? item.totalAmount ?? 0),
-    ...(params.subscriptions ?? []).map((subscription) => subscription.overrideAmount ?? subscription.totalAmount ?? 0)
-  ].reduce((sum, value) => sum + value, 0);
-  const currency = params.currency ?? params.items?.find((i) => i.currency)?.currency ?? params.subscriptions?.find((s) => s.currency)?.currency ?? "USD";
+  const inputProducts = params.products ?? [
+    ...(params.subscriptions ?? []).map((s) => ({
+      type: "subscription",
+      code: s.code ?? s.providerPlanId,
+      name: s.subscriptionName ?? s.providerPlanName ?? s.code ?? s.providerPlanId ?? null,
+      quantity: s.quantity ?? 1,
+      totalAmount: s.totalAmount,
+      overrideAmount: s.overrideAmount,
+      currency: s.currency,
+      metadata: s.metadata
+    })),
+    ...(params.items ?? []).map((i) => ({
+      type: "item",
+      code: i.code ?? i.providerItemId,
+      name: i.itemName ?? i.providerItemName ?? i.code ?? i.providerItemId ?? null,
+      quantity: i.quantity ?? 1,
+      totalAmount: i.totalAmount,
+      overrideAmount: i.overrideAmount,
+      currency: i.currency,
+      metadata: i.metadata
+    }))
+  ];
+  const totalAmount = inputProducts.reduce(
+    (sum, p) => sum + (p.overrideAmount ?? p.totalAmount ?? 0),
+    0
+  );
+  const currency = params.currency ?? inputProducts.find((p) => p.currency)?.currency ?? "USD";
   return {
     id: "",
     clientSecret: "",
-    mode: "payment",
+    mode: inputProducts.some((p) => p.type === "subscription") ? "subscription" : "payment",
     amount: Math.round(totalAmount * 100),
     currency,
     status: "open",
@@ -520,40 +543,18 @@ function buildSyntheticSession(params, checkoutModeOverride) {
     successUrl: params.successUrl,
     cancelUrl: params.cancelUrl,
     checkoutMode: checkoutModeOverride ?? params.checkoutMode ?? "full",
-    items: (params.items ?? []).map((item, idx) => {
-      const code = item.code ?? item.providerItemId;
-      const itemName = item.itemName ?? item.providerItemName ?? code;
-      return {
-        uuid: `synthetic-item-${idx}`,
-        checkoutSessionId: "",
-        code,
-        providerItemId: code,
-        itemName,
-        providerItemName: itemName,
-        quantity: item.quantity ?? 1,
-        totalAmount: item.totalAmount,
-        overrideAmount: item.overrideAmount ?? null,
-        currency: item.currency ?? currency,
-        metadata: item.metadata ?? null
-      };
-    }),
-    subscriptions: (params.subscriptions ?? []).map((subscription, idx) => {
-      const code = subscription.code ?? subscription.providerPlanId;
-      const subscriptionName = subscription.subscriptionName ?? subscription.providerPlanName ?? code;
-      return {
-        uuid: `synthetic-sub-${idx}`,
-        checkoutSessionId: "",
-        code,
-        providerPlanId: code,
-        subscriptionName,
-        providerPlanName: subscriptionName,
-        quantity: subscription.quantity ?? 1,
-        totalAmount: subscription.totalAmount,
-        overrideAmount: subscription.overrideAmount ?? null,
-        currency: subscription.currency ?? currency,
-        metadata: subscription.metadata ?? null
-      };
-    })
+    products: inputProducts.map((p, idx) => ({
+      uuid: `synthetic-${p.type}-${idx}`,
+      checkoutSessionId: "",
+      type: p.type,
+      code: p.code,
+      name: p.name ?? null,
+      quantity: p.quantity ?? 1,
+      totalAmount: p.totalAmount,
+      overrideAmount: p.overrideAmount ?? null,
+      currency: p.currency ?? currency,
+      metadata: p.metadata ?? null
+    }))
   };
 }
 function mergeAccountPatch(base, patch) {
@@ -581,9 +582,25 @@ function readString(payload, key) {
   const value = payload?.[key];
   return typeof value === "string" && value.trim() ? value : void 0;
 }
+var FRIENDLY_MESSAGE_OVERRIDES = [
+  {
+    match: /^paypal authorization required\.?$/i,
+    replacement: "For your additional security, please re-authenticate this payment via PayPal."
+  }
+];
+function applyFriendlyMessageOverride(message) {
+  if (typeof message !== "string") return message ?? void 0;
+  const trimmed = message.trim();
+  if (!trimmed) return message;
+  for (const { match, replacement } of FRIENDLY_MESSAGE_OVERRIDES) {
+    if (match.test(trimmed)) return replacement;
+  }
+  return message;
+}
 function buildFloPayApiError(payload, fallbackMessage) {
   const nestedError = isRecord(payload?.error) ? payload.error : null;
-  const message = readString(payload, "message") ?? readString(nestedError, "message") ?? fallbackMessage;
+  const rawMessage = readString(payload, "message") ?? readString(nestedError, "message") ?? fallbackMessage;
+  const message = applyFriendlyMessageOverride(rawMessage) ?? rawMessage;
   const code = readString(payload, "code") ?? readString(payload, "gatewayErrorCode") ?? readString(nestedError, "code");
   const declineCode = readString(payload, "declineCode") ?? readString(payload, "gatewayDeclineReason") ?? readString(payload, "decline_code") ?? readString(nestedError, "decline_code");
   return new import_shared3.FloPayError(message, "api_error", {
@@ -688,11 +705,565 @@ function isInAppBrowser(userAgent) {
   return false;
 }
 
-// src/split-card-form.tsx
-var import_shared5 = require("@flopay/shared");
+// src/direct-paypal-button.tsx
+var import_react7 = require("react");
+var import_paypal_js = require("@paypal/paypal-js");
+var import_js = require("@flopay/js");
+var import_shared4 = require("@flopay/shared");
 var import_jsx_runtime5 = require("react/jsx-runtime");
+var DEFAULT_BUTTON_HEIGHT = 45;
+function DirectPayPalButton({
+  sessionId,
+  billingApiUrl,
+  email,
+  clientId,
+  environment,
+  currency,
+  isSubscription,
+  onTokenizedBody,
+  onComplete,
+  onErrorChange,
+  onDecline,
+  isProcessing = false,
+  onLoadStateChange,
+  onButtonClick,
+  runBeforeButtonClick,
+  session,
+  existingOrderId,
+  debug = false
+}) {
+  const containerRef = (0, import_react7.useRef)(null);
+  const [ready, setReady] = (0, import_react7.useState)(false);
+  const [failed, setFailed] = (0, import_react7.useState)(false);
+  const [submitting, setSubmitting] = (0, import_react7.useState)(false);
+  const baseUrl = (0, import_react7.useMemo)(() => billingApiUrl.replace(/\/+$/, ""), [billingApiUrl]);
+  const [debugLines, setDebugLines] = (0, import_react7.useState)([]);
+  const appendDebug = (line) => {
+    if (!debug) return;
+    setDebugLines((prev) => [...prev, `${(/* @__PURE__ */ new Date()).toISOString().slice(11, 23)} ${line}`]);
+  };
+  const onTokenizedBodyRef = (0, import_react7.useRef)(onTokenizedBody);
+  const onCompleteRef = (0, import_react7.useRef)(onComplete);
+  const onErrorChangeRef = (0, import_react7.useRef)(onErrorChange);
+  const onDeclineRef = (0, import_react7.useRef)(onDecline);
+  const onButtonClickRef = (0, import_react7.useRef)(onButtonClick);
+  const onLoadStateChangeRef = (0, import_react7.useRef)(onLoadStateChange);
+  const runBeforeButtonClickRef = (0, import_react7.useRef)(runBeforeButtonClick);
+  const sessionRef = (0, import_react7.useRef)(session);
+  const emailRef = (0, import_react7.useRef)(email);
+  const beforeClickRef = (0, import_react7.useRef)(null);
+  (0, import_react7.useEffect)(() => {
+    onTokenizedBodyRef.current = onTokenizedBody;
+  }, [onTokenizedBody]);
+  (0, import_react7.useEffect)(() => {
+    onCompleteRef.current = onComplete;
+  }, [onComplete]);
+  (0, import_react7.useEffect)(() => {
+    onErrorChangeRef.current = onErrorChange;
+  }, [onErrorChange]);
+  (0, import_react7.useEffect)(() => {
+    onDeclineRef.current = onDecline;
+  }, [onDecline]);
+  (0, import_react7.useEffect)(() => {
+    onButtonClickRef.current = onButtonClick;
+  }, [onButtonClick]);
+  (0, import_react7.useEffect)(() => {
+    onLoadStateChangeRef.current = onLoadStateChange;
+  }, [onLoadStateChange]);
+  (0, import_react7.useEffect)(() => {
+    runBeforeButtonClickRef.current = runBeforeButtonClick;
+  }, [runBeforeButtonClick]);
+  (0, import_react7.useEffect)(() => {
+    sessionRef.current = session;
+  }, [session]);
+  (0, import_react7.useEffect)(() => {
+    emailRef.current = email;
+  }, [email]);
+  (0, import_react7.useEffect)(() => {
+    onLoadStateChangeRef.current?.(ready && !failed);
+  }, [ready, failed]);
+  const normalizedEnv = (0, import_shared4.normalizeGatewayEnvironment)(environment);
+  (0, import_react7.useEffect)(() => {
+    const maskedClient = clientId ? `${clientId.slice(0, 6)}\u2026(len ${clientId.length})` : "(empty)";
+    const ua = typeof navigator !== "undefined" ? navigator.userAgent : "(no navigator)";
+    appendDebug(`mount clientId=${maskedClient} env=${environment ?? "(unset)"}\u2192${normalizedEnv ?? "live"} ccy=${currency} sub=${isSubscription}`);
+    appendDebug(`ua=${ua.slice(0, 80)}${ua.length > 80 ? "\u2026" : ""}`);
+    if (!clientId) {
+      appendDebug("FAIL: clientId empty \u2014 gateway misconfigured");
+      setFailed(true);
+      onErrorChangeRef.current?.("Direct PayPal gateway is misconfigured.");
+      return;
+    }
+    if (!containerRef.current) {
+      appendDebug("FAIL: containerRef not attached");
+      return;
+    }
+    let cancelled = false;
+    let activeButtons = null;
+    let rendered = false;
+    const container = containerRef.current;
+    let containerObserver = null;
+    let perfObserver = null;
+    const watchdogTimers = [];
+    const formatDims = (el) => {
+      if (!el || typeof el.getBoundingClientRect !== "function") return "(no rect)";
+      const rect = el.getBoundingClientRect();
+      return `${Math.round(rect.width)}\xD7${Math.round(rect.height)}`;
+    };
+    const classifyIframeSrc = (raw) => {
+      if (!raw) return "(empty)";
+      try {
+        const url = new URL(raw, typeof window !== "undefined" ? window.location.href : "https://localhost");
+        const path = url.pathname.toLowerCase();
+        if (path.includes("checkcaptcha") || path.includes("captcha")) return `CAPTCHA(${url.host}${path})`;
+        if (path.includes("risk") || path.includes("challenge")) return `RISK(${url.host}${path})`;
+        if (path.includes("smart/buttons")) return `smart-buttons(${url.host})`;
+        return `${url.host}${path}`.slice(0, 100);
+      } catch {
+        return raw.slice(0, 80);
+      }
+    };
+    const describeIframe = (frame) => {
+      const src = frame.getAttribute("src");
+      const srcdoc = frame.getAttribute("srcdoc");
+      const name = frame.getAttribute("name");
+      const sandbox = frame.getAttribute("sandbox");
+      const parts = [];
+      if (src) parts.push(`src=${classifyIframeSrc(src)}`);
+      if (srcdoc) parts.push(`srcdoc[${srcdoc.length}ch]`);
+      if (!src && !srcdoc) parts.push("src=(empty) srcdoc=(empty)");
+      if (name) parts.push(`name=${name.slice(0, 40)}`);
+      if (sandbox !== null) parts.push(`sandbox="${sandbox.slice(0, 40)}"`);
+      return parts.join(" ");
+    };
+    const inspectFrameContent = (frame) => {
+      if (!(frame instanceof HTMLIFrameElement)) return "";
+      try {
+        const cd = frame.contentDocument;
+        if (!cd) return "cd=null";
+        const bodyChildren = cd.body?.children.length ?? 0;
+        const bodyLen = cd.body?.innerHTML.length ?? 0;
+        const headLen = cd.head?.innerHTML.length ?? 0;
+        return `cd=same-origin readyState=${cd.readyState} body[${bodyChildren}children,${bodyLen}ch] head[${headLen}ch]`;
+      } catch (err) {
+        return `cd=cross-origin(${err.message.slice(0, 30)})`;
+      }
+    };
+    const errorMessages = [];
+    const onWindowError = (ev) => {
+      const msg = ev.message ?? String(ev.error ?? "(no message)");
+      if (msg && (msg.toLowerCase().includes("paypal") || msg.toLowerCase().includes("zoid") || msg.toLowerCase().includes("postrobot") || msg.toLowerCase().includes("storage"))) {
+        appendDebug(`window:error ${msg.slice(0, 140)}`);
+        errorMessages.push(msg);
+      }
+    };
+    const onUnhandledRejection = (ev) => {
+      const reason = ev.reason instanceof Error ? ev.reason.message : String(ev.reason ?? "(no reason)");
+      if (reason && (reason.toLowerCase().includes("paypal") || reason.toLowerCase().includes("zoid") || reason.toLowerCase().includes("postrobot") || reason.toLowerCase().includes("storage"))) {
+        appendDebug(`window:rejection ${reason.slice(0, 140)}`);
+        errorMessages.push(reason);
+      }
+    };
+    if (debug && typeof window !== "undefined") {
+      window.addEventListener("error", onWindowError);
+      window.addEventListener("unhandledrejection", onUnhandledRejection);
+    }
+    const paypalRequestCount = { value: 0 };
+    if (debug && typeof PerformanceObserver !== "undefined") {
+      try {
+        perfObserver = new PerformanceObserver((list) => {
+          for (const entry of list.getEntries()) {
+            if (!entry.name.toLowerCase().includes("paypal")) continue;
+            paypalRequestCount.value += 1;
+            const dur = Math.round(entry.duration);
+            appendDebug(`net ${dur}ms ${entry.name.slice(0, 90)}`);
+          }
+        });
+        perfObserver.observe({ type: "resource", buffered: true });
+      } catch {
+      }
+    }
+    const stopDiagnostics = () => {
+      containerObserver?.disconnect();
+      containerObserver = null;
+      perfObserver?.disconnect();
+      perfObserver = null;
+      while (watchdogTimers.length) clearTimeout(watchdogTimers.pop());
+      if (debug && typeof window !== "undefined") {
+        window.removeEventListener("error", onWindowError);
+        window.removeEventListener("unhandledrejection", onUnhandledRejection);
+      }
+    };
+    const isZoidLifecycleMessage = (message) => {
+      if (!message) return false;
+      const lower = message.toLowerCase();
+      return lower.includes("zoid destroyed") || lower.includes("destroyed all components") || lower.includes("window closed") || lower.includes("detected container element removed");
+    };
+    const forwardError = (message) => {
+      if (cancelled) return;
+      if (isZoidLifecycleMessage(message)) return;
+      const friendly = applyFriendlyMessageOverride(message) ?? message;
+      onErrorChangeRef.current?.(friendly);
+    };
+    const markRenderFailed = (message) => {
+      if (cancelled) return;
+      if (isZoidLifecycleMessage(message)) {
+        appendDebug(`markRenderFailed:skip-zoid msg=${message.slice(0, 80)}`);
+        return;
+      }
+      setFailed(true);
+      forwardError(message);
+    };
+    setFailed(false);
+    const dispatchTokenizedBody = async (body) => {
+      const prepared = beforeClickRef.current;
+      const effectiveSessionId = prepared?.sessionId ?? sessionId;
+      if (onTokenizedBodyRef.current) {
+        onTokenizedBodyRef.current(body, {
+          sessionId: effectiveSessionId,
+          accountPatch: prepared?.accountPatch
+        });
+        return;
+      }
+      try {
+        const currentSession = sessionRef.current;
+        const currentEmail = prepared?.accountPatch?.email ?? emailRef.current;
+        const effectiveUserId = prepared?.accountPatch?.userId ?? currentSession?.customer?.id ?? currentSession?.accountData?.userId ?? "";
+        const api = new import_js.PaymentAPI(baseUrl);
+        const response = await api.processPayment(
+          effectiveUserId,
+          {
+            sessionId: effectiveSessionId,
+            tokenizedData: body,
+            accountData: {
+              userId: effectiveUserId,
+              email: currentEmail ?? currentSession?.customer?.email ?? "",
+              firstName: prepared?.accountPatch?.firstName ?? currentSession?.customer?.firstName ?? currentSession?.accountData?.firstName ?? "",
+              lastName: prepared?.accountPatch?.lastName ?? currentSession?.customer?.lastName ?? currentSession?.accountData?.lastName ?? "",
+              country: prepared?.accountPatch?.country ?? currentSession?.customer?.country ?? currentSession?.accountData?.country ?? void 0,
+              zip: prepared?.accountPatch?.zip ?? currentSession?.customer?.zip ?? currentSession?.accountData?.zip ?? void 0
+            }
+          }
+        );
+        if (response.ok) {
+          onCompleteRef.current?.({ status: "succeeded", checkoutMethod: "paypal" });
+          return;
+        }
+        const json = await response.json().catch(() => null);
+        const rawMessage = json?.["message"] ?? "PayPal payment failed.";
+        const message = applyFriendlyMessageOverride(rawMessage) ?? rawMessage;
+        forwardError(message);
+        onDeclineRef.current?.(buildDeclineEvent("paypal", message, {
+          code: json?.["code"],
+          declineCode: json?.["declineCode"]
+        }));
+      } catch (err) {
+        const rawMessage = err instanceof Error ? err.message : "PayPal payment failed.";
+        const message = applyFriendlyMessageOverride(rawMessage) ?? rawMessage;
+        forwardError(message);
+        onDeclineRef.current?.(buildDeclineEvent("paypal", message));
+      }
+    };
+    const createPaypalIntent = async (fallbackMessage) => {
+      const prepared = beforeClickRef.current;
+      const effectiveSessionId = prepared?.sessionId ?? sessionId;
+      const effectiveEmail = prepared?.accountPatch?.email ?? emailRef.current;
+      const response = await fetch(`${baseUrl}/v1/checkouts/payments/intents`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          sessionId: effectiveSessionId,
+          email: effectiveEmail,
+          paymentMethodType: "paypal",
+          isPaypal: "true"
+        })
+      });
+      const json = await response.json().catch(() => null);
+      if (!response.ok) {
+        throw new Error(json?.message ?? fallbackMessage);
+      }
+      const id = json?.data?.id;
+      if (!id) {
+        throw new Error(fallbackMessage);
+      }
+      return id;
+    };
+    appendDebug("loadScript:scheduled (deferred 1 tick)");
+    let loadPromise = null;
+    const startTimer = setTimeout(() => {
+      if (cancelled) {
+        appendDebug("loadScript:skipped (cancelled before defer ran)");
+        return;
+      }
+      appendDebug("loadScript:start");
+      const paypalSdkEnv = normalizedEnv === "live" ? "production" : normalizedEnv;
+      loadPromise = (0, import_paypal_js.loadScript)({
+        clientId,
+        currency,
+        // Subscriptions need the `subscription` vault intent; one-time payments
+        // use a standard order capture.
+        intent: isSubscription ? "subscription" : "capture",
+        vault: isSubscription ? true : void 0,
+        // Tell PayPal which environment the clientId belongs to. Without
+        // this, PayPal defaults to live endpoints — and a sandbox clientId
+        // sent to live silently stalls in zoid's prerender forever (no
+        // error, no rejection).
+        ...paypalSdkEnv ? { environment: paypalSdkEnv } : {},
+        // Namespace the sandbox SDK so it can coexist with a production SDK on
+        // the same page without clobbering `window.paypal`.
+        ...paypalSdkEnv === "sandbox" ? { dataNamespace: "paypal_sandbox" } : {}
+      });
+      loadPromise.then((paypal) => {
+        appendDebug(`loadScript:resolved cancelled=${cancelled} ns=${!!paypal} buttons=${!!paypal?.Buttons}`);
+        if (cancelled || !paypal?.Buttons) {
+          if (!cancelled && !paypal?.Buttons) appendDebug("FAIL: namespace missing Buttons factory");
+          return;
+        }
+        const handleApprove = async (data) => {
+          try {
+            setSubmitting(true);
+            onErrorChangeRef.current?.(null);
+            const token = data.subscriptionID ?? data.orderID ?? "";
+            if (!token) {
+              throw new import_shared4.FloPayError(
+                "PayPal did not return an approval token.",
+                "api_error",
+                { code: "paypal_missing_token" }
+              );
+            }
+            await dispatchTokenizedBody({
+              id: token,
+              isPaypal: true
+            });
+          } catch (err) {
+            forwardError(err instanceof Error ? err.message : "PayPal capture failed.");
+          } finally {
+            setSubmitting(false);
+          }
+        };
+        const buttons = paypal.Buttons({
+          style: { layout: "horizontal", height: DEFAULT_BUTTON_HEIGHT, tagline: false },
+          // PayPal's SDK awaits a Promise returned from `onClick` and aborts
+          // the create-order/create-subscription step when `actions.reject()`
+          // is invoked. Run the consumer's `runBeforeButtonClick` here so
+          // inline-session/account patches land before the order is created,
+          // matching the Stripe-rendered PayPal flow.
+          onClick: async (_data, actions) => {
+            const runner = runBeforeButtonClickRef.current;
+            if (runner) {
+              try {
+                const beforeClick = await runner("paypal");
+                if (!beforeClick.proceed) {
+                  beforeClickRef.current = null;
+                  await actions.reject();
+                  return;
+                }
+                beforeClickRef.current = {
+                  sessionId: beforeClick.sessionId,
+                  accountPatch: beforeClick.accountPatch
+                };
+              } catch (err) {
+                appendDebug(`onClick:runBeforeButtonClick rejected msg=${(err instanceof Error ? err.message : String(err)).slice(0, 120)}`);
+                beforeClickRef.current = null;
+                await actions.reject();
+                return;
+              }
+            } else {
+              beforeClickRef.current = null;
+            }
+            onButtonClickRef.current?.("paypal");
+            await actions.resolve();
+          },
+          // When the SDK is already holding an order/subscription id from a
+          // prior backend round-trip (the `paypal_direct_required` retry
+          // path), feed it straight to PayPal instead of creating a new one.
+          // Otherwise fall back to the normal create-intent call.
+          createOrder: isSubscription ? void 0 : existingOrderId ? () => Promise.resolve(existingOrderId) : () => createPaypalIntent("Failed to create PayPal order."),
+          createSubscription: isSubscription ? existingOrderId ? () => Promise.resolve(existingOrderId) : () => createPaypalIntent("Failed to create PayPal subscription.") : void 0,
+          onApprove: handleApprove,
+          onCancel: () => {
+            beforeClickRef.current = null;
+            onDeclineRef.current?.(buildDeclineEvent("paypal", "PayPal checkout was cancelled."));
+          },
+          onError: (err) => {
+            const message = err instanceof Error ? err.message : "PayPal failed to render.";
+            appendDebug(`onError rendered=${rendered} msg=${message.slice(0, 120)}`);
+            if (rendered) {
+              forwardError(message);
+              onDeclineRef.current?.(buildDeclineEvent("paypal", message));
+              return;
+            }
+            markRenderFailed(message);
+          }
+        });
+        const eligible = buttons.isEligible();
+        appendDebug(`isEligible=${eligible}`);
+        if (!eligible) {
+          setReady(false);
+          markRenderFailed(
+            "PayPal buttons are not eligible to render in this context (paypal_ineligible)."
+          );
+          return;
+        }
+        const typedButtons = buttons;
+        if (debug) {
+          appendDebug(`container:dims ${formatDims(container)} visibility=${typeof document !== "undefined" ? document.visibilityState : "(no document)"}`);
+        }
+        if (debug && typeof MutationObserver !== "undefined") {
+          containerObserver = new MutationObserver((mutations) => {
+            for (const mutation of mutations) {
+              if (mutation.type === "childList") {
+                mutation.addedNodes.forEach((node) => {
+                  if (!(node instanceof Element)) return;
+                  const tag = node.tagName.toLowerCase();
+                  const title = (node.getAttribute("title") ?? "").slice(0, 40);
+                  const detail = tag === "iframe" ? ` ${describeIframe(node)}` : "";
+                  appendDebug(`child+ ${tag}${title ? ` title="${title}"` : ""}${detail} dims=${formatDims(node)}`);
+                });
+              } else if (mutation.type === "attributes" && mutation.target instanceof Element) {
+                const target = mutation.target;
+                if (target.tagName.toLowerCase() !== "iframe") continue;
+                const attr = mutation.attributeName;
+                if (attr === "src" || attr === "srcdoc") {
+                  appendDebug(`attr~ iframe ${attr}=${attr === "srcdoc" ? `[${(target.getAttribute("srcdoc") ?? "").length}ch]` : classifyIframeSrc(target.getAttribute("src"))} dims=${formatDims(target)}`);
+                }
+              }
+            }
+          });
+          containerObserver.observe(container, {
+            childList: true,
+            subtree: true,
+            attributes: true,
+            attributeFilter: ["src", "srcdoc"]
+          });
+        }
+        const snapshotContainer = (when) => {
+          if (cancelled || rendered) return;
+          const iframes = container.querySelectorAll("iframe");
+          const hasStorageAccess = typeof document !== "undefined" && "hasStorageAccess" in document;
+          appendDebug(`watchdog:${when} container=${formatDims(container)} children=${container.childElementCount} iframes=${iframes.length} visibility=${typeof document !== "undefined" ? document.visibilityState : "(no document)"} cookies=${typeof navigator !== "undefined" ? navigator.cookieEnabled : "?"} hasStorageAccessApi=${hasStorageAccess} paypalNetRequests=${paypalRequestCount.value}`);
+          iframes.forEach((frame, i) => {
+            const title = (frame.getAttribute("title") ?? "").slice(0, 40);
+            appendDebug(`  iframe[${i}] ${formatDims(frame)}${title ? ` title="${title}"` : ""} ${describeIframe(frame)}`);
+            const content = inspectFrameContent(frame);
+            if (content) appendDebug(`    ${content}`);
+          });
+          if (errorMessages.length === 0) {
+            appendDebug(`  (no PayPal/zoid window errors captured)`);
+          }
+        };
+        if (debug) {
+          watchdogTimers.push(setTimeout(() => snapshotContainer("3s"), 3e3));
+          watchdogTimers.push(setTimeout(() => snapshotContainer("8s"), 8e3));
+          watchdogTimers.push(setTimeout(() => snapshotContainer("15s"), 15e3));
+        }
+        appendDebug("render:start");
+        buttons.render(container).then(() => {
+          appendDebug(`render:resolved cancelled=${cancelled}`);
+          stopDiagnostics();
+          if (cancelled) {
+            typedButtons.close().catch(() => {
+            });
+            return;
+          }
+          activeButtons = typedButtons;
+          rendered = true;
+          setReady(true);
+        }).catch((err) => {
+          const message = err instanceof Error ? err.message : "PayPal failed to render.";
+          appendDebug(`render:rejected msg=${message.slice(0, 120)}`);
+          stopDiagnostics();
+          markRenderFailed(message);
+        });
+      }).catch((err) => {
+        const message = err instanceof Error ? err.message : "PayPal SDK failed to load.";
+        appendDebug(`loadScript:rejected msg=${message.slice(0, 120)}`);
+        markRenderFailed(message);
+      });
+    }, 0);
+    return () => {
+      cancelled = true;
+      clearTimeout(startTimer);
+      stopDiagnostics();
+      if (activeButtons) {
+        activeButtons.close().catch(() => {
+        });
+      }
+    };
+  }, [baseUrl, clientId, currency, environment, isSubscription, sessionId, existingOrderId]);
+  const debugPanel = debug ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(
+    "pre",
+    {
+      "data-testid": "flopay-direct-paypal-debug",
+      style: {
+        margin: "0 0 8px 0",
+        padding: "6px 8px",
+        background: failed ? "#fef2f2" : "#f3f4f6",
+        border: `1px solid ${failed ? "#fca5a5" : "#d1d5db"}`,
+        borderRadius: 6,
+        color: "#111827",
+        font: "11px/1.35 ui-monospace, SFMono-Regular, Menlo, monospace",
+        whiteSpace: "pre-wrap",
+        wordBreak: "break-word",
+        maxHeight: 220,
+        overflowY: "auto"
+      },
+      children: [
+        `FloPay/DirectPayPal-debug (ready=${ready} failed=${failed})`,
+        debugLines.length === 0 ? "\n(waiting for first lifecycle event\u2026)" : `
+${debugLines.join("\n")}`
+      ]
+    }
+  ) : null;
+  if (failed) {
+    return debug ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { children: debugPanel }) : null;
+  }
+  return (
+    // Single wrapper so the parent flex container sees exactly one flex item
+    // (otherwise the fragment's placeholder + container become two siblings
+    // and any spacing-sensitive layout has to reason about both). The wrapper
+    // intentionally has no margin/padding so the parent owns all spacing.
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { children: [
+      debugPanel,
+      /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: { position: "relative", minHeight: DEFAULT_BUTTON_HEIGHT }, children: [
+        !ready && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          "div",
+          {
+            "data-testid": "flopay-direct-paypal-placeholder",
+            style: {
+              position: "absolute",
+              inset: 0,
+              borderRadius: 8,
+              background: "#e5e7eb",
+              animation: "flopay-pulse 1.5s ease-in-out infinite",
+              pointerEvents: "none"
+            }
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          "div",
+          {
+            ref: containerRef,
+            "data-testid": "flopay-direct-paypal-container",
+            style: {
+              minHeight: DEFAULT_BUTTON_HEIGHT,
+              display: "flex",
+              opacity: ready ? 1 : 0
+            },
+            "aria-busy": submitting || isProcessing
+          }
+        )
+      ] })
+    ] })
+  );
+}
+
+// src/split-card-form.tsx
+var import_shared6 = require("@flopay/shared");
+var import_jsx_runtime6 = require("react/jsx-runtime");
 var WALLET_RESUME_KEY = "flopay_wallet_resume";
 var FLOPAY_KEYFRAMES = `
+.paypal-buttons { margin: 0 !important; vertical-align: top !important; }
 @keyframes flopay-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }
 @keyframes flopay-fade-in { 0% { opacity: 0; } 100% { opacity: 1; } }
 @keyframes flopay-buttons-enter {
@@ -726,13 +1297,13 @@ function getButtonMethodLabel(method) {
   }
 }
 function normalizeBeforeButtonClickError(method, err) {
-  return err instanceof import_shared5.FloPayError ? err : new import_shared5.FloPayError(
+  return err instanceof import_shared6.FloPayError ? err : new import_shared6.FloPayError(
     err instanceof Error ? err.message : `${getButtonMethodLabel(method)} before-click hook failed.`,
     "validation_error"
   );
 }
 function FloPayKeyframes() {
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("style", { children: FLOPAY_KEYFRAMES });
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: FLOPAY_KEYFRAMES });
 }
 function toCssSize(value) {
   if (typeof value === "number") return `${value}px`;
@@ -753,8 +1324,8 @@ function ExpressCheckoutReadySwap({
   children
 }) {
   if (state === "unavailable" || state === "load_error") return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: { position: "relative", minHeight: 44 }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { position: "relative", minHeight: 44 }, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       "div",
       {
         "data-testid": placeholderTestId,
@@ -773,7 +1344,7 @@ function ExpressCheckoutReadySwap({
         }
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       "div",
       {
         style: {
@@ -791,9 +1362,9 @@ function ExpressCheckoutReadySwap({
 function isExpressCheckoutRowVisible(state) {
   return state !== "unavailable" && state !== "load_error";
 }
-var SplitCardForm = (0, import_react7.forwardRef)(
+var SplitCardForm = (0, import_react8.forwardRef)(
   function SplitCardForm2(props, ref) {
-    return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(SplitCardFormInner, { ...props, innerRef: ref });
+    return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(SplitCardFormInner, { ...props, innerRef: ref });
   }
 );
 function PayPalButtonInner({
@@ -810,15 +1381,15 @@ function PayPalButtonInner({
 }) {
   const stripe = (0, import_react_stripe_js.useStripe)();
   const elements = (0, import_react_stripe_js.useElements)();
-  const [loadState, setLoadState] = (0, import_react7.useState)("loading");
-  (0, import_react7.useEffect)(() => {
+  const [loadState, setLoadState] = (0, import_react8.useState)("loading");
+  (0, import_react8.useEffect)(() => {
     onLoadStateChange?.(loadState);
   }, [loadState, onLoadStateChange]);
-  const [submitting, setSubmitting] = (0, import_react7.useState)(false);
-  const paypalResumeAttempted = (0, import_react7.useRef)(false);
-  const beforeClickRef = (0, import_react7.useRef)(null);
+  const [submitting, setSubmitting] = (0, import_react8.useState)(false);
+  const paypalResumeAttempted = (0, import_react8.useRef)(false);
+  const beforeClickRef = (0, import_react8.useRef)(null);
   const baseUrl = billingApiUrl.replace(/\/+$/, "");
-  (0, import_react7.useEffect)(() => {
+  (0, import_react8.useEffect)(() => {
     if (!stripe || paypalResumeAttempted.current) return;
     const params = new URLSearchParams(window.location.search);
     const paymentIntentId = params.get("payment_intent");
@@ -865,7 +1436,7 @@ function PayPalButtonInner({
       }
     })();
   }, [stripe, onTokenizedBody, onErrorChange, onDecline]);
-  const handlePayPalClick = (0, import_react7.useCallback)(async (event) => {
+  const handlePayPalClick = (0, import_react8.useCallback)(async (event) => {
     if (isProcessing || submitting) {
       event.reject();
       return;
@@ -883,7 +1454,7 @@ function PayPalButtonInner({
     onButtonClick?.("paypal");
     event.resolve();
   }, [isProcessing, onButtonClick, runBeforeButtonClick, submitting]);
-  const handlePayPalConfirm = (0, import_react7.useCallback)(async (event) => {
+  const handlePayPalConfirm = (0, import_react8.useCallback)(async (event) => {
     if (!stripe || !elements) return;
     let prepared = beforeClickRef.current;
     beforeClickRef.current = null;
@@ -975,8 +1546,8 @@ function PayPalButtonInner({
       setSubmitting(false);
     }
   }, [stripe, elements, sessionId, email, baseUrl, onTokenizedBody, onErrorChange, onDecline, runBeforeButtonClick]);
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ExpressCheckoutReadySwap, { state: loadState, placeholderTestId: "flopay-paypal-placeholder", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ExpressCheckoutReadySwap, { state: loadState, placeholderTestId: "flopay-paypal-placeholder", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       import_react_stripe_js.ExpressCheckoutElement,
       {
         onReady: (event) => setLoadState(resolveExpressCheckoutLoadState(event, ["paypal"])),
@@ -1001,7 +1572,7 @@ function PayPalButtonInner({
         }
       }
     ) }),
-    submitting && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ProcessingOverlay, { status: "processing" })
+    submitting && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ProcessingOverlay, { status: "processing" })
   ] });
 }
 function WalletButtonInner({
@@ -1019,15 +1590,15 @@ function WalletButtonInner({
 }) {
   const stripe = (0, import_react_stripe_js.useStripe)();
   const elements = (0, import_react_stripe_js.useElements)();
-  const [loadState, setLoadState] = (0, import_react7.useState)("loading");
-  (0, import_react7.useEffect)(() => {
+  const [loadState, setLoadState] = (0, import_react8.useState)("loading");
+  (0, import_react8.useEffect)(() => {
     onLoadStateChange?.(loadState);
   }, [loadState, onLoadStateChange]);
-  const [submitting, setSubmitting] = (0, import_react7.useState)(false);
+  const [submitting, setSubmitting] = (0, import_react8.useState)(false);
   const baseUrl = billingApiUrl.replace(/\/+$/, "");
-  const lastWalletMethodRef = (0, import_react7.useRef)("card");
-  const beforeClickRef = (0, import_react7.useRef)(null);
-  const handleWalletConfirm = (0, import_react7.useCallback)(
+  const lastWalletMethodRef = (0, import_react8.useRef)("card");
+  const beforeClickRef = (0, import_react8.useRef)(null);
+  const handleWalletConfirm = (0, import_react8.useCallback)(
     async (event) => {
       if (!stripe || !elements) return;
       const walletType = event.expressPaymentType;
@@ -1116,12 +1687,16 @@ function WalletButtonInner({
     },
     [stripe, elements, sessionId, email, baseUrl, onTokenizedBody, onErrorChange, onDecline, runBeforeButtonClick]
   );
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ExpressCheckoutReadySwap, { state: loadState, placeholderTestId: "flopay-wallet-placeholder", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ExpressCheckoutReadySwap, { state: loadState, placeholderTestId: "flopay-wallet-placeholder", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       import_react_stripe_js.ExpressCheckoutElement,
       {
-        onReady: (event) => setLoadState(resolveExpressCheckoutLoadState(event, ["applePay", "googlePay"])),
-        onLoadError: () => setLoadState("load_error"),
+        onReady: (event) => {
+          setLoadState(resolveExpressCheckoutLoadState(event, ["applePay", "googlePay"]));
+        },
+        onLoadError: (e) => {
+          setLoadState("load_error");
+        },
         onClick: async (event) => {
           lastWalletMethodRef.current = event.expressPaymentType === "apple_pay" ? "apple_pay" : "google_pay";
           const beforeClick = runBeforeButtonClick ? await runBeforeButtonClick(lastWalletMethodRef.current) : { proceed: true };
@@ -1156,7 +1731,7 @@ function WalletButtonInner({
         }
       }
     ) }),
-    submitting && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ProcessingOverlay, { status: "processing" })
+    submitting && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ProcessingOverlay, { status: "processing" })
   ] });
 }
 function SplitCardFormInner({
@@ -1208,55 +1783,64 @@ function SplitCardFormInner({
   totalAmount = 0,
   currency = "usd",
   initialCardOpen = false,
+  directPaypal,
+  isSubscription = false,
+  session,
+  debug = false,
   innerRef
 }) {
   const flopay = useFloPay();
   const paypalFlopay = usePayPalFloPay();
   const elements = useElements();
-  const checkout = (0, import_react7.useContext)(CheckoutContext);
+  const checkout = (0, import_react8.useContext)(CheckoutContext);
   const contextBillingUrl = useBillingApiUrl();
-  const [processing, setProcessing] = (0, import_react7.useState)(false);
-  const [error, setError] = (0, import_react7.useState)(null);
-  const [is3DSActive, setIs3DSActive] = (0, import_react7.useState)(false);
-  const [selectedCountry, setSelectedCountry] = (0, import_react7.useState)(countryProp ?? "US");
-  const [zipCode, setZipCode] = (0, import_react7.useState)(zipProp ?? "");
-  const [addressLine1, setAddressLine1] = (0, import_react7.useState)(addressLine1Prop ?? "");
-  const [addressLine2, setAddressLine2] = (0, import_react7.useState)(addressLine2Prop ?? "");
-  const [city, setCity] = (0, import_react7.useState)(cityProp ?? "");
-  const [stateValue, setStateValue] = (0, import_react7.useState)(stateProp ?? "");
-  const [accountPatch, setAccountPatch] = (0, import_react7.useState)({});
-  const zipCodeRef = (0, import_react7.useRef)(zipProp ?? "");
-  const selectedCountryRef = (0, import_react7.useRef)(countryProp ?? "US");
-  const addressLine1Ref = (0, import_react7.useRef)(addressLine1Prop ?? "");
-  const addressLine2Ref = (0, import_react7.useRef)(addressLine2Prop ?? "");
-  const cityRef = (0, import_react7.useRef)(cityProp ?? "");
-  const stateRef = (0, import_react7.useRef)(stateProp ?? "");
-  const avsConfig = (0, import_react7.useMemo)(() => (0, import_shared4.resolveAVSConfig)(enableAVSProp), [enableAVSProp]);
+  const [processing, setProcessing] = (0, import_react8.useState)(false);
+  const [error, setError] = (0, import_react8.useState)(null);
+  const [is3DSActive, setIs3DSActive] = (0, import_react8.useState)(false);
+  const [selectedCountry, setSelectedCountry] = (0, import_react8.useState)(countryProp ?? "US");
+  const [zipCode, setZipCode] = (0, import_react8.useState)(zipProp ?? "");
+  const [addressLine1, setAddressLine1] = (0, import_react8.useState)(addressLine1Prop ?? "");
+  const [addressLine2, setAddressLine2] = (0, import_react8.useState)(addressLine2Prop ?? "");
+  const [city, setCity] = (0, import_react8.useState)(cityProp ?? "");
+  const [stateValue, setStateValue] = (0, import_react8.useState)(stateProp ?? "");
+  const [accountPatch, setAccountPatch] = (0, import_react8.useState)({});
+  const zipCodeRef = (0, import_react8.useRef)(zipProp ?? "");
+  const selectedCountryRef = (0, import_react8.useRef)(countryProp ?? "US");
+  const addressLine1Ref = (0, import_react8.useRef)(addressLine1Prop ?? "");
+  const addressLine2Ref = (0, import_react8.useRef)(addressLine2Prop ?? "");
+  const cityRef = (0, import_react8.useRef)(cityProp ?? "");
+  const stateRef = (0, import_react8.useRef)(stateProp ?? "");
+  const avsConfig = (0, import_react8.useMemo)(() => (0, import_shared5.resolveAVSConfig)(enableAVSProp), [enableAVSProp]);
   const enableAVS = avsConfig !== null;
-  const [viewState, setViewState] = (0, import_react7.useState)(initialCardOpen ? "card" : "buttons");
+  const [viewState, setViewState] = (0, import_react8.useState)(initialCardOpen ? "card" : "buttons");
   const showCardForm = viewState === "expanding" || viewState === "card";
   const TRANSITION_MS = 280;
-  const expandToCard = (0, import_react7.useCallback)(() => {
+  const expandToCard = (0, import_react8.useCallback)(() => {
     setViewState("expanding");
     setTimeout(() => setViewState("card"), TRANSITION_MS);
   }, []);
-  const collapseToButtons = (0, import_react7.useCallback)(() => {
+  const collapseToButtons = (0, import_react8.useCallback)(() => {
     setViewState("collapsing");
     setTimeout(() => setViewState("buttons"), TRANSITION_MS);
   }, []);
-  (0, import_react7.useEffect)(() => {
+  (0, import_react8.useEffect)(() => {
     if (layout === "buttons" && initialCardOpen) {
       setViewState("card");
     }
   }, [layout, initialCardOpen]);
-  const [fullName, setFullName] = (0, import_react7.useState)("");
-  const [formReady, setFormReady] = (0, import_react7.useState)(false);
-  const [overlayStatus, setOverlayStatus] = (0, import_react7.useState)(null);
-  const processingRef = (0, import_react7.useRef)(false);
+  const [fullName, setFullName] = (0, import_react8.useState)("");
+  const [formReady, setFormReady] = (0, import_react8.useState)(false);
+  const [overlayStatus, setOverlayStatus] = (0, import_react8.useState)(null);
+  const processingRef = (0, import_react8.useRef)(false);
+  const [paypalDirectRetry, setPaypalDirectRetry] = (0, import_react8.useState)(null);
+  const paypalDirectRetryRef = (0, import_react8.useRef)(paypalDirectRetry);
+  (0, import_react8.useEffect)(() => {
+    paypalDirectRetryRef.current = paypalDirectRetry;
+  }, [paypalDirectRetry]);
   const resolvedBillingApiUrl = billingApiUrl || contextBillingUrl;
   const displayError = externalError ?? error;
-  const bStyles = (0, import_react7.useMemo)(() => {
-    const base = (0, import_shared4.resolveButtonsLayoutTheme)(buttonsTheme);
+  const bStyles = (0, import_react8.useMemo)(() => {
+    const base = (0, import_shared5.resolveButtonsLayoutTheme)(buttonsTheme);
     if (!buttonsStylesOverride) return base;
     return {
       ...base,
@@ -1273,7 +1857,7 @@ function SplitCardFormInner({
   const isSubmitting = (externalProcessing ?? processing) || isInlineSessionPatchProcessing;
   const isSelfContained = !onTokenizedBody;
   const baseUrl = resolvedBillingApiUrl.replace(/\/+$/, "");
-  const resolvedAccount = (0, import_react7.useMemo)(() => mergeAccountPatch({
+  const resolvedAccount = (0, import_react8.useMemo)(() => mergeAccountPatch({
     userId,
     email,
     firstName,
@@ -1281,63 +1865,66 @@ function SplitCardFormInner({
     country: countryProp,
     zip: zipProp
   }, accountPatch), [userId, email, firstName, lastName, countryProp, zipProp, accountPatch]);
-  const stripeInstance = (0, import_react7.useMemo)(() => {
+  const stripeInstance = (0, import_react8.useMemo)(() => {
     if (!flopay) return null;
     return flopay.getRawProvider();
   }, [flopay]);
-  const paypalStripeInstance = (0, import_react7.useMemo)(() => {
+  const paypalStripeInstance = (0, import_react8.useMemo)(() => {
     if (!paypalFlopay) return null;
     return paypalFlopay.getRawProvider();
   }, [paypalFlopay]);
   const amountInCents = totalAmount || 100;
-  const walletOptions = (0, import_react7.useMemo)(() => ({
+  const walletOptions = (0, import_react8.useMemo)(() => ({
     mode: "payment",
     amount: amountInCents,
     currency: currency.toLowerCase(),
     paymentMethodCreation: "manual",
     captureMethod: "manual"
   }), [amountInCents, currency]);
-  const paypalOptions = (0, import_react7.useMemo)(() => ({
+  const paypalOptions = (0, import_react8.useMemo)(() => ({
     mode: "payment",
     amount: amountInCents,
     currency: currency.toLowerCase(),
     captureMethod: "manual",
     setupFutureUsage: "off_session"
   }), [amountInCents, currency]);
-  const updateError = (0, import_react7.useCallback)(
+  const updateError = (0, import_react8.useCallback)(
     (err) => {
       setError(err);
       onErrorChange?.(err);
     },
     [onErrorChange]
   );
-  const emitDecline = (0, import_react7.useCallback)(
+  const emitDecline = (0, import_react8.useCallback)(
     (method, input, overrides) => {
       onDecline?.(buildDeclineEvent(method, input, overrides));
     },
     [onDecline]
   );
   const showWallets = showApplePay || showGooglePay;
-  const [paypalLoadState, setPaypalLoadState] = (0, import_react7.useState)("loading");
-  const [walletLoadState, setWalletLoadState] = (0, import_react7.useState)("loading");
-  const [inAppBrowserDetected, setInAppBrowserDetected] = (0, import_react7.useState)();
-  (0, import_react7.useEffect)(() => {
+  const [paypalLoadState, setPaypalLoadState] = (0, import_react8.useState)("loading");
+  const [walletLoadState, setWalletLoadState] = (0, import_react8.useState)("loading");
+  const [directPaypalReady, setDirectPaypalReady] = (0, import_react8.useState)(false);
+  const [inAppBrowserDetected, setInAppBrowserDetected] = (0, import_react8.useState)();
+  (0, import_react8.useEffect)(() => {
     setInAppBrowserDetected(isInAppBrowser());
   }, []);
-  const shouldShowPayPal = showPayPal && inAppBrowserDetected === false;
-  const shouldShowWallets = showWallets && inAppBrowserDetected === false;
-  const shouldRenderPayPal = shouldShowPayPal && !!paypalStripeInstance;
+  const directPaypalConfigured = !!directPaypal?.clientId;
+  const shouldShowPayPal = showPayPal && (directPaypalConfigured || inAppBrowserDetected === false);
+  const shouldShowWallets = showWallets;
+  const shouldRenderDirectPayPal = shouldShowPayPal && directPaypalConfigured;
+  const shouldRenderStripePayPal = shouldShowPayPal && !directPaypalConfigured && !!paypalStripeInstance;
   const shouldRenderWallets = shouldShowWallets && !!stripeInstance;
-  const shouldDisplayPayPalRow = shouldRenderPayPal && isExpressCheckoutRowVisible(paypalLoadState);
+  const shouldDisplayPayPalRow = shouldRenderDirectPayPal ? directPaypalReady : shouldRenderStripePayPal && isExpressCheckoutRowVisible(paypalLoadState);
   const shouldDisplayWalletRow = shouldRenderWallets && isExpressCheckoutRowVisible(walletLoadState);
-  const handleNameChange = (0, import_react7.useCallback)((value) => {
+  const handleNameChange = (0, import_react8.useCallback)((value) => {
     setFullName(value);
     onFullNameChange?.(value);
     const parts = value.trim().split(/\s+/);
     onFirstNameChange?.(parts[0] ?? "");
     onLastNameChange?.(parts.length > 1 ? parts.slice(1).join(" ") : "");
   }, [onFullNameChange, onFirstNameChange, onLastNameChange]);
-  const applyInlineSessionPatch = (0, import_react7.useCallback)(
+  const applyInlineSessionPatch = (0, import_react8.useCallback)(
     (patch, method) => {
       if (!checkout.applyInlineSessionPatch) {
         return Promise.resolve({ error: null, sessionId });
@@ -1354,7 +1941,7 @@ function SplitCardFormInner({
     },
     [checkout.applyInlineSessionPatch, onError, sessionId, updateError]
   );
-  const runBeforeButtonClick = (0, import_react7.useCallback)(async (method) => {
+  const runBeforeButtonClick = (0, import_react8.useCallback)(async (method) => {
     if (!onBeforeButtonClick) return { proceed: true };
     try {
       const result = await onBeforeButtonClick({
@@ -1390,7 +1977,7 @@ function SplitCardFormInner({
       return { proceed: false };
     }
   }, [applyInlineSessionPatch, checkout.inlineSessionDraft, onBeforeButtonClick, onError, sessionId, updateError]);
-  const processPaymentInternal = (0, import_react7.useCallback)(
+  const processPaymentInternal = (0, import_react8.useCallback)(
     async (tokenizedBody, overrides) => {
       if (processingRef.current) return;
       processingRef.current = true;
@@ -1402,7 +1989,7 @@ function SplitCardFormInner({
       const resolvedCompletionPaymentMethodId = overrides?.completionPaymentMethodId ?? resolveTokenizedPaymentMethodId(tokenizedBody);
       const requestTokenizedBody = tokenizedBody.originalPaymentMethodId ? { ...tokenizedBody, originalPaymentMethodId: void 0 } : tokenizedBody;
       try {
-        const api = new import_js.PaymentAPI(baseUrl);
+        const api = new import_js2.PaymentAPI(baseUrl);
         const response = await api.processPayment(effectiveAccount.userId ?? "", {
           sessionId: effectiveSessionId,
           tokenizedData: requestTokenizedBody,
@@ -1413,18 +2000,18 @@ function SplitCardFormInner({
             lastName: effectiveAccount.lastName ?? fullName.trim().split(/\s+/).slice(1).join(" ") ?? "",
             ...avsConfig ? (() => {
               const c = selectedCountryRef.current;
-              const stateVisible = (0, import_shared4.isAVSFieldVisible)(avsConfig.state, c);
-              const line1Visible = (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, c);
-              const zipVisible = (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, c);
-              const derivedState = line1Visible && !stateVisible && zipVisible ? (0, import_shared4.getStateFromPostalCode)(c, zipCodeRef.current ?? "") : null;
+              const stateVisible = (0, import_shared5.isAVSFieldVisible)(avsConfig.state, c);
+              const line1Visible = (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, c);
+              const zipVisible = (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, c);
+              const derivedState = line1Visible && !stateVisible && zipVisible ? (0, import_shared5.getStateFromPostalCode)(c, zipCodeRef.current ?? "") : null;
               const stateValue2 = stateVisible ? stateRef.current : derivedState;
               return {
                 country: c,
                 ...zipVisible && zipCodeRef.current ? { zip: zipCodeRef.current } : {},
-                ...(0, import_shared4.isAVSFieldVisible)(avsConfig.city, c) && cityRef.current ? { city: cityRef.current } : {},
+                ...(0, import_shared5.isAVSFieldVisible)(avsConfig.city, c) && cityRef.current ? { city: cityRef.current } : {},
                 ...stateValue2 ? { state: stateValue2 } : {},
                 ...line1Visible && addressLine1Ref.current ? { addressLine1: addressLine1Ref.current } : {},
-                ...(0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_2, c) && addressLine2Ref.current ? { addressLine2: addressLine2Ref.current } : {}
+                ...(0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_2, c) && addressLine2Ref.current ? { addressLine2: addressLine2Ref.current } : {}
               };
             })() : {}
           },
@@ -1436,17 +2023,18 @@ function SplitCardFormInner({
           // Resolved exposure: which fields were actually shown for the active country.
           // Country-scoped rules (e.g. ['US', 'CA']) are flattened to booleans here.
           avsConfig: avsConfig ? {
-            country: (0, import_shared4.isAVSFieldVisible)(avsConfig.country, selectedCountryRef.current),
-            postal_code: (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, selectedCountryRef.current),
-            address_line_1: (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, selectedCountryRef.current),
-            address_line_2: (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_2, selectedCountryRef.current),
-            city: (0, import_shared4.isAVSFieldVisible)(avsConfig.city, selectedCountryRef.current),
-            state: (0, import_shared4.isAVSFieldVisible)(avsConfig.state, selectedCountryRef.current)
+            country: (0, import_shared5.isAVSFieldVisible)(avsConfig.country, selectedCountryRef.current),
+            postal_code: (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, selectedCountryRef.current),
+            address_line_1: (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, selectedCountryRef.current),
+            address_line_2: (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_2, selectedCountryRef.current),
+            city: (0, import_shared5.isAVSFieldVisible)(avsConfig.city, selectedCountryRef.current),
+            state: (0, import_shared5.isAVSFieldVisible)(avsConfig.state, selectedCountryRef.current)
           } : void 0
         });
         if (response.ok) {
           markSessionRecentlyCompleted(effectiveSessionId);
           setOverlayStatus("success");
+          setPaypalDirectRetry(null);
           await new Promise((r) => setTimeout(r, PROCESSING_OVERLAY_SUCCESS_DELAY_MS));
           onComplete?.({
             status: "succeeded",
@@ -1470,18 +2058,18 @@ function SplitCardFormInner({
             const retryCC = selectedCountryRef.current;
             const retryCountry = enableAVS ? retryCC : effectiveAccount.country;
             if (retryCountry) retryBillingAddress["country"] = retryCountry;
-            if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, retryCC) && zipCodeRef.current.trim()) {
+            if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, retryCC) && zipCodeRef.current.trim()) {
               retryBillingAddress["postal_code"] = zipCodeRef.current.trim();
             } else if (!avsConfig && effectiveAccount.zip) {
               retryBillingAddress["postal_code"] = effectiveAccount.zip;
             }
-            if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, retryCC) && addressLine1Ref.current.trim()) retryBillingAddress["line1"] = addressLine1Ref.current.trim();
-            if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_2, retryCC) && addressLine2Ref.current.trim()) retryBillingAddress["line2"] = addressLine2Ref.current.trim();
-            if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.city, retryCC) && cityRef.current.trim()) retryBillingAddress["city"] = cityRef.current.trim();
-            if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.state, retryCC) && stateRef.current.trim()) {
+            if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, retryCC) && addressLine1Ref.current.trim()) retryBillingAddress["line1"] = addressLine1Ref.current.trim();
+            if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_2, retryCC) && addressLine2Ref.current.trim()) retryBillingAddress["line2"] = addressLine2Ref.current.trim();
+            if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.city, retryCC) && cityRef.current.trim()) retryBillingAddress["city"] = cityRef.current.trim();
+            if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.state, retryCC) && stateRef.current.trim()) {
               retryBillingAddress["state"] = stateRef.current.trim();
-            } else if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, retryCC) && !(0, import_shared4.isAVSFieldVisible)(avsConfig.state, retryCC) && (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, retryCC)) {
-              const derivedRetryState = (0, import_shared4.getStateFromPostalCode)(retryCC, zipCodeRef.current.trim());
+            } else if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, retryCC) && !(0, import_shared5.isAVSFieldVisible)(avsConfig.state, retryCC) && (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, retryCC)) {
+              const derivedRetryState = (0, import_shared5.getStateFromPostalCode)(retryCC, zipCodeRef.current.trim());
               if (derivedRetryState) retryBillingAddress["state"] = derivedRetryState;
             }
             const result = await flopay.confirmPayment({
@@ -1554,6 +2142,24 @@ function SplitCardFormInner({
           }
           return;
         }
+        if (json?.type === "paypal_direct_required") {
+          const orderId = json["orderId"];
+          if (!orderId) {
+            setOverlayStatus("error");
+            updateError("PayPal retry required but no order id provided.");
+            return;
+          }
+          const prevAttempts = paypalDirectRetryRef.current?.attempts ?? 0;
+          if (prevAttempts >= 2) {
+            setOverlayStatus("error");
+            updateError("PayPal payment could not be completed after multiple attempts.");
+            emitDecline("paypal", "paypal_direct_required retry limit exceeded");
+            return;
+          }
+          setPaypalDirectRetry({ orderId, attempts: prevAttempts + 1 });
+          setOverlayStatus(null);
+          return;
+        }
         setOverlayStatus("error");
         const message = json?.message ?? "Payment failed. Please try again.";
         updateError(message);
@@ -1574,7 +2180,7 @@ function SplitCardFormInner({
     },
     [baseUrl, sessionId, resolvedAccount, fullName, chv, flopay, paypalFlopay, onComplete, onError, updateError, emitDecline]
   );
-  const dispatchTokenizedBody = (0, import_react7.useCallback)(
+  const dispatchTokenizedBody = (0, import_react8.useCallback)(
     (tokenizedBody, overrides) => {
       if (onTokenizedBody) {
         onTokenizedBody(tokenizedBody);
@@ -1584,7 +2190,7 @@ function SplitCardFormInner({
     },
     [onTokenizedBody, processPaymentInternal]
   );
-  (0, import_react7.useImperativeHandle)(innerRef, () => ({
+  (0, import_react8.useImperativeHandle)(innerRef, () => ({
     async handleNextAction(secret) {
       if (!flopay) return;
       setIs3DSActive(true);
@@ -1611,7 +2217,7 @@ function SplitCardFormInner({
       }
     }
   }), [flopay, dispatchTokenizedBody, onError, updateError, emitDecline]);
-  (0, import_react7.useEffect)(() => {
+  (0, import_react8.useEffect)(() => {
     if (typeof window === "undefined") return;
     const stored = localStorage.getItem(WALLET_RESUME_KEY);
     if (!stored) return;
@@ -1629,7 +2235,7 @@ function SplitCardFormInner({
       localStorage.removeItem(WALLET_RESUME_KEY);
     }
   }, [sessionId, dispatchTokenizedBody]);
-  const handleSubmit = (0, import_react7.useCallback)(
+  const handleSubmit = (0, import_react8.useCallback)(
     async (e) => {
       e.preventDefault();
       if (!flopay || !elements || isSubmitting || processingRef.current) return;
@@ -1643,20 +2249,20 @@ function SplitCardFormInner({
       try {
         if (avsConfig) {
           const country = selectedCountryRef.current;
-          if ((0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, country) && !zipCodeRef.current.trim()) {
-            updateError((0, import_shared4.getPostalCodeLabel)(country) + " is required");
+          if ((0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, country) && !zipCodeRef.current.trim()) {
+            updateError((0, import_shared5.getPostalCodeLabel)(country) + " is required");
             return;
           }
-          if ((0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, country) && !addressLine1Ref.current.trim()) {
+          if ((0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, country) && !addressLine1Ref.current.trim()) {
             updateError("Street address is required");
             return;
           }
-          if ((0, import_shared4.isAVSFieldVisible)(avsConfig.city, country) && !cityRef.current.trim()) {
+          if ((0, import_shared5.isAVSFieldVisible)(avsConfig.city, country) && !cityRef.current.trim()) {
             updateError("City is required");
             return;
           }
-          if ((0, import_shared4.isAVSFieldVisible)(avsConfig.state, country) && !stateRef.current.trim()) {
-            updateError((0, import_shared4.getStateLabel)(country) + " is required");
+          if ((0, import_shared5.isAVSFieldVisible)(avsConfig.state, country) && !stateRef.current.trim()) {
+            updateError((0, import_shared5.getStateLabel)(country) + " is required");
             return;
           }
         }
@@ -1670,18 +2276,18 @@ function SplitCardFormInner({
         const cc = selectedCountryRef.current;
         const avsCountry = enableAVS ? cc : resolvedAccount.country;
         if (avsCountry) billingAddress["country"] = avsCountry;
-        if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, cc) && zipCodeRef.current.trim()) {
+        if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, cc) && zipCodeRef.current.trim()) {
           billingAddress["postal_code"] = zipCodeRef.current.trim();
         } else if (!avsConfig && resolvedAccount.zip) {
           billingAddress["postal_code"] = resolvedAccount.zip;
         }
-        if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, cc) && addressLine1Ref.current.trim()) billingAddress["line1"] = addressLine1Ref.current.trim();
-        if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_2, cc) && addressLine2Ref.current.trim()) billingAddress["line2"] = addressLine2Ref.current.trim();
-        if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.city, cc) && cityRef.current.trim()) billingAddress["city"] = cityRef.current.trim();
-        if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.state, cc) && stateRef.current.trim()) {
+        if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, cc) && addressLine1Ref.current.trim()) billingAddress["line1"] = addressLine1Ref.current.trim();
+        if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_2, cc) && addressLine2Ref.current.trim()) billingAddress["line2"] = addressLine2Ref.current.trim();
+        if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.city, cc) && cityRef.current.trim()) billingAddress["city"] = cityRef.current.trim();
+        if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.state, cc) && stateRef.current.trim()) {
           billingAddress["state"] = stateRef.current.trim();
-        } else if (avsConfig && (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, cc) && !(0, import_shared4.isAVSFieldVisible)(avsConfig.state, cc) && (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, cc)) {
-          const derivedSubmitState = (0, import_shared4.getStateFromPostalCode)(cc, zipCodeRef.current.trim());
+        } else if (avsConfig && (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, cc) && !(0, import_shared5.isAVSFieldVisible)(avsConfig.state, cc) && (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, cc)) {
+          const derivedSubmitState = (0, import_shared5.getStateFromPostalCode)(cc, zipCodeRef.current.trim());
           if (derivedSubmitState) billingAddress["state"] = derivedSubmitState;
         }
         const billingDetails = {
@@ -1695,7 +2301,7 @@ function SplitCardFormInner({
           return;
         }
         if (!sessionId || !resolvedAccount.email) {
-          throw new import_shared5.FloPayError("Missing sessionId or email", "validation_error");
+          throw new import_shared6.FloPayError("Missing sessionId or email", "validation_error");
         }
         const intentResponse = await fetch(`${baseUrl}/v1/checkouts/payments/intents`, {
           method: "POST",
@@ -1721,7 +2327,7 @@ function SplitCardFormInner({
         }
         const intentJson = await intentResponse.json();
         const intentClientSecret = intentJson.data?.id;
-        if (!intentClientSecret) throw new import_shared5.FloPayError("No client_secret in payment intent response", "api_error");
+        if (!intentClientSecret) throw new import_shared6.FloPayError("No client_secret in payment intent response", "api_error");
         const confirmResult = await flopay.confirmCardPayment({
           clientSecret: intentClientSecret,
           paymentMethodId: pmResult.paymentMethodId
@@ -1742,7 +2348,7 @@ function SplitCardFormInner({
         const paymentIntentId = confirmResult.paymentIntentId ?? confirmedPaymentIntent?.id;
         const paymentMethodId = confirmResult.paymentMethodId ?? resolvePaymentIntentPaymentMethodId(confirmedPaymentIntent) ?? pmResult.paymentMethodId;
         if (!paymentIntentId) {
-          const error2 = new import_shared5.FloPayError("No payment intent returned after confirmation.", "api_error");
+          const error2 = new import_shared6.FloPayError("No payment intent returned after confirmation.", "api_error");
           setOverlayStatus("error");
           updateError(error2.message);
           onError?.(error2);
@@ -1771,7 +2377,7 @@ function SplitCardFormInner({
   );
   const isReady = flopay !== null && elements !== null;
   if (!isReady) {
-    return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { "data-testid": "flopay-loading", "aria-busy": "true", children: "Loading payment form..." });
+    return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { "data-testid": "flopay-loading", "aria-busy": "true", children: "Loading payment form..." });
   }
   const isButtons = layout === "buttons";
   const resolvedBorder = isButtons ? bStyles.cardInputBorder ?? "#e5e7eb" : "#A4A4FF";
@@ -1814,7 +2420,7 @@ function SplitCardFormInner({
       invalid: { color: "#ef4444" }
     }
   };
-  const cardFormBlock = /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+  const cardFormBlock = /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
     backgroundColor: cardBg,
     borderRadius: "8px",
     padding: isButtons ? "0" : "1rem",
@@ -1822,7 +2428,7 @@ function SplitCardFormInner({
     ...isButtons ? { padding: bStyles.cardFormContainer?.padding ?? "0" } : {},
     ...sharedInputPlaceholderVars
   }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("style", { children: `
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: `
         .flopay-shared-input::placeholder {
           color: var(--flopay-input-placeholder-color);
           opacity: 1;
@@ -1831,12 +2437,12 @@ function SplitCardFormInner({
           font-weight: var(--flopay-input-font-weight);
         }
       ` }),
-    isButtons && showCardForm && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+    isButtons && showCardForm && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
       display: "flex",
       alignItems: "center",
       padding: "0.75rem 0 0.625rem"
     }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
         "button",
         {
           type: "button",
@@ -1858,7 +2464,7 @@ function SplitCardFormInner({
           },
           "aria-label": "Back to payment methods",
           children: [
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { style: {
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { style: {
               display: "inline-flex",
               alignItems: "center",
               justifyContent: "center",
@@ -1868,12 +2474,12 @@ function SplitCardFormInner({
               backgroundColor: "#f3f4f6",
               transition: "background-color 0.15s",
               ...bStyles.backButtonIcon
-            }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("path", { d: "M15 18l-6-6 6-6" }) }) }),
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(BackButtonContentSlot, { content: cardBackButtonContent })
+            }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("path", { d: "M15 18l-6-6 6-6" }) }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(BackButtonContentSlot, { content: cardBackButtonContent })
           ]
         }
       ),
-      hideTitle ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { flex: 1 } }) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+      hideTitle ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1 } }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
         flex: 1,
         textAlign: "center",
         fontWeight: 600,
@@ -1881,18 +2487,18 @@ function SplitCardFormInner({
         color: "#262833",
         paddingRight: 80,
         ...bStyles.title
-      }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(TitleContentSlot, { content: cardTitleContent }) })
+      }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(TitleContentSlot, { content: cardTitleContent }) })
     ] }),
-    !isButtons && !hideTitle && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { textAlign: "center", fontWeight: 600, fontSize: "1.1rem", padding: "0.5rem 0", color: "#262833" }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(TitleContentSlot, { content: cardTitleContent }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+    !isButtons && !hideTitle && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { textAlign: "center", fontWeight: 600, fontSize: "1.1rem", padding: "0.5rem 0", color: "#262833" }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(TitleContentSlot, { content: cardTitleContent }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
       backgroundColor: cardInputBg,
       border: `1px solid ${resolvedBorder}`,
       borderTopLeftRadius: "8px",
       borderTopRightRadius: "8px",
       padding: "10px"
-    }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(CardNumberElement, { onReady: () => setFormReady(true), options: stripeElementStyle }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: { display: "flex" }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+    }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CardNumberElement, { onReady: () => setFormReady(true), options: stripeElementStyle }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex" }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
         flex: 1,
         backgroundColor: cardInputBg,
         border: `1px solid ${resolvedBorder}`,
@@ -1900,23 +2506,23 @@ function SplitCardFormInner({
         borderRight: "none",
         borderBottomLeftRadius: "8px",
         padding: "10px"
-      }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(CardExpiryElement, { options: stripeElementStyle }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+      }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CardExpiryElement, { options: stripeElementStyle }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
         flex: 1,
         backgroundColor: cardInputBg,
         border: `1px solid ${resolvedBorder}`,
         borderTop: "none",
         borderBottomRightRadius: "8px",
         padding: "10px"
-      }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(CardCvcElement, { options: stripeElementStyle }) })
+      }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CardCvcElement, { options: stripeElementStyle }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
       backgroundColor: cardInputBg,
       border: `1px solid ${resolvedBorder}`,
       borderRadius: "8px",
       marginTop: "0.5rem",
       padding: "10px"
-    }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+    }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       "input",
       {
         className: "flopay-shared-input",
@@ -1954,9 +2560,9 @@ function SplitCardFormInner({
         ...sharedInputTypography,
         ...isButtons && bStyles.nameInput ? bStyles.nameInput : {}
       });
-      const stateOpts = (0, import_shared4.getStateOptions)(cc);
-      return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
-        (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_1, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: inputWrapStyle(bStyles.addressLine1Input), children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+      const stateOpts = (0, import_shared5.getStateOptions)(cc);
+      return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+        (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_1, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: inputWrapStyle(bStyles.addressLine1Input), children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
           "input",
           {
             className: "flopay-shared-input",
@@ -1973,7 +2579,7 @@ function SplitCardFormInner({
             style: inputFieldStyle()
           }
         ) }),
-        (0, import_shared4.isAVSFieldVisible)(avsConfig.address_line_2, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: inputWrapStyle(bStyles.addressLine2Input), children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+        (0, import_shared5.isAVSFieldVisible)(avsConfig.address_line_2, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: inputWrapStyle(bStyles.addressLine2Input), children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
           "input",
           {
             className: "flopay-shared-input",
@@ -1989,21 +2595,21 @@ function SplitCardFormInner({
             style: inputFieldStyle()
           }
         ) }),
-        ((0, import_shared4.isAVSFieldVisible)(avsConfig.city, cc) || (0, import_shared4.isAVSFieldVisible)(avsConfig.state, cc)) && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+        ((0, import_shared5.isAVSFieldVisible)(avsConfig.city, cc) || (0, import_shared5.isAVSFieldVisible)(avsConfig.state, cc)) && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
           display: "flex",
           gap: "0",
           marginTop: "0.5rem"
         }, children: [
-          (0, import_shared4.isAVSFieldVisible)(avsConfig.city, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+          (0, import_shared5.isAVSFieldVisible)(avsConfig.city, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
             flex: 1,
             backgroundColor: cardInputBg,
             border: `1px solid ${resolvedBorder}`,
             padding: "10px",
             borderTopLeftRadius: "8px",
             borderBottomLeftRadius: "8px",
-            ...(0, import_shared4.isAVSFieldVisible)(avsConfig.state, cc) ? { borderRight: "none", borderTopRightRadius: 0, borderBottomRightRadius: 0 } : { borderRadius: "8px" },
+            ...(0, import_shared5.isAVSFieldVisible)(avsConfig.state, cc) ? { borderRight: "none", borderTopRightRadius: 0, borderBottomRightRadius: 0 } : { borderRadius: "8px" },
             ...isButtons && bStyles.cityInput ? bStyles.cityInput : {}
-          }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             "input",
             {
               className: "flopay-shared-input",
@@ -2020,16 +2626,16 @@ function SplitCardFormInner({
               style: inputFieldStyle()
             }
           ) }),
-          (0, import_shared4.isAVSFieldVisible)(avsConfig.state, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+          (0, import_shared5.isAVSFieldVisible)(avsConfig.state, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
             flex: 1,
             backgroundColor: cardInputBg,
             border: `1px solid ${resolvedBorder}`,
             padding: "10px",
             borderTopRightRadius: "8px",
             borderBottomRightRadius: "8px",
-            ...(0, import_shared4.isAVSFieldVisible)(avsConfig.city, cc) ? { borderTopLeftRadius: 0, borderBottomLeftRadius: 0 } : { borderRadius: "8px" },
+            ...(0, import_shared5.isAVSFieldVisible)(avsConfig.city, cc) ? { borderTopLeftRadius: 0, borderBottomLeftRadius: 0 } : { borderRadius: "8px" },
             ...isButtons && bStyles.stateInput ? bStyles.stateInput : {}
-          }, children: stateOpts ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(
+          }, children: stateOpts ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
             "select",
             {
               value: stateValue,
@@ -2043,15 +2649,15 @@ function SplitCardFormInner({
               "data-testid": "flopay-state",
               style: { ...inputFieldStyle(), cursor: "pointer" },
               children: [
-                /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("option", { value: "", children: (0, import_shared4.getStateLabel)(cc) }),
-                stateOpts.map((s) => /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("option", { value: s.code, children: s.name }, s.code))
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("option", { value: "", children: (0, import_shared5.getStateLabel)(cc) }),
+                stateOpts.map((s) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("option", { value: s.code, children: s.name }, s.code))
               ]
             }
-          ) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          ) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             "input",
             {
               className: "flopay-shared-input",
-              placeholder: (0, import_shared4.getStateLabel)(cc),
+              placeholder: (0, import_shared5.getStateLabel)(cc),
               autoComplete: "address-level1",
               value: stateValue,
               onChange: (e) => {
@@ -2065,20 +2671,20 @@ function SplitCardFormInner({
             }
           ) })
         ] }),
-        ((0, import_shared4.isAVSFieldVisible)(avsConfig.country, cc) || (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, cc)) && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+        ((0, import_shared5.isAVSFieldVisible)(avsConfig.country, cc) || (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, cc)) && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
           display: "flex",
           flexDirection: avsLayoutProp === "column" ? "column" : "row",
           gap: avsLayoutProp === "column" ? "0.5rem" : "0",
           marginTop: "0.5rem"
         }, children: [
-          (0, import_shared4.isAVSFieldVisible)(avsConfig.country, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+          (0, import_shared5.isAVSFieldVisible)(avsConfig.country, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
             flex: avsLayoutProp === "row" ? 1 : void 0,
             backgroundColor: cardInputBg,
             border: `1px solid ${resolvedBorder}`,
             padding: "10px",
-            ...avsLayoutProp === "row" && (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, cc) ? { borderRadius: "0", borderTopLeftRadius: "8px", borderBottomLeftRadius: "8px", borderRight: "none" } : { borderRadius: "8px" },
+            ...avsLayoutProp === "row" && (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, cc) ? { borderRadius: "0", borderTopLeftRadius: "8px", borderBottomLeftRadius: "8px", borderRight: "none" } : { borderRadius: "8px" },
             ...isButtons && bStyles.countrySelect ? bStyles.countrySelect : {}
-          }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             "select",
             {
               value: selectedCountry,
@@ -2093,25 +2699,25 @@ function SplitCardFormInner({
               autoComplete: "country",
               "data-testid": "flopay-country",
               style: { ...inputFieldStyle(), cursor: "pointer" },
-              children: import_shared4.COUNTRY_OPTIONS.map((c) => /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("option", { value: c.code, children: [
+              children: import_shared5.COUNTRY_OPTIONS.map((c) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("option", { value: c.code, children: [
                 c.flag,
                 " ",
                 c.name
               ] }, c.code))
             }
           ) }),
-          (0, import_shared4.isAVSFieldVisible)(avsConfig.postal_code, cc) && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+          (0, import_shared5.isAVSFieldVisible)(avsConfig.postal_code, cc) && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
             flex: avsLayoutProp === "row" ? 1 : void 0,
             backgroundColor: cardInputBg,
             border: `1px solid ${resolvedBorder}`,
             padding: "10px",
-            ...avsLayoutProp === "row" && (0, import_shared4.isAVSFieldVisible)(avsConfig.country, cc) ? { borderRadius: "0", borderTopRightRadius: "8px", borderBottomRightRadius: "8px" } : { borderRadius: "8px" },
+            ...avsLayoutProp === "row" && (0, import_shared5.isAVSFieldVisible)(avsConfig.country, cc) ? { borderRadius: "0", borderTopRightRadius: "8px", borderBottomRightRadius: "8px" } : { borderRadius: "8px" },
             ...isButtons && bStyles.zipInput ? bStyles.zipInput : {}
-          }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             "input",
             {
               className: "flopay-shared-input",
-              placeholder: (0, import_shared4.getPostalCodeLabel)(selectedCountry),
+              placeholder: (0, import_shared5.getPostalCodeLabel)(selectedCountry),
               autoComplete: "postal-code",
               value: zipCode,
               onChange: (e) => {
@@ -2128,7 +2734,7 @@ function SplitCardFormInner({
         ] })
       ] });
     })(),
-    displayError && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { role: "alert", "data-testid": "flopay-error", style: {
+    displayError && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { role: "alert", "data-testid": "flopay-error", style: {
       margin: "0.75rem 0",
       padding: "0.625rem 0.875rem",
       background: "#FEF2F2",
@@ -2142,10 +2748,10 @@ function SplitCardFormInner({
       gap: "0.5rem",
       ...isButtons && bStyles.errorBanner ? bStyles.errorBanner : {}
     }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
       displayError
     ] }),
-    children ?? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+    children ?? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
       "button",
       {
         type: "submit",
@@ -2168,7 +2774,7 @@ function SplitCardFormInner({
         children: isSubmitting ? "PROCESSING..." : submitLabel
       }
     ),
-    !isButtons && showSecurityFooter && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+    !isButtons && showSecurityFooter && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
       backgroundColor: "#EFF9F0",
       borderRadius: "8px",
       padding: "0.75rem",
@@ -2185,11 +2791,11 @@ function SplitCardFormInner({
     const cardButtonSizing = cardButtonContent === void 0 ? { boxSizing: "border-box", height: DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT, padding: "0 1rem" } : { padding: "0.9rem 1rem" };
     const buttonsAnim = viewState === "expanding" ? `flopay-buttons-exit ${TRANSITION_MS}ms cubic-bezier(0.4, 0, 0.2, 1) both` : viewState === "collapsing" ? `flopay-buttons-enter ${TRANSITION_MS}ms cubic-bezier(0, 0, 0.2, 1) both` : void 0;
     const cardAnim = viewState === "expanding" ? `flopay-card-enter ${TRANSITION_MS}ms cubic-bezier(0, 0, 0.2, 1) both` : viewState === "collapsing" ? `flopay-card-exit ${TRANSITION_MS}ms cubic-bezier(0.4, 0, 0.2, 1) both` : void 0;
-    return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(FloPayKeyframes, {}),
-      overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ProcessingOverlay, { status: overlayStatus, errorMessage: displayError }),
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: { display: "grid" }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(FloPayKeyframes, {}),
+      overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ProcessingOverlay, { status: overlayStatus, errorMessage: displayError }),
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "grid" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
           gridArea: "1 / 1",
           display: "flex",
           flexDirection: "column",
@@ -2198,7 +2804,75 @@ function SplitCardFormInner({
           ...!isButtonsView && !buttonsAnim ? { visibility: "hidden", position: "absolute", pointerEvents: "none", width: "100%" } : {},
           ...buttonsAnim ? { animation: buttonsAnim, pointerEvents: "none" } : {}
         }, children: [
-          shouldRenderPayPal && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_react_stripe_js.Elements, { stripe: paypalStripeInstance, options: paypalOptions, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          debug && showPayPal && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+            "pre",
+            {
+              "data-testid": "flopay-direct-paypal-gate-debug",
+              style: {
+                margin: 0,
+                padding: "6px 8px",
+                background: "#eef2ff",
+                border: "1px solid #c7d2fe",
+                borderRadius: 6,
+                color: "#111827",
+                font: "11px/1.35 ui-monospace, SFMono-Regular, Menlo, monospace",
+                whiteSpace: "pre-wrap",
+                wordBreak: "break-word"
+              },
+              children: [
+                "FloPay/DirectPayPal-debug (parent gate)",
+                `  showPayPal=${showPayPal}`,
+                `  directPaypalConfigured=${directPaypalConfigured}`,
+                `  inAppBrowserDetected=${String(inAppBrowserDetected)}`,
+                `  shouldRenderDirectPayPal=${shouldRenderDirectPayPal}`,
+                `  shouldRenderStripePayPal=${shouldRenderStripePayPal}`,
+                `  hasPaypalStripeInstance=${!!paypalStripeInstance}`
+              ].join("\n")
+            }
+          ),
+          shouldRenderDirectPayPal && directPaypal && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+            paypalDirectRetry && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              "div",
+              {
+                "data-testid": "flopay-paypal-direct-retry-notice",
+                style: {
+                  padding: "8px 10px",
+                  background: "#fef3c7",
+                  border: "1px solid #fcd34d",
+                  borderRadius: 6,
+                  color: "#78350f",
+                  fontSize: 13,
+                  lineHeight: 1.4
+                },
+                children: "Please confirm your PayPal payment to complete checkout."
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              DirectPayPalButton,
+              {
+                sessionId,
+                billingApiUrl: resolvedBillingApiUrl,
+                email: resolvedAccount.email,
+                clientId: directPaypal.clientId,
+                environment: directPaypal.environment,
+                currency: currency.toUpperCase(),
+                isSubscription,
+                onTokenizedBody: dispatchTokenizedBody,
+                onComplete,
+                onErrorChange: updateError,
+                onDecline,
+                onButtonClick,
+                runBeforeButtonClick,
+                isProcessing: isSubmitting,
+                onLoadStateChange: setDirectPaypalReady,
+                session: session ?? null,
+                existingOrderId: paypalDirectRetry?.orderId,
+                debug
+              },
+              paypalDirectRetry?.orderId ?? "fresh"
+            )
+          ] }),
+          shouldRenderStripePayPal && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_react_stripe_js.Elements, { stripe: paypalStripeInstance, options: paypalOptions, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             PayPalButtonInner,
             {
               sessionId,
@@ -2213,7 +2887,7 @@ function SplitCardFormInner({
               onLoadStateChange: setPaypalLoadState
             }
           ) }),
-          shouldRenderWallets ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_react_stripe_js.Elements, { stripe: stripeInstance, options: walletOptions, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          shouldRenderWallets ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_react_stripe_js.Elements, { stripe: stripeInstance, options: walletOptions, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             WalletButtonInner,
             {
               sessionId,
@@ -2228,8 +2902,8 @@ function SplitCardFormInner({
               runBeforeButtonClick,
               onLoadStateChange: setWalletLoadState
             }
-          ) }) : shouldShowWallets ? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { height: DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT, borderRadius: 8, background: "#e5e7eb", animation: "flopay-pulse 1.5s ease-in-out infinite" } }) : null,
-          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
+          ) }) : shouldShowWallets ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { height: DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT, borderRadius: 8, background: "#e5e7eb", animation: "flopay-pulse 1.5s ease-in-out infinite" } }) : null,
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
             "button",
             {
               type: "button",
@@ -2267,10 +2941,10 @@ function SplitCardFormInner({
               onMouseUp: (e) => {
                 e.currentTarget.style.transform = "scale(1)";
               },
-              children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(CardButtonContentSlot, { content: cardButtonContent })
+              children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CardButtonContentSlot, { content: cardButtonContent })
             }
           ),
-          displayError && viewState === "buttons" && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { role: "alert", "data-testid": "flopay-error", style: {
+          displayError && viewState === "buttons" && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { role: "alert", "data-testid": "flopay-error", style: {
             margin: "0.25rem 0",
             padding: "0.625rem 0.875rem",
             background: "#FEF2F2",
@@ -2284,11 +2958,11 @@ function SplitCardFormInner({
             gap: "0.5rem",
             ...bStyles.errorBanner ? bStyles.errorBanner : {}
           }, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
             displayError
           ] })
         ] }),
-        isCardView && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
+        isCardView && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
           gridArea: "1 / 1",
           ...cardAnim ? { animation: cardAnim } : {},
           ...viewState === "collapsing" ? { pointerEvents: "none" } : {}
@@ -2296,37 +2970,111 @@ function SplitCardFormInner({
       ] })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(FloPayKeyframes, {}),
-    overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ProcessingOverlay, { status: overlayStatus, errorMessage: displayError }),
-    shouldRenderWallets && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_react_stripe_js.Elements, { stripe: stripeInstance, options: walletOptions, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
-      WalletButtonInner,
-      {
-        sessionId,
-        email: resolvedAccount.email,
-        billingApiUrl: resolvedBillingApiUrl,
-        showApplePay,
-        showGooglePay,
-        onTokenizedBody: dispatchTokenizedBody,
-        onErrorChange: updateError,
-        onDecline,
-        onLoadStateChange: setWalletLoadState
-      }
-    ) }),
-    shouldRenderPayPal && /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_react_stripe_js.Elements, { stripe: paypalStripeInstance, options: paypalOptions, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
-      PayPalButtonInner,
-      {
-        sessionId,
-        email: resolvedAccount.email,
-        billingApiUrl: resolvedBillingApiUrl,
-        onTokenizedBody: dispatchTokenizedBody,
-        onErrorChange: updateError,
-        isProcessing: isSubmitting,
-        onDecline,
-        onLoadStateChange: setPaypalLoadState
-      }
-    ) }),
-    (shouldDisplayWalletRow || shouldDisplayPayPalRow) && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(FloPayKeyframes, {}),
+    overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ProcessingOverlay, { status: overlayStatus, errorMessage: displayError }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
+      debug && showPayPal && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+        "pre",
+        {
+          "data-testid": "flopay-direct-paypal-gate-debug-default",
+          style: {
+            margin: 0,
+            padding: "6px 8px",
+            background: "#eef2ff",
+            border: "1px solid #c7d2fe",
+            borderRadius: 6,
+            color: "#111827",
+            font: "11px/1.35 ui-monospace, SFMono-Regular, Menlo, monospace",
+            whiteSpace: "pre-wrap",
+            wordBreak: "break-word"
+          },
+          children: [
+            "FloPay/DirectPayPal-debug (parent gate)",
+            `  showPayPal=${showPayPal}`,
+            `  directPaypalConfigured=${directPaypalConfigured}`,
+            `  inAppBrowserDetected=${String(inAppBrowserDetected)}`,
+            `  shouldRenderDirectPayPal=${shouldRenderDirectPayPal}`,
+            `  shouldRenderStripePayPal=${shouldRenderStripePayPal}`,
+            `  hasPaypalStripeInstance=${!!paypalStripeInstance}`
+          ].join("\n")
+        }
+      ),
+      shouldRenderDirectPayPal && directPaypal && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+        paypalDirectRetry && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+          "div",
+          {
+            "data-testid": "flopay-paypal-direct-retry-notice-default",
+            style: {
+              padding: "8px 10px",
+              background: "#fef3c7",
+              border: "1px solid #fcd34d",
+              borderRadius: 6,
+              color: "#78350f",
+              fontSize: 13,
+              lineHeight: 1.4
+            },
+            children: "Please confirm your PayPal payment to complete checkout."
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+          DirectPayPalButton,
+          {
+            sessionId,
+            billingApiUrl: resolvedBillingApiUrl,
+            email: resolvedAccount.email,
+            clientId: directPaypal.clientId,
+            environment: directPaypal.environment,
+            currency: currency.toUpperCase(),
+            isSubscription,
+            onTokenizedBody: dispatchTokenizedBody,
+            onComplete,
+            onErrorChange: updateError,
+            onDecline,
+            onButtonClick,
+            runBeforeButtonClick,
+            isProcessing: isSubmitting,
+            onLoadStateChange: setDirectPaypalReady,
+            session: session ?? null,
+            existingOrderId: paypalDirectRetry?.orderId,
+            debug
+          },
+          paypalDirectRetry?.orderId ?? "fresh"
+        )
+      ] }),
+      shouldRenderStripePayPal && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_react_stripe_js.Elements, { stripe: paypalStripeInstance, options: paypalOptions, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+        PayPalButtonInner,
+        {
+          sessionId,
+          email: resolvedAccount.email,
+          billingApiUrl: resolvedBillingApiUrl,
+          onTokenizedBody: dispatchTokenizedBody,
+          onErrorChange: updateError,
+          isProcessing: isSubmitting,
+          onButtonClick,
+          onDecline,
+          runBeforeButtonClick,
+          onLoadStateChange: setPaypalLoadState
+        }
+      ) }),
+      shouldRenderWallets && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_react_stripe_js.Elements, { stripe: stripeInstance, options: walletOptions, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+        WalletButtonInner,
+        {
+          sessionId,
+          email: resolvedAccount.email,
+          billingApiUrl: resolvedBillingApiUrl,
+          showApplePay,
+          showGooglePay,
+          onTokenizedBody: dispatchTokenizedBody,
+          onErrorChange: updateError,
+          onButtonClick,
+          onDecline,
+          runBeforeButtonClick,
+          onLoadStateChange: setWalletLoadState
+        }
+      ) })
+    ] }),
+    (shouldDisplayWalletRow || shouldDisplayPayPalRow) && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
       display: "flex",
       alignItems: "center",
       gap: "0.75rem",
@@ -2334,17 +3082,17 @@ function SplitCardFormInner({
       color: "#999",
       fontSize: "0.85rem"
     }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { flex: 1, height: 1, backgroundColor: "#ddd" } }),
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("span", { children: "or pay with card" }),
-      /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { flex: 1, height: 1, backgroundColor: "#ddd" } })
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1, height: 1, backgroundColor: "#ddd" } }),
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: "or pay with card" }),
+      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1, height: 1, backgroundColor: "#ddd" } })
     ] }),
     cardFormBlock
   ] });
 }
 
 // src/saved-payment-flow.ts
-var import_js2 = require("@flopay/js");
-var import_shared6 = require("@flopay/shared");
+var import_js3 = require("@flopay/js");
+var import_shared7 = require("@flopay/shared");
 var DEFAULT_SAVED_PAYMENT_DECLINE_METHOD = "card";
 function getRedirectResultFromCheckoutProcessError(error) {
   if (!error?.type || !error.threeDSecureToken) {
@@ -2361,9 +3109,11 @@ function getRedirectResultFromCheckoutProcessError(error) {
 }
 function checkoutProcessErrorToFloPayError(error, fallbackMessage = "Payment failed. Please try again.", options) {
   const checkoutMethod = options?.checkoutMethod ?? error?.checkoutMethod ?? (error?.type === "paypal_redirect_required" ? "paypal" : "card");
+  const rawMessage = error?.message ?? fallbackMessage;
+  const message = applyFriendlyMessageOverride(rawMessage) ?? rawMessage;
   return Object.assign(
-    new import_shared6.FloPayError(
-      error?.message ?? fallbackMessage,
+    new import_shared7.FloPayError(
+      message,
       "api_error",
       {
         code: error?.gatewayErrorCode
@@ -2417,16 +3167,19 @@ function getRedirectTokenFromProcessResponse(json, options) {
         return candidate;
       }
     }
-    const nestedGatewayData = nestedRecord.gatewayData;
-    if (nestedGatewayData && typeof nestedGatewayData === "object") {
-      const nestedGatewayDataRecord = nestedGatewayData;
-      const gatewayCandidates = [
-        nestedGatewayDataRecord.stripeClientSecret,
-        nestedGatewayDataRecord.clientSecret
-      ];
-      for (const candidate of gatewayCandidates) {
-        if (typeof candidate === "string" && candidate.length > 0 && (!options?.requirePaymentIntentClientSecret || isStripePaymentIntentClientSecret(candidate))) {
-          return candidate;
+    const nestedGateways = nestedRecord.gateways;
+    if (nestedGateways && typeof nestedGateways === "object") {
+      const stripeGateway = nestedGateways.stripe;
+      if (stripeGateway && typeof stripeGateway === "object") {
+        const stripeRecord = stripeGateway;
+        const gatewayCandidates = [
+          stripeRecord.stripeClientSecret,
+          stripeRecord.clientSecret
+        ];
+        for (const candidate of gatewayCandidates) {
+          if (typeof candidate === "string" && candidate.length > 0 && (!options?.requirePaymentIntentClientSecret || isStripePaymentIntentClientSecret(candidate))) {
+            return candidate;
+          }
         }
       }
     }
@@ -2451,9 +3204,9 @@ async function recover3DSRedirectResult({
     return null;
   }
   try {
-    const api = new import_js2.PaymentAPI(billingApiUrl);
+    const api = new import_js3.PaymentAPI(billingApiUrl);
     const unified = await api.getUnifiedCheckoutSession(sessionId);
-    const refreshedToken = unified.provider === "stripe" ? unified.data.stripe?.clientSecret : void 0;
+    const refreshedToken = unified.data.stripe?.clientSecret;
     if (isStripePaymentIntentClientSecret(refreshedToken)) {
       return {
         type: "3ds_required",
@@ -2479,7 +3232,7 @@ async function processSavedPaymentForMode({
   const lastName = session.customer?.lastName ?? session.accountData?.lastName ?? "";
   const country = session.customer?.country ?? session.accountData?.country ?? void 0;
   const zip = session.customer?.zip ?? session.accountData?.zip ?? void 0;
-  const api = new import_js2.PaymentAPI(baseUrl);
+  const api = new import_js3.PaymentAPI(baseUrl);
   const response = await retryOnceOnFetchFailure(() => api.processPayment(customerId, {
     sessionId: resolvedSessionId,
     tokenizedData,
@@ -2508,7 +3261,7 @@ async function processSavedPaymentForMode({
   if (json?.type === "paypal_redirect_required" || json?.type === "3ds_required") {
     const redirectToken = getRedirectTokenFromProcessResponse(json);
     if (!redirectToken) {
-      throw new import_shared6.FloPayError(
+      throw new import_shared7.FloPayError(
         "Authentication is required but no redirect token was provided.",
         "api_error",
         { code: "authentication_required" }
@@ -2530,7 +3283,7 @@ async function processSavedPaymentForMode({
       return recoveredRedirect;
     }
     throw Object.assign(
-      new import_shared6.FloPayError(
+      new import_shared7.FloPayError(
         "Your card requires authentication. Please enter your payment details below.",
         "api_error",
         { code: "authentication_required" }
@@ -2538,7 +3291,7 @@ async function processSavedPaymentForMode({
       { checkoutMethod: "card" }
     );
   }
-  throw new import_shared6.FloPayError(
+  throw new import_shared7.FloPayError(
     json?.message ?? "Payment failed. Please try again.",
     "api_error",
     {
@@ -2558,13 +3311,13 @@ async function processSavedPaymentWithIntent({
   const customerEmail = session.customer?.email ?? session.accountData?.email ?? "";
   if (!customerEmail) {
     throw Object.assign(
-      new import_shared6.FloPayError("Customer email is required to create a payment intent.", "validation_error", {
+      new import_shared7.FloPayError("Customer email is required to create a payment intent.", "validation_error", {
         param: "email"
       }),
       { checkoutMethod: "card" }
     );
   }
-  const api = new import_js2.PaymentAPI(billingApiUrl);
+  const api = new import_js3.PaymentAPI(billingApiUrl);
   const intentResponse = await retryOnceOnFetchFailure(() => api.createPaymentIntent(
     sessionId,
     customerEmail,
@@ -2586,7 +3339,7 @@ async function processSavedPaymentWithIntent({
   });
   if (!intentClientSecret) {
     throw Object.assign(
-      new import_shared6.FloPayError("No client secret in payment intent response.", "api_error"),
+      new import_shared7.FloPayError("No client secret in payment intent response.", "api_error"),
       { checkoutMethod: "card" }
     );
   }
@@ -2609,7 +3362,7 @@ async function processSavedPaymentWithIntent({
   const confirmedPaymentMethodId = confirmResult.paymentMethodId ?? resolvePaymentIntentPaymentMethodId(confirmedPaymentIntent) ?? paymentMethodId;
   if (!confirmedPaymentIntentId || confirmResult.status !== "succeeded" && confirmResult.status !== "processing" && confirmResult.status !== "requires_capture") {
     throw Object.assign(
-      new import_shared6.FloPayError(
+      new import_shared7.FloPayError(
         `Unfortunately, your payment could not be processed. Please try again using a different payment method or contact your bank for assistance. If the issue persists, feel free to reach out to us for support.`,
         "api_error",
         {
@@ -2657,12 +3410,12 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
 }) {
   const stripe = flopay?.getRawProvider();
   if (!stripe) {
-    throw new import_shared6.FloPayError("Payment provider is not available.", "api_error");
+    throw new import_shared7.FloPayError("Payment provider is not available.", "api_error");
   }
   if (redirectResult.type === "3ds_required") {
     if (!attempt3DS || !redirectResult.threeDSecureToken) {
       throw Object.assign(
-        new import_shared6.FloPayError(
+        new import_shared7.FloPayError(
           "Your card requires authentication. Please enter your payment details below.",
           "api_error",
           { code: "authentication_required" }
@@ -2678,7 +3431,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       );
       if (retrieveError) {
         throw Object.assign(
-          new import_shared6.FloPayError(
+          new import_shared7.FloPayError(
             retrieveError.message ?? "Failed to retrieve 3DS payment status.",
             "api_error",
             { code: retrieveError.code }
@@ -2704,7 +3457,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       );
       if (confirmError) {
         throw Object.assign(
-          new import_shared6.FloPayError(
+          new import_shared7.FloPayError(
             confirmError.message ?? "3DS authentication failed.",
             "api_error",
             { code: confirmError.code }
@@ -2719,7 +3472,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       });
       if (nextActionError) {
         throw Object.assign(
-          new import_shared6.FloPayError(
+          new import_shared7.FloPayError(
             nextActionError.message ?? "3DS authentication failed.",
             "api_error",
             { code: nextActionError.code }
@@ -2759,7 +3512,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       });
     }
     throw Object.assign(
-      new import_shared6.FloPayError("3DS authentication did not complete successfully.", "api_error"),
+      new import_shared7.FloPayError("3DS authentication did not complete successfully.", "api_error"),
       { checkoutMethod: "card" }
     );
   }
@@ -2767,7 +3520,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
     const paypalStripe = (paypalFlopay ?? flopay)?.getRawProvider();
     if (!paypalStripe) {
       throw Object.assign(
-        new import_shared6.FloPayError("PayPal is not available.", "api_error"),
+        new import_shared7.FloPayError("PayPal is not available.", "api_error"),
         { checkoutMethod: "paypal" }
       );
     }
@@ -2777,7 +3530,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       });
       if (error2) {
         throw Object.assign(
-          new import_shared6.FloPayError(
+          new import_shared7.FloPayError(
             error2.message ?? "PayPal authorization failed.",
             "api_error",
             { code: error2.code }
@@ -2800,7 +3553,7 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
     });
     if (error) {
       throw Object.assign(
-        new import_shared6.FloPayError(
+        new import_shared7.FloPayError(
           error.message ?? "PayPal authorization failed.",
           "api_error",
           { code: error.code }
@@ -2813,33 +3566,48 @@ async function handleSavedPaymentRedirectResult(redirectResult, {
       checkoutMethod: "paypal"
     };
   }
-  throw new import_shared6.FloPayError("Unsupported payment redirect state.", "api_error");
+  throw new import_shared7.FloPayError("Unsupported payment redirect state.", "api_error");
 }
 function normalizeSavedPaymentError(err) {
-  if (err instanceof import_shared6.FloPayError) {
+  if (err instanceof import_shared7.FloPayError) {
+    const friendly = applyFriendlyMessageOverride(err.message);
+    if (friendly && friendly !== err.message) {
+      return Object.assign(
+        new import_shared7.FloPayError(friendly, err.type, {
+          code: err.code,
+          declineCode: err.declineCode,
+          param: err.param,
+          statusCode: err.statusCode
+        }),
+        { checkoutMethod: err.checkoutMethod }
+      );
+    }
     return err;
   }
-  return new import_shared6.FloPayError(
-    err instanceof Error ? err.message : "Payment failed. Please try again.",
-    "api_error"
-  );
+  const rawMessage = err instanceof Error ? err.message : "Payment failed. Please try again.";
+  const message = applyFriendlyMessageOverride(rawMessage) ?? rawMessage;
+  return new import_shared7.FloPayError(message, "api_error");
 }
 function resolveSavedPaymentPublishableKeys(unified) {
-  let publishableKey;
-  let paypalPublishableKey;
-  if (unified.provider === "stripe") {
-    publishableKey = unified.data.stripe?.publishableKey;
-    paypalPublishableKey = unified.data.stripe?.paypalPublishableKey ?? void 0;
-  }
-  if (!publishableKey) {
-    throw new import_shared6.FloPayError(
-      "No publishable key found in the checkout session. Ensure the session includes gatewayData.publishableKey.",
+  const publishableKey = unified.data.stripe?.publishableKey;
+  const hasDirectPaypal = Boolean(unified.data.paypal?.publishableKey);
+  if (!publishableKey && !hasDirectPaypal) {
+    throw new import_shared7.FloPayError(
+      "Session advertises no supported gateways (expected `gateways.stripe` and/or `gateways.paypal`).",
       "validation_error"
     );
   }
+  if (!publishableKey) {
+    return {};
+  }
   return {
     publishableKey,
-    paypalPublishableKey
+    // Direct-PayPal sessions can still use Stripe's PayPal Element for the
+    // saved-PM redirect leg. Prefer the dedicated Stripe-PayPal sub-account
+    // publishable key when the backend advertises one; fall back to the
+    // primary Stripe publishable key so the resume flow still has a Stripe
+    // instance to drive Stripe's PayPal PI.
+    paypalPublishableKey: unified.data.stripe?.paypalPublishableKey ?? publishableKey
   };
 }
 async function loadSavedPaymentProviders({
@@ -2848,13 +3616,16 @@ async function loadSavedPaymentProviders({
   billingApiUrl,
   locale
 }) {
+  if (!publishableKey) {
+    return { flopay: null, paypalFlopay: null };
+  }
   const needsSeparatePaypal = Boolean(paypalPublishableKey) && paypalPublishableKey !== publishableKey;
   const [instance, paypalInstanceOrError] = await Promise.all([
-    (0, import_js2.loadFloPay)(publishableKey, {
+    (0, import_js3.loadFloPay)(publishableKey, {
       billingApiUrl,
       locale
     }),
-    needsSeparatePaypal ? (0, import_js2.loadFloPay)(paypalPublishableKey, {
+    needsSeparatePaypal ? (0, import_js3.loadFloPay)(paypalPublishableKey, {
       billingApiUrl,
       locale
     }).catch((err) => {
@@ -2869,13 +3640,26 @@ async function loadSavedPaymentProviders({
 }
 
 // src/flopay-checkout.tsx
-var import_jsx_runtime6 = require("react/jsx-runtime");
+var import_jsx_runtime7 = require("react/jsx-runtime");
 var DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2 = 44;
 var PAYPAL_RESUME_STORAGE_KEY = "flopay_checkout_saved_payment_resume";
 var sessionInflightMap = /* @__PURE__ */ new Map();
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function resolveDirectPaypalConfig(unified) {
+  const clientId = unified?.data.paypal?.publishableKey;
+  if (!clientId) return void 0;
+  return {
+    clientId,
+    environment: unified?.data.paypal?.environment
+  };
+}
+function isPayPalOnlyUnified(unified) {
+  if (!unified) return false;
+  if (unified.data.stripe?.publishableKey) return false;
+  return Boolean(resolveDirectPaypalConfig(unified)?.clientId);
+}
 function canUseStorage() {
   return typeof window !== "undefined" && typeof window.sessionStorage !== "undefined";
 }
@@ -2949,6 +3733,7 @@ function FloPayCheckout({
   showPayPal = true,
   showApplePay = true,
   showGooglePay = true,
+  debug = false,
   layout,
   buttonsTheme,
   buttonsStyles,
@@ -2969,81 +3754,81 @@ function FloPayCheckout({
   renderConfirmButton,
   onSessionCompleted
 }) {
-  const resolvedBillingUrl = (0, import_shared7.resolveBillingApiUrl)(billingApiUrl);
+  const resolvedBillingUrl = (0, import_shared8.resolveBillingApiUrl)(billingApiUrl);
   const checkoutType = createSessionParams ? "embedded_checkout" : "standard_checkout";
   const checkoutLayout = children ? "custom_layout" : layout === "buttons" ? "buttons_layout" : "default_layout";
-  const [unified, setUnified] = (0, import_react8.useState)(null);
-  const [flopay, setFloPay] = (0, import_react8.useState)(null);
-  const flopayRef = (0, import_react8.useRef)(null);
-  const [paypalFlopay, setPaypalFloPay] = (0, import_react8.useState)(null);
-  const paypalFlopayRef = (0, import_react8.useRef)(null);
-  const [session, setSession] = (0, import_react8.useState)(null);
-  const [resolvedSessionId, setResolvedSessionId] = (0, import_react8.useState)(sessionIdProp ?? "");
+  const [unified, setUnified] = (0, import_react9.useState)(null);
+  const [flopay, setFloPay] = (0, import_react9.useState)(null);
+  const flopayRef = (0, import_react9.useRef)(null);
+  const [paypalFlopay, setPaypalFloPay] = (0, import_react9.useState)(null);
+  const paypalFlopayRef = (0, import_react9.useRef)(null);
+  const [session, setSession] = (0, import_react9.useState)(null);
+  const [resolvedSessionId, setResolvedSessionId] = (0, import_react9.useState)(sessionIdProp ?? "");
   const activeSessionId = sessionIdProp ?? resolvedSessionId;
   const initSessionDependency = createSessionParams ? "" : activeSessionId;
-  const [isLoading, setIsLoading] = (0, import_react8.useState)(true);
-  const [loadError, setLoadError] = (0, import_react8.useState)(null);
-  const [currentMode, setCurrentMode] = (0, import_react8.useState)("full");
-  const [confirmProcessing, setConfirmProcessing] = (0, import_react8.useState)(false);
-  const [modeError, setModeError] = (0, import_react8.useState)(initialErrorMessage);
-  const [modeOverlayStatus, setModeOverlayStatus] = (0, import_react8.useState)(null);
-  const [modeOverlayError, setModeOverlayError] = (0, import_react8.useState)(null);
-  const [createSessionPatch, setCreateSessionPatch] = (0, import_react8.useState)(void 0);
-  const [createSessionPatchBaseHash, setCreateSessionPatchBaseHash] = (0, import_react8.useState)("");
-  const [cardBootstrapPending, setCardBootstrapPending] = (0, import_react8.useState)(false);
-  const autoCheckoutAttempted = (0, import_react8.useRef)(false);
-  const paypalResumeAttempted = (0, import_react8.useRef)(false);
-  const savedPaymentKeysRef = (0, import_react8.useRef)(null);
-  const onCompleteRef = (0, import_react8.useRef)(onComplete);
+  const [isLoading, setIsLoading] = (0, import_react9.useState)(true);
+  const [loadError, setLoadError] = (0, import_react9.useState)(null);
+  const [currentMode, setCurrentMode] = (0, import_react9.useState)("full");
+  const [confirmProcessing, setConfirmProcessing] = (0, import_react9.useState)(false);
+  const [modeError, setModeError] = (0, import_react9.useState)(initialErrorMessage);
+  const [modeOverlayStatus, setModeOverlayStatus] = (0, import_react9.useState)(null);
+  const [modeOverlayError, setModeOverlayError] = (0, import_react9.useState)(null);
+  const [createSessionPatch, setCreateSessionPatch] = (0, import_react9.useState)(void 0);
+  const [createSessionPatchBaseHash, setCreateSessionPatchBaseHash] = (0, import_react9.useState)("");
+  const [cardBootstrapPending, setCardBootstrapPending] = (0, import_react9.useState)(false);
+  const autoCheckoutAttempted = (0, import_react9.useRef)(false);
+  const paypalResumeAttempted = (0, import_react9.useRef)(false);
+  const savedPaymentKeysRef = (0, import_react9.useRef)(null);
+  const onCompleteRef = (0, import_react9.useRef)(onComplete);
   onCompleteRef.current = onComplete;
-  const onErrorRef = (0, import_react8.useRef)(onError);
+  const onErrorRef = (0, import_react9.useRef)(onError);
   onErrorRef.current = onError;
-  const onDeclineRef = (0, import_react8.useRef)(onDecline);
+  const onDeclineRef = (0, import_react9.useRef)(onDecline);
   onDeclineRef.current = onDecline;
-  const onSessionCompletedRef = (0, import_react8.useRef)(onSessionCompleted);
+  const onSessionCompletedRef = (0, import_react9.useRef)(onSessionCompleted);
   onSessionCompletedRef.current = onSessionCompleted;
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     console.info("[FloPay] Checkout initialized", {
-      sdk_version: import_shared7.SDK_VERSION,
+      sdk_version: import_shared8.SDK_VERSION,
       checkout_type: checkoutType,
       checkout_layout: checkoutLayout,
       billing_api_url: resolvedBillingUrl
     });
   }, [checkoutLayout, checkoutType, resolvedBillingUrl]);
-  const baseCreateSessionHash = (0, import_react8.useMemo)(
+  const baseCreateSessionHash = (0, import_react9.useMemo)(
     () => createSessionParams ? hashCreateParams(createSessionParams) : "",
     [createSessionParams]
   );
-  const activeCreateSessionPatch = (0, import_react8.useMemo)(
+  const activeCreateSessionPatch = (0, import_react9.useMemo)(
     () => createSessionPatchBaseHash === baseCreateSessionHash ? createSessionPatch : void 0,
     [createSessionPatch, createSessionPatchBaseHash, baseCreateSessionHash]
   );
-  const effectiveCreateSessionBase = (0, import_react8.useMemo)(
+  const effectiveCreateSessionBase = (0, import_react9.useMemo)(
     () => createSessionParams ? mergeInlineSessionPatch(createSessionParams, activeCreateSessionPatch) : void 0,
     [createSessionParams, activeCreateSessionPatch]
   );
   const effectiveCreateSessionMode = checkoutModeProp ?? effectiveCreateSessionBase?.checkoutMode ?? "full";
-  const effectiveCreateSession = (0, import_react8.useMemo)(
+  const effectiveCreateSession = (0, import_react9.useMemo)(
     () => effectiveCreateSessionBase ? {
       ...effectiveCreateSessionBase,
       checkoutMode: effectiveCreateSessionMode
     } : void 0,
     [effectiveCreateSessionBase, effectiveCreateSessionMode]
   );
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     setCreateSessionPatch(void 0);
     setCreateSessionPatchBaseHash(baseCreateSessionHash);
   }, [baseCreateSessionHash]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     setModeError(initialErrorMessage);
   }, [initialErrorMessage]);
-  const emitDecline = (0, import_react8.useCallback)(
+  const emitDecline = (0, import_react9.useCallback)(
     (method, input, overrides) => {
       onDeclineRef.current?.(buildDeclineEvent(method, input, overrides));
     },
     []
   );
-  const runSavedPaymentFlow = (0, import_react8.useCallback)(
+  const runSavedPaymentFlow = (0, import_react9.useCallback)(
     async (sess, options) => {
       setModeError(null);
       setModeOverlayError(null);
@@ -3053,7 +3838,7 @@ function FloPayCheckout({
         const redirectResult = getRedirectResultFromCheckoutProcessError(options?.initialAutoProcessingError);
         let paymentResult;
         if (redirectResult) {
-          if (redirectResult.type === "paypal_redirect_required" && savedPaymentKeysRef.current) {
+          if (redirectResult.type === "paypal_redirect_required" && savedPaymentKeysRef.current?.publishableKey) {
             persistPayPalResumeState({
               sessionId: activeSessionId2,
               publishableKey: savedPaymentKeysRef.current.publishableKey,
@@ -3072,12 +3857,12 @@ function FloPayCheckout({
             clearPayPalResumeState();
           }
         } else if (options?.initialAutoProcessingPending) {
-          const api = new import_js3.PaymentAPI(resolvedBillingUrl);
+          const api = new import_js4.PaymentAPI(resolvedBillingUrl);
           const completed = await api.waitForCheckoutSessionCompletion(options.initialAutoProcessingPending.sessionId, {
             initialDelayMs: options.initialAutoProcessingPending.retryAfterMs
           });
           if (completed.data.session?.status !== "complete") {
-            throw new import_shared7.FloPayError("Automatic payment failed. Please try again.", "api_error", {
+            throw new import_shared8.FloPayError("Automatic payment failed. Please try again.", "api_error", {
               code: completed.data.session?.status === "expired" ? "checkout_session_expired" : "checkout_processing_timeout"
             });
           }
@@ -3105,7 +3890,7 @@ function FloPayCheckout({
           if (result.type === "success") {
             paymentResult = result.result;
           } else {
-            if (result.type === "paypal_redirect_required" && savedPaymentKeysRef.current) {
+            if (result.type === "paypal_redirect_required" && savedPaymentKeysRef.current?.publishableKey) {
               persistPayPalResumeState({
                 sessionId: activeSessionId2,
                 publishableKey: savedPaymentKeysRef.current.publishableKey,
@@ -3161,7 +3946,7 @@ function FloPayCheckout({
       resolvedBillingUrl
     ]
   );
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     if (typeof window === "undefined" || paypalResumeAttempted.current) {
       return;
     }
@@ -3183,7 +3968,7 @@ function FloPayCheckout({
       try {
         if (params.get("redirect_status") === "failed") {
           throw Object.assign(
-            new import_shared7.FloPayError("PayPal payment was declined. Please try again.", "api_error"),
+            new import_shared8.FloPayError("PayPal payment was declined. Please try again.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
@@ -3196,17 +3981,17 @@ function FloPayCheckout({
           billingApiUrl: resolvedBillingUrl,
           locale
         });
-        const paypalStripe = (resumePaypalFlopay ?? resumeFlopay).getRawProvider();
+        const paypalStripe = (resumePaypalFlopay ?? resumeFlopay)?.getRawProvider();
         if (!paypalStripe) {
           throw Object.assign(
-            new import_shared7.FloPayError("PayPal is not available.", "api_error"),
+            new import_shared8.FloPayError("PayPal is not available.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
         const { paymentIntent, error } = await paypalStripe.retrievePaymentIntent(clientSecret);
         if (error) {
           throw Object.assign(
-            new import_shared7.FloPayError(
+            new import_shared8.FloPayError(
               error.message ?? "Failed to retrieve PayPal payment status.",
               "api_error",
               { code: error.code }
@@ -3217,14 +4002,14 @@ function FloPayCheckout({
         const resultStatus = mapPayPalIntentStatusToPaymentResult(paymentIntent?.status);
         if (!paymentIntent || resultStatus === "failed") {
           throw Object.assign(
-            new import_shared7.FloPayError("PayPal payment was not completed. Please try again.", "api_error"),
+            new import_shared8.FloPayError("PayPal payment was not completed. Please try again.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
         const paymentMethodId = typeof paymentIntent.payment_method === "string" ? paymentIntent.payment_method : paymentIntent.payment_method?.id;
         let finalResultStatus = resultStatus;
         if (resumeState.sessionId) {
-          const resumeApi = new import_js3.PaymentAPI(resolvedBillingUrl);
+          const resumeApi = new import_js4.PaymentAPI(resolvedBillingUrl);
           const resumeSessionResult = await resumeApi.getUnifiedCheckoutSession(resumeState.sessionId);
           const resumeSession = resumeSessionResult.data.session;
           if (resumeSession && resumeSession.status !== "complete") {
@@ -3241,7 +4026,7 @@ function FloPayCheckout({
             });
             if (processResult.type !== "success") {
               throw Object.assign(
-                new import_shared7.FloPayError("Failed to finalize PayPal payment.", "api_error"),
+                new import_shared8.FloPayError("Failed to finalize PayPal payment.", "api_error"),
                 { checkoutMethod: "paypal" }
               );
             }
@@ -3278,7 +4063,7 @@ function FloPayCheckout({
       }
     })();
   }, [emitDecline, locale, normalizeSavedPaymentError, resolvedBillingUrl]);
-  const initializedHashRef = (0, import_react8.useRef)(null);
+  const initializedHashRef = (0, import_react9.useRef)(null);
   function hashCreateParams(params) {
     const key = JSON.stringify({
       c: params?.clientId,
@@ -3303,23 +4088,23 @@ function FloPayCheckout({
     }
     return `flopay_session_${Math.abs(h).toString(36)}`;
   }
-  const createSessionHash = (0, import_react8.useMemo)(
+  const createSessionHash = (0, import_react9.useMemo)(
     () => effectiveCreateSession ? hashCreateParams(effectiveCreateSession) : "",
     [effectiveCreateSession]
   );
-  const createSessionParamsRef = (0, import_react8.useRef)(effectiveCreateSession);
+  const createSessionParamsRef = (0, import_react9.useRef)(effectiveCreateSession);
   createSessionParamsRef.current = effectiveCreateSession;
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     setResolvedSessionId(sessionIdProp ?? "");
   }, [sessionIdProp]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     autoCheckoutAttempted.current = false;
     setModeError(initialErrorMessage);
     setModeOverlayError(null);
     setModeOverlayStatus(null);
   }, [createSessionHash, initialErrorMessage, sessionIdProp]);
   async function resolveInlineSession(params, cacheKey) {
-    const api = new import_js3.PaymentAPI(resolvedBillingUrl);
+    const api = new import_js4.PaymentAPI(resolvedBillingUrl);
     let sid = typeof window !== "undefined" ? window.sessionStorage.getItem(cacheKey) : null;
     let realResult = null;
     if (sid) {
@@ -3355,11 +4140,11 @@ function FloPayCheckout({
     }
     return { sid: sid ?? "", result: realResult };
   }
-  const bootstrapInlineSession = (0, import_react8.useCallback)(
+  const bootstrapInlineSession = (0, import_react9.useCallback)(
     async (patch) => {
       const baseParams = createSessionParamsRef.current;
       if (!baseParams) {
-        throw new import_shared7.FloPayError("createSession is required to bootstrap checkout.", "validation_error");
+        throw new import_shared8.FloPayError("createSession is required to bootstrap checkout.", "validation_error");
       }
       const mergedParams = mergeInlineSessionPatch(baseParams, patch);
       const cacheKey = hashCreateParams(mergedParams);
@@ -3416,7 +4201,7 @@ function FloPayCheckout({
     },
     [locale, resolvedBillingUrl]
   );
-  const handleInlineSessionPatch = (0, import_react8.useCallback)(async (patch) => {
+  const handleInlineSessionPatch = (0, import_react9.useCallback)(async (patch) => {
     if (!hasInlineSessionPatchData(patch) || cardBootstrapPending) {
       return {
         sessionId: resolvedSessionId,
@@ -3439,7 +4224,7 @@ function FloPayCheckout({
     resolvedSessionId,
     session
   ]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     let cancelled = false;
     setLoadError(null);
     if (createSessionHash) {
@@ -3464,7 +4249,8 @@ function FloPayCheckout({
           const resolved = await bootstrapInlineSession();
           const resolvedSession = resolved.result.data.session ?? null;
           savedPaymentKeysRef.current = resolveSavedPaymentPublishableKeys(resolved.result);
-          if (!cancelled && shouldAutoProcessInlineSession && resolvedSession) {
+          const resolvedPaypalOnly = isPayPalOnlyUnified(resolved.result);
+          if (!cancelled && shouldAutoProcessInlineSession && resolvedSession && !resolvedPaypalOnly) {
             autoCheckoutAttempted.current = true;
             await runSavedPaymentFlow(resolvedSession, {
               attempt3DS: true,
@@ -3478,12 +4264,15 @@ function FloPayCheckout({
             return;
           }
           if (!cancelled && shouldAutoProcessInlineSession) {
+            if (resolvedPaypalOnly) {
+              autoCheckoutAttempted.current = true;
+            }
             setModeOverlayStatus(null);
             setModeOverlayError(null);
           }
         } catch (err) {
           if (cancelled) return;
-          const errorCode = err instanceof import_shared7.FloPayError ? err.code : typeof err === "object" && err !== null && "code" in err ? err.code : void 0;
+          const errorCode = err instanceof import_shared8.FloPayError ? err.code : typeof err === "object" && err !== null && "code" in err ? err.code : void 0;
           if (shouldAutoProcessInlineSession && errorCode === "session_auto_completed") {
             autoCheckoutAttempted.current = true;
             setModeOverlayStatus("success");
@@ -3499,7 +4288,7 @@ function FloPayCheckout({
             setModeOverlayStatus(null);
             setModeOverlayError(null);
           }
-          const floPayErr = err instanceof import_shared7.FloPayError ? err : new import_shared7.FloPayError(err instanceof Error ? err.message : "Failed to create session", "api_error");
+          const floPayErr = err instanceof import_shared8.FloPayError ? err : new import_shared8.FloPayError(err instanceof Error ? err.message : "Failed to create session", "api_error");
           setLoadError(floPayErr);
         }
       })();
@@ -3510,14 +4299,14 @@ function FloPayCheckout({
     setIsLoading(true);
     async function init() {
       try {
-        const api = new import_js3.PaymentAPI(resolvedBillingUrl);
+        const api = new import_js4.PaymentAPI(resolvedBillingUrl);
         const result = await api.getUnifiedCheckoutSession(activeSessionId);
         if (cancelled) return;
         setUnified(result);
         const sess = result.data.session ?? null;
         setSession(sess);
         if (!sess) {
-          throw new import_shared7.FloPayError("No session data returned", "api_error");
+          throw new import_shared8.FloPayError("No session data returned", "api_error");
         }
         if (sess.status === "complete") {
           setIsLoading(false);
@@ -3525,14 +4314,15 @@ function FloPayCheckout({
           return;
         }
         if (sess.status === "expired") {
-          throw new import_shared7.FloPayError("Checkout session has expired.", "api_error", {
+          throw new import_shared8.FloPayError("Checkout session has expired.", "api_error", {
             code: "checkout_session_expired"
           });
         }
         const effectiveMode = checkoutModeProp ?? sess.checkoutMode ?? "full";
         setCurrentMode(effectiveMode);
         const hasPayPalRedirectParams = typeof window !== "undefined" && new URLSearchParams(window.location.search).has("payment_intent");
-        if (effectiveMode === "auto" && !autoCheckoutAttempted.current && !hasPayPalRedirectParams) {
+        const paypalOnly = isPayPalOnlyUnified(result);
+        if (effectiveMode === "auto" && !autoCheckoutAttempted.current && !hasPayPalRedirectParams && !paypalOnly) {
           autoCheckoutAttempted.current = true;
           const stripeInitPromise = initStripe(result);
           try {
@@ -3559,7 +4349,7 @@ function FloPayCheckout({
         if (!cancelled) setIsLoading(false);
       } catch (err) {
         if (cancelled) return;
-        const floPayErr = err instanceof import_shared7.FloPayError ? err : new import_shared7.FloPayError(err instanceof Error ? err.message : "Failed to initialize checkout", "api_error");
+        const floPayErr = err instanceof import_shared8.FloPayError ? err : new import_shared8.FloPayError(err instanceof Error ? err.message : "Failed to initialize checkout", "api_error");
         setLoadError(floPayErr);
         setIsLoading(false);
       }
@@ -3599,7 +4389,7 @@ function FloPayCheckout({
     initSessionDependency,
     runSavedPaymentFlow
   ]);
-  const handleConfirmCheckout = (0, import_react8.useCallback)(async () => {
+  const handleConfirmCheckout = (0, import_react9.useCallback)(async () => {
     if (confirmProcessing || !session) return;
     setConfirmProcessing(true);
     setModeError(null);
@@ -3612,17 +4402,19 @@ function FloPayCheckout({
       setConfirmProcessing(false);
     }
   }, [activeSessionId, confirmProcessing, runSavedPaymentFlow, session]);
-  const providerOptions = (0, import_react8.useMemo)(() => {
-    if (!unified || !session) return void 0;
+  const directPaypalConfig = resolveDirectPaypalConfig(unified);
+  const isPaypalOnlySession = isPayPalOnlyUnified(unified);
+  const providerOptions = (0, import_react9.useMemo)(() => {
+    if (!unified || !session || !unified.data.stripe?.publishableKey) return void 0;
     const opts = {
       appearance,
       paymentMethodCreation: "manual",
       billingApiUrl: resolvedBillingUrl
     };
-    if (unified.provider === "stripe" && unified.data.stripe?.clientSecret) {
+    if (unified.data.stripe?.clientSecret) {
       opts.clientSecret = unified.data.stripe.clientSecret;
     } else {
-      const displayTotal = (0, import_shared7.buildCheckoutDisplayData)(session).total;
+      const displayTotal = (0, import_shared8.buildCheckoutDisplayData)(session).total;
       opts.amount = Math.round(displayTotal * 100) || session.amount;
       opts.currency = session.currency?.toLowerCase();
     }
@@ -3631,7 +4423,7 @@ function FloPayCheckout({
   const shouldHandleInlineSessionPatch = Boolean(
     createSessionParams && !children && layout === "buttons" && onBeforeButtonClick && effectiveCreateSessionMode === "full"
   );
-  const checkoutValue = (0, import_react8.useMemo)(
+  const checkoutValue = (0, import_react9.useMemo)(
     () => ({
       session,
       loading: isLoading,
@@ -3652,8 +4444,8 @@ function FloPayCheckout({
       cardBootstrapPending
     ]
   );
-  const shouldShowInterimButtons = Boolean(createSessionParams) && layout === "buttons" && (!flopay || !providerOptions);
-  const modeOverlay = modeOverlayStatus ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+  const shouldShowInterimButtons = Boolean(createSessionParams) && layout === "buttons" && !isPaypalOnlySession && (!flopay || !providerOptions);
+  const modeOverlay = modeOverlayStatus ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
     ProcessingOverlay,
     {
       status: modeOverlayStatus,
@@ -3662,31 +4454,31 @@ function FloPayCheckout({
   ) : null;
   if (isLoading) {
     if (loadingNode) {
-      return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
         loadingNode,
         modeOverlay
       ] });
     }
     if (layout === "buttons") {
-      const skeletonBar = (h) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
+      const skeletonBar = (h) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
         height: h,
         borderRadius: 8,
         background: "#e5e7eb",
         animation: "flopay-loading-pulse 1.5s ease-in-out infinite"
       } });
-      return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
           showPayPal && skeletonBar(DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2),
           (showApplePay || showGooglePay) && skeletonBar(DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2),
           skeletonBar(DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2),
-          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: `@keyframes flopay-loading-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }` })
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("style", { children: `@keyframes flopay-loading-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }` })
         ] }),
         modeOverlay
       ] });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex", justifyContent: "center", padding: 32 }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { display: "flex", justifyContent: "center", padding: 32 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
           width: 24,
           height: 24,
           border: "2px solid #e5e7eb",
@@ -3694,16 +4486,16 @@ function FloPayCheckout({
           borderRadius: "50%",
           animation: "spin 0.6s linear infinite"
         } }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: `@keyframes spin { to { transform: rotate(360deg); } }` })
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("style", { children: `@keyframes spin { to { transform: rotate(360deg); } }` })
       ] }),
       modeOverlay
     ] });
   }
   if (loadError) {
     if (errorNode) {
-      return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: errorNode(loadError) });
+      return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: errorNode(loadError) });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
       "div",
       {
         style: {
@@ -3717,8 +4509,8 @@ function FloPayCheckout({
     ) });
   }
   if (shouldShowInterimButtons) {
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
         InterimButtonsView,
         {
           onButtonClick,
@@ -3735,13 +4527,55 @@ function FloPayCheckout({
       modeOverlay
     ] });
   }
+  if (isPaypalOnlySession && session && directPaypalConfig) {
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className, style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
+        modeError && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          "div",
+          {
+            role: "alert",
+            "data-testid": "flopay-error",
+            style: {
+              padding: "0.625rem 0.875rem",
+              background: "#FEF2F2",
+              border: "1px solid #FECACA",
+              borderRadius: "8px",
+              color: "#991B1B",
+              fontSize: "0.85rem",
+              fontWeight: 600
+            },
+            children: modeError
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          DirectPayPalButton,
+          {
+            sessionId: activeSessionId,
+            billingApiUrl: resolvedBillingUrl,
+            email: session.customer?.email,
+            clientId: directPaypalConfig.clientId,
+            environment: directPaypalConfig.environment,
+            currency: (session.currency ?? "usd").toUpperCase(),
+            isSubscription: session.mode === "subscription",
+            onComplete,
+            onErrorChange: setModeError,
+            onDecline,
+            onButtonClick,
+            session,
+            debug
+          }
+        )
+      ] }) }),
+      modeOverlay
+    ] });
+  }
   if (!flopay || !providerOptions) {
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_jsx_runtime6.Fragment, { children: modeOverlay });
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_jsx_runtime7.Fragment, { children: modeOverlay });
   }
   if (currentMode === "confirm") {
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(FloPayProvider, { flopay, paypalFlopay, options: providerOptions, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className, children: [
-        modeError && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(FloPayProvider, { flopay, paypalFlopay, options: providerOptions, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { className, children: [
+        modeError && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
           "div",
           {
             style: {
@@ -3756,7 +4590,7 @@ function FloPayCheckout({
         renderConfirmButton ? renderConfirmButton({
           onConfirm: handleConfirmCheckout,
           isProcessing: confirmProcessing
-        }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+        }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
           "button",
           {
             type: "button",
@@ -3781,9 +4615,9 @@ function FloPayCheckout({
       modeOverlay
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(FloPayProvider, { flopay, paypalFlopay, options: providerOptions, children: children ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-      modeError && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutContext.Provider, { value: checkoutValue, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(FloPayProvider, { flopay, paypalFlopay, options: providerOptions, children: children ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      modeError && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
         "div",
         {
           style: {
@@ -3798,7 +4632,7 @@ function FloPayCheckout({
           children: modeError
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
         SessionInjector,
         {
           sessionId: activeSessionId,
@@ -3807,7 +4641,7 @@ function FloPayCheckout({
           children
         }
       )
-    ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
       SplitCardForm,
       {
         sessionId: activeSessionId,
@@ -3815,7 +4649,7 @@ function FloPayCheckout({
         userId: session?.customer?.id,
         firstName: session?.customer?.firstName,
         lastName: session?.customer?.lastName,
-        totalAmount: session ? Math.round((0, import_shared7.buildCheckoutDisplayData)(session).total * 100) : 0,
+        totalAmount: session ? Math.round((0, import_shared8.buildCheckoutDisplayData)(session).total * 100) : 0,
         currency: session?.currency?.toLowerCase() ?? "usd",
         onComplete,
         onError,
@@ -3846,7 +4680,11 @@ function FloPayCheckout({
         checkoutType: createSessionParams ? "embedded_checkout" : "standard_checkout",
         checkoutLayout: children ? "custom_layout" : layout === "buttons" ? "buttons_layout" : "default_layout",
         submitLabel,
-        className
+        className,
+        directPaypal: resolveDirectPaypalConfig(unified),
+        isSubscription: session?.mode === "subscription",
+        session,
+        debug
       }
     ) }) }),
     modeOverlay
@@ -3858,8 +4696,8 @@ function SessionInjector({
   session,
   children
 }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_jsx_runtime6.Fragment, { children: import_react8.default.Children.map(children, (child) => {
-    if (!import_react8.default.isValidElement(child)) return child;
+  return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_jsx_runtime7.Fragment, { children: import_react9.default.Children.map(children, (child) => {
+    if (!import_react9.default.isValidElement(child)) return child;
     const existing = child.props;
     const injected = {};
     if (!existing.sessionId) injected.sessionId = sessionId;
@@ -3873,7 +4711,7 @@ function SessionInjector({
         injected.lastName = session.customer.lastName;
     }
     if (Object.keys(injected).length === 0) return child;
-    return import_react8.default.cloneElement(child, injected);
+    return import_react9.default.cloneElement(child, injected);
   }) });
 }
 function InterimButtonsView({
@@ -3891,15 +4729,15 @@ function InterimButtonsView({
   cardBackButtonContent,
   cardTitleContent
 }) {
-  const [showCardForm, setShowCardForm] = (0, import_react8.useState)(false);
+  const [showCardForm, setShowCardForm] = (0, import_react9.useState)(false);
   const isCardOpenControlled = typeof cardOpen === "boolean";
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     if (isCardOpenControlled) {
       setShowCardForm(cardOpen);
     }
   }, [cardOpen, isCardOpenControlled]);
-  const bStyles = (0, import_react8.useMemo)(() => {
-    const base = (0, import_shared7.resolveButtonsLayoutTheme)(buttonsTheme);
+  const bStyles = (0, import_react9.useMemo)(() => {
+    const base = (0, import_shared8.resolveButtonsLayoutTheme)(buttonsTheme);
     if (!stylesOverride) return base;
     return {
       ...base,
@@ -3912,7 +4750,7 @@ function InterimButtonsView({
       title: { ...base.title, ...stylesOverride.title }
     };
   }, [buttonsTheme, stylesOverride]);
-  const skeleton = (h) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
+  const skeleton = (h) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
     height: h,
     borderRadius: 8,
     background: "#e5e7eb",
@@ -3924,15 +4762,15 @@ function InterimButtonsView({
     const inputBg = bStyles.cardInputBackground ?? "white";
     const hideBackButtonLabel = isEmptySlotContent(cardBackButtonContent);
     const hideTitle = isEmptySlotContent(cardTitleContent);
-    return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: {
       backgroundColor: bStyles.cardFormContainer?.backgroundColor ?? "white",
       borderRadius: "8px",
       animation: "flopay-interim-expand 0.35s cubic-bezier(0.4, 0, 0.2, 1) both",
       overflow: "hidden",
       ...bStyles.cardFormContainer
     }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex", alignItems: "center", padding: "0.75rem 0 0.625rem" }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { display: "flex", alignItems: "center", padding: "0.75rem 0 0.625rem" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
           "button",
           {
             type: "button",
@@ -3959,7 +4797,7 @@ function InterimButtonsView({
               ...bStyles.backButton
             },
             children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { style: {
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: {
                 display: "inline-flex",
                 alignItems: "center",
                 justifyContent: "center",
@@ -3968,12 +4806,12 @@ function InterimButtonsView({
                 borderRadius: "50%",
                 backgroundColor: "#f3f4f6",
                 ...bStyles.backButtonIcon
-              }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("path", { d: "M15 18l-6-6 6-6" }) }) }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(BackButtonContentSlot, { content: cardBackButtonContent })
+              }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("path", { d: "M15 18l-6-6 6-6" }) }) }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(BackButtonContentSlot, { content: cardBackButtonContent })
             ]
           }
         ),
-        hideTitle ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1 } }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
+        hideTitle ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { flex: 1 } }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
           flex: 1,
           textAlign: "center",
           fontWeight: 600,
@@ -3981,15 +4819,15 @@ function InterimButtonsView({
           color: "#262833",
           paddingRight: 80,
           ...bStyles.title
-        }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(TitleContentSlot, { content: cardTitleContent }) })
+        }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(TitleContentSlot, { content: cardTitleContent }) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTopLeftRadius: 8, borderTopRightRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { width: "60%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex" }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1, backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTop: "none", borderRight: "none", borderBottomLeftRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { width: "50%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { flex: 1, backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTop: "none", borderBottomRightRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { width: "40%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) })
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTopLeftRadius: 8, borderTopRightRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { width: "60%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { display: "flex" }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { flex: 1, backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTop: "none", borderRight: "none", borderBottomLeftRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { width: "50%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { flex: 1, backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderTop: "none", borderBottomRightRadius: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { width: "40%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderRadius: 8, marginTop: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { width: "45%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: {
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { backgroundColor: inputBg, border: `1px solid ${inputBorder}`, borderRadius: 8, marginTop: 8, padding: 12, height: 45 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: { width: "45%", height: 14, borderRadius: 4, background: "#e5e7eb", animation: "flopay-interim-pulse 1.5s ease-in-out infinite" } }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
         height: 50,
         borderRadius: 8,
         marginTop: 16,
@@ -3998,7 +4836,7 @@ function InterimButtonsView({
         ...bStyles.submitButton,
         opacity: 0.5
       } }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: `
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("style", { children: `
           @keyframes flopay-interim-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }
           @keyframes flopay-interim-expand {
             0% { opacity: 0; max-height: 0; transform: translateY(-12px); }
@@ -4008,10 +4846,10 @@ function InterimButtonsView({
         ` })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { display: "flex", flexDirection: "column", gap: "0.5rem" }, children: [
     showPayPal && skeleton(DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2),
     (showApplePay || showGooglePay) && skeleton(DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT2),
-    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
       "button",
       {
         type: "button",
@@ -4051,10 +4889,10 @@ function InterimButtonsView({
         onMouseUp: (e) => {
           e.currentTarget.style.transform = "scale(1)";
         },
-        children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CardButtonContentSlot, { content: cardButtonContent })
+        children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CardButtonContentSlot, { content: cardButtonContent })
       }
     ),
-    errorMessage && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: {
+    errorMessage && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: {
       margin: "0.25rem 0",
       padding: "0.625rem 0.875rem",
       background: "#FEF2F2",
@@ -4068,22 +4906,22 @@ function InterimButtonsView({
       gap: "0.5rem",
       ...bStyles.errorBanner
     }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", style: { flexShrink: 0 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("path", { d: "M12 9v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z", stroke: "#DC2626", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round" }) }),
       errorMessage
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("style", { children: `@keyframes flopay-interim-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }` })
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("style", { children: `@keyframes flopay-interim-pulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }` })
   ] });
 }
 
 // src/checkout-form.tsx
-var import_js4 = require("@flopay/js");
-var import_shared8 = require("@flopay/shared");
-var import_react9 = require("react");
-var import_jsx_runtime7 = require("react/jsx-runtime");
+var import_js5 = require("@flopay/js");
+var import_shared9 = require("@flopay/shared");
+var import_react10 = require("react");
+var import_jsx_runtime8 = require("react/jsx-runtime");
 var WALLET_RESUME_KEY2 = "flopay_wallet_resume";
-var CheckoutForm = (0, import_react9.forwardRef)(
+var CheckoutForm = (0, import_react10.forwardRef)(
   function CheckoutForm2(props, ref) {
-    return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(CheckoutFormInner, { ...props, innerRef: ref });
+    return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(CheckoutFormInner, { ...props, innerRef: ref });
   }
 );
 function CheckoutFormInner({
@@ -4112,34 +4950,34 @@ function CheckoutFormInner({
   const paypalFlopay = usePayPalFloPay();
   const elements = useElements();
   const contextBillingUrl = useBillingApiUrl();
-  const [processing, setProcessing] = (0, import_react9.useState)(false);
-  const [error, setError] = (0, import_react9.useState)(null);
-  const [is3DSActive, setIs3DSActive] = (0, import_react9.useState)(false);
+  const [processing, setProcessing] = (0, import_react10.useState)(false);
+  const [error, setError] = (0, import_react10.useState)(null);
+  const [is3DSActive, setIs3DSActive] = (0, import_react10.useState)(false);
   const displayError = externalError ?? error;
   const isSubmitting = externalProcessing ?? processing;
   const isSelfContained = !onTokenizedBody;
   const baseUrl = (billingApiUrl || contextBillingUrl).replace(/\/+$/, "");
-  const updateError = (0, import_react9.useCallback)(
+  const updateError = (0, import_react10.useCallback)(
     (err) => {
       setError(err);
       onErrorChange?.(err);
     },
     [onErrorChange]
   );
-  const emitDecline = (0, import_react9.useCallback)(
+  const emitDecline = (0, import_react10.useCallback)(
     (input, overrides) => {
       onDecline?.(buildDeclineEvent("card", input, overrides));
     },
     [onDecline]
   );
-  const processPaymentInternal = (0, import_react9.useCallback)(
+  const processPaymentInternal = (0, import_react10.useCallback)(
     async (tokenizedBody, completionPaymentMethodId) => {
       setProcessing(true);
       updateError(null);
       const resolvedCompletionPaymentMethodId = completionPaymentMethodId ?? resolveTokenizedPaymentMethodId(tokenizedBody);
       const requestTokenizedBody = tokenizedBody.originalPaymentMethodId ? { ...tokenizedBody, originalPaymentMethodId: void 0 } : tokenizedBody;
       try {
-        const api = new import_js4.PaymentAPI(baseUrl);
+        const api = new import_js5.PaymentAPI(baseUrl);
         const response = await api.processPayment(userId ?? "", {
           sessionId,
           tokenizedData: requestTokenizedBody,
@@ -4243,7 +5081,7 @@ function CheckoutFormInner({
     },
     [baseUrl, sessionId, userId, email, firstName, lastName, chv, flopay, paypalFlopay, onComplete, onError, onDecline, updateError, emitDecline]
   );
-  const dispatchTokenizedBody = (0, import_react9.useCallback)(
+  const dispatchTokenizedBody = (0, import_react10.useCallback)(
     (tokenizedBody) => {
       if (onTokenizedBody) {
         onTokenizedBody(tokenizedBody);
@@ -4253,7 +5091,7 @@ function CheckoutFormInner({
     },
     [onTokenizedBody, processPaymentInternal]
   );
-  (0, import_react9.useImperativeHandle)(innerRef, () => ({
+  (0, import_react10.useImperativeHandle)(innerRef, () => ({
     async handleNextAction(secret) {
       if (!flopay) return;
       setIs3DSActive(true);
@@ -4280,7 +5118,7 @@ function CheckoutFormInner({
       }
     }
   }), [flopay, dispatchTokenizedBody, onError, updateError, emitDecline]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (typeof window === "undefined") return;
     const stored = localStorage.getItem(WALLET_RESUME_KEY2);
     if (!stored) return;
@@ -4298,7 +5136,7 @@ function CheckoutFormInner({
       localStorage.removeItem(WALLET_RESUME_KEY2);
     }
   }, [sessionId, dispatchTokenizedBody]);
-  const handleSubmit = (0, import_react9.useCallback)(
+  const handleSubmit = (0, import_react10.useCallback)(
     async (e) => {
       e.preventDefault();
       if (!flopay || !elements || isSubmitting) return;
@@ -4322,7 +5160,7 @@ function CheckoutFormInner({
           return;
         }
         if (!sessionId || !email) {
-          throw new import_shared8.FloPayError("Missing sessionId or email", "validation_error");
+          throw new import_shared9.FloPayError("Missing sessionId or email", "validation_error");
         }
         const intentResponse = await fetch(`${baseUrl}/v1/checkouts/payments/intents`, {
           method: "POST",
@@ -4346,7 +5184,7 @@ function CheckoutFormInner({
         }
         const intentJson = await intentResponse.json();
         const intentClientSecret = intentJson.data?.id;
-        if (!intentClientSecret) throw new import_shared8.FloPayError("No client_secret in payment intent response", "api_error");
+        if (!intentClientSecret) throw new import_shared9.FloPayError("No client_secret in payment intent response", "api_error");
         const confirmResult = await flopay.confirmCardPayment({
           clientSecret: intentClientSecret,
           paymentMethodId: pmResult.paymentMethodId
@@ -4365,7 +5203,7 @@ function CheckoutFormInner({
         const paymentIntentId = confirmResult.paymentIntentId ?? confirmedPaymentIntent?.id;
         const paymentMethodId = confirmResult.paymentMethodId ?? resolvePaymentIntentPaymentMethodId(confirmedPaymentIntent) ?? pmResult.paymentMethodId;
         if (!paymentIntentId) {
-          const error2 = new import_shared8.FloPayError("No payment intent returned after confirmation.", "api_error");
+          const error2 = new import_shared9.FloPayError("No payment intent returned after confirmation.", "api_error");
           updateError(error2.message);
           onError?.(error2);
           return;
@@ -4388,8 +5226,8 @@ function CheckoutFormInner({
     [flopay, elements, isSubmitting, sessionId, email, baseUrl, isSelfContained, dispatchTokenizedBody, onError, updateError, emitDecline]
   );
   const isReady = flopay !== null && elements !== null;
-  return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
-    (is3DSActive || isSubmitting) && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { "data-testid": "flopay-overlay", style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)("form", { onSubmit: handleSubmit, className, style: { position: "relative" }, children: [
+    (is3DSActive || isSubmitting) && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { "data-testid": "flopay-overlay", style: {
       position: "absolute",
       inset: 0,
       background: "rgba(255,255,255,0.7)",
@@ -4398,12 +5236,12 @@ function CheckoutFormInner({
       justifyContent: "center",
       zIndex: 10
     }, children: is3DSActive ? "Verifying payment..." : "Processing..." }),
-    !isReady && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { "data-testid": "flopay-loading", "aria-busy": "true", children: "Loading payment form..." }),
-    isReady && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(PaymentElement, { options: { layout } }),
-      showAddress && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(AddressElement, { options: { mode: showAddress === true ? "billing" : showAddress } }),
-      displayError && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { role: "alert", "data-testid": "flopay-error", style: { color: "red", margin: "0.75rem 0" }, children: displayError }),
-      children ?? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+    !isReady && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { "data-testid": "flopay-loading", "aria-busy": "true", children: "Loading payment form..." }),
+    isReady && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(import_jsx_runtime8.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(PaymentElement, { options: { layout } }),
+      showAddress && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(AddressElement, { options: { mode: showAddress === true ? "billing" : showAddress } }),
+      displayError && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { role: "alert", "data-testid": "flopay-error", style: { color: "red", margin: "0.75rem 0" }, children: displayError }),
+      children ?? /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
         "button",
         {
           type: "submit",
@@ -4417,10 +5255,10 @@ function CheckoutFormInner({
 }
 
 // src/paypal-button.tsx
-var import_js5 = require("@flopay/js");
-var import_shared9 = require("@flopay/shared");
-var import_react10 = require("react");
-var import_jsx_runtime8 = require("react/jsx-runtime");
+var import_js6 = require("@flopay/js");
+var import_shared10 = require("@flopay/shared");
+var import_react11 = require("react");
+var import_jsx_runtime9 = require("react/jsx-runtime");
 function PayPalButton({
   sessionId,
   billingApiUrl,
@@ -4437,14 +5275,14 @@ function PayPalButton({
   const flopay = useFloPay();
   const elements = useElements();
   const contextBillingUrl = useBillingApiUrl();
-  const [ready, setReady] = (0, import_react10.useState)(false);
-  const [submitting, setSubmitting] = (0, import_react10.useState)(false);
-  const paypalResumeAttempted = (0, import_react10.useRef)(false);
+  const [ready, setReady] = (0, import_react11.useState)(false);
+  const [submitting, setSubmitting] = (0, import_react11.useState)(false);
+  const paypalResumeAttempted = (0, import_react11.useRef)(false);
   const baseUrl = (billingApiUrl || contextBillingUrl).replace(/\/+$/, "");
-  const processPaymentInternal = (0, import_react10.useCallback)(
+  const processPaymentInternal = (0, import_react11.useCallback)(
     async (tokenizedBody) => {
       try {
-        const api = new import_js5.PaymentAPI(baseUrl);
+        const api = new import_js6.PaymentAPI(baseUrl);
         const response = await api.processPayment(userId ?? "", {
           sessionId,
           tokenizedData: tokenizedBody,
@@ -4468,7 +5306,7 @@ function PayPalButton({
     },
     [baseUrl, sessionId, userId, email, firstName, lastName, chv, onComplete, onErrorChange]
   );
-  const dispatchTokenizedBody = (0, import_react10.useCallback)(
+  const dispatchTokenizedBody = (0, import_react11.useCallback)(
     (body) => {
       if (onTokenizedBody) {
         onTokenizedBody(body);
@@ -4478,7 +5316,7 @@ function PayPalButton({
     },
     [onTokenizedBody, processPaymentInternal]
   );
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (!flopay || paypalResumeAttempted.current) return;
     const params = new URLSearchParams(window.location.search);
     const paymentIntentId = params.get("payment_intent");
@@ -4526,13 +5364,13 @@ function PayPalButton({
       }
     })();
   }, [flopay, dispatchTokenizedBody, onErrorChange]);
-  const handlePayPalConfirm = (0, import_react10.useCallback)(async () => {
+  const handlePayPalConfirm = (0, import_react11.useCallback)(async () => {
     if (!flopay || !elements) return;
     try {
       setSubmitting(true);
       onErrorChange?.(null);
       if (!sessionId || !email) {
-        throw new import_shared9.FloPayError("Missing sessionId or email for PayPal payment", "validation_error");
+        throw new import_shared10.FloPayError("Missing sessionId or email for PayPal payment", "validation_error");
       }
       const result = await flopay.confirmPayPalPayment({
         billingApiUrl: baseUrl,
@@ -4559,11 +5397,11 @@ function PayPalButton({
     }
   }, [flopay, elements, sessionId, email, baseUrl, dispatchTokenizedBody, onErrorChange]);
   if (!flopay || !elements) {
-    return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { style: { height: 45, background: "#f0f0f0", borderRadius: 6, animation: "pulse 1.5s infinite" } });
+    return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { style: { height: 45, background: "#f0f0f0", borderRadius: 6, animation: "pulse 1.5s infinite" } });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(import_jsx_runtime8.Fragment, { children: [
-    !ready && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { style: { height: 45, background: "#f0f0f0", borderRadius: 6 } }),
-    /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { style: ready ? {} : { display: "none" }, children: /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
+    !ready && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { style: { height: 45, background: "#f0f0f0", borderRadius: 6 } }),
+    /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { style: ready ? {} : { display: "none" }, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
       "button",
       {
         type: "button",
@@ -4585,7 +5423,7 @@ function PayPalButton({
         children: submitting ? "Processing..." : "PayPal"
       }
     ) }),
-    (submitting || isProcessing) && /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { style: {
+    (submitting || isProcessing) && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { style: {
       position: "fixed",
       inset: 0,
       background: "rgba(0,0,0,0.4)",
@@ -4593,7 +5431,7 @@ function PayPalButton({
       alignItems: "center",
       justifyContent: "center",
       zIndex: 1e3
-    }, children: /* @__PURE__ */ (0, import_jsx_runtime8.jsx)("div", { style: {
+    }, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { style: {
       background: "white",
       borderRadius: 8,
       padding: "1.5rem",
@@ -4605,20 +5443,20 @@ function PayPalButton({
 }
 
 // src/automatic-payment-button.tsx
-var import_react11 = require("react");
-var import_js6 = require("@flopay/js");
-var import_shared10 = require("@flopay/shared");
-var import_jsx_runtime9 = require("react/jsx-runtime");
+var import_react12 = require("react");
+var import_js7 = require("@flopay/js");
+var import_shared11 = require("@flopay/shared");
+var import_jsx_runtime10 = require("react/jsx-runtime");
 var DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT3 = 44;
 var PAYPAL_RESUME_STORAGE_KEY2 = "flopay_automatic_payment_button_resume";
 function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function coerceError(err, fallbackMessage) {
-  if (err instanceof import_shared10.FloPayError) {
+  if (err instanceof import_shared11.FloPayError) {
     return err;
   }
-  return new import_shared10.FloPayError(
+  return new import_shared11.FloPayError(
     err instanceof Error ? err.message : fallbackMessage,
     "api_error"
   );
@@ -4725,11 +5563,11 @@ function FloPayAutomaticPaymentButton({
   style,
   ...buttonProps
 }) {
-  const resolvedBillingUrl = (0, import_react11.useMemo)(
-    () => (0, import_shared10.resolveBillingApiUrl)(billingApiUrl),
+  const resolvedBillingUrl = (0, import_react12.useMemo)(
+    () => (0, import_shared11.resolveBillingApiUrl)(billingApiUrl),
     [billingApiUrl]
   );
-  const createSessionDraft = (0, import_react11.useMemo)(
+  const createSessionDraft = (0, import_react12.useMemo)(
     () => resolveCreateSessionDraft({
       createSession,
       clientId,
@@ -4755,43 +5593,47 @@ function FloPayAutomaticPaymentButton({
       utmMetadata
     ]
   );
-  const [isProcessing, setIsProcessing] = (0, import_react11.useState)(false);
-  const [overlayStatus, setOverlayStatus] = (0, import_react11.useState)(null);
-  const [overlayError, setOverlayError] = (0, import_react11.useState)(null);
-  const [fallbackSession, setFallbackSession] = (0, import_react11.useState)(null);
-  const automaticPaymentToken = (0, import_react11.useMemo)(
+  const [isProcessing, setIsProcessing] = (0, import_react12.useState)(false);
+  const [overlayStatus, setOverlayStatus] = (0, import_react12.useState)(null);
+  const [overlayError, setOverlayError] = (0, import_react12.useState)(null);
+  const [fallbackSession, setFallbackSession] = (0, import_react12.useState)(null);
+  const automaticPaymentToken = (0, import_react12.useMemo)(
     () => paymentMethodId ? {
       id: paymentMethodId,
-      type: "card",
+      // Saved PayPal `user_payment_method` records are submitted with
+      // `type: 'paypal'` so the backend routes the upsell through the
+      // direct PayPal gateway's vaulted-token flow. Card and wallet PMs
+      // continue to use `type: 'card'`.
+      type: checkoutMethod === "paypal" ? "paypal" : "card",
       ...checkoutMethod === "paypal" ? { isPaypal: true } : {}
     } : void 0,
     [checkoutMethod, paymentMethodId]
   );
-  const isMountedRef = (0, import_react11.useRef)(true);
-  const resumeAttemptedRef = (0, import_react11.useRef)(false);
-  const fallbackSessionRef = (0, import_react11.useRef)(fallbackSession);
-  const onSuccessRef = (0, import_react11.useRef)(onSuccess);
-  const onErrorRef = (0, import_react11.useRef)(onError);
-  const onDeclineRef = (0, import_react11.useRef)(onDecline);
-  (0, import_react11.useEffect)(() => {
+  const isMountedRef = (0, import_react12.useRef)(true);
+  const resumeAttemptedRef = (0, import_react12.useRef)(false);
+  const fallbackSessionRef = (0, import_react12.useRef)(fallbackSession);
+  const onSuccessRef = (0, import_react12.useRef)(onSuccess);
+  const onErrorRef = (0, import_react12.useRef)(onError);
+  const onDeclineRef = (0, import_react12.useRef)(onDecline);
+  (0, import_react12.useEffect)(() => {
     fallbackSessionRef.current = fallbackSession;
   }, [fallbackSession]);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     onSuccessRef.current = onSuccess;
   }, [onSuccess]);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     onErrorRef.current = onError;
   }, [onError]);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     onDeclineRef.current = onDecline;
   }, [onDecline]);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     isMountedRef.current = true;
     return () => {
       isMountedRef.current = false;
     };
   }, []);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     if (!fallbackSession || typeof window === "undefined") {
       return;
     }
@@ -4805,13 +5647,13 @@ function FloPayAutomaticPaymentButton({
       window.removeEventListener("keydown", handleKeyDown);
     };
   }, [fallbackSession]);
-  const emitDecline = (0, import_react11.useCallback)((error, method = DEFAULT_SAVED_PAYMENT_DECLINE_METHOD) => {
+  const emitDecline = (0, import_react12.useCallback)((error, method = DEFAULT_SAVED_PAYMENT_DECLINE_METHOD) => {
     onDeclineRef.current?.(buildDeclineEvent(method, error, {
       code: error.code,
       declineCode: error.declineCode
     }));
   }, []);
-  const showSuccess = (0, import_react11.useCallback)(async (event) => {
+  const showSuccess = (0, import_react12.useCallback)(async (event) => {
     if (!isMountedRef.current) return;
     setOverlayError(null);
     setOverlayStatus("success");
@@ -4819,7 +5661,7 @@ function FloPayAutomaticPaymentButton({
     if (!isMountedRef.current) return;
     onSuccessRef.current?.(event);
   }, []);
-  const showError = (0, import_react11.useCallback)(async (error, options) => {
+  const showError = (0, import_react12.useCallback)(async (error, options) => {
     if (!isMountedRef.current) return;
     onErrorRef.current?.(error);
     if (options?.emitDecline) {
@@ -4829,10 +5671,10 @@ function FloPayAutomaticPaymentButton({
     setOverlayStatus("error");
     await sleep2(PROCESSING_OVERLAY_ERROR_DELAY_MS);
   }, [emitDecline]);
-  const processResolvedSession = (0, import_react11.useCallback)(async (apiResult, resolvedSessionId, options) => {
+  const processResolvedSession = (0, import_react12.useCallback)(async (apiResult, resolvedSessionId, options) => {
     const session = apiResult.data.session ?? null;
     if (!session) {
-      throw new import_shared10.FloPayError("No session data returned", "api_error");
+      throw new import_shared11.FloPayError("No session data returned", "api_error");
     }
     if (session.status === "complete") {
       await showSuccess({
@@ -4844,7 +5686,7 @@ function FloPayAutomaticPaymentButton({
       return;
     }
     if (session.status === "expired") {
-      throw new import_shared10.FloPayError("Checkout session has expired.", "api_error", {
+      throw new import_shared11.FloPayError("Checkout session has expired.", "api_error", {
         code: "checkout_session_expired"
       });
     }
@@ -4854,13 +5696,13 @@ function FloPayAutomaticPaymentButton({
       const shouldTreatCreateSessionFlowAsServerAutoAttempt = options?.fromCreateSession && (apiResult.autoProcessingAttempted === true || !!apiResult.autoProcessingError || !!redirectResult);
       const shouldRetryPayPalClientSide = checkoutMethod === "paypal" && automaticPaymentToken?.isPaypal === true && options?.fromCreateSession === true;
       if (apiResult.autoProcessingPending) {
-        const api = new import_js6.PaymentAPI(resolvedBillingUrl);
+        const api = new import_js7.PaymentAPI(resolvedBillingUrl);
         const completed = await api.waitForCheckoutSessionCompletion(apiResult.autoProcessingPending.sessionId, {
           initialDelayMs: apiResult.autoProcessingPending.retryAfterMs
         });
         const completedSession = completed.data.session;
         if (!completedSession || completedSession.status !== "complete") {
-          throw new import_shared10.FloPayError("Automatic payment failed. Please try again.", "api_error", {
+          throw new import_shared11.FloPayError("Automatic payment failed. Please try again.", "api_error", {
             code: completedSession?.status === "expired" ? "checkout_session_expired" : "checkout_processing_timeout"
           });
         }
@@ -4881,7 +5723,7 @@ function FloPayAutomaticPaymentButton({
           publishableKey,
           paypalPublishableKey
         } = resolveSavedPaymentPublishableKeys(apiResult);
-        if (redirectResult.type === "paypal_redirect_required") {
+        if (redirectResult.type === "paypal_redirect_required" && publishableKey) {
           persistPayPalResumeState2({
             sessionId: session.id || resolvedSessionId,
             publishableKey,
@@ -4937,7 +5779,7 @@ function FloPayAutomaticPaymentButton({
             publishableKey,
             paypalPublishableKey
           } = resolveSavedPaymentPublishableKeys(apiResult);
-          if (result.type === "paypal_redirect_required") {
+          if (result.type === "paypal_redirect_required" && publishableKey) {
             persistPayPalResumeState2({
               sessionId: session.id || resolvedSessionId,
               publishableKey,
@@ -4998,6 +5840,13 @@ function FloPayAutomaticPaymentButton({
             billingApiUrl: resolvedBillingUrl,
             locale
           });
+          if (!flopay) {
+            throw new import_shared11.FloPayError(
+              "Stripe is not available for 3DS authentication.",
+              "api_error",
+              { code: "authentication_required" }
+            );
+          }
           const paymentResult = await processSavedPaymentWithIntent({
             billingApiUrl: resolvedBillingUrl,
             sessionId: fallbackSessionId,
@@ -5052,14 +5901,14 @@ function FloPayAutomaticPaymentButton({
     showError,
     showSuccess
   ]);
-  const handleButtonClick = (0, import_react11.useCallback)(async (event) => {
+  const handleButtonClick = (0, import_react12.useCallback)(async (event) => {
     buttonProps.onClick?.(event);
     if (event.defaultPrevented || disabled || isProcessing) {
       return;
     }
     setFallbackSession(null);
     if (sessionId && createSessionDraft) {
-      const error = new import_shared10.FloPayError(
+      const error = new import_shared11.FloPayError(
         "Provide either sessionId or create-session props, not both.",
         "validation_error"
       );
@@ -5071,7 +5920,7 @@ function FloPayAutomaticPaymentButton({
       return;
     }
     if (!sessionId && !createSessionDraft) {
-      const error = new import_shared10.FloPayError(
+      const error = new import_shared11.FloPayError(
         "Provide a sessionId or the props required to create an automatic payment session.",
         "validation_error"
       );
@@ -5086,7 +5935,7 @@ function FloPayAutomaticPaymentButton({
     setOverlayError(null);
     setOverlayStatus("processing");
     try {
-      const api = new import_js6.PaymentAPI(resolvedBillingUrl);
+      const api = new import_js7.PaymentAPI(resolvedBillingUrl);
       if (sessionId) {
         const result = await api.getUnifiedCheckoutSession(sessionId);
         await processResolvedSession(result, sessionId);
@@ -5101,7 +5950,7 @@ function FloPayAutomaticPaymentButton({
           fromCreateSession: true
         });
       } catch (err) {
-        if (err instanceof import_shared10.FloPayError && err.code === "session_auto_completed") {
+        if (err instanceof import_shared11.FloPayError && err.code === "session_auto_completed") {
           await showSuccess({
             result: { status: "succeeded" },
             session: null,
@@ -5134,7 +5983,7 @@ function FloPayAutomaticPaymentButton({
     showError,
     showSuccess
   ]);
-  const handleFallbackComplete = (0, import_react11.useCallback)((result) => {
+  const handleFallbackComplete = (0, import_react12.useCallback)((result) => {
     const activeFallback = fallbackSessionRef.current;
     setFallbackSession(null);
     onSuccessRef.current?.({
@@ -5144,13 +5993,13 @@ function FloPayAutomaticPaymentButton({
       autoCompleted: false
     });
   }, []);
-  const handleFallbackError = (0, import_react11.useCallback)((error) => {
+  const handleFallbackError = (0, import_react12.useCallback)((error) => {
     onErrorRef.current?.(error);
   }, []);
-  const handleFallbackDecline = (0, import_react11.useCallback)((decline) => {
+  const handleFallbackDecline = (0, import_react12.useCallback)((decline) => {
     onDeclineRef.current?.(decline);
   }, []);
-  (0, import_react11.useEffect)(() => {
+  (0, import_react12.useEffect)(() => {
     if (typeof window === "undefined" || resumeAttemptedRef.current) {
       return;
     }
@@ -5171,7 +6020,7 @@ function FloPayAutomaticPaymentButton({
       try {
         if (params.get("redirect_status") === "failed") {
           throw Object.assign(
-            new import_shared10.FloPayError("PayPal payment was declined. Please try again.", "api_error"),
+            new import_shared11.FloPayError("PayPal payment was declined. Please try again.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
@@ -5184,17 +6033,17 @@ function FloPayAutomaticPaymentButton({
           billingApiUrl: resolvedBillingUrl,
           locale
         });
-        const paypalStripe = (paypalFlopay ?? flopay).getRawProvider();
+        const paypalStripe = (paypalFlopay ?? flopay)?.getRawProvider();
         if (!paypalStripe) {
           throw Object.assign(
-            new import_shared10.FloPayError("PayPal is not available.", "api_error"),
+            new import_shared11.FloPayError("PayPal is not available.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
         const { paymentIntent, error } = await paypalStripe.retrievePaymentIntent(clientSecret);
         if (error) {
           throw Object.assign(
-            new import_shared10.FloPayError(
+            new import_shared11.FloPayError(
               error.message ?? "Failed to retrieve PayPal payment status.",
               "api_error",
               { code: error.code }
@@ -5205,23 +6054,23 @@ function FloPayAutomaticPaymentButton({
         const resultStatus = mapPayPalIntentStatusToPaymentResult(paymentIntent?.status);
         if (!paymentIntent || resultStatus === "failed") {
           throw Object.assign(
-            new import_shared10.FloPayError("PayPal payment was not completed. Please try again.", "api_error"),
+            new import_shared11.FloPayError("PayPal payment was not completed. Please try again.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
         const paymentMethodId2 = typeof paymentIntent.payment_method === "string" ? paymentIntent.payment_method : paymentIntent.payment_method?.id;
         if (!resumeState.sessionId) {
           throw Object.assign(
-            new import_shared10.FloPayError("Missing session id on PayPal resume.", "api_error"),
+            new import_shared11.FloPayError("Missing session id on PayPal resume.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
-        const api = new import_js6.PaymentAPI(resolvedBillingUrl);
+        const api = new import_js7.PaymentAPI(resolvedBillingUrl);
         const sessionResult = await api.getUnifiedCheckoutSession(resumeState.sessionId);
         let resumeSession = sessionResult.data.session;
         if (!resumeSession) {
           throw Object.assign(
-            new import_shared10.FloPayError("Could not load session to capture PayPal payment.", "api_error"),
+            new import_shared11.FloPayError("Could not load session to capture PayPal payment.", "api_error"),
             { checkoutMethod: "paypal" }
           );
         }
@@ -5240,7 +6089,7 @@ function FloPayAutomaticPaymentButton({
           });
           if (processResult.type !== "success") {
             throw Object.assign(
-              new import_shared10.FloPayError("Failed to finalize PayPal payment.", "api_error"),
+              new import_shared11.FloPayError("Failed to finalize PayPal payment.", "api_error"),
               { checkoutMethod: "paypal" }
             );
           }
@@ -5281,8 +6130,8 @@ function FloPayAutomaticPaymentButton({
       }
     })();
   }, [locale, resolvedBillingUrl, showError, showSuccess]);
-  const bStyles = (0, import_react11.useMemo)(() => {
-    const base = (0, import_shared10.resolveButtonsLayoutTheme)(buttonsTheme);
+  const bStyles = (0, import_react12.useMemo)(() => {
+    const base = (0, import_shared11.resolveButtonsLayoutTheme)(buttonsTheme);
     if (!stylesOverride) return base;
     return {
       ...base,
@@ -5291,8 +6140,8 @@ function FloPayAutomaticPaymentButton({
     };
   }, [buttonsTheme, stylesOverride]);
   const cardButtonSizing = children === void 0 ? { boxSizing: "border-box", height: DEFAULT_BUTTONS_LAYOUT_BUTTON_HEIGHT3, padding: "0 1rem" } : { padding: "0.9rem 1rem" };
-  return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
       "button",
       {
         ...buttonProps,
@@ -5333,17 +6182,17 @@ function FloPayAutomaticPaymentButton({
             e.currentTarget.style.transform = "scale(1)";
           }
         },
-        children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(CardButtonContentSlot, { content: children })
+        children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CardButtonContentSlot, { content: children })
       }
     ),
-    overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+    overlayStatus && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
       ProcessingOverlay,
       {
         status: overlayStatus,
         errorMessage: overlayError
       }
     ),
-    fallbackSession && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+    fallbackSession && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
       "div",
       {
         "data-testid": "flopay-automatic-payment-fallback",
@@ -5364,7 +6213,7 @@ function FloPayAutomaticPaymentButton({
           padding: "1.5rem",
           zIndex: 1100
         },
-        children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+        children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
           "div",
           {
             style: {
@@ -5380,7 +6229,7 @@ function FloPayAutomaticPaymentButton({
               flexDirection: "column",
               gap: "1rem"
             },
-            children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+            children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
               FloPayCheckout,
               {
                 sessionId: fallbackSession.sessionId,
@@ -5408,6 +6257,7 @@ function FloPayAutomaticPaymentButton({
   CardExpiryElement,
   CardNumberElement,
   CheckoutForm,
+  DirectPayPalButton,
   FloPayAutomaticPaymentButton,
   FloPayCheckout,
   FloPayProvider,