@flopay/shared 1.2.8 → 1.3.1

package/dist/index.d.cts

@@ -33,6 +33,8 @@ declare function networkError(message: string): FloPayError;
 /** Theme variables that map to CSS custom properties on FloPay elements. */
 interface FloPayThemeVariables {
     colorPrimary?: string;
+    /** Hover background for all "flo" buttons (submit / card / wallet CTAs). */
+    colorPrimaryHover?: string;
     colorBackground?: string;
     colorText?: string;
     colorDanger?: string;
@@ -58,14 +60,23 @@ interface ButtonsLayoutStyles {
     cardFormContainer?: Record<string, string | number>;
     /** Border color for card input fields. */
     cardInputBorder?: string;
-    /** Text color inside Stripe card input fields (number, expiry, CVC). */
+    /** Text color inside the card input fields (number, expiry, CVC). */
     cardInputColor?: string;
-    /** Placeholder text color for Stripe card input fields. */
+    /** Placeholder text color for the card input fields. */
     cardInputPlaceholderColor?: string;
-    /** Font size for Stripe card input fields. */
+    /** Font size for the card input fields. */
     cardInputFontSize?: string;
     /** Background color for card input fields. */
     cardInputBackground?: string;
+    /**
+     * Opt-in escape hatch for vault-only style hooks that the appearance →
+     * hosted-field mapper cannot express. Merged last (last-write-wins) into the
+     * style config handed to the vault PCI card form, so these win over the
+     * auto-translated `cardInput*` knobs and `appearance.variables`. Keys are
+     * passed through verbatim — use vault-supported style property names.
+     * No effect on the legacy Stripe-Elements card path.
+     */
+    vaultCardForm?: Record<string, string | number>;
     /** Style for the full-name text input. */
     nameInput?: Record<string, string | number>;
     /** Style for the "Go back" button text/container. */
@@ -266,6 +277,16 @@ interface CheckoutGateway {
      * card path stays on the split-fields elements. Absent on legacy backends.
      */
     enabledPaymentMethods?: string[];
+    /**
+     * Per-method buyer-country gate (uppercase ISO 3166-1 alpha-2), keyed by the
+     * same method strings as {@link enabledPaymentMethods}. A method absent here
+     * has no country restriction. The SDK filters the rendered tile row by the
+     * buyer's *live* country (which can change via AVS after the session is
+     * created) against this map — so per-method country eligibility lives in one
+     * place (the backend) rather than a hardcoded SDK table. Absent on legacy
+     * backends (the SDK then falls back to its built-in table).
+     */
+    enabledPaymentMethodCountries?: Record<string, string[]>;
 }
 /**
  * Map of gateways attached to a session, keyed by gateway code. A session can
@@ -289,6 +310,23 @@ interface CheckoutSession {
     customer?: Customer;
     metadata?: Record<string, string>;
     checkoutMode?: CheckoutMode;
+    /**
+     * Embedded hosted vault capture credentials (TeamFloPay/backend#823),
+     * populated on the `POST /v1/checkouts/sessions` response when the SDK
+     * declared `X-Flo-SDK-Version >= 1.3.0` and the backend advertises a
+     * `pcivault` gateway. The SDK injects {@link VaultCaptureBlock.html} as the
+     * card-capture widget. Absent on legacy backends or when the SDK must fetch
+     * the block via `POST /v1/checkouts/sessions/{id}/vault/capture` instead.
+     */
+    vault?: VaultCaptureBlock;
+    /**
+     * Generic, provider-agnostic payment method identifier for a card already on
+     * file for the customer (TeamFloPay/backend#823). For the initial
+     * Stripe-behind-vault rollout this is the Stripe `pm_…` id, but the SDK
+     * treats it as an opaque card-method token. Present for returning customers
+     * so the SDK can skip the vault widget; `null`/absent otherwise.
+     */
+    providerPaymentMethodId?: string | null;
     /** Unified products array as returned by post-#760 backends. */
     products?: CheckoutSessionProduct[];
     successUrl?: string;
@@ -513,6 +551,262 @@ interface PaymentProviderAdapter {
     createPayPalElements(options: ElementOptions): unknown;
     destroy(): void;
 }
+/**
+ * Identifier for a card-capture backend that owns the hosted PCI card form.
+ * The SDK models card collection as a generic card method so additional
+ * vault/card providers can be added behind the same {@link CardCaptureAdapter}
+ * without changing the React card form. `'pcivault'` is the first (and
+ * currently only) implementation.
+ */
+type CardCaptureProviderId = 'pcivault';
+/**
+ * Server-rendered hosted vault capture credentials (TeamFloPay/backend#823).
+ *
+ * Returned either embedded on the `POST /v1/checkouts/sessions` response (when
+ * the SDK declared `X-Flo-SDK-Version >= 1.3.0`) or from the explicit
+ * `POST /v1/checkouts/sessions/{id}/vault/capture` endpoint. `html` is a
+ * self-contained, Flo-bundled hosted-form widget (PCIVault card fields, its own
+ * submit button, status overlay, and — owned entirely by the backend — card
+ * tokenization, PaymentIntent creation/confirmation, 3DS, and decline display).
+ * The SDK injects `html` and steps back; PAN / CVC never enter the SDK runtime.
+ *
+ * `url` is the raw PCIVault submit endpoint the bundle POSTs to; it is surfaced
+ * for diagnostics and is not used directly by the Model-A (inject-the-widget)
+ * integration. The PCIVault submit *secret* is intentionally **not** part of
+ * this type — it is server-only and must never cross onto the public session
+ * surface (logs / telemetry / client inspection).
+ */
+interface VaultCaptureBlock {
+    /** Self-contained hosted-form widget HTML the SDK injects into the card slot. */
+    html?: string;
+    /** PCIVault submit URL the hosted form POSTs the captured card to. */
+    url?: string;
+    /**
+     * One-time integrity token minted by the backend and baked into the widget
+     * bootstrap. When present the SDK threads it into
+     * {@link CardCaptureMountOptions.messageToken} and rejects any terminal
+     * `postMessage` outcome whose {@link VaultCaptureResultMessage.messageToken}
+     * does not match — the primary defence against same-window forged outcomes
+     * (TeamFloPay/backend#823).
+     */
+    messageToken?: string;
+    /**
+     * Exact origin the hosted widget posts its terminal outcomes from, when it
+     * runs in a cross-origin frame. When present the SDK rejects messages from
+     * any other origin.
+     */
+    expectedOrigin?: string;
+}
+/**
+ * Lifecycle / outcome events emitted by a {@link CardCaptureAdapter}.
+ *
+ * Under the Model-A (backend-orchestrated) vault flow the hosted widget owns
+ * the entire payment — capture, charge, and 3DS — so the SDK observes only:
+ * - `ready`   — the widget mounted and is accepting input.
+ * - `complete`— the backend reported a successful (terminal) charge.
+ * - `decline` — the backend reported a declined / failed charge.
+ * - `error`   — the widget failed to load, or an unexpected runtime error.
+ *
+ * `complete` / `decline` arrive via a `postMessage` from the hosted widget (see
+ * {@link VaultCaptureResultMessage}); the backend is responsible for emitting
+ * them. When it does not, the widget falls back to its own success redirect.
+ */
+type CardCaptureEventType = 'ready' | 'submitting' | 'complete' | 'decline' | 'error' | 'validation'
+/**
+ * The buyer clicked the widget's submit button but the host had gated it
+ * (see {@link CardCaptureAdapter.setSubmitGate}) — the widget blocked its own
+ * charge so the host can surface its merchant-DOM validation (e.g. AVS) the
+ * same way the widget surfaces inline card validation.
+ */
+ | 'blocked'
+/**
+ * The provider needs the buyer to complete an additional verification step
+ * (e.g. Stripe 3DS-2 challenge) before the payment can settle. The widget
+ * surfaces the provider-hosted challenge URL on the outcome event; the host
+ * should:
+ *   1. Hide its "processing" backdrop so the buyer can interact with the
+ *      challenge (the widget renders the iframe at the parent page level
+ *      so it isn't trapped inside the vault iframe).
+ *   2. Render the challenge — the SDK's default vault adapter creates a
+ *      full-page overlay iframe pointing at `nextActionRedirectUrl`.
+ * The next `complete` / `decline` / `error` fires after the buyer finishes
+ * (or abandons) the challenge.
+ */
+ | 'action_required';
+/** Payload for a {@link CardCaptureAdapter} outcome event. */
+interface CardCaptureOutcomeEvent {
+    /** Owning checkout session id, for correlation. */
+    sessionId?: string;
+    /** Provider intent / transaction id on a terminal outcome, when available. */
+    intentId?: string;
+    /** Mapped decline reason on `decline` (backend `PaymentDeclineReason` enum). */
+    declineReason?: string;
+    /** Human-readable message for `decline` / `error`. */
+    message?: string;
+    /**
+     * Provider-hosted next-action URL the buyer must complete on
+     * `action_required` (e.g. Stripe 3DS-2 challenge page). Absent on every
+     * other event type.
+     */
+    nextActionRedirectUrl?: string;
+}
+/**
+ * `window.postMessage` payload the hosted vault widget sends its embedding SDK
+ * to report a terminal payment outcome.
+ *
+ * The widget HTML is injected **same-window** (see `PciVaultCardCapture`), so
+ * `event.origin` for a genuine outcome is the merchant page's own origin and
+ * the bare `source` string alone is forgeable by any other script on the page.
+ * Authenticity therefore rests on, in order of strength:
+ *   1. `messageToken` — an unguessable per-session token the backend bakes into
+ *      the widget bootstrap and echoes here; the SDK rejects terminal outcomes
+ *      that omit/mismatch it ({@link CardCaptureMountOptions.messageToken}).
+ *   2. `sessionId` — money-affecting outcomes (`complete` / `decline`) must be
+ *      bound to the mounted session; the SDK rejects ones that are not.
+ *   3. `expectedOrigin` — an optional strict origin gate for widgets that post
+ *      from a cross-origin frame ({@link CardCaptureMountOptions.expectedOrigin}).
+ */
+interface VaultCaptureResultMessage {
+    source: 'flopay-vault';
+    type: 'ready' | 'submitting' | 'complete' | 'decline' | 'error' | 'action_required';
+    /**
+     * Owning checkout session id. Always present for terminal outcomes
+     * (`complete` / `decline`) — the SDK rejects money-affecting outcomes that
+     * are not bound to the mounted session. May be absent on a pre-bootstrap
+     * `ready` / load-`error` the widget emits before the session is wired.
+     */
+    sessionId?: string;
+    /**
+     * Integrity token echoed from the widget bootstrap; must equal the value the
+     * SDK was mounted with ({@link CardCaptureMountOptions.messageToken}). When
+     * the SDK was given a token it rejects messages that omit or mismatch it.
+     */
+    messageToken?: string;
+    intentId?: string;
+    declineReason?: string;
+    message?: string;
+    /**
+     * Provider-hosted next-action URL the buyer must complete on
+     * `type === 'action_required'` (e.g. Stripe 3DS-2 challenge page). The host
+     * SDK renders the challenge at the parent page level so the buyer isn't
+     * blocked by the SDK's processing backdrop.
+     */
+    nextActionRedirectUrl?: string;
+}
+/** Options for mounting the hosted vault widget into a container element. */
+interface CardCaptureMountOptions {
+    /**
+     * Server-rendered hosted-form widget HTML (the vault capture block's `html`).
+     * The adapter injects this and lets the bundled `<script>` bootstrap the
+     * PCIVault form; the SDK does not own its fields or styling.
+     */
+    html: string;
+    /**
+     * Per-session integrity token (the vault block's `messageToken`). When
+     * supplied, the adapter rejects any `postMessage` outcome whose
+     * {@link VaultCaptureResultMessage.messageToken} does not match — closing the
+     * same-window forgery vector. Omit when the backend does not (yet) mint one.
+     */
+    messageToken?: string;
+    /**
+     * Exact origin expected for terminal `postMessage` outcomes (the vault
+     * block's `expectedOrigin`). When supplied, the adapter rejects messages from
+     * any other origin. Omit to skip the origin gate (default).
+     */
+    expectedOrigin?: string;
+    /**
+     * Merchant theme colors to apply to the hosted form. The SDK owns theming;
+     * the adapter pushes these into the (cross-origin) widget so the card form
+     * matches the surrounding checkout. Only provided keys are applied — the
+     * backend ships neutral defaults for the rest. Re-pushable at runtime via
+     * {@link CardCaptureAdapter.applyTheme} for live theme switches.
+     */
+    theme?: VaultCardThemeColors;
+}
+/**
+ * Merchant style values the SDK pushes into the hosted vault card form so it
+ * matches the SDK-rendered (Stripe) card fields. The form's own surface stays
+ * transparent — these only drive the inputs, submit button, and overlay.
+ */
+interface VaultCardThemeColors {
+    /** Submit button background. */
+    primaryColor?: string;
+    /** Submit button hover background. */
+    primaryHoverColor?: string;
+    /** Card input fill (the surrounding form surface stays transparent). */
+    inputBackgroundColor?: string;
+    /** Input + selected-value text color. */
+    textColor?: string;
+    /** Input border color. */
+    borderColor?: string;
+    /** Input placeholder color. */
+    placeholderColor?: string;
+    /** Error/invalid border + overlay color. */
+    errorColor?: string;
+    /** Success overlay color. */
+    successColor?: string;
+    /** Input font family. */
+    fontFamily?: string;
+    /** Input font size (e.g. `16px`). */
+    fontSize?: string;
+    /**
+     * Input + placeholder font weight (e.g. `400`). Sent as a string so the
+     * hosted widget's string-only theme applier picks it up. Mirrors the SDK's
+     * `resolvedInputFontWeight` so the vault inputs match the AVS fields.
+     */
+    fontWeight?: string;
+    /** Outer corner radius for the grouped card inputs (e.g. `8px`). */
+    borderRadius?: string;
+}
+/**
+ * Abstraction for a hosted, PCI-scoped card capture widget. The React card
+ * form depends only on this interface — never on Stripe element types — so the
+ * card path stays decoupled from any specific card provider.
+ *
+ * Under the Model-A vault flow (TeamFloPay/backend#823) the widget is rendered
+ * server-side and the backend orchestrates the whole charge (tokenize → create
+ * + confirm PaymentIntent → 3DS → fulfilment). The SDK's only job is to inject
+ * the widget HTML and relay its terminal `postMessage` outcome to the host
+ * checkout. No Stripe.js is involved on the card path.
+ */
+interface CardCaptureAdapter {
+    /** The card-capture backend backing this adapter. */
+    readonly provider: CardCaptureProviderId;
+    /** Inject the hosted widget HTML into `container` and bootstrap it. */
+    mount(container: HTMLElement, options: CardCaptureMountOptions): Promise<void>;
+    /** Subscribe to a lifecycle / outcome event. Returns an unsubscribe fn. */
+    on(event: CardCaptureEventType, handler: (event: CardCaptureOutcomeEvent) => void): () => void;
+    /**
+     * Push merchant theme colors into the mounted widget (live). Lets the host
+     * re-skin the card form on a runtime theme switch without a remount. No-op
+     * before the widget is ready or if unsupported.
+     */
+    applyTheme?(theme: VaultCardThemeColors): void;
+    /**
+     * Gate the widget's submit button from the host. When `blocked` is `true`,
+     * the widget cancels its own submit on the next click and emits a `'blocked'`
+     * event instead of `'submitting'` — letting the host validate merchant-DOM
+     * fields (e.g. AVS) and surface errors uniformly before any charge. The
+     * latest gate is re-applied when the widget (re)becomes ready. No-op if
+     * unsupported.
+     */
+    setSubmitGate?(blocked: boolean): void;
+    /**
+     * Push the card-field display/tab order into the widget (live), plus whether
+     * the widget should move the cursor to its first field on load. `order` is a
+     * permutation of the rows ({@link VaultCardFieldKey}); `null` restores the
+     * default. `autoFocus` is `false` when the host renders AVS fields above the
+     * widget (it focuses the first AVS field itself). Re-applied on `ready`.
+     */
+    setCardFieldOrder?(order: VaultCardFieldKey[] | null, autoFocus: boolean): void;
+    /** Tear down the widget and release resources. */
+    unmount(): void;
+}
+/**
+ * The reorderable rows of the hosted vault card form. `'expiry'` is the combined
+ * expiry + CVV row. The submit button always stays last.
+ */
+type VaultCardFieldKey = 'name' | 'number' | 'expiry';
 /** Supported upstream gateway codes. */
 type BillingProvider = 'stripe' | 'paypal';
 /** Token payload produced by client-side tokenization. */
@@ -556,6 +850,15 @@ interface CheckoutProcessError {
         field: string;
         message: string;
     }>;
+    /**
+     * Provider-hosted next-action URL on `type === '3ds_required'` (e.g.
+     * Stripe's hosted 3DS challenge page). Present on auto-checkout upsell
+     * errors when the saved PM requires a fresh 3DS challenge — the SDK's
+     * AutomaticPaymentButton mounts this URL in a full-page overlay iframe
+     * so the buyer can authenticate without being demoted to a fresh
+     * card-entry flow.
+     */
+    nextActionRedirectUrl?: string;
 }
 /** Recoverable checkout-processing state returned when fulfillment is still in progress. */
 interface CheckoutProcessingPending {
@@ -599,6 +902,8 @@ interface NormalizedCheckoutSession {
              * set. Absent on backends that have not yet adopted the field.
              */
             enabledPaymentMethods?: string[];
+            /** Mirrors {@link CheckoutGateway.enabledPaymentMethodCountries}. */
+            enabledPaymentMethodCountries?: Record<string, string[]>;
         };
         /**
          * Direct PayPal gateway configuration. Present only when the backend has
@@ -1007,7 +1312,17 @@ declare function getConfiguredBillingApiUrl(): string;
 declare function getFloPayEnvironment(): FloPayEnvironment;
 
 /** Current SDK version. */
-declare const SDK_VERSION = "1.2.8";
+declare const SDK_VERSION = "1.3.1";
+/**
+ * HTTP header the SDK sends on `POST /v1/checkouts/sessions` so the backend
+ * can decide whether to embed the vault capture block (the hosted PCI card
+ * widget) in the create-session response. Backends at TeamFloPay/backend#823
+ * only serve the embedded `vault` block to SDKs that declare `>= 1.3.0` here;
+ * older SDKs are unaffected and keep the legacy Stripe card path.
+ *
+ * @see SDK_VERSION — the value sent in this header.
+ */
+declare const FLO_SDK_VERSION_HEADER = "x-flo-sdk-version";
 /** Billing API URL for staging environment. */
 declare const BILLING_API_URL_STAGING = "https://api.stage.flopay.com";
 /** Billing API URL for production environment. */
@@ -1385,7 +1700,12 @@ declare function resolveAVSConfig(enableAVS?: boolean | AVSFieldConfig): AVSFiel
  * Check if an AVS field should be visible for the given country.
  * - `undefined` / `false` → hidden
  * - `true` → visible for all countries
- * - `string[]` → visible only for listed country codes
+ * - `string[]` (non-empty) → visible only for listed country codes
+ * - `[]` (empty) → visible for no countries; use `true` to show everywhere.
+ *   A UI that wants "clear the country list = show everywhere" must normalize
+ *   the cleared list to `true` before persisting — preserves the historical
+ *   `[]` = "off" semantics so existing configs don't start rendering AVS
+ *   globally.
  */
 declare function isAVSFieldVisible(field: boolean | string[] | undefined, country: string): boolean;
 /** Returns true if any AVS field is meaningfully configured (at least one field is truthy). */
@@ -1424,6 +1744,29 @@ declare function getStateLabel(countryCode: string): string;
  */
 declare function getStateFromPostalCode(country: string, postalCode: string): string | null;
 
+/**
+ * True when `validator` has an authoritative postcode pattern for the country
+ * (ISO 3166-1 alpha-2, case-insensitive). Supported countries validate the
+ * postcode format; unsupported / no-postcode countries fail open.
+ */
+declare function isPostalCodeSupported(country: string): boolean;
+/**
+ * Validate a postcode against the country's expected format.
+ *
+ * - Unsupported / no-postcode country → `true` (fail open; never block).
+ * - Supported country → `validator`'s `isPostalCode(zip, locale)` on the
+ *   trimmed value. An empty string is not a valid postcode, so a supported
+ *   country with an empty value returns `false`; callers that distinguish
+ *   "required" (empty) from "malformed" (format) should check emptiness first.
+ */
+declare function isValidPostalCode(country: string, postalCode: string): boolean;
+/**
+ * A curated example postcode for the country (e.g. US `12345 or 12345-6789`,
+ * GB `SW1A 1AA`, CA `A1A 1A1`), or `undefined` when there is no curated example
+ * (unsupported country, or a supported country not in the map).
+ */
+declare function getPostalCodeExample(country: string): string | undefined;
+
 /** A single line item formatted for display in the checkout UI. */
 interface DisplayLineItem {
     name: string;
@@ -1555,4 +1898,4 @@ declare function isValidSecretKey(key: string): boolean;
  */
 declare function isSetupIntentClientSecret(clientSecret: string | null | undefined): boolean;
 
-export { type AVSFieldConfig, BILLING_API_URL, BILLING_API_URL_PRODUCTION, BILLING_API_URL_STAGING, BOLD_DARK_APPEARANCE, BOLD_LIGHT_APPEARANCE, BUTTONS_LAYOUT_BOLD_DARK, BUTTONS_LAYOUT_BOLD_LIGHT, BUTTONS_LAYOUT_DARK, BUTTONS_LAYOUT_DEFAULT, BUTTONS_LAYOUT_GLASS_DARK, BUTTONS_LAYOUT_GLASS_LIGHT, BUTTONS_LAYOUT_MINIMAL, BUTTONS_LAYOUT_MODERN_DARK, BUTTONS_LAYOUT_MODERN_LIGHT, BUTTONS_LAYOUT_ROUNDED, type BeforeButtonClickEvent, type BillingDetails, type BillingProvider, type BuildCheckoutDisplayDataOptions, type ButtonsLayoutStyles, type ButtonsLayoutTheme, CA_PROVINCES, COUNTRY_OPTIONS, CURRENCY_MAP, type CheckoutAccount, type CheckoutButtonMethod, type CheckoutDisplayData, type CheckoutGateway, type CheckoutGateways, type CheckoutItem, type CheckoutMode, type CheckoutModeKind, type CheckoutProcessError, type CheckoutProcessingPending, type CheckoutProduct, type CheckoutProductType, type CheckoutSession, type CheckoutSessionProduct, type CheckoutSessionResult, type CheckoutSubscription, type ConfirmCardPaymentParams, type ConfirmCardPaymentResult, type ConfirmPaymentParams, type CountryOption, type CreateCustomerParams, type CreatePaymentMethodResult, type CreateSessionParams, type CurrencyInfo, type Customer, DEFAULT_API_BASE_URL, DEFAULT_API_VERSION, DEFAULT_APPEARANCE, DEFAULT_CURRENCY, type DeclineEvent, type DisplayLineItem, ELEMENT_TYPES, type ElementChangeEvent, type ElementOptions, type ElementType, FLAT_APPEARANCE, type FloPayAppearance, type FloPayConfig, type FloPayEnvironment, FloPayError, type FloPayErrorType, type FloPayThemeVariables, GLASS_DARK_APPEARANCE, GLASS_LIGHT_APPEARANCE, type GatewayEnvironment, type InlineSessionDraft, type InlineSessionParams, type InlineSessionPatch, type LineItem, MODERN_DARK_APPEARANCE, MODERN_LIGHT_APPEARANCE, type MountedElement, NIGHT_APPEARANCE, type NormalizedCheckoutSession, type NormalizedGatewayEnvironment, type PaymentProviderAdapter, type PaymentResult, type PriceData, type ProcessPaymentParams, type RecurringInterval, SDK_VERSION, STRIPE_EXPRESS_METHODS, STRIPE_METHOD_AMOUNT_LIMITS, STRIPE_METHOD_COUNTRIES, STRIPE_METHOD_CURRENCIES, STRIPE_METHOD_MATRIX, SUPPORTED_CARD_BRANDS, type StateOption, type StripeMethodEntry, type StripeMethodThemeVariant, THEMES, type TagsData, type ThemeBundle, type ThemeBundleId, type ThemeId, type TokenizedBody, US_STATES, type UpdateCustomerParams, type WebhookEvent, apiError, authenticationError, buildCheckoutDisplayData, buildItemPayload, buildProductPayload, buildSubscriptionPayload, configureFlopay, filterStripeMethodsByAmount, filterStripeMethodsByCountry, filterStripeMethodsByCurrency, foldIntoProducts, getConfiguredBillingApiUrl, getCountryByCode, getCurrencyByCountry, getFloPayEnvironment, getPostalCodeLabel, getStateFromPostalCode, getStateLabel, getStateOptions, getStripeMethodDisplayName, hasVendoredStripeMethodLogo, isAVSEnabled, isAVSFieldVisible, isSetupIntentClientSecret, isValidPublishableKey, isValidSecretKey, needsStripeMethodExplicitConfirm, networkError, normalizeGatewayEnvironment, partitionStripeMethods, rateLimitError, resolveAVSConfig, resolveBillingApiUrl, resolveButtonsLayoutTheme, resolveSessionCurrency, resolveStripeMethodBrandVariant, resolveTheme, stripeExpressMethodToOptionKey, validationError };
+export { type AVSFieldConfig, BILLING_API_URL, BILLING_API_URL_PRODUCTION, BILLING_API_URL_STAGING, BOLD_DARK_APPEARANCE, BOLD_LIGHT_APPEARANCE, BUTTONS_LAYOUT_BOLD_DARK, BUTTONS_LAYOUT_BOLD_LIGHT, BUTTONS_LAYOUT_DARK, BUTTONS_LAYOUT_DEFAULT, BUTTONS_LAYOUT_GLASS_DARK, BUTTONS_LAYOUT_GLASS_LIGHT, BUTTONS_LAYOUT_MINIMAL, BUTTONS_LAYOUT_MODERN_DARK, BUTTONS_LAYOUT_MODERN_LIGHT, BUTTONS_LAYOUT_ROUNDED, type BeforeButtonClickEvent, type BillingDetails, type BillingProvider, type BuildCheckoutDisplayDataOptions, type ButtonsLayoutStyles, type ButtonsLayoutTheme, CA_PROVINCES, COUNTRY_OPTIONS, CURRENCY_MAP, type CardCaptureAdapter, type CardCaptureEventType, type CardCaptureMountOptions, type CardCaptureOutcomeEvent, type CardCaptureProviderId, type CheckoutAccount, type CheckoutButtonMethod, type CheckoutDisplayData, type CheckoutGateway, type CheckoutGateways, type CheckoutItem, type CheckoutMode, type CheckoutModeKind, type CheckoutProcessError, type CheckoutProcessingPending, type CheckoutProduct, type CheckoutProductType, type CheckoutSession, type CheckoutSessionProduct, type CheckoutSessionResult, type CheckoutSubscription, type ConfirmCardPaymentParams, type ConfirmCardPaymentResult, type ConfirmPaymentParams, type CountryOption, type CreateCustomerParams, type CreatePaymentMethodResult, type CreateSessionParams, type CurrencyInfo, type Customer, DEFAULT_API_BASE_URL, DEFAULT_API_VERSION, DEFAULT_APPEARANCE, DEFAULT_CURRENCY, type DeclineEvent, type DisplayLineItem, ELEMENT_TYPES, type ElementChangeEvent, type ElementOptions, type ElementType, FLAT_APPEARANCE, FLO_SDK_VERSION_HEADER, type FloPayAppearance, type FloPayConfig, type FloPayEnvironment, FloPayError, type FloPayErrorType, type FloPayThemeVariables, GLASS_DARK_APPEARANCE, GLASS_LIGHT_APPEARANCE, type GatewayEnvironment, type InlineSessionDraft, type InlineSessionParams, type InlineSessionPatch, type LineItem, MODERN_DARK_APPEARANCE, MODERN_LIGHT_APPEARANCE, type MountedElement, NIGHT_APPEARANCE, type NormalizedCheckoutSession, type NormalizedGatewayEnvironment, type PaymentProviderAdapter, type PaymentResult, type PriceData, type ProcessPaymentParams, type RecurringInterval, SDK_VERSION, STRIPE_EXPRESS_METHODS, STRIPE_METHOD_AMOUNT_LIMITS, STRIPE_METHOD_COUNTRIES, STRIPE_METHOD_CURRENCIES, STRIPE_METHOD_MATRIX, SUPPORTED_CARD_BRANDS, type StateOption, type StripeMethodEntry, type StripeMethodThemeVariant, THEMES, type TagsData, type ThemeBundle, type ThemeBundleId, type ThemeId, type TokenizedBody, US_STATES, type UpdateCustomerParams, type VaultCaptureBlock, type VaultCaptureResultMessage, type VaultCardFieldKey, type VaultCardThemeColors, type WebhookEvent, apiError, authenticationError, buildCheckoutDisplayData, buildItemPayload, buildProductPayload, buildSubscriptionPayload, configureFlopay, filterStripeMethodsByAmount, filterStripeMethodsByCountry, filterStripeMethodsByCurrency, foldIntoProducts, getConfiguredBillingApiUrl, getCountryByCode, getCurrencyByCountry, getFloPayEnvironment, getPostalCodeExample, getPostalCodeLabel, getStateFromPostalCode, getStateLabel, getStateOptions, getStripeMethodDisplayName, hasVendoredStripeMethodLogo, isAVSEnabled, isAVSFieldVisible, isPostalCodeSupported, isSetupIntentClientSecret, isValidPostalCode, isValidPublishableKey, isValidSecretKey, needsStripeMethodExplicitConfirm, networkError, normalizeGatewayEnvironment, partitionStripeMethods, rateLimitError, resolveAVSConfig, resolveBillingApiUrl, resolveButtonsLayoutTheme, resolveSessionCurrency, resolveStripeMethodBrandVariant, resolveTheme, stripeExpressMethodToOptionKey, validationError };