@flopay/shared 1.4.1 → 1.4.2

package/README.md

@@ -86,7 +86,7 @@ throw validationError('Email is required', 'email');
 | `ThemeBundleId` | Bundle id: `'modern-light'` / `'modern-dark'` / `'bold-light'` / `'bold-dark'` / `'glass-light'` / `'glass-dark'` |
 | `ThemeId` | Accepted by the React components' `theme` prop: `'classic'` ∪ `ThemeBundleId` |
 | `CheckoutMode` | Checkout mode: `'full'` / `'auto'` / `'confirm'` |
-| `CheckoutSession` | Session object: `id`, `clientSecret`, `mode`, `status`, `amount`, `currency`, `customer?`, `checkoutMode?`, `products?` (unified `CheckoutSessionProduct[]`), `successUrl?`, `cancelUrl?`, `coupons?`, `subtotalAmount?` / `discountAmount?` / `totalAmount?` (cart-currency major units; populated by billing API ≥ v1.1.2), `gateways?` (map keyed by gateway code — `stripe`, `paypal`, …), `accountData?`, `tagsData?` |
+| `CheckoutSession` | Session object: `id`, `clientSecret`, `mode`, `status`, `amount`, `currency`, `customer?`, `checkoutMode?`, `vault?` (hosted card widget), `products?` (unified `CheckoutSessionProduct[]`), `successUrl?`, `cancelUrl?`, `coupons?`, `subtotalAmount?` / `discountAmount?` / `totalAmount?` (cart-currency major units; populated by billing API ≥ v1.1.2), `gateways?` (map keyed by gateway code — `stripe`, `paypal`, …), `accountData?`, `tagsData?` |
 | `CheckoutSessionProduct` | Unified product from session response: `uuid`, `checkoutSessionId`, `type` (`'item'`/`'subscription'`), `code?`, `name?`, `description?`, `quantity`, `totalAmount?`, `overrideAmount?`, `currency?`, `metadata?` |
 | `CheckoutProductType` | `'item'` / `'subscription'` |
 | `CheckoutProduct` | Unified product input for session creation: `type`, `code?`, `name?`, `quantity?`, `totalAmount?`, `overrideAmount?`, `currency?`, `metadata?` |
@@ -94,14 +94,15 @@ throw validationError('Email is required', 'email');
 | `CheckoutGateways` | Map keyed by gateway code (e.g. `stripe`, `paypal`). A session can advertise multiple concurrent gateways. |
 | `GatewayEnvironment` | `'sandbox'` / `'live'` — drives the PayPal JS SDK script and any other environment-scoped behavior |
 | `PaymentResult` | Payment outcome: `status` (`'succeeded'`/`'processing'`/`'requires_action'`/`'failed'`), `paymentIntentId?`, `error?` |
-| `ConfirmPaymentParams` | `clientSecret`, `returnUrl?` |
-| `CreatePaymentMethodResult` | `paymentMethodId`, `error?` |
-| `ConfirmCardPaymentParams` | `clientSecret`, `paymentMethodId` |
-| `ConfirmCardPaymentResult` | `status`, `paymentIntentId?`, `paymentMethodId?`, `error?` |
-| `ElementType` | `'payment'` / `'card'` / `'cardNumber'` / `'cardExpiry'` / `'cardCvc'` / `'address'` |
-| `ElementOptions` | Options for creating elements: `appearance?`, `clientSecret?`, `amount?`, `currency?`, `paymentMethodCreation?`, `layout?`, `defaultValues?`, `readOnly?`, `mode?`, `style?` |
+| `ConfirmPaymentParams` | Non-card confirmation: `clientSecret`, `paymentMethodCategory` (`'wallet'`/`'apm'`), `paymentMethodType`, `returnUrl?`, `billingDetails?`; `card` is rejected at runtime. |
+| `PayPalPaymentResult` | Stripe-hosted PayPal outcome: `status`, `paymentIntentId?`, `paymentMethodId?`, `error?` |
+| `CreateSessionIntentRequest` | Discriminated Stripe wallet/APM or PayPal order/subscription intent request. Direct card is not representable. |
+| `SessionIntent` | Matching discriminated response with provider, payment-method category/type/id, intent kind, client secret, and provider object ID kept as separate fields. |
+| `SessionIntentDeclineRequest` | Non-card provider decline classification. Runtime reporting accepts safe classification codes only and rejects messages or identifier-shaped values. |
+| `ElementType` | `'payment'` / `'address'` |
+| `ElementOptions` | Options for creating non-card elements: `appearance?`, `paymentMethodTypes?`, `clientSecret?`, `amount?`, `currency?`, `paymentMethodCreation?`, `layout?`, `defaultValues?`, `readOnly?`, `mode?`. A `payment` element requires a non-empty wallet/APM allowlist. |
 | `MountedElement` | Runtime element: `mount()`, `unmount()`, `update()`, `on()`, `off()`, `destroy()` |
-| `PaymentProviderAdapter` | Provider interface: `initialize()`, `createElement()`, `getElement()`, `submitElements()`, `createPaymentMethod()`, `confirmCardPayment()`, `confirmPayment()`, `confirmPayPalPayment()`, `resumePayPalPayment()`, `getRawProvider()`, `createPayPalElements()`, `destroy()` |
+| `PaymentProviderAdapter` | Provider interface for non-card elements, confirmations, PayPal, raw-provider access, and lifecycle management. Card collection uses `CardCaptureAdapter`. |
 | `ElementChangeEvent` | Change event: `elementType`, `complete`, `empty`, `error?`, `value?` |
 | `Customer` | `id`, `email`, `firstName?`, `lastName?`, `gender?`, `city?`, `state?`, `country?`, `zip?` |
 | `LineItem` | `price?`, `priceData?`, `quantity` |
@@ -177,7 +178,7 @@ policy.
 | `THEMES` | `Record<ThemeBundleId, ThemeBundle>` — pick `THEMES['glass-dark']` to get `{ appearance, buttonsLayout }` |
 | `resolveTheme(id)` | Resolve a `ThemeId` (`'classic'` ∪ `ThemeBundleId`) to its `ThemeBundle`; `'classic'` and missing ids return `undefined` |
 | `resolveButtonsLayoutTheme(name)` | Map a `ButtonsLayoutTheme` name to its `ButtonsLayoutStyles` preset |
-| `ELEMENT_TYPES` | `['payment', 'card', 'cardNumber', 'cardExpiry', 'cardCvc', 'address']` |
+| `ELEMENT_TYPES` | `['payment', 'address']` |
 | `SUPPORTED_CARD_BRANDS` | `['visa', 'mastercard', 'mastercard_debit', 'amex', 'discover']` |
 | `STRIPE_EXPRESS_METHODS` | `['apple_pay', 'google_pay', 'paypal', 'link', 'amazon_pay', 'klarna']` — Stripe method type identifiers supported by `ExpressCheckoutElement` (everything else returned in `gateways.stripe.enabledPaymentMethods` falls into the `PaymentElement` accordion in the React SDK) |
 | `partitionStripeMethods(enabledMethods, { excludePaypal? })` | Split the backend's enabled list into `{ expressMethods, paymentElementMethods }`. Drops `card`; also drops `paypal` when `excludePaypal: true`. |

package/dist/index.cjs

@@ -79,6 +79,7 @@ __export(index_exports, {
   TELEMETRY_SDK_PACKAGES: () => TELEMETRY_SDK_PACKAGES,
   THEMES: () => THEMES,
   US_STATES: () => US_STATES,
+  UUID_V4: () => UUID_V42,
   apiError: () => apiError,
   authenticationError: () => authenticationError,
   buildCheckoutDisplayData: () => buildCheckoutDisplayData,
@@ -110,6 +111,7 @@ __export(index_exports, {
   isAVSFieldVisible: () => isAVSFieldVisible,
   isPostalCodeSupported: () => isPostalCodeSupported,
   isSetupIntentClientSecret: () => isSetupIntentClientSecret,
+  isUuidV4: () => isUuidV4,
   isValidPostalCode: () => isValidPostalCode,
   isValidPublishableKey: () => isValidPublishableKey,
   isValidSecretKey: () => isValidSecretKey,
@@ -117,6 +119,7 @@ __export(index_exports, {
   networkError: () => networkError,
   normalizeGatewayEnvironment: () => normalizeGatewayEnvironment,
   partitionStripeMethods: () => partitionStripeMethods,
+  randomUuidV4: () => randomUuidV4,
   rateLimitError: () => rateLimitError,
   resolveAVSConfig: () => resolveAVSConfig,
   resolveBillingApiUrl: () => resolveBillingApiUrl,
@@ -1762,10 +1765,6 @@ function partitionStripeMethods(enabledPaymentMethods, options) {
 }
 var ELEMENT_TYPES = [
   "payment",
-  "card",
-  "cardNumber",
-  "cardExpiry",
-  "cardCvc",
   "address"
 ];
 var SUPPORTED_CARD_BRANDS = [
@@ -2619,6 +2618,31 @@ function resolveIdempotencyKey(supplied) {
   }
   return supplied;
 }
+
+// src/uuid.ts
+var UUID_V42 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function isUuidV4(value) {
+  return typeof value === "string" && UUID_V42.test(value);
+}
+function randomUuidV4() {
+  try {
+    const id = globalThis.crypto.randomUUID();
+    if (UUID_V42.test(id)) return id;
+  } catch {
+  }
+  const bytes = new Uint8Array(16);
+  try {
+    globalThis.crypto.getRandomValues(bytes);
+  } catch {
+    for (let index = 0; index < bytes.length; index += 1) {
+      bytes[index] = Math.floor(Math.random() * 256);
+    }
+  }
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BILLING_API_URL,
@@ -2670,6 +2694,7 @@ function resolveIdempotencyKey(supplied) {
   TELEMETRY_SDK_PACKAGES,
   THEMES,
   US_STATES,
+  UUID_V4,
   apiError,
   authenticationError,
   buildCheckoutDisplayData,
@@ -2701,6 +2726,7 @@ function resolveIdempotencyKey(supplied) {
   isAVSFieldVisible,
   isPostalCodeSupported,
   isSetupIntentClientSecret,
+  isUuidV4,
   isValidPostalCode,
   isValidPublishableKey,
   isValidSecretKey,
@@ -2708,6 +2734,7 @@ function resolveIdempotencyKey(supplied) {
   networkError,
   normalizeGatewayEnvironment,
   partitionStripeMethods,
+  randomUuidV4,
   rateLimitError,
   resolveAVSConfig,
   resolveBillingApiUrl,