@flopay/shared 1.4.1 → 1.4.3

package/dist/index.d.ts

@@ -74,7 +74,7 @@ interface ButtonsLayoutStyles {
      * style config handed to the vault PCI card form, so these win over the
      * auto-translated `cardInput*` knobs and `appearance.variables`. Keys are
      * passed through verbatim — use vault-supported style property names.
-     * No effect on the legacy Stripe-Elements card path.
+     * Applied only to the hosted vault card form.
      */
     vaultCardForm?: Record<string, string | number>;
     /** Style for the full-name text input. */
@@ -273,8 +273,8 @@ interface CheckoutGateway {
      * {@link STRIPE_EXPRESS_METHODS} to decide which methods render in the
      * `ExpressCheckoutElement` row (Apple Pay / Google Pay / PayPal / Link /
      * Amazon Pay / Klarna) vs the `PaymentElement` accordion (Cash App Pay /
-     * Affirm / iDEAL / Bancontact / …). `card` is always filtered out — the
-     * card path stays on the split-fields elements. Absent on legacy backends.
+     * Affirm / iDEAL / Bancontact / …). `card` is always filtered out because
+     * the hosted vault owns the card path. Absent on legacy backends.
      */
     enabledPaymentMethods?: string[];
     /**
@@ -311,12 +311,11 @@ interface CheckoutSession {
     metadata?: Record<string, string>;
     checkoutMode?: CheckoutMode;
     /**
-     * Embedded hosted vault capture credentials (TeamFloPay/backend#823),
-     * populated on the `POST /v1/checkouts/sessions` response when the SDK
-     * declared `X-Flo-SDK-Version >= 1.3.0` and the backend advertises a
-     * `pcivault` gateway. The SDK injects {@link VaultCaptureBlock.html} as the
-     * card-capture widget. Absent on legacy backends or when the SDK must fetch
-     * the block via `POST /v1/checkouts/sessions/{id}/vault/capture` instead.
+     * Embedded hosted vault capture credentials (TeamFloPay/backend#823).
+     * Card-capable session create/read responses include this block without
+     * SDK-version dispatch. The SDK injects {@link VaultCaptureBlock.html} as
+     * the card-capture widget; the explicit recovery path remains
+     * `POST /v1/checkouts/sessions/{id}/vault/capture`.
      */
     vault?: VaultCaptureBlock;
     /**
@@ -377,16 +376,19 @@ interface PaymentResult {
     checkoutMethod?: CheckoutButtonMethod;
     error?: FloPayError;
 }
-/** Parameters for confirming a payment. */
+/** Parameters for confirming a wallet/APM payment from a mounted PaymentElement. */
 interface ConfirmPaymentParams {
     clientSecret: string;
+    /** Explicit non-card category for the selected payment method. */
+    paymentMethodCategory: NonCardPaymentMethodCategory;
+    /** Provider method type (for example `cashapp` or `ideal`); `card` is rejected. */
+    paymentMethodType: string;
     /** Optional redirect URL after 3-D Secure or wallet authentication. */
     returnUrl?: string;
     /**
      * Optional billing details appended to `payment_method_data` on the confirm call.
      * Ensures `billing_details.email` (and name/address) lands on the PaymentMethod
-     * Stripe mints from Elements during 3DS confirmation — otherwise the new PM
-     * inherits none of the info we attached at `createPaymentMethod` time.
+     * Stripe mints from Elements during 3DS confirmation.
      */
     billingDetails?: BillingDetails;
 }
@@ -403,33 +405,75 @@ interface BillingDetails {
         state?: string;
     };
 }
-/** Result from creating a payment method (tokenizing card fields). */
-interface CreatePaymentMethodResult {
-    paymentMethodId: string | null;
-    error?: FloPayError;
-}
-/** Parameters for confirming a card payment with a known client secret. */
-interface ConfirmCardPaymentParams {
-    clientSecret: string;
-    paymentMethodId: string;
-}
-/** Provider-observed 3DS lifecycle for one opaque, attempt-scoped confirmation. */
-interface CardThreeDsLifecycle {
-    /** Opaque in-memory identifier; never derived from payment identifiers. */
-    attemptId: string;
-    status: 'handoff' | 'returned' | 'failed';
-}
-/** Result from confirming a card payment. */
-interface ConfirmCardPaymentResult {
+/** Result from the Stripe-hosted PayPal confirmation or redirect-resume flow. */
+interface PayPalPaymentResult {
     status: 'succeeded' | 'processing' | 'requires_action' | 'requires_capture' | 'failed';
     paymentIntentId?: string;
     paymentMethodId?: string;
     error?: FloPayError;
-    /** @internal Provider-observed lifecycle used for privacy-safe telemetry. */
-    threeDs?: CardThreeDsLifecycle;
 }
+/** Non-card method families accepted by the public session intent endpoint. */
+type NonCardPaymentMethodCategory = 'wallet' | 'apm';
+/**
+ * Stable identity of one buyer authorization attempt (a v4 UUID).
+ *
+ * The backend folds this into the provider idempotency key, so reusing the same
+ * value makes a transport retry reuse the *same* provider intent, while a fresh
+ * value deliberately starts a new authorization. Optional on the SDK request:
+ * `PaymentAPI.createSessionIntent` generates one when omitted and only advanced
+ * callers that drive their own retries need to pass a stable value.
+ */
+interface SessionIntentAuthorizationAttempt {
+    authorizationAttemptId?: string;
+}
+/** Stripe wallet/APM request. Direct card is deliberately not representable. */
+interface StripeSessionIntentRequest extends SessionIntentAuthorizationAttempt {
+    provider: 'stripe';
+    paymentMethodCategory: NonCardPaymentMethodCategory;
+    paymentMethodType: string;
+    paymentMethodId: string | null;
+    intentKind: 'payment' | 'setup';
+}
+/**
+ * Direct PayPal intent request. Always `intentKind: 'payment'`: the backend
+ * derives order vs subscription from the session's products and returns that as
+ * the response `providerObjectType`. PayPal setup intents are unsupported —
+ * PayPal vaults during a successful Order capture, not via standalone setups.
+ */
+interface PayPalSessionIntentRequest extends SessionIntentAuthorizationAttempt {
+    provider: 'paypal';
+    paymentMethodCategory: 'wallet';
+    paymentMethodType: 'paypal';
+    paymentMethodId: null;
+    intentKind: 'payment';
+}
+type CreateSessionIntentRequest = StripeSessionIntentRequest | PayPalSessionIntentRequest;
+interface StripeSessionIntent extends StripeSessionIntentRequest {
+    clientSecret: string;
+    providerObjectId: string;
+}
+interface PayPalSessionIntent extends PayPalSessionIntentRequest {
+    clientSecret: null;
+    providerObjectId: string;
+    /** Server-derived from the session's products (a subscription product → 'subscription'). */
+    providerObjectType: 'order' | 'subscription';
+}
+type SessionIntent = StripeSessionIntent | PayPalSessionIntent;
+type SessionIntentDeclineRequest = {
+    provider: 'stripe';
+    paymentMethodCategory: NonCardPaymentMethodCategory;
+    paymentMethodType: string;
+    /** Provider classification code only; messages and identifiers are rejected. */
+    providerDeclineReason: string;
+} | {
+    provider: 'paypal';
+    paymentMethodCategory: 'wallet';
+    paymentMethodType: 'paypal';
+    /** Provider classification code only; messages and identifiers are rejected. */
+    providerDeclineReason: string;
+};
 /** The type of payment element to render. */
-type ElementType = 'payment' | 'card' | 'cardNumber' | 'cardExpiry' | 'cardCvc' | 'address';
+type ElementType = 'payment' | 'address';
 /** Emitted when an element's internal state changes. */
 interface ElementChangeEvent {
     elementType: ElementType;
@@ -445,7 +489,17 @@ interface ElementChangeEvent {
 /** Configuration options when creating an element. */
 interface ElementOptions {
     appearance?: FloPayAppearance;
-    /** Client secret for the PaymentIntent or SetupIntent. When present, Stripe uses it directly. */
+    /**
+     * Explicit non-card provider method types rendered by a payment element.
+     * The SDK removes `card`; card collection belongs to the hosted vault.
+     */
+    paymentMethodTypes?: readonly string[];
+    /**
+     * Client secret for an existing non-card PaymentIntent or SetupIntent.
+     * The explicit `paymentMethodTypes` allowlist remains required; the SDK uses
+     * it to validate the provider intent before mounting. Card checkout uses the
+     * hosted vault.
+     */
     clientSecret?: string;
     /**
      * Total amount in the smallest currency unit (e.g. cents).
@@ -467,19 +521,6 @@ interface ElementOptions {
     readOnly?: boolean;
     /** Address element mode: 'billing' or 'shipping'. */
     mode?: 'billing' | 'shipping';
-    /**
-     * Style object for individual card elements (cardNumber, cardExpiry, cardCvc).
-     * Passed directly to the underlying provider element.
-     *
-     * @example
-     * ```ts
-     * style: {
-     *   base: { color: '#f9fafb', fontSize: '16px', '::placeholder': { color: '#6b7280' } },
-     *   invalid: { color: '#ef4444' },
-     * }
-     * ```
-     */
-    style?: Record<string, Record<string, unknown>>;
 }
 /**
  * A payment element that has been created and can be mounted into the DOM.
@@ -528,18 +569,14 @@ interface PaymentProviderAdapter {
     submitElements(): Promise<{
         error?: FloPayError;
     }>;
-    /** Create a payment method from the current elements (tokenize card). */
-    createPaymentMethod(billingDetails?: BillingDetails): Promise<CreatePaymentMethodResult>;
-    /** Confirm a card payment with a known client secret and payment method. */
-    confirmCardPayment(params: ConfirmCardPaymentParams): Promise<ConfirmCardPaymentResult>;
+    /** Confirm a non-card wallet/APM payment from mounted elements. */
     confirmPayment(params: ConfirmPaymentParams): Promise<PaymentResult>;
     /**
      * Create a PayPal payment: create PM → create intent → confirm with redirect.
      * Returns the confirmed PaymentIntent ID if completed inline, or redirects to PayPal.
      *
-     * `nonce` is the session-bound checkout token from session creation. Post-#640
-     * backends reject `POST /v1/checkouts/payments/intents` with 401 when the
-     * `x-checkout-session-token` header is missing — pass `nonce` to forward it.
+     * `nonce` is the session-bound checkout token forwarded to the
+     * session-scoped non-card intent contract.
      */
     confirmPayPalPayment(params: {
         billingApiUrl: string;
@@ -547,21 +584,18 @@ interface PaymentProviderAdapter {
         email: string;
         returnUrl: string;
         nonce?: string;
-    }): Promise<ConfirmCardPaymentResult>;
+    }): Promise<PayPalPaymentResult>;
     /**
      * Resume a PayPal payment after redirect return.
      * Checks URL params for payment_intent + redirect_status.
      */
-    resumePayPalPayment(): Promise<ConfirmCardPaymentResult | null>;
+    resumePayPalPayment(): Promise<PayPalPaymentResult | null>;
     /**
      * Get the raw underlying provider instance (e.g. Stripe object).
      * Used internally for creating secondary Elements groups (e.g. PayPal).
      */
     getRawProvider(): unknown;
-    /**
-     * Create a secondary Elements group for PayPal.
-     * PayPal can't share Elements with card fields that use paymentMethodCreation: 'manual'.
-     */
+    /** Create a secondary Elements group for PayPal's automatic payment-method flow. */
     createPayPalElements(options: ElementOptions): unknown;
     destroy(): void;
 }
@@ -576,8 +610,8 @@ type CardCaptureProviderId = 'pcivault';
 /**
  * Server-rendered hosted vault capture credentials (TeamFloPay/backend#823).
  *
- * Returned either embedded on the `POST /v1/checkouts/sessions` response (when
- * the SDK declared `X-Flo-SDK-Version >= 1.3.0`) or from the explicit
+ * Returned either embedded on every card-capable session create/read response
+ * or from the explicit
  * `POST /v1/checkouts/sessions/{id}/vault/capture` endpoint. `html` is a
  * self-contained, Flo-bundled hosted-form widget (PCIVault card fields, its own
  * submit button, status overlay, and — owned entirely by the backend — card
@@ -739,7 +773,7 @@ interface CardCaptureMountOptions {
 }
 /**
  * Merchant style values the SDK pushes into the hosted vault card form so it
- * matches the SDK-rendered (Stripe) card fields. The form's own surface stays
+ * matches the surrounding checkout fields. The form's own surface stays
  * transparent — these only drive the inputs, submit button, and overlay.
  */
 interface VaultCardThemeColors {
@@ -1463,13 +1497,12 @@ declare function getConfiguredBillingApiUrl(): string;
 declare function getFloPayEnvironment(): FloPayEnvironment;
 
 /** Current SDK version. */
-declare const SDK_VERSION = "1.4.1";
+declare const SDK_VERSION = "1.4.3";
 /**
  * HTTP header the SDK sends on `POST /v1/checkouts/sessions` so the backend
- * can decide whether to embed the vault capture block (the hosted PCI card
- * widget) in the create-session response. Backends at TeamFloPay/backend#823
- * only serve the embedded `vault` block to SDKs that declare `>= 1.3.0` here;
- * older SDKs are unaffected and keep the legacy Stripe card path.
+ * provides compatibility visibility on session create/read requests. Vault
+ * capability is part of the session contract and must not be gated by this
+ * value.
  *
  * @see SDK_VERSION — the value sent in this header.
  */
@@ -1828,7 +1861,7 @@ declare function partitionStripeMethods(enabledPaymentMethods: readonly string[]
     paymentElementMethods: string[];
 };
 /** All supported element type identifiers. */
-declare const ELEMENT_TYPES: readonly ["payment", "card", "cardNumber", "cardExpiry", "cardCvc", "address"];
+declare const ELEMENT_TYPES: readonly ["payment", "address"];
 declare const SUPPORTED_CARD_BRANDS: readonly ["visa", "mastercard", "mastercard_debit", "amex", "discover"];
 /** Country code to currency information mapping. */
 declare const CURRENCY_MAP: Record<string, CurrencyInfo>;
@@ -2114,4 +2147,24 @@ declare function generateIdempotencyKey(): string | undefined;
  */
 declare function resolveIdempotencyKey(supplied?: string): string | undefined;
 
-export { type AVSFieldConfig, BILLING_API_URL, BILLING_API_URL_PRODUCTION, BILLING_API_URL_STAGING, BOLD_DARK_APPEARANCE, BOLD_LIGHT_APPEARANCE, BUTTONS_LAYOUT_BOLD_DARK, BUTTONS_LAYOUT_BOLD_LIGHT, BUTTONS_LAYOUT_DARK, BUTTONS_LAYOUT_DEFAULT, BUTTONS_LAYOUT_GLASS_DARK, BUTTONS_LAYOUT_GLASS_LIGHT, BUTTONS_LAYOUT_MINIMAL, BUTTONS_LAYOUT_MODERN_DARK, BUTTONS_LAYOUT_MODERN_LIGHT, BUTTONS_LAYOUT_ROUNDED, type BeforeButtonClickEvent, type BillingDetails, type BillingProvider, type BuildCheckoutDisplayDataOptions, type BuildTelemetryErrorEventInput, type BuildTelemetryLogEventInput, type BuildTelemetryPerformanceEventInput, type BuildTelemetryTerminalEventInput, type ButtonsLayoutStyles, type ButtonsLayoutTheme, CA_PROVINCES, COUNTRY_OPTIONS, CURRENCY_MAP, type CardCaptureAdapter, type CardCaptureEventType, type CardCaptureMountOptions, type CardCaptureOutcomeEvent, type CardCaptureProviderId, type CardThreeDsLifecycle, type CheckoutAccount, type CheckoutButtonMethod, type CheckoutDisplayData, type CheckoutGateway, type CheckoutGateways, type CheckoutItem, type CheckoutMode, type CheckoutModeKind, type CheckoutProcessError, type CheckoutProcessingPending, type CheckoutProduct, type CheckoutProductType, type CheckoutSession, type CheckoutSessionProduct, type CheckoutSessionResult, type CheckoutSubscription, type ConfirmCardPaymentParams, type ConfirmCardPaymentResult, type ConfirmPaymentParams, type CountryOption, type CreateCustomerParams, type CreatePaymentMethodResult, type CreateSessionParams, type CurrencyInfo, type Customer, DEFAULT_API_BASE_URL, DEFAULT_API_VERSION, DEFAULT_APPEARANCE, DEFAULT_CURRENCY, type DeclineEvent, type DisplayLineItem, ELEMENT_TYPES, type ElementChangeEvent, type ElementOptions, type ElementType, FLAT_APPEARANCE, FLO_SDK_VERSION_HEADER, type FloPayAppearance, type FloPayConfig, type FloPayEnvironment, FloPayError, type FloPayErrorType, type FloPayThemeVariables, GLASS_DARK_APPEARANCE, GLASS_LIGHT_APPEARANCE, type GatewayEnvironment, IDEMPOTENCY_IN_PROGRESS_CODE, IDEMPOTENCY_KEY_HEADER, type InlineSessionDraft, type InlineSessionParams, type InlineSessionPatch, type LineItem, MAX_IDEMPOTENCY_KEY_LENGTH, MODERN_DARK_APPEARANCE, MODERN_LIGHT_APPEARANCE, type MountedElement, NIGHT_APPEARANCE, type NormalizedCheckoutSession, type NormalizedGatewayEnvironment, type PaymentProviderAdapter, type PaymentResult, type PriceData, type ProcessPaymentParams, type RecurringInterval, SDK_VERSION, STRIPE_EXPRESS_METHODS, STRIPE_METHOD_AMOUNT_LIMITS, STRIPE_METHOD_COUNTRIES, STRIPE_METHOD_CURRENCIES, STRIPE_METHOD_MATRIX, SUPPORTED_CARD_BRANDS, type SerializeTelemetryBatchOptions, type StateOption, type StripeMethodEntry, type StripeMethodThemeVariant, TELEMETRY_ERROR_CODES, TELEMETRY_LOG_NAMES, TELEMETRY_MAX_BATCH_BYTES, TELEMETRY_MAX_BATCH_EVENTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_SDK_PACKAGES, THEMES, type TagsData, type TelemetryBatchEnvelope, type TelemetryCheckoutMode, type TelemetryDurationMode, type TelemetryErrorCode, type TelemetryErrorEvent, type TelemetryEvent, type TelemetryEventClass, type TelemetryExpectedOutcome, type TelemetryExpectedOutcomeEvent, type TelemetryLayout, type TelemetryLogEvent, type TelemetryLogName, type TelemetryPaymentMethodCategory, type TelemetryPerformanceEvent, type TelemetryProvider, type TelemetryProviderInput, type TelemetryRequestCategory, type TelemetrySdkPackage, type TelemetryStage, type TelemetryStatusClass, type ThemeBundle, type ThemeBundleId, type ThemeId, type TokenizedBody, US_STATES, type UpdateCustomerParams, type VaultCaptureBlock, type VaultCaptureResultMessage, type VaultCardFieldKey, type VaultCardThemeColors, type WebhookEvent, apiError, authenticationError, buildCheckoutDisplayData, buildItemPayload, buildProductPayload, buildSubscriptionPayload, buildTelemetryErrorEvent, buildTelemetryLogEvent, buildTelemetryPerformanceEvent, buildTelemetryTerminalEvent, configureFlopay, filterStripeMethodsByAmount, filterStripeMethodsByCountry, filterStripeMethodsByCurrency, foldIntoProducts, generateIdempotencyKey, getConfiguredBillingApiUrl, getCountryByCode, getCurrencyByCountry, getFloPayEnvironment, getPostalCodeExample, getPostalCodeLabel, getStateFromPostalCode, getStateLabel, getStateOptions, getStripeMethodDisplayName, hasVendoredStripeMethodLogo, isAVSEnabled, isAVSFieldVisible, isPostalCodeSupported, isSetupIntentClientSecret, isValidPostalCode, isValidPublishableKey, isValidSecretKey, needsStripeMethodExplicitConfirm, networkError, normalizeGatewayEnvironment, partitionStripeMethods, rateLimitError, resolveAVSConfig, resolveBillingApiUrl, resolveButtonsLayoutTheme, resolveIdempotencyKey, resolveSessionCurrency, resolveStripeMethodBrandVariant, resolveTheme, serializeTelemetryBatch, stripeExpressMethodToOptionKey, validationError };
+/**
+ * RFC 4122 v4 UUID shape (case-insensitive). Mirrors the backend's `@IsUUID()`
+ * acceptance for the fields the SDK fills, e.g. the session-intent
+ * `authorizationAttemptId`.
+ */
+declare const UUID_V4: RegExp;
+/** True when `value` is a v4 UUID string. */
+declare function isUuidV4(value: unknown): value is string;
+/**
+ * Generate a cryptographically-random v4 UUID.
+ *
+ * Prefers `crypto.randomUUID()`, falls back to `crypto.getRandomValues`, and
+ * only as a last resort to `Math.random`, so the SDK still produces a
+ * well-formed UUID in environments without a secure RNG. Unlike
+ * {@link generateIdempotencyKey} this never returns `undefined` or a non-UUID
+ * string, because callers send it to backend fields validated as `@IsUUID()`
+ * (a weak or missing value there is a hard `400`, not a silent downgrade).
+ */
+declare function randomUuidV4(): string;
+
+export { type AVSFieldConfig, BILLING_API_URL, BILLING_API_URL_PRODUCTION, BILLING_API_URL_STAGING, BOLD_DARK_APPEARANCE, BOLD_LIGHT_APPEARANCE, BUTTONS_LAYOUT_BOLD_DARK, BUTTONS_LAYOUT_BOLD_LIGHT, BUTTONS_LAYOUT_DARK, BUTTONS_LAYOUT_DEFAULT, BUTTONS_LAYOUT_GLASS_DARK, BUTTONS_LAYOUT_GLASS_LIGHT, BUTTONS_LAYOUT_MINIMAL, BUTTONS_LAYOUT_MODERN_DARK, BUTTONS_LAYOUT_MODERN_LIGHT, BUTTONS_LAYOUT_ROUNDED, type BeforeButtonClickEvent, type BillingDetails, type BillingProvider, type BuildCheckoutDisplayDataOptions, type BuildTelemetryErrorEventInput, type BuildTelemetryLogEventInput, type BuildTelemetryPerformanceEventInput, type BuildTelemetryTerminalEventInput, type ButtonsLayoutStyles, type ButtonsLayoutTheme, CA_PROVINCES, COUNTRY_OPTIONS, CURRENCY_MAP, type CardCaptureAdapter, type CardCaptureEventType, type CardCaptureMountOptions, type CardCaptureOutcomeEvent, type CardCaptureProviderId, type CheckoutAccount, type CheckoutButtonMethod, type CheckoutDisplayData, type CheckoutGateway, type CheckoutGateways, type CheckoutItem, type CheckoutMode, type CheckoutModeKind, type CheckoutProcessError, type CheckoutProcessingPending, type CheckoutProduct, type CheckoutProductType, type CheckoutSession, type CheckoutSessionProduct, type CheckoutSessionResult, type CheckoutSubscription, type ConfirmPaymentParams, type CountryOption, type CreateCustomerParams, type CreateSessionIntentRequest, type CreateSessionParams, type CurrencyInfo, type Customer, DEFAULT_API_BASE_URL, DEFAULT_API_VERSION, DEFAULT_APPEARANCE, DEFAULT_CURRENCY, type DeclineEvent, type DisplayLineItem, ELEMENT_TYPES, type ElementChangeEvent, type ElementOptions, type ElementType, FLAT_APPEARANCE, FLO_SDK_VERSION_HEADER, type FloPayAppearance, type FloPayConfig, type FloPayEnvironment, FloPayError, type FloPayErrorType, type FloPayThemeVariables, GLASS_DARK_APPEARANCE, GLASS_LIGHT_APPEARANCE, type GatewayEnvironment, IDEMPOTENCY_IN_PROGRESS_CODE, IDEMPOTENCY_KEY_HEADER, type InlineSessionDraft, type InlineSessionParams, type InlineSessionPatch, type LineItem, MAX_IDEMPOTENCY_KEY_LENGTH, MODERN_DARK_APPEARANCE, MODERN_LIGHT_APPEARANCE, type MountedElement, NIGHT_APPEARANCE, type NonCardPaymentMethodCategory, type NormalizedCheckoutSession, type NormalizedGatewayEnvironment, type PayPalPaymentResult, type PayPalSessionIntent, type PayPalSessionIntentRequest, type PaymentProviderAdapter, type PaymentResult, type PriceData, type ProcessPaymentParams, type RecurringInterval, SDK_VERSION, STRIPE_EXPRESS_METHODS, STRIPE_METHOD_AMOUNT_LIMITS, STRIPE_METHOD_COUNTRIES, STRIPE_METHOD_CURRENCIES, STRIPE_METHOD_MATRIX, SUPPORTED_CARD_BRANDS, type SerializeTelemetryBatchOptions, type SessionIntent, type SessionIntentDeclineRequest, type StateOption, type StripeMethodEntry, type StripeMethodThemeVariant, type StripeSessionIntent, type StripeSessionIntentRequest, TELEMETRY_ERROR_CODES, TELEMETRY_LOG_NAMES, TELEMETRY_MAX_BATCH_BYTES, TELEMETRY_MAX_BATCH_EVENTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_SDK_PACKAGES, THEMES, type TagsData, type TelemetryBatchEnvelope, type TelemetryCheckoutMode, type TelemetryDurationMode, type TelemetryErrorCode, type TelemetryErrorEvent, type TelemetryEvent, type TelemetryEventClass, type TelemetryExpectedOutcome, type TelemetryExpectedOutcomeEvent, type TelemetryLayout, type TelemetryLogEvent, type TelemetryLogName, type TelemetryPaymentMethodCategory, type TelemetryPerformanceEvent, type TelemetryProvider, type TelemetryProviderInput, type TelemetryRequestCategory, type TelemetrySdkPackage, type TelemetryStage, type TelemetryStatusClass, type ThemeBundle, type ThemeBundleId, type ThemeId, type TokenizedBody, US_STATES, UUID_V4, type UpdateCustomerParams, type VaultCaptureBlock, type VaultCaptureResultMessage, type VaultCardFieldKey, type VaultCardThemeColors, type WebhookEvent, apiError, authenticationError, buildCheckoutDisplayData, buildItemPayload, buildProductPayload, buildSubscriptionPayload, buildTelemetryErrorEvent, buildTelemetryLogEvent, buildTelemetryPerformanceEvent, buildTelemetryTerminalEvent, configureFlopay, filterStripeMethodsByAmount, filterStripeMethodsByCountry, filterStripeMethodsByCurrency, foldIntoProducts, generateIdempotencyKey, getConfiguredBillingApiUrl, getCountryByCode, getCurrencyByCountry, getFloPayEnvironment, getPostalCodeExample, getPostalCodeLabel, getStateFromPostalCode, getStateLabel, getStateOptions, getStripeMethodDisplayName, hasVendoredStripeMethodLogo, isAVSEnabled, isAVSFieldVisible, isPostalCodeSupported, isSetupIntentClientSecret, isUuidV4, isValidPostalCode, isValidPublishableKey, isValidSecretKey, needsStripeMethodExplicitConfirm, networkError, normalizeGatewayEnvironment, partitionStripeMethods, randomUuidV4, rateLimitError, resolveAVSConfig, resolveBillingApiUrl, resolveButtonsLayoutTheme, resolveIdempotencyKey, resolveSessionCurrency, resolveStripeMethodBrandVariant, resolveTheme, serializeTelemetryBatch, stripeExpressMethodToOptionKey, validationError };

package/dist/index.mjs

@@ -371,7 +371,7 @@ var VENDORED_LOGO_METHODS = [
 ];
 
 // src/constants.ts
-var SDK_VERSION2 = "1.4.1";
+var SDK_VERSION2 = "1.4.3";
 var FLO_SDK_VERSION_HEADER = "x-flo-sdk-version";
 var BILLING_API_URL_STAGING = "https://api.stage.flopay.com";
 var BILLING_API_URL_PRODUCTION = "https://api.flopay.com";
@@ -1629,10 +1629,6 @@ function partitionStripeMethods(enabledPaymentMethods, options) {
 }
 var ELEMENT_TYPES = [
   "payment",
-  "card",
-  "cardNumber",
-  "cardExpiry",
-  "cardCvc",
   "address"
 ];
 var SUPPORTED_CARD_BRANDS = [
@@ -2486,6 +2482,31 @@ function resolveIdempotencyKey(supplied) {
   }
   return supplied;
 }
+
+// src/uuid.ts
+var UUID_V42 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function isUuidV4(value) {
+  return typeof value === "string" && UUID_V42.test(value);
+}
+function randomUuidV4() {
+  try {
+    const id = globalThis.crypto.randomUUID();
+    if (UUID_V42.test(id)) return id;
+  } catch {
+  }
+  const bytes = new Uint8Array(16);
+  try {
+    globalThis.crypto.getRandomValues(bytes);
+  } catch {
+    for (let index = 0; index < bytes.length; index += 1) {
+      bytes[index] = Math.floor(Math.random() * 256);
+    }
+  }
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
 export {
   BILLING_API_URL,
   BILLING_API_URL_PRODUCTION,
@@ -2536,6 +2557,7 @@ export {
   TELEMETRY_SDK_PACKAGES,
   THEMES,
   US_STATES,
+  UUID_V42 as UUID_V4,
   apiError,
   authenticationError,
   buildCheckoutDisplayData,
@@ -2567,6 +2589,7 @@ export {
   isAVSFieldVisible,
   isPostalCodeSupported,
   isSetupIntentClientSecret,
+  isUuidV4,
   isValidPostalCode,
   isValidPublishableKey,
   isValidSecretKey,
@@ -2574,6 +2597,7 @@ export {
   networkError,
   normalizeGatewayEnvironment,
   partitionStripeMethods,
+  randomUuidV4,
   rateLimitError,
   resolveAVSConfig,
   resolveBillingApiUrl,