@funnelsgrove/payments 0.1.24 → 0.1.26

package/dist/components/shared/SharedStripeCheckoutV2Dialog.js

@@ -217,10 +217,7 @@ function SharedStripeCheckoutV2Form({ amountCents, buttonColor, cardSubmitLabel,
                 setSubmitting(false);
                 return;
             }
-            const result = await checkoutState.checkout.confirm({
-                email: syncedEmail || undefined,
-                redirect: 'if_required',
-            });
+            const result = await checkoutState.checkout.confirm(Object.assign(Object.assign({}, (customerEmailEditable ? { email: syncedEmail || undefined } : {})), { redirect: 'if_required' }));
             if (result.type === 'error') {
                 const message = result.error.message || 'Payment failed.';
                 setSharedError(message);
@@ -260,7 +257,7 @@ function SharedStripeCheckoutV2Form({ amountCents, buttonColor, cardSubmitLabel,
                             effectiveSelectedMethod === 'wallet' ? 'is-visible' : '',
                         ]
                             .filter(Boolean)
-                            .join(' '), children: [_jsxs("p", { className: 'shared-checkout-v2-secure-pill', children: [_jsx(SecurityLockIcon, { className: 'shared-checkout-v2-secure-pill-icon' }), secureLabel] }), _jsxs("div", { className: 'shared-checkout-v2-wallet-shell', "aria-label": walletAriaLabel, children: [_jsx(StripeCheckoutExpressCheckoutButton, { amountCents: amountCents, availabilityPaymentMethods: walletPaymentMethods, beforeConfirm: ensureCustomerEmail, className: 'shared-checkout-v2-express-buttons', customerEmail: resolvedCustomerEmail, customerName: customerName, initialAvailable: initialWalletAvailable, keepInitialAvailableOnReady: initialWalletAvailable === true, onAvailabilityChange: handleWalletAvailabilityChange, onError: setSharedError, onSuccess: onSuccess, options: expressCheckoutOptions, returnUrl: returnUrl, summaryLabel: expressCheckoutSummaryLabel }), _jsx("span", { className: 'shared-checkout-v2-sr-only', children: walletAriaLabel })] })] }), _jsxs("div", { hidden: effectiveSelectedMethod !== 'card', className: [
+                            .join(' '), children: [_jsxs("p", { className: 'shared-checkout-v2-secure-pill', children: [_jsx(SecurityLockIcon, { className: 'shared-checkout-v2-secure-pill-icon' }), secureLabel] }), _jsxs("div", { className: 'shared-checkout-v2-wallet-shell', "aria-label": walletAriaLabel, children: [_jsx(StripeCheckoutExpressCheckoutButton, { amountCents: amountCents, availabilityPaymentMethods: walletPaymentMethods, beforeConfirm: ensureCustomerEmail, className: 'shared-checkout-v2-express-buttons', confirmEmail: customerEmailEditable, customerEmail: resolvedCustomerEmail, customerName: customerName, initialAvailable: initialWalletAvailable, keepInitialAvailableOnReady: initialWalletAvailable === true, onAvailabilityChange: handleWalletAvailabilityChange, onError: setSharedError, onSuccess: onSuccess, options: expressCheckoutOptions, returnUrl: returnUrl, summaryLabel: expressCheckoutSummaryLabel }), _jsx("span", { className: 'shared-checkout-v2-sr-only', children: walletAriaLabel })] })] }), _jsxs("div", { hidden: effectiveSelectedMethod !== 'card', className: [
                             'shared-checkout-v2-card-panel',
                             effectiveSelectedMethod === 'card' ? 'is-visible' : '',
                         ]

package/dist/components/shared/StripeCheckoutExpressCheckoutButton.d.ts

@@ -4,6 +4,7 @@ export type StripeCheckoutExpressCheckoutButtonProps = {
     beforeConfirm?: () => Promise<string | null>;
     summaryLabel: string;
     returnUrl: string;
+    confirmEmail?: boolean;
     customerEmail?: string | null;
     customerName?: string | null;
     className?: string;
@@ -17,4 +18,4 @@ export type StripeCheckoutExpressCheckoutButtonProps = {
     onError?: (message: string | null) => void;
     onSuccess?: () => void | Promise<void>;
 };
-export declare function StripeCheckoutExpressCheckoutButton({ beforeConfirm, returnUrl, customerEmail, className, options, availabilityPaymentMethods, initialAvailable, keepInitialAvailableOnReady, serverUpdateKey, onServerUpdate, onAvailabilityChange, onError, onSuccess, }: StripeCheckoutExpressCheckoutButtonProps): import("react/jsx-runtime").JSX.Element;
+export declare function StripeCheckoutExpressCheckoutButton({ beforeConfirm, returnUrl, confirmEmail, customerEmail, className, options, availabilityPaymentMethods, initialAvailable, keepInitialAvailableOnReady, serverUpdateKey, onServerUpdate, onAvailabilityChange, onError, onSuccess, }: StripeCheckoutExpressCheckoutButtonProps): import("react/jsx-runtime").JSX.Element;

package/dist/components/shared/StripeCheckoutExpressCheckoutButton.js

@@ -25,7 +25,7 @@ const buildDefaultOptions = () => ({
         paypal: 'never',
     },
 });
-export function StripeCheckoutExpressCheckoutButton({ beforeConfirm, returnUrl, customerEmail, className, options, availabilityPaymentMethods = ['applePay'], initialAvailable, keepInitialAvailableOnReady = false, serverUpdateKey, onServerUpdate, onAvailabilityChange, onError, onSuccess, }) {
+export function StripeCheckoutExpressCheckoutButton({ beforeConfirm, returnUrl, confirmEmail = true, customerEmail, className, options, availabilityPaymentMethods = ['applePay'], initialAvailable, keepInitialAvailableOnReady = false, serverUpdateKey, onServerUpdate, onAvailabilityChange, onError, onSuccess, }) {
     const checkoutState = useCheckout();
     const appliedServerUpdateKeyRef = useRef('');
     const serverUpdatePromiseRef = useRef(null);
@@ -122,11 +122,9 @@ export function StripeCheckoutExpressCheckoutButton({ beforeConfirm, returnUrl,
             event.paymentFailed({ reason: 'invalid_payment_data', message });
             return;
         }
-        const result = await checkoutState.checkout.confirm({
-            email: preparedCustomerEmail || (customerEmail === null || customerEmail === void 0 ? void 0 : customerEmail.trim()) || undefined,
-            expressCheckoutConfirmEvent: event,
-            redirect: 'if_required',
-        });
+        const result = await checkoutState.checkout.confirm(Object.assign(Object.assign({}, (confirmEmail
+            ? { email: preparedCustomerEmail || (customerEmail === null || customerEmail === void 0 ? void 0 : customerEmail.trim()) || undefined }
+            : {})), { expressCheckoutConfirmEvent: event, redirect: 'if_required' }));
         if (result.type === 'error') {
             const message = result.error.message || 'Wallet checkout failed.';
             onError === null || onError === void 0 ? void 0 : onError(message);

package/dist/services/stripe.service.js

@@ -527,12 +527,50 @@ export const resolveCheckoutPlanRecurringConfig = (plan) => {
         inferCheckoutPlanRecurringFromText(plan.id) ||
         inferCheckoutPlanRecurringFromText(plan.description));
 };
-const normalizeAnalyticsMetadata = (metadata) => {
-    if (!metadata || !isRecord(metadata)) {
+const SENSITIVE_CHECKOUT_URL_QUERY_KEYS = new Set([
+    'customeremail',
+    'customer_email',
+    'email',
+    'fullname',
+    'full_name',
+    'name',
+    'phone',
+    'phonenumber',
+    'phone_number',
+]);
+const sanitizeCheckoutUrl = (value) => {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    if (!trimmed) {
         return undefined;
     }
-    const normalized = Object.fromEntries(Object.entries(metadata).filter(([, value]) => value !== undefined && value !== null && value !== ''));
-    return Object.keys(normalized).length > 0 ? normalized : undefined;
+    try {
+        const parsed = new URL(trimmed, typeof window !== 'undefined' ? window.location.origin : 'https://example.invalid');
+        for (const key of Array.from(parsed.searchParams.keys())) {
+            if (SENSITIVE_CHECKOUT_URL_QUERY_KEYS.has(key.trim().toLowerCase())) {
+                parsed.searchParams.delete(key);
+            }
+        }
+        return parsed.toString();
+    }
+    catch (_a) {
+        return trimmed;
+    }
+};
+const currentCheckoutUrl = () => {
+    var _a;
+    if (typeof window === 'undefined') {
+        return undefined;
+    }
+    return sanitizeCheckoutUrl((_a = window.location) === null || _a === void 0 ? void 0 : _a.href);
+};
+const normalizeAnalyticsMetadata = (metadata) => {
+    const normalized = Object.fromEntries(Object.entries(isRecord(metadata) ? metadata : {}).filter(([, value]) => value !== undefined && value !== null && value !== ''));
+    const checkoutUrl = sanitizeCheckoutUrl(normalized.url) || currentCheckoutUrl();
+    const withCheckoutUrl = checkoutUrl ? Object.assign(Object.assign({}, normalized), { url: checkoutUrl }) : normalized;
+    return Object.keys(withCheckoutUrl).length > 0 ? withCheckoutUrl : undefined;
 };
 export async function createStripePaymentIntent(input) {
     var _a, _b;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@funnelsgrove/payments",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "type": "module",
   "private": false,
   "main": "./dist/index.js",