@mj-biz-apps/orders-ng 5.29.0 → 5.31.0

package/README.md

@@ -1,18 +1,44 @@
 # `@mj-biz-apps/orders-ng`
 
-**Angular components for BizApps Orders** — generated entity forms plus any hand-authored UI.
+**Angular components for BizApps Orders** — the Orders application in MJ Explorer, its entity forms,
+and the public checkout widget.
 
-## Status: generated forms only
+The rules for UI work here are in [`docs/ui-architecture.md`](../../docs/ui-architecture.md), and
+they are binding: components bind to entities and remote operations directly, with no data-access
+service layer.
 
-`src/lib/generated/` contains a CodeGen form component per entity, driven by the same metadata that
-produces the entity classes — including field descriptions lifted from the migration's extended
-properties. Do not edit them; see the Entities package README for the regeneration cycle.
+## Layout of `src/lib/`
 
-No bespoke components ship yet. The back-end engine came first by explicit sequencing: pricing,
-promotions, charges, tax, subscriptions, payments and the ledger are built and covered by 177
-integration checks, and the UX pass follows.
+| Folder | What it holds |
+|---|---|
+| `generated/` | A CodeGen form per entity, driven by the same metadata that produces the entity classes, including field descriptions lifted from the migration's extended properties. Do not edit; see the Entities package README for the regeneration cycle. |
+| `custom/` | Hand-written form components, one folder per entity. Four replace the generated form: `OrderHeader`, `PaymentHeader` and `EventOrderLine`, plus `Product` through `product-save-guard-form.component.ts`, each with `@RegisterClass` at an explicit priority; `custom-forms.module.ts` loads after the generated module. `Product/widgets/` holds the Product widgets the form panels mount. |
+| `form-panels/` | Panels contributed to forms by entity (`@RegisterClassEx(BaseFormPanel, …)`), including the orders sections on bizapps-common's Person and Organization forms. |
+| `sections/` | The four Explorer tabs (Orders, Payments, Receivables, Catalog) and the shell that gives each its left rail. Each registers under the `DriverClass` the Orders application's nav items name. |
+| `pages/` | The screens inside those tabs, one folder per tab. |
+| `panels/` | The shared panel library the screens are built from: worklist table, stat tile, money strip, status stepper, decomposition ladder and others. |
+| `services/` | `MJOPricingScheduler`, which prices a draft as the user types, and save-error formatting. |
+| `data/` | Entity names, the reads the list and detail screens make (`orders-queries.ts`), and grid view and column state. |
+| `checkout-widget/` | The checkout widget and the public host page behind `GET /checkout/:slug`. |
+| `styles/orders-kit.css` | This app's own component CSS, for classes MJ does not ship. The mockups import the same file. |
 
-## When you do build UI here
+`src/public-api.ts` loads the forms, form panels and sections so their decorators fire, and exports
+the rest. `LoadBizAppsOrdersClient()` is the `startupExport` that `mj-app.json` names for MJExplorer.
+
+## Build
+
+`pnpm run build` in this package, or the root build, runs:
+
+1. `ngc`, then `tsc-alias -f`, compiling into `dist/`.
+2. `build:styles` — copies `src/lib/styles/orders-kit.css` into `dist/lib/styles/`, because `ngc`
+   compiles TypeScript only. Exported as `@mj-biz-apps/orders-ng/styles/orders-kit.css`.
+3. `build:checkout-element` — `scripts/build-checkout-element.mjs` bundles the
+   `<mj-orders-checkout>` Angular Element into `dist/checkout-element/main.js` with esbuild and the
+   Angular linker, so the payment page needs no JIT and no `unsafe-eval`. Exported as
+   `@mj-biz-apps/orders-ng/checkout-element`; the checkout edge serves it at
+   `GET /checkout/element/main.js` for the `GET /checkout/:slug` page.
+
+## When you build UI here
 
 Three things this app's rules make non-optional:
 
@@ -28,8 +54,12 @@ that shows only the number is hiding the answer to the question the user is abou
 charges, tax, each with a running total and a link to what produced it. Any "why is this £847.32?"
 affordance should read that rather than recompute.
 
-## Preview before you commit
+## Price through the engine, never beside it
 
-`Orders.PreviewPrice` runs the **real** pricing pipeline without writing. Use it for quotes and
-"what would this customer pay" screens rather than estimating client-side — a preview that diverges
-from the invoice is worse than no preview, because people trust it.
+`OrderPricingService` is the pricing walk `Save()` runs, and it lives in
+`@mj-biz-apps/orders-entities`, so a screen can run it too. `MJOPricingScheduler` prices a draft in
+the browser when it can, and sends the whole order to `Orders.PriceOrder` when a pricing plugin or a
+promotion code is involved; neither path writes anything. `Orders.PreviewPrice` answers for one
+product — its unit price and how it resolved — not for what an order comes to. Do not estimate
+client-side with arithmetic of your own: a preview that diverges from the invoice is worse than no
+preview, because people trust it.

package/dist/checkout-element/main.js

@@ -36953,8 +36953,8 @@ function CheckAnswersAgainstQuestions(questions, answers) {
       if (q.otherOptionKey !== void 0 && value === q.otherOptionKey) {
         if (!otherText)
           return refuse(`Please say more about your answer to "${q.label}".`);
-        if (otherText.length > MAX_CHECKOUT_ANSWER_LENGTH) {
-          return refuse(`The answer to "${q.label}" is too long (at most ${MAX_CHECKOUT_ANSWER_LENGTH} characters).`);
+        if (otherText.length > CheckoutAnswerMaxLength(q)) {
+          return refuse(`The answer to "${q.label}" is too long (at most ${CheckoutAnswerMaxLength(q)} characters).`);
         }
         recordedOther = otherText;
       }
@@ -39670,6 +39670,106 @@ function memberDiscountNotice(draft, alreadyShown) {
   return typedCodePriced ? `${message} Submit again to continue.` : `${message} Submit again to continue at the standard rate.`;
 }
 
+// dist/lib/checkout-widget/checkout-turnstile.js
+var TURNSTILE_SCRIPT_URL = "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit";
+function TurnstileChallengeSiteKey(reply) {
+  if (!reply || reply._httpStatus !== 403 || reply.TurnstileRequired !== true) {
+    return null;
+  }
+  return typeof reply.TurnstileSiteKey === "string" && reply.TurnstileSiteKey ? reply.TurnstileSiteKey : null;
+}
+async function PostWithTurnstile(post, path, body, getToken, state) {
+  const first = state.siteKey ? { ...body, turnstileToken: await getToken(state.siteKey) } : body;
+  const reply = await post(path, first);
+  const siteKey = TurnstileChallengeSiteKey(reply);
+  if (!siteKey) {
+    return reply;
+  }
+  state.siteKey = siteKey;
+  return post(path, { ...body, turnstileToken: await getToken(siteKey) });
+}
+var TurnstileError = class extends Error {
+};
+var turnstileScript = null;
+function loadTurnstile() {
+  if (window.turnstile) {
+    return Promise.resolve(window.turnstile);
+  }
+  if (!turnstileScript) {
+    turnstileScript = new Promise((resolve, reject) => {
+      const s = document.createElement("script");
+      s.src = TURNSTILE_SCRIPT_URL;
+      s.onload = () => window.turnstile ? resolve(window.turnstile) : reject(new TurnstileError("Human verification did not load."));
+      s.onerror = () => {
+        turnstileScript = null;
+        reject(new TurnstileError("Could not load human verification. Check your connection and try again."));
+      };
+      document.head.appendChild(s);
+    });
+  }
+  return turnstileScript;
+}
+var TurnstileWidget = class {
+  container;
+  widgetId = null;
+  siteKey = "";
+  pending = null;
+  constructor(container) {
+    this.container = container;
+  }
+  async Token(siteKey) {
+    const api = await loadTurnstile();
+    const host = this.container();
+    if (!host) {
+      throw new TurnstileError("Could not show human verification.");
+    }
+    return new Promise((resolve, reject) => {
+      this.pending?.reject(new TurnstileError("Human verification was restarted."));
+      this.pending = { resolve, reject };
+      if (this.widgetId !== null && this.siteKey === siteKey) {
+        api.reset(this.widgetId);
+      } else {
+        if (this.widgetId !== null) {
+          api.remove(this.widgetId);
+        }
+        this.siteKey = siteKey;
+        this.widgetId = api.render(host, {
+          sitekey: siteKey,
+          execution: "execute",
+          appearance: "interaction-only",
+          callback: (token) => this.settle(token),
+          "error-callback": () => {
+            this.fail(new TurnstileError("Human verification failed. Please try again."));
+            return true;
+          }
+        }) ?? null;
+      }
+      if (this.widgetId === null) {
+        this.fail(new TurnstileError("Could not show human verification."));
+        return;
+      }
+      api.execute(this.widgetId);
+    });
+  }
+  Destroy() {
+    if (this.widgetId !== null) {
+      window.turnstile?.remove(this.widgetId);
+      this.widgetId = null;
+    }
+    this.pending = null;
+  }
+  settle(token) {
+    const pending = this.pending;
+    this.pending = null;
+    pending?.resolve(token);
+  }
+  fail(err) {
+    const pending = this.pending;
+    this.pending = null;
+    pending?.reject(err);
+  }
+};
+
 // dist/lib/checkout-widget/checkout-public-host.component.js
 var _c0 = (a0) => [a0];
 function CheckoutPublicHostComponent_Conditional_1_Template(rf, ctx) {
@@ -39686,7 +39786,7 @@ function CheckoutPublicHostComponent_Conditional_1_Template(rf, ctx) {
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_7_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 7);
+    \u0275\u0275elementStart(0, "p", 8);
     \u0275\u0275text(1);
     \u0275\u0275elementEnd();
   }
@@ -39698,7 +39798,7 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_7_Template(rf, ct
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_8_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 11);
+    \u0275\u0275elementStart(0, "p", 12);
     \u0275\u0275text(1);
     \u0275\u0275elementEnd();
   }
@@ -39711,14 +39811,14 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_8_Template(rf, ct
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_9_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 9);
+    \u0275\u0275elementStart(0, "p", 10);
     \u0275\u0275text(1, "Setting up your account\u2026");
     \u0275\u0275elementEnd();
   }
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_3_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 14);
+    \u0275\u0275elementStart(0, "p", 15);
     \u0275\u0275text(1);
     \u0275\u0275elementEnd();
   }
@@ -39730,7 +39830,7 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_3_
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_10_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 19);
+    \u0275\u0275elementStart(0, "p", 20);
     \u0275\u0275text(1);
     \u0275\u0275elementEnd();
   }
@@ -39743,42 +39843,42 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_10
 function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template(rf, ctx) {
   if (rf & 1) {
     const _r2 = \u0275\u0275getCurrentView();
-    \u0275\u0275elementStart(0, "form", 12);
+    \u0275\u0275elementStart(0, "form", 13);
     \u0275\u0275listener("submit", function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template_form_submit_0_listener($event) {
       \u0275\u0275restoreView(_r2);
       const ctx_r0 = \u0275\u0275nextContext(2);
       $event.preventDefault();
       return \u0275\u0275resetView(ctx_r0.submitPassword());
     });
-    \u0275\u0275elementStart(1, "h2", 13);
+    \u0275\u0275elementStart(1, "h2", 14);
     \u0275\u0275text(2, "Set a password for your account");
     \u0275\u0275elementEnd();
-    \u0275\u0275conditionalCreate(3, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_3_Template, 2, 1, "p", 14);
-    \u0275\u0275elementStart(4, "label", 15);
+    \u0275\u0275conditionalCreate(3, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_3_Template, 2, 1, "p", 15);
+    \u0275\u0275elementStart(4, "label", 16);
     \u0275\u0275text(5, "Password");
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(6, "input", 16);
+    \u0275\u0275elementStart(6, "input", 17);
     \u0275\u0275listener("input", function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template_input_input_6_listener($event) {
       \u0275\u0275restoreView(_r2);
       const ctx_r0 = \u0275\u0275nextContext(2);
       return \u0275\u0275resetView(ctx_r0.password = $event.target.value);
     });
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(7, "label", 17);
+    \u0275\u0275elementStart(7, "label", 18);
     \u0275\u0275text(8, "Confirm password");
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(9, "input", 18);
+    \u0275\u0275elementStart(9, "input", 19);
     \u0275\u0275listener("input", function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template_input_input_9_listener($event) {
       \u0275\u0275restoreView(_r2);
       const ctx_r0 = \u0275\u0275nextContext(2);
       return \u0275\u0275resetView(ctx_r0.passwordConfirmation = $event.target.value);
     });
     \u0275\u0275elementEnd();
-    \u0275\u0275conditionalCreate(10, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_10_Template, 2, 1, "p", 19);
-    \u0275\u0275elementStart(11, "button", 20);
+    \u0275\u0275conditionalCreate(10, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Conditional_10_Template, 2, 1, "p", 20);
+    \u0275\u0275elementStart(11, "button", 21);
     \u0275\u0275text(12);
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(13, "button", 21);
+    \u0275\u0275elementStart(13, "button", 22);
     \u0275\u0275listener("click", function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template_button_click_13_listener() {
       \u0275\u0275restoreView(_r2);
       const ctx_r0 = \u0275\u0275nextContext(2);
@@ -39808,7 +39908,7 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template(rf, c
 function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Conditional_3_Template(rf, ctx) {
   if (rf & 1) {
     const _r4 = \u0275\u0275getCurrentView();
-    \u0275\u0275elementStart(0, "button", 25);
+    \u0275\u0275elementStart(0, "button", 26);
     \u0275\u0275listener("click", function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Conditional_3_Template_button_click_0_listener() {
       \u0275\u0275restoreView(_r4);
       const ctx_r0 = \u0275\u0275nextContext(4);
@@ -39821,7 +39921,7 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_
 function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Template(rf, ctx) {
   if (rf & 1) {
     const _r3 = \u0275\u0275getCurrentView();
-    \u0275\u0275elementStart(0, "div", 22)(1, "button", 23);
+    \u0275\u0275elementStart(0, "div", 23)(1, "button", 24);
     \u0275\u0275listener("click", function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Template_button_click_1_listener() {
       \u0275\u0275restoreView(_r3);
       const ctx_r0 = \u0275\u0275nextContext(3);
@@ -39829,7 +39929,7 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_
     });
     \u0275\u0275text(2, "Try again");
     \u0275\u0275elementEnd();
-    \u0275\u0275conditionalCreate(3, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Conditional_3_Template, 2, 0, "button", 24);
+    \u0275\u0275conditionalCreate(3, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Conditional_3_Template, 2, 0, "button", 25);
     \u0275\u0275elementEnd();
   }
   if (rf & 2) {
@@ -39840,10 +39940,10 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_
 }
 function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "p", 9);
+    \u0275\u0275elementStart(0, "p", 10);
     \u0275\u0275text(1);
     \u0275\u0275elementEnd();
-    \u0275\u0275conditionalCreate(2, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Template, 4, 1, "div", 22);
+    \u0275\u0275conditionalCreate(2, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Conditional_2_Template, 4, 1, "div", 23);
   }
   if (rf & 2) {
     const ctx_r0 = \u0275\u0275nextContext(2);
@@ -39855,18 +39955,18 @@ function CheckoutPublicHostComponent_Conditional_2_Conditional_11_Template(rf, c
 }
 function CheckoutPublicHostComponent_Conditional_2_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275elementStart(0, "div", 2)(1, "div", 4);
+    \u0275\u0275elementStart(0, "div", 2)(1, "div", 5);
     \u0275\u0275text(2, "\u2713");
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(3, "h1", 5);
+    \u0275\u0275elementStart(3, "h1", 6);
     \u0275\u0275text(4, "You're all set");
     \u0275\u0275elementEnd();
-    \u0275\u0275elementStart(5, "p", 6);
+    \u0275\u0275elementStart(5, "p", 7);
     \u0275\u0275text(6);
     \u0275\u0275elementEnd();
-    \u0275\u0275conditionalCreate(7, CheckoutPublicHostComponent_Conditional_2_Conditional_7_Template, 2, 1, "p", 7);
-    \u0275\u0275conditionalCreate(8, CheckoutPublicHostComponent_Conditional_2_Conditional_8_Template, 2, 3, "p", 8);
-    \u0275\u0275conditionalCreate(9, CheckoutPublicHostComponent_Conditional_2_Conditional_9_Template, 2, 0, "p", 9)(10, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template, 15, 7, "form", 10)(11, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Template, 3, 2);
+    \u0275\u0275conditionalCreate(7, CheckoutPublicHostComponent_Conditional_2_Conditional_7_Template, 2, 1, "p", 8);
+    \u0275\u0275conditionalCreate(8, CheckoutPublicHostComponent_Conditional_2_Conditional_8_Template, 2, 3, "p", 9);
+    \u0275\u0275conditionalCreate(9, CheckoutPublicHostComponent_Conditional_2_Conditional_9_Template, 2, 0, "p", 10)(10, CheckoutPublicHostComponent_Conditional_2_Conditional_10_Template, 15, 7, "form", 11)(11, CheckoutPublicHostComponent_Conditional_2_Conditional_11_Template, 3, 2);
     \u0275\u0275elementEnd();
   }
   if (rf & 2) {
@@ -39891,7 +39991,7 @@ function CheckoutPublicHostComponent_Conditional_3_Template(rf, ctx) {
 function CheckoutPublicHostComponent_Conditional_4_For_1_Template(rf, ctx) {
   if (rf & 1) {
     const _r5 = \u0275\u0275getCurrentView();
-    \u0275\u0275elementStart(0, "mj-checkout-widget", 27);
+    \u0275\u0275elementStart(0, "mj-checkout-widget", 28);
     \u0275\u0275listener("promotionCodeApplied", function CheckoutPublicHostComponent_Conditional_4_For_1_Template_mj_checkout_widget_promotionCodeApplied_0_listener($event) {
       \u0275\u0275restoreView(_r5);
       const ctx_r0 = \u0275\u0275nextContext(2);
@@ -39918,7 +40018,7 @@ function CheckoutPublicHostComponent_Conditional_4_For_1_Template(rf, ctx) {
 }
 function CheckoutPublicHostComponent_Conditional_4_Template(rf, ctx) {
   if (rf & 1) {
-    \u0275\u0275repeaterCreate(0, CheckoutPublicHostComponent_Conditional_4_For_1_Template, 1, 13, "mj-checkout-widget", 26, \u0275\u0275repeaterTrackByIdentity);
+    \u0275\u0275repeaterCreate(0, CheckoutPublicHostComponent_Conditional_4_For_1_Template, 1, 13, "mj-checkout-widget", 27, \u0275\u0275repeaterTrackByIdentity);
   }
   if (rf & 2) {
     const ctx_r0 = \u0275\u0275nextContext();
@@ -39984,6 +40084,9 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
     return AccessMessage(this.accessState, this.config?.accessMessages);
   }
   stripe = null;
+  /** Turnstile for a widget that sets `requireTurnstile` (#592); idle until the edge asks for it. */
+  turnstile = new TurnstileWidget(() => this.turnstileContainer());
+  turnstileState = { siteKey: null };
   card = null;
   cardMounted = false;
   destroyed = false;
@@ -40016,7 +40119,7 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
     }
     this.setState("LOADING");
     try {
-      const init = await this.post("/initialize", {
+      const init = await this.postGated("/initialize", {
         slug: this.slug,
         clientSessionKey: this.sessionKey
       });
@@ -40038,8 +40141,8 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
       }
       this.config = cfg;
       this.setState("CHECKOUT");
-    } catch {
-      this.loadError = "Checkout is temporarily unavailable. Please try again.";
+    } catch (err) {
+      this.loadError = err instanceof TurnstileError ? err.message : "Checkout is temporarily unavailable. Please try again.";
     } finally {
       if (this.loadError)
         this.reportError(this.loadError);
@@ -40061,6 +40164,7 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
   }
   ngOnDestroy() {
     this.destroyed = true;
+    this.turnstile.Destroy();
     this.hostEl?.nativeElement?.removeEventListener?.(CHECKOUT_RESET_REQUEST_EVENT, this.onResetRequested);
     try {
       this.card?.unmount?.();
@@ -40317,7 +40421,7 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
   }
   async finish() {
     this.rememberCompleting(this.sessionId);
-    const done = await this.post("/complete", {
+    const done = await this.postGated("/complete", {
       sessionId: this.sessionId,
       clientSessionKey: this.sessionKey
     });
@@ -40333,8 +40437,7 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
       productId: this.config?.productId,
       totalGross: done.TotalGross,
       currency: this.config?.currency,
-      // The applied promotion code, once the checkout takes one.
-      coupon: null
+      coupon: this.appliedPromotion?.code ?? null
     }));
     this.cdr.detectChanges();
     const access = this.trackAccess();
@@ -40658,23 +40761,43 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
     json._httpStatus = res.status;
     return json;
   }
+  /** `/initialize` and `/complete`: sends a Turnstile token when the widget requires one. */
+  postGated(path, body) {
+    return PostWithTurnstile((p, b) => this.post(p, b), path, body, (siteKey) => this.turnstile.Token(siteKey), this.turnstileState);
+  }
+  /** Where Turnstile renders: outside the template's state branches, so it survives every redraw. */
+  turnstileContainer() {
+    const el = this.hostEl?.nativeElement;
+    if (!el) {
+      return null;
+    }
+    const existing = el.querySelector(".mj-checkout-public__turnstile");
+    if (existing) {
+      return existing;
+    }
+    const created = document.createElement("div");
+    created.className = "mj-checkout-public__turnstile";
+    el.appendChild(created);
+    return created;
+  }
   str(value, fallback = "") {
     return typeof value === "string" && value ? value : fallback;
   }
   static \u0275fac = function CheckoutPublicHostComponent_Factory(__ngFactoryType__) {
     return new (__ngFactoryType__ || _CheckoutPublicHostComponent)();
   };
-  static \u0275cmp = /* @__PURE__ */ \u0275\u0275defineComponent({ type: _CheckoutPublicHostComponent, selectors: [["mj-orders-checkout"]], inputs: { slug: "slug", apiRoot: "apiRoot", memberToken: "memberToken" }, outputs: { alreadySubscribed: "checkout-already-subscribed" }, decls: 5, vars: 1, consts: [[1, "mj-checkout-public"], ["role", "alert", 1, "mj-widget-error-banner"], ["role", "status", 1, "mj-checkout-success"], ["role", "status", 1, "mj-checkout-public__status"], ["aria-hidden", "true", 1, "mj-checkout-success__icon"], [1, "mj-checkout-success__title"], [1, "mj-checkout-success__msg"], [1, "mj-checkout-success__order"], ["role", "status", 1, "mj-checkout-success__access", 3, "is-failed"], ["role", "status", 1, "mj-checkout-account__msg"], [1, "mj-checkout-account"], ["role", "status", 1, "mj-checkout-success__access"], [1, "mj-checkout-account", 3, "submit"], [1, "mj-checkout-account__title"], [1, "mj-checkout-account__note"], ["for", "mj-checkout-password", 1, "mj-checkout-account__label"], ["id", "mj-checkout-password", "type", "password", "autocomplete", "new-password", 1, "mj-checkout-account__input", 3, "input", "value"], ["for", "mj-checkout-password-confirm", 1, "mj-checkout-account__label"], ["id", "mj-checkout-password-confirm", "type", "password", "autocomplete", "new-password", 1, "mj-checkout-account__input", 3, "input", "value"], ["role", "alert", 1, "mj-checkout-account__error"], ["type", "submit", 1, "mj-checkout-account__submit", 3, "disabled"], ["type", "button", 1, "mj-checkout-account__skip", 3, "click", "disabled"], [1, "mj-checkout-account", "mj-checkout-account--actions"], ["type", "button", 1, "mj-checkout-account__submit", 3, "click"], ["type", "button", 1, "mj-checkout-account__skip"], ["type", "button", 1, "mj-checkout-account__skip", 3, "click"], [3, "config", "distributionSlug", "sessionKey", "isProcessing", "isPaymentReady", "stripePaymentMethodId", "prefillEmail", "errorMessage", "appliedPromotion", "serverPricedTotal", "promotionError", "quotedTotal", "quotedTax"], [3, "promotionCodeApplied", "submitted", "cancelled", "quoteInvalidated", "config", "distributionSlug", "sessionKey", "isProcessing", "isPaymentReady", "stripePaymentMethodId", "prefillEmail", "errorMessage", "appliedPromotion", "serverPricedTotal", "promotionError", "quotedTotal", "quotedTax"]], template: function CheckoutPublicHostComponent_Template(rf, ctx) {
+  static \u0275cmp = /* @__PURE__ */ \u0275\u0275defineComponent({ type: _CheckoutPublicHostComponent, selectors: [["mj-orders-checkout"]], inputs: { slug: "slug", apiRoot: "apiRoot", memberToken: "memberToken" }, outputs: { alreadySubscribed: "checkout-already-subscribed" }, decls: 6, vars: 1, consts: [[1, "mj-checkout-public"], ["role", "alert", 1, "mj-widget-error-banner"], ["role", "status", 1, "mj-checkout-success"], ["role", "status", 1, "mj-checkout-public__status"], [1, "mj-checkout-public__turnstile"], ["aria-hidden", "true", 1, "mj-checkout-success__icon"], [1, "mj-checkout-success__title"], [1, "mj-checkout-success__msg"], [1, "mj-checkout-success__order"], ["role", "status", 1, "mj-checkout-success__access", 3, "is-failed"], ["role", "status", 1, "mj-checkout-account__msg"], [1, "mj-checkout-account"], ["role", "status", 1, "mj-checkout-success__access"], [1, "mj-checkout-account", 3, "submit"], [1, "mj-checkout-account__title"], [1, "mj-checkout-account__note"], ["for", "mj-checkout-password", 1, "mj-checkout-account__label"], ["id", "mj-checkout-password", "type", "password", "autocomplete", "new-password", 1, "mj-checkout-account__input", 3, "input", "value"], ["for", "mj-checkout-password-confirm", 1, "mj-checkout-account__label"], ["id", "mj-checkout-password-confirm", "type", "password", "autocomplete", "new-password", 1, "mj-checkout-account__input", 3, "input", "value"], ["role", "alert", 1, "mj-checkout-account__error"], ["type", "submit", 1, "mj-checkout-account__submit", 3, "disabled"], ["type", "button", 1, "mj-checkout-account__skip", 3, "click", "disabled"], [1, "mj-checkout-account", "mj-checkout-account--actions"], ["type", "button", 1, "mj-checkout-account__submit", 3, "click"], ["type", "button", 1, "mj-checkout-account__skip"], ["type", "button", 1, "mj-checkout-account__skip", 3, "click"], [3, "config", "distributionSlug", "sessionKey", "isProcessing", "isPaymentReady", "stripePaymentMethodId", "prefillEmail", "errorMessage", "appliedPromotion", "serverPricedTotal", "promotionError", "quotedTotal", "quotedTax"], [3, "promotionCodeApplied", "submitted", "cancelled", "quoteInvalidated", "config", "distributionSlug", "sessionKey", "isProcessing", "isPaymentReady", "stripePaymentMethodId", "prefillEmail", "errorMessage", "appliedPromotion", "serverPricedTotal", "promotionError", "quotedTotal", "quotedTax"]], template: function CheckoutPublicHostComponent_Template(rf, ctx) {
     if (rf & 1) {
       \u0275\u0275elementStart(0, "div", 0);
       \u0275\u0275conditionalCreate(1, CheckoutPublicHostComponent_Conditional_1_Template, 2, 1, "div", 1)(2, CheckoutPublicHostComponent_Conditional_2_Template, 12, 4, "div", 2)(3, CheckoutPublicHostComponent_Conditional_3_Template, 2, 0, "p", 3)(4, CheckoutPublicHostComponent_Conditional_4_Template, 2, 2);
+      \u0275\u0275element(5, "div", 4);
       \u0275\u0275elementEnd();
     }
     if (rf & 2) {
       \u0275\u0275advance();
       \u0275\u0275conditional(ctx.loadError ? 1 : ctx.successMessage ? 2 : !ctx.config ? 3 : 4);
     }
-  }, dependencies: [CommonModule, MJCheckoutWidgetComponent], styles: ["[_nghost-%COMP%] {\n    display: block;\n}\n\n.mj-checkout-public[_ngcontent-%COMP%] {\n    max-width: 580px;\n    margin: 0 auto;\n}\n\n.mj-checkout-public__status[_ngcontent-%COMP%] {\n    text-align: center;\n    color: #64748b;\n    font-size: 0.95rem;\n    padding: 2rem 0;\n}\n\n.mj-widget-error-banner[_ngcontent-%COMP%] {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    background: #fef2f2;\n    border: 1px solid #f87171;\n    color: #991b1b;\n    padding: 10px 14px;\n    border-radius: 6px;\n    font-size: 0.875rem;\n}\n\n.mj-checkout-success[_ngcontent-%COMP%] {\n    text-align: center;\n    background: #ffffff;\n    border: 1px solid #e2e8f0;\n    border-radius: 10px;\n    padding: 2rem 1.5rem;\n    box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.05);\n}\n\n.mj-checkout-success__icon[_ngcontent-%COMP%] {\n    width: 3rem;\n    height: 3rem;\n    margin: 0 auto 1rem;\n    border-radius: 50%;\n    background: #dcfce7;\n    color: #16a34a;\n    font-size: 1.5rem;\n    font-weight: 700;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n}\n\n.mj-checkout-success__title[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    font-size: 1.5rem;\n    font-weight: 800;\n    color: #0f172a;\n}\n\n.mj-checkout-success__msg[_ngcontent-%COMP%], \n.mj-checkout-success__order[_ngcontent-%COMP%] {\n    margin: 0;\n    color: #64748b;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-success__order[_ngcontent-%COMP%] {\n    margin-top: 0.75rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n\n\n.mj-checkout-success__access[_ngcontent-%COMP%] {\n    margin: 0.75rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n}\n\n.mj-checkout-success__access.is-failed[_ngcontent-%COMP%] {\n    color: #991b1b;\n}\n\n\n\n.mj-checkout-account[_ngcontent-%COMP%] {\n    margin: 1.5rem auto 0;\n    max-width: 320px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    gap: 6px;\n}\n\n.mj-checkout-account__title[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    font-size: 1.05rem;\n    font-weight: 700;\n    color: #0f172a;\n    text-align: center;\n}\n\n.mj-checkout-account__label[_ngcontent-%COMP%] {\n    font-size: 0.85rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n.mj-checkout-account__input[_ngcontent-%COMP%] {\n    padding: 8px 10px;\n    border: 1px solid #cbd5e1;\n    border-radius: 6px;\n    font-size: 0.95rem;\n    font-family: inherit;\n}\n\n.mj-checkout-account__input[_ngcontent-%COMP%]:focus {\n    outline: none;\n    border-color: var(--mj-primary-color, #2563eb);\n    box-shadow: 0 0 0 2px rgba(37, 99, 235, 0.15);\n}\n\n.mj-checkout-account__error[_ngcontent-%COMP%] {\n    margin: 4px 0 0;\n    color: #991b1b;\n    font-size: 0.85rem;\n}\n\n.mj-checkout-account__submit[_ngcontent-%COMP%] {\n    margin-top: 10px;\n    padding: 10px;\n    border: 0;\n    border-radius: 6px;\n    background: var(--mj-primary-color, #2563eb);\n    color: #ffffff;\n    font-weight: 600;\n    cursor: pointer;\n}\n\n.mj-checkout-account__skip[_ngcontent-%COMP%] {\n    padding: 6px;\n    border: 0;\n    background: none;\n    color: #64748b;\n    font-size: 0.85rem;\n    cursor: pointer;\n}\n\n.mj-checkout-account__submit[_ngcontent-%COMP%]:disabled, \n.mj-checkout-account__skip[_ngcontent-%COMP%]:disabled {\n    opacity: 0.6;\n    cursor: not-allowed;\n}\n\n.mj-checkout-account__msg[_ngcontent-%COMP%] {\n    margin: 1rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-account__note[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    color: #475569;\n    font-size: 0.85rem;\n    line-height: 1.45;\n    text-align: center;\n}\n\n.mj-checkout-account--actions[_ngcontent-%COMP%] {\n    margin-top: 0.75rem;\n}"] });
+  }, dependencies: [CommonModule, MJCheckoutWidgetComponent], styles: ["[_nghost-%COMP%] {\n    display: block;\n}\n\n.mj-checkout-public[_ngcontent-%COMP%] {\n    max-width: 580px;\n    margin: 0 auto;\n}\n\n.mj-checkout-public__status[_ngcontent-%COMP%] {\n    text-align: center;\n    color: #64748b;\n    font-size: 0.95rem;\n    padding: 2rem 0;\n}\n\n.mj-widget-error-banner[_ngcontent-%COMP%] {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    background: #fef2f2;\n    border: 1px solid #f87171;\n    color: #991b1b;\n    padding: 10px 14px;\n    border-radius: 6px;\n    font-size: 0.875rem;\n}\n\n.mj-checkout-success[_ngcontent-%COMP%] {\n    text-align: center;\n    background: #ffffff;\n    border: 1px solid #e2e8f0;\n    border-radius: 10px;\n    padding: 2rem 1.5rem;\n    box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.05);\n}\n\n.mj-checkout-success__icon[_ngcontent-%COMP%] {\n    width: 3rem;\n    height: 3rem;\n    margin: 0 auto 1rem;\n    border-radius: 50%;\n    background: #dcfce7;\n    color: #16a34a;\n    font-size: 1.5rem;\n    font-weight: 700;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n}\n\n.mj-checkout-success__title[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    font-size: 1.5rem;\n    font-weight: 800;\n    color: #0f172a;\n}\n\n.mj-checkout-success__msg[_ngcontent-%COMP%], \n.mj-checkout-success__order[_ngcontent-%COMP%] {\n    margin: 0;\n    color: #64748b;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-success__order[_ngcontent-%COMP%] {\n    margin-top: 0.75rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n\n\n.mj-checkout-success__access[_ngcontent-%COMP%] {\n    margin: 0.75rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n}\n\n.mj-checkout-success__access.is-failed[_ngcontent-%COMP%] {\n    color: #991b1b;\n}\n\n\n\n.mj-checkout-account[_ngcontent-%COMP%] {\n    margin: 1.5rem auto 0;\n    max-width: 320px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    gap: 6px;\n}\n\n.mj-checkout-account__title[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    font-size: 1.05rem;\n    font-weight: 700;\n    color: #0f172a;\n    text-align: center;\n}\n\n.mj-checkout-account__label[_ngcontent-%COMP%] {\n    font-size: 0.85rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n.mj-checkout-account__input[_ngcontent-%COMP%] {\n    padding: 8px 10px;\n    border: 1px solid #cbd5e1;\n    border-radius: 6px;\n    font-size: 0.95rem;\n    font-family: inherit;\n}\n\n.mj-checkout-account__input[_ngcontent-%COMP%]:focus {\n    outline: none;\n    border-color: var(--mj-primary-color, #2563eb);\n    box-shadow: 0 0 0 2px rgba(37, 99, 235, 0.15);\n}\n\n.mj-checkout-account__error[_ngcontent-%COMP%] {\n    margin: 4px 0 0;\n    color: #991b1b;\n    font-size: 0.85rem;\n}\n\n.mj-checkout-account__submit[_ngcontent-%COMP%] {\n    margin-top: 10px;\n    padding: 10px;\n    border: 0;\n    border-radius: 6px;\n    background: var(--mj-primary-color, #2563eb);\n    color: #ffffff;\n    font-weight: 600;\n    cursor: pointer;\n}\n\n.mj-checkout-account__skip[_ngcontent-%COMP%] {\n    padding: 6px;\n    border: 0;\n    background: none;\n    color: #64748b;\n    font-size: 0.85rem;\n    cursor: pointer;\n}\n\n.mj-checkout-account__submit[_ngcontent-%COMP%]:disabled, \n.mj-checkout-account__skip[_ngcontent-%COMP%]:disabled {\n    opacity: 0.6;\n    cursor: not-allowed;\n}\n\n.mj-checkout-account__msg[_ngcontent-%COMP%] {\n    margin: 1rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-account__note[_ngcontent-%COMP%] {\n    margin: 0 0 0.5rem;\n    color: #475569;\n    font-size: 0.85rem;\n    line-height: 1.45;\n    text-align: center;\n}\n\n.mj-checkout-account--actions[_ngcontent-%COMP%] {\n    margin-top: 0.75rem;\n}\n\n\n\n.mj-checkout-public__turnstile[_ngcontent-%COMP%] {\n    display: flex;\n    justify-content: center;\n    margin-top: 0.75rem;\n}"] });
 };
 (() => {
   (typeof ngDevMode === "undefined" || ngDevMode) && setClassMetadata(CheckoutPublicHostComponent, [{
@@ -40764,8 +40887,9 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
         </mj-checkout-widget>
         }
     }
+    <div class="mj-checkout-public__turnstile"></div>
 </div>
-`, styles: [":host {\n    display: block;\n}\n\n.mj-checkout-public {\n    max-width: 580px;\n    margin: 0 auto;\n}\n\n.mj-checkout-public__status {\n    text-align: center;\n    color: #64748b;\n    font-size: 0.95rem;\n    padding: 2rem 0;\n}\n\n.mj-widget-error-banner {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    background: #fef2f2;\n    border: 1px solid #f87171;\n    color: #991b1b;\n    padding: 10px 14px;\n    border-radius: 6px;\n    font-size: 0.875rem;\n}\n\n.mj-checkout-success {\n    text-align: center;\n    background: #ffffff;\n    border: 1px solid #e2e8f0;\n    border-radius: 10px;\n    padding: 2rem 1.5rem;\n    box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.05);\n}\n\n.mj-checkout-success__icon {\n    width: 3rem;\n    height: 3rem;\n    margin: 0 auto 1rem;\n    border-radius: 50%;\n    background: #dcfce7;\n    color: #16a34a;\n    font-size: 1.5rem;\n    font-weight: 700;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n}\n\n.mj-checkout-success__title {\n    margin: 0 0 0.5rem;\n    font-size: 1.5rem;\n    font-weight: 800;\n    color: #0f172a;\n}\n\n.mj-checkout-success__msg,\n.mj-checkout-success__order {\n    margin: 0;\n    color: #64748b;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-success__order {\n    margin-top: 0.75rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n/* Whether the buyer's access is ready yet (#325). */\n.mj-checkout-success__access {\n    margin: 0.75rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n}\n\n.mj-checkout-success__access.is-failed {\n    color: #991b1b;\n}\n\n/* Post-payment account step: set a password for the account the host created (#292). */\n.mj-checkout-account {\n    margin: 1.5rem auto 0;\n    max-width: 320px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    gap: 6px;\n}\n\n.mj-checkout-account__title {\n    margin: 0 0 0.5rem;\n    font-size: 1.05rem;\n    font-weight: 700;\n    color: #0f172a;\n    text-align: center;\n}\n\n.mj-checkout-account__label {\n    font-size: 0.85rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n.mj-checkout-account__input {\n    padding: 8px 10px;\n    border: 1px solid #cbd5e1;\n    border-radius: 6px;\n    font-size: 0.95rem;\n    font-family: inherit;\n}\n\n.mj-checkout-account__input:focus {\n    outline: none;\n    border-color: var(--mj-primary-color, #2563eb);\n    box-shadow: 0 0 0 2px rgba(37, 99, 235, 0.15);\n}\n\n.mj-checkout-account__error {\n    margin: 4px 0 0;\n    color: #991b1b;\n    font-size: 0.85rem;\n}\n\n.mj-checkout-account__submit {\n    margin-top: 10px;\n    padding: 10px;\n    border: 0;\n    border-radius: 6px;\n    background: var(--mj-primary-color, #2563eb);\n    color: #ffffff;\n    font-weight: 600;\n    cursor: pointer;\n}\n\n.mj-checkout-account__skip {\n    padding: 6px;\n    border: 0;\n    background: none;\n    color: #64748b;\n    font-size: 0.85rem;\n    cursor: pointer;\n}\n\n.mj-checkout-account__submit:disabled,\n.mj-checkout-account__skip:disabled {\n    opacity: 0.6;\n    cursor: not-allowed;\n}\n\n.mj-checkout-account__msg {\n    margin: 1rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-account__note {\n    margin: 0 0 0.5rem;\n    color: #475569;\n    font-size: 0.85rem;\n    line-height: 1.45;\n    text-align: center;\n}\n\n.mj-checkout-account--actions {\n    margin-top: 0.75rem;\n}\n"] }]
+`, styles: [":host {\n    display: block;\n}\n\n.mj-checkout-public {\n    max-width: 580px;\n    margin: 0 auto;\n}\n\n.mj-checkout-public__status {\n    text-align: center;\n    color: #64748b;\n    font-size: 0.95rem;\n    padding: 2rem 0;\n}\n\n.mj-widget-error-banner {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    background: #fef2f2;\n    border: 1px solid #f87171;\n    color: #991b1b;\n    padding: 10px 14px;\n    border-radius: 6px;\n    font-size: 0.875rem;\n}\n\n.mj-checkout-success {\n    text-align: center;\n    background: #ffffff;\n    border: 1px solid #e2e8f0;\n    border-radius: 10px;\n    padding: 2rem 1.5rem;\n    box-shadow: 0 10px 25px -5px rgba(0, 0, 0, 0.05);\n}\n\n.mj-checkout-success__icon {\n    width: 3rem;\n    height: 3rem;\n    margin: 0 auto 1rem;\n    border-radius: 50%;\n    background: #dcfce7;\n    color: #16a34a;\n    font-size: 1.5rem;\n    font-weight: 700;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n}\n\n.mj-checkout-success__title {\n    margin: 0 0 0.5rem;\n    font-size: 1.5rem;\n    font-weight: 800;\n    color: #0f172a;\n}\n\n.mj-checkout-success__msg,\n.mj-checkout-success__order {\n    margin: 0;\n    color: #64748b;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-success__order {\n    margin-top: 0.75rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n/* Whether the buyer's access is ready yet (#325). */\n.mj-checkout-success__access {\n    margin: 0.75rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n}\n\n.mj-checkout-success__access.is-failed {\n    color: #991b1b;\n}\n\n/* Post-payment account step: set a password for the account the host created (#292). */\n.mj-checkout-account {\n    margin: 1.5rem auto 0;\n    max-width: 320px;\n    text-align: left;\n    display: flex;\n    flex-direction: column;\n    gap: 6px;\n}\n\n.mj-checkout-account__title {\n    margin: 0 0 0.5rem;\n    font-size: 1.05rem;\n    font-weight: 700;\n    color: #0f172a;\n    text-align: center;\n}\n\n.mj-checkout-account__label {\n    font-size: 0.85rem;\n    font-weight: 600;\n    color: #334155;\n}\n\n.mj-checkout-account__input {\n    padding: 8px 10px;\n    border: 1px solid #cbd5e1;\n    border-radius: 6px;\n    font-size: 0.95rem;\n    font-family: inherit;\n}\n\n.mj-checkout-account__input:focus {\n    outline: none;\n    border-color: var(--mj-primary-color, #2563eb);\n    box-shadow: 0 0 0 2px rgba(37, 99, 235, 0.15);\n}\n\n.mj-checkout-account__error {\n    margin: 4px 0 0;\n    color: #991b1b;\n    font-size: 0.85rem;\n}\n\n.mj-checkout-account__submit {\n    margin-top: 10px;\n    padding: 10px;\n    border: 0;\n    border-radius: 6px;\n    background: var(--mj-primary-color, #2563eb);\n    color: #ffffff;\n    font-weight: 600;\n    cursor: pointer;\n}\n\n.mj-checkout-account__skip {\n    padding: 6px;\n    border: 0;\n    background: none;\n    color: #64748b;\n    font-size: 0.85rem;\n    cursor: pointer;\n}\n\n.mj-checkout-account__submit:disabled,\n.mj-checkout-account__skip:disabled {\n    opacity: 0.6;\n    cursor: not-allowed;\n}\n\n.mj-checkout-account__msg {\n    margin: 1rem 0 0;\n    color: #334155;\n    font-size: 0.95rem;\n    line-height: 1.5;\n}\n\n.mj-checkout-account__note {\n    margin: 0 0 0.5rem;\n    color: #475569;\n    font-size: 0.85rem;\n    line-height: 1.45;\n    text-align: center;\n}\n\n.mj-checkout-account--actions {\n    margin-top: 0.75rem;\n}\n\n/* Cloudflare Turnstile renders here only when it needs the buyer to interact (#592). */\n.mj-checkout-public__turnstile {\n    display: flex;\n    justify-content: center;\n    margin-top: 0.75rem;\n}\n"] }]
   }], null, { slug: [{
     type: Input
   }], apiRoot: [{
@@ -40778,7 +40902,7 @@ var CheckoutPublicHostComponent = class _CheckoutPublicHostComponent {
   }] });
 })();
 (() => {
-  (typeof ngDevMode === "undefined" || ngDevMode) && \u0275setClassDebugInfo(CheckoutPublicHostComponent, { className: "CheckoutPublicHostComponent", filePath: "lib/checkout-widget/checkout-public-host.component.ts", lineNumber: 109 });
+  (typeof ngDevMode === "undefined" || ngDevMode) && \u0275setClassDebugInfo(CheckoutPublicHostComponent, { className: "CheckoutPublicHostComponent", filePath: "lib/checkout-widget/checkout-public-host.component.ts", lineNumber: 110 });
 })();
 
 // scripts/checkout-element-entry.ts

package/dist/lib/checkout-widget/checkout-public-host.component.d.ts

@@ -104,6 +104,9 @@ export declare class CheckoutPublicHostComponent implements OnInit, AfterViewChe
     private accessTracking;
     get accessMessage(): string | null;
     private stripe;
+    /** Turnstile for a widget that sets `requireTurnstile` (#592); idle until the edge asks for it. */
+    private readonly turnstile;
+    private readonly turnstileState;
     private card;
     private cardMounted;
     private destroyed;
@@ -213,6 +216,10 @@ export declare class CheckoutPublicHostComponent implements OnInit, AfterViewChe
     private forgetCompleting;
     private completingSession;
     private post;
+    /** `/initialize` and `/complete`: sends a Turnstile token when the widget requires one. */
+    private postGated;
+    /** Where Turnstile renders: outside the template's state branches, so it survives every redraw. */
+    private turnstileContainer;
     private str;
     static ɵfac: i0.ɵɵFactoryDeclaration<CheckoutPublicHostComponent, never>;
     static ɵcmp: i0.ɵɵComponentDeclaration<CheckoutPublicHostComponent, "mj-orders-checkout", never, { "slug": { "alias": "slug"; "required": false; }; "apiRoot": { "alias": "apiRoot"; "required": false; }; "memberToken": { "alias": "memberToken"; "required": false; }; }, { "alreadySubscribed": "checkout-already-subscribed"; }, never, never, true, never>;

package/dist/lib/checkout-widget/checkout-public-host.component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout-public-host.component.d.ts","sourceRoot":"","sources":["../../../src/lib/checkout-widget/checkout-public-host.component.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACH,gBAAgB,EAIhB,YAAY,EAEZ,SAAS,EACT,MAAM,EAGT,MAAM,eAAe,CAAC;AAGvB,OAAO,EAQH,KAAK,mBAAmB,EAC3B,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EAOH,KAAK,mBAAmB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAIH,KAAK,+BAA+B,EAIvC,MAAM,uBAAuB,CAAC;;AAE/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,UAAU,UAAU;IAChB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC1C,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACvE,OAAO,CAAC,IAAI,IAAI,CAAC;IACjB,OAAO,CAAC,IAAI,IAAI,CAAC;CACpB;AAED,UAAU,cAAc;IACpB,QAAQ,IAAI;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAC;IACjD,kBAAkB,CACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;QACF,cAAc,EAAE;YACZ,IAAI,EAAE,UAAU,CAAC;YACjB,eAAe,CAAC,EAAE;gBACd,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,OAAO,CAAC,EAAE;oBAAE,OAAO,CAAC,EAAE,MAAM,CAAC;oBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;oBAAC,WAAW,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAC;aACxE,CAAC;SACL,CAAC;KACL,GACF,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,aAAa,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CACrF;AAED,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,cAAc,CAAC;KACvD;CACJ;AAED,qBAOa,2BAA4B,YAAW,MAAM,EAAE,gBAAgB,EAAE,SAAS;IACnF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IAEjC,IAAI,SAAM;IACV,OAAO,SAAe;IACtC,8FAA8F;IAC9E,WAAW,SAAM;IAEjC;;;OAGG;IAC2C,iBAAiB,gDAAuD;IAE/G,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IAC3C,UAAU,SAAM;IAChB,SAAS,SAAM;IACf,UAAU,UAAS;IACnB,cAAc,UAAS;IACvB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC5C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAQ;IACzC,gGAAgG;IACzF,gBAAgB,EAAE,wBAAwB,GAAG,IAAI,CAAQ;IAChE,2CAA2C;IACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC5C,mGAAmG;IAC5F,iBAAiB,EAAE,yBAAyB,GAAG,IAAI,CAAQ;IAClE,mGAAmG;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAQ;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEvC,0EAA0E;IACnE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAQ;IAC3C,QAAQ,SAAM;IACd,oBAAoB,SAAM;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IACpC,YAAY,UAAS;IACrB,WAAW,UAAS;IAC3B,sDAAsD;IAC/C,cAAc,UAAS;IAC9B,sDAAsD;IACtD,OAAO,CAAC,gBAAgB,CAAS;IAEjC,IAAW,cAAc,IAAI,MAAM,GAAG,IAAI,CAEzC;IAED,IAAW,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAE3C;IAED,iFAAiF;IAC1E,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAQ;IACtD,+FAA+F;IACxF,oBAAoB,SAA2B;IAC/C,mBAAmB,SAA0B;IACpD,sEAAsE;IACtE,OAAO,CAAC,cAAc,CAAS;IAE/B,IAAW,aAAa,IAAI,MAAM,GAAG,IAAI,CAExC;IAED,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,KAAK,CAAqC;IAClD,uGAAuG;IAChG,cAAc,SAAK;IAE1B,2FAA2F;IACpF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC1C,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IAEtE,IAAW,MAAM,IAAI,OAAO,CAE3B;IAEY,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD/B,kBAAkB,IAAI,IAAI;IAc1B,WAAW,IAAI,IAAI;IAU1B,mFAAmF;IACtE,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BlF;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA4B7B;;;;OAIG;IACI,WAAW,IAAI,IAAI;IAW1B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,cAAc;IAqBtB,+FAA+F;IAC/F,OAAO,KAAK,gBAAgB,GAE3B;IAED;;;OAGG;IACH,OAAO,CAAC,SAAS;IAejB,sGAAsG;IAC/F,kBAAkB,IAAI,IAAI;IAOpB,WAAW,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwGvE,OAAO,CAAC,uBAAuB;IAO/B;;;;OAIG;IACH,OAAO,CAAC,YAAY;YAcN,MAAM;IA0CpB;;;;OAIG;YACW,WAAW;IA4BzB,yGAAyG;YAC3F,WAAW;IAoBzB,yDAAyD;IAC5C,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAK1C,+FAA+F;IACxF,cAAc,IAAI,IAAI;IAK7B;;;OAGG;YACW,iBAAiB;IAuB/B,yGAAyG;IAC5F,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAiC5C,wEAAwE;IACjE,YAAY,IAAI,IAAI;IAO3B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,mFAAmF;IACnF,OAAO,CAAC,WAAW;IAOnB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,WAAW;IAKnB,2GAA2G;IAC3G,OAAO,CAAC,QAAQ;YAKF,WAAW;IAqBzB,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,kBAAkB;IAqB1B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,SAAS;IA+BjB,OAAO,KAAK,aAAa,GAExB;IAED,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAQX,IAAI;IAYlB,OAAO,CAAC,GAAG;yCAvyBF,2BAA2B;2CAA3B,2BAA2B;CA0yBvC"}
+{"version":3,"file":"checkout-public-host.component.d.ts","sourceRoot":"","sources":["../../../src/lib/checkout-widget/checkout-public-host.component.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACH,gBAAgB,EAIhB,YAAY,EAEZ,SAAS,EACT,MAAM,EAGT,MAAM,eAAe,CAAC;AAGvB,OAAO,EAQH,KAAK,mBAAmB,EAC3B,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EAOH,KAAK,mBAAmB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAIH,KAAK,+BAA+B,EAIvC,MAAM,uBAAuB,CAAC;;AAG/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,UAAU,UAAU;IAChB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IAC1C,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACvE,OAAO,CAAC,IAAI,IAAI,CAAC;IACjB,OAAO,CAAC,IAAI,IAAI,CAAC;CACpB;AAED,UAAU,cAAc;IACpB,QAAQ,IAAI;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAC;IACjD,kBAAkB,CACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;QACF,cAAc,EAAE;YACZ,IAAI,EAAE,UAAU,CAAC;YACjB,eAAe,CAAC,EAAE;gBACd,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,OAAO,CAAC,EAAE;oBAAE,OAAO,CAAC,EAAE,MAAM,CAAC;oBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;oBAAC,WAAW,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAC;aACxE,CAAC;SACL,CAAC;KACL,GACF,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,aAAa,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CACrF;AAED,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,cAAc,CAAC;KACvD;CACJ;AAED,qBAOa,2BAA4B,YAAW,MAAM,EAAE,gBAAgB,EAAE,SAAS;IACnF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IAEjC,IAAI,SAAM;IACV,OAAO,SAAe;IACtC,8FAA8F;IAC9E,WAAW,SAAM;IAEjC;;;OAGG;IAC2C,iBAAiB,gDAAuD;IAE/G,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IAC3C,UAAU,SAAM;IAChB,SAAS,SAAM;IACf,UAAU,UAAS;IACnB,cAAc,UAAS;IACvB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC5C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAQ;IACzC,gGAAgG;IACzF,gBAAgB,EAAE,wBAAwB,GAAG,IAAI,CAAQ;IAChE,2CAA2C;IACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC5C,mGAAmG;IAC5F,iBAAiB,EAAE,yBAAyB,GAAG,IAAI,CAAQ;IAClE,mGAAmG;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAQ;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEvC,0EAA0E;IACnE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAQ;IAC3C,QAAQ,SAAM;IACd,oBAAoB,SAAM;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAQ;IACpC,YAAY,UAAS;IACrB,WAAW,UAAS;IAC3B,sDAAsD;IAC/C,cAAc,UAAS;IAC9B,sDAAsD;IACtD,OAAO,CAAC,gBAAgB,CAAS;IAEjC,IAAW,cAAc,IAAI,MAAM,GAAG,IAAI,CAEzC;IAED,IAAW,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAE3C;IAED,iFAAiF;IAC1E,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAQ;IACtD,+FAA+F;IACxF,oBAAoB,SAA2B;IAC/C,mBAAmB,SAA0B;IACpD,sEAAsE;IACtE,OAAO,CAAC,cAAc,CAAS;IAE/B,IAAW,aAAa,IAAI,MAAM,GAAG,IAAI,CAExC;IAED,OAAO,CAAC,MAAM,CAA+B;IAC7C,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwD;IAClF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,KAAK,CAAqC;IAClD,uGAAuG;IAChG,cAAc,SAAK;IAE1B,2FAA2F;IACpF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC1C,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IAEtE,IAAW,MAAM,IAAI,OAAO,CAE3B;IAEY,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD/B,kBAAkB,IAAI,IAAI;IAc1B,WAAW,IAAI,IAAI;IAW1B,mFAAmF;IACtE,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BlF;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA4B7B;;;;OAIG;IACI,WAAW,IAAI,IAAI;IAW1B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,cAAc;IAqBtB,+FAA+F;IAC/F,OAAO,KAAK,gBAAgB,GAE3B;IAED;;;OAGG;IACH,OAAO,CAAC,SAAS;IAejB,sGAAsG;IAC/F,kBAAkB,IAAI,IAAI;IAOpB,WAAW,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwGvE,OAAO,CAAC,uBAAuB;IAO/B;;;;OAIG;IACH,OAAO,CAAC,YAAY;YAcN,MAAM;IAyCpB;;;;OAIG;YACW,WAAW;IA4BzB,yGAAyG;YAC3F,WAAW;IAoBzB,yDAAyD;IAC5C,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAK1C,+FAA+F;IACxF,cAAc,IAAI,IAAI;IAK7B;;;OAGG;YACW,iBAAiB;IAuB/B,yGAAyG;IAC5F,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAiC5C,wEAAwE;IACjE,YAAY,IAAI,IAAI;IAO3B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAQxB,mFAAmF;IACnF,OAAO,CAAC,WAAW;IAOnB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,WAAW;IAKnB,2GAA2G;IAC3G,OAAO,CAAC,QAAQ;YAKF,WAAW;IAqBzB,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,kBAAkB;IAqB1B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,SAAS;IA+BjB,OAAO,KAAK,aAAa,GAExB;IAED,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAQX,IAAI;IAYlB,2FAA2F;IAC3F,OAAO,CAAC,SAAS;IAUjB,mGAAmG;IACnG,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,GAAG;yCAr0BF,2BAA2B;2CAA3B,2BAA2B;CAw0BvC"}