@molecule/app-react 1.0.3 → 1.1.0

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-08-04T01:52:26.674Z
+Generated: 2026-08-15T19:34:35.768Z
 -->
 
 # @molecule/app-react
@@ -1364,6 +1364,66 @@ interface UseTranslationResult {
 }
 ```
 
+#### `UseVerifyPaymentReturnOptions`
+
+Options for {@link useVerifyPaymentReturn}.
+
+```typescript
+interface UseVerifyPaymentReturnOptions {
+  /**
+   * Provider name to verify with, when the return URL carries no `provider`
+   * query parameter. Leave unset to verify only what the URL names.
+   */
+  provider?: string
+
+  /** Set `false` to skip verification entirely (e.g. behind a feature flag). */
+  enabled?: boolean
+
+  /**
+   * Remove the provider's query parameters from the address bar once the
+   * purchase is verified, so a reload (or a shared link) cannot replay the
+   * verification. Defaults to `true`.
+   */
+  cleanUrl?: boolean
+
+  /** Called once, after the purchase verifies. */
+  onVerified?: () => void
+
+  /** Called when verification fails. */
+  onError?: (error: Error) => void
+}
+```
+
+#### `UseVerifyPaymentReturnResult`
+
+State of the post-checkout verification.
+
+```typescript
+interface UseVerifyPaymentReturnResult {
+  /**
+   * `idle` when this page load is not a checkout return (no transaction id in
+   * the URL) or auth is still hydrating; `verifying` while the API call is in
+   * flight; then `verified` or `failed`.
+   */
+  status: VerifyPaymentReturnStatus
+
+  /** `true` when the URL identifies a purchase to verify. */
+  isReturn: boolean
+
+  /** The provider named by the URL (or the `provider` option). */
+  provider: string | null
+
+  /** The provider transaction/session id read from the URL. */
+  transactionId: string | null
+
+  /** Why verification failed, when it did. */
+  error: Error | null
+
+  /** Re-run the verification — wire this to a retry button. */
+  retry: () => void
+}
+```
+
 #### `UseVersionResult`
 
 Hook return type.
@@ -1439,6 +1499,14 @@ type UseCapacitorAppResult = CapacitorAppState & {
 }
 ```
 
+#### `VerifyPaymentReturnStatus`
+
+How far the return-page verification has got.
+
+```typescript
+type VerifyPaymentReturnStatus = 'idle' | 'verifying' | 'verified' | 'failed'
+```
+
 ### Functions
 
 #### `AuthProvider(props)`
@@ -2382,6 +2450,35 @@ function useUser(): T | null
 
 **Returns:** The authenticated user or null
 
+#### `useVerifyPaymentReturn(options)`
+
+Reads the payment id a provider put in the return URL and confirms the
+purchase server-side with `POST /users/:id/verify-payment/:provider`.
+
+**This is why a hosted checkout returns the buyer to the APP and not the
+API.** Session cookies are host-only on the app's origin, so a top-level
+redirect from the provider straight to an authenticated API callback on a
+different host arrives with NO credentials — it answers 401 and the paid plan
+is never granted. The request this hook makes is a same-origin call from a
+loaded app page, so the credentials apply. It waits for auth to hydrate
+first: after the redirect the page is a cold load, and the session is
+restored from the httpOnly cookie via `GET /users/me`.
+
+Verification is idempotent server-side (first-claim-wins on the transaction),
+and this hook additionally runs at most once per transaction id per page.
+Safe on pages that are also reached normally: with no id in the URL it stays
+`idle` and issues no request.
+
+```typescript
+function useVerifyPaymentReturn(
+  options?: UseVerifyPaymentReturnOptions,
+): UseVerifyPaymentReturnResult
+```
+
+- `options` — Provider fallback + lifecycle callbacks (see {@link UseVerifyPaymentReturnOptions}).
+
+**Returns:** The verification state (see {@link UseVerifyPaymentReturnResult}).
+
 #### `useVersion()`
 
 Hook for version state and update actions.
@@ -2635,6 +2732,14 @@ Peer dependencies:
   mounted). Scaffolded Vite configs ship
   `resolve.dedupe: ['react', 'react-dom', 'react-router', 'react-router']` — keep it, and
   add any new hook-bearing peer library there too.
+- **A payment provider's post-checkout redirect must land on the APP, and the page it
+  lands on has to finish the purchase.** `useVerifyPaymentReturn()` reads the id the
+  provider left in the query and confirms it with
+  `POST /users/:id/verify-payment/:provider` — a same-origin call, so the session cookie
+  applies. Redirecting straight to that API route from the provider's domain sends a
+  top-level navigation with NO credentials: it answers 401 and the paid plan is never
+  granted. The shipped confirmation pages (`@molecule/app-plan-updated-page-react`,
+  `@molecule/app-legal-pages-react`) already call it.
 - `RouterProvider` carries a molecule `Router` (e.g. `createReactRouter()` from
   `@molecule/app-routing-react-router`). react-router's own `<BrowserRouter>` context is
   separate — components that render react-router `<Link>` (several in

package/dist/hooks/index.d.ts

@@ -27,6 +27,7 @@ export * from './useStorage.js';
 export * from './useStore.js';
 export * from './useTheme.js';
 export * from './useTranslation.js';
+export * from './useVerifyPaymentReturn.js';
 export * from './useVersion.js';
 export * from './useWorkspace.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA"}

package/dist/hooks/index.js

@@ -27,6 +27,7 @@ export * from './useStorage.js';
 export * from './useStore.js';
 export * from './useTheme.js';
 export * from './useTranslation.js';
+export * from './useVerifyPaymentReturn.js';
 export * from './useVersion.js';
 export * from './useWorkspace.js';
 //# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA"}

package/dist/hooks/useVerifyPaymentReturn.d.ts

@@ -0,0 +1,81 @@
+/**
+ * React hook for the post-checkout return: verify the purchase with the API
+ * from the APP origin, where the session cookie applies.
+ *
+ * @module
+ */
+/** How far the return-page verification has got. */
+export type VerifyPaymentReturnStatus = 'idle' | 'verifying' | 'verified' | 'failed';
+/** Options for {@link useVerifyPaymentReturn}. */
+export interface UseVerifyPaymentReturnOptions {
+    /**
+     * Provider name to verify with, when the return URL carries no `provider`
+     * query parameter. Leave unset to verify only what the URL names.
+     */
+    provider?: string;
+    /** Set `false` to skip verification entirely (e.g. behind a feature flag). */
+    enabled?: boolean;
+    /**
+     * Remove the provider's query parameters from the address bar once the
+     * purchase is verified, so a reload (or a shared link) cannot replay the
+     * verification. Defaults to `true`.
+     */
+    cleanUrl?: boolean;
+    /** Called once, after the purchase verifies. */
+    onVerified?: () => void;
+    /** Called when verification fails. */
+    onError?: (error: Error) => void;
+}
+/** State of the post-checkout verification. */
+export interface UseVerifyPaymentReturnResult {
+    /**
+     * `idle` when this page load is not a checkout return (no transaction id in
+     * the URL) or auth is still hydrating; `verifying` while the API call is in
+     * flight; then `verified` or `failed`.
+     */
+    status: VerifyPaymentReturnStatus;
+    /** `true` when the URL identifies a purchase to verify. */
+    isReturn: boolean;
+    /** The provider named by the URL (or the `provider` option). */
+    provider: string | null;
+    /** The provider transaction/session id read from the URL. */
+    transactionId: string | null;
+    /** Why verification failed, when it did. */
+    error: Error | null;
+    /** Re-run the verification — wire this to a retry button. */
+    retry: () => void;
+}
+/**
+ * Reads the payment id a provider put in the return URL and confirms the
+ * purchase server-side with `POST /users/:id/verify-payment/:provider`.
+ *
+ * **This is why a hosted checkout returns the buyer to the APP and not the
+ * API.** Session cookies are host-only on the app's origin, so a top-level
+ * redirect from the provider straight to an authenticated API callback on a
+ * different host arrives with NO credentials — it answers 401 and the paid plan
+ * is never granted. The request this hook makes is a same-origin call from a
+ * loaded app page, so the credentials apply. It waits for auth to hydrate
+ * first: after the redirect the page is a cold load, and the session is
+ * restored from the httpOnly cookie via `GET /users/me`.
+ *
+ * Verification is idempotent server-side (first-claim-wins on the transaction),
+ * and this hook additionally runs at most once per transaction id per page.
+ * Safe on pages that are also reached normally: with no id in the URL it stays
+ * `idle` and issues no request.
+ *
+ * @param options - Provider fallback + lifecycle callbacks (see
+ *   {@link UseVerifyPaymentReturnOptions}).
+ * @returns The verification state (see {@link UseVerifyPaymentReturnResult}).
+ *
+ * @example
+ * ```tsx
+ * // /plan-updated — the page a provider returns the buyer to.
+ * const { status, retry } = useVerifyPaymentReturn()
+ *
+ * if (status === 'verifying') return <Spinner />
+ * if (status === 'failed') return <button onClick={retry}>Try again</button>
+ * return <h1>Thank you!</h1>
+ * ```
+ */
+export declare function useVerifyPaymentReturn(options?: UseVerifyPaymentReturnOptions): UseVerifyPaymentReturnResult;
+//# sourceMappingURL=useVerifyPaymentReturn.d.ts.map

package/dist/hooks/useVerifyPaymentReturn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useVerifyPaymentReturn.d.ts","sourceRoot":"","sources":["../../src/hooks/useVerifyPaymentReturn.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,oDAAoD;AACpD,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEpF,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;IAEvB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC;AAED,+CAA+C;AAC/C,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,MAAM,EAAE,yBAAyB,CAAA;IAEjC,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAA;IAEjB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAEvB,6DAA6D;IAC7D,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAE5B,4CAA4C;IAC5C,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IAEnB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,6BAAkC,GAC1C,4BAA4B,CA0E9B"}

package/dist/hooks/useVerifyPaymentReturn.js

@@ -0,0 +1,119 @@
+/**
+ * React hook for the post-checkout return: verify the purchase with the API
+ * from the APP origin, where the session cookie applies.
+ *
+ * @module
+ */
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { useAuth } from './useAuth.js';
+import { useHttpClient } from './useHttp.js';
+/** Query parameters a payment provider may use for its transaction id. */
+const TRANSACTION_ID_PARAMS = [
+    // What `resolveCheckoutRedirectUrls` (@molecule/api-payments) asks providers
+    // to substitute — Stripe's `{CHECKOUT_SESSION_ID}`.
+    'sessionId',
+    'session_id',
+    'subscriptionId',
+    // PayPal appends its OWN names to the return URL after buyer approval.
+    'subscription_id',
+    'token',
+];
+/**
+ * Reads the payment id a provider put in the return URL and confirms the
+ * purchase server-side with `POST /users/:id/verify-payment/:provider`.
+ *
+ * **This is why a hosted checkout returns the buyer to the APP and not the
+ * API.** Session cookies are host-only on the app's origin, so a top-level
+ * redirect from the provider straight to an authenticated API callback on a
+ * different host arrives with NO credentials — it answers 401 and the paid plan
+ * is never granted. The request this hook makes is a same-origin call from a
+ * loaded app page, so the credentials apply. It waits for auth to hydrate
+ * first: after the redirect the page is a cold load, and the session is
+ * restored from the httpOnly cookie via `GET /users/me`.
+ *
+ * Verification is idempotent server-side (first-claim-wins on the transaction),
+ * and this hook additionally runs at most once per transaction id per page.
+ * Safe on pages that are also reached normally: with no id in the URL it stays
+ * `idle` and issues no request.
+ *
+ * @param options - Provider fallback + lifecycle callbacks (see
+ *   {@link UseVerifyPaymentReturnOptions}).
+ * @returns The verification state (see {@link UseVerifyPaymentReturnResult}).
+ *
+ * @example
+ * ```tsx
+ * // /plan-updated — the page a provider returns the buyer to.
+ * const { status, retry } = useVerifyPaymentReturn()
+ *
+ * if (status === 'verifying') return <Spinner />
+ * if (status === 'failed') return <button onClick={retry}>Try again</button>
+ * return <h1>Thank you!</h1>
+ * ```
+ */
+export function useVerifyPaymentReturn(options = {}) {
+    const { provider: providerOption, enabled = true, cleanUrl = true, onVerified, onError } = options;
+    const http = useHttpClient();
+    const { state, refresh } = useAuth();
+    const search = typeof window === 'undefined' ? '' : window.location.search;
+    const params = new URLSearchParams(search);
+    const transactionId = TRANSACTION_ID_PARAMS.map((name) => params.get(name)).find((value) => !!value) ?? null;
+    const provider = params.get('provider') || providerOption || null;
+    const isReturn = Boolean(enabled && transactionId && provider);
+    const [status, setStatus] = useState('idle');
+    const [error, setError] = useState(null);
+    // One attempt per transaction id per page — an effect that re-fires (auth
+    // refresh, strict-mode double-invoke) must not re-POST a purchase.
+    const attemptedRef = useRef(null);
+    // Callbacks are read through a ref so a caller passing inline functions does
+    // not re-trigger the effect on every render.
+    const callbacksRef = useRef({ onVerified, onError });
+    callbacksRef.current = { onVerified, onError };
+    const userId = state.user?.id ?? null;
+    const verify = useCallback(async () => {
+        if (!transactionId || !provider || !userId)
+            return;
+        setStatus('verifying');
+        setError(null);
+        try {
+            await http.post(`/users/${userId}/verify-payment/${provider}`, {
+                subscriptionId: transactionId,
+            });
+            // The plan on the cached profile is now stale — re-read it so the UI
+            // (plan badges, gated features) reflects what was just paid for.
+            await refresh().catch(() => { });
+            setStatus('verified');
+            callbacksRef.current.onVerified?.();
+            if (cleanUrl && typeof window !== 'undefined' && window.history?.replaceState) {
+                const url = new URL(window.location.href);
+                for (const name of TRANSACTION_ID_PARAMS)
+                    url.searchParams.delete(name);
+                url.searchParams.delete('provider');
+                window.history.replaceState({}, '', `${url.pathname}${url.search}${url.hash}`);
+            }
+        }
+        catch (caught) {
+            const failure = caught instanceof Error ? caught : new Error(String(caught));
+            setStatus('failed');
+            setError(failure);
+            callbacksRef.current.onError?.(failure);
+        }
+    }, [cleanUrl, http, provider, refresh, transactionId, userId]);
+    useEffect(() => {
+        if (!isReturn || !transactionId)
+            return;
+        // Auth is still hydrating from the httpOnly cookie — verifying now would
+        // send the request unauthenticated.
+        if (!state.initialized || !userId)
+            return;
+        if (attemptedRef.current === transactionId)
+            return;
+        attemptedRef.current = transactionId;
+        void verify();
+    }, [isReturn, state.initialized, transactionId, userId, verify]);
+    const retry = useCallback(() => {
+        attemptedRef.current = transactionId;
+        void verify();
+    }, [transactionId, verify]);
+    return { status, isReturn, provider, transactionId, error, retry };
+}
+//# sourceMappingURL=useVerifyPaymentReturn.js.map

package/dist/hooks/useVerifyPaymentReturn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useVerifyPaymentReturn.js","sourceRoot":"","sources":["../../src/hooks/useVerifyPaymentReturn.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAIhE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG;IAC5B,6EAA6E;IAC7E,oDAAoD;IACpD,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,uEAAuE;IACvE,iBAAiB;IACjB,OAAO;CACC,CAAA;AAuDV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAyC,EAAE;IAE3C,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,GAAG,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAElG,MAAM,IAAI,GAAG,aAAa,EAAE,CAAA;IAC5B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,EAAe,CAAA;IAEjD,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC1E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,aAAa,GACjB,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;IACxF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,cAAc,IAAI,IAAI,CAAA;IAEjE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,IAAI,QAAQ,CAAC,CAAA;IAE9D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA4B,MAAM,CAAC,CAAA;IACvE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAA;IACtD,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,YAAY,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAA;IAEhD,6EAA6E;IAC7E,6CAA6C;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IACpD,YAAY,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAA;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAM;QAElD,SAAS,CAAC,WAAW,CAAC,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAEd,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,mBAAmB,QAAQ,EAAE,EAAE;gBAC7D,cAAc,EAAE,aAAa;aAC9B,CAAC,CAAA;YACF,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC/B,SAAS,CAAC,UAAU,CAAC,CAAA;YACrB,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAA;YAEnC,IAAI,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACzC,KAAK,MAAM,IAAI,IAAI,qBAAqB;oBAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACvE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;gBACnC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5E,SAAS,CAAC,QAAQ,CAAC,CAAA;YACnB,QAAQ,CAAC,OAAO,CAAC,CAAA;YACjB,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;IAE9D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa;YAAE,OAAM;QACvC,yEAAyE;QACzE,oCAAoC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM;YAAE,OAAM;QACzC,IAAI,YAAY,CAAC,OAAO,KAAK,aAAa;YAAE,OAAM;QAElD,YAAY,CAAC,OAAO,GAAG,aAAa,CAAA;QACpC,KAAK,MAAM,EAAE,CAAA;IACf,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAEhE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,YAAY,CAAC,OAAO,GAAG,aAAa,CAAA;QACpC,KAAK,MAAM,EAAE,CAAA;IACf,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;IAE3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AACpE,CAAC"}

package/dist/index.d.ts

@@ -65,6 +65,14 @@
  *   mounted). Scaffolded Vite configs ship
  *   `resolve.dedupe: ['react', 'react-dom', 'react-router', 'react-router']` — keep it, and
  *   add any new hook-bearing peer library there too.
+ * - **A payment provider's post-checkout redirect must land on the APP, and the page it
+ *   lands on has to finish the purchase.** `useVerifyPaymentReturn()` reads the id the
+ *   provider left in the query and confirms it with
+ *   `POST /users/:id/verify-payment/:provider` — a same-origin call, so the session cookie
+ *   applies. Redirecting straight to that API route from the provider's domain sends a
+ *   top-level navigation with NO credentials: it answers 401 and the paid plan is never
+ *   granted. The shipped confirmation pages (`@molecule/app-plan-updated-page-react`,
+ *   `@molecule/app-legal-pages-react`) already call it.
  * - `RouterProvider` carries a molecule `Router` (e.g. `createReactRouter()` from
  *   `@molecule/app-routing-react-router`). react-router's own `<BrowserRouter>` context is
  *   separate — components that render react-router `<Link>` (several in

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA"}

package/dist/index.js

@@ -65,6 +65,14 @@
  *   mounted). Scaffolded Vite configs ship
  *   `resolve.dedupe: ['react', 'react-dom', 'react-router', 'react-router']` — keep it, and
  *   add any new hook-bearing peer library there too.
+ * - **A payment provider's post-checkout redirect must land on the APP, and the page it
+ *   lands on has to finish the purchase.** `useVerifyPaymentReturn()` reads the id the
+ *   provider left in the query and confirms it with
+ *   `POST /users/:id/verify-payment/:provider` — a same-origin call, so the session cookie
+ *   applies. Redirecting straight to that API route from the provider's domain sends a
+ *   top-level navigation with NO credentials: it answers 401 and the paid plan is never
+ *   granted. The shipped confirmation pages (`@molecule/app-plan-updated-page-react`,
+ *   `@molecule/app-legal-pages-react`) already call it.
  * - `RouterProvider` carries a molecule `Router` (e.g. `createReactRouter()` from
  *   `@molecule/app-routing-react-router`). react-router's own `<BrowserRouter>` context is
  *   separate — components that render react-router `<Link>` (several in

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/app-react",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "description": "React framework bindings for molecule.dev",
   "type": "module",
   "main": "dist/index.js",