@nextblock-cms/ecom 0.22.0 → 0.22.2

package/lib/providers/stripe.es.js

@@ -1,19 +1,20 @@
 import { isDigitalItem as e } from "../types.es.js";
-import { convertMinorUnitAmount as t, getDefaultCurrency as n, normalizePriceMap as r, resolveEffectivePriceForCurrency as i } from "../currency.es.js";
-import { getCartLineCouponKey as a } from "../coupons.es.js";
-import { getCouponQuote as o, getQuoteLineDiscountMap as s, recordCouponRedemption as c } from "../coupon-server.es.js";
-import { countries as l } from "../countries.es.js";
-import { resolveTranslatedText as u } from "../variation-utils.es.js";
-import { createInventoryInsufficientError as d, createInventoryUnavailableError as f, getEcommerceInventorySettings as ee } from "../inventory-settings.es.js";
-import { STRIPE_TAX_CODE_NONTAXABLE as p, STRIPE_TAX_CODE_SHIPPING as te, calculateCheckoutTaxes as ne, getStripeTaxCodeForProduct as re } from "../tax-calculation.es.js";
-import { normalizeOrderCustomerDetails as ie } from "../customer.es.js";
-import { fillMissingUserProfileCheckoutDetails as ae, upsertDefaultUserAddresses as oe } from "../customer-addresses.es.js";
-import { buildOrderTaxDetailsFromCalculation as se } from "../order-tax-details.es.js";
-import { getStripeClient as m } from "../stripe/client.es.js";
-import { createClient as ce } from "@supabase/supabase-js";
+import { getDefaultCurrency as t, normalizePriceMap as n, resolveEffectivePriceForCurrency as r } from "../currency.es.js";
+import { getCartLineCouponKey as i } from "../coupons.es.js";
+import { getCouponQuote as a, getQuoteLineDiscountMap as o, recordCouponRedemption as s } from "../coupon-server.es.js";
+import { countries as c } from "../countries.es.js";
+import { createInvalidShippingMethodError as l, createShippingAddressRequiredError as u, createShippingMethodRequiredError as ee, listEligibleShippingMethods as te, normalizeShippingDestination as ne, resolveCheckoutShippingMethod as re } from "../shipping/checkout-shipping-method.es.js";
+import { createInventoryInsufficientError as ie, createInventoryUnavailableError as ae, getEcommerceInventorySettings as oe } from "../inventory-settings.es.js";
+import { STRIPE_TAX_CODE_NONTAXABLE as d, STRIPE_TAX_CODE_SHIPPING as se, calculateCheckoutTaxes as ce, getStripeTaxCodeForProduct as le } from "../tax-calculation.es.js";
+import { normalizeOrderCustomerDetails as ue } from "../customer.es.js";
+import { fillMissingUserProfileCheckoutDetails as de, upsertDefaultUserAddresses as fe } from "../customer-addresses.es.js";
+import { normalizeCheckoutItems as f } from "./checkout-items.es.js";
+import { buildOrderTaxDetailsFromCalculation as pe } from "../order-tax-details.es.js";
+import { getStripeClient as p } from "../stripe/client.es.js";
+import { createClient as me } from "@supabase/supabase-js";
 //#region src/lib/providers/stripe.ts
-var le = l.map((e) => e.code), h = /* @__PURE__ */ new Set(/* @__PURE__ */ "bg.cs.da.de.el.en.en-GB.es.es-419.et.fi.fil.fr.hr.hu.id.it.ja.ko.lt.lv.ms.mt.nb.nl.pl.pt.pt-BR.ro.ru.sk.sl.sv.th.tr.vi.zh.zh-HK.zh-TW".split("."));
-function g(e) {
+var he = c.map((e) => e.code), m = /* @__PURE__ */ new Set(/* @__PURE__ */ "bg.cs.da.de.el.en.en-GB.es.es-419.et.fi.fil.fr.hr.hu.id.it.ja.ko.lt.lv.ms.mt.nb.nl.pl.pt.pt-BR.ro.ru.sk.sl.sv.th.tr.vi.zh.zh-HK.zh-TW".split("."));
+function h(e) {
 	if (e) return {
 		line1: e.line1 || void 0,
 		line2: e.line2 || void 0,
@@ -23,7 +24,7 @@ function g(e) {
 		country: e.country_code || void 0
 	};
 }
-function ue(e) {
+function ge(e) {
 	let t = e?.trim().replace("_", "-");
 	if (!t) return;
 	let n = [
@@ -31,18 +32,15 @@ function ue(e) {
 		t.toLowerCase(),
 		t.split("-")[0].toLowerCase()
 	];
-	for (let e of n) if (h.has(e)) return e;
+	for (let e of n) if (m.has(e)) return e;
 }
-function de(e, t) {
-	return u(e.name, e.name_translations || null, t);
-}
-async function fe(e) {
+async function _e(e) {
 	if (!e.email) return null;
-	let t = await m(), n = g(e.shippingAddress), r = e.shippingAddress?.recipient_name || e.billingAddress?.recipient_name || void 0, i = {
+	let t = await p(), n = h(e.shippingAddress), r = e.shippingAddress?.recipient_name || e.billingAddress?.recipient_name || void 0, i = {
 		email: e.email,
 		name: e.billingAddress?.recipient_name || e.shippingAddress?.recipient_name || void 0,
 		phone: e.phone || void 0,
-		address: g(e.billingAddress),
+		address: h(e.billingAddress),
 		metadata: e.userId ? { userId: e.userId } : void 0,
 		...n && r ? { shipping: {
 			name: r,
@@ -60,61 +58,75 @@ async function fe(e) {
 		return console.error("Failed to upsert Stripe customer for checkout prefill:", e), null;
 	}
 }
-var _ = class {
+var g = class {
 	getProviderName() {
 		return "Stripe";
 	}
-	async createCheckoutSession({ items: l, customerEmail: u, customerPhone: h, userId: g, billingAddress: _, shippingAddress: v, shippingMethodId: pe, currencyCode: me, locale: he, couponCode: y, couponContextItems: b }) {
-		let ge = await m(), x = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, S = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY;
-		if (!x || !S) return console.error("Missing Supabase credentials for checkout (Service Key required)."), {
+	async createCheckoutSession({ items: c, customerEmail: m, customerPhone: h, userId: g, billingAddress: _, shippingAddress: v, shippingMethodId: y, currencyCode: ve, locale: b, couponCode: x, couponContextItems: S }) {
+		let ye = await p(), C = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, w = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY;
+		if (!C || !w) return console.error("Missing Supabase credentials for checkout (Service Key required)."), {
 			error: "Internal Server Error",
 			url: null
 		};
-		let C = ce(x, S), w = process.env.NEXT_PUBLIC_URL || "http://localhost:4200", T = l.some((t) => !e(t));
-		if (!l.length) return {
+		let T = me(C, w), E = process.env.NEXT_PUBLIC_URL || "http://localhost:4200";
+		if (!c?.length) return {
 			error: "Cart is empty",
 			url: null
 		};
-		let { data: _e, error: E } = await C.from("currencies").select("code, symbol, exchange_rate, is_default, is_active, auto_sync_product_prices, auto_update_exchange_rate, exchange_rate_source, exchange_rate_updated_at, rounding_mode, rounding_increment, rounding_charm_amount").eq("is_active", !0).order("code", { ascending: !0 }), D = _e ?? [];
-		if (E || D.length === 0) return console.error("Error fetching currencies for checkout:", E), {
+		let D = f(c);
+		if (!D.ok) return {
+			url: null,
+			...D.error
+		};
+		let O = D.items, k = O;
+		if (S && S.length > 0) {
+			let e = f(S);
+			if (!e.ok) return {
+				url: null,
+				...e.error
+			};
+			k = e.items;
+		}
+		let A = O.some((t) => !e(t)), { data: be, error: j } = await T.from("currencies").select("code, symbol, exchange_rate, is_default, is_active, auto_sync_product_prices, auto_update_exchange_rate, exchange_rate_source, exchange_rate_updated_at, rounding_mode, rounding_increment, rounding_charm_amount").eq("is_active", !0).order("code", { ascending: !0 }), M = be ?? [];
+		if (j || M.length === 0) return console.error("Error fetching currencies for checkout:", j), {
 			error: "Failed to resolve store currencies",
 			url: null
 		};
-		let O = n(D), k = D.find((e) => e.code === (me || "").toUpperCase()) ?? O, A = k.code.toLowerCase(), j = await ee(C), ve = l.map((e) => e.product_id), M = l.map((e) => e.variant_id).filter((e) => !!e), { data: N, error: P } = await C.from("products").select("id, title, sku, price, prices, sale_price, sale_prices, sale_start_at, sale_end_at, scheduled_price, scheduled_prices, scheduled_price_at, stock, is_taxable").in("id", ve);
-		if (P || !N) return console.error("Error fetching products for validation:", P), {
+		let xe = t(M), N = M.find((e) => e.code === (ve || "").toUpperCase()) ?? xe, P = N.code.toLowerCase(), F = await oe(T), Se = O.map((e) => e.product_id), I = O.map((e) => e.variant_id).filter((e) => !!e), { data: L, error: R } = await T.from("products").select("id, title, sku, price, prices, sale_price, sale_prices, sale_start_at, sale_end_at, scheduled_price, scheduled_prices, scheduled_price_at, stock, is_taxable").in("id", Se);
+		if (R || !L) return console.error("Error fetching products for validation:", R), {
 			error: "Failed to validate product prices",
 			url: null
 		};
-		let { data: ye, error: F } = M.length ? await C.from("product_variants").select("id, product_id, sku, price, prices, sale_price, sale_prices, sale_start_at, sale_end_at, scheduled_price, scheduled_prices, scheduled_price_at, stock_quantity").in("id", M) : {
+		let { data: Ce, error: we } = I.length ? await T.from("product_variants").select("id, product_id, sku, price, prices, sale_price, sale_prices, sale_start_at, sale_end_at, scheduled_price, scheduled_prices, scheduled_price_at, stock_quantity").in("id", I) : {
 			data: [],
 			error: null
 		};
-		if (F) return console.error("Error fetching variants for validation:", F), {
+		if (we) return console.error("Error fetching variants for validation:", we), {
 			error: "Failed to validate product variants",
 			url: null
 		};
-		let I = new Map(N.map((e) => [e.id, e])), L = new Map((ye || []).map((e) => [e.id, e])), R = /* @__PURE__ */ new Set(), z = /* @__PURE__ */ new Map();
-		for (let e of l) {
-			let t = I.get(e.product_id);
+		let z = new Map(L.map((e) => [e.id, e])), B = new Map((Ce || []).map((e) => [e.id, e])), V = /* @__PURE__ */ new Set(), H = /* @__PURE__ */ new Map();
+		for (let e of O) {
+			let t = z.get(e.product_id);
 			if (!t) continue;
-			let n = (e.variant_id ? L.get(e.variant_id) : null)?.sku || t.sku;
-			n && (R.add(n), z.set(n, (z.get(n) ?? 0) + e.quantity));
+			let n = (e.variant_id ? B.get(e.variant_id) : null)?.sku || t.sku;
+			n && (V.add(n), H.set(n, (H.get(n) ?? 0) + e.quantity));
 		}
-		let { data: be, error: B } = R.size ? await C.from("inventory_items").select("sku, quantity").in("sku", [...R]) : {
+		let { data: Te, error: Ee } = V.size ? await T.from("inventory_items").select("sku, quantity").in("sku", [...V]) : {
 			data: [],
 			error: null
 		};
-		if (B) return console.error("Error fetching SKU inventory for validation:", B), {
+		if (Ee) return console.error("Error fetching SKU inventory for validation:", Ee), {
 			error: "Failed to validate SKU inventory",
 			url: null
 		};
-		let V = new Map((be || []).map((e) => [e.sku, Math.max(0, e.quantity ?? 0)])), H = [], U = [], W = [], G = 0, K = 0, q = null;
-		if (y) {
-			let e = await o({
-				client: C,
-				code: y,
-				items: b && b.length > 0 ? b : l,
-				currencyCode: k.code
+		let U = new Map((Te || []).map((e) => [e.sku, Math.max(0, e.quantity ?? 0)])), W = [], De = [], Oe = [], G = 0, K = 0, q = null;
+		if (x) {
+			let e = await a({
+				client: T,
+				code: x,
+				items: k,
+				currencyCode: N.code
 			});
 			if (!e.success) return {
 				error: e.error,
@@ -124,16 +136,16 @@ var _ = class {
 			};
 			q = e.quote;
 		}
-		let xe = s(q), Se = (e) => {
+		let ke = o(q), Ae = (e) => {
 			let t = e.unitAmount * e.quantity, n = Math.max(0, t - e.lineDiscount);
 			if (n <= 0) return;
 			let r = Math.floor(n / e.quantity), i = n - r * e.quantity, a = (t, n) => {
-				n <= 0 || t <= 0 || H.push({
+				n <= 0 || t <= 0 || W.push({
 					price_data: {
 						currency: e.currency,
 						product_data: {
 							name: e.name,
-							tax_code: re(e.isTaxable),
+							tax_code: le(e.isTaxable),
 							metadata: {
 								productId: e.productId,
 								variantId: e.variantId || ""
@@ -147,55 +159,55 @@ var _ = class {
 			};
 			a(r, e.quantity - i), a(r + 1, i);
 		};
-		for (let e of l) {
-			let t = I.get(e.product_id);
+		for (let e of O) {
+			let t = z.get(e.product_id);
 			if (!t) return console.warn(`Product ${e.product_id} not found in DB.`), {
 				url: null,
-				...f(e.title)
+				...ae(e.title)
 			};
-			let n = i({
-				prices: r(t.prices),
+			let a = r({
+				prices: n(t.prices),
 				salePrices: t.sale_prices || {},
 				fallbackPrice: t.price,
 				fallbackSalePrice: t.sale_price,
 				saleStartAt: t.sale_start_at,
 				saleEndAt: t.sale_end_at,
 				scheduledPrice: t.scheduled_price,
-				scheduledPrices: r(t.scheduled_prices),
+				scheduledPrices: n(t.scheduled_prices),
 				scheduledPriceAt: t.scheduled_price_at,
-				currencyCode: k.code,
-				currencies: D
-			}), o = n.sale_price ?? n.price, s = t.title, c = null;
+				currencyCode: N.code,
+				currencies: M
+			}), o = a.sale_price ?? a.price, s = t.title, c = null;
 			if (e.variant_id) {
-				let n = L.get(e.variant_id);
-				if (!n || n.product_id !== e.product_id) return {
+				let i = B.get(e.variant_id);
+				if (!i || i.product_id !== e.product_id) return {
 					url: null,
-					...f(e.title)
+					...ae(e.title)
 				};
-				let a = z.get(n.sku) ?? e.quantity, l = V.has(n.sku) ? V.get(n.sku) ?? 0 : Math.max(0, n.stock_quantity ?? 0);
-				if (j.trackQuantities && a > l) return {
+				let a = H.get(i.sku) ?? e.quantity, l = U.has(i.sku) ? U.get(i.sku) ?? 0 : Math.max(0, i.stock_quantity ?? 0);
+				if (F.trackQuantities && a > l) return {
 					url: null,
-					...d(e.title, l)
+					...ie(e.title, l)
 				};
-				let u = i({
-					prices: r(n.prices),
-					salePrices: n.sale_prices || {},
-					fallbackPrice: n.price,
-					fallbackSalePrice: n.sale_price,
-					saleStartAt: n.sale_start_at,
-					saleEndAt: n.sale_end_at,
-					scheduledPrice: n.scheduled_price,
-					scheduledPrices: r(n.scheduled_prices),
-					scheduledPriceAt: n.scheduled_price_at,
-					currencyCode: k.code,
-					currencies: D
+				let u = r({
+					prices: n(i.prices),
+					salePrices: i.sale_prices || {},
+					fallbackPrice: i.price,
+					fallbackSalePrice: i.sale_price,
+					saleStartAt: i.sale_start_at,
+					saleEndAt: i.sale_end_at,
+					scheduledPrice: i.scheduled_price,
+					scheduledPrices: n(i.scheduled_prices),
+					scheduledPriceAt: i.scheduled_price_at,
+					currencyCode: N.code,
+					currencies: M
 				});
-				o = u.sale_price ?? u.price, c = n.id, s = e.variant_label ? `${t.title} - ${e.variant_label}` : `${t.title} - ${n.sku}`;
+				o = u.sale_price ?? u.price, c = i.id, s = e.variant_label ? `${t.title} - ${e.variant_label}` : `${t.title} - ${i.sku}`;
 			} else {
-				let n = z.get(t.sku) ?? e.quantity, r = V.has(t.sku) ? V.get(t.sku) ?? 0 : Math.max(0, t.stock ?? 0);
-				if (j.trackQuantities && n > r) return {
+				let n = H.get(t.sku) ?? e.quantity, r = U.has(t.sku) ? U.get(t.sku) ?? 0 : Math.max(0, t.stock ?? 0);
+				if (F.trackQuantities && n > r) return {
 					url: null,
-					...d(e.title, r)
+					...ie(e.title, r)
 				};
 			}
 			let l = t.is_taxable ?? !0;
@@ -203,22 +215,22 @@ var _ = class {
 				error: "A product variation produced an invalid price.",
 				url: null
 			};
-			let u = Math.min(o * e.quantity, xe.get(a(e)) ?? 0);
-			Se({
+			let u = Math.min(o * e.quantity, ke.get(i(e)) ?? 0);
+			Ae({
 				name: s,
-				currency: A,
+				currency: P,
 				productId: t.id,
 				variantId: c,
 				isTaxable: l,
 				unitAmount: o,
 				quantity: e.quantity,
 				lineDiscount: u
-			}), G += o * e.quantity, K += u, W.push({
+			}), G += o * e.quantity, K += u, Oe.push({
 				product_id: t.id,
 				quantity: e.quantity,
 				price_at_purchase: o,
 				variant_id: c
-			}), U.push({
+			}), De.push({
 				product_id: t.id,
 				quantity: e.quantity,
 				unit_amount: o,
@@ -226,37 +238,66 @@ var _ = class {
 				is_taxable: l
 			});
 		}
-		if (H.length === 0 && K >= G) return {
+		if (W.length === 0 && K >= G) return {
 			error: "This coupon would reduce the Stripe order to zero. Use a smaller discount for Stripe checkout.",
 			errorKey: "ecommerce.coupon_zero_total_not_supported",
 			errorStatus: 400,
 			url: null
 		};
-		if (H.length === 0) return {
+		if (W.length === 0) return {
 			error: "No valid items in cart",
 			url: null
 		};
 		let J = 0, Y = null;
-		if (pe) {
-			let { data: e, error: n } = await C.from("shipping_zone_methods").select("id, name, name_translations, cost_amount, cost_currency").eq("id", pe).single();
-			if (n) return console.error("Failed to load shipping method:", n), {
-				error: "Failed to load shipping method",
-				url: null
+		if (A) {
+			let e = ne({
+				country: v?.country_code,
+				state: v?.state,
+				postal_code: v?.postal_code
+			});
+			if (!e) return {
+				url: null,
+				...u()
 			};
-			J = t({
-				amount: e.cost_amount ?? 0,
-				fromCurrencyCode: e.cost_currency || O.code,
-				toCurrencyCode: k.code,
-				currencies: D
-			}), Y = de(e, he);
+			let t = {
+				destination: e,
+				cartTotal: Math.max(0, G - K),
+				currencies: M,
+				currencyCode: N.code
+			};
+			if (y) {
+				let e = await re(T, {
+					...t,
+					methodId: y,
+					languageCode: b
+				});
+				if (!e.ok) return e.reason === "load_failed" ? (console.error("Failed to load shipping method:", e.error), {
+					error: "Failed to load shipping method",
+					url: null
+				}) : (console.warn(`Checkout rejected shipping method ${y}: ${e.reason}`), {
+					url: null,
+					...l()
+				});
+				J = e.method.amount, Y = e.method.name;
+			} else {
+				let e = await te(T, t);
+				if (!e.ok) return console.error("Failed to load shipping methods:", e.error), {
+					error: "Failed to load shipping method",
+					url: null
+				};
+				if (e.methods.length > 0) return {
+					url: null,
+					...ee()
+				};
+			}
 		}
-		let Ce = T ? v ?? _ : _, X;
+		let je = A ? v ?? _ : _, X;
 		try {
-			X = await ne(C, {
-				items: U,
+			X = await ce(T, {
+				items: De,
 				destination: {
-					country_code: Ce?.country_code,
-					state: Ce?.state
+					country_code: je?.country_code,
+					state: je?.state
 				}
 			});
 		} catch (e) {
@@ -265,12 +306,12 @@ var _ = class {
 				url: null
 			};
 		}
-		J > 0 && Y && H.push({
+		J > 0 && Y && W.push({
 			price_data: {
-				currency: A,
+				currency: P,
 				product_data: {
 					name: Y,
-					tax_code: X.enabled && X.mode === "automatic" ? te : p
+					tax_code: X.enabled && X.mode === "automatic" ? se : d
 				},
 				tax_behavior: "exclusive",
 				unit_amount: J
@@ -278,39 +319,39 @@ var _ = class {
 			quantity: 1
 		});
 		let Z = X.enabled && X.mode === "manual" && !X.isPendingExternalCalculation ? X.amount : 0;
-		Z > 0 && H.push({
+		Z > 0 && W.push({
 			price_data: {
-				currency: A,
+				currency: P,
 				product_data: {
 					name: "Tax",
-					tax_code: p
+					tax_code: d
 				},
 				tax_behavior: "exclusive",
 				unit_amount: Z
 			},
 			quantity: 1
 		});
-		let we = ie({
-			email: u,
+		let Me = ue({
+			email: m,
 			phone: h,
 			name: _?.recipient_name,
 			billing: _,
 			shipping: v
-		}), Te = k.code, Ee = se({
+		}), Ne = N.code, Pe = pe({
 			calculation: X,
 			subtotal: G,
 			shippingTotal: J,
 			total: Math.max(0, G - K) + J + Z,
-			currency: Te
-		}), De = Math.max(0, G - K) + J + Z, { data: Oe, error: ke } = await C.from("orders").insert({
+			currency: Ne
+		}), Fe = Math.max(0, G - K) + J + Z, { data: Ie, error: Le } = await T.from("orders").insert({
 			status: "pending",
-			total: De,
-			currency: Te,
-			exchange_rate_at_purchase: k.exchange_rate,
+			total: Fe,
+			currency: Ne,
+			exchange_rate_at_purchase: N.exchange_rate,
 			subtotal: G,
 			shipping_total: J,
 			tax_total: Z,
-			tax_details: Ee,
+			tax_details: Pe,
 			coupon_id: q?.couponId ?? null,
 			coupon_code: q?.code ?? null,
 			discount_total: K,
@@ -324,88 +365,92 @@ var _ = class {
 			} : null,
 			provider: "stripe",
 			user_id: g,
-			customer_details: we
+			customer_details: Me
 		}).select("id").single();
-		if (ke || !Oe) return console.error("Failed to create pending order:", ke), {
+		if (Le || !Ie) return console.error("Failed to create pending order:", Le), {
 			error: "Failed to initiate order",
 			url: null
 		};
-		let Q = Oe.id, { error: Ae } = await C.from("order_items").insert(W.map((e) => ({
+		let Q = Ie.id, { error: Re } = await T.from("order_items").insert(Oe.map((e) => ({
 			order_id: Q,
 			product_id: e.product_id,
 			variant_id: e.variant_id ?? null,
 			quantity: e.quantity,
 			price_at_purchase: e.price_at_purchase
 		})));
-		if (Ae) return console.error("Failed to insert order items:", Ae), await C.from("orders").update({ status: "failed" }).eq("id", Q), {
+		if (Re) return console.error("Failed to insert order items:", Re), await T.from("orders").update({ status: "failed" }).eq("id", Q), {
 			error: "Failed to record order items",
 			url: null
 		};
 		if (g) try {
-			await oe({
+			await fe({
 				userId: g,
 				billingAddress: _,
 				shippingAddress: v,
-				client: C
-			}), await ae({
+				client: T
+			}), await de({
 				userId: g,
 				fullName: _?.recipient_name ?? v?.recipient_name ?? null,
 				phone: h,
-				client: C
+				client: T
 			});
 		} catch (e) {
 			console.error("Failed to sync checkout profile defaults before checkout:", e);
 		}
-		q && await c({
-			client: C,
+		if (q && !(await s({
+			client: T,
 			quote: q,
 			orderId: Q,
 			provider: "stripe",
 			discountTotal: K,
 			userId: g,
-			customerEmail: u,
+			customerEmail: m,
 			metadata: {
-				currency: k.code,
+				currency: N.code,
 				subtotal: G,
 				shipping_total: J,
 				tax_total: Z
 			}
-		});
-		let $ = await fe({
-			email: u,
+		})).success) return await T.from("orders").update({ status: "failed" }).eq("id", Q), {
+			url: null,
+			error: "Coupon is no longer available.",
+			errorKey: "ecommerce.coupon_invalid"
+		};
+		let $ = await _e({
+			email: m,
 			phone: h,
 			userId: g,
 			billingAddress: _,
 			shippingAddress: v
 		});
 		try {
-			let e = await ge.checkout.sessions.create({
+			let e = await ye.checkout.sessions.create({
 				mode: "payment",
-				success_url: `${w}/checkout/success?session_id={CHECKOUT_SESSION_ID}`,
-				cancel_url: `${w}/checkout`,
-				locale: ue(he),
-				line_items: H,
+				success_url: `${E}/checkout/success?session_id={CHECKOUT_SESSION_ID}`,
+				cancel_url: `${E}/checkout`,
+				locale: ge(b),
+				line_items: W,
 				automatic_tax: X.enabled && X.mode === "automatic" ? { enabled: !0 } : void 0,
 				billing_address_collection: "auto",
 				customer: $ || void 0,
-				customer_email: $ ? void 0 : u || void 0,
+				customer_email: $ ? void 0 : m || void 0,
 				customer_creation: $ ? void 0 : "if_required",
 				customer_update: $ ? {
 					name: "auto",
 					address: "auto",
 					shipping: "auto"
 				} : void 0,
-				shipping_address_collection: T ? { allowed_countries: le } : void 0,
+				shipping_address_collection: A ? { allowed_countries: he } : void 0,
 				metadata: {
 					orderId: Q,
 					taxMode: X.mode,
-					currencyCode: k.code,
+					currencyCode: N.code,
 					couponCode: q?.code || ""
 				}
-			}), { error: t } = await C.from("orders").update({ stripe_session_id: e.id }).eq("id", Q);
+			}), { error: t } = await T.from("orders").update({ stripe_session_id: e.id }).eq("id", Q);
 			return t && console.error("Failed to save Stripe session ID on order:", t), { url: e.url };
 		} catch (e) {
-			return console.error("Stripe session creation failed:", e), await C.from("orders").update({ status: "failed" }).eq("id", Q), e?.name === "StripeNotConfiguredError" || e?.type === "StripeAuthenticationError" ? {
+			return console.error("Stripe session creation failed:", e), await T.from("orders").update({ status: "failed" }).eq("id", Q), e?.name === "StripeNotConfiguredError" || e?.type === "StripeAuthenticationError" ? {
 				error: "This store is not able to take payments right now. Please contact the seller to complete your purchase.",
 				errorKey: "ecommerce.checkout_payments_unavailable",
 				errorStatus: 503,
@@ -419,4 +464,4 @@ var _ = class {
 	}
 };
 //#endregion
-export { _ as StripeProvider };
+export { g as StripeProvider };

package/lib/server-actions/coupon-actions.cjs

@@ -1 +1 @@
-"use server";const e=require("../coupon-server.cjs");let t=require("@nextblock-cms/db/server");async function n(n){try{let r=(0,t.getServiceRoleSupabaseClient)();return await e.getCouponQuote({client:r,code:n.code,items:Array.isArray(n.items)?n.items:[],currencyCode:n.currencyCode})}catch(e){return console.error(`Failed to validate coupon:`,e),{success:!1,error:e.message||`Failed to validate coupon.`,errorKey:`ecommerce.coupon_validation_failed`}}}exports.getCouponQuoteAction=n;
+"use server";const e=require("../coupons.cjs"),t=require("../coupon-server.cjs");let n=require("next/headers"),r=require("@nextblock-cms/db/server");async function i(i){try{let a=await(0,n.headers)();if(!t.consumeCouponValidationToken(t.resolveCouponValidationThrottleKey(a)))return{success:!1,error:e.COUPON_THROTTLED_ERROR_MESSAGE,errorKey:e.COUPON_THROTTLED_ERROR_KEY};let o=(0,r.getServiceRoleSupabaseClient)();return await t.getCouponQuote({client:o,code:i.code,items:Array.isArray(i.items)?i.items:[],currencyCode:i.currencyCode})}catch(e){return console.error(`Failed to validate coupon:`,e),{success:!1,error:`We couldn't validate this coupon. Try again.`,errorKey:`ecommerce.coupon_validation_failed`}}}exports.getCouponQuoteAction=i;

package/lib/server-actions/coupon-actions.d.ts

@@ -1,17 +1,16 @@
 import { CartItem } from '../types';
+/**
+ * Public coupon validation for the cart and checkout forms.
+ *
+ * Reachable by anyone (a server action is a POST endpoint dispatched by id, no session
+ * needed) and it reads with the service-role client, so it is the only way a visitor can ask
+ * "does this code exist?". Two things keep that from being an enumeration oracle:
+ * `getCouponQuote` answers every unusable code with the same message, and this action spends a
+ * per-client token before it touches the database. The bucket is in-memory and best-effort
+ * (see coupon-server.ts); the uniform reply is what makes a slow probe also an unreliable one.
+ */
 export declare function getCouponQuoteAction(input: {
     code?: string | null;
     items: CartItem[];
     currencyCode?: string | null;
-}): Promise<{
-    success: true;
-    quote: import('../coupons').CouponQuote;
-} | {
-    success: false;
-    error: string;
-    errorKey?: string;
-} | {
-    success: false;
-    error: any;
-    errorKey: string;
-}>;
+}): Promise<import('../coupons').CouponQuoteResult>;

package/lib/server-actions/coupon-actions.es.js

@@ -1,23 +1,31 @@
 "use server";
-import { getCouponQuote as e } from "../coupon-server.es.js";
-import { getServiceRoleSupabaseClient as t } from "@nextblock-cms/db/server";
+import { COUPON_THROTTLED_ERROR_KEY as e, COUPON_THROTTLED_ERROR_MESSAGE as t } from "../coupons.es.js";
+import { consumeCouponValidationToken as n, getCouponQuote as r, resolveCouponValidationThrottleKey as i } from "../coupon-server.es.js";
+import { headers as a } from "next/headers";
+import { getServiceRoleSupabaseClient as o } from "@nextblock-cms/db/server";
 //#region src/lib/server-actions/coupon-actions.ts
-async function n(n) {
+async function s(s) {
 	try {
-		let r = t();
-		return await e({
-			client: r,
-			code: n.code,
-			items: Array.isArray(n.items) ? n.items : [],
-			currencyCode: n.currencyCode
+		let c = await a();
+		if (!n(i(c))) return {
+			success: !1,
+			error: t,
+			errorKey: e
+		};
+		let l = o();
+		return await r({
+			client: l,
+			code: s.code,
+			items: Array.isArray(s.items) ? s.items : [],
+			currencyCode: s.currencyCode
 		});
 	} catch (e) {
 		return console.error("Failed to validate coupon:", e), {
 			success: !1,
-			error: e.message || "Failed to validate coupon.",
+			error: "We couldn't validate this coupon. Try again.",
 			errorKey: "ecommerce.coupon_validation_failed"
 		};
 	}
 }
 //#endregion
-export { n as getCouponQuoteAction };
+export { s as getCouponQuoteAction };