@patientos/website-kit 0.2.4 → 0.2.6

package/dist/{chunk-S7U2HOV7.js → chunk-7ZOQ6UKG.js}

@@ -27,6 +27,7 @@ import {
   createPortalClient,
   describedBy,
   effectiveFee,
+  encodePortalReturnTarget,
   errorCode,
   errorMessage,
   feeNote,
@@ -48,6 +49,7 @@ import {
   isSessionExpired,
   isSlotTakenError,
   loadFlowRecord,
+  normalizePortalApiOrigin,
   observeSessionExpiry,
   once,
   patientos,
@@ -59,11 +61,13 @@ import {
   portalSend,
   readPortalSignedInHint,
   resetSession,
+  restoreApplicationRunToken,
+  saveApplicationRunToken,
   saveFlowRecord,
   signOutOfPortal,
   writePortalSignedInHint,
   zoneAbbr
-} from "./chunk-BHVDY6SC.js";
+} from "./chunk-ZYX4TXBN.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -525,7 +529,7 @@ function toSessionInput(v) {
     dateOfBirth: v.dateOfBirth
   };
 }
-function SignInRamp({ redirect }) {
+function SignInRamp({ redirect, prepareRedirect }) {
   const portal = usePortalClient();
   const [open, setOpen] = React2.useState(false);
   const [email, setEmail] = React2.useState("");
@@ -587,7 +591,7 @@ function SignInRamp({ redirect }) {
           onClick: () => {
             if (busy) return;
             setBusy(true);
-            void portal.requestMagicLink(email.trim(), redirect ?? portal.returnPath()).then((reached) => setOutcome(reached ? "sent" : "failed")).catch(() => setOutcome("failed")).finally(() => {
+            void (prepareRedirect ? prepareRedirect() : Promise.resolve(redirect ?? portal.returnPath())).then((target) => portal.requestMagicLink(email.trim(), target)).then((reached) => setOutcome(reached ? "sent" : "failed")).catch(() => setOutcome("failed")).finally(() => {
               setBusy(false);
             });
           },
@@ -1181,18 +1185,56 @@ function Booking({
 
 // src/certificate-funnel.client.tsx
 import * as React16 from "react";
+import {
+  PatientOSApiError as PatientOSApiError2
+} from "@patientos/public-sdk";
+
+// src/application-run-command.ts
+var inMemoryPromotionKeys = /* @__PURE__ */ new Map();
+function retainedPromotionCommandKey(applicationRunId, storage2, createKey = () => crypto.randomUUID()) {
+  const memoryKey = inMemoryPromotionKeys.get(applicationRunId);
+  if (memoryKey) return memoryKey;
+  const storageKey = `patientos:application-promotion:${applicationRunId}`;
+  try {
+    const retained = storage2?.getItem(storageKey);
+    if (retained) {
+      inMemoryPromotionKeys.set(applicationRunId, retained);
+      return retained;
+    }
+    const created = createKey();
+    inMemoryPromotionKeys.set(applicationRunId, created);
+    storage2?.setItem(storageKey, created);
+    return created;
+  } catch {
+    const created = createKey();
+    inMemoryPromotionKeys.set(applicationRunId, created);
+    return created;
+  }
+}
+var ApplicationRunCommandRetrier = class {
+  keys = /* @__PURE__ */ new Map();
+  async act(client, applicationRunId, input) {
+    const fingerprint = JSON.stringify({ applicationRunId, ...input });
+    const idempotencyKey = this.keys.get(fingerprint) ?? crypto.randomUUID();
+    this.keys.set(fingerprint, idempotencyKey);
+    const command = { ...input, idempotencyKey };
+    const run = await client.actApplicationRun(applicationRunId, command);
+    this.keys.delete(fingerprint);
+    return run;
+  }
+};
 
 // src/certificate-funnel-machine.ts
 var FUNNEL_STEPS = [
   "service",
   "preflight",
+  "intake",
+  "slot",
   "identity",
   "confirm-identity",
-  "intake",
   "medicare",
   "consent",
   "payment",
-  "slot",
   "submitted",
   "unavailable",
   "blocked",
@@ -1201,14 +1243,18 @@ var FUNNEL_STEPS = [
   "session-expired"
 ];
 var REQUIRES_REQUEST = /* @__PURE__ */ new Set([
-  "intake",
   "medicare",
   "consent",
   "payment",
-  "slot",
   "submitted"
 ]);
-var REQUIRES_PREFLIGHT = /* @__PURE__ */ new Set(["identity", "confirm-identity"]);
+var REQUIRES_APPLICATION_RUN = /* @__PURE__ */ new Set([
+  "intake",
+  "slot",
+  "identity",
+  "confirm-identity"
+]);
+var REQUIRES_PREFLIGHT = /* @__PURE__ */ new Set(["identity", "confirm-identity", "intake", "slot"]);
 var REQUIRES_SERVICE = /* @__PURE__ */ new Set([
   "preflight",
   "identity",
@@ -1225,15 +1271,6 @@ var DEFAULT_SHAPE = {
   scheduled: true,
   intakeSteps: 1
 };
-var SPINE_OFFSET = {
-  preflight: 1,
-  identity: 2,
-  // The signed-in confirmation REPLACES the anonymous form; it is the same step.
-  "confirm-identity": 2,
-  intake: 3,
-  medicare: 4,
-  consent: 5
-};
 function intakeSpan(shape) {
   return Math.max(1, Math.trunc(shape.intakeSteps ?? 1) || 1);
 }
@@ -1248,14 +1285,17 @@ function totalSteps(shape) {
 }
 function stepNumberFor(step, shape) {
   const picker = shape.pinned ? 0 : 1;
-  const extra = intakeSpan(shape) - 1;
+  const intake = intakeSpan(shape);
   if (step === "service") return shape.pinned ? void 0 : 1;
-  if (step === "payment") return shape.paid ? picker + 6 + extra : void 0;
-  if (step === "slot")
-    return shape.scheduled ? picker + 5 + extra + (shape.paid ? 2 : 1) : void 0;
-  const offset = SPINE_OFFSET[step];
-  if (offset === void 0) return void 0;
-  return picker + offset + (offset > SPINE_OFFSET.intake ? extra : 0);
+  if (step === "preflight") return picker + 1;
+  if (step === "intake") return picker + 2;
+  if (step === "slot") return shape.scheduled ? picker + 2 + intake : void 0;
+  const identity = picker + 2 + intake + (shape.scheduled ? 1 : 0);
+  if (step === "identity" || step === "confirm-identity") return identity;
+  if (step === "medicare") return identity + 1;
+  if (step === "consent") return identity + 2;
+  if (step === "payment") return shape.paid ? identity + 3 : void 0;
+  return void 0;
 }
 function stepProgress(step, shape = DEFAULT_SHAPE, questionIndex = 0) {
   const total = totalSteps(shape);
@@ -1275,7 +1315,9 @@ function initialFunnelState(serviceKey) {
     // safety check, never past it: pinning chooses the product, not the screening.
     step: serviceKey ? "preflight" : "service",
     serviceKey: serviceKey ?? null,
+    applicationRunId: null,
     requestId: null,
+    scheduled: null,
     gate: null,
     failure: null
   };
@@ -1296,9 +1338,13 @@ function reduceFunnel(state, event) {
     case "SELECT_SERVICE":
       if (state.step !== "service") return stay2(state);
       return go2(state, { step: "preflight", serviceKey: event.serviceKey });
-    case "PREFLIGHT_CONFIRMED":
+    case "RUN_STARTED":
       if (state.step !== "preflight") return stay2(state);
-      return go2(state, { step: "identity" });
+      return go2(state, {
+        step: "intake",
+        applicationRunId: event.applicationRunId,
+        scheduled: event.scheduled
+      });
     case "NEED_DIFFERENT":
       return go2(state, { step: "unavailable" });
     case "SIGNED_IN":
@@ -1311,7 +1357,7 @@ function reduceFunnel(state, event) {
     }
     case "REQUEST_STARTED":
       if (state.step !== "identity" && state.step !== "confirm-identity") return stay2(state);
-      return go2(state, { step: "intake", requestId: event.requestId });
+      return go2(state, { step: "medicare", requestId: event.requestId });
     case "GATE":
       return go2(state, {
         step: event.gate.kind === "escalate" ? "escalate" : "blocked",
@@ -1319,7 +1365,10 @@ function reduceFunnel(state, event) {
       });
     case "ANSWERS_COMPLETE":
       if (state.step !== "intake") return stay2(state);
-      return go2(state, { step: "medicare" });
+      return go2(state, { step: state.scheduled ? "slot" : "identity" });
+    case "RESERVED":
+      if (state.step !== "slot") return stay2(state);
+      return go2(state, { step: "identity" });
     case "MEDICARE_DONE":
       if (state.step !== "medicare") return stay2(state);
       return go2(state, { step: "consent" });
@@ -1348,12 +1397,21 @@ function reduceFunnel(state, event) {
     case "BOOKED":
       if (state.step !== "slot") return stay2(state);
       return go2(state, { step: "submitted" });
+    case "RESERVATION_LOST":
+      if (state.step !== "consent" && state.step !== "payment") return stay2(state);
+      return go2(state, { step: "slot" });
     case "SESSION_EXPIRED":
       if (state.step === "session-expired") return stay2(state);
       return go2(state, { step: "session-expired" });
     case "RETRY_PAYMENT":
       if (state.step !== "payment-failed") return stay2(state);
-      return go2(state, { step: "preflight", requestId: null, failure: null });
+      return go2(state, {
+        step: "preflight",
+        applicationRunId: null,
+        requestId: null,
+        scheduled: null,
+        failure: null
+      });
     case "RESTART": {
       const next = go2(initialFunnelState(), { serviceKey: null });
       return next;
@@ -1366,14 +1424,16 @@ function back(state) {
   switch (state.step) {
     case "preflight":
       return go2(state, { step: "service", serviceKey: null });
+    case "intake":
+      return go2(state, { step: "preflight", applicationRunId: null, scheduled: null });
+    case "slot":
+      return go2(state, { step: "intake" });
     case "identity":
-      return go2(state, { step: "preflight" });
+      return go2(state, { step: state.scheduled ? "slot" : "intake" });
     case "confirm-identity":
       return go2(state, { step: "identity" });
-    case "intake":
-      return go2(state, { step: "identity" });
     case "medicare":
-      return go2(state, { step: "intake" });
+      return go2(state, { step: "identity" });
     case "consent":
       return go2(state, { step: "medicare" });
     case "payment":
@@ -1381,7 +1441,13 @@ function back(state) {
     case "unavailable":
       return go2(state, { step: "service" });
     case "payment-failed":
-      return go2(state, { step: "preflight", requestId: null, failure: null });
+      return go2(state, {
+        step: "preflight",
+        applicationRunId: null,
+        requestId: null,
+        scheduled: null,
+        failure: null
+      });
     default:
       return stay2(state);
   }
@@ -1390,10 +1456,6 @@ function canGoBack(state, opts = {}) {
   if (state.step === "preflight" && opts.pinnedService) return false;
   return back(state).effects.length > 0;
 }
-function resumableRequestId(requestId, submittedSnapshot, currentSnapshot) {
-  if (!requestId || !submittedSnapshot || !currentSnapshot) return null;
-  return submittedSnapshot === currentSnapshot ? requestId : null;
-}
 var TERMINAL_WALL = /* @__PURE__ */ new Set([
   "escalate",
   "blocked",
@@ -1414,18 +1476,26 @@ function popAction(current, search, pinnedService) {
   if (TERMINAL_WALL.has(current.step)) return { type: "refuse" };
   return { type: "restore", state: stepFromUrl(search, pinnedService) };
 }
-var URL_KEYS = { step: "cf", requestId: "cfid", serviceKey: "cfsvc" };
+var URL_KEYS = {
+  step: "cf",
+  requestId: "cfid",
+  applicationRunId: "cfrun",
+  serviceKey: "cfsvc"
+};
 function stepFromUrl(search, pinnedService) {
   const params = new URLSearchParams(search.startsWith("?") ? search.slice(1) : search);
   const rawStep = params.get(URL_KEYS.step) ?? "";
   const requestId = params.get(URL_KEYS.requestId) || null;
+  const applicationRunId = params.get(URL_KEYS.applicationRunId) || null;
   const urlService = params.get(URL_KEYS.serviceKey) || null;
   const serviceKey = pinnedService ?? urlService;
   const known = FUNNEL_STEPS.includes(rawStep) ? rawStep : null;
   const base2 = {
     step: known ?? initialFunnelState(serviceKey).step,
     serviceKey,
+    applicationRunId,
     requestId,
+    scheduled: null,
     // Gate + failure detail are NOT in the URL: they are server verdicts with clinical
     // copy attached, and a URL that could assert "you are blocked" (or, worse, that you
     // are not) would be a forgeable claim about a safety decision.
@@ -1433,6 +1503,9 @@ function stepFromUrl(search, pinnedService) {
     failure: null
   };
   if (REQUIRES_REQUEST.has(base2.step) && !base2.requestId) {
+    return { ...base2, step: applicationRunId ? "identity" : serviceKey ? "preflight" : "service" };
+  }
+  if (REQUIRES_APPLICATION_RUN.has(base2.step) && !base2.applicationRunId) {
     return { ...base2, step: serviceKey ? "preflight" : "service" };
   }
   if (base2.step === "payment-failed" && !base2.requestId) {
@@ -1444,7 +1517,7 @@ function stepFromUrl(search, pinnedService) {
   if (REQUIRES_SERVICE.has(base2.step) && !base2.serviceKey) {
     return { ...base2, step: "service" };
   }
-  if (REQUIRES_PREFLIGHT.has(base2.step)) {
+  if (REQUIRES_PREFLIGHT.has(base2.step) && !base2.applicationRunId) {
     return { ...base2, step: base2.serviceKey ? "preflight" : "service" };
   }
   if (base2.step === "blocked" || base2.step === "escalate") {
@@ -1456,6 +1529,7 @@ function urlFromState(state, opts = {}) {
   const params = new URLSearchParams();
   params.set(URL_KEYS.step, state.step);
   if (state.requestId) params.set(URL_KEYS.requestId, state.requestId);
+  if (state.applicationRunId) params.set(URL_KEYS.applicationRunId, state.applicationRunId);
   if (state.serviceKey && !opts.pinnedService) params.set(URL_KEYS.serviceKey, state.serviceKey);
   return params.toString();
 }
@@ -1685,17 +1759,17 @@ function PaymentStep({
       const res = await client.payConfirm(requestId);
       switch (res.status) {
         case "awaiting_slot":
-          onOutcome({ kind: "awaiting_slot" });
+          await onOutcome({ kind: "awaiting_slot" });
           return;
         case "ready":
-          onOutcome({ kind: "ready" });
+          await onOutcome({ kind: "ready" });
           return;
         case "requires_action":
           setError("Your bank needs to verify this card. Please try again.");
           setPhase("ready");
           return;
         case "payment_failed":
-          onOutcome({
+          await onOutcome({
             kind: "failed",
             message: "Your card was declined and the pre-authorisation could not be completed."
           });
@@ -2291,13 +2365,43 @@ function IdentityStep(props) {
     },
     [client]
   );
+  const promotionIdempotencyRef = React8.useRef(null);
+  const promotionIdempotencyKey = React8.useCallback((applicationRunId) => {
+    if (promotionIdempotencyRef.current) return promotionIdempotencyRef.current;
+    const retained = retainedPromotionCommandKey(
+      applicationRunId,
+      typeof window === "undefined" ? null : window.sessionStorage
+    );
+    promotionIdempotencyRef.current = retained;
+    return retained;
+  }, []);
   const startRequest = React8.useCallback(
-    async (capturedIdentity) => {
-      const { requestId } = await client.startRequest({ serviceKey: props.serviceKey });
-      onStarted(requestId, capturedIdentity);
+    async (promotion) => {
+      if (!props.applicationRunId) {
+        return (await client.startRequest({ serviceKey: props.serviceKey })).requestId;
+      }
+      const result = await client.promoteApplicationRun(props.applicationRunId, {
+        ...promotion,
+        idempotencyKey: promotionIdempotencyKey(props.applicationRunId)
+      });
+      return result.requestId;
     },
-    [client, props.serviceKey, onStarted]
+    [client, promotionIdempotencyKey, props.applicationRunId, props.serviceKey]
   );
+  const prepareSignInRedirect = React8.useCallback(async () => {
+    if (!props.applicationRunId || typeof window === "undefined") return portal.returnPath();
+    const { handoffId } = await client.createApplicationRunHandoff(props.applicationRunId);
+    let target;
+    try {
+      target = new URL(window.location.href);
+    } catch {
+      return portal.returnPath();
+    }
+    target.searchParams.set("cf", "confirm-identity");
+    target.searchParams.set("cfrun", props.applicationRunId);
+    target.searchParams.set("cfhandoff", handoffId);
+    return portal.returnPath(target.href);
+  }, [client, portal, props.applicationRunId]);
   async function handleConfirmSignedIn() {
     if (busy) return;
     setBusy(true);
@@ -2311,13 +2415,15 @@ function IdentityStep(props) {
         return;
       }
       adoptClaimToken(client, claim.claimToken);
-      await startRequest({
+      const confirmedIdentity = {
         givenName: prefill?.givenName ?? "",
         familyName: prefill?.familyName ?? "",
         email: prefill?.email ?? "",
         phone: prefill?.phone ?? "",
         dateOfBirth: prefill?.dateOfBirth ?? ""
-      });
+      };
+      const requestId = await startRequest();
+      onStarted(requestId, confirmedIdentity);
     } catch (err) {
       setBusy(false);
       setError(errorMessage(err, "We could not start your request. Please try again."));
@@ -2342,17 +2448,29 @@ function IdentityStep(props) {
     setBusy(true);
     setError(null);
     try {
-      await client.startSession({
-        // SPLIT names — never a joined `fullName` (PAT-776).
-        ...toSessionInput(identity),
-        turnstileToken: turnstileToken ?? void 0
-      });
-      persistClaimToken(client);
-      const { requestId } = await client.startRequest({ serviceKey: props.serviceKey });
-      await client.saveAddress(requestId, {
-        address: address.place.address,
-        placeId: address.place?.placeId ?? null
-      });
+      let requestId;
+      if (props.applicationRunId) {
+        requestId = await startRequest({
+          identity: toSessionInput(identity),
+          address: {
+            address: address.place.address,
+            placeId: address.place?.placeId ?? null
+          },
+          turnstileToken: turnstileToken ?? void 0
+        });
+        persistClaimToken(client);
+      } else {
+        await client.startSession({
+          ...toSessionInput(identity),
+          turnstileToken: turnstileToken ?? void 0
+        });
+        persistClaimToken(client);
+        requestId = await startRequest();
+        await client.saveAddress(requestId, {
+          address: address.place.address,
+          placeId: address.place?.placeId ?? null
+        });
+      }
       onStarted(requestId, identity);
     } catch (err) {
       setBusy(false);
@@ -2376,6 +2494,10 @@ function IdentityStep(props) {
       setError(errorMessage(err, "We could not start your request. Please try again."));
     }
   }
+  const reservationNote = props.reservationExpiresAt ? ` Your appointment time is reserved until ${new Intl.DateTimeFormat("en-AU", {
+    hour: "numeric",
+    minute: "2-digit"
+  }).format(new Date(props.reservationExpiresAt))}.` : "";
   if (mode === "confirm-identity") {
     return /* @__PURE__ */ jsxs8(
       FlowShell,
@@ -2383,7 +2505,7 @@ function IdentityStep(props) {
         ...progress,
         stepKey: "confirm-identity",
         heading: "Confirm your details",
-        subheading: detailsSubheading(props.serviceLabel),
+        subheading: `${detailsSubheading(props.serviceLabel)}${reservationNote}`,
         onBack,
         documentTitle,
         children: [
@@ -2408,12 +2530,12 @@ function IdentityStep(props) {
       ...progress,
       stepKey: "identity",
       heading: "Your details",
-      subheading: detailsSubheading(props.serviceLabel),
+      subheading: `${detailsSubheading(props.serviceLabel)}${reservationNote}`,
       onBack,
       documentTitle,
       footer: probing ? void 0 : /* @__PURE__ */ jsx10(FlowButton, { type: "submit", form: "sk-cf-identity", variant: "primary", busy, children: busy ? "Starting\u2026" : "Continue" }),
       children: probing ? /* @__PURE__ */ jsx10(FlowLoading, { message: "Checking if you\u2019re signed in\u2026" }) : /* @__PURE__ */ jsxs8(Fragment3, { children: [
-        /* @__PURE__ */ jsx10(SignInRamp, { redirect: props.returnUrl }),
+        /* @__PURE__ */ jsx10(SignInRamp, { redirect: props.returnUrl, prepareRedirect: prepareSignInRedirect }),
         /* @__PURE__ */ jsx10(FlowErrorSummary, { fields: invalid }),
         /* @__PURE__ */ jsxs8("form", { id: "sk-cf-identity", onSubmit: (e) => void handleSubmitAnonymous(e), noValidate: true, children: [
           /* @__PURE__ */ jsx10(SummarisedFieldErrors, { children: /* @__PURE__ */ jsx10(
@@ -2743,6 +2865,9 @@ function intakeRowsAction(rows) {
 function IntakeStep({
   client,
   requestId,
+  applicationRunId,
+  applicationRunRevision = 0,
+  onApplicationRunChange,
   questionSetId,
   resolveError,
   onGate,
@@ -2756,6 +2881,15 @@ function IntakeStep({
   const [draft, setDraft] = React10.useState(null);
   const [busy, setBusy] = React10.useState(false);
   const [error2, setError] = React10.useState(null);
+  const [runRevision, setRunRevision] = React10.useState(applicationRunRevision);
+  const [completed, setCompleted] = React10.useState(false);
+  const [emptyCompletionRetry, setEmptyCompletionRetry] = React10.useState(0);
+  const commandRetrier = React10.useRef(new ApplicationRunCommandRetrier()).current;
+  const pendingCompletionRevision = React10.useRef(null);
+  const emptyCompletionAttempted = React10.useRef(false);
+  React10.useEffect(() => {
+    setRunRevision(applicationRunRevision);
+  }, [applicationRunRevision]);
   const [reload2, setReload] = React10.useState(0);
   const progress = useStepProgress("intake", index);
   React10.useEffect(() => {
@@ -2784,8 +2918,28 @@ function IntakeStep({
     };
   }, [client, questionSetId, reload2]);
   React10.useEffect(() => {
-    if (questions && questions.length === 0 && !busy) onComplete();
-  }, [questions, busy, onComplete]);
+    if (!questions || questions.length !== 0 || busy || completed || emptyCompletionAttempted.current) return;
+    emptyCompletionAttempted.current = true;
+    if (!applicationRunId) {
+      setCompleted(true);
+      onComplete();
+      return;
+    }
+    setBusy(true);
+    void commandRetrier.act(client, applicationRunId, {
+      expectedRevision: runRevision,
+      action: { type: "complete_screening" }
+    }).then((run) => {
+      setRunRevision(run.revision);
+      onApplicationRunChange?.(run);
+      const exit = gateToExit(run.gate);
+      if (exit) onGate(exit);
+      else {
+        setCompleted(true);
+        onComplete();
+      }
+    }).catch((e) => setError(errorMessage(e, "We could not complete the screening. Please try again."))).finally(() => setBusy(false));
+  }, [questions, busy, completed, emptyCompletionRetry, applicationRunId, client, runRevision, onApplicationRunChange, onGate, onComplete]);
   const visible = React10.useMemo(
     () => questions ? visibleQuestions(questions, answers) : [],
     [questions, answers]
@@ -2795,17 +2949,60 @@ function IntakeStep({
   React10.useEffect(() => {
     setDraft(current ? answers[current.key] ?? null : null);
   }, [current?.key]);
+  async function retryPendingCompletion() {
+    if (busy || !applicationRunId || pendingCompletionRevision.current == null) return;
+    setBusy(true);
+    setError(null);
+    try {
+      const completedRun = await commandRetrier.act(client, applicationRunId, {
+        expectedRevision: pendingCompletionRevision.current,
+        action: { type: "complete_screening" }
+      });
+      pendingCompletionRevision.current = null;
+      setRunRevision(completedRun.revision);
+      onApplicationRunChange?.(completedRun);
+      const completedExit = gateToExit(completedRun.gate);
+      if (completedExit) onGate(completedExit);
+      else {
+        setCompleted(true);
+        onComplete();
+      }
+    } catch (e) {
+      setError(errorMessage(e, "We could not complete the screening. Please try again."));
+    } finally {
+      setBusy(false);
+    }
+  }
   async function record(value) {
     if (!current || busy) return;
-    const next = { ...answers, [current.key]: value };
-    setAnswers(next);
+    if (applicationRunId && pendingCompletionRevision.current != null) {
+      await retryPendingCompletion();
+      return;
+    }
     setBusy(true);
     setError(null);
+    const next = { ...answers, [current.key]: value };
+    setAnswers(next);
     try {
-      const { gate } = await client.saveAnswers(
-        requestId,
-        next
-      );
+      let savedRun = null;
+      let gate;
+      if (applicationRunId) {
+        savedRun = await commandRetrier.act(client, applicationRunId, {
+          expectedRevision: runRevision,
+          action: {
+            type: "save_answers",
+            answers: next
+          }
+        });
+        setRunRevision(savedRun.revision);
+        onApplicationRunChange?.(savedRun);
+        gate = savedRun.gate;
+      } else {
+        gate = (await client.saveAnswers(
+          requestId ?? "",
+          next
+        )).gate;
+      }
       const exit = gateToExit(gate);
       if (exit) {
         onGate(exit);
@@ -2813,7 +3010,25 @@ function IntakeStep({
       }
       const nextVisible = questions ? visibleQuestions(questions, next) : [];
       if (index + 1 >= nextVisible.length) {
-        onComplete();
+        if (applicationRunId && savedRun) {
+          pendingCompletionRevision.current = savedRun.revision;
+          const completedRun = await commandRetrier.act(client, applicationRunId, {
+            expectedRevision: savedRun.revision,
+            action: { type: "complete_screening" }
+          });
+          pendingCompletionRevision.current = null;
+          setRunRevision(completedRun.revision);
+          onApplicationRunChange?.(completedRun);
+          const completedExit = gateToExit(completedRun.gate);
+          if (completedExit) onGate(completedExit);
+          else {
+            setCompleted(true);
+            onComplete();
+          }
+        } else {
+          setCompleted(true);
+          onComplete();
+        }
         return;
       }
       setIndex(index + 1);
@@ -2859,6 +3074,23 @@ function IntakeStep({
       }
     );
   }
+  if (questions.length === 0) {
+    return /* @__PURE__ */ jsx12(
+      IntakeInterstitial,
+      {
+        progress,
+        documentTitle,
+        onBack,
+        error: error2,
+        message: busy || !error2 ? "Completing your screening\u2026" : void 0,
+        onRetry: error2 ? () => {
+          emptyCompletionAttempted.current = false;
+          setError(null);
+          setEmptyCompletionRetry((value) => value + 1);
+        } : void 0
+      }
+    );
+  }
   if (!current) {
     return /* @__PURE__ */ jsx12(
       IntakeInterstitial,
@@ -2906,7 +3138,17 @@ function IntakeStep({
             idPrefix: `sk-cf-${index}`
           }
         ),
-        /* @__PURE__ */ jsx12(FlowError, { children: error2 })
+        /* @__PURE__ */ jsx12(FlowError, { children: error2 }),
+        error2 && pendingCompletionRevision.current != null && /* @__PURE__ */ jsx12(
+          FlowButton,
+          {
+            type: "button",
+            variant: "primary",
+            busy,
+            onClick: () => void retryPendingCompletion(),
+            children: "Try again"
+          }
+        )
       ]
     }
   );
@@ -3310,7 +3552,7 @@ function ConsentStep({
         onGate(gate ?? { kind: "block" });
         return;
       }
-      onSubmitted(result.status, gate);
+      await onSubmitted(result.status, gate);
     } catch (err) {
       setBusy(false);
       setError(errorMessage(err, "We could not submit your request. Please try again."));
@@ -3415,6 +3657,10 @@ function SlotCancelControl({
 function SlotStep({
   client,
   requestId,
+  applicationRunId,
+  applicationRunRevision = 0,
+  onApplicationRunChange,
+  replacementReservation = false,
   appointmentTypeId,
   isFree,
   onBooked,
@@ -3425,13 +3671,15 @@ function SlotStep({
   const [cancelling, setCancelling] = React13.useState(false);
   const [confirmCancel, setConfirmCancel] = React13.useState(false);
   const [cancelError, setCancelError] = React13.useState(null);
+  const commandRetrier = React13.useRef(new ApplicationRunCommandRetrier()).current;
   const progress = useStepProgress("slot");
   async function releaseAndExit() {
     if (cancelling) return;
     setCancelling(true);
     setCancelError(null);
     try {
-      await client.cancelRequest(requestId);
+      if (applicationRunId) await client.closeApplicationRun(applicationRunId);
+      else await client.cancelRequest(requestId ?? "");
       onCancelled();
     } catch (err) {
       setCancelling(false);
@@ -3457,18 +3705,33 @@ function SlotStep({
             appointmentTypeId,
             mode: "request",
             onConfirm: async (slot, tz) => {
-              const hold = await client.createHold({
-                practitionerId: slot.practitionerId,
-                appointmentTypeId,
-                slotStart: slot.start,
-                serviceRequestId: requestId
-              });
-              await client.bookRequest(requestId, {
-                practitionerId: slot.practitionerId,
-                slotStart: slot.start,
-                holdId: hold.holdId,
-                holderToken: hold.holderToken
-              });
+              if (applicationRunId) {
+                const run = await commandRetrier.act(client, applicationRunId, {
+                  expectedRevision: applicationRunRevision,
+                  action: {
+                    type: "reserve_slot",
+                    practitionerId: slot.practitionerId,
+                    slotStart: slot.start
+                  }
+                });
+                onApplicationRunChange?.(run);
+              } else {
+                const hold = replacementReservation ? await client.replaceRequestSlot(requestId ?? "", {
+                  practitionerId: slot.practitionerId,
+                  slotStart: slot.start
+                }) : await client.createHold({
+                  practitionerId: slot.practitionerId,
+                  appointmentTypeId,
+                  slotStart: slot.start,
+                  serviceRequestId: requestId
+                });
+                await client.bookRequest(requestId ?? "", {
+                  practitionerId: slot.practitionerId,
+                  slotStart: slot.start,
+                  holdId: hold.holdId,
+                  holderToken: hold.holderToken
+                });
+              }
               onBooked(formatBookedFor(slot.start, tz));
             }
           }
@@ -3485,11 +3748,12 @@ function SlotStep({
               clinicPhone
             ] })
           ] }),
-          isFree === false && /* @__PURE__ */ jsxs13("p", { className: "sk-slots__empty-note", children: [
+          isFree === false && !applicationRunId && /* @__PURE__ */ jsxs13("p", { className: "sk-slots__empty-note", children: [
             "You haven\u2019t been charged \u2014 only a hold was placed on your card.",
             " ",
             HOLD_RELEASE_NOTE
-          ] })
+          ] }),
+          applicationRunId && /* @__PURE__ */ jsx15("p", { className: "sk-slots__empty-note", children: "We\u2019ll reserve this time for 10 minutes while you confirm your details and payment." })
         ] }),
         /* @__PURE__ */ jsx15(
           SlotCancelControl,
@@ -4035,6 +4299,13 @@ function CertificateFunnelClient(props) {
   }
   return /* @__PURE__ */ jsx19(PortalProvider, { client: portalClient, children: /* @__PURE__ */ jsx19(Funnel, { ...props }) });
 }
+var RESERVATION_REQUIRED_STEPS = /* @__PURE__ */ new Set([
+  "identity",
+  "confirm-identity",
+  "medicare",
+  "consent",
+  "payment"
+]);
 function Funnel({
   publicApi,
   services = [],
@@ -4044,6 +4315,7 @@ function Funnel({
   serviceKey: pinnedService
 }) {
   const api = publicApi;
+  const portalClient = usePortalClient();
   const rawClient = React16.useMemo(
     () => patientos({ publishableKey: api.publishableKey, apiBase: api.apiBase }),
     [api.publishableKey, api.apiBase]
@@ -4051,15 +4323,17 @@ function Funnel({
   const pinned = React16.useMemo(() => ({ pinnedService: !!pinnedService }), [pinnedService]);
   const [state, setState] = React16.useState(null);
   const [flow, setFlow] = React16.useState(null);
+  const [applicationRun, setApplicationRun] = React16.useState(null);
   const [flowChecked, setFlowChecked] = React16.useState(false);
   const [capturing, setCapturing] = React16.useState(false);
   const [cancellingLostSlot, setCancellingLostSlot] = React16.useState(false);
   const [lostSlotCancelError, setLostSlotCancelError] = React16.useState(null);
   const [resolveError, setResolveError] = React16.useState(null);
+  const [reopeningScreening, setReopeningScreening] = React16.useState(false);
+  const [reopenScreeningError, setReopenScreeningError] = React16.useState(null);
+  const applicationRunCommands = React16.useRef(new ApplicationRunCommandRetrier()).current;
+  const beginAttemptRef = React16.useRef(null);
   const [identityDraft, setIdentityDraft] = React16.useState(null);
-  const [submittedIdentitySnapshot, setSubmittedIdentitySnapshot] = React16.useState(
-    null
-  );
   const onDraftChange = React16.useCallback((draft) => setIdentityDraft(draft), []);
   const [medicareDraft, setMedicareDraft] = React16.useState(null);
   const onMedicareDraftChange = React16.useCallback(
@@ -4097,6 +4371,7 @@ function Funnel({
     null
   );
   const [questionCounts, setQuestionCounts] = React16.useState({});
+  const [enabledServiceKeys, setEnabledServiceKeys] = React16.useState(null);
   React16.useEffect(() => {
     let alive = true;
     void (async () => {
@@ -4109,7 +4384,10 @@ function Funnel({
         const nextFees = {};
         const nextDeliveryModes = {};
         const nextCounts = {};
+        const nextEnabledKeys = /* @__PURE__ */ new Set();
         for (const svc of svcs) {
+          if (svc.anonymousApplicationRuns === false) continue;
+          nextEnabledKeys.add(svc.key);
           const option = pickDeliveryOption(options, svc.id);
           nextFees[svc.key] = effectiveFee(svc, option);
           if (option) nextDeliveryModes[svc.key] = option.deliveryMode;
@@ -4118,10 +4396,12 @@ function Funnel({
         setFees(nextFees);
         setDeliveryModes(nextDeliveryModes);
         setQuestionCounts(nextCounts);
+        setEnabledServiceKeys(nextEnabledKeys);
       } catch {
         if (alive) {
           setFees({});
           setDeliveryModes({});
+          setEnabledServiceKeys(/* @__PURE__ */ new Set());
         }
       }
     })();
@@ -4148,66 +4428,221 @@ function Funnel({
     return () => window.removeEventListener("popstate", onPop);
   }, [dispatch, pinnedService, pinned]);
   const requestId = state?.requestId ?? null;
+  const applicationRunId = state?.applicationRunId ?? null;
+  const flowId = requestId ?? applicationRunId;
   React16.useEffect(() => {
-    if (!requestId) {
+    if (!flowId) {
       setFlow(null);
       setFlowChecked(false);
+      setApplicationRun(null);
       return;
     }
-    if (flow) {
-      setFlowChecked(true);
+    if (!flow) setFlow(loadFlowRecord(flowId));
+    setFlowChecked(true);
+  }, [flowId, flow]);
+  const hydrateRunFlow = React16.useCallback(async (run) => {
+    const existing = loadFlowRecord(run.id);
+    if (existing) {
+      setFlow(existing);
       return;
     }
-    setFlow(loadFlowRecord(requestId));
-    setFlowChecked(true);
-  }, [requestId, flow]);
-  const captureFlow = React16.useCallback(
-    async (newRequestId, serviceKey, identity) => {
+    const [svc, options] = await Promise.all([
+      findServiceByKey(client, run.serviceKey),
+      once(client.subscribeDeliveryOptions)
+    ]);
+    const option = options.find((candidate) => candidate.id === run.serviceDeliveryOptionId);
+    if (!svc || !option) throw new Error("This application option is no longer available.");
+    const record = {
+      serviceId: svc.id,
+      serviceKey: svc.key,
+      serviceLabel: svc.label,
+      deliveryOptionId: option.id,
+      appointmentTypeId: run.appointmentTypeId ?? "",
+      feeAmount: option.feeOverride ?? svc.feeAmount,
+      requiresPayment: svc.requiresPayment,
+      deliveryMode: run.deliveryMode,
+      givenName: "",
+      familyName: "",
+      dateOfBirth: null,
+      questionSetId: run.questionSetId,
+      bookedFor: void 0
+    };
+    saveFlowRecord(run.id, record);
+    setFlow(record);
+  }, [client]);
+  React16.useEffect(() => {
+    if (!applicationRunId || applicationRun?.id === applicationRunId) return;
+    let alive = true;
+    void (async () => {
+      const params = new URLSearchParams(window.location.search);
+      const handoffId = params.get("cfhandoff");
+      if (handoffId) {
+        const redeemed = await portalClient.redeemApplicationRunHandoff(handoffId);
+        if (!redeemed || !alive) throw new Error("This sign-in continuation has expired.");
+        rawClient.setApplicationRunToken(applicationRunId, redeemed.capabilityToken);
+        saveApplicationRunToken(rawClient, applicationRunId);
+        setApplicationRun(redeemed.run);
+        await hydrateRunFlow(redeemed.run);
+        const next = {
+          ...stateRef.current ?? initialFunnelState(pinnedService),
+          step: redeemed.run.deliveryMode === "scheduled" && !redeemed.run.reservation ? "slot" : "confirm-identity",
+          applicationRunId,
+          serviceKey: redeemed.run.serviceKey,
+          scheduled: redeemed.run.deliveryMode === "scheduled"
+        };
+        dispatch({ type: "RESTORE", state: next });
+        params.delete("cfhandoff");
+        window.history.replaceState(null, "", `${window.location.pathname}?${params.toString()}${window.location.hash}`);
+        return;
+      }
+      if (!restoreApplicationRunToken(rawClient, applicationRunId)) {
+        throw new Error("This application can only be resumed from its secure sign-in link.");
+      }
+      const resumed = await rawClient.resumeApplicationRun(applicationRunId);
+      if (!alive) return;
+      setApplicationRun(resumed);
+      await hydrateRunFlow(resumed);
+      const current = stateRef.current;
+      if (current) {
+        dispatch({
+          type: "RESTORE",
+          state: {
+            ...current,
+            step: resumed.deliveryMode === "scheduled" && !resumed.reservation && RESERVATION_REQUIRED_STEPS.has(current.step) ? "slot" : current.step,
+            serviceKey: resumed.serviceKey,
+            scheduled: resumed.deliveryMode === "scheduled",
+            gate: resumed.gate ? { kind: resumed.gate.verdict === "escalate" ? "escalate" : "block", ruleId: resumed.gate.ruleId, message: resumed.gate.message } : current.gate
+          }
+        });
+      }
+    })().catch((err) => {
+      if (alive) setResolveError(err instanceof Error ? err.message : "We could not resume this application.");
+    });
+    return () => {
+      alive = false;
+    };
+  }, [applicationRunId, applicationRun?.id, dispatch, hydrateRunFlow, pinnedService, portalClient, rawClient]);
+  const reopenScreening = React16.useCallback(async () => {
+    if (!applicationRunId || !applicationRun || applicationRun.status !== "screening_complete" && applicationRun.status !== "reserved") {
+      return;
+    }
+    setReopeningScreening(true);
+    setReopenScreeningError(null);
+    try {
+      const run = await applicationRunCommands.act(client, applicationRunId, {
+        expectedRevision: applicationRun.revision,
+        action: { type: "reopen_screening" }
+      });
+      setApplicationRun(run);
+    } catch (err) {
+      setReopenScreeningError(
+        errorMessage(err, "We could not reopen your screening. Please try again.")
+      );
+    } finally {
+      setReopeningScreening(false);
+    }
+  }, [applicationRun, applicationRunCommands, applicationRunId, client]);
+  React16.useEffect(() => {
+    if (state?.step === "intake") void reopenScreening();
+  }, [reopenScreening, state?.step]);
+  const beginRun = React16.useCallback(async (serviceKey) => {
+    if (capturing) return;
+    setCapturing(true);
+    setResolveError(null);
+    try {
       const svc = await findServiceByKey(client, serviceKey);
-      if (!svc) throw new Error("This certificate type is not currently available.");
+      if (!svc || svc.anonymousApplicationRuns === false) {
+        throw new Error("This certificate type is not currently available.");
+      }
       const option = await findDeliveryOption(client, svc.id);
       if (!option) throw new Error("No booking option is available for this service.");
+      let attempt = beginAttemptRef.current;
+      if (!attempt || attempt.serviceKey !== serviceKey || attempt.serviceDeliveryOptionId !== option.id) {
+        const bytes = new Uint8Array(32);
+        crypto.getRandomValues(bytes);
+        attempt = {
+          serviceKey,
+          serviceDeliveryOptionId: option.id,
+          idempotencyKey: crypto.randomUUID(),
+          capabilityToken: Array.from(
+            bytes,
+            (b) => b.toString(16).padStart(2, "0")
+          ).join("")
+        };
+        beginAttemptRef.current = attempt;
+      }
+      const result = await client.beginApplicationRun(attempt);
+      beginAttemptRef.current = null;
+      saveApplicationRunToken(client, result.run.id);
       const record = {
         serviceId: svc.id,
         serviceKey: svc.key,
         serviceLabel: svc.label,
         deliveryOptionId: option.id,
         appointmentTypeId: option.appointmentTypeId ?? "",
-        // The EFFECTIVE fee: the option's override wins over the service base (PAT-710).
         feeAmount: option.feeOverride ?? svc.feeAmount,
-        // Whether money is taken AT ALL — a separate fact from the amount, and the one
-        // the consent wording branches on. A null fee alone could not distinguish
-        // "bulk billed" from "not resolved yet" (PAT-853).
         requiresPayment: svc.requiresPayment,
         deliveryMode: option.deliveryMode,
-        givenName: identity.givenName,
-        familyName: identity.familyName,
-        dateOfBirth: identity.dateOfBirth || null,
+        givenName: "",
+        familyName: "",
+        dateOfBirth: null,
         questionSetId: svc.questionSetId
       };
-      saveFlowRecord(newRequestId, record);
+      saveFlowRecord(result.run.id, record);
       setFlow(record);
-    },
-    [client]
-  );
-  const back2 = React16.useCallback(() => dispatch({ type: "BACK" }), [dispatch]);
+      setApplicationRun(result.run);
+      dispatch({
+        type: "RUN_STARTED",
+        applicationRunId: result.run.id,
+        scheduled: result.run.deliveryMode === "scheduled"
+      });
+    } catch (err) {
+      setResolveError(err instanceof Error ? err.message : "We could not start your application.");
+    } finally {
+      setCapturing(false);
+    }
+  }, [capturing, client, dispatch]);
+  const back2 = React16.useCallback(() => {
+    const runId = state?.applicationRunId;
+    if (state?.step === "intake" && runId) {
+      void client.closeApplicationRun(runId).finally(() => dispatch({ type: "BACK" }));
+      return;
+    }
+    const returnsToIntake = state?.step === "slot" || state?.step === "identity" && state.scheduled === false;
+    if (returnsToIntake && runId && applicationRun && (applicationRun.status === "screening_complete" || applicationRun.status === "reserved")) {
+      void applicationRunCommands.act(client, runId, {
+        expectedRevision: applicationRun.revision,
+        action: { type: "reopen_screening" }
+      }).then((run) => {
+        setApplicationRun(run);
+        dispatch({ type: "BACK" });
+      }).catch((err) => {
+        setResolveError(errorMessage(err, "We could not reopen your screening. Please try again."));
+      });
+      return;
+    }
+    dispatch({ type: "BACK" });
+  }, [applicationRun, applicationRunCommands, client, dispatch, state]);
   const restart = React16.useCallback(() => {
     setIdentityDraft(null);
-    setSubmittedIdentitySnapshot(null);
     setMedicareDraft(null);
     dispatch({ type: "RESTART" });
   }, [dispatch]);
   const retryPayment = React16.useCallback(() => {
-    setSubmittedIdentitySnapshot(null);
     dispatch({ type: "RETRY_PAYMENT" });
   }, [dispatch]);
   const cancelLostSlot = React16.useCallback(async () => {
     const id = state?.requestId;
-    if (!id || cancellingLostSlot) return;
+    const runId = state?.applicationRunId;
+    if (!id && !runId || cancellingLostSlot) return;
     setCancellingLostSlot(true);
     setLostSlotCancelError(null);
     try {
-      await cancelRequestThenRestart(client, id, restart);
+      if (id) await cancelRequestThenRestart(client, id, restart);
+      else if (runId) {
+        await client.closeApplicationRun(runId);
+        restart();
+      }
       setCancellingLostSlot(false);
     } catch (err) {
       setCancellingLostSlot(false);
@@ -4215,7 +4650,7 @@ function Funnel({
         errorCode(err) === "not_cancellable" ? "This request can no longer be cancelled \u2014 please call the clinic." : "We could not cancel your request. Please try again."
       );
     }
-  }, [cancellingLostSlot, client, restart, state?.requestId]);
+  }, [cancellingLostSlot, client, restart, state?.applicationRunId, state?.requestId]);
   const chosenKey = state?.serviceKey ?? null;
   const step = state?.step;
   const shape = React16.useMemo(() => {
@@ -4241,16 +4676,32 @@ function Funnel({
   }, [flow, fees, pinnedService, chosenKey, step, questionCounts]);
   if (!state) return /* @__PURE__ */ jsx19(FlowLoading, {});
   const title = stepTitle(state.step, clinicName);
-  const service = services.find((s) => s.key === state.serviceKey) ?? null;
+  const selectableServices = enabledServiceKeys ? services.filter((candidate) => enabledServiceKeys.has(candidate.key)) : [];
+  const service = selectableServices.find((candidate) => candidate.key === state.serviceKey) ?? null;
   const serviceLabel = service?.label ?? "certificate";
-  const identitySnapshot = identityDraft ? JSON.stringify(identityDraft) : null;
-  const resumeRequestId = resumableRequestId(
-    state.requestId,
-    submittedIdentitySnapshot,
-    identitySnapshot
-  );
   const showBack = canGoBack(state, pinned);
   const flowLost = slotFlowIsLost(flowChecked, flow, capturing);
+  const reservationWasLost = (err) => {
+    const code2 = errorCode(err);
+    return code2 === "reservation_expired" || code2 === "slot_taken";
+  };
+  async function bookReservedSlot() {
+    const id = requestId;
+    const reservation = applicationRun?.reservation;
+    if (!id || !reservation) {
+      throw new PatientOSApiError2({
+        status: 409,
+        code: "reservation_expired",
+        message: "Your appointment reservation has expired. Please choose another time.",
+        path: `/requests/${id ?? "unknown"}/book`
+      });
+    }
+    await client.bookRequest(id, {
+      practitionerId: reservation.practitionerId,
+      slotStart: reservation.slotStart,
+      holdId: reservation.holdId
+    });
+  }
   const quietMoney = HOLDLESS_STEPS.has(state.step) || state.step === "consent" || state.step === "payment";
   const rail = /* @__PURE__ */ jsx19(
     TrustRail,
@@ -4265,7 +4716,7 @@ function Funnel({
         return /* @__PURE__ */ jsx19(
           ServiceStep,
           {
-            services,
+            services: selectableServices,
             fees,
             deliveryModes,
             heading: heading2,
@@ -4276,69 +4727,111 @@ function Funnel({
           }
         );
       case "preflight":
-        return /* @__PURE__ */ jsx19(
-          PreflightStep,
-          {
-            documentTitle: title,
-            onConfirm: () => dispatch({ type: "PREFLIGHT_CONFIRMED" }),
-            onExit: (gate) => dispatch({ type: "GATE", gate }),
-            onOutOfScope: () => dispatch({ type: "NEED_DIFFERENT" }),
-            onBack: showBack ? back2 : void 0
-          }
-        );
+        if (!enabledServiceKeys) return /* @__PURE__ */ jsx19(FlowLoading, {});
+        if (!state.serviceKey || !enabledServiceKeys.has(state.serviceKey)) {
+          return /* @__PURE__ */ jsxs17(
+            FlowShell,
+            {
+              ...stepProgress("preflight", shape),
+              stepKey: "preflight:unavailable",
+              heading: "This certificate type is unavailable",
+              documentTitle: title,
+              onBack: showBack ? back2 : void 0,
+              children: [
+                /* @__PURE__ */ jsx19(FlowError, { children: "This certificate type is not currently available through this website." }),
+                /* @__PURE__ */ jsx19(
+                  FlowButton,
+                  {
+                    type: "button",
+                    variant: "primary",
+                    onClick: () => dispatch({ type: "NEED_DIFFERENT" }),
+                    children: "Choose another option"
+                  }
+                )
+              ]
+            }
+          );
+        }
+        return /* @__PURE__ */ jsxs17("div", { children: [
+          /* @__PURE__ */ jsx19(
+            PreflightStep,
+            {
+              documentTitle: title,
+              onConfirm: () => void beginRun(state.serviceKey ?? ""),
+              onExit: (gate) => dispatch({ type: "GATE", gate }),
+              onOutOfScope: () => dispatch({ type: "NEED_DIFFERENT" }),
+              onBack: showBack ? back2 : void 0
+            }
+          ),
+          /* @__PURE__ */ jsx19(FlowError, { children: resolveError })
+        ] });
       case "identity":
       case "confirm-identity":
-        return /* @__PURE__ */ jsxs17(
-          "div",
-          {
-            onSubmitCapture: (event) => {
-              if (!resumeRequestId) return;
-              event.preventDefault();
-              event.stopPropagation();
-              setResolveError(null);
-              dispatch({ type: "REQUEST_STARTED", requestId: resumeRequestId });
-            },
-            children: [
-              /* @__PURE__ */ jsx19(
-                IdentityStep,
-                {
-                  client,
-                  turnstileSiteKey: api.turnstileSiteKey,
-                  serviceKey: state.serviceKey ?? "",
-                  serviceLabel,
-                  mode: state.step,
-                  documentTitle: title,
-                  onSignedIn: () => dispatch({ type: "SIGNED_IN" }),
-                  onRejected: () => {
-                    setIdentityDraft(null);
-                    setMedicareDraft(null);
-                    dispatch({ type: "IDENTITY_REJECTED" });
-                  },
-                  onBack: showBack ? back2 : void 0,
-                  draft: identityDraft ?? void 0,
-                  onDraftChange,
-                  onStarted: (newRequestId, identity) => {
-                    const capturedDraft = capturedIdentityDraft(identity, identityDraft);
-                    setCapturing(true);
-                    setIdentityDraft(capturedDraft);
-                    setSubmittedIdentitySnapshot(JSON.stringify(capturedDraft));
-                    dispatch({ type: "REQUEST_STARTED", requestId: newRequestId });
-                    void captureFlow(newRequestId, state.serviceKey ?? "", identity).catch(
-                      (e) => setResolveError(e instanceof Error ? e.message : "Something went wrong.")
-                    ).finally(() => setCapturing(false));
-                  }
+        return /* @__PURE__ */ jsxs17("div", { children: [
+          /* @__PURE__ */ jsx19(
+            IdentityStep,
+            {
+              client,
+              turnstileSiteKey: api.turnstileSiteKey,
+              serviceKey: state.serviceKey ?? "",
+              serviceLabel,
+              applicationRunId: state.applicationRunId ?? void 0,
+              reservationExpiresAt: applicationRun?.reservation?.expiresAt ?? null,
+              mode: state.step,
+              documentTitle: title,
+              onSignedIn: () => dispatch({ type: "SIGNED_IN" }),
+              onRejected: () => {
+                setIdentityDraft(null);
+                setMedicareDraft(null);
+                dispatch({ type: "IDENTITY_REJECTED" });
+              },
+              onBack: showBack ? back2 : void 0,
+              draft: identityDraft ?? void 0,
+              onDraftChange,
+              onStarted: (newRequestId, identity) => {
+                const capturedDraft = capturedIdentityDraft(identity, identityDraft);
+                setIdentityDraft(capturedDraft);
+                if (flow) {
+                  const next = {
+                    ...flow,
+                    givenName: identity.givenName,
+                    familyName: identity.familyName,
+                    dateOfBirth: identity.dateOfBirth || null
+                  };
+                  saveFlowRecord(newRequestId, next);
+                  setFlow(next);
                 }
-              ),
-              /* @__PURE__ */ jsx19(FlowError, { children: resolveError })
-            ]
-          }
-        );
+                dispatch({ type: "REQUEST_STARTED", requestId: newRequestId });
+              }
+            }
+          ),
+          /* @__PURE__ */ jsx19(FlowError, { children: resolveError })
+        ] });
       case "intake":
+        if (reopeningScreening || reopenScreeningError || applicationRun?.status === "screening_complete" || applicationRun?.status === "reserved") {
+          return /* @__PURE__ */ jsxs17(
+            FlowShell,
+            {
+              ...stepProgress("intake", shape),
+              stepKey: "intake:reopening",
+              heading: "Review your screening",
+              documentTitle: title,
+              onBack: showBack ? back2 : void 0,
+              children: [
+                reopeningScreening && /* @__PURE__ */ jsx19(FlowLoading, { message: "Reopening your screening\u2026" }),
+                /* @__PURE__ */ jsx19(FlowError, { children: reopenScreeningError }),
+                reopenScreeningError && /* @__PURE__ */ jsx19(FlowButton, { type: "button", variant: "primary", onClick: () => void reopenScreening(), children: "Try again" })
+              ]
+            }
+          );
+        }
         return /* @__PURE__ */ jsx19(
           IntakeStep,
           {
             client,
-            requestId: state.requestId ?? "",
+            applicationRunId: state.applicationRunId ?? void 0,
+            applicationRunRevision: applicationRun?.revision ?? 0,
+            onApplicationRunChange: setApplicationRun,
             questionSetId: flow ? flow.questionSetId ?? null : void 0,
             resolveError,
             documentTitle: title,
@@ -4389,7 +4882,22 @@ function Funnel({
             phone: identityDraft?.identity.phone ?? "",
             serviceLabel: service?.label ?? "",
             documentTitle: title,
-            onSubmitted: (status, gate) => dispatch({ type: "SUBMITTED", status, gate }),
+            onSubmitted: async (status, gate) => {
+              if (status === "awaiting_slot") {
+                try {
+                  await bookReservedSlot();
+                  dispatch({ type: "SUBMITTED", status: "ready", gate });
+                } catch (err) {
+                  if (reservationWasLost(err)) {
+                    dispatch({ type: "RESERVATION_LOST" });
+                    return;
+                  }
+                  throw err;
+                }
+              } else {
+                dispatch({ type: "SUBMITTED", status, gate });
+              }
+            },
             onGate: (gate) => dispatch({ type: "GATE", gate }),
             onBack: showBack ? back2 : void 0
           }
@@ -4412,7 +4920,22 @@ function Funnel({
                 feeAmount: flow?.feeAmount ?? null,
                 serviceLabel,
                 clinicPhone,
-                onOutcome: (outcome) => dispatch({ type: "PAY_OUTCOME", outcome })
+                onOutcome: async (outcome) => {
+                  if (outcome.kind === "awaiting_slot") {
+                    try {
+                      await bookReservedSlot();
+                      dispatch({ type: "PAY_OUTCOME", outcome: { kind: "ready" } });
+                    } catch (err) {
+                      if (reservationWasLost(err)) {
+                        dispatch({ type: "RESERVATION_LOST" });
+                        return;
+                      }
+                      throw err;
+                    }
+                  } else {
+                    dispatch({ type: "PAY_OUTCOME", outcome });
+                  }
+                }
               }
             )
           }
@@ -4422,20 +4945,24 @@ function Funnel({
           SlotStep,
           {
             client,
-            requestId: state.requestId ?? "",
+            requestId: state.requestId ?? void 0,
+            applicationRunId: state.requestId ? void 0 : state.applicationRunId ?? void 0,
+            applicationRunRevision: applicationRun?.revision ?? 0,
+            onApplicationRunChange: setApplicationRun,
+            replacementReservation: Boolean(state.requestId && state.applicationRunId),
             appointmentTypeId: flow.appointmentTypeId,
             isFree: flowIsFree(flow),
             clinicPhone,
             onCancelled: restart,
             documentTitle: title,
             onBooked: (bookedFor) => {
-              const id = state.requestId;
+              const id = state.requestId ?? state.applicationRunId;
               if (id && flow) {
                 const next = { ...flow, bookedFor };
                 saveFlowRecord(id, next);
                 setFlow(next);
               }
-              dispatch({ type: "BOOKED" });
+              dispatch({ type: state.requestId ? "BOOKED" : "RESERVED" });
             }
           }
         ) : flowLost ? (
@@ -4557,14 +5084,14 @@ function SessionExpiredState({
       stepKey: "session-expired",
       heading: "Your secure session ended",
       documentTitle,
-      footer: portalUrl ? /* @__PURE__ */ jsx19("a", { className: "sk-flow__btn sk-flow__btn--primary", href: portalUrl, children: "Continue in the patient portal" }) : !requestStarted ? /* @__PURE__ */ jsx19(FlowButton, { type: "button", variant: "primary", onClick: onRestart, children: "Start again securely" }) : void 0,
+      footer: portalUrl ? /* @__PURE__ */ jsx19("a", { className: "sk-flow__btn sk-flow__btn--primary", href: portalUrl, children: "Continue in the patient portal" }) : requestStarted ? void 0 : /* @__PURE__ */ jsx19(FlowButton, { type: "button", variant: "primary", onClick: onRestart, children: "Start again securely" }),
       children: [
         /* @__PURE__ */ jsxs17("p", { className: "sk-cf__body", children: [
           "This secure session is no longer available.",
           " ",
           requestStarted ? "Your request is still with the clinic." : "You can start again securely."
         ] }),
-        clinicPhone ? /* @__PURE__ */ jsx19(ClinicPhone, { clinicPhone }) : !portalUrl ? /* @__PURE__ */ jsx19("p", { className: "sk-cf__aside", children: "Please contact the clinic using the details on this website." }) : null
+        clinicPhone ? /* @__PURE__ */ jsx19(ClinicPhone, { clinicPhone }) : portalUrl ? null : /* @__PURE__ */ jsx19("p", { className: "sk-cf__aside", children: "Please contact the clinic using the details on this website." })
       ]
     }
   );
@@ -10954,14 +11481,10 @@ function PortalAccountSurfaceClient({
   portalUrl,
   bookHref,
   initialState,
-  fetchImpl: rawFetchImpl,
   openUrl
 }) {
   const portalClient = usePortalClient();
-  const fetchImpl = React21.useMemo(
-    () => portalFetchForClient(portalClient, rawFetchImpl),
-    [portalClient, rawFetchImpl]
-  );
+  const fetchImpl = React21.useMemo(() => portalFetchForClient(portalClient), [portalClient]);
   const [state, setState] = React21.useState(
     // `readPortalSignedInHint` is in the initialiser (not an effect) on purpose: the
     // whole point is that the FIRST paint already knows, so there is no placeholder
@@ -11546,6 +12069,25 @@ var EMPTY_CART = Object.freeze({
   v: 1,
   lines: Object.freeze([])
 });
+function cartLineId(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized.length > 0 && normalized.length <= 128 ? normalized : null;
+}
+function legacyCartLineId(kind, variantId) {
+  const input = `${kind}\0${variantId}`;
+  let first = 2166136261;
+  let second = 2246822507;
+  for (let index = 0; index < input.length; index += 1) {
+    const code2 = input.charCodeAt(index);
+    first = Math.imul(first ^ code2, 16777619);
+    second = Math.imul(second ^ code2, 3266489909);
+  }
+  return `legacy-${(first >>> 0).toString(16).padStart(8, "0")}${(second >>> 0).toString(16).padStart(8, "0")}`;
+}
+function newCartLineId() {
+  return crypto.randomUUID();
+}
 function storage() {
   try {
     if (typeof window === "undefined" || !window.localStorage) return null;
@@ -11563,7 +12105,39 @@ function parseLine(raw) {
   const n = typeof line.quantity === "number" ? line.quantity : Number(line.quantity);
   if (!Number.isFinite(n)) return null;
   const quantity = Math.min(Math.max(Math.floor(n), 1), MAX_QUANTITY);
-  return { kind, variantId, quantity };
+  const lineId = cartLineId(line.lineId) ?? legacyCartLineId(kind, variantId);
+  return { lineId, kind, variantId, quantity };
+}
+function normalizeCartLines(entries) {
+  const lines = [];
+  const byIdentity = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const line = parseLine(entry);
+    if (!line) continue;
+    const identity = `${line.kind}\0${line.variantId}`;
+    const existing = byIdentity.get(identity);
+    if (existing) {
+      existing.quantity = Math.min(
+        existing.quantity + line.quantity,
+        MAX_QUANTITY
+      );
+      continue;
+    }
+    if (lines.length >= MAX_LINES) continue;
+    lines.push(line);
+    byIdentity.set(identity, line);
+  }
+  return lines;
+}
+function normalizeSettledAttemptTokens(entries) {
+  if (!Array.isArray(entries)) return [];
+  return Array.from(
+    new Set(
+      entries.filter(
+        (entry) => typeof entry === "string" && entry.length > 0 && entry.length <= 128
+      )
+    )
+  ).slice(-32);
 }
 function readCart() {
   const store = storage();
@@ -11577,75 +12151,216 @@ function readCart() {
   if (!raw) return emptyCart();
   try {
     const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return emptyCart();
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return emptyCart();
     const bag = parsed;
     if (bag.v !== 1 || !Array.isArray(bag.lines)) return emptyCart();
-    const lines = [];
-    for (const entry of bag.lines.slice(0, MAX_LINES)) {
-      const line = parseLine(entry);
-      if (line) lines.push(line);
-    }
-    return { v: 1, lines };
+    const settledAttemptTokens = normalizeSettledAttemptTokens(
+      bag.settledAttemptTokens
+    );
+    return {
+      v: 1,
+      lines: normalizeCartLines(bag.lines),
+      ...settledAttemptTokens.length > 0 ? { settledAttemptTokens } : {}
+    };
   } catch {
     return emptyCart();
   }
 }
-function writeCart(cart) {
-  const normalised = { v: 1, lines: cart.lines.slice(0, MAX_LINES) };
+var CART_MUTATION_LOCK = "patientos-cart-mutation-v1";
+var CART_MUTATION_VALIDATION_TIMEOUT_MS = 5e3;
+function persistCart(cart) {
+  const settledAttemptTokens = normalizeSettledAttemptTokens(
+    cart.settledAttemptTokens
+  );
+  const normalised = {
+    v: 1,
+    lines: normalizeCartLines(cart.lines),
+    ...settledAttemptTokens.length > 0 ? { settledAttemptTokens } : {}
+  };
   const store = storage();
-  if (store) {
-    try {
-      store.setItem(CART_STORAGE_KEY, JSON.stringify(normalised));
-    } catch {
-    }
+  if (!store)
+    return {
+      cart: readCart(),
+      persisted: false,
+      status: "cart_storage_unavailable"
+    };
+  try {
+    store.setItem(CART_STORAGE_KEY, JSON.stringify(normalised));
+  } catch {
+    return {
+      cart: readCart(),
+      persisted: false,
+      status: "cart_storage_unavailable"
+    };
   }
   notify(normalised);
-  return normalised;
-}
-function addToCart(variantId, quantity = 1) {
-  const cart = readCart();
-  const add2 = Math.min(Math.max(Math.floor(quantity), 1), MAX_QUANTITY);
-  const existing = cart.lines.find((l) => l.kind === "retail" && l.variantId === variantId);
-  if (existing) {
-    existing.quantity = Math.min(existing.quantity + add2, MAX_QUANTITY);
-  } else {
-    if (cart.lines.length >= MAX_LINES) return cart;
-    cart.lines.push({ kind: "retail", variantId, quantity: add2 });
+  return { cart: normalised, persisted: true, status: "updated" };
+}
+function unavailableMutation() {
+  return {
+    cart: readCart(),
+    persisted: false,
+    status: "cart_storage_unavailable"
+  };
+}
+async function mutateCart(mutation, beforePersist) {
+  const locks = typeof navigator === "undefined" ? void 0 : navigator.locks;
+  if (!storage() || !locks) return unavailableMutation();
+  try {
+    return await locks.request(CART_MUTATION_LOCK, async () => {
+      const latest = readCart();
+      const mutated = mutation(latest);
+      const proposed = {
+        ...mutated,
+        lines: normalizeCartLines(mutated.lines),
+        ...mutated.settledAttemptTokens === void 0 && latest.settledAttemptTokens ? { settledAttemptTokens: latest.settledAttemptTokens } : {}
+      };
+      if (beforePersist) {
+        const controller = new AbortController();
+        let timer;
+        const accepted = await Promise.race([
+          beforePersist(proposed, controller.signal).catch(() => false),
+          new Promise((resolve) => {
+            timer = setTimeout(() => {
+              controller.abort();
+              resolve(false);
+            }, CART_MUTATION_VALIDATION_TIMEOUT_MS);
+          })
+        ]);
+        if (timer) clearTimeout(timer);
+        if (!accepted) {
+          return {
+            cart: readCart(),
+            persisted: false,
+            status: "not_committed"
+          };
+        }
+      }
+      return persistCart(proposed);
+    });
+  } catch {
+    return unavailableMutation();
   }
-  return writeCart(cart);
 }
-function setCartQuantity(variantId, quantity) {
-  const cart = readCart();
-  const next = Math.floor(quantity);
-  if (next < 1) return removeFromCart(variantId);
-  return writeCart({
-    v: 1,
-    lines: cart.lines.map(
-      (l) => l.variantId === variantId ? { ...l, quantity: Math.min(next, MAX_QUANTITY) } : l
-    )
+async function withCartLock(operation) {
+  const locks = typeof navigator === "undefined" ? void 0 : navigator.locks;
+  if (!storage() || !locks)
+    return { status: "cart_storage_unavailable", cart: readCart() };
+  try {
+    return await locks.request(CART_MUTATION_LOCK, async () => {
+      const latest = readCart();
+      const controller = new AbortController();
+      let timer;
+      const outcome = await Promise.race([
+        operation(latest, controller.signal).then((result) => ({
+          completed: true,
+          result
+        })),
+        new Promise((resolve) => {
+          timer = setTimeout(() => {
+            controller.abort();
+            resolve({ completed: false });
+          }, CART_MUTATION_VALIDATION_TIMEOUT_MS);
+        })
+      ]);
+      if (timer) clearTimeout(timer);
+      return outcome.completed ? { status: "completed", cart: latest, result: outcome.result } : { status: "not_completed", cart: latest };
+    });
+  } catch {
+    return { status: "not_completed", cart: readCart() };
+  }
+}
+async function addToCart(variantId, quantity = 1) {
+  let status = "added";
+  const result = await mutateCart((cart) => {
+    const add2 = Math.min(Math.max(Math.floor(quantity), 1), MAX_QUANTITY);
+    const existing = cart.lines.find(
+      (line) => line.kind === "retail" && line.variantId === variantId
+    );
+    if (existing) {
+      if (existing.quantity >= MAX_QUANTITY) {
+        status = "quantity_limit";
+        return cart;
+      }
+      existing.quantity = Math.min(existing.quantity + add2, MAX_QUANTITY);
+    } else {
+      if (cart.lines.length >= MAX_LINES) {
+        status = "line_limit";
+        return cart;
+      }
+      cart.lines.push({
+        lineId: newCartLineId(),
+        kind: "retail",
+        variantId,
+        quantity: add2
+      });
+    }
+    return cart;
   });
+  return {
+    cart: result.cart,
+    status: result.status === "cart_storage_unavailable" ? result.status : status
+  };
 }
-function removeFromCart(variantId) {
-  const cart = readCart();
-  return writeCart({ v: 1, lines: cart.lines.filter((l) => l.variantId !== variantId) });
+async function adjustCartQuantity(kind, variantId, delta, maximumBaseline) {
+  const result = await mutateCart((cart) => ({
+    v: 1,
+    lines: cart.lines.flatMap((line) => {
+      if (line.kind !== kind || line.variantId !== variantId) return [line];
+      const baseline = maximumBaseline === void 0 ? line.quantity : Math.min(line.quantity, Math.max(0, Math.floor(maximumBaseline)));
+      const quantity = Math.min(baseline + Math.floor(delta), MAX_QUANTITY);
+      return quantity > 0 ? [{ ...line, quantity }] : [];
+    })
+  }));
+  return result;
 }
-function clearCart() {
-  const store = storage();
-  if (store) {
-    try {
-      store.removeItem(CART_STORAGE_KEY);
-    } catch {
-    }
-  }
-  const empty = emptyCart();
-  notify(empty);
-  return empty;
+async function removeFromCart(variantId, kind) {
+  const result = await mutateCart((cart) => ({
+    v: 1,
+    lines: cart.lines.filter(
+      (line) => line.variantId !== variantId || kind && line.kind !== kind
+    )
+  }));
+  return result;
+}
+async function subtractPurchasedCartLines(purchasedLines, attemptToken) {
+  const purchased = new Map(
+    normalizeCartLines(
+      purchasedLines.filter(
+        (line) => Boolean(line) && typeof line === "object" && !Array.isArray(line) && cartLineId(line.lineId) !== null
+      )
+    ).map((line) => [line.lineId, line])
+  );
+  return mutateCart((cart) => {
+    if (attemptToken && cart.settledAttemptTokens?.includes(attemptToken))
+      return cart;
+    return {
+      v: 1,
+      lines: cart.lines.flatMap((line) => {
+        const purchasedLine = purchased.get(line.lineId);
+        const purchasedQuantity = purchasedLine?.kind === line.kind && purchasedLine.variantId === line.variantId ? purchasedLine.quantity : 0;
+        const quantity = line.quantity - purchasedQuantity;
+        return quantity > 0 ? [{ ...line, quantity }] : [];
+      }),
+      ...attemptToken ? {
+        settledAttemptTokens: [
+          ...cart.settledAttemptTokens ?? [],
+          attemptToken
+        ]
+      } : {}
+    };
+  });
 }
 function cartItemCount(cart = readCart()) {
   return cart.lines.reduce((sum, l) => sum + l.quantity, 0);
 }
 function cartToWireLines(cart) {
-  return cart.lines.map((l) => ({ kind: l.kind, variantId: l.variantId, quantity: l.quantity }));
+  return cart.lines.map((l) => ({
+    kind: l.kind,
+    variantId: l.variantId,
+    quantity: l.quantity
+  }));
 }
 var listeners = /* @__PURE__ */ new Set();
 function notify(cart) {
@@ -11662,10 +12377,76 @@ function subscribeToCart(fn) {
     if (e.key !== null && e.key !== CART_STORAGE_KEY) return;
     fn(readCart());
   };
-  if (typeof window !== "undefined") window.addEventListener("storage", onStorage);
+  if (typeof window !== "undefined")
+    window.addEventListener("storage", onStorage);
   return () => {
     listeners.delete(fn);
-    if (typeof window !== "undefined") window.removeEventListener("storage", onStorage);
+    if (typeof window !== "undefined")
+      window.removeEventListener("storage", onStorage);
+  };
+}
+
+// src/store-client.ts
+var STORE_REQUEST_INIT = {
+  credentials: "include",
+  cache: "no-store"
+};
+async function readResult(response) {
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    return response.ok ? { ok: false, status: null, error: null, message: null } : { ok: false, status: response.status, error: null, message: null };
+  }
+  if (response.ok) return { ok: true, data: body };
+  const failure = body;
+  return {
+    ok: false,
+    status: response.status,
+    error: typeof failure?.error === "string" ? failure.error : null,
+    message: typeof failure?.message === "string" ? failure.message : null
+  };
+}
+function createStoreClient(config2 = {}) {
+  const rawOrigin = config2.apiOrigin?.trim() ?? "";
+  const normalizedOrigin = rawOrigin ? normalizePortalApiOrigin(rawOrigin) : "";
+  if (rawOrigin && !normalizedOrigin) {
+    console.error("[store] ignoring a malformed store API origin", rawOrigin);
+  }
+  const apiOrigin = normalizedOrigin ?? "";
+  const fetchImpl = config2.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
+  const url = (path) => apiOrigin && path.startsWith("/") ? apiOrigin + path : path;
+  async function request(path, init) {
+    try {
+      return await readResult(
+        await fetchImpl(url(path), {
+          ...STORE_REQUEST_INIT,
+          ...init
+        })
+      );
+    } catch {
+      return { ok: false, status: null, error: null, message: null };
+    }
+  }
+  return {
+    apiOrigin,
+    url,
+    get: (path) => request(path, { headers: { accept: "application/json" } }),
+    post: (path, body, options) => request(path, {
+      signal: options?.signal,
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify(body ?? {})
+    }),
+    signInHref(returnPath = "/checkout") {
+      if (typeof window === "undefined") return `${apiOrigin}/portal/sign-in`;
+      const target = new URL(returnPath, window.location.origin).toString();
+      const redirect = `/portal/return?to=${encodePortalReturnTarget(target)}`;
+      return `${apiOrigin}/portal/sign-in?redirect=${encodeURIComponent(redirect)}`;
+    }
   };
 }
 
@@ -11676,7 +12457,17 @@ function formatMoney(value) {
   if (!Number.isFinite(n)) return value;
   return `$${n.toFixed(2)}`;
 }
-function StoreClient({ categoryHandle, title, columns }) {
+function StoreClient({
+  categoryHandle,
+  productHandle,
+  storeApiOrigin,
+  title,
+  columns
+}) {
+  const client = React22.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [catalog, setCatalog] = React22.useState(null);
   const [failed, setFailed] = React22.useState(false);
   const [count, setCount] = React22.useState(0);
@@ -11686,22 +12477,32 @@ function StoreClient({ categoryHandle, title, columns }) {
   }, []);
   React22.useEffect(() => {
     let alive = true;
-    fetch("/api/store/catalog", { headers: { accept: "application/json" } }).then(
-      (res) => res.ok ? res.json() : Promise.reject(new Error(String(res.status)))
-    ).then((data) => {
-      if (alive) setCatalog(data);
-    }).catch(() => {
-      if (alive) setFailed(true);
+    const path = productHandle ? `/api/store/catalog/${encodeURIComponent(productHandle)}` : "/api/store/catalog";
+    void client.get(path).then((result) => {
+      if (!alive) return;
+      if (!result.ok) {
+        setFailed(true);
+        return;
+      }
+      setCatalog(
+        "product" in result.data ? {
+          products: [result.data.product],
+          currency: result.data.currency
+        } : result.data
+      );
+      setFailed(false);
     });
     return () => {
       alive = false;
     };
-  }, []);
+  }, [client, productHandle]);
   const products = React22.useMemo(() => {
     if (!catalog) return [];
-    if (!categoryHandle) return catalog.products;
-    return catalog.products.filter((p) => p.handle.startsWith(categoryHandle));
-  }, [catalog, categoryHandle]);
+    if (productHandle || !categoryHandle) return catalog.products;
+    return catalog.products.filter(
+      (product) => product.categories.some((category) => category.handle === categoryHandle)
+    );
+  }, [catalog, categoryHandle, productHandle]);
   if (failed) {
     return /* @__PURE__ */ jsxs25(Fragment12, { children: [
       /* @__PURE__ */ jsx28("h2", { className: "sk-store__heading", children: title ?? "Shop" }),
@@ -11730,17 +12531,30 @@ function StoreCard({ product }) {
   const [variantId, setVariantId] = React22.useState(
     () => (product.variants.find((v) => v.inStock) ?? product.variants[0]).id
   );
-  const [added, setAdded] = React22.useState(false);
+  const [addFeedback, setAddFeedback] = React22.useState(null);
   const variant = product.variants.find((v) => v.id === variantId) ?? product.variants[0];
   const image2 = product.thumbnailUrl ?? product.images[0]?.url ?? null;
-  function onAdd() {
-    addToCart(variant.id, 1);
-    setAdded(true);
-    window.setTimeout(() => setAdded(false), 1600);
+  async function onAdd() {
+    const result = await addToCart(variant.id, 1);
+    setAddFeedback(result.status);
+    window.setTimeout(() => setAddFeedback(null), 1600);
   }
   return /* @__PURE__ */ jsxs25("li", { className: "sk-store__card", children: [
     /* @__PURE__ */ jsxs25("a", { className: "sk-store__card-link", href: `/store/${product.handle}`, children: [
-      image2 ? /* @__PURE__ */ jsx28("img", { className: "sk-store__image", src: image2, alt: product.images[0]?.alt ?? "" }) : /* @__PURE__ */ jsx28("span", { className: "sk-store__image sk-store__image--empty", "aria-hidden": true }),
+      image2 ? /* @__PURE__ */ jsx28(
+        "img",
+        {
+          className: "sk-store__image",
+          src: image2,
+          alt: product.images[0]?.alt ?? ""
+        }
+      ) : /* @__PURE__ */ jsx28(
+        "span",
+        {
+          className: "sk-store__image sk-store__image--empty",
+          "aria-hidden": true
+        }
+      ),
       /* @__PURE__ */ jsx28("span", { className: "sk-store__title", children: product.title })
     ] }),
     /* @__PURE__ */ jsxs25("span", { className: "sk-store__price", children: [
@@ -11749,16 +12563,23 @@ function StoreCard({ product }) {
     ] }),
     product.variants.length > 1 ? /* @__PURE__ */ jsxs25("label", { className: "sk-store__variant", children: [
       /* @__PURE__ */ jsx28("span", { className: "sk-store__variant-label", children: "Option" }),
-      /* @__PURE__ */ jsx28("select", { value: variantId, onChange: (e) => setVariantId(e.target.value), children: product.variants.map((v) => /* @__PURE__ */ jsx28("option", { value: v.id, disabled: !v.inStock, children: (v.options.length ? v.options.join(" / ") : v.title) + (v.inStock ? "" : " \u2014 sold out") }, v.id)) })
+      /* @__PURE__ */ jsx28(
+        "select",
+        {
+          value: variantId,
+          onChange: (e) => setVariantId(e.target.value),
+          children: product.variants.map((v) => /* @__PURE__ */ jsx28("option", { value: v.id, disabled: !v.inStock, children: (v.options.length ? v.options.join(" / ") : v.title) + (v.inStock ? "" : " \u2014 sold out") }, v.id))
+        }
+      )
     ] }) : null,
     /* @__PURE__ */ jsx28(
       "button",
       {
         type: "button",
         className: "sk-store__add",
-        onClick: onAdd,
+        onClick: () => void onAdd(),
         disabled: !variant.inStock,
-        children: !variant.inStock ? "Sold out" : added ? "Added \u2713" : "Add to cart"
+        children: !variant.inStock ? "Sold out" : addFeedback === "added" ? "Added \u2713" : addFeedback === "line_limit" ? "Cart full \u2014 50 products max" : addFeedback === "quantity_limit" ? "Maximum 99 in cart" : addFeedback === "cart_storage_unavailable" ? "This browser can\u2019t safely update the cart" : "Add to cart"
       }
     )
   ] });
@@ -11767,35 +12588,48 @@ function StoreCard({ product }) {
 // src/cart-block.client.tsx
 import * as React23 from "react";
 import { Fragment as Fragment13, jsx as jsx29, jsxs as jsxs26 } from "react/jsx-runtime";
-function CartClient(_props) {
+function CartClient({ storeApiOrigin }) {
+  const client = React23.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [cart, setCart] = React23.useState(() => readCart());
   const [quote, setQuote] = React23.useState(null);
+  const [quoteSourceCart, setQuoteSourceCart] = React23.useState(
+    null
+  );
   const [failed, setFailed] = React23.useState(false);
+  const [mutationUnavailable, setMutationUnavailable] = React23.useState(false);
+  async function runMutation(mutation) {
+    const result = await mutation;
+    setMutationUnavailable(result.status === "cart_storage_unavailable");
+  }
   React23.useEffect(() => subscribeToCart(setCart), []);
   React23.useEffect(() => {
     if (cart.lines.length === 0) {
       setQuote(null);
+      setQuoteSourceCart(null);
       setFailed(false);
       return;
     }
     let alive = true;
-    fetch("/api/store/quote", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ lines: cartToWireLines(cart) })
-    }).then(
-      (res) => res.ok ? res.json() : Promise.reject(new Error(String(res.status)))
-    ).then((data) => {
+    setQuote(null);
+    setQuoteSourceCart(null);
+    setFailed(false);
+    void client.post("/api/store/quote", { lines: cartToWireLines(cart) }).then((result) => {
       if (!alive) return;
-      setQuote(data);
+      if (!result.ok) {
+        setFailed(true);
+        return;
+      }
+      setQuote(result.data);
+      setQuoteSourceCart(cart);
       setFailed(false);
-    }).catch(() => {
-      if (alive) setFailed(true);
     });
     return () => {
       alive = false;
     };
-  }, [cart]);
+  }, [cart, client]);
   if (cart.lines.length === 0) {
     return /* @__PURE__ */ jsxs26(Fragment13, { children: [
       /* @__PURE__ */ jsx29("h2", { className: "sk-cart__heading", children: "Your cart" }),
@@ -11803,13 +12637,54 @@ function CartClient(_props) {
       /* @__PURE__ */ jsx29("a", { className: "sk-cart__continue", href: "/store", children: "Browse the shop" })
     ] });
   }
+  const quotedVariantIds = new Set(
+    quote?.lines.map((line) => line.variantId) ?? []
+  );
+  const quoteSourceQuantities = new Map(
+    quoteSourceCart?.lines.filter((line) => line.kind === "retail").map((line) => [line.variantId, line.quantity]) ?? []
+  );
+  const unsupportedLines = cart.lines.filter(
+    (line) => line.kind !== "retail" || quote !== null && !quotedVariantIds.has(line.variantId)
+  );
   return /* @__PURE__ */ jsxs26(Fragment13, { children: [
     /* @__PURE__ */ jsx29("h2", { className: "sk-cart__heading", children: "Your cart" }),
     quote && quote.problems.length > 0 ? /* @__PURE__ */ jsx29("ul", { className: "sk-cart__problems", role: "status", children: quote.problems.map((p, i) => /* @__PURE__ */ jsx29("li", { children: p.message }, `${p.code}-${p.variantId ?? i}`)) }) : null,
     failed ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "alert", children: "We couldn't price your cart just now. Please try again in a moment." }) : null,
-    !quote ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "status", children: "Pricing your cart\u2026" }) : /* @__PURE__ */ jsxs26(Fragment13, { children: [
+    mutationUnavailable ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "alert", children: "This browser can\u2019t safely update the cart. Try a supported browser with site storage enabled." }) : null,
+    unsupportedLines.length > 0 ? /* @__PURE__ */ jsx29("ul", { className: "sk-cart__lines", children: unsupportedLines.map((line) => /* @__PURE__ */ jsxs26(
+      "li",
+      {
+        className: "sk-cart__line",
+        children: [
+          /* @__PURE__ */ jsx29("span", { className: "sk-cart__line-title", children: line.kind === "fill" ? "Prescription item" : "Unavailable item" }),
+          /* @__PURE__ */ jsx29("span", { className: "sk-cart__line-unit", children: "Not supported by retail checkout" }),
+          /* @__PURE__ */ jsxs26("span", { className: "sk-cart__qty", children: [
+            "Quantity ",
+            line.quantity
+          ] }),
+          /* @__PURE__ */ jsx29(
+            "button",
+            {
+              type: "button",
+              className: "sk-cart__remove",
+              onClick: () => void runMutation(removeFromCart(line.variantId, line.kind)),
+              children: "Remove"
+            }
+          )
+        ]
+      },
+      `${line.kind}-${line.variantId}`
+    )) }) : null,
+    quote ? /* @__PURE__ */ jsxs26(Fragment13, { children: [
       /* @__PURE__ */ jsx29("ul", { className: "sk-cart__lines", children: quote.lines.map((line) => /* @__PURE__ */ jsxs26("li", { className: "sk-cart__line", children: [
-        /* @__PURE__ */ jsx29("a", { className: "sk-cart__line-title", href: `/store/${line.productHandle}`, children: line.title }),
+        /* @__PURE__ */ jsx29(
+          "a",
+          {
+            className: "sk-cart__line-title",
+            href: `/store/${line.productHandle}`,
+            children: line.title
+          }
+        ),
         /* @__PURE__ */ jsxs26("span", { className: "sk-cart__line-unit", children: [
           formatMoney(line.unitPrice),
           " each"
@@ -11820,7 +12695,14 @@ function CartClient(_props) {
             {
               type: "button",
               "aria-label": `Decrease quantity of ${line.title}`,
-              onClick: () => setCartQuantity(line.variantId, line.quantity - 1),
+              onClick: () => void runMutation(
+                adjustCartQuantity(
+                  "retail",
+                  line.variantId,
+                  -1,
+                  (quoteSourceQuantities.get(line.variantId) ?? 0) > line.quantity ? line.quantity : void 0
+                )
+              ),
               children: "\u2212"
             }
           ),
@@ -11830,7 +12712,14 @@ function CartClient(_props) {
             {
               type: "button",
               "aria-label": `Increase quantity of ${line.title}`,
-              onClick: () => setCartQuantity(line.variantId, line.quantity + 1),
+              onClick: () => void runMutation(
+                adjustCartQuantity(
+                  "retail",
+                  line.variantId,
+                  1,
+                  (quoteSourceQuantities.get(line.variantId) ?? 0) > line.quantity ? line.quantity : void 0
+                )
+              ),
               children: "+"
             }
           )
@@ -11841,7 +12730,7 @@ function CartClient(_props) {
           {
             type: "button",
             className: "sk-cart__remove",
-            onClick: () => removeFromCart(line.variantId),
+            onClick: () => void runMutation(removeFromCart(line.variantId, "retail")),
             children: "Remove"
           }
         )
@@ -11863,173 +12752,768 @@ function CartClient(_props) {
       quote.requiresShipping ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__note", children: "Delivery is chosen at checkout." }) : null,
       /* @__PURE__ */ jsxs26("div", { className: "sk-cart__actions", children: [
         /* @__PURE__ */ jsx29("a", { className: "sk-cart__continue", href: "/store", children: "Keep shopping" }),
-        /* @__PURE__ */ jsx29(
-          "a",
-          {
-            className: "sk-cart__checkout",
-            href: "/checkout",
-            "aria-disabled": quote.lines.length === 0,
-            children: "Checkout"
-          }
-        )
+        unsupportedLines.length === 0 && quote.lines.length > 0 ? /* @__PURE__ */ jsx29("a", { className: "sk-cart__checkout", href: "/checkout", children: "Checkout" }) : /* @__PURE__ */ jsx29("span", { className: "sk-cart__checkout", "aria-disabled": "true", children: "Remove unsupported items to checkout" })
       ] })
-    ] })
+    ] }) : /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "status", children: "Pricing your cart\u2026" })
   ] });
 }
 
 // src/checkout-block.client.tsx
 import * as React24 from "react";
+
+// src/checkout-attempt-token.ts
+var CHECKOUT_ATTEMPT_TOKEN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function isCheckoutAttemptToken(value) {
+  return typeof value === "string" && CHECKOUT_ATTEMPT_TOKEN.test(value);
+}
+
+// src/checkout-completion.ts
+function checkoutCompletionUrl(configuredHref, orderId, siteOrigin) {
+  const fallback = new URL("/checkout/complete", siteOrigin);
+  let destination;
+  try {
+    destination = new URL(configuredHref || fallback.pathname, siteOrigin);
+  } catch {
+    destination = fallback;
+  }
+  if (destination.origin !== fallback.origin || destination.protocol !== "http:" && destination.protocol !== "https:") {
+    destination = fallback;
+  }
+  destination.searchParams.set("order", orderId);
+  return `${destination.pathname}${destination.search}${destination.hash}`;
+}
+
+// src/checkout-block.client.tsx
 import { Fragment as Fragment14, jsx as jsx30, jsxs as jsxs27 } from "react/jsx-runtime";
-async function searchStoreAddresses(query) {
+var CHECKOUT_RECOVERY_PREFIX = "patientos.store.checkout-order.v1";
+function checkoutRecoveryKey(apiOrigin) {
+  const identity = apiOrigin || (typeof window === "undefined" ? "same-origin" : window.location.origin);
+  let hash = 2166136261;
+  for (let index = 0; index < identity.length; index += 1) {
+    hash ^= identity.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return `${CHECKOUT_RECOVERY_PREFIX}:${(hash >>> 0).toString(16)}`;
+}
+function discardCheckoutRecovery(key) {
+  try {
+    window.localStorage.removeItem(key);
+  } catch {
+    return;
+  }
+}
+function readCheckoutRecovery(key) {
+  try {
+    const value = window.localStorage.getItem(key);
+    if (!value) return null;
+    if (isCheckoutAttemptToken(value))
+      return { v: 2, attemptToken: value, lines: null };
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      discardCheckoutRecovery(key);
+      return null;
+    }
+    const record = parsed;
+    if (record.v !== 1 && record.v !== 2 || !isCheckoutAttemptToken(record.attemptToken)) {
+      discardCheckoutRecovery(key);
+      return null;
+    }
+    if (record.v !== 2 || !Array.isArray(record.lines)) {
+      return { v: 2, attemptToken: record.attemptToken, lines: null };
+    }
+    const rawLines = record.lines;
+    const lines = normalizeCartLines(rawLines);
+    if (lines.length === 0 || lines.some(
+      (line) => !rawLines.some(
+        (candidate) => candidate !== null && typeof candidate === "object" && !Array.isArray(candidate) && candidate.lineId === line.lineId
+      )
+    )) {
+      return { v: 2, attemptToken: record.attemptToken, lines: null };
+    }
+    return { v: 2, attemptToken: record.attemptToken, lines };
+  } catch {
+    discardCheckoutRecovery(key);
+    return null;
+  }
+}
+function sameRecoveryRecord(left, right) {
+  return left?.attemptToken === right.attemptToken && left.lines !== null && right.lines !== null && JSON.stringify(left.lines) === JSON.stringify(right.lines);
+}
+function writeCheckoutRecovery(key, record, expectedToken) {
+  try {
+    const existing = readCheckoutRecovery(key);
+    if ((existing?.attemptToken ?? null) !== expectedToken) return false;
+    window.localStorage.setItem(key, JSON.stringify(record));
+    return sameRecoveryRecord(readCheckoutRecovery(key), record);
+  } catch {
+    return false;
+  }
+}
+function removeCheckoutRecovery(key, attemptToken) {
+  try {
+    const existing = readCheckoutRecovery(key);
+    if (!existing) return true;
+    if (existing.attemptToken !== attemptToken) return false;
+    window.localStorage.removeItem(key);
+    return readCheckoutRecovery(key)?.attemptToken !== attemptToken;
+  } catch {
+    return false;
+  }
+}
+function snapshotPurchasedCartLines(cartLines, quotedLines) {
+  const cartByVariant = new Map(
+    cartLines.filter((line) => line.kind === "retail").map((line) => [line.variantId, line])
+  );
+  const snapshot = [];
+  for (const quoted of quotedLines) {
+    const line = cartByVariant.get(quoted.variantId);
+    if (!line) return null;
+    snapshot.push({ ...line, quantity: quoted.quantity });
+  }
+  return snapshot.length > 0 ? snapshot : null;
+}
+function sameCartLineSnapshot(left, right) {
+  if (left.length !== right.length) return false;
+  const rightById = new Map(right.map((line) => [line.lineId, line]));
+  return left.every((line) => {
+    const expected = rightById.get(line.lineId);
+    return expected?.kind === line.kind && expected.variantId === line.variantId && expected.quantity === line.quantity;
+  });
+}
+function samePayableQuote(left, right, shippingOptionId) {
+  return JSON.stringify(expectedQuote(left, shippingOptionId)) === JSON.stringify(expectedQuote(right, shippingOptionId));
+}
+function expectedQuote(quote, shippingOptionId) {
+  return {
+    shippingOptionId,
+    lines: quote.lines.map(({ variantId, quantity, unitPrice, lineTotal }) => ({
+      variantId,
+      quantity,
+      unitPrice,
+      lineTotal
+    })),
+    subtotal: quote.subtotal,
+    shippingTotal: quote.shippingTotal,
+    taxTotal: quote.taxTotal,
+    total: quote.total,
+    currency: quote.currency
+  };
+}
+var StoreRequestError = class extends Error {
+  constructor(message, code2) {
+    super(message);
+    this.code = code2;
+    this.name = "StoreRequestError";
+  }
+  code;
+};
+async function searchStoreAddresses(query, client) {
   const q = query.trim();
   if (q.length < 3) return [];
-  const res = await fetch(`/api/address/autocomplete?q=${encodeURIComponent(q)}`, {
-    credentials: "same-origin",
-    headers: { accept: "application/json" }
-  });
-  if (!res.ok) return [];
-  const body = await res.json();
-  return body.suggestions ?? [];
-}
-async function validateStoreAddress(address) {
-  const res = await fetch("/api/address/validate", {
-    method: "POST",
-    credentials: "same-origin",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ address })
-  });
-  if (!res.ok) return null;
-  const v = await res.json();
-  if (v.error || !v.formattedAddress) return null;
-  return { address: v.formattedAddress, placeId: v.googlePlaceId ?? null };
+  const result = await client.get(`/api/address/autocomplete?q=${encodeURIComponent(q)}`);
+  return result.ok ? result.data.suggestions ?? [] : [];
+}
+async function validateStoreAddress(address, client) {
+  const result = await client.post("/api/address/validate", { address });
+  if (!result.ok || result.data.error || !result.data.formattedAddress)
+    return null;
+  return {
+    address: result.data.formattedAddress,
+    placeId: result.data.googlePlaceId ?? null
+  };
 }
-function CheckoutClient(_props) {
+function CheckoutClient({
+  storeApiOrigin,
+  ordersHref = "/portal/orders",
+  completionHref = "/checkout/complete"
+}) {
+  const client = React24.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [stage, setStage] = React24.useState("loading");
   const [givenName, setGivenName] = React24.useState(null);
   const [cart] = React24.useState(() => readCart());
+  const recoveryKey = React24.useMemo(
+    () => checkoutRecoveryKey(client.apiOrigin),
+    [client]
+  );
+  const [initialRecovery] = React24.useState(
+    () => readCheckoutRecovery(recoveryKey)
+  );
+  const recoveryRef = React24.useRef(
+    initialRecovery
+  );
+  const attemptTokenRef = React24.useRef(
+    initialRecovery?.attemptToken ?? null
+  );
+  const [checkoutLines, setCheckoutLines] = React24.useState(
+    () => cartToWireLines(cart)
+  );
+  const checkoutCartSnapshotRef = React24.useRef(cart.lines);
   const [quote, setQuote] = React24.useState(null);
+  const [pendingQuote, setPendingQuote] = React24.useState(null);
+  const [pendingQuoteBaseline, setPendingQuoteBaseline] = React24.useState(null);
   const [shippingOptions, setShippingOptions] = React24.useState([]);
   const [error2, setError] = React24.useState(null);
-  const [fulfilment, setFulfilment] = React24.useState("pickup");
-  const [shippingOptionId, setShippingOptionId] = React24.useState(null);
+  const [resumableCheckout, setResumableCheckout] = React24.useState(null);
+  const [fulfilment, setFulfilment] = React24.useState(
+    "pickup"
+  );
+  const [shippingOptionId, setShippingOptionId] = React24.useState(
+    null
+  );
   const [address, setAddress] = React24.useState(null);
-  const [card, setCard] = React24.useState({ number: "", expiry: "", name: "", cvn: "" });
+  const [card, setCard] = React24.useState({
+    number: "",
+    expiry: "",
+    name: "",
+    cvn: ""
+  });
   const orderRef = React24.useRef(null);
   const [iframeUrl, setIframeUrl] = React24.useState(null);
   const iframeOriginRef = React24.useRef(null);
   const iframeElRef = React24.useRef(null);
-  React24.useEffect(() => {
-    let alive = true;
-    if (cart.lines.length === 0) {
-      setStage("empty");
-      return;
-    }
-    Promise.all([
-      fetch("/api/store/session", { headers: { accept: "application/json" } }).then(
-        (r) => r.ok ? r.json() : { signedIn: false }
-      ),
-      fetch("/api/store/quote", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ lines: cartToWireLines(cart) })
-      }).then((r) => r.ok ? r.json() : null),
-      fetch("/api/store/catalog", { headers: { accept: "application/json" } }).then(
-        (r) => r.ok ? r.json() : { shippingOptions: [] }
-      )
-    ]).then(([session, q, catalog]) => {
-      if (!alive) return;
-      setQuote(q);
-      setShippingOptions(catalog.shippingOptions ?? []);
-      setGivenName(session.givenName ?? null);
-      setStage(session.signedIn ? "details" : "signed_out");
-    }).catch(() => {
-      if (alive) setError("We couldn\u2019t load your checkout. Please try again.");
+  const ownsCheckoutRef = React24.useRef(false);
+  const ownershipClaimRef = React24.useRef(null);
+  const releaseCheckoutOwnershipRef = React24.useRef(null);
+  async function claimCheckoutOwnership() {
+    if (ownsCheckoutRef.current) return true;
+    if (ownershipClaimRef.current) return ownershipClaimRef.current;
+    const locks = navigator.locks;
+    if (!locks) return false;
+    const claim = new Promise((resolveClaim) => {
+      let resolveHold = null;
+      const hold = new Promise((resolve) => {
+        resolveHold = resolve;
+      });
+      void locks.request(
+        `patientos-store-checkout:${recoveryKey}`,
+        { mode: "exclusive", ifAvailable: true },
+        async (lock) => {
+          if (!lock) {
+            resolveClaim(false);
+            return;
+          }
+          ownsCheckoutRef.current = true;
+          releaseCheckoutOwnershipRef.current = () => {
+            if (!ownsCheckoutRef.current) return;
+            ownsCheckoutRef.current = false;
+            releaseCheckoutOwnershipRef.current = null;
+            resolveHold?.();
+          };
+          resolveClaim(true);
+          await hold;
+        }
+      ).catch(() => resolveClaim(false));
     });
-    return () => {
-      alive = false;
-    };
-  }, [cart]);
+    ownershipClaimRef.current = claim;
+    const acquired = await claim;
+    ownershipClaimRef.current = null;
+    return acquired;
+  }
+  function releaseCheckoutOwnership() {
+    releaseCheckoutOwnershipRef.current?.();
+  }
+  function goToCompletion(orderId) {
+    window.location.assign(
+      checkoutCompletionUrl(completionHref, orderId, window.location.origin)
+    );
+  }
+  React24.useEffect(
+    () => () => {
+      releaseCheckoutOwnership();
+    },
+    []
+  );
+  function releaseOwnedAttempt(attemptToken) {
+    const removed = removeCheckoutRecovery(recoveryKey, attemptToken);
+    if (removed && recoveryRef.current?.attemptToken === attemptToken) {
+      recoveryRef.current = null;
+      attemptTokenRef.current = null;
+    }
+    return removed;
+  }
+  async function finishPaidAttemptWhileLocked(attemptToken) {
+    const stored = readCheckoutRecovery(recoveryKey);
+    if (stored?.attemptToken !== attemptToken || stored.lines === null)
+      return "snapshot_unavailable";
+    const settled = await subtractPurchasedCartLines(
+      stored.lines,
+      attemptToken
+    );
+    if (!settled.persisted) return "storage_unavailable";
+    return releaseOwnedAttempt(attemptToken) ? "settled" : "storage_unavailable";
+  }
+  async function finishPaidAttempt(attemptToken) {
+    if (ownsCheckoutRef.current) {
+      const result = await finishPaidAttemptWhileLocked(attemptToken);
+      if (result === "settled") releaseCheckoutOwnership();
+      return result;
+    }
+    const locks = navigator.locks;
+    if (!locks) return "storage_unavailable";
+    return locks.request(
+      `patientos-store-checkout:${recoveryKey}`,
+      () => finishPaidAttemptWhileLocked(attemptToken)
+    );
+  }
+  function paidReconciliationPending(result) {
+    setError(
+      result === "snapshot_unavailable" ? "Payment was received, but this browser no longer has a safe cart snapshot. Review your cart and order before checking out again." : "Payment was received, but your cart update could not be saved. Allow site storage, then try again."
+    );
+    setStage("reconciliation_pending");
+  }
+  async function completePaidAttempt(attemptToken, orderId, alreadyLocked = false) {
+    const result = alreadyLocked ? await finishPaidAttemptWhileLocked(attemptToken) : await finishPaidAttempt(attemptToken);
+    if (result !== "settled") {
+      paidReconciliationPending(result);
+      return false;
+    }
+    if (alreadyLocked) releaseCheckoutOwnership();
+    setStage("paid");
+    goToCompletion(orderId);
+    return true;
+  }
+  async function retryPaidReconciliation() {
+    const attemptToken = attemptTokenRef.current;
+    if (!attemptToken) return;
+    await completePaidAttempt(
+      attemptToken,
+      orderRef.current?.orderId ?? attemptToken
+    );
+  }
+  function recoverySnapshotUnavailable() {
+    releaseCheckoutOwnership();
+    setError(
+      "This checkout can\u2019t be safely continued in this browser. Review My orders and your cart before trying again."
+    );
+    setStage("closed");
+  }
+  function storageUnavailable() {
+    releaseCheckoutOwnership();
+    setError(
+      "Your browser couldn\u2019t safely save and coordinate checkout progress. Allow site storage, then reload and try again."
+    );
+    setStage("storage_error");
+  }
   React24.useEffect(() => {
-    if (stage !== "details" || cart.lines.length === 0) return;
     let alive = true;
-    fetch("/api/store/quote", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        lines: cartToWireLines(cart),
-        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
-      })
-    }).then((r) => r.ok ? r.json() : null).then((q) => {
-      if (alive && q) setQuote(q);
-    }).catch(() => void 0);
-    return () => {
-      alive = false;
-    };
-  }, [fulfilment, shippingOptionId]);
-  React24.useEffect(() => {
-    if (stage !== "three_ds") return;
-    function onMessage(event) {
-      if (iframeOriginRef.current && event.origin !== iframeOriginRef.current) return;
-      if (iframeElRef.current && event.source !== iframeElRef.current.contentWindow) return;
-      const data = typeof event.data === "string" ? event.data : null;
-      if (!data) return;
-      if (data === "AuthenticationInternalError") {
-        setIframeUrl(null);
-        setError("The card check could not be completed. Please try another card.");
-        setStage("details");
+    void (async () => {
+      const locks = navigator.locks;
+      if (!locks) {
+        if (!alive) return;
+        storageUnavailable();
         return;
       }
-      if (data === "AuthenticationComplete" || data === "AuthenticationUserInteractionFinished") {
-        setIframeUrl(null);
-        void afterChallenge();
+      const storedAttemptToken = attemptTokenRef.current;
+      let bootRecovery = {
+        status: "continue"
+      };
+      if (storedAttemptToken) {
+        const acquired = await claimCheckoutOwnership();
+        if (acquired) {
+          const recovered = await client.post(
+            "/api/store/checkout/recover",
+            { attemptToken: storedAttemptToken }
+          );
+          if (recovered.ok && recovered.data.status === "paid") {
+            await completePaidAttempt(
+              storedAttemptToken,
+              recovered.data.orderId ?? storedAttemptToken,
+              true
+            );
+            return;
+          } else if (recovered.ok && recovered.data.status === "active") {
+            releaseCheckoutOwnership();
+            bootRecovery = { status: "active" };
+          } else if (recovered.ok && recovered.data.status === "resumable" && !Array.isArray(readCheckoutRecovery(recoveryKey)?.lines)) {
+            recoverySnapshotUnavailable();
+            return;
+          } else if (recovered.ok && recovered.data.status === "resumable" && Array.isArray(readCheckoutRecovery(recoveryKey)?.lines) && recovered.data.orderId && recovered.data.sessionId && recovered.data.sessionStatus && recovered.data.providerKey && recovered.data.amount && recovered.data.clientArtifacts) {
+            bootRecovery = {
+              status: "resumable",
+              session: recovered.data
+            };
+          } else if (recovered.ok && recovered.data.status === "processing") {
+            releaseCheckoutOwnership();
+            bootRecovery = { status: "processing" };
+          } else if (recovered.ok) {
+            if (!releaseOwnedAttempt(storedAttemptToken)) {
+              recoverySnapshotUnavailable();
+              return;
+            }
+            releaseCheckoutOwnership();
+          } else {
+            releaseCheckoutOwnership();
+            bootRecovery = {
+              status: recovered.error === "sign_in_required" ? "continue" : "error"
+            };
+          }
+        } else {
+          bootRecovery = { status: "active_elsewhere" };
+        }
       }
-    }
-    window.addEventListener("message", onMessage);
-    return () => window.removeEventListener("message", onMessage);
-  }, [stage]);
-  async function post(path, body) {
-    const res = await fetch(path, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(body)
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok) {
-      if (data.error === "sign_in_required") {
-        setStage("signed_out");
+      if (!alive) return;
+      if (bootRecovery.status === "active") {
+        setStage("active");
+        return;
+      }
+      if (bootRecovery.status === "active_elsewhere") {
+        setStage("active_elsewhere");
+        return;
+      }
+      if (bootRecovery.status === "resumable") {
+        setResumableCheckout(bootRecovery.session);
+        setStage("resume");
+        return;
+      }
+      if (bootRecovery.status === "processing") {
+        setStage("pending");
+        return;
+      }
+      if (bootRecovery.status === "error") {
+        setError(
+          "We couldn\u2019t recover your previous checkout. Please try again."
+        );
+        setStage("quote_error");
+        return;
+      }
+      if (cart.lines.length === 0) {
+        if (!alive) return;
+        setStage("empty");
+        return;
+      }
+      const [sessionResult, quoteResult, catalogResult] = await Promise.all([
+        client.get("/api/store/session"),
+        client.post("/api/store/quote", {
+          lines: checkoutLines
+        }),
+        client.get("/api/store/catalog")
+      ]);
+      if (!alive) return;
+      const session = sessionResult.ok && typeof sessionResult.data.signedIn === "boolean" ? sessionResult.data : null;
+      const unsupportedQuote = quoteResult.ok && quoteResult.data.problems.some(
+        (problem) => problem.code === "not_purchasable"
+      );
+      const payableQuote = quoteResult.ok && quoteResult.data.lines.length > 0 && !unsupportedQuote ? quoteResult.data : null;
+      const catalogLoaded = catalogResult.ok && Array.isArray(catalogResult.data.shippingOptions);
+      setQuote(payableQuote);
+      setShippingOptions(
+        catalogLoaded ? catalogResult.data.shippingOptions : []
+      );
+      setGivenName(session?.givenName ?? null);
+      if (!session) {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      } else if (unsupportedQuote) {
+        setError(
+          "Remove unsupported items from your cart before starting retail checkout."
+        );
+        setStage("unsupported");
+      } else if (quoteResult.ok && quoteResult.data.lines.length === 0) {
+        setError(null);
+        setStage("empty");
+      } else if (session.signedIn === false) {
+        setStage("signed_out");
+      } else if (!catalogLoaded) {
+        setError("We couldn\u2019t load delivery options. Please try again.");
+        setStage("quote_error");
+      } else if (quoteResult.ok) {
+        setError(null);
+        setStage("details");
+      } else {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      }
+    })();
+    return () => {
+      alive = false;
+    };
+  }, [cart, client]);
+  React24.useEffect(() => {
+    if (stage !== "details" || cart.lines.length === 0) return;
+    let alive = true;
+    setQuote(null);
+    setError(null);
+    void client.post("/api/store/quote", {
+      lines: checkoutLines,
+      shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
+    }).then((result) => {
+      if (!alive) return;
+      if (result.ok && result.data.lines.length > 0) {
+        setQuote(result.data);
+      } else if (result.ok) {
+        setQuote(null);
+        setStage("empty");
+      } else {
+        setError("We couldn\u2019t update your checkout total. Please try again.");
+        setStage("quote_error");
+      }
+    });
+    return () => {
+      alive = false;
+    };
+  }, [client, fulfilment, shippingOptionId]);
+  React24.useEffect(() => {
+    if (stage !== "three_ds") return;
+    let terminalHandled = false;
+    function onMessage(event) {
+      if (iframeOriginRef.current && event.origin !== iframeOriginRef.current)
+        return;
+      const iframe = iframeElRef.current;
+      if (!iframe || event.source !== iframe.contentWindow) return;
+      const type = event.data?.type;
+      if (type === "AuthenticationUserInteractionRequired") {
+        if (iframe) {
+          iframe.style.visibility = "visible";
+          iframe.style.height = "500px";
+        }
+        return;
+      }
+      if (type === "AuthenticationUserInteractionFinished") {
+        if (iframe) {
+          iframe.style.visibility = "hidden";
+          iframe.style.height = "1px";
+        }
+        return;
+      }
+      if (type !== "AuthenticationInternalError" && type !== "AuthenticationComplete")
+        return;
+      if (terminalHandled) return;
+      terminalHandled = true;
+      window.removeEventListener("message", onMessage);
+      setIframeUrl(null);
+      if (type === "AuthenticationInternalError") {
+        void cancelFailedChallenge();
+        return;
+      }
+      void afterChallenge();
+    }
+    window.addEventListener("message", onMessage);
+    return () => window.removeEventListener("message", onMessage);
+  }, [stage]);
+  async function post(path, body) {
+    const result = await client.post(path, body);
+    if (!result.ok) {
+      if (result.error === "sign_in_required") {
+        setStage("signed_out");
         throw new Error("sign_in_required");
       }
-      throw new Error(typeof data.message === "string" ? data.message : "Something went wrong.");
+      throw new StoreRequestError(
+        result.message ?? "Something went wrong.",
+        result.error
+      );
+    }
+    return result.data;
+  }
+  function showChallenge(artifacts) {
+    if (!artifacts.iframeUrl) return false;
+    const iframeUrl2 = client.url(artifacts.iframeUrl);
+    try {
+      const parsedIframeUrl = new URL(iframeUrl2, window.location.href);
+      const ownedMockUrl = new URL(
+        client.url("/api/store/mock-3ds-challenge"),
+        window.location.href
+      );
+      const isOwnedMock = parsedIframeUrl.origin === ownedMockUrl.origin && parsedIframeUrl.pathname === ownedMockUrl.pathname && parsedIframeUrl.search === "" && parsedIframeUrl.hash === "";
+      if (parsedIframeUrl.username || parsedIframeUrl.password) return false;
+      if (isOwnedMock) {
+        const allowedProtocol = parsedIframeUrl.protocol === "https:" || parsedIframeUrl.protocol === "http:" && parsedIframeUrl.hostname === "localhost";
+        if (!allowedProtocol) return false;
+        iframeOriginRef.current = parsedIframeUrl.origin;
+      } else {
+        if (parsedIframeUrl.protocol !== "https:" || !artifacts.iframeOrigin)
+          return false;
+        const suppliedOrigin = new URL(artifacts.iframeOrigin);
+        if (suppliedOrigin.protocol !== "https:" || suppliedOrigin.username || suppliedOrigin.password || suppliedOrigin.pathname !== "/" || suppliedOrigin.search || suppliedOrigin.hash)
+          return false;
+        if (parsedIframeUrl.origin !== suppliedOrigin.origin) return false;
+        iframeOriginRef.current = suppliedOrigin.origin;
+      }
+    } catch {
+      return false;
+    }
+    setIframeUrl(iframeUrl2);
+    setStage("three_ds");
+    return true;
+  }
+  async function cancelFailedChallenge() {
+    const orderId = orderRef.current?.orderId;
+    if (!orderId) {
+      setStage("pending");
+      return;
+    }
+    setStage("paying");
+    try {
+      await post("/api/store/checkout/cancel-challenge", { orderId });
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken) releaseOwnedAttempt(attemptToken);
+      setError("The card check could not be completed. Please try again.");
+      setStage(quote ? "details" : "closed");
+      releaseCheckoutOwnership();
+    } catch {
+      setError(
+        "We couldn\u2019t safely close the failed card check. Go to your orders before trying again."
+      );
+      setStage("pending");
+    }
+  }
+  async function recoverAttemptWhileLocked(attemptToken, continueRestart = false) {
+    const recovered = await client.post(
+      "/api/store/checkout/recover",
+      { attemptToken }
+    );
+    if (recovered.ok && recovered.data.status === "active") {
+      setStage("active");
+      releaseCheckoutOwnership();
+      return "active";
+    }
+    if (recovered.ok && recovered.data.status === "resumable" && !Array.isArray(readCheckoutRecovery(recoveryKey)?.lines)) {
+      recoverySnapshotUnavailable();
+      return "blocked";
+    }
+    if (recovered.ok && recovered.data.status === "resumable" && Array.isArray(readCheckoutRecovery(recoveryKey)?.lines) && recovered.data.orderId && recovered.data.sessionId && recovered.data.sessionStatus && recovered.data.providerKey && recovered.data.amount && recovered.data.clientArtifacts) {
+      setResumableCheckout(recovered.data);
+      setStage("resume");
+      return "active";
+    }
+    if (recovered.ok && recovered.data.status === "processing") {
+      setStage("pending");
+      releaseCheckoutOwnership();
+      return "processing";
+    }
+    if (recovered.ok && recovered.data.status === "paid") {
+      return await completePaidAttempt(
+        attemptToken,
+        recovered.data.orderId ?? attemptToken,
+        true
+      ) ? "paid" : "blocked";
+    }
+    if (recovered.ok) {
+      if (!releaseOwnedAttempt(attemptToken)) {
+        recoverySnapshotUnavailable();
+        return "blocked";
+      }
+      if (!continueRestart) {
+        releaseCheckoutOwnership();
+        setError(
+          "Your previous checkout was closed. Review the total and try again."
+        );
+        setStage("details");
+      }
+      return "restart";
+    }
+    setError(
+      "We couldn\u2019t safely close your previous checkout. Go to your orders before trying again."
+    );
+    setStage("closed");
+    releaseCheckoutOwnership();
+    return "blocked";
+  }
+  async function recoverAttemptForRestart(attemptToken) {
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return "active";
     }
-    return data;
+    return recoverAttemptWhileLocked(attemptToken);
+  }
+  async function transitionRetryableDecline(message) {
+    const orderId = orderRef.current?.orderId;
+    if (!orderId) {
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken) await recoverAttemptWhileLocked(attemptToken);
+      else setStage("pending");
+      return;
+    }
+    setError(message);
+    setStage("loading");
+    const result = await client.post("/api/store/checkout/retry-payment", {
+      orderId
+    }).catch(() => null);
+    const retryData = result?.ok && result.data !== null && typeof result.data === "object" && !Array.isArray(result.data) ? result.data : null;
+    const retryArtifacts = retryData?.clientArtifacts !== null && typeof retryData?.clientArtifacts === "object" && !Array.isArray(retryData.clientArtifacts) ? retryData.clientArtifacts : null;
+    if (retryData?.status !== "ready" || retryData.orderId !== orderId || typeof retryData.sessionId !== "string" || typeof retryData.providerKey !== "string" || typeof retryData.amount !== "string" || !retryArtifacts) {
+      await recoverAttemptWhileLocked(orderId);
+      return;
+    }
+    setResumableCheckout({
+      orderId,
+      sessionId: retryData.sessionId,
+      sessionStatus: "pending",
+      providerKey: retryData.providerKey,
+      amount: retryData.amount,
+      expiresAt: typeof retryData.expiresAt === "string" ? retryData.expiresAt : null,
+      clientArtifacts: retryArtifacts
+    });
+    setStage("resume_payment");
+  }
+  async function handlePaymentRequestError(error3) {
+    if (!(error3 instanceof StoreRequestError)) return false;
+    if (error3.code === "payment_in_progress" || error3.code === "payment_initializing") {
+      setStage("pending");
+      releaseCheckoutOwnership();
+      return true;
+    }
+    if (error3.code === "payment_failed") {
+      await transitionRetryableDecline(
+        "This payment attempt failed. Please check the details or try another card."
+      );
+      return true;
+    }
+    if (error3.code === "payment_cancelled") {
+      setError(
+        "This payment attempt is closed. Go to your orders before trying again."
+      );
+      setStage("closed");
+      releaseCheckoutOwnership();
+      return true;
+    }
+    return false;
   }
   async function applyConfirm(result) {
     const status = result.status;
     if (status === "paid") {
       const orderId = orderRef.current?.orderId ?? "";
-      clearCart();
-      setStage("paid");
-      window.location.assign(`/checkout/complete?order=${encodeURIComponent(orderId)}`);
+      const attemptToken = attemptTokenRef.current;
+      if (!attemptToken) {
+        paidReconciliationPending("snapshot_unavailable");
+        return;
+      }
+      await completePaidAttempt(attemptToken, orderId);
       return;
     }
     if (status === "requires_action") {
       const artifacts = result.clientArtifacts ?? {};
-      if (!artifacts.iframeUrl) {
-        setError("Your bank asked for a check we couldn\u2019t show. Please try another card.");
-        setStage("details");
-        return;
-      }
-      iframeOriginRef.current = artifacts.iframeOrigin ?? null;
-      setIframeUrl(artifacts.iframeUrl);
-      setStage("three_ds");
+      if (!showChallenge(artifacts)) await cancelFailedChallenge();
       return;
     }
     if (status === "declined") {
-      setError("Your card was declined. Please check the details or try another card.");
-      setStage("details");
+      await transitionRetryableDecline(
+        "Your card was declined. Please check the details or try another card."
+      );
       return;
     }
     setStage("pending");
+    releaseCheckoutOwnership();
+  }
+  async function dispatchConfirm(orderId) {
+    try {
+      await applyConfirm(
+        await post("/api/store/checkout/confirm", { orderId })
+      );
+    } catch (err) {
+      if (err instanceof Error && err.message === "sign_in_required") return;
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken && err instanceof StoreRequestError && err.code === "checkout_paid") {
+        await completePaidAttempt(attemptToken, orderId);
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
+      setError(null);
+      setStage("pending");
+      releaseCheckoutOwnership();
+    }
   }
   async function afterChallenge() {
     const orderId = orderRef.current?.orderId;
@@ -12038,45 +13522,245 @@ function CheckoutClient(_props) {
     try {
       const auth = await post("/api/store/checkout/authenticate", { orderId });
       if (auth.status === "payment_failed") {
-        setError("The card check failed. Please try another card.");
-        setStage("details");
+        await transitionRetryableDecline(
+          "The card check failed. Please try another card."
+        );
         return;
       }
       if (auth.status === "requires_action") {
         const artifacts = auth.clientArtifacts ?? {};
-        if (artifacts.iframeUrl) {
-          iframeOriginRef.current = artifacts.iframeOrigin ?? null;
-          setIframeUrl(artifacts.iframeUrl);
-          setStage("three_ds");
+        if (showChallenge(artifacts)) return;
+        await cancelFailedChallenge();
+        return;
+      }
+      await dispatchConfirm(orderId);
+    } catch (err) {
+      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (await handlePaymentRequestError(err)) return;
+      setError(err instanceof Error ? err.message : "Something went wrong.");
+      setStage(resumableCheckout ? "pending" : "details");
+      if (resumableCheckout) releaseCheckoutOwnership();
+    }
+  }
+  async function initializeCheckoutAttempt(currentQuote) {
+    if (!ownsCheckoutRef.current) return null;
+    while (true) {
+      const ownedToken = attemptTokenRef.current;
+      const stored = readCheckoutRecovery(recoveryKey);
+      if (ownedToken) {
+        if (stored?.attemptToken !== ownedToken || stored.lines === null) {
+          recoverySnapshotUnavailable();
+          return null;
+        }
+        recoveryRef.current = stored;
+        break;
+      }
+      if (stored) {
+        recoveryRef.current = stored;
+        attemptTokenRef.current = stored.attemptToken;
+        const disposition = await recoverAttemptWhileLocked(
+          stored.attemptToken,
+          true
+        );
+        if (disposition !== "restart") return null;
+        continue;
+      }
+      break;
+    }
+    const existingToken = attemptTokenRef.current;
+    const expectedLines = recoveryRef.current?.lines ?? checkoutCartSnapshotRef.current;
+    if (expectedLines === null) {
+      recoverySnapshotUnavailable();
+      return null;
+    }
+    const selectedShippingOptionId = fulfilment === "ship" ? shippingOptionId : null;
+    const coordinated = await withCartLock(async (latest, signal) => {
+      const wireLines = cartToWireLines(latest);
+      const quoteResult = await client.post(
+        "/api/store/quote",
+        {
+          lines: wireLines,
+          shippingOptionId: selectedShippingOptionId
+        },
+        { signal }
+      );
+      if (!quoteResult.ok || signal.aborted)
+        return { status: "quote_error" };
+      const freshQuote = quoteResult.data;
+      const purchasedLines = snapshotPurchasedCartLines(
+        latest.lines,
+        freshQuote.lines
+      );
+      if (!purchasedLines || freshQuote.lines.length === 0 || freshQuote.problems.length > 0 || !sameCartLineSnapshot(latest.lines, expectedLines) || !samePayableQuote(currentQuote, freshQuote, selectedShippingOptionId)) {
+        return {
+          status: "cart_changed",
+          quote: freshQuote,
+          baseline: latest
+        };
+      }
+      const attemptToken = existingToken ?? crypto.randomUUID();
+      if (existingToken) {
+        if (!sameCartLineSnapshot(purchasedLines, expectedLines)) {
+          return {
+            status: "cart_changed",
+            quote: freshQuote,
+            baseline: latest
+          };
+        }
+      } else {
+        const recovery = {
+          v: 2,
+          attemptToken,
+          lines: purchasedLines
+        };
+        if (!writeCheckoutRecovery(recoveryKey, recovery, null))
+          return { status: "storage_error" };
+        recoveryRef.current = recovery;
+        attemptTokenRef.current = attemptToken;
+      }
+      const initPromise = post("/api/store/checkout/init", {
+        lines: wireLines,
+        attemptToken,
+        expectedQuote: expectedQuote(freshQuote, selectedShippingOptionId),
+        fulfilmentMethod: fulfilment,
+        shippingOptionId: selectedShippingOptionId,
+        shippingPlace: fulfilment === "ship" && address ? { address: address.address, placeId: address.placeId ?? null } : null
+      });
+      return {
+        status: "ready",
+        attemptToken,
+        initPromise
+      };
+    });
+    if (coordinated.status === "cart_storage_unavailable") {
+      storageUnavailable();
+      return null;
+    }
+    if (coordinated.status === "not_completed") {
+      setError("We couldn\u2019t confirm your checkout total. Please try again.");
+      setStage("quote_error");
+      releaseCheckoutOwnership();
+      return null;
+    }
+    const result = coordinated.result;
+    if (result.status === "storage_error") {
+      storageUnavailable();
+      return null;
+    }
+    if (result.status === "quote_error") {
+      setError("We couldn\u2019t confirm your checkout total. Please try again.");
+      setStage("quote_error");
+      releaseCheckoutOwnership();
+      return null;
+    }
+    if (result.status === "cart_changed") {
+      if (existingToken) {
+        const disposition = await recoverAttemptWhileLocked(
+          existingToken,
+          true
+        );
+        if (disposition !== "restart") return null;
+      }
+      setPendingQuote(result.quote);
+      setPendingQuoteBaseline(result.baseline);
+      setQuote(null);
+      setError(null);
+      setStage("cart_changed");
+      return null;
+    }
+    return {
+      attemptToken: result.attemptToken,
+      init: await result.initPromise
+    };
+  }
+  async function beginResume() {
+    if (!resumableCheckout) return;
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
+    orderRef.current = {
+      orderId: resumableCheckout.orderId,
+      providerKey: resumableCheckout.providerKey
+    };
+    if (resumableCheckout.sessionStatus === "requires_action") {
+      if (!showChallenge(resumableCheckout.clientArtifacts))
+        await cancelFailedChallenge();
+      return;
+    }
+    setError(null);
+    setStage("resume_payment");
+  }
+  async function onResumePayment(e) {
+    e.preventDefault();
+    if (!resumableCheckout) return;
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
+    setError(null);
+    setStage("paying");
+    orderRef.current = {
+      orderId: resumableCheckout.orderId,
+      providerKey: resumableCheckout.providerKey
+    };
+    try {
+      if (resumableCheckout.providerKey !== "mock") {
+        const { authKey } = resumableCheckout.clientArtifacts;
+        if (!authKey) {
+          setStage("pending");
+          releaseCheckoutOwnership();
           return;
         }
+        await loadBpointScript();
+        await attachCardToAuthKey(authKey, card);
       }
-      await applyConfirm(await post("/api/store/checkout/confirm", { orderId }));
+      await dispatchConfirm(resumableCheckout.orderId);
     } catch (err) {
-      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (err instanceof Error && err.message === "sign_in_required") {
+        releaseCheckoutOwnership();
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
       setError(err instanceof Error ? err.message : "Something went wrong.");
-      setStage("details");
+      setStage("resume_payment");
     }
   }
   async function onPay(e) {
     e.preventDefault();
+    if (!quote || quote.lines.length === 0) {
+      setQuote(null);
+      setError(
+        quote ? null : "We couldn\u2019t confirm your checkout total. Please try again."
+      );
+      setStage(quote ? "empty" : "quote_error");
+      return;
+    }
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
     setError(null);
     setStage("paying");
+    let attemptToken = attemptTokenRef.current;
     try {
-      const init = await post("/api/store/checkout/init", {
-        lines: cartToWireLines(cart),
-        fulfilmentMethod: fulfilment,
-        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null,
-        // The REFERENCE, never components — /api/store resolves it against Google.
-        shippingPlace: fulfilment === "ship" && address ? { address: address.address, placeId: address.placeId ?? null } : null,
-        // A previous, abandoned attempt by this shopper — the server cancels it and
-        // gives its stock back in the SAME tx that mints the replacement.
-        priorOrderId: orderRef.current?.orderId ?? null
-      });
+      const initialized = await initializeCheckoutAttempt(quote);
+      if (!initialized) return;
+      attemptToken = initialized.attemptToken;
+      const { init } = initialized;
+      setError(null);
       if (init.status === "cart_changed") {
-        setQuote(init.quote);
-        setError("Your cart changed \u2014 please review it before paying.");
-        setStage("details");
+        const changedQuote = init.quote;
+        setPendingQuote(changedQuote);
+        const baselineLines = recoveryRef.current?.lines;
+        if (!baselineLines) {
+          recoverySnapshotUnavailable();
+          return;
+        }
+        setPendingQuoteBaseline({ v: 1, lines: baselineLines });
+        setQuote(null);
+        setError(null);
+        setStage("cart_changed");
         return;
       }
       const orderId = String(init.orderId);
@@ -12084,17 +13768,220 @@ function CheckoutClient(_props) {
       orderRef.current = { orderId, providerKey };
       if (providerKey !== "mock") {
         const artifacts = init.clientArtifacts ?? {};
-        if (!artifacts.authKey) throw new Error("We couldn\u2019t start a secure payment. Please try again.");
+        if (!artifacts.authKey)
+          throw new Error(
+            "We couldn\u2019t start a secure payment. Please try again."
+          );
         await loadBpointScript();
         await attachCardToAuthKey(artifacts.authKey, card);
       }
-      await applyConfirm(await post("/api/store/checkout/confirm", { orderId }));
+      await dispatchConfirm(orderId);
     } catch (err) {
-      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (err instanceof Error && err.message === "sign_in_required") {
+        releaseCheckoutOwnership();
+        return;
+      }
+      const failedAttemptToken = attemptToken ?? attemptTokenRef.current;
+      if (failedAttemptToken && err instanceof StoreRequestError && err.code === "checkout_paid") {
+        await completePaidAttempt(failedAttemptToken, failedAttemptToken);
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
+      if (failedAttemptToken && err instanceof StoreRequestError && (err.code === "checkout_attempt_changed" || err.code === "checkout_attempt_closed" || err.code === "checkout_init_failed" || err.code === "invalid_checkout_attempt")) {
+        await recoverAttemptForRestart(failedAttemptToken);
+        return;
+      }
       setError(err instanceof Error ? err.message : "Something went wrong.");
       setStage("details");
     }
   }
+  async function retryQuote() {
+    setError(null);
+    setStage("loading");
+    const sessionResult = await client.get("/api/store/session");
+    if (!sessionResult.ok || typeof sessionResult.data.signedIn !== "boolean") {
+      setQuote(null);
+      setPendingQuote(null);
+      setPendingQuoteBaseline(null);
+      setError("We couldn\u2019t load your checkout. Please try again.");
+      setStage("quote_error");
+      return;
+    }
+    const session = sessionResult.data;
+    setGivenName(session.givenName ?? null);
+    if (session.signedIn === false) {
+      setQuote(null);
+      setPendingQuote(null);
+      setPendingQuoteBaseline(null);
+      setStage("signed_out");
+      return;
+    }
+    const [result, catalogResult] = await Promise.all([
+      client.post("/api/store/quote", {
+        lines: checkoutLines,
+        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
+      }),
+      client.get("/api/store/catalog")
+    ]);
+    const catalogLoaded = catalogResult.ok && Array.isArray(catalogResult.data.shippingOptions);
+    if (!catalogLoaded) {
+      setQuote(null);
+      setShippingOptions([]);
+      setError("We couldn\u2019t load delivery options. Please try again.");
+      setStage("quote_error");
+    } else if (result.ok && result.data.problems.some((problem) => problem.code === "not_purchasable")) {
+      setQuote(null);
+      setError(
+        "Remove unsupported items from your cart before starting retail checkout."
+      );
+      setStage("unsupported");
+    } else if (result.ok && result.data.lines.length > 0) {
+      setShippingOptions(catalogResult.data.shippingOptions);
+      setQuote(result.data);
+      setStage("details");
+    } else if (result.ok) {
+      setQuote(null);
+      setStage("empty");
+    } else {
+      setQuote(null);
+      setError("We couldn\u2019t load your checkout. Please try again.");
+      setStage("quote_error");
+    }
+  }
+  async function acceptHealedQuote() {
+    if (!pendingQuote) return;
+    const locks = navigator.locks;
+    if (!locks) {
+      storageUnavailable();
+      return;
+    }
+    const attemptedRetail = new Map(
+      (pendingQuoteBaseline?.lines ?? checkoutLines).filter((line) => line.kind === "retail").map((line) => [line.variantId, line.quantity])
+    );
+    const healedRetail = new Map(
+      pendingQuote.lines.map((line) => [line.variantId, line.quantity])
+    );
+    const optionUnavailable = pendingQuote.problems.some(
+      (problem) => problem.code === "shipping_option_unavailable"
+    );
+    const nextShippingOptionId = optionUnavailable ? null : shippingOptionId;
+    setPendingQuote(null);
+    setPendingQuoteBaseline(null);
+    setQuote(null);
+    setError(null);
+    setStage("loading");
+    const outcome = {
+      confirmedQuote: null,
+      nextProblemQuote: null,
+      nextProblemBaseline: null,
+      quoteFailed: false
+    };
+    const continueWhileCoordinated = async () => {
+      const attemptToken = attemptTokenRef.current;
+      const stored = readCheckoutRecovery(recoveryKey);
+      if (attemptToken && (stored?.attemptToken !== attemptToken || stored.lines === null) || !attemptToken && stored)
+        return null;
+      return mutateCart(
+        (latest) => ({
+          v: 1,
+          lines: latest.lines.flatMap((line) => {
+            if (line.kind !== "retail") return [line];
+            const attemptedQuantity = attemptedRetail.get(line.variantId);
+            if (attemptedQuantity === void 0) return [line];
+            const healedQuantity = healedRetail.get(line.variantId);
+            if (healedQuantity === void 0) return [];
+            return [
+              {
+                ...line,
+                quantity: line.quantity <= attemptedQuantity ? Math.min(line.quantity, healedQuantity) : Math.min(
+                  99,
+                  healedQuantity + (line.quantity - attemptedQuantity)
+                )
+              }
+            ];
+          })
+        }),
+        async (proposed, signal) => {
+          const payableLines = cartToWireLines({
+            v: 1,
+            lines: proposed.lines.filter((line) => line.kind === "retail")
+          });
+          const result = await client.post(
+            "/api/store/quote",
+            {
+              lines: payableLines,
+              shippingOptionId: fulfilment === "ship" ? nextShippingOptionId : null
+            },
+            { signal }
+          );
+          if (!result.ok) {
+            outcome.quoteFailed = true;
+            return false;
+          }
+          if (result.data.lines.length === 0 || result.data.problems.length > 0) {
+            outcome.nextProblemQuote = result.data;
+            outcome.nextProblemBaseline = proposed;
+            return false;
+          }
+          const purchasedLines = snapshotPurchasedCartLines(
+            proposed.lines,
+            result.data.lines
+          );
+          if (!purchasedLines) return false;
+          if (attemptToken) {
+            const recovery = {
+              v: 2,
+              attemptToken,
+              lines: purchasedLines
+            };
+            if (!writeCheckoutRecovery(recoveryKey, recovery, attemptToken))
+              return false;
+            recoveryRef.current = recovery;
+          }
+          outcome.confirmedQuote = result.data;
+          return true;
+        }
+      );
+    };
+    const persisted = ownsCheckoutRef.current ? await continueWhileCoordinated() : await locks.request(
+      `patientos-store-checkout:${recoveryKey}`,
+      continueWhileCoordinated
+    );
+    if (!persisted || persisted.status === "cart_storage_unavailable") {
+      storageUnavailable();
+      return;
+    }
+    if (persisted.status === "not_committed") {
+      if (outcome.quoteFailed) {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      } else if (outcome.nextProblemQuote?.lines.length === 0) {
+        setStage("empty");
+      } else if (outcome.nextProblemQuote && outcome.nextProblemBaseline) {
+        setPendingQuote(outcome.nextProblemQuote);
+        setPendingQuoteBaseline(outcome.nextProblemBaseline);
+        setStage("cart_changed");
+      } else {
+        storageUnavailable();
+      }
+      return;
+    }
+    if (optionUnavailable) setShippingOptionId(null);
+    if (!outcome.confirmedQuote) {
+      storageUnavailable();
+      return;
+    }
+    checkoutCartSnapshotRef.current = persisted.cart.lines;
+    setCheckoutLines(
+      outcome.confirmedQuote.lines.map((line) => ({
+        kind: "retail",
+        variantId: line.variantId,
+        quantity: line.quantity
+      }))
+    );
+    setQuote(outcome.confirmedQuote);
+    setStage("details");
+  }
   if (stage === "loading") {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout" }),
@@ -12112,7 +13999,69 @@ function CheckoutClient(_props) {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout" }),
       /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Please sign in to finish your order. Your order is kept with your clinic record so you can see it later." }),
-      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__signin", href: "/portal/sign-in?redirect=/checkout", children: "Sign in to continue" })
+      /* @__PURE__ */ jsx30(
+        "a",
+        {
+          className: "sk-checkout__signin",
+          href: client.signInHref("/checkout"),
+          children: "Sign in to continue"
+        }
+      )
+    ] });
+  }
+  if (stage === "unsupported") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Update your cart" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/cart", children: "Return to cart" })
+    ] });
+  }
+  if (stage === "quote_error") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 ?? "We couldn\u2019t load your checkout. Please try again." }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void retryQuote(),
+          children: "Try again"
+        }
+      )
+    ] });
+  }
+  if (stage === "cart_changed" && pendingQuote) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Your cart was updated" }),
+      /* @__PURE__ */ jsx30("div", { className: "sk-checkout__error", role: "alert", children: pendingQuote.problems.length > 0 ? /* @__PURE__ */ jsx30("ul", { children: pendingQuote.problems.map((problem, index) => /* @__PURE__ */ jsx30("li", { children: problem.message }, `${problem.code}-${index}`)) }) : /* @__PURE__ */ jsx30("p", { children: "Prices or delivery details changed while you were checking out." }) }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void acceptHealedQuote(),
+          children: "Continue with updated cart"
+        }
+      )
+    ] });
+  }
+  if (stage === "reconciliation_pending") {
+    const persistedRecovery = readCheckoutRecovery(recoveryKey);
+    const canRetry = persistedRecovery?.attemptToken === attemptTokenRef.current && persistedRecovery.lines !== null;
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Payment received, cart update pending" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 }),
+      canRetry ? /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void retryPaidReconciliation(),
+          children: "Try updating cart again"
+        }
+      ) : /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/cart", children: "Review cart" }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "View My orders" })
     ] });
   }
   if (stage === "paid") {
@@ -12121,11 +14070,130 @@ function CheckoutClient(_props) {
       /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Taking you to your order\u2026" })
     ] });
   }
+  if (stage === "storage_error") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout unavailable" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 })
+    ] });
+  }
+  if (stage === "closed") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Payment not completed" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: error2 }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "resume" && resumableCheckout) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Resume checkout" }),
+      /* @__PURE__ */ jsxs27("p", { className: "sk-checkout__note", role: "status", children: [
+        "Your checkout for ",
+        formatMoney(resumableCheckout.amount),
+        " is ready to continue."
+      ] }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: beginResume,
+          children: "Resume checkout"
+        }
+      ),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "resume_payment" && resumableCheckout) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Resume checkout" }),
+      error2 ? /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 }) : null,
+      /* @__PURE__ */ jsxs27("p", { className: "sk-checkout__note", role: "status", children: [
+        "Order total: ",
+        formatMoney(resumableCheckout.amount)
+      ] }),
+      /* @__PURE__ */ jsxs27("form", { className: "sk-checkout__form", onSubmit: onResumePayment, children: [
+        /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
+          /* @__PURE__ */ jsx30("legend", { children: "Card details" }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Name on card" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                autoComplete: "cc-name",
+                value: card.name,
+                onChange: (e) => setCard({ ...card, name: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Card number" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-number",
+                value: card.number,
+                onChange: (e) => setCard({ ...card, number: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Expiry (MM/YY)" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-exp",
+                placeholder: "MM/YY",
+                value: card.expiry,
+                onChange: (e) => setCard({ ...card, expiry: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Security code" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-csc",
+                value: card.cvn,
+                onChange: (e) => setCard({ ...card, cvn: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Your card details go straight to our payment provider \u2014 they never reach this clinic's systems." })
+        ] }),
+        /* @__PURE__ */ jsxs27("button", { type: "submit", className: "sk-checkout__pay", children: [
+          "Pay ",
+          formatMoney(resumableCheckout.amount)
+        ] })
+      ] })
+    ] });
+  }
+  if (stage === "active_elsewhere") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout active elsewhere" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Finish checkout in your other tab, or close it and reload this page." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "active") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout is still opening" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Wait a moment, then reload this page before trying again." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
   if (stage === "pending") {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Confirming your payment" }),
-      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Your bank hasn't confirmed the result yet. We're checking with them \u2014 please don't pay again. You'll see the order in your account once it's confirmed." }),
-      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/portal/orders", children: "Go to my orders" })
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: error2 ?? "Your bank hasn't confirmed the result yet. We're checking with them \u2014 please don't pay again. You'll see the order in your account once it's confirmed." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
     ] });
   }
   if (stage === "three_ds" && iframeUrl) {
@@ -12137,16 +14205,23 @@ function CheckoutClient(_props) {
           ref: iframeElRef,
           className: "sk-checkout__3ds",
           src: iframeUrl,
+          style: { visibility: "hidden", height: "1px" },
           title: "Card verification"
         }
       )
     ] });
   }
   const busy = stage === "paying";
+  if (!quote) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__placeholder", role: "status", children: "Updating your order total\u2026" })
+    ] });
+  }
   return /* @__PURE__ */ jsxs27(Fragment14, { children: [
     /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
     error2 ? /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 }) : null,
-    quote ? /* @__PURE__ */ jsxs27("div", { className: "sk-checkout__summary", children: [
+    /* @__PURE__ */ jsxs27("div", { className: "sk-checkout__summary", children: [
       /* @__PURE__ */ jsx30("ul", { className: "sk-checkout__lines", children: quote.lines.map((l) => /* @__PURE__ */ jsxs27("li", { children: [
         /* @__PURE__ */ jsxs27("span", { children: [
           l.title,
@@ -12173,9 +14248,9 @@ function CheckoutClient(_props) {
           /* @__PURE__ */ jsx30("dd", { children: formatMoney(quote.total) })
         ] })
       ] })
-    ] }) : null,
+    ] }),
     /* @__PURE__ */ jsxs27("form", { className: "sk-checkout__form", onSubmit: onPay, children: [
-      quote?.requiresShipping ? /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
+      quote.requiresShipping ? /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
         /* @__PURE__ */ jsx30("legend", { children: "How would you like to get this?" }),
         /* @__PURE__ */ jsxs27("label", { children: [
           /* @__PURE__ */ jsx30(
@@ -12228,8 +14303,8 @@ function CheckoutClient(_props) {
               label: "Delivery address",
               value: address,
               onChange: setAddress,
-              search: searchStoreAddresses,
-              validate: validateStoreAddress
+              search: (query) => searchStoreAddresses(query, client),
+              validate: (value) => validateStoreAddress(value, client)
             }
           )
         ] }) : null
@@ -12290,7 +14365,7 @@ function CheckoutClient(_props) {
         ] }),
         /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Your card details go straight to our payment provider \u2014 they never reach this clinic's systems." })
       ] }),
-      /* @__PURE__ */ jsx30("button", { type: "submit", className: "sk-checkout__pay", disabled: busy, children: busy ? "Processing\u2026" : quote ? `Pay ${formatMoney(quote.total)}` : "Pay" })
+      /* @__PURE__ */ jsx30("button", { type: "submit", className: "sk-checkout__pay", disabled: busy, children: busy ? "Processing\u2026" : `Pay ${formatMoney(quote.total)}` })
     ] })
   ] });
 }
@@ -12310,6 +14385,7 @@ export {
   getThemeTokens,
   PortalAccount,
   PortalAccountClient,
+  createStoreClient,
   StoreClient,
   CartClient,
   CheckoutClient