@patientos/website-kit 0.2.5 → 0.2.6

package/dist/{chunk-75FJ5AJB.js → chunk-7ZOQ6UKG.js}

@@ -27,6 +27,7 @@ import {
   createPortalClient,
   describedBy,
   effectiveFee,
+  encodePortalReturnTarget,
   errorCode,
   errorMessage,
   feeNote,
@@ -48,6 +49,7 @@ import {
   isSessionExpired,
   isSlotTakenError,
   loadFlowRecord,
+  normalizePortalApiOrigin,
   observeSessionExpiry,
   once,
   patientos,
@@ -65,7 +67,7 @@ import {
   signOutOfPortal,
   writePortalSignedInHint,
   zoneAbbr
-} from "./chunk-FSZ726DM.js";
+} from "./chunk-ZYX4TXBN.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -12067,6 +12069,25 @@ var EMPTY_CART = Object.freeze({
   v: 1,
   lines: Object.freeze([])
 });
+function cartLineId(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized.length > 0 && normalized.length <= 128 ? normalized : null;
+}
+function legacyCartLineId(kind, variantId) {
+  const input = `${kind}\0${variantId}`;
+  let first = 2166136261;
+  let second = 2246822507;
+  for (let index = 0; index < input.length; index += 1) {
+    const code2 = input.charCodeAt(index);
+    first = Math.imul(first ^ code2, 16777619);
+    second = Math.imul(second ^ code2, 3266489909);
+  }
+  return `legacy-${(first >>> 0).toString(16).padStart(8, "0")}${(second >>> 0).toString(16).padStart(8, "0")}`;
+}
+function newCartLineId() {
+  return crypto.randomUUID();
+}
 function storage() {
   try {
     if (typeof window === "undefined" || !window.localStorage) return null;
@@ -12084,7 +12105,39 @@ function parseLine(raw) {
   const n = typeof line.quantity === "number" ? line.quantity : Number(line.quantity);
   if (!Number.isFinite(n)) return null;
   const quantity = Math.min(Math.max(Math.floor(n), 1), MAX_QUANTITY);
-  return { kind, variantId, quantity };
+  const lineId = cartLineId(line.lineId) ?? legacyCartLineId(kind, variantId);
+  return { lineId, kind, variantId, quantity };
+}
+function normalizeCartLines(entries) {
+  const lines = [];
+  const byIdentity = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const line = parseLine(entry);
+    if (!line) continue;
+    const identity = `${line.kind}\0${line.variantId}`;
+    const existing = byIdentity.get(identity);
+    if (existing) {
+      existing.quantity = Math.min(
+        existing.quantity + line.quantity,
+        MAX_QUANTITY
+      );
+      continue;
+    }
+    if (lines.length >= MAX_LINES) continue;
+    lines.push(line);
+    byIdentity.set(identity, line);
+  }
+  return lines;
+}
+function normalizeSettledAttemptTokens(entries) {
+  if (!Array.isArray(entries)) return [];
+  return Array.from(
+    new Set(
+      entries.filter(
+        (entry) => typeof entry === "string" && entry.length > 0 && entry.length <= 128
+      )
+    )
+  ).slice(-32);
 }
 function readCart() {
   const store = storage();
@@ -12098,75 +12151,216 @@ function readCart() {
   if (!raw) return emptyCart();
   try {
     const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return emptyCart();
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return emptyCart();
     const bag = parsed;
     if (bag.v !== 1 || !Array.isArray(bag.lines)) return emptyCart();
-    const lines = [];
-    for (const entry of bag.lines.slice(0, MAX_LINES)) {
-      const line = parseLine(entry);
-      if (line) lines.push(line);
-    }
-    return { v: 1, lines };
+    const settledAttemptTokens = normalizeSettledAttemptTokens(
+      bag.settledAttemptTokens
+    );
+    return {
+      v: 1,
+      lines: normalizeCartLines(bag.lines),
+      ...settledAttemptTokens.length > 0 ? { settledAttemptTokens } : {}
+    };
   } catch {
     return emptyCart();
   }
 }
-function writeCart(cart) {
-  const normalised = { v: 1, lines: cart.lines.slice(0, MAX_LINES) };
+var CART_MUTATION_LOCK = "patientos-cart-mutation-v1";
+var CART_MUTATION_VALIDATION_TIMEOUT_MS = 5e3;
+function persistCart(cart) {
+  const settledAttemptTokens = normalizeSettledAttemptTokens(
+    cart.settledAttemptTokens
+  );
+  const normalised = {
+    v: 1,
+    lines: normalizeCartLines(cart.lines),
+    ...settledAttemptTokens.length > 0 ? { settledAttemptTokens } : {}
+  };
   const store = storage();
-  if (store) {
-    try {
-      store.setItem(CART_STORAGE_KEY, JSON.stringify(normalised));
-    } catch {
-    }
+  if (!store)
+    return {
+      cart: readCart(),
+      persisted: false,
+      status: "cart_storage_unavailable"
+    };
+  try {
+    store.setItem(CART_STORAGE_KEY, JSON.stringify(normalised));
+  } catch {
+    return {
+      cart: readCart(),
+      persisted: false,
+      status: "cart_storage_unavailable"
+    };
   }
   notify(normalised);
-  return normalised;
-}
-function addToCart(variantId, quantity = 1) {
-  const cart = readCart();
-  const add2 = Math.min(Math.max(Math.floor(quantity), 1), MAX_QUANTITY);
-  const existing = cart.lines.find((l) => l.kind === "retail" && l.variantId === variantId);
-  if (existing) {
-    existing.quantity = Math.min(existing.quantity + add2, MAX_QUANTITY);
-  } else {
-    if (cart.lines.length >= MAX_LINES) return cart;
-    cart.lines.push({ kind: "retail", variantId, quantity: add2 });
+  return { cart: normalised, persisted: true, status: "updated" };
+}
+function unavailableMutation() {
+  return {
+    cart: readCart(),
+    persisted: false,
+    status: "cart_storage_unavailable"
+  };
+}
+async function mutateCart(mutation, beforePersist) {
+  const locks = typeof navigator === "undefined" ? void 0 : navigator.locks;
+  if (!storage() || !locks) return unavailableMutation();
+  try {
+    return await locks.request(CART_MUTATION_LOCK, async () => {
+      const latest = readCart();
+      const mutated = mutation(latest);
+      const proposed = {
+        ...mutated,
+        lines: normalizeCartLines(mutated.lines),
+        ...mutated.settledAttemptTokens === void 0 && latest.settledAttemptTokens ? { settledAttemptTokens: latest.settledAttemptTokens } : {}
+      };
+      if (beforePersist) {
+        const controller = new AbortController();
+        let timer;
+        const accepted = await Promise.race([
+          beforePersist(proposed, controller.signal).catch(() => false),
+          new Promise((resolve) => {
+            timer = setTimeout(() => {
+              controller.abort();
+              resolve(false);
+            }, CART_MUTATION_VALIDATION_TIMEOUT_MS);
+          })
+        ]);
+        if (timer) clearTimeout(timer);
+        if (!accepted) {
+          return {
+            cart: readCart(),
+            persisted: false,
+            status: "not_committed"
+          };
+        }
+      }
+      return persistCart(proposed);
+    });
+  } catch {
+    return unavailableMutation();
   }
-  return writeCart(cart);
 }
-function setCartQuantity(variantId, quantity) {
-  const cart = readCart();
-  const next = Math.floor(quantity);
-  if (next < 1) return removeFromCart(variantId);
-  return writeCart({
-    v: 1,
-    lines: cart.lines.map(
-      (l) => l.variantId === variantId ? { ...l, quantity: Math.min(next, MAX_QUANTITY) } : l
-    )
+async function withCartLock(operation) {
+  const locks = typeof navigator === "undefined" ? void 0 : navigator.locks;
+  if (!storage() || !locks)
+    return { status: "cart_storage_unavailable", cart: readCart() };
+  try {
+    return await locks.request(CART_MUTATION_LOCK, async () => {
+      const latest = readCart();
+      const controller = new AbortController();
+      let timer;
+      const outcome = await Promise.race([
+        operation(latest, controller.signal).then((result) => ({
+          completed: true,
+          result
+        })),
+        new Promise((resolve) => {
+          timer = setTimeout(() => {
+            controller.abort();
+            resolve({ completed: false });
+          }, CART_MUTATION_VALIDATION_TIMEOUT_MS);
+        })
+      ]);
+      if (timer) clearTimeout(timer);
+      return outcome.completed ? { status: "completed", cart: latest, result: outcome.result } : { status: "not_completed", cart: latest };
+    });
+  } catch {
+    return { status: "not_completed", cart: readCart() };
+  }
+}
+async function addToCart(variantId, quantity = 1) {
+  let status = "added";
+  const result = await mutateCart((cart) => {
+    const add2 = Math.min(Math.max(Math.floor(quantity), 1), MAX_QUANTITY);
+    const existing = cart.lines.find(
+      (line) => line.kind === "retail" && line.variantId === variantId
+    );
+    if (existing) {
+      if (existing.quantity >= MAX_QUANTITY) {
+        status = "quantity_limit";
+        return cart;
+      }
+      existing.quantity = Math.min(existing.quantity + add2, MAX_QUANTITY);
+    } else {
+      if (cart.lines.length >= MAX_LINES) {
+        status = "line_limit";
+        return cart;
+      }
+      cart.lines.push({
+        lineId: newCartLineId(),
+        kind: "retail",
+        variantId,
+        quantity: add2
+      });
+    }
+    return cart;
   });
+  return {
+    cart: result.cart,
+    status: result.status === "cart_storage_unavailable" ? result.status : status
+  };
 }
-function removeFromCart(variantId) {
-  const cart = readCart();
-  return writeCart({ v: 1, lines: cart.lines.filter((l) => l.variantId !== variantId) });
+async function adjustCartQuantity(kind, variantId, delta, maximumBaseline) {
+  const result = await mutateCart((cart) => ({
+    v: 1,
+    lines: cart.lines.flatMap((line) => {
+      if (line.kind !== kind || line.variantId !== variantId) return [line];
+      const baseline = maximumBaseline === void 0 ? line.quantity : Math.min(line.quantity, Math.max(0, Math.floor(maximumBaseline)));
+      const quantity = Math.min(baseline + Math.floor(delta), MAX_QUANTITY);
+      return quantity > 0 ? [{ ...line, quantity }] : [];
+    })
+  }));
+  return result;
 }
-function clearCart() {
-  const store = storage();
-  if (store) {
-    try {
-      store.removeItem(CART_STORAGE_KEY);
-    } catch {
-    }
-  }
-  const empty = emptyCart();
-  notify(empty);
-  return empty;
+async function removeFromCart(variantId, kind) {
+  const result = await mutateCart((cart) => ({
+    v: 1,
+    lines: cart.lines.filter(
+      (line) => line.variantId !== variantId || kind && line.kind !== kind
+    )
+  }));
+  return result;
+}
+async function subtractPurchasedCartLines(purchasedLines, attemptToken) {
+  const purchased = new Map(
+    normalizeCartLines(
+      purchasedLines.filter(
+        (line) => Boolean(line) && typeof line === "object" && !Array.isArray(line) && cartLineId(line.lineId) !== null
+      )
+    ).map((line) => [line.lineId, line])
+  );
+  return mutateCart((cart) => {
+    if (attemptToken && cart.settledAttemptTokens?.includes(attemptToken))
+      return cart;
+    return {
+      v: 1,
+      lines: cart.lines.flatMap((line) => {
+        const purchasedLine = purchased.get(line.lineId);
+        const purchasedQuantity = purchasedLine?.kind === line.kind && purchasedLine.variantId === line.variantId ? purchasedLine.quantity : 0;
+        const quantity = line.quantity - purchasedQuantity;
+        return quantity > 0 ? [{ ...line, quantity }] : [];
+      }),
+      ...attemptToken ? {
+        settledAttemptTokens: [
+          ...cart.settledAttemptTokens ?? [],
+          attemptToken
+        ]
+      } : {}
+    };
+  });
 }
 function cartItemCount(cart = readCart()) {
   return cart.lines.reduce((sum, l) => sum + l.quantity, 0);
 }
 function cartToWireLines(cart) {
-  return cart.lines.map((l) => ({ kind: l.kind, variantId: l.variantId, quantity: l.quantity }));
+  return cart.lines.map((l) => ({
+    kind: l.kind,
+    variantId: l.variantId,
+    quantity: l.quantity
+  }));
 }
 var listeners = /* @__PURE__ */ new Set();
 function notify(cart) {
@@ -12183,10 +12377,76 @@ function subscribeToCart(fn) {
     if (e.key !== null && e.key !== CART_STORAGE_KEY) return;
     fn(readCart());
   };
-  if (typeof window !== "undefined") window.addEventListener("storage", onStorage);
+  if (typeof window !== "undefined")
+    window.addEventListener("storage", onStorage);
   return () => {
     listeners.delete(fn);
-    if (typeof window !== "undefined") window.removeEventListener("storage", onStorage);
+    if (typeof window !== "undefined")
+      window.removeEventListener("storage", onStorage);
+  };
+}
+
+// src/store-client.ts
+var STORE_REQUEST_INIT = {
+  credentials: "include",
+  cache: "no-store"
+};
+async function readResult(response) {
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    return response.ok ? { ok: false, status: null, error: null, message: null } : { ok: false, status: response.status, error: null, message: null };
+  }
+  if (response.ok) return { ok: true, data: body };
+  const failure = body;
+  return {
+    ok: false,
+    status: response.status,
+    error: typeof failure?.error === "string" ? failure.error : null,
+    message: typeof failure?.message === "string" ? failure.message : null
+  };
+}
+function createStoreClient(config2 = {}) {
+  const rawOrigin = config2.apiOrigin?.trim() ?? "";
+  const normalizedOrigin = rawOrigin ? normalizePortalApiOrigin(rawOrigin) : "";
+  if (rawOrigin && !normalizedOrigin) {
+    console.error("[store] ignoring a malformed store API origin", rawOrigin);
+  }
+  const apiOrigin = normalizedOrigin ?? "";
+  const fetchImpl = config2.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
+  const url = (path) => apiOrigin && path.startsWith("/") ? apiOrigin + path : path;
+  async function request(path, init) {
+    try {
+      return await readResult(
+        await fetchImpl(url(path), {
+          ...STORE_REQUEST_INIT,
+          ...init
+        })
+      );
+    } catch {
+      return { ok: false, status: null, error: null, message: null };
+    }
+  }
+  return {
+    apiOrigin,
+    url,
+    get: (path) => request(path, { headers: { accept: "application/json" } }),
+    post: (path, body, options) => request(path, {
+      signal: options?.signal,
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/json"
+      },
+      body: JSON.stringify(body ?? {})
+    }),
+    signInHref(returnPath = "/checkout") {
+      if (typeof window === "undefined") return `${apiOrigin}/portal/sign-in`;
+      const target = new URL(returnPath, window.location.origin).toString();
+      const redirect = `/portal/return?to=${encodePortalReturnTarget(target)}`;
+      return `${apiOrigin}/portal/sign-in?redirect=${encodeURIComponent(redirect)}`;
+    }
   };
 }
 
@@ -12197,7 +12457,17 @@ function formatMoney(value) {
   if (!Number.isFinite(n)) return value;
   return `$${n.toFixed(2)}`;
 }
-function StoreClient({ categoryHandle, title, columns }) {
+function StoreClient({
+  categoryHandle,
+  productHandle,
+  storeApiOrigin,
+  title,
+  columns
+}) {
+  const client = React22.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [catalog, setCatalog] = React22.useState(null);
   const [failed, setFailed] = React22.useState(false);
   const [count, setCount] = React22.useState(0);
@@ -12207,22 +12477,32 @@ function StoreClient({ categoryHandle, title, columns }) {
   }, []);
   React22.useEffect(() => {
     let alive = true;
-    fetch("/api/store/catalog", { headers: { accept: "application/json" } }).then(
-      (res) => res.ok ? res.json() : Promise.reject(new Error(String(res.status)))
-    ).then((data) => {
-      if (alive) setCatalog(data);
-    }).catch(() => {
-      if (alive) setFailed(true);
+    const path = productHandle ? `/api/store/catalog/${encodeURIComponent(productHandle)}` : "/api/store/catalog";
+    void client.get(path).then((result) => {
+      if (!alive) return;
+      if (!result.ok) {
+        setFailed(true);
+        return;
+      }
+      setCatalog(
+        "product" in result.data ? {
+          products: [result.data.product],
+          currency: result.data.currency
+        } : result.data
+      );
+      setFailed(false);
     });
     return () => {
       alive = false;
     };
-  }, []);
+  }, [client, productHandle]);
   const products = React22.useMemo(() => {
     if (!catalog) return [];
-    if (!categoryHandle) return catalog.products;
-    return catalog.products.filter((p) => p.handle.startsWith(categoryHandle));
-  }, [catalog, categoryHandle]);
+    if (productHandle || !categoryHandle) return catalog.products;
+    return catalog.products.filter(
+      (product) => product.categories.some((category) => category.handle === categoryHandle)
+    );
+  }, [catalog, categoryHandle, productHandle]);
   if (failed) {
     return /* @__PURE__ */ jsxs25(Fragment12, { children: [
       /* @__PURE__ */ jsx28("h2", { className: "sk-store__heading", children: title ?? "Shop" }),
@@ -12251,17 +12531,30 @@ function StoreCard({ product }) {
   const [variantId, setVariantId] = React22.useState(
     () => (product.variants.find((v) => v.inStock) ?? product.variants[0]).id
   );
-  const [added, setAdded] = React22.useState(false);
+  const [addFeedback, setAddFeedback] = React22.useState(null);
   const variant = product.variants.find((v) => v.id === variantId) ?? product.variants[0];
   const image2 = product.thumbnailUrl ?? product.images[0]?.url ?? null;
-  function onAdd() {
-    addToCart(variant.id, 1);
-    setAdded(true);
-    window.setTimeout(() => setAdded(false), 1600);
+  async function onAdd() {
+    const result = await addToCart(variant.id, 1);
+    setAddFeedback(result.status);
+    window.setTimeout(() => setAddFeedback(null), 1600);
   }
   return /* @__PURE__ */ jsxs25("li", { className: "sk-store__card", children: [
     /* @__PURE__ */ jsxs25("a", { className: "sk-store__card-link", href: `/store/${product.handle}`, children: [
-      image2 ? /* @__PURE__ */ jsx28("img", { className: "sk-store__image", src: image2, alt: product.images[0]?.alt ?? "" }) : /* @__PURE__ */ jsx28("span", { className: "sk-store__image sk-store__image--empty", "aria-hidden": true }),
+      image2 ? /* @__PURE__ */ jsx28(
+        "img",
+        {
+          className: "sk-store__image",
+          src: image2,
+          alt: product.images[0]?.alt ?? ""
+        }
+      ) : /* @__PURE__ */ jsx28(
+        "span",
+        {
+          className: "sk-store__image sk-store__image--empty",
+          "aria-hidden": true
+        }
+      ),
       /* @__PURE__ */ jsx28("span", { className: "sk-store__title", children: product.title })
     ] }),
     /* @__PURE__ */ jsxs25("span", { className: "sk-store__price", children: [
@@ -12270,16 +12563,23 @@ function StoreCard({ product }) {
     ] }),
     product.variants.length > 1 ? /* @__PURE__ */ jsxs25("label", { className: "sk-store__variant", children: [
       /* @__PURE__ */ jsx28("span", { className: "sk-store__variant-label", children: "Option" }),
-      /* @__PURE__ */ jsx28("select", { value: variantId, onChange: (e) => setVariantId(e.target.value), children: product.variants.map((v) => /* @__PURE__ */ jsx28("option", { value: v.id, disabled: !v.inStock, children: (v.options.length ? v.options.join(" / ") : v.title) + (v.inStock ? "" : " \u2014 sold out") }, v.id)) })
+      /* @__PURE__ */ jsx28(
+        "select",
+        {
+          value: variantId,
+          onChange: (e) => setVariantId(e.target.value),
+          children: product.variants.map((v) => /* @__PURE__ */ jsx28("option", { value: v.id, disabled: !v.inStock, children: (v.options.length ? v.options.join(" / ") : v.title) + (v.inStock ? "" : " \u2014 sold out") }, v.id))
+        }
+      )
     ] }) : null,
     /* @__PURE__ */ jsx28(
       "button",
       {
         type: "button",
         className: "sk-store__add",
-        onClick: onAdd,
+        onClick: () => void onAdd(),
         disabled: !variant.inStock,
-        children: !variant.inStock ? "Sold out" : added ? "Added \u2713" : "Add to cart"
+        children: !variant.inStock ? "Sold out" : addFeedback === "added" ? "Added \u2713" : addFeedback === "line_limit" ? "Cart full \u2014 50 products max" : addFeedback === "quantity_limit" ? "Maximum 99 in cart" : addFeedback === "cart_storage_unavailable" ? "This browser can\u2019t safely update the cart" : "Add to cart"
       }
     )
   ] });
@@ -12288,35 +12588,48 @@ function StoreCard({ product }) {
 // src/cart-block.client.tsx
 import * as React23 from "react";
 import { Fragment as Fragment13, jsx as jsx29, jsxs as jsxs26 } from "react/jsx-runtime";
-function CartClient(_props) {
+function CartClient({ storeApiOrigin }) {
+  const client = React23.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [cart, setCart] = React23.useState(() => readCart());
   const [quote, setQuote] = React23.useState(null);
+  const [quoteSourceCart, setQuoteSourceCart] = React23.useState(
+    null
+  );
   const [failed, setFailed] = React23.useState(false);
+  const [mutationUnavailable, setMutationUnavailable] = React23.useState(false);
+  async function runMutation(mutation) {
+    const result = await mutation;
+    setMutationUnavailable(result.status === "cart_storage_unavailable");
+  }
   React23.useEffect(() => subscribeToCart(setCart), []);
   React23.useEffect(() => {
     if (cart.lines.length === 0) {
       setQuote(null);
+      setQuoteSourceCart(null);
       setFailed(false);
       return;
     }
     let alive = true;
-    fetch("/api/store/quote", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ lines: cartToWireLines(cart) })
-    }).then(
-      (res) => res.ok ? res.json() : Promise.reject(new Error(String(res.status)))
-    ).then((data) => {
+    setQuote(null);
+    setQuoteSourceCart(null);
+    setFailed(false);
+    void client.post("/api/store/quote", { lines: cartToWireLines(cart) }).then((result) => {
       if (!alive) return;
-      setQuote(data);
+      if (!result.ok) {
+        setFailed(true);
+        return;
+      }
+      setQuote(result.data);
+      setQuoteSourceCart(cart);
       setFailed(false);
-    }).catch(() => {
-      if (alive) setFailed(true);
     });
     return () => {
       alive = false;
     };
-  }, [cart]);
+  }, [cart, client]);
   if (cart.lines.length === 0) {
     return /* @__PURE__ */ jsxs26(Fragment13, { children: [
       /* @__PURE__ */ jsx29("h2", { className: "sk-cart__heading", children: "Your cart" }),
@@ -12324,13 +12637,54 @@ function CartClient(_props) {
       /* @__PURE__ */ jsx29("a", { className: "sk-cart__continue", href: "/store", children: "Browse the shop" })
     ] });
   }
+  const quotedVariantIds = new Set(
+    quote?.lines.map((line) => line.variantId) ?? []
+  );
+  const quoteSourceQuantities = new Map(
+    quoteSourceCart?.lines.filter((line) => line.kind === "retail").map((line) => [line.variantId, line.quantity]) ?? []
+  );
+  const unsupportedLines = cart.lines.filter(
+    (line) => line.kind !== "retail" || quote !== null && !quotedVariantIds.has(line.variantId)
+  );
   return /* @__PURE__ */ jsxs26(Fragment13, { children: [
     /* @__PURE__ */ jsx29("h2", { className: "sk-cart__heading", children: "Your cart" }),
     quote && quote.problems.length > 0 ? /* @__PURE__ */ jsx29("ul", { className: "sk-cart__problems", role: "status", children: quote.problems.map((p, i) => /* @__PURE__ */ jsx29("li", { children: p.message }, `${p.code}-${p.variantId ?? i}`)) }) : null,
     failed ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "alert", children: "We couldn't price your cart just now. Please try again in a moment." }) : null,
-    !quote ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "status", children: "Pricing your cart\u2026" }) : /* @__PURE__ */ jsxs26(Fragment13, { children: [
+    mutationUnavailable ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "alert", children: "This browser can\u2019t safely update the cart. Try a supported browser with site storage enabled." }) : null,
+    unsupportedLines.length > 0 ? /* @__PURE__ */ jsx29("ul", { className: "sk-cart__lines", children: unsupportedLines.map((line) => /* @__PURE__ */ jsxs26(
+      "li",
+      {
+        className: "sk-cart__line",
+        children: [
+          /* @__PURE__ */ jsx29("span", { className: "sk-cart__line-title", children: line.kind === "fill" ? "Prescription item" : "Unavailable item" }),
+          /* @__PURE__ */ jsx29("span", { className: "sk-cart__line-unit", children: "Not supported by retail checkout" }),
+          /* @__PURE__ */ jsxs26("span", { className: "sk-cart__qty", children: [
+            "Quantity ",
+            line.quantity
+          ] }),
+          /* @__PURE__ */ jsx29(
+            "button",
+            {
+              type: "button",
+              className: "sk-cart__remove",
+              onClick: () => void runMutation(removeFromCart(line.variantId, line.kind)),
+              children: "Remove"
+            }
+          )
+        ]
+      },
+      `${line.kind}-${line.variantId}`
+    )) }) : null,
+    quote ? /* @__PURE__ */ jsxs26(Fragment13, { children: [
       /* @__PURE__ */ jsx29("ul", { className: "sk-cart__lines", children: quote.lines.map((line) => /* @__PURE__ */ jsxs26("li", { className: "sk-cart__line", children: [
-        /* @__PURE__ */ jsx29("a", { className: "sk-cart__line-title", href: `/store/${line.productHandle}`, children: line.title }),
+        /* @__PURE__ */ jsx29(
+          "a",
+          {
+            className: "sk-cart__line-title",
+            href: `/store/${line.productHandle}`,
+            children: line.title
+          }
+        ),
         /* @__PURE__ */ jsxs26("span", { className: "sk-cart__line-unit", children: [
           formatMoney(line.unitPrice),
           " each"
@@ -12341,7 +12695,14 @@ function CartClient(_props) {
             {
               type: "button",
               "aria-label": `Decrease quantity of ${line.title}`,
-              onClick: () => setCartQuantity(line.variantId, line.quantity - 1),
+              onClick: () => void runMutation(
+                adjustCartQuantity(
+                  "retail",
+                  line.variantId,
+                  -1,
+                  (quoteSourceQuantities.get(line.variantId) ?? 0) > line.quantity ? line.quantity : void 0
+                )
+              ),
               children: "\u2212"
             }
           ),
@@ -12351,7 +12712,14 @@ function CartClient(_props) {
             {
               type: "button",
               "aria-label": `Increase quantity of ${line.title}`,
-              onClick: () => setCartQuantity(line.variantId, line.quantity + 1),
+              onClick: () => void runMutation(
+                adjustCartQuantity(
+                  "retail",
+                  line.variantId,
+                  1,
+                  (quoteSourceQuantities.get(line.variantId) ?? 0) > line.quantity ? line.quantity : void 0
+                )
+              ),
               children: "+"
             }
           )
@@ -12362,7 +12730,7 @@ function CartClient(_props) {
           {
             type: "button",
             className: "sk-cart__remove",
-            onClick: () => removeFromCart(line.variantId),
+            onClick: () => void runMutation(removeFromCart(line.variantId, "retail")),
             children: "Remove"
           }
         )
@@ -12384,173 +12752,768 @@ function CartClient(_props) {
       quote.requiresShipping ? /* @__PURE__ */ jsx29("p", { className: "sk-cart__note", children: "Delivery is chosen at checkout." }) : null,
       /* @__PURE__ */ jsxs26("div", { className: "sk-cart__actions", children: [
         /* @__PURE__ */ jsx29("a", { className: "sk-cart__continue", href: "/store", children: "Keep shopping" }),
-        /* @__PURE__ */ jsx29(
-          "a",
-          {
-            className: "sk-cart__checkout",
-            href: "/checkout",
-            "aria-disabled": quote.lines.length === 0,
-            children: "Checkout"
-          }
-        )
+        unsupportedLines.length === 0 && quote.lines.length > 0 ? /* @__PURE__ */ jsx29("a", { className: "sk-cart__checkout", href: "/checkout", children: "Checkout" }) : /* @__PURE__ */ jsx29("span", { className: "sk-cart__checkout", "aria-disabled": "true", children: "Remove unsupported items to checkout" })
       ] })
-    ] })
+    ] }) : /* @__PURE__ */ jsx29("p", { className: "sk-cart__placeholder", role: "status", children: "Pricing your cart\u2026" })
   ] });
 }
 
 // src/checkout-block.client.tsx
 import * as React24 from "react";
+
+// src/checkout-attempt-token.ts
+var CHECKOUT_ATTEMPT_TOKEN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function isCheckoutAttemptToken(value) {
+  return typeof value === "string" && CHECKOUT_ATTEMPT_TOKEN.test(value);
+}
+
+// src/checkout-completion.ts
+function checkoutCompletionUrl(configuredHref, orderId, siteOrigin) {
+  const fallback = new URL("/checkout/complete", siteOrigin);
+  let destination;
+  try {
+    destination = new URL(configuredHref || fallback.pathname, siteOrigin);
+  } catch {
+    destination = fallback;
+  }
+  if (destination.origin !== fallback.origin || destination.protocol !== "http:" && destination.protocol !== "https:") {
+    destination = fallback;
+  }
+  destination.searchParams.set("order", orderId);
+  return `${destination.pathname}${destination.search}${destination.hash}`;
+}
+
+// src/checkout-block.client.tsx
 import { Fragment as Fragment14, jsx as jsx30, jsxs as jsxs27 } from "react/jsx-runtime";
-async function searchStoreAddresses(query) {
+var CHECKOUT_RECOVERY_PREFIX = "patientos.store.checkout-order.v1";
+function checkoutRecoveryKey(apiOrigin) {
+  const identity = apiOrigin || (typeof window === "undefined" ? "same-origin" : window.location.origin);
+  let hash = 2166136261;
+  for (let index = 0; index < identity.length; index += 1) {
+    hash ^= identity.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return `${CHECKOUT_RECOVERY_PREFIX}:${(hash >>> 0).toString(16)}`;
+}
+function discardCheckoutRecovery(key) {
+  try {
+    window.localStorage.removeItem(key);
+  } catch {
+    return;
+  }
+}
+function readCheckoutRecovery(key) {
+  try {
+    const value = window.localStorage.getItem(key);
+    if (!value) return null;
+    if (isCheckoutAttemptToken(value))
+      return { v: 2, attemptToken: value, lines: null };
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      discardCheckoutRecovery(key);
+      return null;
+    }
+    const record = parsed;
+    if (record.v !== 1 && record.v !== 2 || !isCheckoutAttemptToken(record.attemptToken)) {
+      discardCheckoutRecovery(key);
+      return null;
+    }
+    if (record.v !== 2 || !Array.isArray(record.lines)) {
+      return { v: 2, attemptToken: record.attemptToken, lines: null };
+    }
+    const rawLines = record.lines;
+    const lines = normalizeCartLines(rawLines);
+    if (lines.length === 0 || lines.some(
+      (line) => !rawLines.some(
+        (candidate) => candidate !== null && typeof candidate === "object" && !Array.isArray(candidate) && candidate.lineId === line.lineId
+      )
+    )) {
+      return { v: 2, attemptToken: record.attemptToken, lines: null };
+    }
+    return { v: 2, attemptToken: record.attemptToken, lines };
+  } catch {
+    discardCheckoutRecovery(key);
+    return null;
+  }
+}
+function sameRecoveryRecord(left, right) {
+  return left?.attemptToken === right.attemptToken && left.lines !== null && right.lines !== null && JSON.stringify(left.lines) === JSON.stringify(right.lines);
+}
+function writeCheckoutRecovery(key, record, expectedToken) {
+  try {
+    const existing = readCheckoutRecovery(key);
+    if ((existing?.attemptToken ?? null) !== expectedToken) return false;
+    window.localStorage.setItem(key, JSON.stringify(record));
+    return sameRecoveryRecord(readCheckoutRecovery(key), record);
+  } catch {
+    return false;
+  }
+}
+function removeCheckoutRecovery(key, attemptToken) {
+  try {
+    const existing = readCheckoutRecovery(key);
+    if (!existing) return true;
+    if (existing.attemptToken !== attemptToken) return false;
+    window.localStorage.removeItem(key);
+    return readCheckoutRecovery(key)?.attemptToken !== attemptToken;
+  } catch {
+    return false;
+  }
+}
+function snapshotPurchasedCartLines(cartLines, quotedLines) {
+  const cartByVariant = new Map(
+    cartLines.filter((line) => line.kind === "retail").map((line) => [line.variantId, line])
+  );
+  const snapshot = [];
+  for (const quoted of quotedLines) {
+    const line = cartByVariant.get(quoted.variantId);
+    if (!line) return null;
+    snapshot.push({ ...line, quantity: quoted.quantity });
+  }
+  return snapshot.length > 0 ? snapshot : null;
+}
+function sameCartLineSnapshot(left, right) {
+  if (left.length !== right.length) return false;
+  const rightById = new Map(right.map((line) => [line.lineId, line]));
+  return left.every((line) => {
+    const expected = rightById.get(line.lineId);
+    return expected?.kind === line.kind && expected.variantId === line.variantId && expected.quantity === line.quantity;
+  });
+}
+function samePayableQuote(left, right, shippingOptionId) {
+  return JSON.stringify(expectedQuote(left, shippingOptionId)) === JSON.stringify(expectedQuote(right, shippingOptionId));
+}
+function expectedQuote(quote, shippingOptionId) {
+  return {
+    shippingOptionId,
+    lines: quote.lines.map(({ variantId, quantity, unitPrice, lineTotal }) => ({
+      variantId,
+      quantity,
+      unitPrice,
+      lineTotal
+    })),
+    subtotal: quote.subtotal,
+    shippingTotal: quote.shippingTotal,
+    taxTotal: quote.taxTotal,
+    total: quote.total,
+    currency: quote.currency
+  };
+}
+var StoreRequestError = class extends Error {
+  constructor(message, code2) {
+    super(message);
+    this.code = code2;
+    this.name = "StoreRequestError";
+  }
+  code;
+};
+async function searchStoreAddresses(query, client) {
   const q = query.trim();
   if (q.length < 3) return [];
-  const res = await fetch(`/api/address/autocomplete?q=${encodeURIComponent(q)}`, {
-    credentials: "same-origin",
-    headers: { accept: "application/json" }
-  });
-  if (!res.ok) return [];
-  const body = await res.json();
-  return body.suggestions ?? [];
-}
-async function validateStoreAddress(address) {
-  const res = await fetch("/api/address/validate", {
-    method: "POST",
-    credentials: "same-origin",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ address })
-  });
-  if (!res.ok) return null;
-  const v = await res.json();
-  if (v.error || !v.formattedAddress) return null;
-  return { address: v.formattedAddress, placeId: v.googlePlaceId ?? null };
+  const result = await client.get(`/api/address/autocomplete?q=${encodeURIComponent(q)}`);
+  return result.ok ? result.data.suggestions ?? [] : [];
+}
+async function validateStoreAddress(address, client) {
+  const result = await client.post("/api/address/validate", { address });
+  if (!result.ok || result.data.error || !result.data.formattedAddress)
+    return null;
+  return {
+    address: result.data.formattedAddress,
+    placeId: result.data.googlePlaceId ?? null
+  };
 }
-function CheckoutClient(_props) {
+function CheckoutClient({
+  storeApiOrigin,
+  ordersHref = "/portal/orders",
+  completionHref = "/checkout/complete"
+}) {
+  const client = React24.useMemo(
+    () => createStoreClient({ apiOrigin: storeApiOrigin }),
+    [storeApiOrigin]
+  );
   const [stage, setStage] = React24.useState("loading");
   const [givenName, setGivenName] = React24.useState(null);
   const [cart] = React24.useState(() => readCart());
+  const recoveryKey = React24.useMemo(
+    () => checkoutRecoveryKey(client.apiOrigin),
+    [client]
+  );
+  const [initialRecovery] = React24.useState(
+    () => readCheckoutRecovery(recoveryKey)
+  );
+  const recoveryRef = React24.useRef(
+    initialRecovery
+  );
+  const attemptTokenRef = React24.useRef(
+    initialRecovery?.attemptToken ?? null
+  );
+  const [checkoutLines, setCheckoutLines] = React24.useState(
+    () => cartToWireLines(cart)
+  );
+  const checkoutCartSnapshotRef = React24.useRef(cart.lines);
   const [quote, setQuote] = React24.useState(null);
+  const [pendingQuote, setPendingQuote] = React24.useState(null);
+  const [pendingQuoteBaseline, setPendingQuoteBaseline] = React24.useState(null);
   const [shippingOptions, setShippingOptions] = React24.useState([]);
   const [error2, setError] = React24.useState(null);
-  const [fulfilment, setFulfilment] = React24.useState("pickup");
-  const [shippingOptionId, setShippingOptionId] = React24.useState(null);
+  const [resumableCheckout, setResumableCheckout] = React24.useState(null);
+  const [fulfilment, setFulfilment] = React24.useState(
+    "pickup"
+  );
+  const [shippingOptionId, setShippingOptionId] = React24.useState(
+    null
+  );
   const [address, setAddress] = React24.useState(null);
-  const [card, setCard] = React24.useState({ number: "", expiry: "", name: "", cvn: "" });
+  const [card, setCard] = React24.useState({
+    number: "",
+    expiry: "",
+    name: "",
+    cvn: ""
+  });
   const orderRef = React24.useRef(null);
   const [iframeUrl, setIframeUrl] = React24.useState(null);
   const iframeOriginRef = React24.useRef(null);
   const iframeElRef = React24.useRef(null);
-  React24.useEffect(() => {
-    let alive = true;
-    if (cart.lines.length === 0) {
-      setStage("empty");
-      return;
-    }
-    Promise.all([
-      fetch("/api/store/session", { headers: { accept: "application/json" } }).then(
-        (r) => r.ok ? r.json() : { signedIn: false }
-      ),
-      fetch("/api/store/quote", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ lines: cartToWireLines(cart) })
-      }).then((r) => r.ok ? r.json() : null),
-      fetch("/api/store/catalog", { headers: { accept: "application/json" } }).then(
-        (r) => r.ok ? r.json() : { shippingOptions: [] }
-      )
-    ]).then(([session, q, catalog]) => {
-      if (!alive) return;
-      setQuote(q);
-      setShippingOptions(catalog.shippingOptions ?? []);
-      setGivenName(session.givenName ?? null);
-      setStage(session.signedIn ? "details" : "signed_out");
-    }).catch(() => {
-      if (alive) setError("We couldn\u2019t load your checkout. Please try again.");
+  const ownsCheckoutRef = React24.useRef(false);
+  const ownershipClaimRef = React24.useRef(null);
+  const releaseCheckoutOwnershipRef = React24.useRef(null);
+  async function claimCheckoutOwnership() {
+    if (ownsCheckoutRef.current) return true;
+    if (ownershipClaimRef.current) return ownershipClaimRef.current;
+    const locks = navigator.locks;
+    if (!locks) return false;
+    const claim = new Promise((resolveClaim) => {
+      let resolveHold = null;
+      const hold = new Promise((resolve) => {
+        resolveHold = resolve;
+      });
+      void locks.request(
+        `patientos-store-checkout:${recoveryKey}`,
+        { mode: "exclusive", ifAvailable: true },
+        async (lock) => {
+          if (!lock) {
+            resolveClaim(false);
+            return;
+          }
+          ownsCheckoutRef.current = true;
+          releaseCheckoutOwnershipRef.current = () => {
+            if (!ownsCheckoutRef.current) return;
+            ownsCheckoutRef.current = false;
+            releaseCheckoutOwnershipRef.current = null;
+            resolveHold?.();
+          };
+          resolveClaim(true);
+          await hold;
+        }
+      ).catch(() => resolveClaim(false));
     });
-    return () => {
-      alive = false;
-    };
-  }, [cart]);
+    ownershipClaimRef.current = claim;
+    const acquired = await claim;
+    ownershipClaimRef.current = null;
+    return acquired;
+  }
+  function releaseCheckoutOwnership() {
+    releaseCheckoutOwnershipRef.current?.();
+  }
+  function goToCompletion(orderId) {
+    window.location.assign(
+      checkoutCompletionUrl(completionHref, orderId, window.location.origin)
+    );
+  }
+  React24.useEffect(
+    () => () => {
+      releaseCheckoutOwnership();
+    },
+    []
+  );
+  function releaseOwnedAttempt(attemptToken) {
+    const removed = removeCheckoutRecovery(recoveryKey, attemptToken);
+    if (removed && recoveryRef.current?.attemptToken === attemptToken) {
+      recoveryRef.current = null;
+      attemptTokenRef.current = null;
+    }
+    return removed;
+  }
+  async function finishPaidAttemptWhileLocked(attemptToken) {
+    const stored = readCheckoutRecovery(recoveryKey);
+    if (stored?.attemptToken !== attemptToken || stored.lines === null)
+      return "snapshot_unavailable";
+    const settled = await subtractPurchasedCartLines(
+      stored.lines,
+      attemptToken
+    );
+    if (!settled.persisted) return "storage_unavailable";
+    return releaseOwnedAttempt(attemptToken) ? "settled" : "storage_unavailable";
+  }
+  async function finishPaidAttempt(attemptToken) {
+    if (ownsCheckoutRef.current) {
+      const result = await finishPaidAttemptWhileLocked(attemptToken);
+      if (result === "settled") releaseCheckoutOwnership();
+      return result;
+    }
+    const locks = navigator.locks;
+    if (!locks) return "storage_unavailable";
+    return locks.request(
+      `patientos-store-checkout:${recoveryKey}`,
+      () => finishPaidAttemptWhileLocked(attemptToken)
+    );
+  }
+  function paidReconciliationPending(result) {
+    setError(
+      result === "snapshot_unavailable" ? "Payment was received, but this browser no longer has a safe cart snapshot. Review your cart and order before checking out again." : "Payment was received, but your cart update could not be saved. Allow site storage, then try again."
+    );
+    setStage("reconciliation_pending");
+  }
+  async function completePaidAttempt(attemptToken, orderId, alreadyLocked = false) {
+    const result = alreadyLocked ? await finishPaidAttemptWhileLocked(attemptToken) : await finishPaidAttempt(attemptToken);
+    if (result !== "settled") {
+      paidReconciliationPending(result);
+      return false;
+    }
+    if (alreadyLocked) releaseCheckoutOwnership();
+    setStage("paid");
+    goToCompletion(orderId);
+    return true;
+  }
+  async function retryPaidReconciliation() {
+    const attemptToken = attemptTokenRef.current;
+    if (!attemptToken) return;
+    await completePaidAttempt(
+      attemptToken,
+      orderRef.current?.orderId ?? attemptToken
+    );
+  }
+  function recoverySnapshotUnavailable() {
+    releaseCheckoutOwnership();
+    setError(
+      "This checkout can\u2019t be safely continued in this browser. Review My orders and your cart before trying again."
+    );
+    setStage("closed");
+  }
+  function storageUnavailable() {
+    releaseCheckoutOwnership();
+    setError(
+      "Your browser couldn\u2019t safely save and coordinate checkout progress. Allow site storage, then reload and try again."
+    );
+    setStage("storage_error");
+  }
   React24.useEffect(() => {
-    if (stage !== "details" || cart.lines.length === 0) return;
     let alive = true;
-    fetch("/api/store/quote", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        lines: cartToWireLines(cart),
-        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
-      })
-    }).then((r) => r.ok ? r.json() : null).then((q) => {
-      if (alive && q) setQuote(q);
-    }).catch(() => void 0);
+    void (async () => {
+      const locks = navigator.locks;
+      if (!locks) {
+        if (!alive) return;
+        storageUnavailable();
+        return;
+      }
+      const storedAttemptToken = attemptTokenRef.current;
+      let bootRecovery = {
+        status: "continue"
+      };
+      if (storedAttemptToken) {
+        const acquired = await claimCheckoutOwnership();
+        if (acquired) {
+          const recovered = await client.post(
+            "/api/store/checkout/recover",
+            { attemptToken: storedAttemptToken }
+          );
+          if (recovered.ok && recovered.data.status === "paid") {
+            await completePaidAttempt(
+              storedAttemptToken,
+              recovered.data.orderId ?? storedAttemptToken,
+              true
+            );
+            return;
+          } else if (recovered.ok && recovered.data.status === "active") {
+            releaseCheckoutOwnership();
+            bootRecovery = { status: "active" };
+          } else if (recovered.ok && recovered.data.status === "resumable" && !Array.isArray(readCheckoutRecovery(recoveryKey)?.lines)) {
+            recoverySnapshotUnavailable();
+            return;
+          } else if (recovered.ok && recovered.data.status === "resumable" && Array.isArray(readCheckoutRecovery(recoveryKey)?.lines) && recovered.data.orderId && recovered.data.sessionId && recovered.data.sessionStatus && recovered.data.providerKey && recovered.data.amount && recovered.data.clientArtifacts) {
+            bootRecovery = {
+              status: "resumable",
+              session: recovered.data
+            };
+          } else if (recovered.ok && recovered.data.status === "processing") {
+            releaseCheckoutOwnership();
+            bootRecovery = { status: "processing" };
+          } else if (recovered.ok) {
+            if (!releaseOwnedAttempt(storedAttemptToken)) {
+              recoverySnapshotUnavailable();
+              return;
+            }
+            releaseCheckoutOwnership();
+          } else {
+            releaseCheckoutOwnership();
+            bootRecovery = {
+              status: recovered.error === "sign_in_required" ? "continue" : "error"
+            };
+          }
+        } else {
+          bootRecovery = { status: "active_elsewhere" };
+        }
+      }
+      if (!alive) return;
+      if (bootRecovery.status === "active") {
+        setStage("active");
+        return;
+      }
+      if (bootRecovery.status === "active_elsewhere") {
+        setStage("active_elsewhere");
+        return;
+      }
+      if (bootRecovery.status === "resumable") {
+        setResumableCheckout(bootRecovery.session);
+        setStage("resume");
+        return;
+      }
+      if (bootRecovery.status === "processing") {
+        setStage("pending");
+        return;
+      }
+      if (bootRecovery.status === "error") {
+        setError(
+          "We couldn\u2019t recover your previous checkout. Please try again."
+        );
+        setStage("quote_error");
+        return;
+      }
+      if (cart.lines.length === 0) {
+        if (!alive) return;
+        setStage("empty");
+        return;
+      }
+      const [sessionResult, quoteResult, catalogResult] = await Promise.all([
+        client.get("/api/store/session"),
+        client.post("/api/store/quote", {
+          lines: checkoutLines
+        }),
+        client.get("/api/store/catalog")
+      ]);
+      if (!alive) return;
+      const session = sessionResult.ok && typeof sessionResult.data.signedIn === "boolean" ? sessionResult.data : null;
+      const unsupportedQuote = quoteResult.ok && quoteResult.data.problems.some(
+        (problem) => problem.code === "not_purchasable"
+      );
+      const payableQuote = quoteResult.ok && quoteResult.data.lines.length > 0 && !unsupportedQuote ? quoteResult.data : null;
+      const catalogLoaded = catalogResult.ok && Array.isArray(catalogResult.data.shippingOptions);
+      setQuote(payableQuote);
+      setShippingOptions(
+        catalogLoaded ? catalogResult.data.shippingOptions : []
+      );
+      setGivenName(session?.givenName ?? null);
+      if (!session) {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      } else if (unsupportedQuote) {
+        setError(
+          "Remove unsupported items from your cart before starting retail checkout."
+        );
+        setStage("unsupported");
+      } else if (quoteResult.ok && quoteResult.data.lines.length === 0) {
+        setError(null);
+        setStage("empty");
+      } else if (session.signedIn === false) {
+        setStage("signed_out");
+      } else if (!catalogLoaded) {
+        setError("We couldn\u2019t load delivery options. Please try again.");
+        setStage("quote_error");
+      } else if (quoteResult.ok) {
+        setError(null);
+        setStage("details");
+      } else {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      }
+    })();
+    return () => {
+      alive = false;
+    };
+  }, [cart, client]);
+  React24.useEffect(() => {
+    if (stage !== "details" || cart.lines.length === 0) return;
+    let alive = true;
+    setQuote(null);
+    setError(null);
+    void client.post("/api/store/quote", {
+      lines: checkoutLines,
+      shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
+    }).then((result) => {
+      if (!alive) return;
+      if (result.ok && result.data.lines.length > 0) {
+        setQuote(result.data);
+      } else if (result.ok) {
+        setQuote(null);
+        setStage("empty");
+      } else {
+        setError("We couldn\u2019t update your checkout total. Please try again.");
+        setStage("quote_error");
+      }
+    });
     return () => {
       alive = false;
     };
-  }, [fulfilment, shippingOptionId]);
+  }, [client, fulfilment, shippingOptionId]);
   React24.useEffect(() => {
     if (stage !== "three_ds") return;
+    let terminalHandled = false;
     function onMessage(event) {
-      if (iframeOriginRef.current && event.origin !== iframeOriginRef.current) return;
-      if (iframeElRef.current && event.source !== iframeElRef.current.contentWindow) return;
-      const data = typeof event.data === "string" ? event.data : null;
-      if (!data) return;
-      if (data === "AuthenticationInternalError") {
-        setIframeUrl(null);
-        setError("The card check could not be completed. Please try another card.");
-        setStage("details");
+      if (iframeOriginRef.current && event.origin !== iframeOriginRef.current)
+        return;
+      const iframe = iframeElRef.current;
+      if (!iframe || event.source !== iframe.contentWindow) return;
+      const type = event.data?.type;
+      if (type === "AuthenticationUserInteractionRequired") {
+        if (iframe) {
+          iframe.style.visibility = "visible";
+          iframe.style.height = "500px";
+        }
         return;
       }
-      if (data === "AuthenticationComplete" || data === "AuthenticationUserInteractionFinished") {
-        setIframeUrl(null);
-        void afterChallenge();
+      if (type === "AuthenticationUserInteractionFinished") {
+        if (iframe) {
+          iframe.style.visibility = "hidden";
+          iframe.style.height = "1px";
+        }
+        return;
       }
+      if (type !== "AuthenticationInternalError" && type !== "AuthenticationComplete")
+        return;
+      if (terminalHandled) return;
+      terminalHandled = true;
+      window.removeEventListener("message", onMessage);
+      setIframeUrl(null);
+      if (type === "AuthenticationInternalError") {
+        void cancelFailedChallenge();
+        return;
+      }
+      void afterChallenge();
     }
     window.addEventListener("message", onMessage);
     return () => window.removeEventListener("message", onMessage);
   }, [stage]);
   async function post(path, body) {
-    const res = await fetch(path, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(body)
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok) {
-      if (data.error === "sign_in_required") {
+    const result = await client.post(path, body);
+    if (!result.ok) {
+      if (result.error === "sign_in_required") {
         setStage("signed_out");
         throw new Error("sign_in_required");
       }
-      throw new Error(typeof data.message === "string" ? data.message : "Something went wrong.");
+      throw new StoreRequestError(
+        result.message ?? "Something went wrong.",
+        result.error
+      );
+    }
+    return result.data;
+  }
+  function showChallenge(artifacts) {
+    if (!artifacts.iframeUrl) return false;
+    const iframeUrl2 = client.url(artifacts.iframeUrl);
+    try {
+      const parsedIframeUrl = new URL(iframeUrl2, window.location.href);
+      const ownedMockUrl = new URL(
+        client.url("/api/store/mock-3ds-challenge"),
+        window.location.href
+      );
+      const isOwnedMock = parsedIframeUrl.origin === ownedMockUrl.origin && parsedIframeUrl.pathname === ownedMockUrl.pathname && parsedIframeUrl.search === "" && parsedIframeUrl.hash === "";
+      if (parsedIframeUrl.username || parsedIframeUrl.password) return false;
+      if (isOwnedMock) {
+        const allowedProtocol = parsedIframeUrl.protocol === "https:" || parsedIframeUrl.protocol === "http:" && parsedIframeUrl.hostname === "localhost";
+        if (!allowedProtocol) return false;
+        iframeOriginRef.current = parsedIframeUrl.origin;
+      } else {
+        if (parsedIframeUrl.protocol !== "https:" || !artifacts.iframeOrigin)
+          return false;
+        const suppliedOrigin = new URL(artifacts.iframeOrigin);
+        if (suppliedOrigin.protocol !== "https:" || suppliedOrigin.username || suppliedOrigin.password || suppliedOrigin.pathname !== "/" || suppliedOrigin.search || suppliedOrigin.hash)
+          return false;
+        if (parsedIframeUrl.origin !== suppliedOrigin.origin) return false;
+        iframeOriginRef.current = suppliedOrigin.origin;
+      }
+    } catch {
+      return false;
+    }
+    setIframeUrl(iframeUrl2);
+    setStage("three_ds");
+    return true;
+  }
+  async function cancelFailedChallenge() {
+    const orderId = orderRef.current?.orderId;
+    if (!orderId) {
+      setStage("pending");
+      return;
+    }
+    setStage("paying");
+    try {
+      await post("/api/store/checkout/cancel-challenge", { orderId });
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken) releaseOwnedAttempt(attemptToken);
+      setError("The card check could not be completed. Please try again.");
+      setStage(quote ? "details" : "closed");
+      releaseCheckoutOwnership();
+    } catch {
+      setError(
+        "We couldn\u2019t safely close the failed card check. Go to your orders before trying again."
+      );
+      setStage("pending");
+    }
+  }
+  async function recoverAttemptWhileLocked(attemptToken, continueRestart = false) {
+    const recovered = await client.post(
+      "/api/store/checkout/recover",
+      { attemptToken }
+    );
+    if (recovered.ok && recovered.data.status === "active") {
+      setStage("active");
+      releaseCheckoutOwnership();
+      return "active";
+    }
+    if (recovered.ok && recovered.data.status === "resumable" && !Array.isArray(readCheckoutRecovery(recoveryKey)?.lines)) {
+      recoverySnapshotUnavailable();
+      return "blocked";
+    }
+    if (recovered.ok && recovered.data.status === "resumable" && Array.isArray(readCheckoutRecovery(recoveryKey)?.lines) && recovered.data.orderId && recovered.data.sessionId && recovered.data.sessionStatus && recovered.data.providerKey && recovered.data.amount && recovered.data.clientArtifacts) {
+      setResumableCheckout(recovered.data);
+      setStage("resume");
+      return "active";
+    }
+    if (recovered.ok && recovered.data.status === "processing") {
+      setStage("pending");
+      releaseCheckoutOwnership();
+      return "processing";
+    }
+    if (recovered.ok && recovered.data.status === "paid") {
+      return await completePaidAttempt(
+        attemptToken,
+        recovered.data.orderId ?? attemptToken,
+        true
+      ) ? "paid" : "blocked";
+    }
+    if (recovered.ok) {
+      if (!releaseOwnedAttempt(attemptToken)) {
+        recoverySnapshotUnavailable();
+        return "blocked";
+      }
+      if (!continueRestart) {
+        releaseCheckoutOwnership();
+        setError(
+          "Your previous checkout was closed. Review the total and try again."
+        );
+        setStage("details");
+      }
+      return "restart";
     }
-    return data;
+    setError(
+      "We couldn\u2019t safely close your previous checkout. Go to your orders before trying again."
+    );
+    setStage("closed");
+    releaseCheckoutOwnership();
+    return "blocked";
+  }
+  async function recoverAttemptForRestart(attemptToken) {
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return "active";
+    }
+    return recoverAttemptWhileLocked(attemptToken);
+  }
+  async function transitionRetryableDecline(message) {
+    const orderId = orderRef.current?.orderId;
+    if (!orderId) {
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken) await recoverAttemptWhileLocked(attemptToken);
+      else setStage("pending");
+      return;
+    }
+    setError(message);
+    setStage("loading");
+    const result = await client.post("/api/store/checkout/retry-payment", {
+      orderId
+    }).catch(() => null);
+    const retryData = result?.ok && result.data !== null && typeof result.data === "object" && !Array.isArray(result.data) ? result.data : null;
+    const retryArtifacts = retryData?.clientArtifacts !== null && typeof retryData?.clientArtifacts === "object" && !Array.isArray(retryData.clientArtifacts) ? retryData.clientArtifacts : null;
+    if (retryData?.status !== "ready" || retryData.orderId !== orderId || typeof retryData.sessionId !== "string" || typeof retryData.providerKey !== "string" || typeof retryData.amount !== "string" || !retryArtifacts) {
+      await recoverAttemptWhileLocked(orderId);
+      return;
+    }
+    setResumableCheckout({
+      orderId,
+      sessionId: retryData.sessionId,
+      sessionStatus: "pending",
+      providerKey: retryData.providerKey,
+      amount: retryData.amount,
+      expiresAt: typeof retryData.expiresAt === "string" ? retryData.expiresAt : null,
+      clientArtifacts: retryArtifacts
+    });
+    setStage("resume_payment");
+  }
+  async function handlePaymentRequestError(error3) {
+    if (!(error3 instanceof StoreRequestError)) return false;
+    if (error3.code === "payment_in_progress" || error3.code === "payment_initializing") {
+      setStage("pending");
+      releaseCheckoutOwnership();
+      return true;
+    }
+    if (error3.code === "payment_failed") {
+      await transitionRetryableDecline(
+        "This payment attempt failed. Please check the details or try another card."
+      );
+      return true;
+    }
+    if (error3.code === "payment_cancelled") {
+      setError(
+        "This payment attempt is closed. Go to your orders before trying again."
+      );
+      setStage("closed");
+      releaseCheckoutOwnership();
+      return true;
+    }
+    return false;
   }
   async function applyConfirm(result) {
     const status = result.status;
     if (status === "paid") {
       const orderId = orderRef.current?.orderId ?? "";
-      clearCart();
-      setStage("paid");
-      window.location.assign(`/checkout/complete?order=${encodeURIComponent(orderId)}`);
+      const attemptToken = attemptTokenRef.current;
+      if (!attemptToken) {
+        paidReconciliationPending("snapshot_unavailable");
+        return;
+      }
+      await completePaidAttempt(attemptToken, orderId);
       return;
     }
     if (status === "requires_action") {
       const artifacts = result.clientArtifacts ?? {};
-      if (!artifacts.iframeUrl) {
-        setError("Your bank asked for a check we couldn\u2019t show. Please try another card.");
-        setStage("details");
-        return;
-      }
-      iframeOriginRef.current = artifacts.iframeOrigin ?? null;
-      setIframeUrl(artifacts.iframeUrl);
-      setStage("three_ds");
+      if (!showChallenge(artifacts)) await cancelFailedChallenge();
       return;
     }
     if (status === "declined") {
-      setError("Your card was declined. Please check the details or try another card.");
-      setStage("details");
+      await transitionRetryableDecline(
+        "Your card was declined. Please check the details or try another card."
+      );
       return;
     }
     setStage("pending");
+    releaseCheckoutOwnership();
+  }
+  async function dispatchConfirm(orderId) {
+    try {
+      await applyConfirm(
+        await post("/api/store/checkout/confirm", { orderId })
+      );
+    } catch (err) {
+      if (err instanceof Error && err.message === "sign_in_required") return;
+      const attemptToken = attemptTokenRef.current;
+      if (attemptToken && err instanceof StoreRequestError && err.code === "checkout_paid") {
+        await completePaidAttempt(attemptToken, orderId);
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
+      setError(null);
+      setStage("pending");
+      releaseCheckoutOwnership();
+    }
   }
   async function afterChallenge() {
     const orderId = orderRef.current?.orderId;
@@ -12559,45 +13522,245 @@ function CheckoutClient(_props) {
     try {
       const auth = await post("/api/store/checkout/authenticate", { orderId });
       if (auth.status === "payment_failed") {
-        setError("The card check failed. Please try another card.");
-        setStage("details");
+        await transitionRetryableDecline(
+          "The card check failed. Please try another card."
+        );
         return;
       }
       if (auth.status === "requires_action") {
         const artifacts = auth.clientArtifacts ?? {};
-        if (artifacts.iframeUrl) {
-          iframeOriginRef.current = artifacts.iframeOrigin ?? null;
-          setIframeUrl(artifacts.iframeUrl);
-          setStage("three_ds");
+        if (showChallenge(artifacts)) return;
+        await cancelFailedChallenge();
+        return;
+      }
+      await dispatchConfirm(orderId);
+    } catch (err) {
+      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (await handlePaymentRequestError(err)) return;
+      setError(err instanceof Error ? err.message : "Something went wrong.");
+      setStage(resumableCheckout ? "pending" : "details");
+      if (resumableCheckout) releaseCheckoutOwnership();
+    }
+  }
+  async function initializeCheckoutAttempt(currentQuote) {
+    if (!ownsCheckoutRef.current) return null;
+    while (true) {
+      const ownedToken = attemptTokenRef.current;
+      const stored = readCheckoutRecovery(recoveryKey);
+      if (ownedToken) {
+        if (stored?.attemptToken !== ownedToken || stored.lines === null) {
+          recoverySnapshotUnavailable();
+          return null;
+        }
+        recoveryRef.current = stored;
+        break;
+      }
+      if (stored) {
+        recoveryRef.current = stored;
+        attemptTokenRef.current = stored.attemptToken;
+        const disposition = await recoverAttemptWhileLocked(
+          stored.attemptToken,
+          true
+        );
+        if (disposition !== "restart") return null;
+        continue;
+      }
+      break;
+    }
+    const existingToken = attemptTokenRef.current;
+    const expectedLines = recoveryRef.current?.lines ?? checkoutCartSnapshotRef.current;
+    if (expectedLines === null) {
+      recoverySnapshotUnavailable();
+      return null;
+    }
+    const selectedShippingOptionId = fulfilment === "ship" ? shippingOptionId : null;
+    const coordinated = await withCartLock(async (latest, signal) => {
+      const wireLines = cartToWireLines(latest);
+      const quoteResult = await client.post(
+        "/api/store/quote",
+        {
+          lines: wireLines,
+          shippingOptionId: selectedShippingOptionId
+        },
+        { signal }
+      );
+      if (!quoteResult.ok || signal.aborted)
+        return { status: "quote_error" };
+      const freshQuote = quoteResult.data;
+      const purchasedLines = snapshotPurchasedCartLines(
+        latest.lines,
+        freshQuote.lines
+      );
+      if (!purchasedLines || freshQuote.lines.length === 0 || freshQuote.problems.length > 0 || !sameCartLineSnapshot(latest.lines, expectedLines) || !samePayableQuote(currentQuote, freshQuote, selectedShippingOptionId)) {
+        return {
+          status: "cart_changed",
+          quote: freshQuote,
+          baseline: latest
+        };
+      }
+      const attemptToken = existingToken ?? crypto.randomUUID();
+      if (existingToken) {
+        if (!sameCartLineSnapshot(purchasedLines, expectedLines)) {
+          return {
+            status: "cart_changed",
+            quote: freshQuote,
+            baseline: latest
+          };
+        }
+      } else {
+        const recovery = {
+          v: 2,
+          attemptToken,
+          lines: purchasedLines
+        };
+        if (!writeCheckoutRecovery(recoveryKey, recovery, null))
+          return { status: "storage_error" };
+        recoveryRef.current = recovery;
+        attemptTokenRef.current = attemptToken;
+      }
+      const initPromise = post("/api/store/checkout/init", {
+        lines: wireLines,
+        attemptToken,
+        expectedQuote: expectedQuote(freshQuote, selectedShippingOptionId),
+        fulfilmentMethod: fulfilment,
+        shippingOptionId: selectedShippingOptionId,
+        shippingPlace: fulfilment === "ship" && address ? { address: address.address, placeId: address.placeId ?? null } : null
+      });
+      return {
+        status: "ready",
+        attemptToken,
+        initPromise
+      };
+    });
+    if (coordinated.status === "cart_storage_unavailable") {
+      storageUnavailable();
+      return null;
+    }
+    if (coordinated.status === "not_completed") {
+      setError("We couldn\u2019t confirm your checkout total. Please try again.");
+      setStage("quote_error");
+      releaseCheckoutOwnership();
+      return null;
+    }
+    const result = coordinated.result;
+    if (result.status === "storage_error") {
+      storageUnavailable();
+      return null;
+    }
+    if (result.status === "quote_error") {
+      setError("We couldn\u2019t confirm your checkout total. Please try again.");
+      setStage("quote_error");
+      releaseCheckoutOwnership();
+      return null;
+    }
+    if (result.status === "cart_changed") {
+      if (existingToken) {
+        const disposition = await recoverAttemptWhileLocked(
+          existingToken,
+          true
+        );
+        if (disposition !== "restart") return null;
+      }
+      setPendingQuote(result.quote);
+      setPendingQuoteBaseline(result.baseline);
+      setQuote(null);
+      setError(null);
+      setStage("cart_changed");
+      return null;
+    }
+    return {
+      attemptToken: result.attemptToken,
+      init: await result.initPromise
+    };
+  }
+  async function beginResume() {
+    if (!resumableCheckout) return;
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
+    orderRef.current = {
+      orderId: resumableCheckout.orderId,
+      providerKey: resumableCheckout.providerKey
+    };
+    if (resumableCheckout.sessionStatus === "requires_action") {
+      if (!showChallenge(resumableCheckout.clientArtifacts))
+        await cancelFailedChallenge();
+      return;
+    }
+    setError(null);
+    setStage("resume_payment");
+  }
+  async function onResumePayment(e) {
+    e.preventDefault();
+    if (!resumableCheckout) return;
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
+    setError(null);
+    setStage("paying");
+    orderRef.current = {
+      orderId: resumableCheckout.orderId,
+      providerKey: resumableCheckout.providerKey
+    };
+    try {
+      if (resumableCheckout.providerKey !== "mock") {
+        const { authKey } = resumableCheckout.clientArtifacts;
+        if (!authKey) {
+          setStage("pending");
+          releaseCheckoutOwnership();
           return;
         }
+        await loadBpointScript();
+        await attachCardToAuthKey(authKey, card);
       }
-      await applyConfirm(await post("/api/store/checkout/confirm", { orderId }));
+      await dispatchConfirm(resumableCheckout.orderId);
     } catch (err) {
-      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (err instanceof Error && err.message === "sign_in_required") {
+        releaseCheckoutOwnership();
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
       setError(err instanceof Error ? err.message : "Something went wrong.");
-      setStage("details");
+      setStage("resume_payment");
     }
   }
   async function onPay(e) {
     e.preventDefault();
+    if (!quote || quote.lines.length === 0) {
+      setQuote(null);
+      setError(
+        quote ? null : "We couldn\u2019t confirm your checkout total. Please try again."
+      );
+      setStage(quote ? "empty" : "quote_error");
+      return;
+    }
+    if (!await claimCheckoutOwnership()) {
+      setStage("active_elsewhere");
+      return;
+    }
     setError(null);
     setStage("paying");
+    let attemptToken = attemptTokenRef.current;
     try {
-      const init = await post("/api/store/checkout/init", {
-        lines: cartToWireLines(cart),
-        fulfilmentMethod: fulfilment,
-        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null,
-        // The REFERENCE, never components — /api/store resolves it against Google.
-        shippingPlace: fulfilment === "ship" && address ? { address: address.address, placeId: address.placeId ?? null } : null,
-        // A previous, abandoned attempt by this shopper — the server cancels it and
-        // gives its stock back in the SAME tx that mints the replacement.
-        priorOrderId: orderRef.current?.orderId ?? null
-      });
+      const initialized = await initializeCheckoutAttempt(quote);
+      if (!initialized) return;
+      attemptToken = initialized.attemptToken;
+      const { init } = initialized;
+      setError(null);
       if (init.status === "cart_changed") {
-        setQuote(init.quote);
-        setError("Your cart changed \u2014 please review it before paying.");
-        setStage("details");
+        const changedQuote = init.quote;
+        setPendingQuote(changedQuote);
+        const baselineLines = recoveryRef.current?.lines;
+        if (!baselineLines) {
+          recoverySnapshotUnavailable();
+          return;
+        }
+        setPendingQuoteBaseline({ v: 1, lines: baselineLines });
+        setQuote(null);
+        setError(null);
+        setStage("cart_changed");
         return;
       }
       const orderId = String(init.orderId);
@@ -12605,17 +13768,220 @@ function CheckoutClient(_props) {
       orderRef.current = { orderId, providerKey };
       if (providerKey !== "mock") {
         const artifacts = init.clientArtifacts ?? {};
-        if (!artifacts.authKey) throw new Error("We couldn\u2019t start a secure payment. Please try again.");
+        if (!artifacts.authKey)
+          throw new Error(
+            "We couldn\u2019t start a secure payment. Please try again."
+          );
         await loadBpointScript();
         await attachCardToAuthKey(artifacts.authKey, card);
       }
-      await applyConfirm(await post("/api/store/checkout/confirm", { orderId }));
+      await dispatchConfirm(orderId);
     } catch (err) {
-      if (err instanceof Error && err.message === "sign_in_required") return;
+      if (err instanceof Error && err.message === "sign_in_required") {
+        releaseCheckoutOwnership();
+        return;
+      }
+      const failedAttemptToken = attemptToken ?? attemptTokenRef.current;
+      if (failedAttemptToken && err instanceof StoreRequestError && err.code === "checkout_paid") {
+        await completePaidAttempt(failedAttemptToken, failedAttemptToken);
+        return;
+      }
+      if (await handlePaymentRequestError(err)) return;
+      if (failedAttemptToken && err instanceof StoreRequestError && (err.code === "checkout_attempt_changed" || err.code === "checkout_attempt_closed" || err.code === "checkout_init_failed" || err.code === "invalid_checkout_attempt")) {
+        await recoverAttemptForRestart(failedAttemptToken);
+        return;
+      }
       setError(err instanceof Error ? err.message : "Something went wrong.");
       setStage("details");
     }
   }
+  async function retryQuote() {
+    setError(null);
+    setStage("loading");
+    const sessionResult = await client.get("/api/store/session");
+    if (!sessionResult.ok || typeof sessionResult.data.signedIn !== "boolean") {
+      setQuote(null);
+      setPendingQuote(null);
+      setPendingQuoteBaseline(null);
+      setError("We couldn\u2019t load your checkout. Please try again.");
+      setStage("quote_error");
+      return;
+    }
+    const session = sessionResult.data;
+    setGivenName(session.givenName ?? null);
+    if (session.signedIn === false) {
+      setQuote(null);
+      setPendingQuote(null);
+      setPendingQuoteBaseline(null);
+      setStage("signed_out");
+      return;
+    }
+    const [result, catalogResult] = await Promise.all([
+      client.post("/api/store/quote", {
+        lines: checkoutLines,
+        shippingOptionId: fulfilment === "ship" ? shippingOptionId : null
+      }),
+      client.get("/api/store/catalog")
+    ]);
+    const catalogLoaded = catalogResult.ok && Array.isArray(catalogResult.data.shippingOptions);
+    if (!catalogLoaded) {
+      setQuote(null);
+      setShippingOptions([]);
+      setError("We couldn\u2019t load delivery options. Please try again.");
+      setStage("quote_error");
+    } else if (result.ok && result.data.problems.some((problem) => problem.code === "not_purchasable")) {
+      setQuote(null);
+      setError(
+        "Remove unsupported items from your cart before starting retail checkout."
+      );
+      setStage("unsupported");
+    } else if (result.ok && result.data.lines.length > 0) {
+      setShippingOptions(catalogResult.data.shippingOptions);
+      setQuote(result.data);
+      setStage("details");
+    } else if (result.ok) {
+      setQuote(null);
+      setStage("empty");
+    } else {
+      setQuote(null);
+      setError("We couldn\u2019t load your checkout. Please try again.");
+      setStage("quote_error");
+    }
+  }
+  async function acceptHealedQuote() {
+    if (!pendingQuote) return;
+    const locks = navigator.locks;
+    if (!locks) {
+      storageUnavailable();
+      return;
+    }
+    const attemptedRetail = new Map(
+      (pendingQuoteBaseline?.lines ?? checkoutLines).filter((line) => line.kind === "retail").map((line) => [line.variantId, line.quantity])
+    );
+    const healedRetail = new Map(
+      pendingQuote.lines.map((line) => [line.variantId, line.quantity])
+    );
+    const optionUnavailable = pendingQuote.problems.some(
+      (problem) => problem.code === "shipping_option_unavailable"
+    );
+    const nextShippingOptionId = optionUnavailable ? null : shippingOptionId;
+    setPendingQuote(null);
+    setPendingQuoteBaseline(null);
+    setQuote(null);
+    setError(null);
+    setStage("loading");
+    const outcome = {
+      confirmedQuote: null,
+      nextProblemQuote: null,
+      nextProblemBaseline: null,
+      quoteFailed: false
+    };
+    const continueWhileCoordinated = async () => {
+      const attemptToken = attemptTokenRef.current;
+      const stored = readCheckoutRecovery(recoveryKey);
+      if (attemptToken && (stored?.attemptToken !== attemptToken || stored.lines === null) || !attemptToken && stored)
+        return null;
+      return mutateCart(
+        (latest) => ({
+          v: 1,
+          lines: latest.lines.flatMap((line) => {
+            if (line.kind !== "retail") return [line];
+            const attemptedQuantity = attemptedRetail.get(line.variantId);
+            if (attemptedQuantity === void 0) return [line];
+            const healedQuantity = healedRetail.get(line.variantId);
+            if (healedQuantity === void 0) return [];
+            return [
+              {
+                ...line,
+                quantity: line.quantity <= attemptedQuantity ? Math.min(line.quantity, healedQuantity) : Math.min(
+                  99,
+                  healedQuantity + (line.quantity - attemptedQuantity)
+                )
+              }
+            ];
+          })
+        }),
+        async (proposed, signal) => {
+          const payableLines = cartToWireLines({
+            v: 1,
+            lines: proposed.lines.filter((line) => line.kind === "retail")
+          });
+          const result = await client.post(
+            "/api/store/quote",
+            {
+              lines: payableLines,
+              shippingOptionId: fulfilment === "ship" ? nextShippingOptionId : null
+            },
+            { signal }
+          );
+          if (!result.ok) {
+            outcome.quoteFailed = true;
+            return false;
+          }
+          if (result.data.lines.length === 0 || result.data.problems.length > 0) {
+            outcome.nextProblemQuote = result.data;
+            outcome.nextProblemBaseline = proposed;
+            return false;
+          }
+          const purchasedLines = snapshotPurchasedCartLines(
+            proposed.lines,
+            result.data.lines
+          );
+          if (!purchasedLines) return false;
+          if (attemptToken) {
+            const recovery = {
+              v: 2,
+              attemptToken,
+              lines: purchasedLines
+            };
+            if (!writeCheckoutRecovery(recoveryKey, recovery, attemptToken))
+              return false;
+            recoveryRef.current = recovery;
+          }
+          outcome.confirmedQuote = result.data;
+          return true;
+        }
+      );
+    };
+    const persisted = ownsCheckoutRef.current ? await continueWhileCoordinated() : await locks.request(
+      `patientos-store-checkout:${recoveryKey}`,
+      continueWhileCoordinated
+    );
+    if (!persisted || persisted.status === "cart_storage_unavailable") {
+      storageUnavailable();
+      return;
+    }
+    if (persisted.status === "not_committed") {
+      if (outcome.quoteFailed) {
+        setError("We couldn\u2019t load your checkout. Please try again.");
+        setStage("quote_error");
+      } else if (outcome.nextProblemQuote?.lines.length === 0) {
+        setStage("empty");
+      } else if (outcome.nextProblemQuote && outcome.nextProblemBaseline) {
+        setPendingQuote(outcome.nextProblemQuote);
+        setPendingQuoteBaseline(outcome.nextProblemBaseline);
+        setStage("cart_changed");
+      } else {
+        storageUnavailable();
+      }
+      return;
+    }
+    if (optionUnavailable) setShippingOptionId(null);
+    if (!outcome.confirmedQuote) {
+      storageUnavailable();
+      return;
+    }
+    checkoutCartSnapshotRef.current = persisted.cart.lines;
+    setCheckoutLines(
+      outcome.confirmedQuote.lines.map((line) => ({
+        kind: "retail",
+        variantId: line.variantId,
+        quantity: line.quantity
+      }))
+    );
+    setQuote(outcome.confirmedQuote);
+    setStage("details");
+  }
   if (stage === "loading") {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout" }),
@@ -12633,7 +13999,69 @@ function CheckoutClient(_props) {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout" }),
       /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Please sign in to finish your order. Your order is kept with your clinic record so you can see it later." }),
-      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__signin", href: "/portal/sign-in?redirect=/checkout", children: "Sign in to continue" })
+      /* @__PURE__ */ jsx30(
+        "a",
+        {
+          className: "sk-checkout__signin",
+          href: client.signInHref("/checkout"),
+          children: "Sign in to continue"
+        }
+      )
+    ] });
+  }
+  if (stage === "unsupported") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Update your cart" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/cart", children: "Return to cart" })
+    ] });
+  }
+  if (stage === "quote_error") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 ?? "We couldn\u2019t load your checkout. Please try again." }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void retryQuote(),
+          children: "Try again"
+        }
+      )
+    ] });
+  }
+  if (stage === "cart_changed" && pendingQuote) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Your cart was updated" }),
+      /* @__PURE__ */ jsx30("div", { className: "sk-checkout__error", role: "alert", children: pendingQuote.problems.length > 0 ? /* @__PURE__ */ jsx30("ul", { children: pendingQuote.problems.map((problem, index) => /* @__PURE__ */ jsx30("li", { children: problem.message }, `${problem.code}-${index}`)) }) : /* @__PURE__ */ jsx30("p", { children: "Prices or delivery details changed while you were checking out." }) }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void acceptHealedQuote(),
+          children: "Continue with updated cart"
+        }
+      )
+    ] });
+  }
+  if (stage === "reconciliation_pending") {
+    const persistedRecovery = readCheckoutRecovery(recoveryKey);
+    const canRetry = persistedRecovery?.attemptToken === attemptTokenRef.current && persistedRecovery.lines !== null;
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Payment received, cart update pending" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 }),
+      canRetry ? /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: () => void retryPaidReconciliation(),
+          children: "Try updating cart again"
+        }
+      ) : /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/cart", children: "Review cart" }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "View My orders" })
     ] });
   }
   if (stage === "paid") {
@@ -12642,11 +14070,130 @@ function CheckoutClient(_props) {
       /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Taking you to your order\u2026" })
     ] });
   }
+  if (stage === "storage_error") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout unavailable" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "alert", children: error2 })
+    ] });
+  }
+  if (stage === "closed") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Payment not completed" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: error2 }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "resume" && resumableCheckout) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Resume checkout" }),
+      /* @__PURE__ */ jsxs27("p", { className: "sk-checkout__note", role: "status", children: [
+        "Your checkout for ",
+        formatMoney(resumableCheckout.amount),
+        " is ready to continue."
+      ] }),
+      /* @__PURE__ */ jsx30(
+        "button",
+        {
+          type: "button",
+          className: "sk-checkout__pay",
+          onClick: beginResume,
+          children: "Resume checkout"
+        }
+      ),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "resume_payment" && resumableCheckout) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Resume checkout" }),
+      error2 ? /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 }) : null,
+      /* @__PURE__ */ jsxs27("p", { className: "sk-checkout__note", role: "status", children: [
+        "Order total: ",
+        formatMoney(resumableCheckout.amount)
+      ] }),
+      /* @__PURE__ */ jsxs27("form", { className: "sk-checkout__form", onSubmit: onResumePayment, children: [
+        /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
+          /* @__PURE__ */ jsx30("legend", { children: "Card details" }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Name on card" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                autoComplete: "cc-name",
+                value: card.name,
+                onChange: (e) => setCard({ ...card, name: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Card number" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-number",
+                value: card.number,
+                onChange: (e) => setCard({ ...card, number: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Expiry (MM/YY)" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-exp",
+                placeholder: "MM/YY",
+                value: card.expiry,
+                onChange: (e) => setCard({ ...card, expiry: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs27("label", { children: [
+            /* @__PURE__ */ jsx30("span", { children: "Security code" }),
+            /* @__PURE__ */ jsx30(
+              "input",
+              {
+                required: true,
+                inputMode: "numeric",
+                autoComplete: "cc-csc",
+                value: card.cvn,
+                onChange: (e) => setCard({ ...card, cvn: e.target.value })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Your card details go straight to our payment provider \u2014 they never reach this clinic's systems." })
+        ] }),
+        /* @__PURE__ */ jsxs27("button", { type: "submit", className: "sk-checkout__pay", children: [
+          "Pay ",
+          formatMoney(resumableCheckout.amount)
+        ] })
+      ] })
+    ] });
+  }
+  if (stage === "active_elsewhere") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout active elsewhere" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Finish checkout in your other tab, or close it and reload this page." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
+  if (stage === "active") {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Checkout is still opening" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Wait a moment, then reload this page before trying again." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
+    ] });
+  }
   if (stage === "pending") {
     return /* @__PURE__ */ jsxs27(Fragment14, { children: [
       /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: "Confirming your payment" }),
-      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: "Your bank hasn't confirmed the result yet. We're checking with them \u2014 please don't pay again. You'll see the order in your account once it's confirmed." }),
-      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: "/portal/orders", children: "Go to my orders" })
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", role: "status", children: error2 ?? "Your bank hasn't confirmed the result yet. We're checking with them \u2014 please don't pay again. You'll see the order in your account once it's confirmed." }),
+      /* @__PURE__ */ jsx30("a", { className: "sk-checkout__link", href: ordersHref, children: "Go to my orders" })
     ] });
   }
   if (stage === "three_ds" && iframeUrl) {
@@ -12658,16 +14205,23 @@ function CheckoutClient(_props) {
           ref: iframeElRef,
           className: "sk-checkout__3ds",
           src: iframeUrl,
+          style: { visibility: "hidden", height: "1px" },
           title: "Card verification"
         }
       )
     ] });
   }
   const busy = stage === "paying";
+  if (!quote) {
+    return /* @__PURE__ */ jsxs27(Fragment14, { children: [
+      /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
+      /* @__PURE__ */ jsx30("p", { className: "sk-checkout__placeholder", role: "status", children: "Updating your order total\u2026" })
+    ] });
+  }
   return /* @__PURE__ */ jsxs27(Fragment14, { children: [
     /* @__PURE__ */ jsx30("h2", { className: "sk-checkout__heading", children: givenName ? `Checkout \u2014 hello, ${givenName}` : "Checkout" }),
     error2 ? /* @__PURE__ */ jsx30("p", { className: "sk-checkout__error", role: "alert", children: error2 }) : null,
-    quote ? /* @__PURE__ */ jsxs27("div", { className: "sk-checkout__summary", children: [
+    /* @__PURE__ */ jsxs27("div", { className: "sk-checkout__summary", children: [
       /* @__PURE__ */ jsx30("ul", { className: "sk-checkout__lines", children: quote.lines.map((l) => /* @__PURE__ */ jsxs27("li", { children: [
         /* @__PURE__ */ jsxs27("span", { children: [
           l.title,
@@ -12694,9 +14248,9 @@ function CheckoutClient(_props) {
           /* @__PURE__ */ jsx30("dd", { children: formatMoney(quote.total) })
         ] })
       ] })
-    ] }) : null,
+    ] }),
     /* @__PURE__ */ jsxs27("form", { className: "sk-checkout__form", onSubmit: onPay, children: [
-      quote?.requiresShipping ? /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
+      quote.requiresShipping ? /* @__PURE__ */ jsxs27("fieldset", { className: "sk-checkout__fieldset", children: [
         /* @__PURE__ */ jsx30("legend", { children: "How would you like to get this?" }),
         /* @__PURE__ */ jsxs27("label", { children: [
           /* @__PURE__ */ jsx30(
@@ -12749,8 +14303,8 @@ function CheckoutClient(_props) {
               label: "Delivery address",
               value: address,
               onChange: setAddress,
-              search: searchStoreAddresses,
-              validate: validateStoreAddress
+              search: (query) => searchStoreAddresses(query, client),
+              validate: (value) => validateStoreAddress(value, client)
             }
           )
         ] }) : null
@@ -12811,7 +14365,7 @@ function CheckoutClient(_props) {
         ] }),
         /* @__PURE__ */ jsx30("p", { className: "sk-checkout__note", children: "Your card details go straight to our payment provider \u2014 they never reach this clinic's systems." })
       ] }),
-      /* @__PURE__ */ jsx30("button", { type: "submit", className: "sk-checkout__pay", disabled: busy, children: busy ? "Processing\u2026" : quote ? `Pay ${formatMoney(quote.total)}` : "Pay" })
+      /* @__PURE__ */ jsx30("button", { type: "submit", className: "sk-checkout__pay", disabled: busy, children: busy ? "Processing\u2026" : `Pay ${formatMoney(quote.total)}` })
     ] })
   ] });
 }
@@ -12831,6 +14385,7 @@ export {
   getThemeTokens,
   PortalAccount,
   PortalAccountClient,
+  createStoreClient,
   StoreClient,
   CartClient,
   CheckoutClient