@proxy-checkout/stripe-server-js 0.0.0-pr-76.27.1 → 0.0.0-pr-76.30.1

package/dist/cjs/errors.js

@@ -23,7 +23,7 @@ exports.ProxyStripeOpenCheckoutError = ProxyStripeOpenCheckoutError;
 class ProxyStripeCartSyncError extends Error {
     name = "ProxyStripeCartSyncError";
     code;
-    /** True when the Proxy cart was rolled back to its prior state after the failure. */
+    /** True only when the SDK verified Proxy and Stripe are in a consistent state. */
     reconciled;
     cause;
     rollbackCause;

package/dist/cjs/open-checkout.js

@@ -47,6 +47,9 @@ async function openCheckout(options) {
     let rollbackCart;
     const reconciledCart = await options.reconcileCart?.({ cart, offer, session: proxySession });
     if (reconciledCart) {
+        if (options.getCartBuyerReference !== undefined) {
+            (0, server_js_1.assertCartBuyerReference)(options.getCartBuyerReference(reconciledCart.cart), proxySession);
+        }
         const priorCart = {
             amountMinor: proxySession.amountMinor,
             cartSnapshot: proxySession.cartSnapshot,

package/dist/cjs/sync-checkout-cart.js

@@ -47,26 +47,33 @@ async function syncCheckoutCart(options) {
         expectedCartVersion: session.cartVersion,
         requestId: options.requestId,
     });
+    const stripeUpdateParams = {
+        line_items: options.buildStripeLineItems(next.cart),
+    };
+    const stripeUpdateOptions = buildStripeUpdateRequestOptions(options, proxyCartUpdate.cartVersion);
     let updatedCheckout;
     try {
-        updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, {
-            line_items: options.buildStripeLineItems(next.cart),
-        }, options.stripeRequestOptions);
+        updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, stripeUpdateParams, stripeUpdateOptions);
     }
-    catch (cause) {
+    catch {
         try {
-            await options.proxy.sessions.cart.set(options.proxySessionId, {
-                amountMinor: prior.amountMinor,
-                cartSnapshot: prior.cartSnapshot,
-                currency: prior.currency,
-                expectedCartVersion: proxyCartUpdate.cartVersion,
-                requestId: options.requestId,
-            });
+            updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, stripeUpdateParams, stripeUpdateOptions);
         }
-        catch (rollbackCause) {
-            throw new errors_js_1.ProxyStripeCartSyncError("Stripe checkout update failed and the Proxy cart rollback failed; carts may be out of sync.", { cause, code: "reconciliation_failed", reconciled: false, rollbackCause });
+        catch (retryCause) {
+            try {
+                await options.proxy.sessions.cart.set(options.proxySessionId, {
+                    amountMinor: prior.amountMinor,
+                    cartSnapshot: prior.cartSnapshot,
+                    currency: prior.currency,
+                    expectedCartVersion: proxyCartUpdate.cartVersion,
+                    requestId: options.requestId,
+                });
+            }
+            catch (rollbackCause) {
+                throw new errors_js_1.ProxyStripeCartSyncError("Stripe checkout update failed after an idempotent retry and the Proxy cart rollback failed; carts may be out of sync.", { cause: retryCause, code: "reconciliation_failed", reconciled: false, rollbackCause });
+            }
+            throw new errors_js_1.ProxyStripeCartSyncError("Stripe checkout update failed after an idempotent retry; the Proxy cart rollback was attempted, but Stripe state may still be ambiguous.", { cause: retryCause, code: "stripe_update_failed", reconciled: false });
         }
-        throw new errors_js_1.ProxyStripeCartSyncError("Stripe checkout update failed; the Proxy cart was rolled back to its prior state.", { cause, code: "stripe_update_failed", reconciled: true });
     }
     return {
         amountMinor: next.amountMinor,
@@ -76,6 +83,12 @@ async function syncCheckoutCart(options) {
         currency: next.currency,
     };
 }
+function buildStripeUpdateRequestOptions(options, cartVersion) {
+    return {
+        ...options.stripeRequestOptions,
+        idempotencyKey: `proxy-sync-checkout-cart:${options.proxySessionId}:${options.checkoutSessionId}:${cartVersion}`,
+    };
+}
 function assertSessionBoundTo(session, checkoutSessionId, psp) {
     if (session.providerCheckoutSessionId !== checkoutSessionId ||
         session.providerCheckoutSessionPsp !== psp) {

package/dist/cjs/version.js

@@ -2,4 +2,4 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.proxyCheckoutStripeServerSdkVersion = exports.proxyCheckoutStripeServerSdkName = void 0;
 exports.proxyCheckoutStripeServerSdkName = "@proxy-checkout/stripe-server-js";
-exports.proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.27.1";
+exports.proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.30.1";

package/dist/esm/errors.d.ts

@@ -1,7 +1,7 @@
 /**
  * Adapter-specific error raised when a Stripe/Proxy cart synchronization cannot
- * complete cleanly. The `reconciled` flag states whether the Proxy cart was
- * restored to its prior state, so callers can react deterministically.
+ * complete cleanly. The `reconciled` flag is true only when the SDK verified the
+ * Proxy and Stripe carts are back in a consistent state.
  */
 export type ProxyStripeCartSyncCode = "reconciliation_failed" | "stripe_update_failed";
 export type ProxyStripeOpenCheckoutCode = "provider_binding_failed";
@@ -25,7 +25,7 @@ export declare class ProxyStripeOpenCheckoutError extends Error {
 export declare class ProxyStripeCartSyncError extends Error {
     readonly name = "ProxyStripeCartSyncError";
     readonly code: ProxyStripeCartSyncCode;
-    /** True when the Proxy cart was rolled back to its prior state after the failure. */
+    /** True only when the SDK verified Proxy and Stripe are in a consistent state. */
     readonly reconciled: boolean;
     readonly cause: unknown;
     readonly rollbackCause: unknown;

package/dist/esm/errors.js

@@ -19,7 +19,7 @@ export class ProxyStripeOpenCheckoutError extends Error {
 export class ProxyStripeCartSyncError extends Error {
     name = "ProxyStripeCartSyncError";
     code;
-    /** True when the Proxy cart was rolled back to its prior state after the failure. */
+    /** True only when the SDK verified Proxy and Stripe are in a consistent state. */
     reconciled;
     cause;
     rollbackCause;

package/dist/esm/open-checkout.js

@@ -6,7 +6,7 @@
  * provider binding). Merchants provide only Stripe params, so the adapter owns
  * metadata placement, idempotency, and binding reconciliation.
  */
-import { ProxyCheckoutValidationError } from "@proxy-checkout/server-js";
+import { assertCartBuyerReference, ProxyCheckoutValidationError } from "@proxy-checkout/server-js";
 import { ProxyStripeCartSyncError, ProxyStripeOpenCheckoutError } from "./errors.js";
 import { assertCheckoutSessionBelongsToProxy, injectRequiredCheckoutSessionMetadata, } from "./metadata.js";
 import { normalizePsp } from "./psp.js";
@@ -44,6 +44,9 @@ export async function openCheckout(options) {
     let rollbackCart;
     const reconciledCart = await options.reconcileCart?.({ cart, offer, session: proxySession });
     if (reconciledCart) {
+        if (options.getCartBuyerReference !== undefined) {
+            assertCartBuyerReference(options.getCartBuyerReference(reconciledCart.cart), proxySession);
+        }
         const priorCart = {
             amountMinor: proxySession.amountMinor,
             cartSnapshot: proxySession.cartSnapshot,

package/dist/esm/sync-checkout-cart.js

@@ -44,26 +44,33 @@ export async function syncCheckoutCart(options) {
         expectedCartVersion: session.cartVersion,
         requestId: options.requestId,
     });
+    const stripeUpdateParams = {
+        line_items: options.buildStripeLineItems(next.cart),
+    };
+    const stripeUpdateOptions = buildStripeUpdateRequestOptions(options, proxyCartUpdate.cartVersion);
     let updatedCheckout;
     try {
-        updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, {
-            line_items: options.buildStripeLineItems(next.cart),
-        }, options.stripeRequestOptions);
+        updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, stripeUpdateParams, stripeUpdateOptions);
     }
-    catch (cause) {
+    catch {
         try {
-            await options.proxy.sessions.cart.set(options.proxySessionId, {
-                amountMinor: prior.amountMinor,
-                cartSnapshot: prior.cartSnapshot,
-                currency: prior.currency,
-                expectedCartVersion: proxyCartUpdate.cartVersion,
-                requestId: options.requestId,
-            });
+            updatedCheckout = await options.stripe.checkout.sessions.update(options.checkoutSessionId, stripeUpdateParams, stripeUpdateOptions);
         }
-        catch (rollbackCause) {
-            throw new ProxyStripeCartSyncError("Stripe checkout update failed and the Proxy cart rollback failed; carts may be out of sync.", { cause, code: "reconciliation_failed", reconciled: false, rollbackCause });
+        catch (retryCause) {
+            try {
+                await options.proxy.sessions.cart.set(options.proxySessionId, {
+                    amountMinor: prior.amountMinor,
+                    cartSnapshot: prior.cartSnapshot,
+                    currency: prior.currency,
+                    expectedCartVersion: proxyCartUpdate.cartVersion,
+                    requestId: options.requestId,
+                });
+            }
+            catch (rollbackCause) {
+                throw new ProxyStripeCartSyncError("Stripe checkout update failed after an idempotent retry and the Proxy cart rollback failed; carts may be out of sync.", { cause: retryCause, code: "reconciliation_failed", reconciled: false, rollbackCause });
+            }
+            throw new ProxyStripeCartSyncError("Stripe checkout update failed after an idempotent retry; the Proxy cart rollback was attempted, but Stripe state may still be ambiguous.", { cause: retryCause, code: "stripe_update_failed", reconciled: false });
         }
-        throw new ProxyStripeCartSyncError("Stripe checkout update failed; the Proxy cart was rolled back to its prior state.", { cause, code: "stripe_update_failed", reconciled: true });
     }
     return {
         amountMinor: next.amountMinor,
@@ -73,6 +80,12 @@ export async function syncCheckoutCart(options) {
         currency: next.currency,
     };
 }
+function buildStripeUpdateRequestOptions(options, cartVersion) {
+    return {
+        ...options.stripeRequestOptions,
+        idempotencyKey: `proxy-sync-checkout-cart:${options.proxySessionId}:${options.checkoutSessionId}:${cartVersion}`,
+    };
+}
 function assertSessionBoundTo(session, checkoutSessionId, psp) {
     if (session.providerCheckoutSessionId !== checkoutSessionId ||
         session.providerCheckoutSessionPsp !== psp) {

package/dist/esm/version.d.ts

@@ -1,2 +1,2 @@
 export declare const proxyCheckoutStripeServerSdkName = "@proxy-checkout/stripe-server-js";
-export declare const proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.27.1";
+export declare const proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.30.1";

package/dist/esm/version.js

@@ -1,2 +1,2 @@
 export const proxyCheckoutStripeServerSdkName = "@proxy-checkout/stripe-server-js";
-export const proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.27.1";
+export const proxyCheckoutStripeServerSdkVersion = "0.0.0-pr-76.30.1";

package/package.json

@@ -1,21 +1,20 @@
 {
   "description": "Server-side Stripe adapter for Proxy Checkout: required metadata, provider binding, openCheckout, and cart sync.",
   "license": "MIT",
-  "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "name": "@proxy-checkout/stripe-server-js",
   "private": false,
   "sideEffects": false,
   "type": "module",
   "types": "./dist/esm/index.d.ts",
-  "version": "0.0.0-pr-76.27.1",
+  "version": "0.0.0-pr-76.30.1",
   "devDependencies": {
     "@types/node": "^24.12.4",
     "@vitest/coverage-v8": "4.1.7",
     "stripe": "^21.0.1",
     "typescript": "^6.0.3",
     "vitest": "4.1.7",
-    "@proxy-checkout/server-js": "0.0.4-pr-76.27.1"
+    "@proxy-checkout/server-js": "0.0.4-pr-76.30.1"
   },
   "exports": {
     ".": {
@@ -57,5 +56,6 @@
     "test:integration": "vitest run --project integration",
     "test:unit": "vitest run --project unit",
     "typecheck": "tsc --noEmit -p tsconfig.json"
-  }
+  },
+  "main": "./dist/cjs/index.js"
 }