@proxy-checkout/stripe-server-js 0.1.0-prx-146.162.1 → 0.1.0

package/README.md

@@ -5,21 +5,10 @@ Server-side Stripe adapter for Proxy Checkout. It owns the Stripe-specific integ
 - **`requiredMetadata(proxySession)`** — the `proxy_session_id` metadata Proxy needs on the Checkout Session, Subscription, and PaymentIntent.
 - **`assertCheckoutSessionBelongsToProxy` / `assertSubscriptionBelongsToProxy` / `assertPaymentIntentBelongsToProxy`** — provider-object ownership checks.
 - **`openCheckout(...)`** — records payer-opened, validates/reconciles the typed shared cart, injects required metadata, creates or joins the Stripe Checkout Session with deterministic idempotency, and records the Proxy provider binding. Once reconciliation succeeds, the shared cart is retained across later Stripe failures so every viewer can retry the same deterministic create safely. It returns provider-create material only for a `ready` outcome; terminal outcomes retain the shared cart without starting Stripe.
-- **`openSetupIntent(...)`** — reserves or joins one direct-Subscription acquisition, injects the complete acquisition metadata contract, and creates/retrieves one shared SetupIntent using Proxy's server-generated role key. SetupIntent status is presentation progress only: this helper never grants access or claims payment.
-- **`openSubscription(...)`** — creates or joins one direct Stripe Subscription through either an attached succeeded SetupIntent or an explicitly authorized saved PaymentMethod. It verifies Customer/PaymentMethod coherence in the merchant process, validates fixed recurring Prices, rejects unsupported collection/pricing/Connect options, sets only the Subscription default PaymentMethod, and returns old/current initial-Invoice authentication material without claiming payment.
-- **`syncCheckoutCart(...)`** — preserves the deployed mutable/custom-Checkout compatibility contract. It fails before Stripe or Proxy mutation for hosted acquisitions because Stripe does not support hosted Session line-item updates.
+- **`syncCheckoutCart(...)`** — validates the stored Proxy provider binding, then updates the Proxy cart and the Stripe Checkout `line_items` in the safest order with deterministic rollback/reconciliation (`ProxyStripeCartSyncError`).
 
 PSP-agnostic primitives (sessions, subscriptions, webhooks, lifecycle) live in [`@proxy-checkout/server-js`](https://www.npmjs.com/package/@proxy-checkout/server-js). This package is an additive adapter on top and is dependency-free: you inject your own `Stripe` instance and your `@proxy-checkout/server-js` client.
 
-For the explicit one-time Checkout acquisition contract, select semantic
-`uiMode: "hosted"`, `"embedded"`, or `"custom"`. Hosted omits provider `ui_mode`,
-uses `success_url`, and returns `{ kind: "redirect", url }`. Embedded/custom send
-their generation-specific provider UI mode, use `return_url`, and return
-`{ kind: "client_secret", clientSecret, uiMode }`. The helper normalizes current
-`hosted_page`, `embedded_page`, and `elements` aliases only to their matching
-semantic path. URL/client-secret/UI mismatches fail before payer rendering and
-never fall back to hosted.
-
 ## Install
 
 ```bash
@@ -31,129 +20,42 @@ npm install --save-exact @proxy-checkout/stripe-server-js @proxy-checkout/server
 ```ts
 import Stripe from "stripe";
 import { createProxyCheckoutServerClient } from "@proxy-checkout/server-js";
-import {
-  openCheckout,
-  openSetupIntent,
-  openSubscription,
-  syncCheckoutCart,
-} from "@proxy-checkout/stripe-server-js";
+import { openCheckout, syncCheckoutCart } from "@proxy-checkout/stripe-server-js";
 
 const proxy = createProxyCheckoutServerClient({ apiKey: process.env.PROXY_SECRET_KEY! });
-const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!, { apiVersion: "2022-11-15" });
+const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!, { apiVersion: "2025-12-15.clover" });
 
 // Create the merchant-owned Stripe checkout, correctly linked to the Proxy session.
 const checkout = await openCheckout({
-  commercialMode: "one_time",
-  compatibility: { apiVersion: "2022-11-15", serverSdkVersion: "12.18.0" },
-  pricingMode: "fixed",
   proxy,
   stripe,
   proxySessionId,
-  uiMode: "hosted",
   cartSchema, // a zod-style schema, or any (value) => Cart validator
   validateCart: ({ cart }) => buildMerchantOffer(cart),
   buildCheckoutSessionParams: ({ cart, offer }) => ({
-    line_items: buildMerchantStripeLineItems(cart, offer),
-    mode: "payment",
-    success_url: `${appOrigin}/pay/complete?proxy_session_id=${encodeURIComponent(proxySessionId)}`,
-    cancel_url: `${appOrigin}/pay?proxy_session_id=${encodeURIComponent(proxySessionId)}`,
+    ...buildMerchantStripeParams(cart, offer),
+    mode: "subscription",
+    ui_mode: "custom",
   }),
 });
 if (checkout.outcome === "ready") {
-  if (checkout.presentation?.kind !== "redirect") throw new Error("Expected hosted redirect");
-  // Redirect the browser to checkout.presentation.url.
-
-} else {
-  // Render checkout.cart plus checkout.outcome/sessionStatus. Render already_paid
-  // as an explicit completed state and do not start Stripe.
-}
-```
-
-Hosted cart edits replace rather than mutate the Session: expire the merchant-owned
-Stripe Session, wait until Proxy observes provider-confirmed `expired`, write the
-next Proxy cart with its expected cart version, supersede that terminal acquisition,
-and call `openCheckout(...)` again. Use
-`fingerprintHostedCheckoutProviderOptions(nextParams)` for the supersession's
-`providerOptionsFingerprint`; `openCheckout` uses the same canonical function.
-`syncCheckoutCart` raises `hosted_replacement_required` before any provider read or
-write when it resolves an explicit hosted acquisition.
+  // checkout.clientSecret -> render Stripe Elements
 
-The merchant Stripe create/edit credential in this example stays in the
-merchant backend and is never sent to or stored by Proxy. Proxy stores only a
-separate read-only restricted key for provider reconciliation. Browser callers
-send only the Proxy session id; they never send either Stripe credential or a
-server-only merchandise subtotal.
-
-## Direct SetupIntent subscription
-
-Build the SetupIntent and eventual Subscription params from the same immutable
-Proxy cart. The shared acquisition fingerprint covers both builders, so every
-authorized viewer joins the same SetupIntent and Subscription role keys.
-
-```ts
-const buildSetupIntentParams = () => ({
-  payment_method_types: ["card"],
-  usage: "off_session",
-});
-const buildSubscriptionParams = ({ cart }: { cart: Cart }) => ({
-  items: cart.items.map((item) => ({ price: item.stripePriceId, quantity: item.quantity })),
-});
-
-const setup = await openSetupIntent({
-  proxy,
-  stripe,
-  proxySessionId,
-  cartSchema,
-  customerId: sharedBillingCustomerId,
-  initialInvoiceActionShape: "legacy_payment_intent", // Fiveable / API 2022-11-15
-  buildSetupIntentParams,
-  buildSubscriptionParams,
-});
-
-if (setup.outcome === "ready") {
-  // Send only setup.clientSecret to the authorized browser and confirm there.
-  // After Stripe reports the SetupIntent succeeded, call from the merchant server:
-  const subscription = await openSubscription({
+  // Cart edits go through the binding-validated sync helper.
+  await syncCheckoutCart({
     proxy,
     stripe,
     proxySessionId,
+    checkoutSessionId: checkout.checkoutSession.id,
     cartSchema,
-    initialInvoiceActionShape: "legacy_payment_intent",
-    buildSubscriptionParams,
-    fromSetupIntent: {
-      acquisitionAttemptId: setup.acquisitionAttemptId,
-      setupIntentId: setup.setupIntentId,
-      buildSetupIntentParams,
-    },
+    input: { interval: "year" },
+    buildNextCart: ({ currentCart, input }) => buildMerchantCart(currentCart, input),
+    buildStripeLineItems: (cart) => cart.lineItems,
   });
-
-  if (
-    subscription.outcome === "ready" &&
-    subscription.initialInvoiceAction.kind === "client_secret"
-  ) {
-    // Confirm the returned initial-Invoice secret in the browser when required.
-  }
-  // Do not fulfill from this response. Handle Proxy's signed wakeup, resolve
-  // current state, and apply fulfillment idempotently in the merchant system.
+} else {
+  // Render checkout.cart plus checkout.outcome/sessionStatus. Do not start Stripe.
 }
 ```
 
-For Basil/current Invoice shapes, select
-`initialInvoiceActionShape: "confirmation_secret"`. The helper does not silently fall back across API
-generations.
-
-The `fromSavedPaymentMethod` branch requires explicit `customerId` and
-`paymentMethodId`. Use it only when that method belongs to an authorized shared
-billing account and is legitimately available to every payer for this purchase;
-never select one invited viewer's private saved method based on who opens first.
-
 Use the delegated-checkout guide from your Proxy onboarding materials for the
 full four-route integration recipe.
-
-Embedded's candidate floor is stripe-node `14.0.0` / API `2023-10-16` / Stripe.js
-`2.1.8` / React Stripe.js `2.3.2`. Custom's candidate floor is stripe-node
-`18.0.0` / API `2025-03-31.basil` / Stripe.js `7.0.0` / React Stripe.js `3.6.0`.
-Treat both as candidates until exact webhook, two-browser, preview, and
-production-deployed test-mode evidence passes. Fiveable's classic versions keep
-direct/hosted support and receive precise failing-boundary upgrade guidance for
-embedded/custom.

package/dist/cjs/errors.d.cts

@@ -3,75 +3,8 @@
  * complete cleanly. The `reconciled` flag is true only when the SDK verified the
  * Proxy and Stripe carts are back in a consistent state.
  */
-export type ProxyStripeCartSyncCode = "hosted_replacement_required" | "reconciliation_failed" | "stripe_update_failed";
+export type ProxyStripeCartSyncCode = "reconciliation_failed" | "stripe_update_failed";
 export type ProxyStripeOpenCheckoutCode = "provider_binding_failed";
-export type ProxyStripeAcquisitionCode = "acquisition_mismatch" | "customer_payment_method_mismatch" | "fixed_price_mismatch" | "provider_attachment_failed" | "provider_cart_confirmation_failed" | "provider_create_ambiguous" | "provider_response_invalid" | "provider_retrieve_failed" | "setup_intent_not_succeeded" | "unsupported_provider_option";
-/**
- * A provider root may already exist when this error is raised. The bounded
- * identifiers are intentionally retained so a merchant can retrieve the same
- * object or let Proxy's known-object recovery inspect it; no Stripe secret or
- * response body is captured.
- */
-export declare class ProxyStripeAcquisitionError extends Error {
-    readonly name: string;
-    readonly acquisitionAttemptId: string | null;
-    readonly code: ProxyStripeAcquisitionCode;
-    readonly cause: unknown;
-    readonly field: string | undefined;
-    readonly providerObjectId: string | null;
-    readonly reconciled = false;
-    constructor(message: string, details: {
-        acquisitionAttemptId?: string;
-        cause?: unknown;
-        code: ProxyStripeAcquisitionCode;
-        field?: string;
-        providerObjectId?: string | null;
-    });
-}
-export declare class ProxyMetadataConflictError extends ProxyStripeAcquisitionError {
-    readonly name = "ProxyMetadataConflictError";
-    constructor(field: string);
-}
-export type StripeCompatibilityPath = "one_time.checkout.custom" | "one_time.checkout.embedded" | "one_time.checkout.hosted" | "one_time.direct_payment_intent" | "subscription.direct_saved_payment_method" | "subscription.direct_setup_intent";
-export declare class StripeCompatibilityError extends Error {
-    readonly name = "StripeCompatibilityError";
-    readonly code = "stripe_version_not_supported";
-    readonly detectedApiVersion: string | null;
-    readonly detectedBrowserSdkVersion: string | null;
-    readonly detectedReactSdkVersion: string | null;
-    readonly detectedServerSdkVersion: string | null;
-    readonly docsUrl: string;
-    readonly minimumApiVersion: string;
-    readonly minimumBrowserSdkVersion: string | null;
-    readonly minimumReactSdkVersion: string | null;
-    readonly minimumServerSdkVersion: string;
-    readonly path: StripeCompatibilityPath;
-    constructor(input: {
-        detectedApiVersion?: string;
-        detectedBrowserSdkVersion?: string;
-        detectedReactSdkVersion?: string;
-        detectedServerSdkVersion?: string;
-        docsUrl: string;
-        message: string;
-        minimumApiVersion: string;
-        minimumBrowserSdkVersion?: string;
-        minimumReactSdkVersion?: string;
-        minimumServerSdkVersion: string;
-        path: StripeCompatibilityPath;
-    });
-}
-export declare class StripeResponseShapeError extends Error {
-    readonly name = "StripeResponseShapeError";
-    readonly code = "stripe_response_shape_invalid";
-    readonly field: string;
-    constructor(message: string, field: string);
-}
-export declare class UnsupportedStripeOptionError extends Error {
-    readonly name = "UnsupportedStripeOptionError";
-    readonly code = "unsupported_stripe_option";
-    readonly field: string;
-    constructor(messageOrField: string, field?: string);
-}
 /**
  * Raised after Stripe Checkout creation succeeds but the Proxy binding cannot
  * be recorded or reconciled. The provider id is exposed so operators can find

package/dist/cjs/errors.d.ts

@@ -3,75 +3,8 @@
  * complete cleanly. The `reconciled` flag is true only when the SDK verified the
  * Proxy and Stripe carts are back in a consistent state.
  */
-export type ProxyStripeCartSyncCode = "hosted_replacement_required" | "reconciliation_failed" | "stripe_update_failed";
+export type ProxyStripeCartSyncCode = "reconciliation_failed" | "stripe_update_failed";
 export type ProxyStripeOpenCheckoutCode = "provider_binding_failed";
-export type ProxyStripeAcquisitionCode = "acquisition_mismatch" | "customer_payment_method_mismatch" | "fixed_price_mismatch" | "provider_attachment_failed" | "provider_cart_confirmation_failed" | "provider_create_ambiguous" | "provider_response_invalid" | "provider_retrieve_failed" | "setup_intent_not_succeeded" | "unsupported_provider_option";
-/**
- * A provider root may already exist when this error is raised. The bounded
- * identifiers are intentionally retained so a merchant can retrieve the same
- * object or let Proxy's known-object recovery inspect it; no Stripe secret or
- * response body is captured.
- */
-export declare class ProxyStripeAcquisitionError extends Error {
-    readonly name: string;
-    readonly acquisitionAttemptId: string | null;
-    readonly code: ProxyStripeAcquisitionCode;
-    readonly cause: unknown;
-    readonly field: string | undefined;
-    readonly providerObjectId: string | null;
-    readonly reconciled = false;
-    constructor(message: string, details: {
-        acquisitionAttemptId?: string;
-        cause?: unknown;
-        code: ProxyStripeAcquisitionCode;
-        field?: string;
-        providerObjectId?: string | null;
-    });
-}
-export declare class ProxyMetadataConflictError extends ProxyStripeAcquisitionError {
-    readonly name = "ProxyMetadataConflictError";
-    constructor(field: string);
-}
-export type StripeCompatibilityPath = "one_time.checkout.custom" | "one_time.checkout.embedded" | "one_time.checkout.hosted" | "one_time.direct_payment_intent" | "subscription.direct_saved_payment_method" | "subscription.direct_setup_intent";
-export declare class StripeCompatibilityError extends Error {
-    readonly name = "StripeCompatibilityError";
-    readonly code = "stripe_version_not_supported";
-    readonly detectedApiVersion: string | null;
-    readonly detectedBrowserSdkVersion: string | null;
-    readonly detectedReactSdkVersion: string | null;
-    readonly detectedServerSdkVersion: string | null;
-    readonly docsUrl: string;
-    readonly minimumApiVersion: string;
-    readonly minimumBrowserSdkVersion: string | null;
-    readonly minimumReactSdkVersion: string | null;
-    readonly minimumServerSdkVersion: string;
-    readonly path: StripeCompatibilityPath;
-    constructor(input: {
-        detectedApiVersion?: string;
-        detectedBrowserSdkVersion?: string;
-        detectedReactSdkVersion?: string;
-        detectedServerSdkVersion?: string;
-        docsUrl: string;
-        message: string;
-        minimumApiVersion: string;
-        minimumBrowserSdkVersion?: string;
-        minimumReactSdkVersion?: string;
-        minimumServerSdkVersion: string;
-        path: StripeCompatibilityPath;
-    });
-}
-export declare class StripeResponseShapeError extends Error {
-    readonly name = "StripeResponseShapeError";
-    readonly code = "stripe_response_shape_invalid";
-    readonly field: string;
-    constructor(message: string, field: string);
-}
-export declare class UnsupportedStripeOptionError extends Error {
-    readonly name = "UnsupportedStripeOptionError";
-    readonly code = "unsupported_stripe_option";
-    readonly field: string;
-    constructor(messageOrField: string, field?: string);
-}
 /**
  * Raised after Stripe Checkout creation succeeds but the Proxy binding cannot
  * be recorded or reconciled. The provider id is exposed so operators can find

package/dist/cjs/errors.js

@@ -1,91 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProxyStripeCartSyncError = exports.ProxyStripeOpenCheckoutError = exports.UnsupportedStripeOptionError = exports.StripeResponseShapeError = exports.StripeCompatibilityError = exports.ProxyMetadataConflictError = exports.ProxyStripeAcquisitionError = void 0;
-/**
- * A provider root may already exist when this error is raised. The bounded
- * identifiers are intentionally retained so a merchant can retrieve the same
- * object or let Proxy's known-object recovery inspect it; no Stripe secret or
- * response body is captured.
- */
-class ProxyStripeAcquisitionError extends Error {
-    name = "ProxyStripeAcquisitionError";
-    acquisitionAttemptId;
-    code;
-    cause;
-    field;
-    providerObjectId;
-    reconciled = false;
-    constructor(message, details) {
-        super(message);
-        this.acquisitionAttemptId = details.acquisitionAttemptId ?? null;
-        this.cause = details.cause;
-        this.code = details.code;
-        this.field = details.field;
-        this.providerObjectId = details.providerObjectId ?? null;
-    }
-}
-exports.ProxyStripeAcquisitionError = ProxyStripeAcquisitionError;
-class ProxyMetadataConflictError extends ProxyStripeAcquisitionError {
-    name = "ProxyMetadataConflictError";
-    constructor(field) {
-        super(`Stripe ${field} conflicts with Proxy-required acquisition metadata.`, {
-            code: "acquisition_mismatch",
-            field,
-        });
-    }
-}
-exports.ProxyMetadataConflictError = ProxyMetadataConflictError;
-class StripeCompatibilityError extends Error {
-    name = "StripeCompatibilityError";
-    code = "stripe_version_not_supported";
-    detectedApiVersion;
-    detectedBrowserSdkVersion;
-    detectedReactSdkVersion;
-    detectedServerSdkVersion;
-    docsUrl;
-    minimumApiVersion;
-    minimumBrowserSdkVersion;
-    minimumReactSdkVersion;
-    minimumServerSdkVersion;
-    path;
-    constructor(input) {
-        super(input.message);
-        this.detectedApiVersion = input.detectedApiVersion ?? null;
-        this.detectedBrowserSdkVersion = input.detectedBrowserSdkVersion ?? null;
-        this.detectedReactSdkVersion = input.detectedReactSdkVersion ?? null;
-        this.detectedServerSdkVersion = input.detectedServerSdkVersion ?? null;
-        this.docsUrl = input.docsUrl;
-        this.minimumApiVersion = input.minimumApiVersion;
-        this.minimumBrowserSdkVersion = input.minimumBrowserSdkVersion ?? null;
-        this.minimumReactSdkVersion = input.minimumReactSdkVersion ?? null;
-        this.minimumServerSdkVersion = input.minimumServerSdkVersion;
-        this.path = input.path;
-    }
-}
-exports.StripeCompatibilityError = StripeCompatibilityError;
-class StripeResponseShapeError extends Error {
-    name = "StripeResponseShapeError";
-    code = "stripe_response_shape_invalid";
-    field;
-    constructor(message, field) {
-        super(message);
-        this.field = field;
-    }
-}
-exports.StripeResponseShapeError = StripeResponseShapeError;
-class UnsupportedStripeOptionError extends Error {
-    name = "UnsupportedStripeOptionError";
-    code = "unsupported_stripe_option";
-    field;
-    constructor(messageOrField, field) {
-        const resolvedField = field ?? messageOrField;
-        super(field === undefined
-            ? `Stripe option ${resolvedField} is not supported for direct subscriptions.`
-            : messageOrField);
-        this.field = resolvedField;
-    }
-}
-exports.UnsupportedStripeOptionError = UnsupportedStripeOptionError;
+exports.ProxyStripeCartSyncError = exports.ProxyStripeOpenCheckoutError = void 0;
 /**
  * Raised after Stripe Checkout creation succeeds but the Proxy binding cannot
  * be recorded or reconciled. The provider id is exposed so operators can find

package/dist/cjs/index.d.cts

@@ -1,13 +1,7 @@
-export { fingerprintHostedCheckoutProviderOptions } from "./acquisition.js";
-export { assertHostedNoCostCompatibility, assertStripePathCompatibility, compareStripeApiVersions, type StripeCompatibilityDescriptor, type StripeCompatibilityLane, stripeCompatibilityLanes, } from "./compatibility.js";
-export { ProxyMetadataConflictError, type ProxyStripeAcquisitionCode, ProxyStripeAcquisitionError, type ProxyStripeCartSyncCode, ProxyStripeCartSyncError, type ProxyStripeOpenCheckoutCode, ProxyStripeOpenCheckoutError, StripeCompatibilityError, type StripeCompatibilityPath, StripeResponseShapeError, UnsupportedStripeOptionError, } from "./errors.js";
-export { assertCheckoutSessionBelongsToProxy, assertCheckoutSessionMetadataPreflight, assertPaymentIntentBelongsToProxy, assertProviderObjectBelongsToAcquisition, assertSubscriptionBelongsToProxy, injectRequiredCheckoutSessionMetadata, injectRequiredPaymentIntentMetadata, PROXY_ACQUISITION_ATTEMPT_METADATA_KEY, PROXY_CONTRACT_VERSION_METADATA_KEY, PROXY_INTEGRATION_PATH_METADATA_KEY, PROXY_SESSION_METADATA_KEY, type ProxySessionMetadata, type ProxyStripeRequiredMetadata, requiredMetadata, } from "./metadata.js";
-export { type OpenCheckoutOptions, type OpenCheckoutPresentation, type OpenCheckoutReconciledCart, type OpenCheckoutResponse, type OpenCheckoutResult, type OpenCheckoutTerminalResult, openCheckout, } from "./open-checkout.js";
-export { type OpenPaymentIntentOptions, type OpenPaymentIntentResponse, openPaymentIntent, type ReadyPaymentIntentResult, type SafePaymentIntentStatus, } from "./open-payment-intent.js";
-export { type OpenSetupIntentBuilderInput, type OpenSetupIntentOptions, type OpenSetupIntentReadyResult, type OpenSetupIntentResponse, openSetupIntent, } from "./open-setup-intent.js";
-export { type InitialInvoiceAction, type LegacyInitialInvoiceLike, type OpenSubscriptionBuilderInput, type OpenSubscriptionOptions, type OpenSubscriptionReadyResult, type OpenSubscriptionResponse, openSubscription, } from "./open-subscription.js";
+export { type ProxyStripeCartSyncCode, ProxyStripeCartSyncError, type ProxyStripeOpenCheckoutCode, ProxyStripeOpenCheckoutError, } from "./errors.js";
+export { assertCheckoutSessionBelongsToProxy, assertPaymentIntentBelongsToProxy, assertSubscriptionBelongsToProxy, injectRequiredCheckoutSessionMetadata, PROXY_INTEGRATION_PATH_METADATA_KEY, PROXY_SESSION_METADATA_KEY, type ProxySessionMetadata, type ProxyStripeRequiredMetadata, requiredMetadata, } from "./metadata.js";
+export { type OpenCheckoutOptions, type OpenCheckoutReconciledCart, type OpenCheckoutResponse, type OpenCheckoutResult, type OpenCheckoutTerminalResult, openCheckout, } from "./open-checkout.js";
 export { normalizePsp } from "./psp.js";
-export type { ValidatedSubscriptionItem, ValidateFixedSubscriptionPrice, ValidateFixedSubscriptionPriceInput, VerifiedSubscriptionPriceItem, } from "./subscription-params.js";
 export { type SyncCheckoutCartOptions, type SyncCheckoutCartResult, type SyncedCart, syncCheckoutCart, } from "./sync-checkout-cart.js";
-export type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeCheckoutSessionsApiLike, StripeCheckoutSessionUpdateParams, StripeClientLike, StripeDirectSubscriptionClientLike, StripeInvoiceLike, StripeMetadata, StripeMutableCheckoutClientLike, StripeMutableCheckoutSessionsApiLike, StripeObjectReferenceLike, StripePaymentIntentClientLike, StripePaymentIntentCreateParams, StripePaymentIntentLike, StripePaymentIntentsApiLike, StripePaymentMethodLike, StripePriceLike, StripeRequestOptionsLike, StripeSetupIntentClientLike, StripeSetupIntentCreateParams, StripeSetupIntentLike, StripeSetupSubscriptionClientLike, StripeSubscriptionCreateParams, StripeSubscriptionItemCreateParamsLike, StripeSubscriptionLike, } from "./types.js";
+export type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeCheckoutSessionsApiLike, StripeCheckoutSessionUpdateParams, StripeClientLike, StripeMetadata, StripePaymentIntentLike, StripeRequestOptionsLike, StripeSubscriptionLike, } from "./types.js";
 export { proxyCheckoutStripeServerSdkName, proxyCheckoutStripeServerSdkVersion, } from "./version.js";

package/dist/cjs/index.d.ts

@@ -1,13 +1,7 @@
-export { fingerprintHostedCheckoutProviderOptions } from "./acquisition.js";
-export { assertHostedNoCostCompatibility, assertStripePathCompatibility, compareStripeApiVersions, type StripeCompatibilityDescriptor, type StripeCompatibilityLane, stripeCompatibilityLanes, } from "./compatibility.js";
-export { ProxyMetadataConflictError, type ProxyStripeAcquisitionCode, ProxyStripeAcquisitionError, type ProxyStripeCartSyncCode, ProxyStripeCartSyncError, type ProxyStripeOpenCheckoutCode, ProxyStripeOpenCheckoutError, StripeCompatibilityError, type StripeCompatibilityPath, StripeResponseShapeError, UnsupportedStripeOptionError, } from "./errors.js";
-export { assertCheckoutSessionBelongsToProxy, assertCheckoutSessionMetadataPreflight, assertPaymentIntentBelongsToProxy, assertProviderObjectBelongsToAcquisition, assertSubscriptionBelongsToProxy, injectRequiredCheckoutSessionMetadata, injectRequiredPaymentIntentMetadata, PROXY_ACQUISITION_ATTEMPT_METADATA_KEY, PROXY_CONTRACT_VERSION_METADATA_KEY, PROXY_INTEGRATION_PATH_METADATA_KEY, PROXY_SESSION_METADATA_KEY, type ProxySessionMetadata, type ProxyStripeRequiredMetadata, requiredMetadata, } from "./metadata.js";
-export { type OpenCheckoutOptions, type OpenCheckoutPresentation, type OpenCheckoutReconciledCart, type OpenCheckoutResponse, type OpenCheckoutResult, type OpenCheckoutTerminalResult, openCheckout, } from "./open-checkout.js";
-export { type OpenPaymentIntentOptions, type OpenPaymentIntentResponse, openPaymentIntent, type ReadyPaymentIntentResult, type SafePaymentIntentStatus, } from "./open-payment-intent.js";
-export { type OpenSetupIntentBuilderInput, type OpenSetupIntentOptions, type OpenSetupIntentReadyResult, type OpenSetupIntentResponse, openSetupIntent, } from "./open-setup-intent.js";
-export { type InitialInvoiceAction, type LegacyInitialInvoiceLike, type OpenSubscriptionBuilderInput, type OpenSubscriptionOptions, type OpenSubscriptionReadyResult, type OpenSubscriptionResponse, openSubscription, } from "./open-subscription.js";
+export { type ProxyStripeCartSyncCode, ProxyStripeCartSyncError, type ProxyStripeOpenCheckoutCode, ProxyStripeOpenCheckoutError, } from "./errors.js";
+export { assertCheckoutSessionBelongsToProxy, assertPaymentIntentBelongsToProxy, assertSubscriptionBelongsToProxy, injectRequiredCheckoutSessionMetadata, PROXY_INTEGRATION_PATH_METADATA_KEY, PROXY_SESSION_METADATA_KEY, type ProxySessionMetadata, type ProxyStripeRequiredMetadata, requiredMetadata, } from "./metadata.js";
+export { type OpenCheckoutOptions, type OpenCheckoutReconciledCart, type OpenCheckoutResponse, type OpenCheckoutResult, type OpenCheckoutTerminalResult, openCheckout, } from "./open-checkout.js";
 export { normalizePsp } from "./psp.js";
-export type { ValidatedSubscriptionItem, ValidateFixedSubscriptionPrice, ValidateFixedSubscriptionPriceInput, VerifiedSubscriptionPriceItem, } from "./subscription-params.js";
 export { type SyncCheckoutCartOptions, type SyncCheckoutCartResult, type SyncedCart, syncCheckoutCart, } from "./sync-checkout-cart.js";
-export type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeCheckoutSessionsApiLike, StripeCheckoutSessionUpdateParams, StripeClientLike, StripeDirectSubscriptionClientLike, StripeInvoiceLike, StripeMetadata, StripeMutableCheckoutClientLike, StripeMutableCheckoutSessionsApiLike, StripeObjectReferenceLike, StripePaymentIntentClientLike, StripePaymentIntentCreateParams, StripePaymentIntentLike, StripePaymentIntentsApiLike, StripePaymentMethodLike, StripePriceLike, StripeRequestOptionsLike, StripeSetupIntentClientLike, StripeSetupIntentCreateParams, StripeSetupIntentLike, StripeSetupSubscriptionClientLike, StripeSubscriptionCreateParams, StripeSubscriptionItemCreateParamsLike, StripeSubscriptionLike, } from "./types.js";
+export type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeCheckoutSessionsApiLike, StripeCheckoutSessionUpdateParams, StripeClientLike, StripeMetadata, StripePaymentIntentLike, StripeRequestOptionsLike, StripeSubscriptionLike, } from "./types.js";
 export { proxyCheckoutStripeServerSdkName, proxyCheckoutStripeServerSdkVersion, } from "./version.js";

package/dist/cjs/index.js

@@ -1,42 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.proxyCheckoutStripeServerSdkVersion = exports.proxyCheckoutStripeServerSdkName = exports.syncCheckoutCart = exports.normalizePsp = exports.openSubscription = exports.openSetupIntent = exports.openPaymentIntent = exports.openCheckout = exports.requiredMetadata = exports.PROXY_SESSION_METADATA_KEY = exports.PROXY_INTEGRATION_PATH_METADATA_KEY = exports.PROXY_CONTRACT_VERSION_METADATA_KEY = exports.PROXY_ACQUISITION_ATTEMPT_METADATA_KEY = exports.injectRequiredPaymentIntentMetadata = exports.injectRequiredCheckoutSessionMetadata = exports.assertSubscriptionBelongsToProxy = exports.assertProviderObjectBelongsToAcquisition = exports.assertPaymentIntentBelongsToProxy = exports.assertCheckoutSessionMetadataPreflight = exports.assertCheckoutSessionBelongsToProxy = exports.UnsupportedStripeOptionError = exports.StripeResponseShapeError = exports.StripeCompatibilityError = exports.ProxyStripeOpenCheckoutError = exports.ProxyStripeCartSyncError = exports.ProxyStripeAcquisitionError = exports.ProxyMetadataConflictError = exports.stripeCompatibilityLanes = exports.compareStripeApiVersions = exports.assertStripePathCompatibility = exports.assertHostedNoCostCompatibility = exports.fingerprintHostedCheckoutProviderOptions = void 0;
-var acquisition_js_1 = require("./acquisition.js");
-Object.defineProperty(exports, "fingerprintHostedCheckoutProviderOptions", { enumerable: true, get: function () { return acquisition_js_1.fingerprintHostedCheckoutProviderOptions; } });
-var compatibility_js_1 = require("./compatibility.js");
-Object.defineProperty(exports, "assertHostedNoCostCompatibility", { enumerable: true, get: function () { return compatibility_js_1.assertHostedNoCostCompatibility; } });
-Object.defineProperty(exports, "assertStripePathCompatibility", { enumerable: true, get: function () { return compatibility_js_1.assertStripePathCompatibility; } });
-Object.defineProperty(exports, "compareStripeApiVersions", { enumerable: true, get: function () { return compatibility_js_1.compareStripeApiVersions; } });
-Object.defineProperty(exports, "stripeCompatibilityLanes", { enumerable: true, get: function () { return compatibility_js_1.stripeCompatibilityLanes; } });
+exports.proxyCheckoutStripeServerSdkVersion = exports.proxyCheckoutStripeServerSdkName = exports.syncCheckoutCart = exports.normalizePsp = exports.openCheckout = exports.requiredMetadata = exports.PROXY_SESSION_METADATA_KEY = exports.PROXY_INTEGRATION_PATH_METADATA_KEY = exports.injectRequiredCheckoutSessionMetadata = exports.assertSubscriptionBelongsToProxy = exports.assertPaymentIntentBelongsToProxy = exports.assertCheckoutSessionBelongsToProxy = exports.ProxyStripeOpenCheckoutError = exports.ProxyStripeCartSyncError = void 0;
 var errors_js_1 = require("./errors.js");
-Object.defineProperty(exports, "ProxyMetadataConflictError", { enumerable: true, get: function () { return errors_js_1.ProxyMetadataConflictError; } });
-Object.defineProperty(exports, "ProxyStripeAcquisitionError", { enumerable: true, get: function () { return errors_js_1.ProxyStripeAcquisitionError; } });
 Object.defineProperty(exports, "ProxyStripeCartSyncError", { enumerable: true, get: function () { return errors_js_1.ProxyStripeCartSyncError; } });
 Object.defineProperty(exports, "ProxyStripeOpenCheckoutError", { enumerable: true, get: function () { return errors_js_1.ProxyStripeOpenCheckoutError; } });
-Object.defineProperty(exports, "StripeCompatibilityError", { enumerable: true, get: function () { return errors_js_1.StripeCompatibilityError; } });
-Object.defineProperty(exports, "StripeResponseShapeError", { enumerable: true, get: function () { return errors_js_1.StripeResponseShapeError; } });
-Object.defineProperty(exports, "UnsupportedStripeOptionError", { enumerable: true, get: function () { return errors_js_1.UnsupportedStripeOptionError; } });
 var metadata_js_1 = require("./metadata.js");
 Object.defineProperty(exports, "assertCheckoutSessionBelongsToProxy", { enumerable: true, get: function () { return metadata_js_1.assertCheckoutSessionBelongsToProxy; } });
-Object.defineProperty(exports, "assertCheckoutSessionMetadataPreflight", { enumerable: true, get: function () { return metadata_js_1.assertCheckoutSessionMetadataPreflight; } });
 Object.defineProperty(exports, "assertPaymentIntentBelongsToProxy", { enumerable: true, get: function () { return metadata_js_1.assertPaymentIntentBelongsToProxy; } });
-Object.defineProperty(exports, "assertProviderObjectBelongsToAcquisition", { enumerable: true, get: function () { return metadata_js_1.assertProviderObjectBelongsToAcquisition; } });
 Object.defineProperty(exports, "assertSubscriptionBelongsToProxy", { enumerable: true, get: function () { return metadata_js_1.assertSubscriptionBelongsToProxy; } });
 Object.defineProperty(exports, "injectRequiredCheckoutSessionMetadata", { enumerable: true, get: function () { return metadata_js_1.injectRequiredCheckoutSessionMetadata; } });
-Object.defineProperty(exports, "injectRequiredPaymentIntentMetadata", { enumerable: true, get: function () { return metadata_js_1.injectRequiredPaymentIntentMetadata; } });
-Object.defineProperty(exports, "PROXY_ACQUISITION_ATTEMPT_METADATA_KEY", { enumerable: true, get: function () { return metadata_js_1.PROXY_ACQUISITION_ATTEMPT_METADATA_KEY; } });
-Object.defineProperty(exports, "PROXY_CONTRACT_VERSION_METADATA_KEY", { enumerable: true, get: function () { return metadata_js_1.PROXY_CONTRACT_VERSION_METADATA_KEY; } });
 Object.defineProperty(exports, "PROXY_INTEGRATION_PATH_METADATA_KEY", { enumerable: true, get: function () { return metadata_js_1.PROXY_INTEGRATION_PATH_METADATA_KEY; } });
 Object.defineProperty(exports, "PROXY_SESSION_METADATA_KEY", { enumerable: true, get: function () { return metadata_js_1.PROXY_SESSION_METADATA_KEY; } });
 Object.defineProperty(exports, "requiredMetadata", { enumerable: true, get: function () { return metadata_js_1.requiredMetadata; } });
 var open_checkout_js_1 = require("./open-checkout.js");
 Object.defineProperty(exports, "openCheckout", { enumerable: true, get: function () { return open_checkout_js_1.openCheckout; } });
-var open_payment_intent_js_1 = require("./open-payment-intent.js");
-Object.defineProperty(exports, "openPaymentIntent", { enumerable: true, get: function () { return open_payment_intent_js_1.openPaymentIntent; } });
-var open_setup_intent_js_1 = require("./open-setup-intent.js");
-Object.defineProperty(exports, "openSetupIntent", { enumerable: true, get: function () { return open_setup_intent_js_1.openSetupIntent; } });
-var open_subscription_js_1 = require("./open-subscription.js");
-Object.defineProperty(exports, "openSubscription", { enumerable: true, get: function () { return open_subscription_js_1.openSubscription; } });
 var psp_js_1 = require("./psp.js");
 Object.defineProperty(exports, "normalizePsp", { enumerable: true, get: function () { return psp_js_1.normalizePsp; } });
 var sync_checkout_cart_js_1 = require("./sync-checkout-cart.js");

package/dist/cjs/metadata.d.cts

@@ -6,13 +6,11 @@
  * customers never have to remember which Stripe objects need the key, and
  * provides assertions that a Stripe object actually belongs to a Proxy session.
  */
-import type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeMetadata, StripePaymentIntentCreateParams, StripePaymentIntentLike, StripeSubscriptionLike } from "./types.js";
+import type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripePaymentIntentLike, StripeSubscriptionLike } from "./types.js";
 /** The single metadata key Proxy reads to correlate a Stripe object to a session. */
 export declare const PROXY_SESSION_METADATA_KEY = "proxy_session_id";
 /** Server-owned marker that distinguishes Checkout-created child objects from direct objects. */
 export declare const PROXY_INTEGRATION_PATH_METADATA_KEY = "proxy_integration_path";
-export declare const PROXY_ACQUISITION_ATTEMPT_METADATA_KEY = "proxy_acquisition_attempt_id";
-export declare const PROXY_CONTRACT_VERSION_METADATA_KEY = "proxy_contract_version";
 export type ProxySessionMetadata = Readonly<Record<"proxy_session_id", string>>;
 /**
  * The metadata each Stripe object must carry, ready to spread into Stripe params.
@@ -41,32 +39,10 @@ export declare function requiredMetadata(proxySession: {
  * every object Proxy may later need to correlate. Conflicting merchant-provided
  * proxy metadata fails before any Stripe side effect.
  */
-export declare function injectRequiredCheckoutSessionMetadata(params: StripeCheckoutSessionCreateParams, proxySessionId: string, acquisition?: {
-    id: string;
-    contractVersion: "2";
-}): StripeCheckoutSessionCreateParams;
-/**
- * Validate merchant-authored Checkout metadata before reserving an acquisition.
- * The acquisition ID does not exist yet, so those reservation-owned keys must
- * be absent until the shared create owner injects their exact values.
- */
-export declare function assertCheckoutSessionMetadataPreflight(params: StripeCheckoutSessionCreateParams, proxySessionId: string): void;
-/** Inject the server-owned acquisition identity into a direct PaymentIntent. */
-export declare function injectRequiredPaymentIntentMetadata(params: StripePaymentIntentCreateParams, input: {
-    acquisitionAttemptId: string;
-    proxySessionId: string;
-}): StripePaymentIntentCreateParams;
+export declare function injectRequiredCheckoutSessionMetadata(params: StripeCheckoutSessionCreateParams, proxySessionId: string): StripeCheckoutSessionCreateParams;
 /** Assert a Stripe Checkout Session carries the expected `proxy_session_id` metadata. */
 export declare function assertCheckoutSessionBelongsToProxy(checkoutSession: Pick<StripeCheckoutSessionLike, "metadata">, proxySessionId: string): void;
 /** Assert a Stripe Subscription carries the expected `proxy_session_id` metadata. */
 export declare function assertSubscriptionBelongsToProxy(subscription: Pick<StripeSubscriptionLike, "metadata">, proxySessionId: string): void;
 /** Assert a Stripe PaymentIntent carries the expected `proxy_session_id` metadata. */
 export declare function assertPaymentIntentBelongsToProxy(paymentIntent: Pick<StripePaymentIntentLike, "metadata">, proxySessionId: string): void;
-/** Assert the provider root carries the exact reserved acquisition identity. */
-export declare function assertProviderObjectBelongsToAcquisition(object: {
-    readonly metadata?: StripeMetadata;
-}, input: {
-    acquisitionAttemptId: string;
-    integrationPath: string;
-    proxySessionId: string;
-}): void;

package/dist/cjs/metadata.d.ts

@@ -6,13 +6,11 @@
  * customers never have to remember which Stripe objects need the key, and
  * provides assertions that a Stripe object actually belongs to a Proxy session.
  */
-import type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripeMetadata, StripePaymentIntentCreateParams, StripePaymentIntentLike, StripeSubscriptionLike } from "./types.js";
+import type { StripeCheckoutSessionCreateParams, StripeCheckoutSessionLike, StripePaymentIntentLike, StripeSubscriptionLike } from "./types.js";
 /** The single metadata key Proxy reads to correlate a Stripe object to a session. */
 export declare const PROXY_SESSION_METADATA_KEY = "proxy_session_id";
 /** Server-owned marker that distinguishes Checkout-created child objects from direct objects. */
 export declare const PROXY_INTEGRATION_PATH_METADATA_KEY = "proxy_integration_path";
-export declare const PROXY_ACQUISITION_ATTEMPT_METADATA_KEY = "proxy_acquisition_attempt_id";
-export declare const PROXY_CONTRACT_VERSION_METADATA_KEY = "proxy_contract_version";
 export type ProxySessionMetadata = Readonly<Record<"proxy_session_id", string>>;
 /**
  * The metadata each Stripe object must carry, ready to spread into Stripe params.
@@ -41,32 +39,10 @@ export declare function requiredMetadata(proxySession: {
  * every object Proxy may later need to correlate. Conflicting merchant-provided
  * proxy metadata fails before any Stripe side effect.
  */
-export declare function injectRequiredCheckoutSessionMetadata(params: StripeCheckoutSessionCreateParams, proxySessionId: string, acquisition?: {
-    id: string;
-    contractVersion: "2";
-}): StripeCheckoutSessionCreateParams;
-/**
- * Validate merchant-authored Checkout metadata before reserving an acquisition.
- * The acquisition ID does not exist yet, so those reservation-owned keys must
- * be absent until the shared create owner injects their exact values.
- */
-export declare function assertCheckoutSessionMetadataPreflight(params: StripeCheckoutSessionCreateParams, proxySessionId: string): void;
-/** Inject the server-owned acquisition identity into a direct PaymentIntent. */
-export declare function injectRequiredPaymentIntentMetadata(params: StripePaymentIntentCreateParams, input: {
-    acquisitionAttemptId: string;
-    proxySessionId: string;
-}): StripePaymentIntentCreateParams;
+export declare function injectRequiredCheckoutSessionMetadata(params: StripeCheckoutSessionCreateParams, proxySessionId: string): StripeCheckoutSessionCreateParams;
 /** Assert a Stripe Checkout Session carries the expected `proxy_session_id` metadata. */
 export declare function assertCheckoutSessionBelongsToProxy(checkoutSession: Pick<StripeCheckoutSessionLike, "metadata">, proxySessionId: string): void;
 /** Assert a Stripe Subscription carries the expected `proxy_session_id` metadata. */
 export declare function assertSubscriptionBelongsToProxy(subscription: Pick<StripeSubscriptionLike, "metadata">, proxySessionId: string): void;
 /** Assert a Stripe PaymentIntent carries the expected `proxy_session_id` metadata. */
 export declare function assertPaymentIntentBelongsToProxy(paymentIntent: Pick<StripePaymentIntentLike, "metadata">, proxySessionId: string): void;
-/** Assert the provider root carries the exact reserved acquisition identity. */
-export declare function assertProviderObjectBelongsToAcquisition(object: {
-    readonly metadata?: StripeMetadata;
-}, input: {
-    acquisitionAttemptId: string;
-    integrationPath: string;
-    proxySessionId: string;
-}): void;