@rovela-ai/sdk 0.24.1 → 0.25.1

package/dist/checkout/api/paypal.js

@@ -0,0 +1,70 @@
+/**
+ * @rovela/sdk/checkout/api/paypal
+ *
+ * POST /api/checkout/paypal — start a PayPal payment. Creates the order
+ * 'pending' (server-priced, §55) and a matching PayPal order (Orders v2,
+ * invoice_id = our reference). The client either renders the Smart Buttons
+ * popup (paypalOrderId) or redirects to approveUrl (fallback). Payment
+ * truth arrives via the capture leg (checkout/api/paypal-capture) with the
+ * webhook as async backstop — never via this route.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/checkout/paypal/route.ts
+ * export { POST } from '@rovela-ai/sdk/checkout/api/paypal'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { preparePendingExternalOrder, resolveStoreBaseUrl, } from '../server/external-checkout';
+import { resolvePaypalCredentials, createPaypalOrder, PaypalApiError } from '../server/paypal';
+export const PAYPAL_METHOD_LABEL = 'PayPal';
+export async function POST(request) {
+    try {
+        const body = (await request.json());
+        const prepared = await preparePendingExternalOrder({
+            body,
+            provider: 'paypal',
+            providerLabel: PAYPAL_METHOD_LABEL,
+        });
+        if (!prepared.ok)
+            return prepared.response;
+        const credentials = resolvePaypalCredentials(prepared.settings);
+        if (!credentials) {
+            return NextResponse.json({ error: 'This payment method is not available', code: 'INVALID_REQUEST' }, { status: 400 });
+        }
+        const base = resolveStoreBaseUrl(request.nextUrl.origin);
+        // Pickup/relay orders snapshot a merchant/relay address — PayPal must not
+        // see it as the buyer's shipping address, so only DELIVERY addresses are
+        // forwarded (SET_PROVIDED_ADDRESS); everything else is NO_SHIPPING.
+        const deliveryAddress = !prepared.quote.pickupLocationId && !prepared.quote.relay
+            ? prepared.orderShippingAddress
+            : null;
+        const paypalOrder = await createPaypalOrder({
+            credentials,
+            reference: prepared.reference,
+            totalCents: prepared.quote.totalCents,
+            currency: prepared.quote.currency,
+            storeName: prepared.settings?.storeName || 'Store',
+            returnUrl: `${base}/api/checkout/paypal/return`,
+            cancelUrl: `${base}/checkout?payment=cancelled`,
+            shippingAddress: deliveryAddress,
+            locale: prepared.orderLocale,
+        });
+        return NextResponse.json({
+            success: true,
+            orderId: prepared.orderId,
+            reference: prepared.reference,
+            paypalOrderId: paypalOrder.paypalOrderId,
+            approveUrl: paypalOrder.approveUrl,
+        });
+    }
+    catch (error) {
+        if (error instanceof PaypalApiError) {
+            console.error('[PayPal Checkout API] PayPal error:', error.status, error.issue, error.body);
+            return NextResponse.json({ error: 'PayPal could not start this payment. Please try again.', code: 'CHECKOUT_ERROR' }, { status: 502 });
+        }
+        console.error('[PayPal Checkout API] error:', error);
+        return NextResponse.json({ error: 'Failed to start the payment. Please try again.', code: 'CHECKOUT_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=paypal.js.map

package/dist/checkout/api/paypal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.js","sourceRoot":"","sources":["../../../src/checkout/api/paypal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,GAEpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAG9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAA;AAW3C,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgC,CAAA;QAElE,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;YACjD,IAAI;YACJ,QAAQ,EAAE,QAAQ;YAClB,aAAa,EAAE,mBAAmB;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;QAE1C,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,iBAA0B,EAAE,EACnF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxD,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,eAAe,GACnB,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;YACvD,CAAC,CAAC,QAAQ,CAAC,oBAAoB;YAC/B,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC;YAC1C,WAAW;YACX,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;YACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;YACjC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,OAAO;YAClD,SAAS,EAAE,GAAG,IAAI,6BAA6B;YAC/C,SAAS,EAAE,GAAG,IAAI,6BAA6B;YAC/C,eAAe,EAAE,eAAe;YAChC,MAAM,EAAE,QAAQ,CAAC,WAAW;SAC7B,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC3F,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,wDAAwD,EAAE,IAAI,EAAE,gBAAyB,EAAE,EACpG,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QACpD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,gDAAgD,EAAE,IAAI,EAAE,gBAAyB,EAAE,EAC5F,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/checkout/api/up2pay-ipn.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @rovela/sdk/checkout/api/up2pay-ipn
+ *
+ * The Up2pay e-Transactions IPN (Instant Payment Notification) — the
+ * server-to-server callback that is the ONLY source of payment truth for
+ * Up2pay orders. Called by the platform for EVERY payment attempt
+ * (accepted or rejected), possibly multiple times and possibly BEFORE the
+ * customer's browser returns.
+ *
+ * Contract with the platform: respond 200 quickly, never redirect. The
+ * response body is a short plain-text marker (an empty page is
+ * discouraged by the integration manual).
+ *
+ * Field names follow UP2PAY_RETOUR (checkout/server/up2pay.ts):
+ *   amount:M  reference:R  auto:A  error:E  transaction:S  sign:K
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/checkout/up2pay/ipn/route.ts
+ * export { GET, POST } from '@rovela-ai/sdk/checkout/api/up2pay-ipn'
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server';
+/** Default IPN transport (no PBX_RUF1): params on the query string. */
+export declare function GET(request: NextRequest): Promise<NextResponse>;
+/** PBX_RUF1=POST variant: params in the form-encoded body. */
+export declare function POST(request: NextRequest): Promise<NextResponse>;
+//# sourceMappingURL=up2pay-ipn.d.ts.map

package/dist/checkout/api/up2pay-ipn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"up2pay-ipn.d.ts","sourceRoot":"","sources":["../../../src/checkout/api/up2pay-ipn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAsEvD,uEAAuE;AACvE,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAErE;AAED,8DAA8D;AAC9D,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAGtE"}

package/dist/checkout/api/up2pay-ipn.js

@@ -0,0 +1,88 @@
+/**
+ * @rovela/sdk/checkout/api/up2pay-ipn
+ *
+ * The Up2pay e-Transactions IPN (Instant Payment Notification) — the
+ * server-to-server callback that is the ONLY source of payment truth for
+ * Up2pay orders. Called by the platform for EVERY payment attempt
+ * (accepted or rejected), possibly multiple times and possibly BEFORE the
+ * customer's browser returns.
+ *
+ * Contract with the platform: respond 200 quickly, never redirect. The
+ * response body is a short plain-text marker (an empty page is
+ * discouraged by the integration manual).
+ *
+ * Field names follow UP2PAY_RETOUR (checkout/server/up2pay.ts):
+ *   amount:M  reference:R  auto:A  error:E  transaction:S  sign:K
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/checkout/up2pay/ipn/route.ts
+ * export { GET, POST } from '@rovela-ai/sdk/checkout/api/up2pay-ipn'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { verifyUp2payIpnSignature } from '../server/up2pay';
+import { confirmExternalOrderPaid } from '../server/confirm-order';
+const ok = (body) => new NextResponse(body, { status: 200, headers: { 'Content-Type': 'text/plain' } });
+async function handleIpn(raw) {
+    try {
+        if (!raw || raw === '?') {
+            return new NextResponse('missing parameters', { status: 400 });
+        }
+        const { valid, fields } = verifyUp2payIpnSignature(raw);
+        const reference = fields.reference ?? '';
+        const errorCode = fields.error ?? '';
+        if (!valid) {
+            // A failed signature on a money callback is either misconfiguration or
+            // tampering — log loudly, process NOTHING. 400 (not 200) so a platform
+            // retry after a config fix can still land.
+            console.error(`[Up2pay IPN] SIGNATURE VERIFICATION FAILED — ref=${reference} error=${errorCode} (nothing processed)`);
+            return new NextResponse('signature verification failed', { status: 400 });
+        }
+        if (!reference.startsWith('up2pay_')) {
+            console.error(`[Up2pay IPN] unexpected reference shape: ${reference}`);
+            return ok('ignored');
+        }
+        // Rejected / abandoned attempt: the customer may retry from the hosted
+        // page — the order stays pending (it reads as an unpaid attempt in
+        // admin, same as an unpaid manual order). Log for the merchant trail.
+        if (errorCode !== '00000' || !fields.auto) {
+            console.warn(`[Up2pay IPN] non-success attempt ref=${reference} error=${errorCode} auto=${fields.auto ?? ''}`);
+            return ok('acknowledged');
+        }
+        const paidAmountCents = Number.parseInt(fields.amount ?? '', 10);
+        if (!Number.isInteger(paidAmountCents) || paidAmountCents <= 0) {
+            console.error(`[Up2pay IPN] invalid amount for ${reference}: ${fields.amount}`);
+            return ok('acknowledged');
+        }
+        const result = await confirmExternalOrderPaid({
+            reference,
+            expectedProvider: 'up2pay',
+            providerLabel: 'Up2pay e-Transactions',
+            paidAmountCents,
+            transaction: [
+                ...(fields.transaction
+                    ? [{ key: 'up2pay_transaction', label: 'Up2pay transaction', value: fields.transaction }]
+                    : []),
+                { key: 'up2pay_authorization', label: 'Authorization number', value: fields.auto },
+            ],
+        });
+        console.log(`[Up2pay IPN] ref=${reference} → ${result.status}`);
+        return ok(result.status === 'amount_mismatch' ? 'amount mismatch' : 'ok');
+    }
+    catch (error) {
+        console.error('[Up2pay IPN] error:', error);
+        // 500 → the platform may retry the notification.
+        return new NextResponse('error', { status: 500 });
+    }
+}
+/** Default IPN transport (no PBX_RUF1): params on the query string. */
+export async function GET(request) {
+    return handleIpn(request.nextUrl.search);
+}
+/** PBX_RUF1=POST variant: params in the form-encoded body. */
+export async function POST(request) {
+    const raw = await request.text();
+    return handleIpn(raw);
+}
+//# sourceMappingURL=up2pay-ipn.js.map

package/dist/checkout/api/up2pay-ipn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"up2pay-ipn.js","sourceRoot":"","sources":["../../../src/checkout/api/up2pay-ipn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAElE,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAC1B,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;AAEpF,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,IAAI,YAAY,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAChE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAA;QAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,uEAAuE;YACvE,uEAAuE;YACvE,2CAA2C;YAC3C,OAAO,CAAC,KAAK,CACX,oDAAoD,SAAS,UAAU,SAAS,sBAAsB,CACvG,CAAA;YACD,OAAO,IAAI,YAAY,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3E,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAA;YACtE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAED,uEAAuE;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,wCAAwC,SAAS,UAAU,SAAS,SAAS,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CACjG,CAAA;YACD,OAAO,EAAE,CAAC,cAAc,CAAC,CAAA;QAC3B,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC/E,OAAO,EAAE,CAAC,cAAc,CAAC,CAAA;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,SAAS;YACT,gBAAgB,EAAE,QAAQ;YAC1B,aAAa,EAAE,uBAAuB;YACtC,eAAe;YACf,WAAW,EAAE;gBACX,GAAG,CAAC,MAAM,CAAC,WAAW;oBACpB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;oBACzF,CAAC,CAAC,EAAE,CAAC;gBACP,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;aACnF;SACF,CAAC,CAAA;QAEF,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/D,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAA;QAC3C,iDAAiD;QACjD,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAoB;IAC5C,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AAC1C,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;IAChC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;AACvB,CAAC"}

package/dist/checkout/api/up2pay.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @rovela/sdk/checkout/api/up2pay
+ *
+ * POST /api/checkout/up2pay — start an Up2pay e-Transactions (Crédit
+ * Agricole) hosted-page payment. Creates the order 'pending' (server-priced,
+ * §55) and returns the HMAC-signed form the browser auto-submits to the
+ * hosted payment page. The IPN (checkout/api/up2pay-ipn) is the ONLY thing
+ * that ever flips the order to paid.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/checkout/up2pay/route.ts
+ * export { POST } from '@rovela-ai/sdk/checkout/api/up2pay'
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { CheckoutApiError } from '../types';
+export declare const UP2PAY_METHOD_LABEL = "Up2pay e-Transactions";
+interface Up2payCheckoutResponse {
+    success: true;
+    orderId: string;
+    reference: string;
+    /** The hosted payment page to POST to. */
+    url: string;
+    method: 'POST';
+    /** Hidden form fields IN ORDER (the HMAC covers this exact order). */
+    fields: Array<{
+        name: string;
+        value: string;
+    }>;
+}
+export declare function POST(request: NextRequest): Promise<NextResponse<Up2payCheckoutResponse | CheckoutApiError>>;
+export {};
+//# sourceMappingURL=up2pay.d.ts.map

package/dist/checkout/api/up2pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"up2pay.d.ts","sourceRoot":"","sources":["../../../src/checkout/api/up2pay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEhD,eAAO,MAAM,mBAAmB,0BAA0B,CAAA;AAE1D,UAAU,sBAAsB;IAC9B,OAAO,EAAE,IAAI,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC/C;AAED,wBAAsB,IAAI,CACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,sBAAsB,GAAG,gBAAgB,CAAC,CAAC,CAyElE"}

package/dist/checkout/api/up2pay.js

@@ -0,0 +1,82 @@
+/**
+ * @rovela/sdk/checkout/api/up2pay
+ *
+ * POST /api/checkout/up2pay — start an Up2pay e-Transactions (Crédit
+ * Agricole) hosted-page payment. Creates the order 'pending' (server-priced,
+ * §55) and returns the HMAC-signed form the browser auto-submits to the
+ * hosted payment page. The IPN (checkout/api/up2pay-ipn) is the ONLY thing
+ * that ever flips the order to paid.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/checkout/up2pay/route.ts
+ * export { POST } from '@rovela-ai/sdk/checkout/api/up2pay'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { preparePendingExternalOrder, resolveStoreBaseUrl, } from '../server/external-checkout';
+import { resolveUp2payCredentials, buildUp2payRedirect, Up2payError, } from '../server/up2pay';
+export const UP2PAY_METHOD_LABEL = 'Up2pay e-Transactions';
+export async function POST(request) {
+    try {
+        const body = (await request.json());
+        const prepared = await preparePendingExternalOrder({
+            body,
+            provider: 'up2pay',
+            providerLabel: UP2PAY_METHOD_LABEL,
+        });
+        if (!prepared.ok)
+            return prepared.response;
+        const credentials = resolveUp2payCredentials(prepared.settings);
+        if (!credentials) {
+            return NextResponse.json({ error: 'This payment method is not available', code: 'INVALID_REQUEST' }, { status: 400 });
+        }
+        const base = resolveStoreBaseUrl(request.nextUrl.origin);
+        const billingSource = prepared.orderBillingAddress ?? body.shippingAddress ?? prepared.orderShippingAddress;
+        let form;
+        try {
+            form = buildUp2payRedirect({
+                credentials,
+                reference: prepared.reference,
+                totalCents: prepared.quote.totalCents,
+                currency: prepared.quote.currency,
+                customerEmail: prepared.email,
+                billing: {
+                    firstName: billingSource?.firstName || prepared.email.split('@')[0] || 'Client',
+                    lastName: billingSource?.lastName || 'Client',
+                    line1: billingSource?.line1 || '-',
+                    line2: billingSource?.line2 ?? null,
+                    postalCode: billingSource?.postalCode ?? null,
+                    city: billingSource?.city || '-',
+                    country: billingSource?.country || prepared.settings?.storeCountry || 'FR',
+                },
+                totalQuantity: prepared.quote.lines.reduce((sum, l) => sum + (l.quantity || 0), 0),
+                effectueUrl: `${base}/checkout/success?orderId=${encodeURIComponent(prepared.orderId)}`,
+                refuseUrl: `${base}/checkout?payment=refused`,
+                annuleUrl: `${base}/checkout?payment=cancelled`,
+                attenteUrl: `${base}/checkout/success?orderId=${encodeURIComponent(prepared.orderId)}`,
+                ipnUrl: `${base}/api/checkout/up2pay/ipn`,
+                locale: prepared.orderLocale,
+            });
+        }
+        catch (err) {
+            if (err instanceof Up2payError) {
+                return NextResponse.json({ error: err.message, code: 'INVALID_REQUEST' }, { status: 400 });
+            }
+            throw err;
+        }
+        return NextResponse.json({
+            success: true,
+            orderId: prepared.orderId,
+            reference: prepared.reference,
+            url: form.url,
+            method: form.method,
+            fields: form.fields,
+        });
+    }
+    catch (error) {
+        console.error('[Up2pay Checkout API] error:', error);
+        return NextResponse.json({ error: 'Failed to start the payment. Please try again.', code: 'CHECKOUT_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=up2pay.js.map

package/dist/checkout/api/up2pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"up2pay.js","sourceRoot":"","sources":["../../../src/checkout/api/up2pay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,GAEpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,GACZ,MAAM,kBAAkB,CAAA;AAGzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAA;AAa1D,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgC,CAAA;QAElE,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;YACjD,IAAI;YACJ,QAAQ,EAAE,QAAQ;YAClB,aAAa,EAAE,mBAAmB;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;QAE1C,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,sCAAsC,EAAE,IAAI,EAAE,iBAA0B,EAAE,EACnF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,aAAa,GACjB,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,eAAe,IAAI,QAAQ,CAAC,oBAAoB,CAAA;QAEvF,IAAI,IAAI,CAAA;QACR,IAAI,CAAC;YACH,IAAI,GAAG,mBAAmB,CAAC;gBACzB,WAAW;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;gBACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;gBACjC,aAAa,EAAE,QAAQ,CAAC,KAAK;gBAC7B,OAAO,EAAE;oBACP,SAAS,EAAE,aAAa,EAAE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ;oBAC/E,QAAQ,EAAE,aAAa,EAAE,QAAQ,IAAI,QAAQ;oBAC7C,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,GAAG;oBAClC,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,IAAI;oBACnC,UAAU,EAAE,aAAa,EAAE,UAAU,IAAI,IAAI;oBAC7C,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,GAAG;oBAChC,OAAO,EAAE,aAAa,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI;iBAC3E;gBACD,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClF,WAAW,EAAE,GAAG,IAAI,6BAA6B,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;gBACvF,SAAS,EAAE,GAAG,IAAI,2BAA2B;gBAC7C,SAAS,EAAE,GAAG,IAAI,6BAA6B;gBAC/C,UAAU,EAAE,GAAG,IAAI,6BAA6B,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;gBACtF,MAAM,EAAE,GAAG,IAAI,0BAA0B;gBACzC,MAAM,EAAE,QAAQ,CAAC,WAAW;aAC7B,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,iBAA0B,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;YACH,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QACpD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,gDAAgD,EAAE,IAAI,EAAE,gBAAyB,EAAE,EAC5F,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/checkout/components/CheckoutFlow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CheckoutFlow.d.ts","sourceRoot":"","sources":["../../../src/checkout/components/CheckoutFlow.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH,OAAO,KAAK,EACV,iBAAiB,EAOlB,MAAM,UAAU,CAAA;AA+UjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,YAAY,CAAC,EAC3B,UAAU,EACV,QAAQ,EACR,aAAa,EACb,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,gBAAuB,EACvB,QAAgB,EAChB,QAAQ,GACT,EAAE,iBAAiB,2CA80CnB"}
+{"version":3,"file":"CheckoutFlow.d.ts","sourceRoot":"","sources":["../../../src/checkout/components/CheckoutFlow.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsBH,OAAO,KAAK,EACV,iBAAiB,EAOlB,MAAM,UAAU,CAAA;AA+UjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,YAAY,CAAC,EAC3B,UAAU,EACV,QAAQ,EACR,aAAa,EACb,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,gBAAuB,EACvB,QAAgB,EAChB,QAAQ,GACT,EAAE,iBAAiB,2CAk8CnB"}

package/dist/checkout/components/CheckoutFlow.js

@@ -26,6 +26,8 @@ import { SignUpForm } from '../../auth/components/SignUpForm';
 import { ShippingForm } from './ShippingForm';
 import { ShippingOptions } from './ShippingOptions';
 import { OrderSummary } from './OrderSummary';
+import { PayPalCheckoutButtons } from './PayPalCheckoutButtons';
+import { PAYPAL_LOGO_DATA_URI, CREDIT_AGRICOLE_LOGO_DATA_URI } from './payment-logos';
 /**
  * Client-side French mobile check (relay UX pre-validation only — the pricing
  * core re-validates server-side; see resolveShippingSelection).
@@ -266,10 +268,20 @@ export function CheckoutFlow({ onComplete, onCancel, customerEmail, customerId,
     // Never gate when accounts are Off (that combo is normalized away, but a
     // hand-edited row must not strand shoppers behind a sign-in that can't exist).
     const showAuthGate = storeSettings?.guestCheckout === false && storeSettings?.customerAccounts !== false && !customerId;
-    // Payment methods beyond native Stripe (cash on delivery, wire…). Empty list
-    // → the selector never renders and checkout is byte-identical to before.
+    // Payment methods beyond native Stripe: registry rows (cash on delivery,
+    // wire…) plus synthetic external-provider entries (PayPal, Up2pay — SDK
+    // 0.25.0). Empty list → the selector never renders and checkout is
+    // byte-identical to before.
     const [paymentMethods, setPaymentMethods] = useState([]);
     const [selectedPaymentMethodId, setSelectedPaymentMethodId] = useState(''); // '' = card via Stripe
+    // Whether native Stripe card payment exists on THIS store (0.25.1). The
+    // server reports it from the same env truth the session route runs on —
+    // the card option must NEVER render on a store without Stripe (shoppers
+    // were offered a dead payment path). Defaults true so Stripe stores keep
+    // a flash-free first paint; the fetch corrects it long before the review
+    // step is reachable.
+    const [stripeAvailable, setStripeAvailable] = useState(true);
+    const selectedPaymentMethod = paymentMethods.find((m) => m.id === selectedPaymentMethodId) ?? null;
     // Pattern C — populate state from async-loaded data.
     useEffect(() => {
         let active = true;
@@ -278,6 +290,14 @@ export function CheckoutFlow({ onComplete, onCancel, customerEmail, customerId,
             .then((data) => {
             if (active && data?.success && Array.isArray(data.methods)) {
                 setPaymentMethods(data.methods);
+                const hasStripe = data.stripeAvailable !== false;
+                setStripeAvailable(hasStripe);
+                // No Stripe → '' (the card default) is not a valid selection;
+                // preselect the first REAL option so the order button always maps
+                // to an available payment path.
+                if (!hasStripe) {
+                    setSelectedPaymentMethodId((prev) => prev || (data.methods[0]?.id ?? ''));
+                }
             }
         })
             .catch(() => {
@@ -352,7 +372,7 @@ export function CheckoutFlow({ onComplete, onCancel, customerEmail, customerId,
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, []);
     // Checkout hook with shipping params
-    const { checkout, checkoutManual, isLoading: isCheckoutLoading, error: checkoutError } = useCheckout({
+    const { checkout, checkoutManual, checkoutUp2pay, createPaypalOrder, capturePaypalOrder, isLoading: isCheckoutLoading, error: checkoutError, } = useCheckout({
         customerEmail: state.email || undefined,
         customerId,
         successUrl,
@@ -696,13 +716,42 @@ export function CheckoutFlow({ onComplete, onCancel, customerEmail, customerId,
             currency: resolvedCurrency,
             path: typeof window !== 'undefined' ? window.location.pathname : '/checkout',
         });
-        if (selectedPaymentMethodId) {
+        if (selectedPaymentMethod?.provider === 'up2pay') {
+            // External redirect provider — hosted payment page, IPN-confirmed.
+            await checkoutUp2pay();
+        }
+        else if (selectedPaymentMethodId && selectedPaymentMethod?.kind !== 'external') {
             await checkoutManual(selectedPaymentMethodId);
         }
-        else {
+        else if (stripeAvailable) {
             await checkout();
         }
-    }, [checkout, checkoutManual, selectedPaymentMethodId, subtotal, state.selectedShipping, state.taxIncludedInPrices, state.tax, resolvedCurrency]);
+        else {
+            // Defense in depth — the UI never offers the card path without
+            // Stripe, so reaching here means a stale selection.
+            setState((prev) => ({ ...prev, isProcessing: false }));
+        }
+    }, [checkout, checkoutManual, checkoutUp2pay, selectedPaymentMethod, selectedPaymentMethodId, stripeAvailable, subtotal, state.selectedShipping, state.taxIncludedInPrices, state.tax, resolvedCurrency]);
+    // PayPal Smart Buttons legs (the buttons replace the main checkout button
+    // when the PayPal provider is selected — approval happens in the popup,
+    // capture on the server).
+    const handlePaypalCreateOrder = useCallback(async () => {
+        const shippingCents = state.selectedShipping?.price || 0;
+        const subtotalC = Math.round(subtotal * 100);
+        const totalC = state.taxIncludedInPrices
+            ? subtotalC + shippingCents
+            : subtotalC + shippingCents + (state.tax || 0);
+        emitEvent({
+            event: 'begin_checkout',
+            value_cents: totalC,
+            currency: resolvedCurrency,
+            path: typeof window !== 'undefined' ? window.location.pathname : '/checkout',
+        });
+        return createPaypalOrder();
+    }, [createPaypalOrder, subtotal, state.selectedShipping, state.taxIncludedInPrices, state.tax, resolvedCurrency]);
+    const handlePaypalApprove = useCallback(async (paypalOrderId) => {
+        await capturePaypalOrder(paypalOrderId);
+    }, [capturePaypalOrder]);
     // Go back to previous step
     const goBack = useCallback(() => {
         setState((prev) => {
@@ -813,9 +862,15 @@ export function CheckoutFlow({ onComplete, onCancel, customerEmail, customerId,
                                                                                             .filter(Boolean)
                                                                                             .join(', ') })] })] }), formatRelayDistance(relay.distanceMeters) && (_jsx("span", { className: "text-xs text-muted-foreground whitespace-nowrap", children: formatRelayDistance(relay.distanceMeters) }))] }, relay.id))) }), relayPoints.length > 5 && !showAllRelays && (_jsx("button", { type: "button", onClick: () => setShowAllRelays(true), className: "text-sm underline text-muted-foreground hover:text-foreground", children: t('checkout.relayShowMore', { count: relayPoints.length - 5 }) }))] }))] })) : null }), _jsxs("div", { className: "flex gap-4 pt-4", children: [_jsx("button", { type: "button", onClick: goBack, className: cn('flex-1 px-4 py-3 rounded-md font-medium', 'border border-input bg-background', 'hover:bg-muted', 'transition-colors'), children: t('common.back') }), _jsx("button", { type: "button", onClick: handleShippingContinue, disabled: !state.selectedShipping ||
                                                     state.isLoadingShipping ||
-                                                    (isRelaySelected && (!selectedRelay || !relayMobileOk)), className: cn('flex-1 px-4 py-3 rounded-md font-medium', 'bg-primary text-primary-foreground', 'hover:bg-primary/90', 'transition-colors', 'disabled:opacity-50 disabled:cursor-not-allowed'), children: t('checkout.continueToReview') })] })] })), state.step === 'review' && state.shippingAddress && state.selectedShipping && (_jsxs("div", { className: "space-y-6", children: [_jsx("h2", { className: "text-xl font-semibold", children: t('checkout.reviewYourOrder') }), isPickup && state.selectedPickupLocation ? (_jsx("div", { className: "space-y-4", children: _jsxs("div", { className: "p-4 border rounded-lg space-y-3", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("h4", { className: "flex items-center gap-2 font-medium", children: [_jsx(Store, { className: "h-4 w-4" }), t('checkout.pickupInStore')] }), _jsx("button", { type: "button", onClick: () => setState((prev) => ({ ...prev, step: 'address' })), className: "text-sm text-primary hover:underline shrink-0", children: t('common.edit') })] }), _jsxs("div", { className: "text-sm", children: [_jsx("p", { className: "font-medium", children: state.selectedPickupLocation.name }), _jsx("p", { className: "text-muted-foreground", children: pickupAddressLine(state.selectedPickupLocation) }), formatTodayHours(state.selectedPickupLocation, t) && (_jsxs("p", { className: "text-muted-foreground flex items-center gap-1 mt-1", children: [_jsx(Clock, { className: "h-3 w-3" }), formatTodayHours(state.selectedPickupLocation, t)] })), state.selectedPickupLocation.preparationTime && (_jsx("p", { className: "text-emerald-600 mt-1", children: t('checkout.usuallyReadyIn', { time: translateDynamic(t, 'prep', state.selectedPickupLocation.preparationTime) }) }))] }), _jsxs("div", { className: "border-t pt-3 text-sm", children: [_jsxs("p", { className: "font-medium", children: [pickupContact.firstName, " ", pickupContact.lastName] }), _jsx("p", { className: "text-muted-foreground", children: state.email || customerEmail || '' })] })] }) })) : (_jsx(ReviewSection, { shippingAddress: state.shippingAddress, billingAddress: state.billingAddress, selectedShipping: state.selectedShipping, email: state.email || customerEmail || '', currency: resolvedCurrency, onEditAddress: () => setState((prev) => ({ ...prev, step: 'address' })), onEditShipping: () => setState((prev) => ({ ...prev, step: 'shipping' })) })), !showOrderSummary && discountBlock, paymentMethods.length > 0 && (_jsxs("div", { className: "p-4 border rounded-lg", children: [_jsx("h4", { className: "font-medium mb-3", children: t('checkout.paymentMethod') }), _jsxs("div", { className: "space-y-2", children: [_jsxs("label", { className: cn('flex items-start gap-3 rounded-md border p-3 cursor-pointer transition-colors', selectedPaymentMethodId === '' && 'border-primary bg-primary/5'), children: [_jsx("input", { type: "radio", name: "payment-method", checked: selectedPaymentMethodId === '', onChange: () => setSelectedPaymentMethodId(''), className: "mt-1" }), _jsxs("span", { children: [_jsx("span", { className: "block text-sm font-medium", children: t('checkout.card') }), _jsx("span", { className: "block text-xs text-muted-foreground", children: t('checkout.secureViaStripe') })] })] }), paymentMethods.map((m) => (_jsxs("label", { className: cn('flex items-start gap-3 rounded-md border p-3 cursor-pointer transition-colors', selectedPaymentMethodId === m.id && 'border-primary bg-primary/5'), children: [_jsx("input", { type: "radio", name: "payment-method", checked: selectedPaymentMethodId === m.id, onChange: () => setSelectedPaymentMethodId(m.id), className: "mt-1" }), _jsxs("span", { children: [_jsx("span", { className: "block text-sm font-medium", children: m.name }), m.instructions && (_jsx("span", { className: "block text-xs text-muted-foreground line-clamp-2", children: m.instructions }))] })] }, m.id)))] })] })), _jsx("button", { type: "button", onClick: handleCheckout, disabled: state.isProcessing || isCheckoutLoading, className: cn('w-full px-4 py-4 rounded-md font-medium text-lg', 'bg-primary text-primary-foreground', 'hover:bg-primary/90', 'transition-colors', 'disabled:opacity-50 disabled:cursor-not-allowed', 'flex items-center justify-center gap-2'), children: (state.isProcessing || isCheckoutLoading) ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-5 w-5 animate-spin" }), t('common.processing')] })) : (_jsxs(_Fragment, { children: [_jsx(CreditCard, { className: "h-5 w-5" }), selectedPaymentMethodId ? t('checkout.placeOrder') : t('checkout.proceedToPayment')] })) }), _jsx("p", { className: "text-xs text-center text-muted-foreground", children: selectedPaymentMethodId
-                                            ? t('checkout.manualConfirmNote')
-                                            : t('checkout.stripeRedirectNote') })] }))] })) }), showOrderSummary && (_jsx("div", { className: "lg:col-span-1", children: _jsxs("div", { className: "sticky top-4 space-y-3", children: [_jsx(OrderSummary, { items: items.map((item) => ({
+                                                    (isRelaySelected && (!selectedRelay || !relayMobileOk)), className: cn('flex-1 px-4 py-3 rounded-md font-medium', 'bg-primary text-primary-foreground', 'hover:bg-primary/90', 'transition-colors', 'disabled:opacity-50 disabled:cursor-not-allowed'), children: t('checkout.continueToReview') })] })] })), state.step === 'review' && state.shippingAddress && state.selectedShipping && (_jsxs("div", { className: "space-y-6", children: [_jsx("h2", { className: "text-xl font-semibold", children: t('checkout.reviewYourOrder') }), isPickup && state.selectedPickupLocation ? (_jsx("div", { className: "space-y-4", children: _jsxs("div", { className: "p-4 border rounded-lg space-y-3", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("h4", { className: "flex items-center gap-2 font-medium", children: [_jsx(Store, { className: "h-4 w-4" }), t('checkout.pickupInStore')] }), _jsx("button", { type: "button", onClick: () => setState((prev) => ({ ...prev, step: 'address' })), className: "text-sm text-primary hover:underline shrink-0", children: t('common.edit') })] }), _jsxs("div", { className: "text-sm", children: [_jsx("p", { className: "font-medium", children: state.selectedPickupLocation.name }), _jsx("p", { className: "text-muted-foreground", children: pickupAddressLine(state.selectedPickupLocation) }), formatTodayHours(state.selectedPickupLocation, t) && (_jsxs("p", { className: "text-muted-foreground flex items-center gap-1 mt-1", children: [_jsx(Clock, { className: "h-3 w-3" }), formatTodayHours(state.selectedPickupLocation, t)] })), state.selectedPickupLocation.preparationTime && (_jsx("p", { className: "text-emerald-600 mt-1", children: t('checkout.usuallyReadyIn', { time: translateDynamic(t, 'prep', state.selectedPickupLocation.preparationTime) }) }))] }), _jsxs("div", { className: "border-t pt-3 text-sm", children: [_jsxs("p", { className: "font-medium", children: [pickupContact.firstName, " ", pickupContact.lastName] }), _jsx("p", { className: "text-muted-foreground", children: state.email || customerEmail || '' })] })] }) })) : (_jsx(ReviewSection, { shippingAddress: state.shippingAddress, billingAddress: state.billingAddress, selectedShipping: state.selectedShipping, email: state.email || customerEmail || '', currency: resolvedCurrency, onEditAddress: () => setState((prev) => ({ ...prev, step: 'address' })), onEditShipping: () => setState((prev) => ({ ...prev, step: 'shipping' })) })), !showOrderSummary && discountBlock, paymentMethods.length > 0 && (_jsxs("div", { className: "p-4 border rounded-lg", children: [_jsx("h4", { className: "font-medium mb-3", children: t('checkout.paymentMethod') }), _jsxs("div", { className: "space-y-2", children: [stripeAvailable && (_jsxs("label", { className: cn('flex items-start gap-3 rounded-md border p-3 cursor-pointer transition-colors', selectedPaymentMethodId === '' && 'border-primary bg-primary/5'), children: [_jsx("input", { type: "radio", name: "payment-method", checked: selectedPaymentMethodId === '', onChange: () => setSelectedPaymentMethodId(''), className: "mt-1" }), _jsxs("span", { className: "flex-1", children: [_jsx("span", { className: "block text-sm font-medium", children: t('checkout.card') }), _jsx("span", { className: "block text-xs text-muted-foreground", children: t('checkout.secureViaStripe') })] }), _jsx(CreditCard, { className: "h-5 w-5 mt-0.5 text-muted-foreground", "aria-hidden": true })] })), paymentMethods.map((m) => (_jsxs("label", { className: cn('flex items-start gap-3 rounded-md border p-3 cursor-pointer transition-colors', selectedPaymentMethodId === m.id && 'border-primary bg-primary/5'), children: [_jsx("input", { type: "radio", name: "payment-method", checked: selectedPaymentMethodId === m.id, onChange: () => setSelectedPaymentMethodId(m.id), className: "mt-1" }), _jsxs("span", { className: "flex-1", children: [_jsx("span", { className: "block text-sm font-medium", children: m.provider === 'up2pay' ? t('checkout.up2payLabel') : m.name }), m.provider === 'paypal' && (_jsx("span", { className: "block text-xs text-muted-foreground", children: t('checkout.paypalNote') })), m.provider === 'up2pay' && (_jsx("span", { className: "block text-xs text-muted-foreground", children: t('checkout.up2payNote') })), m.instructions && (_jsx("span", { className: "block text-xs text-muted-foreground line-clamp-2", children: m.instructions }))] }), m.provider === 'paypal' && (
+                                                            // eslint-disable-next-line @next/next/no-img-element
+                                                            _jsx("img", { src: PAYPAL_LOGO_DATA_URI, alt: "", className: "h-4 mt-1" })), m.provider === 'up2pay' && (
+                                                            // eslint-disable-next-line @next/next/no-img-element
+                                                            _jsx("img", { src: CREDIT_AGRICOLE_LOGO_DATA_URI, alt: "", className: "h-6 mt-0.5" }))] }, m.id)))] })] })), !stripeAvailable && paymentMethods.length === 0 ? (_jsx("div", { className: "p-4 border rounded-lg bg-muted/30 text-center text-sm text-muted-foreground", children: t('checkout.noPaymentMethods') })) : selectedPaymentMethod?.provider === 'paypal' && selectedPaymentMethod.paypal ? (_jsx(PayPalCheckoutButtons, { clientId: selectedPaymentMethod.paypal.clientId, currency: resolvedCurrency, disabled: state.isProcessing || isCheckoutLoading, createOrder: handlePaypalCreateOrder, onApprove: handlePaypalApprove })) : (_jsx("button", { type: "button", onClick: handleCheckout, disabled: state.isProcessing || isCheckoutLoading, className: cn('w-full px-4 py-4 rounded-md font-medium text-lg', 'bg-primary text-primary-foreground', 'hover:bg-primary/90', 'transition-colors', 'disabled:opacity-50 disabled:cursor-not-allowed', 'flex items-center justify-center gap-2'), children: (state.isProcessing || isCheckoutLoading) ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-5 w-5 animate-spin" }), t('common.processing')] })) : (_jsxs(_Fragment, { children: [_jsx(CreditCard, { className: "h-5 w-5" }), selectedPaymentMethodId ? t('checkout.placeOrder') : t('checkout.proceedToPayment')] })) })), (stripeAvailable || paymentMethods.length > 0) && (_jsx("p", { className: "text-xs text-center text-muted-foreground", children: selectedPaymentMethod?.kind === 'external'
+                                            ? t('checkout.pspRedirectNote')
+                                            : selectedPaymentMethodId
+                                                ? t('checkout.manualConfirmNote')
+                                                : t('checkout.stripeRedirectNote') }))] }))] })) }), showOrderSummary && (_jsx("div", { className: "lg:col-span-1", children: _jsxs("div", { className: "sticky top-4 space-y-3", children: [_jsx(OrderSummary, { items: items.map((item) => ({
                                     productId: item.productId,
                                     variantId: item.variantId,
                                     name: item.name,