@tagadapay/headless-sdk 1.20.1 → 1.22.0

package/dist/tagada-headless.js

@@ -1,5 +1,5 @@
 /**
- * @tagadapay/headless-sdk v1.20.1
+ * @tagadapay/headless-sdk v1.22.0
  * Headless checkout, payments, offers, and CRM
  * @license MIT
  */
@@ -142,7 +142,7 @@ var TagadaHeadlessBundle = (() => {
 
   // src/core/version.ts
   var SDK_NAME = "headless";
-  var SDK_VERSION = "1.20.1";
+  var SDK_VERSION = "1.22.0";
 
   // src/core/http.ts
   var BASE_URLS = {
@@ -724,7 +724,8 @@ var TagadaHeadlessBundle = (() => {
         shippingAddress: this.normalizeAddress(cs.shippingAddress),
         billingAddress: this.normalizeAddress(cs.billingAddress),
         selectedShippingRateId: cs.shippingRateId ?? null,
-        metadata: cs.metadata
+        metadata: cs.metadata,
+        ...typeof cs.draft === "boolean" ? { draft: cs.draft } : {}
       };
     }
     /**
@@ -804,7 +805,7 @@ var TagadaHeadlessBundle = (() => {
   }
 
   // src/core/modules/track.ts
-  var CDN_URL = false ? "" : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.20.1/dist/tagada-pixels.min.js";
+  var CDN_URL = false ? "" : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.22.0/dist/tagada-pixels.min.js";
   function loadScript(src, isReady) {
     if (isReady())
       return Promise.resolve();
@@ -1430,6 +1431,71 @@ var TagadaHeadlessBundle = (() => {
     return error instanceof Error && error.message ? error.message : UNAVAILABLE;
   }
 
+  // src/core/helpers/paymentsApiAnswer.ts
+  function readStartedPayment(answer) {
+    if (!answer || typeof answer !== "object" || Array.isArray(answer))
+      return null;
+    const { payment, order, paymentId, clientSecret, amount, currency, checkoutSessionId, radar } = answer;
+    if (payment !== void 0 || order !== void 0)
+      return null;
+    if (typeof paymentId !== "string" || !paymentId || typeof clientSecret !== "string" || !clientSecret)
+      return null;
+    return {
+      paymentId,
+      clientSecret,
+      ...typeof amount === "number" ? { amount } : {},
+      ...typeof currency === "string" ? { currency } : {},
+      ...typeof checkoutSessionId === "string" ? { checkoutSessionId } : {},
+      ...radarKey(radar) ? { radar: { publishableKey: radarKey(radar) } } : {}
+    };
+  }
+  function radarKey(radar) {
+    const key = radar && typeof radar === "object" ? radar.publishableKey : null;
+    return typeof key === "string" && key.startsWith("pk_") ? key : null;
+  }
+  var PENDING_KEY = "tgd_payments_api_return";
+  var PENDING_TTL_MS = 60 * 6e4;
+  function takeParkedPaymentsApiReturn(paymentId) {
+    try {
+      const raw = sessionStorage.getItem(PENDING_KEY);
+      if (!raw)
+        return null;
+      const parked = JSON.parse(raw);
+      if (parked.paymentId !== paymentId)
+        return null;
+      sessionStorage.removeItem(PENDING_KEY);
+      if (!parked.checkoutSessionId || !parked.at || Date.now() - parked.at > PENDING_TTL_MS)
+        return null;
+      return { checkoutSessionId: parked.checkoutSessionId };
+    } catch {
+      return null;
+    }
+  }
+
+  // src/core/helpers/stripeJs.ts
+  function loadStripeJs() {
+    if (typeof window === "undefined")
+      return Promise.reject(new Error("Stripe Radar needs a browser"));
+    const fromPage = () => window.Stripe;
+    const loaded = fromPage();
+    if (loaded)
+      return Promise.resolve(loaded);
+    return new Promise((resolve, reject) => {
+      const script2 = document.createElement("script");
+      script2.src = "https://js.stripe.com/v3/";
+      script2.async = true;
+      script2.onload = () => {
+        const stripe = fromPage();
+        if (stripe)
+          resolve(stripe);
+        else
+          reject(new Error("Stripe.js loaded without window.Stripe"));
+      };
+      script2.onerror = () => reject(new Error("Failed to load Stripe.js"));
+      document.head.appendChild(script2);
+    });
+  }
+
   // src/core/helpers/oceanpayment.ts
   var OCEAN_SDK_URL = "https://secure.oceanpayment.com/pages/js/oceanpayment.js";
   var OCEAN_CONTAINER_ID = "oceanpayment-element";
@@ -1512,6 +1578,16 @@ var TagadaHeadlessBundle = (() => {
   }
 
   // src/core/modules/payment.ts
+  function loadPaymentsApiFlow() {
+    if (true) {
+      return Promise.reject(
+        new Error(
+          "This store takes payments through the Payments API, which the CDN build does not support yet: install @tagadapay/headless-sdk and @tagadapay/core-js 3.7.0 or later from npm."
+        )
+      );
+    }
+    return import("../helpers/paymentsApi.js");
+  }
   var FAILED_PAYMENT_STATUSES = /* @__PURE__ */ new Set(["failed", "declined", "rejected", "error"]);
   var oceanSlot = null;
   var oceanSlotTaken = () => !!oceanSlot && (!oceanSlot.attached || oceanSlot.element.isConnected);
@@ -1539,28 +1615,6 @@ var TagadaHeadlessBundle = (() => {
       metadata: entry.metadata ?? void 0
     };
   }
-  function loadStripeJs() {
-    if (typeof window === "undefined")
-      return Promise.reject(new Error("Stripe Radar needs a browser"));
-    const fromPage = () => window.Stripe;
-    const loaded = fromPage();
-    if (loaded)
-      return Promise.resolve(loaded);
-    return new Promise((resolve, reject) => {
-      const script2 = document.createElement("script");
-      script2.src = "https://js.stripe.com/v3/";
-      script2.async = true;
-      script2.onload = () => {
-        const stripe = fromPage();
-        if (stripe)
-          resolve(stripe);
-        else
-          reject(new Error("Stripe.js loaded without window.Stripe"));
-      };
-      script2.onerror = () => reject(new Error("Failed to load Stripe.js"));
-      document.head.appendChild(script2);
-    });
-  }
   var PaymentModule = class {
     constructor(http, storeId, environment, checkout, onPaid, onSignal) {
       this.http = http;
@@ -1575,6 +1629,11 @@ var TagadaHeadlessBundle = (() => {
        * without a second network round-trip inside Apple's authorization window.
        */
       this.lastPaymentSetup = null;
+      /**
+       * Payments API (V3) store: what the pay call knew about each payment it started (the session it
+       * pays, the shopper's method), so `finalize()` can confirm it from the bare pay answer.
+       */
+      this.paymentsApiStarts = /* @__PURE__ */ new Map();
     }
     // ---------------------------------------------------------------------------
     // Discovery: what payment methods are available?
@@ -1785,7 +1844,7 @@ var TagadaHeadlessBundle = (() => {
      */
     async pay(opts) {
       if (opts.tagadaToken && !opts.paymentInstrumentId) {
-        return this.http.post("/api/v1/payment/pay-with-token", {
+        return this.rememberPaymentsApiStart(await this.http.post("/api/v1/payment/pay-with-token", {
           tagadaToken: opts.tagadaToken,
           checkoutSessionId: opts.checkoutSessionId,
           returnUrl: opts.returnUrl,
@@ -1794,9 +1853,9 @@ var TagadaHeadlessBundle = (() => {
           paymentMethod: opts.paymentMethod,
           isExpress: opts.isExpress,
           metadata: opts.metadata
-        });
+        }), opts);
       }
-      return this.http.post("/api/public/v1/checkout/pay-v2", {
+      return this.rememberPaymentsApiStart(await this.http.post("/api/public/v1/checkout/pay-v2", {
         checkoutSessionId: opts.checkoutSessionId,
         paymentInstrumentId: opts.paymentInstrumentId,
         storeId: this.storeId,
@@ -1807,14 +1866,14 @@ var TagadaHeadlessBundle = (() => {
         isExpress: opts.isExpress,
         metadata: opts.metadata,
         returnUrl: opts.returnUrl
-      });
+      }), opts);
     }
     /**
      * Low-level pay: process payment with an existing instrument or for APM/express flows
      * where no instrument is needed (redirect-based methods).
      */
     async payDirect(opts) {
-      return this.http.post("/api/public/v1/checkout/pay-v2", {
+      return this.rememberPaymentsApiStart(await this.http.post("/api/public/v1/checkout/pay-v2", {
         checkoutSessionId: opts.checkoutSessionId,
         paymentInstrumentId: opts.paymentInstrumentId ?? "",
         storeId: this.storeId,
@@ -1824,7 +1883,7 @@ var TagadaHeadlessBundle = (() => {
         isExpress: opts.isExpress,
         threedsSessionId: opts.threedsSessionId,
         returnUrl: opts.returnUrl
-      });
+      }), opts);
     }
     /**
      * Persist a wallet contact onto the session before the charge.
@@ -2001,13 +2060,18 @@ var TagadaHeadlessBundle = (() => {
     /**
      * Process an APM payment (Klarna, iDEAL, etc.) via redirect.
      * These typically don't require a payment instrument -- the processor handles the redirect.
+     *
+     * `returnUrl` is the page that runs `maybeResumeFromUrl()` after the redirect. It defaults to the
+     * current page, like `processPayment()`. pay-v2 still prefers the session's checkout page when it
+     * has a live one, so this applies to headless pages. Pass the same value to `finalize()`.
      */
     async processApm(opts) {
       return this.payDirect({
         checkoutSessionId: opts.checkoutSessionId,
         paymentMethod: opts.paymentMethod,
         processorId: opts.processorId,
-        paymentFlowId: opts.paymentFlowId
+        paymentFlowId: opts.paymentFlowId,
+        returnUrl: opts.returnUrl ?? (typeof window !== "undefined" ? window.location.href : void 0)
       });
     }
     /**
@@ -2307,6 +2371,11 @@ var TagadaHeadlessBundle = (() => {
       var _a, _b, _c;
       const payment = input.payment;
       const returnUrl = (opts == null ? void 0 : opts.returnUrl) ?? (typeof window !== "undefined" ? window.location.href : void 0);
+      if (!payment) {
+        const started = readStartedPayment(input);
+        if (started)
+          return this.finalizeOnPaymentsApi(started, returnUrl);
+      }
       if (payment.status === "succeeded") {
         this.emitPaid((_a = input.order) == null ? void 0 : _a.id, payment);
         return { status: "succeeded", payment, order: input.order };
@@ -2327,6 +2396,11 @@ var TagadaHeadlessBundle = (() => {
      * You can also call it manually in non-React apps.
      */
     async resumeAfterRedirect(paymentId) {
+      const parked = takeParkedPaymentsApiReturn(paymentId);
+      if (parked) {
+        const url2 = typeof window !== "undefined" ? window.location.href : void 0;
+        return this.onPaymentsApi((flow, host) => flow.resumeOnPaymentsApi(host, paymentId, parked.checkoutSessionId, url2));
+      }
       return this.pollUntilDone(paymentId);
     }
     /**
@@ -2616,6 +2690,48 @@ var TagadaHeadlessBundle = (() => {
       return { status: "pending", paymentId };
     }
     // ---------------------------------------------------------------------------
+    // Internal: Payments API (V3) stores
+    // ---------------------------------------------------------------------------
+    /** Keeps what a V3 pay answer does not say (its session, the method); returns the answer as is. */
+    rememberPaymentsApiStart(answer, opts) {
+      const started = answer && !answer.payment ? readStartedPayment(answer) : null;
+      if (started) {
+        this.paymentsApiStarts.set(started.paymentId, {
+          checkoutSessionId: started.checkoutSessionId ?? opts.checkoutSessionId,
+          ...opts.paymentMethod ? { paymentMethod: opts.paymentMethod } : {}
+        });
+      }
+      return answer;
+    }
+    /** Confirms a started V3 payment with payments-js and runs it to the V2-shaped result. */
+    finalizeOnPaymentsApi(started, returnUrl) {
+      const known = this.paymentsApiStarts.get(started.paymentId);
+      this.paymentsApiStarts.delete(started.paymentId);
+      return this.onPaymentsApi(
+        (flow, host) => flow.finalizeOnPaymentsApi(host, started, {
+          checkoutSessionId: known == null ? void 0 : known.checkoutSessionId,
+          paymentMethod: known == null ? void 0 : known.paymentMethod,
+          returnUrl
+        })
+      );
+    }
+    /** Runs `run` with the lazily imported V3 flow; a flow that cannot load is a failed payment. */
+    async onPaymentsApi(run) {
+      let flow;
+      try {
+        flow = await loadPaymentsApiFlow();
+      } catch (error) {
+        return { status: "failed", error: error instanceof Error ? error.message : String(error) };
+      }
+      return run(flow, {
+        http: this.http,
+        storeId: this.storeId,
+        checkout: this.checkout,
+        stepConfig: this.readInjectedStepConfigRaw(),
+        onPaid: (orderId, payment) => this.emitPaid(orderId, payment)
+      });
+    }
+    // ---------------------------------------------------------------------------
     // Internal helpers
     // ---------------------------------------------------------------------------
     /**
@@ -2635,6 +2751,19 @@ var TagadaHeadlessBundle = (() => {
         return null;
       }
     }
+    /** The whole injected step config (Tagada-hosted pages), or null. */
+    readInjectedStepConfigRaw() {
+      if (typeof window === "undefined")
+        return null;
+      const raw = window.__TGD_STEP_CONFIG__;
+      if (!raw)
+        return null;
+      try {
+        return typeof raw === "string" ? JSON.parse(raw) : raw;
+      } catch {
+        return null;
+      }
+    }
     /** Tracking hook. Never throws, never awaits: a pixel must not be able to break a payment. */
     emitPaid(orderId, payment) {
       var _a;
@@ -2667,7 +2796,7 @@ var TagadaHeadlessBundle = (() => {
 
   // src/core/modules/lazyCommerce.ts
   var script = typeof document === "undefined" ? null : document.currentScript;
-  var url = (script == null ? void 0 : script.src) ? new URL("tagada-headless-commerce.min.js", script.src).href : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.20.1/dist/tagada-headless-commerce.min.js";
+  var url = (script == null ? void 0 : script.src) ? new URL("tagada-headless-commerce.min.js", script.src).href : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.22.0/dist/tagada-headless-commerce.min.js";
   var loading;
   function loadCommerce() {
     if (window.TagadaHeadlessCommerce)