@tagadapay/headless-sdk 1.22.0 → 1.24.0

package/dist/tagada-headless.js

@@ -1,5 +1,5 @@
 /**
- * @tagadapay/headless-sdk v1.22.0
+ * @tagadapay/headless-sdk v1.24.0
  * Headless checkout, payments, offers, and CRM
  * @license MIT
  */
@@ -142,7 +142,7 @@ var TagadaHeadlessBundle = (() => {
 
   // src/core/version.ts
   var SDK_NAME = "headless";
-  var SDK_VERSION = "1.22.0";
+  var SDK_VERSION = "1.24.0";
 
   // src/core/http.ts
   var BASE_URLS = {
@@ -270,6 +270,86 @@ var TagadaHeadlessBundle = (() => {
     }
   }
 
+  // src/core/helpers/checkoutRisk.ts
+  var RISK_JS_SRC = {
+    live: "https://risk.checkout.com/cdn/risk/1/risk.js",
+    sandbox: "https://risk.sandbox.checkout.com/cdn/risk/1/risk.js"
+  };
+  var CHECKOUT_RISK_WAIT_MS = 1500;
+  var SLOT = "__tagadaCheckoutRisk";
+  var DEVICE_SESSION_ID = /^dsid_\w{26}$/;
+  var PUBLIC_KEY = /^pk_(sbox_)?[\w-]+$/;
+  function browserWindow() {
+    return typeof window === "undefined" || typeof document === "undefined" ? void 0 : window;
+  }
+  function publicKeyOf(config) {
+    const key = config && typeof config === "object" ? config.publicKey : void 0;
+    return typeof key === "string" && PUBLIC_KEY.test(key) ? key : void 0;
+  }
+  function loadRiskJs(win, src) {
+    if (win.Risk)
+      return Promise.resolve(win.Risk);
+    return new Promise((resolve, reject) => {
+      const settle = () => win.Risk ? resolve(win.Risk) : reject(new Error("Risk.js loaded without window.Risk"));
+      const fail = () => reject(new Error("Risk.js did not load"));
+      const existing = document.querySelector(`script[src="${src}"]`);
+      if (existing) {
+        existing.addEventListener("load", settle);
+        existing.addEventListener("error", fail);
+        return;
+      }
+      const script2 = document.createElement("script");
+      script2.src = src;
+      script2.async = true;
+      script2.addEventListener("load", settle);
+      script2.addEventListener("error", fail);
+      document.head.appendChild(script2);
+    });
+  }
+  async function collect(win, publicKey) {
+    const src = publicKey.startsWith("pk_sbox_") ? RISK_JS_SRC.sandbox : RISK_JS_SRC.live;
+    const Risk = await loadRiskJs(win, src);
+    const risk = Risk.init(publicKey);
+    const id = await (risk == null ? void 0 : risk.publishRiskData());
+    return typeof id === "string" && DEVICE_SESSION_ID.test(id) ? id : void 0;
+  }
+  function startCheckoutRisk(config) {
+    var _a;
+    try {
+      const win = browserWindow();
+      const publicKey = publicKeyOf(config);
+      if (!win || !publicKey || ((_a = win[SLOT]) == null ? void 0 : _a.publicKey) === publicKey)
+        return;
+      win[SLOT] = {
+        publicKey,
+        deviceSessionId: collect(win, publicKey).catch((error) => {
+          console.warn("[tagada] Checkout.com Risk.js skipped:", error instanceof Error ? error.message : error);
+          return void 0;
+        })
+      };
+    } catch {
+    }
+  }
+  async function checkoutRiskSessionId(waitMs = CHECKOUT_RISK_WAIT_MS) {
+    var _a, _b;
+    let timer;
+    try {
+      const pending = (_b = (_a = browserWindow()) == null ? void 0 : _a[SLOT]) == null ? void 0 : _b.deviceSessionId;
+      if (!pending)
+        return void 0;
+      const late = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(void 0), waitMs);
+      });
+      const id = await Promise.race([pending, late]);
+      return typeof id === "string" && DEVICE_SESSION_ID.test(id) ? id : void 0;
+    } catch {
+      return void 0;
+    } finally {
+      if (timer)
+        clearTimeout(timer);
+    }
+  }
+
   // src/core/modules/checkout.ts
   var CheckoutModule = class _CheckoutModule {
     constructor(http, storeId, onTokenChange, onSession) {
@@ -316,6 +396,7 @@ var TagadaHeadlessBundle = (() => {
           token: this.sessionToken
         }
       );
+      startCheckoutRisk(raw == null ? void 0 : raw.checkoutRisk);
       const session = this.normalizeSession(raw);
       this._currentSession = session;
       try {
@@ -805,7 +886,7 @@ var TagadaHeadlessBundle = (() => {
   }
 
   // src/core/modules/track.ts
-  var CDN_URL = false ? "" : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.22.0/dist/tagada-pixels.min.js";
+  var CDN_URL = false ? "" : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.24.0/dist/tagada-pixels.min.js";
   function loadScript(src, isReady) {
     if (isReady())
       return Promise.resolve();
@@ -837,6 +918,10 @@ var TagadaHeadlessBundle = (() => {
   var FLUSH_MS = 2e3;
   var DEDUP_MS = 1e3;
   var STEP_MEMORY = 64;
+  var VISITS_KEY = "__tgd_visits";
+  var VISIT_MEMORY = 20;
+  var LINK_MEMORY = 50;
+  var THANK_YOU = "thankyou";
   function toContents(items) {
     if (!Array.isArray(items) || items.length === 0)
       return void 0;
@@ -857,6 +942,25 @@ var TagadaHeadlessBundle = (() => {
     product_viewed: "ViewContent",
     added_to_cart: "AddToCart"
   };
+  function readVisits() {
+    try {
+      const parsed = JSON.parse(localStorage.getItem(VISITS_KEY) ?? "");
+      if (parsed && typeof parsed.links === "object" && Array.isArray(parsed.visits))
+        return parsed;
+    } catch {
+    }
+    return { links: {}, visits: [] };
+  }
+  function writeVisits(memory) {
+    const links = Object.entries(memory.links).slice(-LINK_MEMORY);
+    try {
+      localStorage.setItem(
+        VISITS_KEY,
+        JSON.stringify({ links: Object.fromEntries(links), visits: memory.visits.slice(-VISIT_MEMORY) })
+      );
+    } catch {
+    }
+  }
   function uuid() {
     try {
       return crypto.randomUUID();
@@ -934,6 +1038,11 @@ var TagadaHeadlessBundle = (() => {
       this.listen();
       this.push({ kind: "step", stepId, at, path });
       void this.pixels().then((engine) => engine == null ? void 0 : engine.pageView(path, { stepId }));
+      void this.config().then((config) => {
+        var _a, _b;
+        if (((_b = (_a = config == null ? void 0 : config.steps) == null ? void 0 : _a[stepId]) == null ? void 0 : _b.type) === THANK_YOU)
+          this.deliverVisits();
+      });
       void this.core().then((t) => t == null ? void 0 : t.page({ step_id: stepId })).catch(() => void 0);
     }
     event(name, data) {
@@ -989,9 +1098,60 @@ var TagadaHeadlessBundle = (() => {
     noteCheckout(input) {
       this.notePixel("InitiateCheckout", input.checkoutSessionId, input);
     }
-    /** @internal */
+    /** @internal An upsell order and the order it was bought on, known before its payment is confirmed. */
+    noteUpsell(orderId, parentOrderId) {
+      if (this.off())
+        return;
+      const memory = readVisits();
+      memory.links[orderId] = parentOrderId;
+      writeVisits(memory);
+    }
+    /**
+     * One Purchase per paid visit, as the hosted thank-you page sends it: the main order's id and
+     * the visit's total. A paid upsell only adds its amount to its visit. The Purchase leaves on the
+     * funnel's thank-you step, or at the main payment when the funnel declares none.
+     * @internal
+     */
     notePaid(input) {
-      this.notePixel("Purchase", input.orderId, input);
+      if (this.off())
+        return;
+      const memory = readVisits();
+      let root = input.orderId;
+      const seen = /* @__PURE__ */ new Set();
+      while (memory.links[root] !== void 0 && !seen.has(root)) {
+        seen.add(root);
+        root = memory.links[root];
+      }
+      const visit = memory.visits.find((known) => known.id === root);
+      if (root !== input.orderId) {
+        if (visit && !visit.delivered && !visit.expired && visit.currency === input.currency && input.amount !== void 0) {
+          visit.amount = (visit.amount ?? 0) + input.amount;
+          writeVisits(memory);
+        }
+        return;
+      }
+      if (visit)
+        return;
+      memory.visits.push({ id: input.orderId, amount: input.amount, currency: input.currency, items: input.items });
+      writeVisits(memory);
+      void this.config().then((config) => {
+        if (config && !Object.values(config.steps ?? {}).some((step) => step.type === THANK_YOU))
+          this.deliverVisits();
+      });
+    }
+    /** Only the current visit, the latest still open, leaves: an older one never reached its thank-you step. */
+    deliverVisits() {
+      const memory = readVisits();
+      const open = memory.visits.filter((visit) => !visit.delivered && !visit.expired);
+      const current = open[open.length - 1];
+      if (!current)
+        return;
+      for (const visit of open)
+        visit.expired = true;
+      delete current.expired;
+      current.delivered = true;
+      writeVisits(memory);
+      this.notePixel("Purchase", current.id, current);
     }
     /** The `eventId` formula is the server's `makeMetaEventId`, so Meta and TikTok dedup. */
     notePixel(event, id, input) {
@@ -1002,7 +1162,13 @@ var TagadaHeadlessBundle = (() => {
           var _a;
           return engine == null ? void 0 : engine.track(
             event,
-            { value: input.amount, currency: input.currency, contents: input.items, num_items: (_a = input.items) == null ? void 0 : _a.length },
+            {
+              value: input.amount,
+              currency: input.currency,
+              contents: input.items,
+              num_items: (_a = input.items) == null ? void 0 : _a.length,
+              ...event === "Purchase" ? { transaction_id: id } : {}
+            },
             { eventId: `${event}_${id}` }
           );
         }
@@ -1588,6 +1754,10 @@ var TagadaHeadlessBundle = (() => {
     }
     return import("../helpers/paymentsApi.js");
   }
+  async function checkoutRiskBody() {
+    const id = await checkoutRiskSessionId();
+    return id ? { checkoutRiskSessionId: id } : {};
+  }
   var FAILED_PAYMENT_STATUSES = /* @__PURE__ */ new Set(["failed", "declined", "rejected", "error"]);
   var oceanSlot = null;
   var oceanSlotTaken = () => !!oceanSlot && (!oceanSlot.attached || oceanSlot.element.isConnected);
@@ -1843,6 +2013,7 @@ var TagadaHeadlessBundle = (() => {
      * Also accepts `paymentInstrumentId` directly for pre-created instruments.
      */
     async pay(opts) {
+      const risk = await checkoutRiskBody();
       if (opts.tagadaToken && !opts.paymentInstrumentId) {
         return this.rememberPaymentsApiStart(await this.http.post("/api/v1/payment/pay-with-token", {
           tagadaToken: opts.tagadaToken,
@@ -1852,7 +2023,8 @@ var TagadaHeadlessBundle = (() => {
           processorId: opts.processorId,
           paymentMethod: opts.paymentMethod,
           isExpress: opts.isExpress,
-          metadata: opts.metadata
+          metadata: opts.metadata,
+          ...risk
         }), opts);
       }
       return this.rememberPaymentsApiStart(await this.http.post("/api/public/v1/checkout/pay-v2", {
@@ -1865,7 +2037,8 @@ var TagadaHeadlessBundle = (() => {
         paymentMethod: opts.paymentMethod,
         isExpress: opts.isExpress,
         metadata: opts.metadata,
-        returnUrl: opts.returnUrl
+        returnUrl: opts.returnUrl,
+        ...risk
       }), opts);
     }
     /**
@@ -1873,6 +2046,7 @@ var TagadaHeadlessBundle = (() => {
      * where no instrument is needed (redirect-based methods).
      */
     async payDirect(opts) {
+      const risk = await checkoutRiskBody();
       return this.rememberPaymentsApiStart(await this.http.post("/api/public/v1/checkout/pay-v2", {
         checkoutSessionId: opts.checkoutSessionId,
         paymentInstrumentId: opts.paymentInstrumentId ?? "",
@@ -1882,7 +2056,8 @@ var TagadaHeadlessBundle = (() => {
         paymentMethod: opts.paymentMethod,
         isExpress: opts.isExpress,
         threedsSessionId: opts.threedsSessionId,
-        returnUrl: opts.returnUrl
+        returnUrl: opts.returnUrl,
+        ...risk
       }), opts);
     }
     /**
@@ -2796,7 +2971,7 @@ var TagadaHeadlessBundle = (() => {
 
   // src/core/modules/lazyCommerce.ts
   var script = typeof document === "undefined" ? null : document.currentScript;
-  var url = (script == null ? void 0 : script.src) ? new URL("tagada-headless-commerce.min.js", script.src).href : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.22.0/dist/tagada-headless-commerce.min.js";
+  var url = (script == null ? void 0 : script.src) ? new URL("tagada-headless-commerce.min.js", script.src).href : "https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk@1.24.0/dist/tagada-headless-commerce.min.js";
   var loading;
   function loadCommerce() {
     if (window.TagadaHeadlessCommerce)
@@ -3331,7 +3506,12 @@ var TagadaHeadlessBundle = (() => {
         (p) => this.track.notePaid(p),
         (v, d) => this.track.noteSignal("wallet_unavailable", v, d)
       );
-      this.offers = new OffersModule(this.http, this.config.storeId, this.payment);
+      this.offers = new OffersModule(
+        this.http,
+        this.config.storeId,
+        this.payment,
+        (orderId, parentOrderId) => this.track.noteUpsell(orderId, parentOrderId)
+      );
       this.customer = new CustomerModule(this.http, this.config.storeId);
       this.portal = new CustomerPortalModule(this.http, this.config.storeId, setToken);
       this.catalog = new CatalogModule(this.http, this.config.storeId);