@tagadapay/headless-sdk 1.9.0 → 1.12.0

package/README.md

@@ -1,216 +1,220 @@
-# @tagadapay/headless-sdk
-
-Use TagadaPay as a **headless checkout and CRM backend** from any website — React, Vue, vanilla JS, or plain HTML. Zero runtime dependencies in core.
-
-## Install
-
-```bash
-npm install @tagadapay/headless-sdk
-# Optional: for card tokenization
-npm install @tagadapay/core-js
-```
-
-## Quick Start (Vanilla JS)
-
-```typescript
-import { createHeadlessClient } from '@tagadapay/headless-sdk';
-
-const tagada = createHeadlessClient({
-  storeId: 'store_abc123',
-  environment: 'production',
-});
-
-// Load checkout session
-const session = await tagada.checkout.loadSession(checkoutToken, sessionToken);
-
-// Set customer info (stored in memory, sent with address)
-await tagada.checkout.updateCustomer(session.id, {
-  email: 'john@example.com',
-  firstName: 'John',
-  lastName: 'Doe',
-});
-
-// Set address — customer fields are included automatically
-await tagada.checkout.updateAddress(session.id, {
-  shippingAddress: { line1: '10 Rue de la Paix', city: 'Paris', postalCode: '75002', country: 'FR' },
-});
-
-// Tokenize card + pay with automatic 3DS / redirect handling
-const { tagadaToken } = await tagada.payment.tokenizeCard({
-  cardNumber: '4242424242424242',
-  expiryDate: '12/28',
-  cvc: '123',
-});
-
-const result = await tagada.payment.processPayment({
-  checkoutSessionId: session.id,
-  tagadaToken,
-});
-
-if (result.status === 'succeeded') {
-  console.log('Payment succeeded!', result.order);
-} else if (result.status === 'requires_redirect') {
-  // SDK handles this automatically in React; in vanilla JS, redirect manually:
-  window.location.href = result.redirectUrl;
-} else if (result.status === 'failed') {
-  console.error(result.error);
-}
-```
-
-## Quick Start (React)
-
-```tsx
-import { TagadaHeadlessProvider, useCheckout, usePayment } from '@tagadapay/headless-sdk/react';
-
-function App() {
-  return (
-    <TagadaHeadlessProvider storeId="store_abc123" environment="production">
-      <CheckoutPage />
-    </TagadaHeadlessProvider>
-  );
-}
-
-function CheckoutPage() {
-  const { session, updateCustomer, updateAddress } = useCheckout(checkoutToken, sessionToken);
-  const { processPayment, isProcessing, tokenizeCard } = usePayment({
-    onPaymentSuccess: (result) => router.push('/thank-you'),
-    onPaymentFailed: (result) => alert(result.error),
-  });
-
-  const handlePay = async () => {
-    // Customer + address (single atomic API call under the hood)
-    await updateCustomer({ email, firstName, lastName });
-    await updateAddress({ shippingAddress: { line1, city, postalCode, country } });
-
-    // Tokenize + pay — 3DS redirects and polling are handled automatically
-    const { tagadaToken } = await tokenizeCard({ cardNumber, expiryDate, cvc });
-    await processPayment({ checkoutSessionId: session.id, tagadaToken });
-    // onPaymentSuccess / onPaymentFailed callbacks fire automatically
-  };
-
-  return <button onClick={handlePay} disabled={isProcessing}>Pay Now</button>;
-}
-```
-
-## Payment Flow
-
-`processPayment()` handles the full payment lifecycle automatically:
-
-1. **Tokenize** → creates a payment instrument from the card
-2. **Pay** → submits payment to the processor
-3. **3DS / Redirect** → if the bank requires authentication, the SDK redirects the user and resumes automatically on return
-4. **Poll** → waits for async processing to complete
-5. **Result** → returns a typed `ProcessPaymentResult`
-
-The return type is a discriminated union:
-
-| Status | Meaning |
-|--------|---------|
-| `succeeded` | Payment confirmed. Show success screen. |
-| `requires_redirect` | User must visit a URL (3DS, bank auth). Auto-handled in React. |
-| `failed` | Payment declined or errored. `result.error` has details. |
-| `pending` | Still processing (rare — polling timed out). |
-
-## Address Handling
-
-The SDK handles both **shipped** and **digital** products:
-
-```typescript
-// Shipped product — billing defaults to shipping
-await tagada.checkout.updateAddress(sessionId, {
-  shippingAddress: { line1: '...', city: '...', country: 'FR' },
-});
-
-// Digital product — billing only, no shipping needed
-await tagada.checkout.updateAddress(sessionId, {
-  billingAddress: { country: 'FR' },
-});
-
-// Separate billing and shipping
-await tagada.checkout.updateAddress(sessionId, {
-  shippingAddress: { line1: '...', city: '...', country: 'FR' },
-  billingAddress: { line1: '...', city: '...', country: 'DE' },
-});
-
-// Or use the combined method
-await tagada.checkout.updateCustomerAndAddress(sessionId, {
-  customer: { email: 'john@example.com', firstName: 'John', lastName: 'Doe' },
-  shippingAddress: { line1: '...', city: '...', country: 'FR' },
-});
-```
-
-## Funnel Navigation
-
-Send a shopper into a TagadaPay funnel using the cart from the loaded checkout
-session — same flow as the WooCommerce / Shopify plugins, in one call.
-
-```typescript
-const tagada = createHeadlessClient({
-  storeId: 'store_abc123',
-  accountId: 'acc_abc123', // required for funnel.navigate()
-  environment: 'production',
-});
-
-// Load (or create) a checkout session so the SDK has a cart.
-await tagada.checkout.loadSession(checkoutToken, sessionToken);
-
-// Get a funnel URL — caller decides how to redirect (SPA-friendly).
-const { url } = await tagada.funnel.navigate({
-  funnelId: 'fnlv2_abc123',
-  stepId:   'step_abc123',
-  returnUrl: 'https://merchant.com/thank-you',
-});
-
-window.location.assign(url);
-```
-
-`funnel.navigate()` bootstraps an anonymous CMS session on first call and
-caches it for subsequent calls in the same page. The cart, currency, customer
-email, and promotion code are sourced from the loaded `CheckoutSession`.
-
-## Modules
-
-| Module | What it does |
-|--------|-------------|
-| `tagada.checkout` | Session management — load, update cart, promo codes, shipping |
-| `tagada.payment` | Full payment lifecycle — APMs, tokenize, 3DS, pay, poll, express checkout |
-| `tagada.offers` | Upsells & order bumps — preview, pay, post-purchase accept/decline |
-| `tagada.customer` | CRM data — profile, orders, subscriptions |
-| `tagada.catalog` | Product browsing — list products, variants, prices |
-| `tagada.funnel` | Funnel navigation — bootstrap session and redirect into a funnel step |
-
-## CDN Usage
-
-```html
-<script src="https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk/dist/tagada-headless.min.js"></script>
-<script>
-  const tagada = TagadaHeadless.create({ storeId: 'store_abc123' });
-</script>
-```
-
-## Example
-
-A complete React checkout app is available as a live demo and open-source reference:
-
-- **Live demo**: [headless-react-eta.vercel.app](https://headless-react-eta.vercel.app)
-- **Source code**: [github.com/TagadaPay/examples/tree/main/headless-react](https://github.com/TagadaPay/examples/tree/main/headless-react)
-
-## Architecture
-
-- **Zero dependencies** in core — native `fetch`, no axios
-- **Tree-shakeable ESM** — unused modules are eliminated by bundlers
-- **Framework-agnostic core** + thin React hooks layer
-- **TypeScript first** — full type coverage, JSDoc on every method
-- **Optional `@tagadapay/core-js`** peer — only needed for client-side card tokenization
-- **Automatic 3DS** — handles redirects, iframe challenges, and polling out of the box
-
-## Package Exports
-
-| Import path | What you get |
-|------------|--------------|
-| `@tagadapay/headless-sdk` | Core client + all modules |
-| `@tagadapay/headless-sdk/react` | React hooks + provider |
-
-## License
-
-MIT
+# @tagadapay/headless-sdk
+
+Use TagadaPay as a **headless checkout and CRM backend** from any website — React, Vue, vanilla JS, or plain HTML. Zero runtime dependencies in core.
+
+This package is for when **TagadaPay manages the cart**. If you already have the order (Medusa, WooCommerce, a custom order API), do not use this SDK — tokenize with `@tagadapay/core-js` and charge with Node `payments.process()`. See [Choose how you accept payments](https://docs.tagada.io/developer-tools/payments/choose-your-integration). Canonical example: [headless-vanilla](https://github.com/TagadaPay/examples/tree/main/headless-vanilla).
+
+`processPayment()` pays a checkout **session**. Server `payments.process()` charges a vaulted **instrument**. They are not the same call.
+
+## Install
+
+```bash
+npm install @tagadapay/headless-sdk
+# Optional: for card tokenization
+npm install @tagadapay/core-js
+```
+
+## Quick Start (Vanilla JS)
+
+```typescript
+import { createHeadlessClient } from '@tagadapay/headless-sdk';
+
+const tagada = createHeadlessClient({
+  storeId: 'store_abc123',
+  environment: 'production',
+});
+
+// Load checkout session
+const session = await tagada.checkout.loadSession(checkoutToken, sessionToken);
+
+// Set customer info (stored in memory, sent with address)
+await tagada.checkout.updateCustomer(session.id, {
+  email: 'john@example.com',
+  firstName: 'John',
+  lastName: 'Doe',
+});
+
+// Set address — customer fields are included automatically
+await tagada.checkout.updateAddress(session.id, {
+  shippingAddress: { line1: '10 Rue de la Paix', city: 'Paris', postalCode: '75002', country: 'FR' },
+});
+
+// Tokenize card + pay with automatic 3DS / redirect handling
+const { tagadaToken } = await tagada.payment.tokenizeCard({
+  cardNumber: '4242424242424242',
+  expiryDate: '12/28',
+  cvc: '123',
+});
+
+const result = await tagada.payment.processPayment({
+  checkoutSessionId: session.id,
+  tagadaToken,
+});
+
+if (result.status === 'succeeded') {
+  console.log('Payment succeeded!', result.order);
+} else if (result.status === 'requires_redirect') {
+  // SDK handles this automatically in React; in vanilla JS, redirect manually:
+  window.location.href = result.redirectUrl;
+} else if (result.status === 'failed') {
+  console.error(result.error);
+}
+```
+
+## Quick Start (React)
+
+```tsx
+import { TagadaHeadlessProvider, useCheckout, usePayment } from '@tagadapay/headless-sdk/react';
+
+function App() {
+  return (
+    <TagadaHeadlessProvider storeId="store_abc123" environment="production">
+      <CheckoutPage />
+    </TagadaHeadlessProvider>
+  );
+}
+
+function CheckoutPage() {
+  const { session, updateCustomer, updateAddress } = useCheckout(checkoutToken, sessionToken);
+  const { processPayment, isProcessing, tokenizeCard } = usePayment({
+    onPaymentSuccess: (result) => router.push('/thank-you'),
+    onPaymentFailed: (result) => alert(result.error),
+  });
+
+  const handlePay = async () => {
+    // Customer + address (single atomic API call under the hood)
+    await updateCustomer({ email, firstName, lastName });
+    await updateAddress({ shippingAddress: { line1, city, postalCode, country } });
+
+    // Tokenize + pay — 3DS redirects and polling are handled automatically
+    const { tagadaToken } = await tokenizeCard({ cardNumber, expiryDate, cvc });
+    await processPayment({ checkoutSessionId: session.id, tagadaToken });
+    // onPaymentSuccess / onPaymentFailed callbacks fire automatically
+  };
+
+  return <button onClick={handlePay} disabled={isProcessing}>Pay Now</button>;
+}
+```
+
+## Payment Flow
+
+`processPayment()` handles the full payment lifecycle automatically:
+
+1. **Tokenize** → creates a payment instrument from the card
+2. **Pay** → submits payment to the processor
+3. **3DS / Redirect** → if the bank requires authentication, the SDK redirects the user and resumes automatically on return
+4. **Poll** → waits for async processing to complete
+5. **Result** → returns a typed `ProcessPaymentResult`
+
+The return type is a discriminated union:
+
+| Status | Meaning |
+|--------|---------|
+| `succeeded` | Payment confirmed. Show success screen. |
+| `requires_redirect` | User must visit a URL (3DS, bank auth). Auto-handled in React. |
+| `failed` | Payment declined or errored. `result.error` has details. |
+| `pending` | Still processing (rare — polling timed out). |
+
+## Address Handling
+
+The SDK handles both **shipped** and **digital** products:
+
+```typescript
+// Shipped product — billing defaults to shipping
+await tagada.checkout.updateAddress(sessionId, {
+  shippingAddress: { line1: '...', city: '...', country: 'FR' },
+});
+
+// Digital product — billing only, no shipping needed
+await tagada.checkout.updateAddress(sessionId, {
+  billingAddress: { country: 'FR' },
+});
+
+// Separate billing and shipping
+await tagada.checkout.updateAddress(sessionId, {
+  shippingAddress: { line1: '...', city: '...', country: 'FR' },
+  billingAddress: { line1: '...', city: '...', country: 'DE' },
+});
+
+// Or use the combined method
+await tagada.checkout.updateCustomerAndAddress(sessionId, {
+  customer: { email: 'john@example.com', firstName: 'John', lastName: 'Doe' },
+  shippingAddress: { line1: '...', city: '...', country: 'FR' },
+});
+```
+
+## Funnel Navigation
+
+Send a shopper into a TagadaPay funnel using the cart from the loaded checkout
+session — same flow as the WooCommerce / Shopify plugins, in one call.
+
+```typescript
+const tagada = createHeadlessClient({
+  storeId: 'store_abc123',
+  accountId: 'acc_abc123', // required for funnel.navigate()
+  environment: 'production',
+});
+
+// Load (or create) a checkout session so the SDK has a cart.
+await tagada.checkout.loadSession(checkoutToken, sessionToken);
+
+// Get a funnel URL — caller decides how to redirect (SPA-friendly).
+const { url } = await tagada.funnel.navigate({
+  funnelId: 'fnlv2_abc123',
+  stepId:   'step_abc123',
+  returnUrl: 'https://merchant.com/thank-you',
+});
+
+window.location.assign(url);
+```
+
+`funnel.navigate()` bootstraps an anonymous CMS session on first call and
+caches it for subsequent calls in the same page. The cart, currency, customer
+email, and promotion code are sourced from the loaded `CheckoutSession`.
+
+## Modules
+
+| Module | What it does |
+|--------|-------------|
+| `tagada.checkout` | Session management — load, update cart, promo codes, shipping |
+| `tagada.payment` | Full payment lifecycle — APMs, tokenize, 3DS, pay, poll, express checkout |
+| `tagada.offers` | Upsells & order bumps — preview, pay, post-purchase accept/decline |
+| `tagada.customer` | CRM data — profile, orders, subscriptions |
+| `tagada.catalog` | Product browsing — list products, variants, prices |
+| `tagada.funnel` | Funnel navigation — bootstrap session and redirect into a funnel step |
+
+## CDN Usage
+
+```html
+<script src="https://cdn.jsdelivr.net/npm/@tagadapay/headless-sdk/dist/tagada-headless.min.js"></script>
+<script>
+  const tagada = TagadaHeadless.create({ storeId: 'store_abc123' });
+</script>
+```
+
+## Example
+
+A complete React checkout app is available as a live demo and open-source reference:
+
+- **Live demo**: [headless-react-eta.vercel.app](https://headless-react-eta.vercel.app)
+- **Source code**: [github.com/TagadaPay/examples/tree/main/headless-react](https://github.com/TagadaPay/examples/tree/main/headless-react)
+
+## Architecture
+
+- **Zero dependencies** in core — native `fetch`, no axios
+- **Tree-shakeable ESM** — unused modules are eliminated by bundlers
+- **Framework-agnostic core** + thin React hooks layer
+- **TypeScript first** — full type coverage, JSDoc on every method
+- **Optional `@tagadapay/core-js`** peer — only needed for client-side card tokenization
+- **Automatic 3DS** — handles redirects, iframe challenges, and polling out of the box
+
+## Package Exports
+
+| Import path | What you get |
+|------------|--------------|
+| `@tagadapay/headless-sdk` | Core client + all modules |
+| `@tagadapay/headless-sdk/react` | React hooks + provider |
+
+## License
+
+MIT

package/dist/core/modules/payment.d.ts

@@ -30,6 +30,12 @@ export declare class PaymentModule {
     private readonly environment;
     /** Used to persist wallet contacts onto the session before charging. */
     private readonly checkout?;
+    /**
+     * Last payment setup seen by `getPaymentSetup` — lets `processApplePay`
+     * resolve the domain's Apple Pay registration (BYOK / platform-integrator)
+     * without a second network round-trip inside Apple's authorization window.
+     */
+    private lastPaymentSetup;
     constructor(http: HttpClient, storeId: string, environment: Environment, 
     /** Used to persist wallet contacts onto the session before charging. */
     checkout?: CheckoutModule | undefined);
@@ -167,7 +173,36 @@ export declare class PaymentModule {
         shippingContact?: ApplePayContact | null;
         paymentFlowId?: string;
         processorId?: string;
+        /**
+         * Basis Theory Apple Pay registration the checkout domain is bound to.
+         * Required when the domain runs merchant-scoped Apple Pay — BYOK or the
+         * platform-integrator (PPIID) system — because Apple encrypts the token
+         * to that registration's certificate. Resolved automatically from the
+         * payment setup (`applePayByok` domain map) when omitted; pass it only to
+         * override that resolution.
+         */
+        merchantRegistrationId?: string;
     }): Promise<PayResult>;
+    /**
+     * Resolve the Apple Pay registration binding for the domain the page is
+     * served from. Both merchant-certificate (BYOK) and platform-integrator
+     * (PPIID) Apple Pay attach a domain-keyed `applePayByok` map to the
+     * `apple_pay` method's metadata; a hit means every Basis Theory call —
+     * merchant session AND tokenization — must carry that
+     * `merchant_registration_id`. A miss (the default) means legacy platform
+     * Apple Pay: omit the id and behavior is unchanged.
+     *
+     * Sources, in order: the Tagada routing injection, the last payment setup
+     * seen by `getPaymentSetup`, then one API fetch when a `checkoutSessionId`
+     * is given and no setup was ever loaded.
+     *
+     * Use `displayName` (when present) as the `display_name` of the Basis
+     * Theory merchant session.
+     */
+    resolveApplePayRegistration(checkoutSessionId?: string): Promise<{
+        merchantRegistrationId: string;
+        displayName?: string;
+    } | null>;
     /**
      * Process a Google Pay payment.
      * Tokenizes the Google Pay token and processes payment in one call.

package/dist/core/modules/payment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../src/core/modules/payment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAEV,WAAW,EACX,kBAAkB,EAElB,cAAc,EACd,WAAW,EACX,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAJT,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW;IACzC,wEAAwE;IACvD,QAAQ,CAAC,EAAE,cAAc,YAAA;IAO5C;;;;;;;;;OASG;IACG,eAAe,CACnB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,kBAAkB,CAAC;IAuB9B;;;OAGG;IACG,iBAAiB,CACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,cAAc,CAAC;IAoE1B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAQ5C;;OAEG;IACG,iBAAiB,CACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC;IAWpB;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,IAAI,EAAE;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAiCvE;;;OAGG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC;QAAE,iBAAiB,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAUpD;;;OAGG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAC3B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;QACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC;IAa3B;;;;;OAKG;IACG,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IA4B/C;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;IAc3D;;;;;;;;;;;;;;OAcG;YACW,iBAAiB;IAkC/B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,eAAe,CAAC,IAAI,EAAE;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACxC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACzC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,SAAS,CAAC;IAyBtB;;;;;;;;OAQG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;QACzC,eAAe,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;QAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,SAAS,CAAC;IAuBtB;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,SAAS,CAAC;IAStB;;;;;;;;;OASG;IACG,oBAAoB,CAAC,IAAI,EAAE;QAC/B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,SAAS,CAAC;IAatB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQhF;;;;;;;;;;;;OAYG;IACG,QAAQ,CACZ,KAAK,EAAE,SAAS,EAChB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,oBAAoB,CAAC;IAwBhC;;;;;OAKG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAC9B;;;;WAIG;QACH,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;;WAGG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAoDxC,uCAAuC;IACjC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIjE;;;OAGG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,aAAa,CAAC;IAgBzB,0DAA0D;IACpD,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAMjE,sEAAsE;IAChE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3D;;;;OAIG;YACW,mBAAmB;IAkCjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAwBvB;;;OAGG;YACW,iBAAiB;IA2D/B;;;OAGG;YACW,aAAa;IAyD3B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;YAahB,UAAU;CASzB"}
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../src/core/modules/payment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAEV,WAAW,EACX,kBAAkB,EAElB,cAAc,EACd,WAAW,EACX,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,aAAa;IAStB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAZ5B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB,CAAmC;gBAGxC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW;IACzC,wEAAwE;IACvD,QAAQ,CAAC,EAAE,cAAc,YAAA;IAO5C;;;;;;;;;OASG;IACG,eAAe,CACnB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,kBAAkB,CAAC;IA0B9B;;;OAGG;IACG,iBAAiB,CACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,cAAc,CAAC;IAoE1B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAQ5C;;OAEG;IACG,iBAAiB,CACrB,iBAAiB,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;KAAE,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC;IAWpB;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,IAAI,EAAE;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAiCvE;;;OAGG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC;QAAE,iBAAiB,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAUpD;;;OAGG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAC3B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;QACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC;IAa3B;;;;;OAKG;IACG,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IA4B/C;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;IAc3D;;;;;;;;;;;;;;OAcG;YACW,iBAAiB;IAkC/B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,eAAe,CAAC,IAAI,EAAE;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACxC,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACzC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;;;;;WAOG;QACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,SAAS,CAAC;IAoCtB;;;;;;;;;;;;;;;OAeG;IACG,2BAA2B,CAC/B,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC;QAAE,sBAAsB,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAiC3E;;;;;;;;OAQG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;QACzC,eAAe,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;QAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,SAAS,CAAC;IA4BtB;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,SAAS,CAAC;IAStB;;;;;;;;;OASG;IACG,oBAAoB,CAAC,IAAI,EAAE;QAC/B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,SAAS,CAAC;IAatB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQhF;;;;;;;;;;;;OAYG;IACG,QAAQ,CACZ,KAAK,EAAE,SAAS,EAChB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,oBAAoB,CAAC;IAwBhC;;;;;OAKG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAC9B;;;;WAIG;QACH,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;;WAGG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAoDxC,uCAAuC;IACjC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIjE;;;OAGG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,aAAa,CAAC;IAgBzB,0DAA0D;IACpD,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAMjE,sEAAsE;IAChE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3D;;;;OAIG;YACW,mBAAmB;IAkCjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAwBvB;;;OAGG;YACW,iBAAiB;IA2D/B;;;OAGG;YACW,aAAa;IAyD3B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;YAahB,UAAU;CASzB"}

package/dist/core/modules/payment.js

@@ -29,6 +29,12 @@ export class PaymentModule {
         this.storeId = storeId;
         this.environment = environment;
         this.checkout = checkout;
+        /**
+         * Last payment setup seen by `getPaymentSetup` — lets `processApplePay`
+         * resolve the domain's Apple Pay registration (BYOK / platform-integrator)
+         * without a second network round-trip inside Apple's authorization window.
+         */
+        this.lastPaymentSetup = null;
     }
     // ---------------------------------------------------------------------------
     // Discovery: what payment methods are available?
@@ -45,10 +51,12 @@ export class PaymentModule {
      */
     async getPaymentSetup(checkoutSessionId, opts) {
         if (opts?.paymentSetupConfig) {
+            this.lastPaymentSetup = opts.paymentSetupConfig;
             return opts.paymentSetupConfig;
         }
         const injected = this.readInjectedStepConfig();
         if (injected) {
+            this.lastPaymentSetup = injected;
             return injected;
         }
         const methods = await this.http.get('/api/v1/payment-methods', { params: { checkoutSessionId } });
@@ -57,6 +65,7 @@ export class PaymentModule {
             const key = m.provider ? `${m.method}:${m.provider}` : m.method;
             config[key] = m;
         }
+        this.lastPaymentSetup = config;
         return config;
     }
     /**
@@ -336,10 +345,17 @@ export class PaymentModule {
             firstName: opts.shippingContact?.givenName ?? opts.billingContact?.givenName,
             lastName: opts.shippingContact?.familyName ?? opts.billingContact?.familyName,
         });
+        const merchantRegistrationId = opts.merchantRegistrationId ??
+            (await this.resolveApplePayRegistration(opts.checkoutSessionId))?.merchantRegistrationId;
         const coreJs = await this.loadCoreJs();
         const tokenizer = new coreJs.Tokenizer({ environment: this.environment });
         await tokenizer.initialize();
-        const { tagadaToken } = await tokenizer.tokenizeApplePay(opts.applePayToken);
+        // The tokenizer returns the normalized Basis Theory response — it carries
+        // no `tagadaToken` field. Wrap it into the standard base64 TagadaToken the
+        // pay endpoint expects (destructuring `{ tagadaToken }` here used to yield
+        // undefined and silently push the charge down the instrument-less path).
+        const rawToken = await tokenizer.tokenizeApplePay(opts.applePayToken, merchantRegistrationId);
+        const tagadaToken = btoa(JSON.stringify(coreJs.createTagadaDigitalWalletToken(rawToken, 'apple_pay')));
         return this.pay({
             checkoutSessionId: opts.checkoutSessionId,
             tagadaToken,
@@ -349,6 +365,55 @@ export class PaymentModule {
             isExpress: true,
         });
     }
+    /**
+     * Resolve the Apple Pay registration binding for the domain the page is
+     * served from. Both merchant-certificate (BYOK) and platform-integrator
+     * (PPIID) Apple Pay attach a domain-keyed `applePayByok` map to the
+     * `apple_pay` method's metadata; a hit means every Basis Theory call —
+     * merchant session AND tokenization — must carry that
+     * `merchant_registration_id`. A miss (the default) means legacy platform
+     * Apple Pay: omit the id and behavior is unchanged.
+     *
+     * Sources, in order: the Tagada routing injection, the last payment setup
+     * seen by `getPaymentSetup`, then one API fetch when a `checkoutSessionId`
+     * is given and no setup was ever loaded.
+     *
+     * Use `displayName` (when present) as the `display_name` of the Basis
+     * Theory merchant session.
+     */
+    async resolveApplePayRegistration(checkoutSessionId) {
+        if (typeof window === 'undefined')
+            return null;
+        let host = window.location.hostname.toLowerCase().split(':')[0];
+        if (host.startsWith('www.'))
+            host = host.slice(4);
+        const fromConfig = (setup) => {
+            for (const entry of Object.values(setup ?? {})) {
+                const map = entry?.metadata?.applePayByok;
+                if (!map || typeof map !== 'object')
+                    continue;
+                const hit = map[host];
+                if (hit?.merchantRegistrationId) {
+                    return { merchantRegistrationId: hit.merchantRegistrationId, displayName: hit.displayName };
+                }
+            }
+            return null;
+        };
+        const local = fromConfig(this.readInjectedStepConfig()) ?? fromConfig(this.lastPaymentSetup);
+        if (local)
+            return local;
+        // A setup we already hold that carries no binding is authoritative — don't
+        // burn a network round-trip (inside Apple's authorization window) to
+        // re-learn that this is a legacy platform domain.
+        if (this.lastPaymentSetup || this.readInjectedStepConfig() || !checkoutSessionId)
+            return null;
+        try {
+            return fromConfig(await this.getPaymentSetup(checkoutSessionId));
+        }
+        catch {
+            return null;
+        }
+    }
     /**
      * Process a Google Pay payment.
      * Tokenizes the Google Pay token and processes payment in one call.
@@ -368,7 +433,10 @@ export class PaymentModule {
         const coreJs = await this.loadCoreJs();
         const tokenizer = new coreJs.Tokenizer({ environment: this.environment });
         await tokenizer.initialize();
-        const { tagadaToken } = await tokenizer.tokenizeGooglePay(opts.googlePayToken);
+        // Same wrapping as Apple Pay above — the tokenizer's normalized response
+        // has no `tagadaToken` field.
+        const rawToken = await tokenizer.tokenizeGooglePay(opts.googlePayToken);
+        const tagadaToken = btoa(JSON.stringify(coreJs.createTagadaDigitalWalletToken(rawToken, 'google_pay')));
         return this.pay({
             checkoutSessionId: opts.checkoutSessionId,
             tagadaToken,