@usethrottle/checkout-react 1.0.1 → 1.1.0

package/README.md

@@ -1,9 +1,14 @@
+<p align="left">
+  <img src="https://raw.githubusercontent.com/Epic-Design-Labs/app-throttle/main/packages/brand/assets/throttle-logo.png" alt="Throttle" height="56" />
+</p>
+
+
 # @usethrottle/checkout-react
 
 React components for embedding Throttle checkout in your site. Two embed
 products + one helper hook:
 
-- **`<PaymentEmbed/>`** — payment-only iframe. Drops a Gr4vy-backed
+- **`<PaymentEmbed/>`** — payment-only iframe. Drops a provider-backed
   card form into your existing checkout page.
 - **`<CheckoutEmbed/>`** — full-checkout iframe. Address + shipping +
   payment. Single iframe, single drop-in.
@@ -31,7 +36,7 @@ Or via API:
 fetch('https://api.usethrottle.dev/api/v1/embed-config', {
   method: 'PUT',
   headers: { 'x-api-key': 'sk_...', 'content-type': 'application/json' },
-  body: JSON.stringify({ allowed_origins: ['https://shop.example.com'] }),
+  body: JSON.stringify({ allowedOrigins: ['https://shop.example.com'] }),
 });
 ```
 
@@ -109,6 +114,53 @@ export function MyEmbed({ sessionId }: { sessionId: string }) {
 }
 ```
 
+## `useCartSession` — backend-less cart
+
+Own a Throttle cart directly from the browser — no backend, no secret key. The
+hook wraps `@usethrottle/cart`'s `CartSessionClient`: it creates the cart lazily
+on the first `addItem`, persists the session id to `localStorage`, resumes it on
+the next visit, and exposes reactive `cart` state. Authorize with a publishable
+`pk_` quote token + your application's origin allowlist (set origins via
+`PUT /api/v1/embed-config`).
+
+```tsx
+import { useCartSession } from '@usethrottle/checkout-react';
+
+function Cart() {
+  const cart = useCartSession({
+    applicationId: '7f9d4c8a-5b2e-4f16-9a73-2d1e5c8b6f40',
+    environmentId: 'a1b2c3d4-...',
+    quoteToken: 'pk_live_...',
+  });
+
+  return (
+    <>
+      <button onClick={() => cart.addItem({ name: 'Widget', unitPrice: 2999, quantity: 1 })}>
+        Add to cart
+      </button>
+      {cart.cart && <p>Total: {cart.cart.total}</p>}
+      <button
+        disabled={cart.loading}
+        onClick={async () => {
+          const { checkoutUrl } = await cart.checkout({
+            returnUrl: 'https://shop.example.com/thanks',
+            cancelUrl: 'https://shop.example.com/cart',
+          });
+          window.location.href = checkoutUrl;
+        }}
+      >
+        Checkout
+      </button>
+      {cart.error && <p role="alert">{cart.error.message}</p>}
+    </>
+  );
+}
+```
+
+Also exposes `updateItem`, `removeItem`, `selectShipping`, `clearShipping`,
+`applyDiscount`, `removeDiscount`, `refresh`, and `reset`. See the
+[cart sessions guide](https://docs.usethrottle.dev/developers/cart-sessions).
+
 ## Events
 
 Both `<PaymentEmbed/>` and `<CheckoutEmbed/>` fire these events to the

package/dist/index.cjs

@@ -23,6 +23,7 @@ __export(index_exports, {
   CheckoutEmbed: () => CheckoutEmbed,
   PaymentEmbed: () => PaymentEmbed,
   ThrottleCheckout: () => CheckoutEmbed,
+  useCartSession: () => useCartSession,
   useThrottleEvents: () => useThrottleEvents
 });
 module.exports = __toCommonJS(index_exports);
@@ -232,11 +233,173 @@ function PaymentEmbed({
     }
   );
 }
+
+// src/useCartSession.tsx
+var import_react5 = require("react");
+var import_cart = require("@usethrottle/cart");
+var DEFAULT_STORAGE_KEY = "throttle.cartSessionId";
+function readStored(key) {
+  if (!key || typeof window === "undefined") return null;
+  try {
+    return window.localStorage.getItem(key);
+  } catch {
+    return null;
+  }
+}
+function writeStored(key, value) {
+  if (!key || typeof window === "undefined") return;
+  try {
+    if (value === null) window.localStorage.removeItem(key);
+    else window.localStorage.setItem(key, value);
+  } catch {
+  }
+}
+function useCartSession(options) {
+  const { applicationId, environmentId, quoteToken, baseUrl } = options;
+  const storageKey = options.storageKey === void 0 ? DEFAULT_STORAGE_KEY : options.storageKey;
+  const [cart, setCart] = (0, import_react5.useState)(null);
+  const [cartSessionId, setCartSessionId] = (0, import_react5.useState)(null);
+  const [loading, setLoading] = (0, import_react5.useState)(false);
+  const [error, setError] = (0, import_react5.useState)(null);
+  const { client, initError } = (0, import_react5.useMemo)(() => {
+    try {
+      return {
+        client: new import_cart.CartSessionClient({ applicationId, environmentId, quoteToken, baseUrl }),
+        initError: null
+      };
+    } catch (e) {
+      return { client: null, initError: e };
+    }
+  }, [applicationId, environmentId, quoteToken, baseUrl]);
+  (0, import_react5.useEffect)(() => {
+    if (initError) setError(initError);
+  }, [initError]);
+  (0, import_react5.useEffect)(() => {
+    if (!client) return;
+    const saved = readStored(storageKey);
+    if (!saved) return;
+    let cancelled = false;
+    client.resume(saved);
+    setCartSessionId(saved);
+    setLoading(true);
+    client.get().then((s) => {
+      if (cancelled) return;
+      setCart(s.cart);
+    }).catch(() => {
+      if (cancelled) return;
+      writeStored(storageKey, null);
+      client.resume("");
+      setCartSessionId(null);
+      setCart(null);
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [client, storageKey]);
+  const ensureSession = (0, import_react5.useCallback)(
+    async (input) => {
+      if (!client) throw initError ?? new Error("CartSessionClient unavailable");
+      if (client.cartSessionId) return;
+      const session = await client.create(input ?? {});
+      writeStored(storageKey, session.cartSessionId);
+      setCartSessionId(session.cartSessionId);
+      setCart(session.cart);
+    },
+    [client, initError, storageKey]
+  );
+  const run = (0, import_react5.useCallback)(
+    async (fn, opts = {}) => {
+      if (!client) {
+        setError(initError ?? new Error("CartSessionClient unavailable"));
+        return;
+      }
+      setLoading(true);
+      setError(null);
+      try {
+        if (opts.create) await ensureSession();
+        const next = await fn();
+        setCart(next);
+      } catch (e) {
+        setError(e);
+        throw e;
+      } finally {
+        setLoading(false);
+      }
+    },
+    [client, ensureSession, initError]
+  );
+  const addItem = (0, import_react5.useCallback)(
+    (input) => run(() => client.addItem(input), { create: true }),
+    [client, run]
+  );
+  const updateItem = (0, import_react5.useCallback)(
+    (itemId, input) => run(() => client.updateItem(itemId, input)),
+    [client, run]
+  );
+  const removeItem = (0, import_react5.useCallback)((itemId) => run(() => client.removeItem(itemId)), [client, run]);
+  const selectShipping = (0, import_react5.useCallback)(
+    (input) => run(() => client.selectShipping(input), { create: true }),
+    [client, run]
+  );
+  const clearShipping = (0, import_react5.useCallback)(() => run(() => client.clearShipping()), [client, run]);
+  const applyDiscount = (0, import_react5.useCallback)(
+    (code) => run(() => client.applyDiscount(code), { create: true }),
+    [client, run]
+  );
+  const removeDiscount = (0, import_react5.useCallback)(() => run(() => client.removeDiscount()), [client, run]);
+  const refresh = (0, import_react5.useCallback)(async () => {
+    if (!client?.cartSessionId) return;
+    await run(async () => (await client.get()).cart);
+  }, [client, run]);
+  const checkout = (0, import_react5.useCallback)(
+    async (input) => {
+      if (!client) throw initError ?? new Error("CartSessionClient unavailable");
+      setLoading(true);
+      setError(null);
+      try {
+        await ensureSession();
+        return await client.checkout(input);
+      } catch (e) {
+        setError(e);
+        throw e;
+      } finally {
+        setLoading(false);
+      }
+    },
+    [client, ensureSession, initError]
+  );
+  const reset = (0, import_react5.useCallback)(() => {
+    writeStored(storageKey, null);
+    client?.resume("");
+    setCartSessionId(null);
+    setCart(null);
+    setError(null);
+  }, [client, storageKey]);
+  return {
+    cart,
+    cartSessionId,
+    loading,
+    error,
+    addItem,
+    updateItem,
+    removeItem,
+    selectShipping,
+    clearShipping,
+    applyDiscount,
+    removeDiscount,
+    checkout,
+    refresh,
+    reset
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CheckoutEmbed,
   PaymentEmbed,
   ThrottleCheckout,
+  useCartSession,
   useThrottleEvents
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.tsx","../src/CheckoutEmbed.tsx","../src/useThrottleEvents.ts","../src/useParentCommands.ts","../src/PaymentEmbed.tsx"],"sourcesContent":["export { CheckoutEmbed } from './CheckoutEmbed.js';\nexport { PaymentEmbed } from './PaymentEmbed.js';\nexport { useThrottleEvents } from './useThrottleEvents.js';\nexport type {\n  ThrottleEvent,\n  ThrottleMessage,\n  ThrottleEnvelope,\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  RecurringIntent,\n  ThrottleParentCommand,\n  ThrottleParentEnvelope,\n  ThrottleParentMessage,\n} from './types.js';\n\n// v0.1.x compat alias. v0.1's <ThrottleCheckout> shape (positional\n// onCompleted/onError args, optional baseUrl, no parentOrigin) is\n// gone in v0.2 — the alias resolves to <CheckoutEmbed> which now\n// requires `parentOrigin`. Update call sites accordingly.\nexport { CheckoutEmbed as ThrottleCheckout } from './CheckoutEmbed.js';\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type {\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  ThrottleMessage,\n} from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Full-checkout iframe embed. Renders the entire Throttle hosted\n * checkout (address / shipping / payment) inside an iframe and\n * surfaces lifecycle + terminal events through callbacks. The\n * iframe auto-resizes on `throttle.resize` events.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list\n * (`throttle embed-config set --origins ...`). Mismatches render\n * an in-iframe \"Embed not authorized\" panel.\n */\nexport function CheckoutEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 600,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n  onStepChanged,\n}: ThrottleEmbedProps & CheckoutEmbedExtraProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.step.changed':\n          onStepChanged?.({ step: msg.step });\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled, onStepChanged],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'checkout-full', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle checkout\"\n    />\n  );\n}\n","import { useEffect, type RefObject } from 'react';\nimport type { ThrottleMessage } from './types.js';\n\nexport interface UseThrottleEventsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /**\n   * The Throttle origin (e.g. https://checkout.usethrottle.dev).\n   * Strict-equals check against `MessageEvent.origin`. Anything else\n   * is silently dropped.\n   */\n  expectedOrigin: string;\n  onMessage: (msg: ThrottleMessage) => void;\n}\n\n/**\n * Subscribe to validated postMessage events from a Throttle iframe.\n *\n * Validation:\n *  - event.origin === expectedOrigin (strict string match)\n *  - event.source === iframeRef.current.contentWindow (defends against\n *    other iframes on the same origin spoofing events)\n *  - event.data.source === 'throttle' && event.data.version === 1\n *  - event.data.type starts with 'throttle.'\n *\n * Anything failing validation is silently dropped — the parent page\n * may receive postMessages from analytics SDKs, browser extensions,\n * other iframes, etc. We must never throw on those.\n */\nexport function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions) {\n  useEffect(() => {\n    function handle(ev: MessageEvent) {\n      if (ev.origin !== expectedOrigin) return;\n      if (iframeRef.current && ev.source !== iframeRef.current.contentWindow) return;\n      const data = ev.data as Partial<ThrottleMessage> | null | undefined;\n      if (!data || typeof data !== 'object') return;\n      if (data.source !== 'throttle' || data.version !== 1) return;\n      if (typeof data.type !== 'string' || !data.type.startsWith('throttle.')) return;\n      onMessage(data as ThrottleMessage);\n    }\n    window.addEventListener('message', handle);\n    return () => window.removeEventListener('message', handle);\n  }, [iframeRef, expectedOrigin, onMessage]);\n}\n","import { useEffect, useState, type RefObject } from 'react';\nimport type { ThrottleParentMessage } from './types.js';\n\ninterface UseParentCommandsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /** The Throttle origin to address messages to. */\n  targetOrigin: string;\n  /**\n   * The current value of `submitDisabled` from the embed props. Posts a\n   * `set-submit-disabled` parent command whenever it changes — and once\n   * after the iframe reports `throttle.ready` so the iframe sees the\n   * intent even if it boots after the prop is already set.\n   *\n   * `undefined` means the parent never explicitly enabled/disabled — we\n   * never post in that case. Backward-compat with embeds that don't\n   * pass the prop.\n   */\n  submitDisabled?: boolean;\n  /**\n   * Set to `true` once the iframe posts `throttle.ready`. Until then,\n   * commands are buffered (we still try to post but the iframe may not\n   * have its listener attached yet — and we re-post on ready as a\n   * belt-and-braces guard).\n   */\n  iframeReady: boolean;\n}\n\n/**\n * Post parent → iframe commands when controlled props change. v1.2 adds\n * `set-submit-disabled`; future commands extend the same channel.\n *\n * postMessage is fire-and-forget — we don't wait for an ack from the\n * iframe. The iframe's listener is idempotent (setting the same value\n * twice is a no-op).\n */\nexport function useParentCommands({\n  iframeRef,\n  targetOrigin,\n  submitDisabled,\n  iframeReady,\n}: UseParentCommandsOptions) {\n  const [lastSent, setLastSent] = useState<boolean | undefined>(undefined);\n\n  // Post when the prop value changes OR when the iframe transitions to\n  // ready (so the first state lands).\n  useEffect(() => {\n    if (submitDisabled === undefined) return;\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    // Skip if we already sent this value AND the iframe was already ready\n    // — avoids spam on unrelated re-renders.\n    if (lastSent === submitDisabled && iframeReady) return;\n    if (!iframeReady) return; // Defer until ready\n\n    const message: ThrottleParentMessage = {\n      source: 'throttle-parent',\n      version: 1,\n      type: 'set-submit-disabled',\n      disabled: submitDisabled,\n    };\n    win.postMessage(message, targetOrigin);\n    setLastSent(submitDisabled);\n  }, [iframeRef, targetOrigin, submitDisabled, iframeReady, lastSent]);\n}\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type { ThrottleEmbedProps, ThrottleMessage } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Payment-only iframe embed. Renders just the Gr4vy provider iframe\n * (no address / shipping / cart UI). Email is collected by the Gr4vy\n * iframe in proxy-mode sessions. Used when the merchant has built\n * their own checkout UI and only needs Throttle to handle payment\n * authorization + capture.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list.\n * The iframe auto-resizes on `throttle.resize` events.\n */\nexport function PaymentEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 480,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n}: ThrottleEmbedProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'payment-only', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle payment\"\n    />\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,gBAA8C;;;ACA9C,mBAA0C;AA4BnC,SAAS,kBAAkB,EAAE,WAAW,gBAAgB,UAAU,GAA6B;AACpG,8BAAU,MAAM;AACd,aAAS,OAAO,IAAkB;AAChC,UAAI,GAAG,WAAW,eAAgB;AAClC,UAAI,UAAU,WAAW,GAAG,WAAW,UAAU,QAAQ,cAAe;AACxE,YAAM,OAAO,GAAG;AAChB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAI,KAAK,WAAW,cAAc,KAAK,YAAY,EAAG;AACtD,UAAI,OAAO,KAAK,SAAS,YAAY,CAAC,KAAK,KAAK,WAAW,WAAW,EAAG;AACzE,gBAAU,IAAuB;AAAA,IACnC;AACA,WAAO,iBAAiB,WAAW,MAAM;AACzC,WAAO,MAAM,OAAO,oBAAoB,WAAW,MAAM;AAAA,EAC3D,GAAG,CAAC,WAAW,gBAAgB,SAAS,CAAC;AAC3C;;;AC1CA,IAAAC,gBAAoD;AAmC7C,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6B;AAC3B,QAAM,CAAC,UAAU,WAAW,QAAI,wBAA8B,MAAS;AAIvE,+BAAU,MAAM;AACd,QAAI,mBAAmB,OAAW;AAClC,UAAM,MAAM,UAAU,SAAS;AAC/B,QAAI,CAAC,IAAK;AAGV,QAAI,aAAa,kBAAkB,YAAa;AAChD,QAAI,CAAC,YAAa;AAElB,UAAM,UAAiC;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,IACZ;AACA,QAAI,YAAY,SAAS,YAAY;AACrC,gBAAY,cAAc;AAAA,EAC5B,GAAG,CAAC,WAAW,cAAc,gBAAgB,aAAa,QAAQ,CAAC;AACrE;;;AF4BI;AAlFJ,IAAM,mBAAmB;AAYlB,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAiD;AAC/C,QAAM,gBAAY,sBAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,QAAI,wBAAS,KAAK;AAEpD,QAAM,eAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,0BAAgB,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,YAAY,aAAa;AAAA,EAC1E;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,iBAAiB,aAAa,CAAC;AACtF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AGpGA,IAAAC,gBAA8C;AAmF1C,IAAAC,sBAAA;AA9EJ,IAAMC,oBAAmB;AAYlB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,UAAUA;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuB;AACrB,QAAM,gBAAY,sBAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,QAAI,wBAAS,KAAK;AAEpD,QAAM,eAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,UAAU;AAAA,EAC3D;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,gBAAgB,aAAa,CAAC;AACrF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;","names":["import_react","import_react","import_react","import_jsx_runtime","DEFAULT_BASE_URL"]}
+{"version":3,"sources":["../src/index.tsx","../src/CheckoutEmbed.tsx","../src/useThrottleEvents.ts","../src/useParentCommands.ts","../src/PaymentEmbed.tsx","../src/useCartSession.tsx"],"sourcesContent":["export { CheckoutEmbed } from './CheckoutEmbed.js';\nexport { PaymentEmbed } from './PaymentEmbed.js';\nexport { useThrottleEvents } from './useThrottleEvents.js';\nexport { useCartSession } from './useCartSession.js';\nexport type { UseCartSessionOptions, UseCartSessionResult } from './useCartSession.js';\nexport type {\n  ThrottleEvent,\n  ThrottleMessage,\n  ThrottleEnvelope,\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  RecurringIntent,\n  ThrottleParentCommand,\n  ThrottleParentEnvelope,\n  ThrottleParentMessage,\n} from './types.js';\n\n// v0.1.x compat alias. v0.1's <ThrottleCheckout> shape (positional\n// onCompleted/onError args, optional baseUrl, no parentOrigin) is\n// gone in v0.2 — the alias resolves to <CheckoutEmbed> which now\n// requires `parentOrigin`. Update call sites accordingly.\nexport { CheckoutEmbed as ThrottleCheckout } from './CheckoutEmbed.js';\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type {\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  ThrottleMessage,\n} from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Full-checkout iframe embed. Renders the entire Throttle hosted\n * checkout (address / shipping / payment) inside an iframe and\n * surfaces lifecycle + terminal events through callbacks. The\n * iframe auto-resizes on `throttle.resize` events.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list\n * (`throttle embed-config set --origins ...`). Mismatches render\n * an in-iframe \"Embed not authorized\" panel.\n */\nexport function CheckoutEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 600,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n  onStepChanged,\n}: ThrottleEmbedProps & CheckoutEmbedExtraProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.step.changed':\n          onStepChanged?.({ step: msg.step });\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled, onStepChanged],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'checkout-full', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle checkout\"\n    />\n  );\n}\n","import { useEffect, type RefObject } from 'react';\nimport type { ThrottleMessage } from './types.js';\n\nexport interface UseThrottleEventsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /**\n   * The Throttle origin (e.g. https://checkout.usethrottle.dev).\n   * Strict-equals check against `MessageEvent.origin`. Anything else\n   * is silently dropped.\n   */\n  expectedOrigin: string;\n  onMessage: (msg: ThrottleMessage) => void;\n}\n\n/**\n * Subscribe to validated postMessage events from a Throttle iframe.\n *\n * Validation:\n *  - event.origin === expectedOrigin (strict string match)\n *  - event.source === iframeRef.current.contentWindow (defends against\n *    other iframes on the same origin spoofing events)\n *  - event.data.source === 'throttle' && event.data.version === 1\n *  - event.data.type starts with 'throttle.'\n *\n * Anything failing validation is silently dropped — the parent page\n * may receive postMessages from analytics SDKs, browser extensions,\n * other iframes, etc. We must never throw on those.\n */\nexport function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions) {\n  useEffect(() => {\n    function handle(ev: MessageEvent) {\n      if (ev.origin !== expectedOrigin) return;\n      if (iframeRef.current && ev.source !== iframeRef.current.contentWindow) return;\n      const data = ev.data as Partial<ThrottleMessage> | null | undefined;\n      if (!data || typeof data !== 'object') return;\n      if (data.source !== 'throttle' || data.version !== 1) return;\n      if (typeof data.type !== 'string' || !data.type.startsWith('throttle.')) return;\n      onMessage(data as ThrottleMessage);\n    }\n    window.addEventListener('message', handle);\n    return () => window.removeEventListener('message', handle);\n  }, [iframeRef, expectedOrigin, onMessage]);\n}\n","import { useEffect, useState, type RefObject } from 'react';\nimport type { ThrottleParentMessage } from './types.js';\n\ninterface UseParentCommandsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /** The Throttle origin to address messages to. */\n  targetOrigin: string;\n  /**\n   * The current value of `submitDisabled` from the embed props. Posts a\n   * `set-submit-disabled` parent command whenever it changes — and once\n   * after the iframe reports `throttle.ready` so the iframe sees the\n   * intent even if it boots after the prop is already set.\n   *\n   * `undefined` means the parent never explicitly enabled/disabled — we\n   * never post in that case. Backward-compat with embeds that don't\n   * pass the prop.\n   */\n  submitDisabled?: boolean;\n  /**\n   * Set to `true` once the iframe posts `throttle.ready`. Until then,\n   * commands are buffered (we still try to post but the iframe may not\n   * have its listener attached yet — and we re-post on ready as a\n   * belt-and-braces guard).\n   */\n  iframeReady: boolean;\n}\n\n/**\n * Post parent → iframe commands when controlled props change. v1.2 adds\n * `set-submit-disabled`; future commands extend the same channel.\n *\n * postMessage is fire-and-forget — we don't wait for an ack from the\n * iframe. The iframe's listener is idempotent (setting the same value\n * twice is a no-op).\n */\nexport function useParentCommands({\n  iframeRef,\n  targetOrigin,\n  submitDisabled,\n  iframeReady,\n}: UseParentCommandsOptions) {\n  const [lastSent, setLastSent] = useState<boolean | undefined>(undefined);\n\n  // Post when the prop value changes OR when the iframe transitions to\n  // ready (so the first state lands).\n  useEffect(() => {\n    if (submitDisabled === undefined) return;\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    // Skip if we already sent this value AND the iframe was already ready\n    // — avoids spam on unrelated re-renders.\n    if (lastSent === submitDisabled && iframeReady) return;\n    if (!iframeReady) return; // Defer until ready\n\n    const message: ThrottleParentMessage = {\n      source: 'throttle-parent',\n      version: 1,\n      type: 'set-submit-disabled',\n      disabled: submitDisabled,\n    };\n    win.postMessage(message, targetOrigin);\n    setLastSent(submitDisabled);\n  }, [iframeRef, targetOrigin, submitDisabled, iframeReady, lastSent]);\n}\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type { ThrottleEmbedProps, ThrottleMessage } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Payment-only iframe embed. Renders just the Gr4vy provider iframe\n * (no address / shipping / cart UI). Email is collected by the Gr4vy\n * iframe in proxy-mode sessions. Used when the merchant has built\n * their own checkout UI and only needs Throttle to handle payment\n * authorization + capture.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list.\n * The iframe auto-resizes on `throttle.resize` events.\n */\nexport function PaymentEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 480,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n}: ThrottleEmbedProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'payment-only', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle payment\"\n    />\n  );\n}\n","import { useCallback, useEffect, useMemo, useState } from 'react';\nimport {\n  CartSessionClient,\n  type Cart,\n  type AddLineItemInput,\n  type UpdateLineItemInput,\n  type SelectShippingInput,\n  type CreateCartSessionInput,\n  type CheckoutHandoffInput,\n  type CheckoutHandoff,\n} from '@usethrottle/cart';\n\nconst DEFAULT_STORAGE_KEY = 'throttle.cartSessionId';\n\nexport interface UseCartSessionOptions {\n  /** Application UUID. */\n  applicationId: string;\n  /** Workspace environment UUID the publishable token was minted for. */\n  environmentId: string;\n  /** Publishable storefront quote token (`pk_…`). */\n  quoteToken: string;\n  baseUrl?: string;\n  /**\n   * localStorage key for persisting the session id across page loads. Default\n   * `'throttle.cartSessionId'`. Pass `null` to disable persistence (in-memory\n   * only).\n   */\n  storageKey?: string | null;\n}\n\nexport interface UseCartSessionResult {\n  /** Current cart snapshot, or null before the first item / resume. */\n  cart: Cart | null;\n  /** Current opaque session id, or null before the first item. */\n  cartSessionId: string | null;\n  /** True while a request is in flight. */\n  loading: boolean;\n  /** Last error, or null. */\n  error: Error | null;\n  addItem: (input: AddLineItemInput) => Promise<void>;\n  updateItem: (itemId: string, input: UpdateLineItemInput) => Promise<void>;\n  removeItem: (itemId: string) => Promise<void>;\n  selectShipping: (input: SelectShippingInput) => Promise<void>;\n  clearShipping: () => Promise<void>;\n  applyDiscount: (code: string) => Promise<void>;\n  removeDiscount: () => Promise<void>;\n  /** Hand off to checkout. Returns the hand-off (redirect the buyer to `checkoutUrl`). */\n  checkout: (input: CheckoutHandoffInput) => Promise<CheckoutHandoff>;\n  /** Re-fetch the current cart. */\n  refresh: () => Promise<void>;\n  /** Forget the current session (a new cart is created on the next item). */\n  reset: () => void;\n}\n\nfunction readStored(key: string | null | undefined): string | null {\n  if (!key || typeof window === 'undefined') return null;\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeStored(key: string | null | undefined, value: string | null): void {\n  if (!key || typeof window === 'undefined') return;\n  try {\n    if (value === null) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, value);\n  } catch {\n    /* ignore quota / privacy-mode errors */\n  }\n}\n\n/**\n * React hook for backend-less cart ownership. Wraps {@link CartSessionClient}:\n * creates the Throttle cart lazily on the first `addItem` (so empty carts\n * aren't created on every page load), persists the session id to localStorage,\n * and resumes it on the next visit. Mutations update reactive `cart` state.\n *\n * ```tsx\n * const cart = useCartSession({ applicationId, environmentId, quoteToken });\n * <button onClick={() => cart.addItem({ name: 'Widget', unitPrice: 2999, quantity: 1 })}>Add</button>\n * <button onClick={async () => {\n *   const { checkoutUrl } = await cart.checkout({ returnUrl, cancelUrl });\n *   window.location.href = checkoutUrl;\n * }}>Checkout</button>\n * ```\n */\nexport function useCartSession(options: UseCartSessionOptions): UseCartSessionResult {\n  const { applicationId, environmentId, quoteToken, baseUrl } = options;\n  const storageKey = options.storageKey === undefined ? DEFAULT_STORAGE_KEY : options.storageKey;\n\n  const [cart, setCart] = useState<Cart | null>(null);\n  const [cartSessionId, setCartSessionId] = useState<string | null>(null);\n  const [loading, setLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  // Stable client across renders for a given config; construction validates the\n  // token, so capture any constructor error instead of throwing during render.\n  const { client, initError } = useMemo(() => {\n    try {\n      return {\n        client: new CartSessionClient({ applicationId, environmentId, quoteToken, baseUrl }),\n        initError: null as Error | null,\n      };\n    } catch (e) {\n      return { client: null as CartSessionClient | null, initError: e as Error };\n    }\n  }, [applicationId, environmentId, quoteToken, baseUrl]);\n\n  useEffect(() => {\n    if (initError) setError(initError);\n  }, [initError]);\n\n  // Resume a persisted session on mount (and whenever the client identity changes).\n  useEffect(() => {\n    if (!client) return;\n    const saved = readStored(storageKey);\n    if (!saved) return;\n    let cancelled = false;\n    client.resume(saved);\n    setCartSessionId(saved);\n    setLoading(true);\n    client\n      .get()\n      .then((s) => {\n        if (cancelled) return;\n        setCart(s.cart);\n      })\n      .catch(() => {\n        // Expired / unknown / origin-rejected → drop the stale id and start fresh.\n        if (cancelled) return;\n        writeStored(storageKey, null);\n        client.resume('');\n        setCartSessionId(null);\n        setCart(null);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [client, storageKey]);\n\n  const ensureSession = useCallback(\n    async (input?: CreateCartSessionInput): Promise<void> => {\n      if (!client) throw initError ?? new Error('CartSessionClient unavailable');\n      if (client.cartSessionId) return;\n      const session = await client.create(input ?? {});\n      writeStored(storageKey, session.cartSessionId);\n      setCartSessionId(session.cartSessionId);\n      setCart(session.cart);\n    },\n    [client, initError, storageKey],\n  );\n\n  /** Run a mutation that returns the updated cart, managing loading/error + creating the session first. */\n  const run = useCallback(\n    async (fn: () => Promise<Cart>, opts: { create?: boolean } = {}): Promise<void> => {\n      if (!client) {\n        setError(initError ?? new Error('CartSessionClient unavailable'));\n        return;\n      }\n      setLoading(true);\n      setError(null);\n      try {\n        if (opts.create) await ensureSession();\n        const next = await fn();\n        setCart(next);\n      } catch (e) {\n        setError(e as Error);\n        throw e;\n      } finally {\n        setLoading(false);\n      }\n    },\n    [client, ensureSession, initError],\n  );\n\n  const addItem = useCallback(\n    (input: AddLineItemInput) => run(() => client!.addItem(input), { create: true }),\n    [client, run],\n  );\n  const updateItem = useCallback(\n    (itemId: string, input: UpdateLineItemInput) => run(() => client!.updateItem(itemId, input)),\n    [client, run],\n  );\n  const removeItem = useCallback((itemId: string) => run(() => client!.removeItem(itemId)), [client, run]);\n  const selectShipping = useCallback(\n    (input: SelectShippingInput) => run(() => client!.selectShipping(input), { create: true }),\n    [client, run],\n  );\n  const clearShipping = useCallback(() => run(() => client!.clearShipping()), [client, run]);\n  const applyDiscount = useCallback(\n    (code: string) => run(() => client!.applyDiscount(code), { create: true }),\n    [client, run],\n  );\n  const removeDiscount = useCallback(() => run(() => client!.removeDiscount()), [client, run]);\n  const refresh = useCallback(async () => {\n    if (!client?.cartSessionId) return;\n    await run(async () => (await client.get()).cart);\n  }, [client, run]);\n\n  const checkout = useCallback(\n    async (input: CheckoutHandoffInput): Promise<CheckoutHandoff> => {\n      if (!client) throw initError ?? new Error('CartSessionClient unavailable');\n      setLoading(true);\n      setError(null);\n      try {\n        await ensureSession();\n        return await client.checkout(input);\n      } catch (e) {\n        setError(e as Error);\n        throw e;\n      } finally {\n        setLoading(false);\n      }\n    },\n    [client, ensureSession, initError],\n  );\n\n  const reset = useCallback(() => {\n    writeStored(storageKey, null);\n    client?.resume('');\n    setCartSessionId(null);\n    setCart(null);\n    setError(null);\n  }, [client, storageKey]);\n\n  return {\n    cart,\n    cartSessionId,\n    loading,\n    error,\n    addItem,\n    updateItem,\n    removeItem,\n    selectShipping,\n    clearShipping,\n    applyDiscount,\n    removeDiscount,\n    checkout,\n    refresh,\n    reset,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,gBAA8C;;;ACA9C,mBAA0C;AA4BnC,SAAS,kBAAkB,EAAE,WAAW,gBAAgB,UAAU,GAA6B;AACpG,8BAAU,MAAM;AACd,aAAS,OAAO,IAAkB;AAChC,UAAI,GAAG,WAAW,eAAgB;AAClC,UAAI,UAAU,WAAW,GAAG,WAAW,UAAU,QAAQ,cAAe;AACxE,YAAM,OAAO,GAAG;AAChB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAI,KAAK,WAAW,cAAc,KAAK,YAAY,EAAG;AACtD,UAAI,OAAO,KAAK,SAAS,YAAY,CAAC,KAAK,KAAK,WAAW,WAAW,EAAG;AACzE,gBAAU,IAAuB;AAAA,IACnC;AACA,WAAO,iBAAiB,WAAW,MAAM;AACzC,WAAO,MAAM,OAAO,oBAAoB,WAAW,MAAM;AAAA,EAC3D,GAAG,CAAC,WAAW,gBAAgB,SAAS,CAAC;AAC3C;;;AC1CA,IAAAC,gBAAoD;AAmC7C,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6B;AAC3B,QAAM,CAAC,UAAU,WAAW,QAAI,wBAA8B,MAAS;AAIvE,+BAAU,MAAM;AACd,QAAI,mBAAmB,OAAW;AAClC,UAAM,MAAM,UAAU,SAAS;AAC/B,QAAI,CAAC,IAAK;AAGV,QAAI,aAAa,kBAAkB,YAAa;AAChD,QAAI,CAAC,YAAa;AAElB,UAAM,UAAiC;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,IACZ;AACA,QAAI,YAAY,SAAS,YAAY;AACrC,gBAAY,cAAc;AAAA,EAC5B,GAAG,CAAC,WAAW,cAAc,gBAAgB,aAAa,QAAQ,CAAC;AACrE;;;AF4BI;AAlFJ,IAAM,mBAAmB;AAYlB,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAiD;AAC/C,QAAM,gBAAY,sBAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,QAAI,wBAAS,KAAK;AAEpD,QAAM,eAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,0BAAgB,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,YAAY,aAAa;AAAA,EAC1E;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,iBAAiB,aAAa,CAAC;AACtF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AGpGA,IAAAC,gBAA8C;AAmF1C,IAAAC,sBAAA;AA9EJ,IAAMC,oBAAmB;AAYlB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,UAAUA;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuB;AACrB,QAAM,gBAAY,sBAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,QAAI,wBAAS,KAAK;AAEpD,QAAM,eAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,UAAU;AAAA,EAC3D;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,gBAAgB,aAAa,CAAC;AACrF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AC5FA,IAAAC,gBAA0D;AAC1D,kBASO;AAEP,IAAM,sBAAsB;AA0C5B,SAAS,WAAW,KAA+C;AACjE,MAAI,CAAC,OAAO,OAAO,WAAW,YAAa,QAAO;AAClD,MAAI;AACF,WAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,KAAgC,OAA4B;AAC/E,MAAI,CAAC,OAAO,OAAO,WAAW,YAAa;AAC3C,MAAI;AACF,QAAI,UAAU,KAAM,QAAO,aAAa,WAAW,GAAG;AAAA,QACjD,QAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,EAC7C,QAAQ;AAAA,EAER;AACF;AAiBO,SAAS,eAAe,SAAsD;AACnF,QAAM,EAAE,eAAe,eAAe,YAAY,QAAQ,IAAI;AAC9D,QAAM,aAAa,QAAQ,eAAe,SAAY,sBAAsB,QAAQ;AAEpF,QAAM,CAAC,MAAM,OAAO,QAAI,wBAAsB,IAAI;AAClD,QAAM,CAAC,eAAe,gBAAgB,QAAI,wBAAwB,IAAI;AACtE,QAAM,CAAC,SAAS,UAAU,QAAI,wBAAS,KAAK;AAC5C,QAAM,CAAC,OAAO,QAAQ,QAAI,wBAAuB,IAAI;AAIrD,QAAM,EAAE,QAAQ,UAAU,QAAI,uBAAQ,MAAM;AAC1C,QAAI;AACF,aAAO;AAAA,QACL,QAAQ,IAAI,8BAAkB,EAAE,eAAe,eAAe,YAAY,QAAQ,CAAC;AAAA,QACnF,WAAW;AAAA,MACb;AAAA,IACF,SAAS,GAAG;AACV,aAAO,EAAE,QAAQ,MAAkC,WAAW,EAAW;AAAA,IAC3E;AAAA,EACF,GAAG,CAAC,eAAe,eAAe,YAAY,OAAO,CAAC;AAEtD,+BAAU,MAAM;AACd,QAAI,UAAW,UAAS,SAAS;AAAA,EACnC,GAAG,CAAC,SAAS,CAAC;AAGd,+BAAU,MAAM;AACd,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ,WAAW,UAAU;AACnC,QAAI,CAAC,MAAO;AACZ,QAAI,YAAY;AAChB,WAAO,OAAO,KAAK;AACnB,qBAAiB,KAAK;AACtB,eAAW,IAAI;AACf,WACG,IAAI,EACJ,KAAK,CAAC,MAAM;AACX,UAAI,UAAW;AACf,cAAQ,EAAE,IAAI;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AAEX,UAAI,UAAW;AACf,kBAAY,YAAY,IAAI;AAC5B,aAAO,OAAO,EAAE;AAChB,uBAAiB,IAAI;AACrB,cAAQ,IAAI;AAAA,IACd,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,CAAC;AAEvB,QAAM,oBAAgB;AAAA,IACpB,OAAO,UAAkD;AACvD,UAAI,CAAC,OAAQ,OAAM,aAAa,IAAI,MAAM,+BAA+B;AACzE,UAAI,OAAO,cAAe;AAC1B,YAAM,UAAU,MAAM,OAAO,OAAO,SAAS,CAAC,CAAC;AAC/C,kBAAY,YAAY,QAAQ,aAAa;AAC7C,uBAAiB,QAAQ,aAAa;AACtC,cAAQ,QAAQ,IAAI;AAAA,IACtB;AAAA,IACA,CAAC,QAAQ,WAAW,UAAU;AAAA,EAChC;AAGA,QAAM,UAAM;AAAA,IACV,OAAO,IAAyB,OAA6B,CAAC,MAAqB;AACjF,UAAI,CAAC,QAAQ;AACX,iBAAS,aAAa,IAAI,MAAM,+BAA+B,CAAC;AAChE;AAAA,MACF;AACA,iBAAW,IAAI;AACf,eAAS,IAAI;AACb,UAAI;AACF,YAAI,KAAK,OAAQ,OAAM,cAAc;AACrC,cAAM,OAAO,MAAM,GAAG;AACtB,gBAAQ,IAAI;AAAA,MACd,SAAS,GAAG;AACV,iBAAS,CAAU;AACnB,cAAM;AAAA,MACR,UAAE;AACA,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,eAAe,SAAS;AAAA,EACnC;AAEA,QAAM,cAAU;AAAA,IACd,CAAC,UAA4B,IAAI,MAAM,OAAQ,QAAQ,KAAK,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IAC/E,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,iBAAa;AAAA,IACjB,CAAC,QAAgB,UAA+B,IAAI,MAAM,OAAQ,WAAW,QAAQ,KAAK,CAAC;AAAA,IAC3F,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,iBAAa,2BAAY,CAAC,WAAmB,IAAI,MAAM,OAAQ,WAAW,MAAM,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AACvG,QAAM,qBAAiB;AAAA,IACrB,CAAC,UAA+B,IAAI,MAAM,OAAQ,eAAe,KAAK,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IACzF,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,oBAAgB,2BAAY,MAAM,IAAI,MAAM,OAAQ,cAAc,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AACzF,QAAM,oBAAgB;AAAA,IACpB,CAAC,SAAiB,IAAI,MAAM,OAAQ,cAAc,IAAI,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IACzE,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,qBAAiB,2BAAY,MAAM,IAAI,MAAM,OAAQ,eAAe,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AAC3F,QAAM,cAAU,2BAAY,YAAY;AACtC,QAAI,CAAC,QAAQ,cAAe;AAC5B,UAAM,IAAI,aAAa,MAAM,OAAO,IAAI,GAAG,IAAI;AAAA,EACjD,GAAG,CAAC,QAAQ,GAAG,CAAC;AAEhB,QAAM,eAAW;AAAA,IACf,OAAO,UAA0D;AAC/D,UAAI,CAAC,OAAQ,OAAM,aAAa,IAAI,MAAM,+BAA+B;AACzE,iBAAW,IAAI;AACf,eAAS,IAAI;AACb,UAAI;AACF,cAAM,cAAc;AACpB,eAAO,MAAM,OAAO,SAAS,KAAK;AAAA,MACpC,SAAS,GAAG;AACV,iBAAS,CAAU;AACnB,cAAM;AAAA,MACR,UAAE;AACA,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,eAAe,SAAS;AAAA,EACnC;AAEA,QAAM,YAAQ,2BAAY,MAAM;AAC9B,gBAAY,YAAY,IAAI;AAC5B,YAAQ,OAAO,EAAE;AACjB,qBAAiB,IAAI;AACrB,YAAQ,IAAI;AACZ,aAAS,IAAI;AAAA,EACf,GAAG,CAAC,QAAQ,UAAU,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["import_react","import_react","import_react","import_jsx_runtime","DEFAULT_BASE_URL","import_react"]}

package/dist/index.d.cts

@@ -1,5 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { CSSProperties, RefObject } from 'react';
+import { Cart, AddLineItemInput, UpdateLineItemInput, SelectShippingInput, CheckoutHandoffInput, CheckoutHandoff } from '@usethrottle/cart';
 
 /**
  * Envelope every Throttle iframe message carries. Lets parents
@@ -177,4 +178,59 @@ interface UseThrottleEventsOptions {
  */
 declare function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions): void;
 
-export { CheckoutEmbed, type CheckoutEmbedExtraProps, PaymentEmbed, type RecurringIntent, CheckoutEmbed as ThrottleCheckout, type ThrottleEmbedProps, type ThrottleEnvelope, type ThrottleEvent, type ThrottleMessage, type ThrottleParentCommand, type ThrottleParentEnvelope, type ThrottleParentMessage, useThrottleEvents };
+interface UseCartSessionOptions {
+    /** Application UUID. */
+    applicationId: string;
+    /** Workspace environment UUID the publishable token was minted for. */
+    environmentId: string;
+    /** Publishable storefront quote token (`pk_…`). */
+    quoteToken: string;
+    baseUrl?: string;
+    /**
+     * localStorage key for persisting the session id across page loads. Default
+     * `'throttle.cartSessionId'`. Pass `null` to disable persistence (in-memory
+     * only).
+     */
+    storageKey?: string | null;
+}
+interface UseCartSessionResult {
+    /** Current cart snapshot, or null before the first item / resume. */
+    cart: Cart | null;
+    /** Current opaque session id, or null before the first item. */
+    cartSessionId: string | null;
+    /** True while a request is in flight. */
+    loading: boolean;
+    /** Last error, or null. */
+    error: Error | null;
+    addItem: (input: AddLineItemInput) => Promise<void>;
+    updateItem: (itemId: string, input: UpdateLineItemInput) => Promise<void>;
+    removeItem: (itemId: string) => Promise<void>;
+    selectShipping: (input: SelectShippingInput) => Promise<void>;
+    clearShipping: () => Promise<void>;
+    applyDiscount: (code: string) => Promise<void>;
+    removeDiscount: () => Promise<void>;
+    /** Hand off to checkout. Returns the hand-off (redirect the buyer to `checkoutUrl`). */
+    checkout: (input: CheckoutHandoffInput) => Promise<CheckoutHandoff>;
+    /** Re-fetch the current cart. */
+    refresh: () => Promise<void>;
+    /** Forget the current session (a new cart is created on the next item). */
+    reset: () => void;
+}
+/**
+ * React hook for backend-less cart ownership. Wraps {@link CartSessionClient}:
+ * creates the Throttle cart lazily on the first `addItem` (so empty carts
+ * aren't created on every page load), persists the session id to localStorage,
+ * and resumes it on the next visit. Mutations update reactive `cart` state.
+ *
+ * ```tsx
+ * const cart = useCartSession({ applicationId, environmentId, quoteToken });
+ * <button onClick={() => cart.addItem({ name: 'Widget', unitPrice: 2999, quantity: 1 })}>Add</button>
+ * <button onClick={async () => {
+ *   const { checkoutUrl } = await cart.checkout({ returnUrl, cancelUrl });
+ *   window.location.href = checkoutUrl;
+ * }}>Checkout</button>
+ * ```
+ */
+declare function useCartSession(options: UseCartSessionOptions): UseCartSessionResult;
+
+export { CheckoutEmbed, type CheckoutEmbedExtraProps, PaymentEmbed, type RecurringIntent, CheckoutEmbed as ThrottleCheckout, type ThrottleEmbedProps, type ThrottleEnvelope, type ThrottleEvent, type ThrottleMessage, type ThrottleParentCommand, type ThrottleParentEnvelope, type ThrottleParentMessage, type UseCartSessionOptions, type UseCartSessionResult, useCartSession, useThrottleEvents };

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { CSSProperties, RefObject } from 'react';
+import { Cart, AddLineItemInput, UpdateLineItemInput, SelectShippingInput, CheckoutHandoffInput, CheckoutHandoff } from '@usethrottle/cart';
 
 /**
  * Envelope every Throttle iframe message carries. Lets parents
@@ -177,4 +178,59 @@ interface UseThrottleEventsOptions {
  */
 declare function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions): void;
 
-export { CheckoutEmbed, type CheckoutEmbedExtraProps, PaymentEmbed, type RecurringIntent, CheckoutEmbed as ThrottleCheckout, type ThrottleEmbedProps, type ThrottleEnvelope, type ThrottleEvent, type ThrottleMessage, type ThrottleParentCommand, type ThrottleParentEnvelope, type ThrottleParentMessage, useThrottleEvents };
+interface UseCartSessionOptions {
+    /** Application UUID. */
+    applicationId: string;
+    /** Workspace environment UUID the publishable token was minted for. */
+    environmentId: string;
+    /** Publishable storefront quote token (`pk_…`). */
+    quoteToken: string;
+    baseUrl?: string;
+    /**
+     * localStorage key for persisting the session id across page loads. Default
+     * `'throttle.cartSessionId'`. Pass `null` to disable persistence (in-memory
+     * only).
+     */
+    storageKey?: string | null;
+}
+interface UseCartSessionResult {
+    /** Current cart snapshot, or null before the first item / resume. */
+    cart: Cart | null;
+    /** Current opaque session id, or null before the first item. */
+    cartSessionId: string | null;
+    /** True while a request is in flight. */
+    loading: boolean;
+    /** Last error, or null. */
+    error: Error | null;
+    addItem: (input: AddLineItemInput) => Promise<void>;
+    updateItem: (itemId: string, input: UpdateLineItemInput) => Promise<void>;
+    removeItem: (itemId: string) => Promise<void>;
+    selectShipping: (input: SelectShippingInput) => Promise<void>;
+    clearShipping: () => Promise<void>;
+    applyDiscount: (code: string) => Promise<void>;
+    removeDiscount: () => Promise<void>;
+    /** Hand off to checkout. Returns the hand-off (redirect the buyer to `checkoutUrl`). */
+    checkout: (input: CheckoutHandoffInput) => Promise<CheckoutHandoff>;
+    /** Re-fetch the current cart. */
+    refresh: () => Promise<void>;
+    /** Forget the current session (a new cart is created on the next item). */
+    reset: () => void;
+}
+/**
+ * React hook for backend-less cart ownership. Wraps {@link CartSessionClient}:
+ * creates the Throttle cart lazily on the first `addItem` (so empty carts
+ * aren't created on every page load), persists the session id to localStorage,
+ * and resumes it on the next visit. Mutations update reactive `cart` state.
+ *
+ * ```tsx
+ * const cart = useCartSession({ applicationId, environmentId, quoteToken });
+ * <button onClick={() => cart.addItem({ name: 'Widget', unitPrice: 2999, quantity: 1 })}>Add</button>
+ * <button onClick={async () => {
+ *   const { checkoutUrl } = await cart.checkout({ returnUrl, cancelUrl });
+ *   window.location.href = checkoutUrl;
+ * }}>Checkout</button>
+ * ```
+ */
+declare function useCartSession(options: UseCartSessionOptions): UseCartSessionResult;
+
+export { CheckoutEmbed, type CheckoutEmbedExtraProps, PaymentEmbed, type RecurringIntent, CheckoutEmbed as ThrottleCheckout, type ThrottleEmbedProps, type ThrottleEnvelope, type ThrottleEvent, type ThrottleMessage, type ThrottleParentCommand, type ThrottleParentEnvelope, type ThrottleParentMessage, type UseCartSessionOptions, type UseCartSessionResult, useCartSession, useThrottleEvents };

package/dist/index.js

@@ -203,10 +203,174 @@ function PaymentEmbed({
     }
   );
 }
+
+// src/useCartSession.tsx
+import { useCallback as useCallback3, useEffect as useEffect3, useMemo, useState as useState4 } from "react";
+import {
+  CartSessionClient
+} from "@usethrottle/cart";
+var DEFAULT_STORAGE_KEY = "throttle.cartSessionId";
+function readStored(key) {
+  if (!key || typeof window === "undefined") return null;
+  try {
+    return window.localStorage.getItem(key);
+  } catch {
+    return null;
+  }
+}
+function writeStored(key, value) {
+  if (!key || typeof window === "undefined") return;
+  try {
+    if (value === null) window.localStorage.removeItem(key);
+    else window.localStorage.setItem(key, value);
+  } catch {
+  }
+}
+function useCartSession(options) {
+  const { applicationId, environmentId, quoteToken, baseUrl } = options;
+  const storageKey = options.storageKey === void 0 ? DEFAULT_STORAGE_KEY : options.storageKey;
+  const [cart, setCart] = useState4(null);
+  const [cartSessionId, setCartSessionId] = useState4(null);
+  const [loading, setLoading] = useState4(false);
+  const [error, setError] = useState4(null);
+  const { client, initError } = useMemo(() => {
+    try {
+      return {
+        client: new CartSessionClient({ applicationId, environmentId, quoteToken, baseUrl }),
+        initError: null
+      };
+    } catch (e) {
+      return { client: null, initError: e };
+    }
+  }, [applicationId, environmentId, quoteToken, baseUrl]);
+  useEffect3(() => {
+    if (initError) setError(initError);
+  }, [initError]);
+  useEffect3(() => {
+    if (!client) return;
+    const saved = readStored(storageKey);
+    if (!saved) return;
+    let cancelled = false;
+    client.resume(saved);
+    setCartSessionId(saved);
+    setLoading(true);
+    client.get().then((s) => {
+      if (cancelled) return;
+      setCart(s.cart);
+    }).catch(() => {
+      if (cancelled) return;
+      writeStored(storageKey, null);
+      client.resume("");
+      setCartSessionId(null);
+      setCart(null);
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [client, storageKey]);
+  const ensureSession = useCallback3(
+    async (input) => {
+      if (!client) throw initError ?? new Error("CartSessionClient unavailable");
+      if (client.cartSessionId) return;
+      const session = await client.create(input ?? {});
+      writeStored(storageKey, session.cartSessionId);
+      setCartSessionId(session.cartSessionId);
+      setCart(session.cart);
+    },
+    [client, initError, storageKey]
+  );
+  const run = useCallback3(
+    async (fn, opts = {}) => {
+      if (!client) {
+        setError(initError ?? new Error("CartSessionClient unavailable"));
+        return;
+      }
+      setLoading(true);
+      setError(null);
+      try {
+        if (opts.create) await ensureSession();
+        const next = await fn();
+        setCart(next);
+      } catch (e) {
+        setError(e);
+        throw e;
+      } finally {
+        setLoading(false);
+      }
+    },
+    [client, ensureSession, initError]
+  );
+  const addItem = useCallback3(
+    (input) => run(() => client.addItem(input), { create: true }),
+    [client, run]
+  );
+  const updateItem = useCallback3(
+    (itemId, input) => run(() => client.updateItem(itemId, input)),
+    [client, run]
+  );
+  const removeItem = useCallback3((itemId) => run(() => client.removeItem(itemId)), [client, run]);
+  const selectShipping = useCallback3(
+    (input) => run(() => client.selectShipping(input), { create: true }),
+    [client, run]
+  );
+  const clearShipping = useCallback3(() => run(() => client.clearShipping()), [client, run]);
+  const applyDiscount = useCallback3(
+    (code) => run(() => client.applyDiscount(code), { create: true }),
+    [client, run]
+  );
+  const removeDiscount = useCallback3(() => run(() => client.removeDiscount()), [client, run]);
+  const refresh = useCallback3(async () => {
+    if (!client?.cartSessionId) return;
+    await run(async () => (await client.get()).cart);
+  }, [client, run]);
+  const checkout = useCallback3(
+    async (input) => {
+      if (!client) throw initError ?? new Error("CartSessionClient unavailable");
+      setLoading(true);
+      setError(null);
+      try {
+        await ensureSession();
+        return await client.checkout(input);
+      } catch (e) {
+        setError(e);
+        throw e;
+      } finally {
+        setLoading(false);
+      }
+    },
+    [client, ensureSession, initError]
+  );
+  const reset = useCallback3(() => {
+    writeStored(storageKey, null);
+    client?.resume("");
+    setCartSessionId(null);
+    setCart(null);
+    setError(null);
+  }, [client, storageKey]);
+  return {
+    cart,
+    cartSessionId,
+    loading,
+    error,
+    addItem,
+    updateItem,
+    removeItem,
+    selectShipping,
+    clearShipping,
+    applyDiscount,
+    removeDiscount,
+    checkout,
+    refresh,
+    reset
+  };
+}
 export {
   CheckoutEmbed,
   PaymentEmbed,
   CheckoutEmbed as ThrottleCheckout,
+  useCartSession,
   useThrottleEvents
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/CheckoutEmbed.tsx","../src/useThrottleEvents.ts","../src/useParentCommands.ts","../src/PaymentEmbed.tsx"],"sourcesContent":["import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type {\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  ThrottleMessage,\n} from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Full-checkout iframe embed. Renders the entire Throttle hosted\n * checkout (address / shipping / payment) inside an iframe and\n * surfaces lifecycle + terminal events through callbacks. The\n * iframe auto-resizes on `throttle.resize` events.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list\n * (`throttle embed-config set --origins ...`). Mismatches render\n * an in-iframe \"Embed not authorized\" panel.\n */\nexport function CheckoutEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 600,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n  onStepChanged,\n}: ThrottleEmbedProps & CheckoutEmbedExtraProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.step.changed':\n          onStepChanged?.({ step: msg.step });\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled, onStepChanged],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'checkout-full', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle checkout\"\n    />\n  );\n}\n","import { useEffect, type RefObject } from 'react';\nimport type { ThrottleMessage } from './types.js';\n\nexport interface UseThrottleEventsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /**\n   * The Throttle origin (e.g. https://checkout.usethrottle.dev).\n   * Strict-equals check against `MessageEvent.origin`. Anything else\n   * is silently dropped.\n   */\n  expectedOrigin: string;\n  onMessage: (msg: ThrottleMessage) => void;\n}\n\n/**\n * Subscribe to validated postMessage events from a Throttle iframe.\n *\n * Validation:\n *  - event.origin === expectedOrigin (strict string match)\n *  - event.source === iframeRef.current.contentWindow (defends against\n *    other iframes on the same origin spoofing events)\n *  - event.data.source === 'throttle' && event.data.version === 1\n *  - event.data.type starts with 'throttle.'\n *\n * Anything failing validation is silently dropped — the parent page\n * may receive postMessages from analytics SDKs, browser extensions,\n * other iframes, etc. We must never throw on those.\n */\nexport function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions) {\n  useEffect(() => {\n    function handle(ev: MessageEvent) {\n      if (ev.origin !== expectedOrigin) return;\n      if (iframeRef.current && ev.source !== iframeRef.current.contentWindow) return;\n      const data = ev.data as Partial<ThrottleMessage> | null | undefined;\n      if (!data || typeof data !== 'object') return;\n      if (data.source !== 'throttle' || data.version !== 1) return;\n      if (typeof data.type !== 'string' || !data.type.startsWith('throttle.')) return;\n      onMessage(data as ThrottleMessage);\n    }\n    window.addEventListener('message', handle);\n    return () => window.removeEventListener('message', handle);\n  }, [iframeRef, expectedOrigin, onMessage]);\n}\n","import { useEffect, useState, type RefObject } from 'react';\nimport type { ThrottleParentMessage } from './types.js';\n\ninterface UseParentCommandsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /** The Throttle origin to address messages to. */\n  targetOrigin: string;\n  /**\n   * The current value of `submitDisabled` from the embed props. Posts a\n   * `set-submit-disabled` parent command whenever it changes — and once\n   * after the iframe reports `throttle.ready` so the iframe sees the\n   * intent even if it boots after the prop is already set.\n   *\n   * `undefined` means the parent never explicitly enabled/disabled — we\n   * never post in that case. Backward-compat with embeds that don't\n   * pass the prop.\n   */\n  submitDisabled?: boolean;\n  /**\n   * Set to `true` once the iframe posts `throttle.ready`. Until then,\n   * commands are buffered (we still try to post but the iframe may not\n   * have its listener attached yet — and we re-post on ready as a\n   * belt-and-braces guard).\n   */\n  iframeReady: boolean;\n}\n\n/**\n * Post parent → iframe commands when controlled props change. v1.2 adds\n * `set-submit-disabled`; future commands extend the same channel.\n *\n * postMessage is fire-and-forget — we don't wait for an ack from the\n * iframe. The iframe's listener is idempotent (setting the same value\n * twice is a no-op).\n */\nexport function useParentCommands({\n  iframeRef,\n  targetOrigin,\n  submitDisabled,\n  iframeReady,\n}: UseParentCommandsOptions) {\n  const [lastSent, setLastSent] = useState<boolean | undefined>(undefined);\n\n  // Post when the prop value changes OR when the iframe transitions to\n  // ready (so the first state lands).\n  useEffect(() => {\n    if (submitDisabled === undefined) return;\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    // Skip if we already sent this value AND the iframe was already ready\n    // — avoids spam on unrelated re-renders.\n    if (lastSent === submitDisabled && iframeReady) return;\n    if (!iframeReady) return; // Defer until ready\n\n    const message: ThrottleParentMessage = {\n      source: 'throttle-parent',\n      version: 1,\n      type: 'set-submit-disabled',\n      disabled: submitDisabled,\n    };\n    win.postMessage(message, targetOrigin);\n    setLastSent(submitDisabled);\n  }, [iframeRef, targetOrigin, submitDisabled, iframeReady, lastSent]);\n}\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type { ThrottleEmbedProps, ThrottleMessage } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Payment-only iframe embed. Renders just the Gr4vy provider iframe\n * (no address / shipping / cart UI). Email is collected by the Gr4vy\n * iframe in proxy-mode sessions. Used when the merchant has built\n * their own checkout UI and only needs Throttle to handle payment\n * authorization + capture.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list.\n * The iframe auto-resizes on `throttle.resize` events.\n */\nexport function PaymentEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 480,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n}: ThrottleEmbedProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'payment-only', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle payment\"\n    />\n  );\n}\n"],"mappings":";AAAA,SAAS,aAAa,QAAQ,YAAAA,iBAAgB;;;ACA9C,SAAS,iBAAiC;AA4BnC,SAAS,kBAAkB,EAAE,WAAW,gBAAgB,UAAU,GAA6B;AACpG,YAAU,MAAM;AACd,aAAS,OAAO,IAAkB;AAChC,UAAI,GAAG,WAAW,eAAgB;AAClC,UAAI,UAAU,WAAW,GAAG,WAAW,UAAU,QAAQ,cAAe;AACxE,YAAM,OAAO,GAAG;AAChB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAI,KAAK,WAAW,cAAc,KAAK,YAAY,EAAG;AACtD,UAAI,OAAO,KAAK,SAAS,YAAY,CAAC,KAAK,KAAK,WAAW,WAAW,EAAG;AACzE,gBAAU,IAAuB;AAAA,IACnC;AACA,WAAO,iBAAiB,WAAW,MAAM;AACzC,WAAO,MAAM,OAAO,oBAAoB,WAAW,MAAM;AAAA,EAC3D,GAAG,CAAC,WAAW,gBAAgB,SAAS,CAAC;AAC3C;;;AC1CA,SAAS,aAAAC,YAAW,gBAAgC;AAmC7C,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6B;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,MAAS;AAIvE,EAAAA,WAAU,MAAM;AACd,QAAI,mBAAmB,OAAW;AAClC,UAAM,MAAM,UAAU,SAAS;AAC/B,QAAI,CAAC,IAAK;AAGV,QAAI,aAAa,kBAAkB,YAAa;AAChD,QAAI,CAAC,YAAa;AAElB,UAAM,UAAiC;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,IACZ;AACA,QAAI,YAAY,SAAS,YAAY;AACrC,gBAAY,cAAc;AAAA,EAC5B,GAAG,CAAC,WAAW,cAAc,gBAAgB,aAAa,QAAQ,CAAC;AACrE;;;AF4BI;AAlFJ,IAAM,mBAAmB;AAYlB,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAiD;AAC/C,QAAM,YAAY,OAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,IAAIC,UAAS,KAAK;AAEpD,QAAM,WAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,0BAAgB,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,YAAY,aAAa;AAAA,EAC1E;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,iBAAiB,aAAa,CAAC;AACtF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AGpGA,SAAS,eAAAC,cAAa,UAAAC,SAAQ,YAAAC,iBAAgB;AAmF1C,gBAAAC,YAAA;AA9EJ,IAAMC,oBAAmB;AAYlB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,UAAUA;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuB;AACrB,QAAM,YAAYC,QAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,IAAIC,UAAS,KAAK;AAEpD,QAAM,WAAWC;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,UAAU;AAAA,EAC3D;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,gBAAgB,aAAa,CAAC;AACrF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE,gBAAAJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;","names":["useState","useEffect","useState","useCallback","useRef","useState","jsx","DEFAULT_BASE_URL","useRef","useState","useCallback"]}
+{"version":3,"sources":["../src/CheckoutEmbed.tsx","../src/useThrottleEvents.ts","../src/useParentCommands.ts","../src/PaymentEmbed.tsx","../src/useCartSession.tsx"],"sourcesContent":["import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type {\n  ThrottleEmbedProps,\n  CheckoutEmbedExtraProps,\n  ThrottleMessage,\n} from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Full-checkout iframe embed. Renders the entire Throttle hosted\n * checkout (address / shipping / payment) inside an iframe and\n * surfaces lifecycle + terminal events through callbacks. The\n * iframe auto-resizes on `throttle.resize` events.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list\n * (`throttle embed-config set --origins ...`). Mismatches render\n * an in-iframe \"Embed not authorized\" panel.\n */\nexport function CheckoutEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 600,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n  onStepChanged,\n}: ThrottleEmbedProps & CheckoutEmbedExtraProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.step.changed':\n          onStepChanged?.({ step: msg.step });\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled, onStepChanged],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'checkout-full', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle checkout\"\n    />\n  );\n}\n","import { useEffect, type RefObject } from 'react';\nimport type { ThrottleMessage } from './types.js';\n\nexport interface UseThrottleEventsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /**\n   * The Throttle origin (e.g. https://checkout.usethrottle.dev).\n   * Strict-equals check against `MessageEvent.origin`. Anything else\n   * is silently dropped.\n   */\n  expectedOrigin: string;\n  onMessage: (msg: ThrottleMessage) => void;\n}\n\n/**\n * Subscribe to validated postMessage events from a Throttle iframe.\n *\n * Validation:\n *  - event.origin === expectedOrigin (strict string match)\n *  - event.source === iframeRef.current.contentWindow (defends against\n *    other iframes on the same origin spoofing events)\n *  - event.data.source === 'throttle' && event.data.version === 1\n *  - event.data.type starts with 'throttle.'\n *\n * Anything failing validation is silently dropped — the parent page\n * may receive postMessages from analytics SDKs, browser extensions,\n * other iframes, etc. We must never throw on those.\n */\nexport function useThrottleEvents({ iframeRef, expectedOrigin, onMessage }: UseThrottleEventsOptions) {\n  useEffect(() => {\n    function handle(ev: MessageEvent) {\n      if (ev.origin !== expectedOrigin) return;\n      if (iframeRef.current && ev.source !== iframeRef.current.contentWindow) return;\n      const data = ev.data as Partial<ThrottleMessage> | null | undefined;\n      if (!data || typeof data !== 'object') return;\n      if (data.source !== 'throttle' || data.version !== 1) return;\n      if (typeof data.type !== 'string' || !data.type.startsWith('throttle.')) return;\n      onMessage(data as ThrottleMessage);\n    }\n    window.addEventListener('message', handle);\n    return () => window.removeEventListener('message', handle);\n  }, [iframeRef, expectedOrigin, onMessage]);\n}\n","import { useEffect, useState, type RefObject } from 'react';\nimport type { ThrottleParentMessage } from './types.js';\n\ninterface UseParentCommandsOptions {\n  iframeRef: RefObject<HTMLIFrameElement | null>;\n  /** The Throttle origin to address messages to. */\n  targetOrigin: string;\n  /**\n   * The current value of `submitDisabled` from the embed props. Posts a\n   * `set-submit-disabled` parent command whenever it changes — and once\n   * after the iframe reports `throttle.ready` so the iframe sees the\n   * intent even if it boots after the prop is already set.\n   *\n   * `undefined` means the parent never explicitly enabled/disabled — we\n   * never post in that case. Backward-compat with embeds that don't\n   * pass the prop.\n   */\n  submitDisabled?: boolean;\n  /**\n   * Set to `true` once the iframe posts `throttle.ready`. Until then,\n   * commands are buffered (we still try to post but the iframe may not\n   * have its listener attached yet — and we re-post on ready as a\n   * belt-and-braces guard).\n   */\n  iframeReady: boolean;\n}\n\n/**\n * Post parent → iframe commands when controlled props change. v1.2 adds\n * `set-submit-disabled`; future commands extend the same channel.\n *\n * postMessage is fire-and-forget — we don't wait for an ack from the\n * iframe. The iframe's listener is idempotent (setting the same value\n * twice is a no-op).\n */\nexport function useParentCommands({\n  iframeRef,\n  targetOrigin,\n  submitDisabled,\n  iframeReady,\n}: UseParentCommandsOptions) {\n  const [lastSent, setLastSent] = useState<boolean | undefined>(undefined);\n\n  // Post when the prop value changes OR when the iframe transitions to\n  // ready (so the first state lands).\n  useEffect(() => {\n    if (submitDisabled === undefined) return;\n    const win = iframeRef.current?.contentWindow;\n    if (!win) return;\n    // Skip if we already sent this value AND the iframe was already ready\n    // — avoids spam on unrelated re-renders.\n    if (lastSent === submitDisabled && iframeReady) return;\n    if (!iframeReady) return; // Defer until ready\n\n    const message: ThrottleParentMessage = {\n      source: 'throttle-parent',\n      version: 1,\n      type: 'set-submit-disabled',\n      disabled: submitDisabled,\n    };\n    win.postMessage(message, targetOrigin);\n    setLastSent(submitDisabled);\n  }, [iframeRef, targetOrigin, submitDisabled, iframeReady, lastSent]);\n}\n","import { useCallback, useRef, useState } from 'react';\nimport { useThrottleEvents } from './useThrottleEvents.js';\nimport { useParentCommands } from './useParentCommands.js';\nimport type { ThrottleEmbedProps, ThrottleMessage } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://checkout.usethrottle.dev';\n\n/**\n * Payment-only iframe embed. Renders just the Gr4vy provider iframe\n * (no address / shipping / cart UI). Email is collected by the Gr4vy\n * iframe in proxy-mode sessions. Used when the merchant has built\n * their own checkout UI and only needs Throttle to handle payment\n * authorization + capture.\n *\n * `parentOrigin` must match an entry in the merchant's allow-list.\n * The iframe auto-resizes on `throttle.resize` events.\n */\nexport function PaymentEmbed({\n  sessionId,\n  parentOrigin,\n  baseUrl = DEFAULT_BASE_URL,\n  primary,\n  logo,\n  initialHeight = 480,\n  className,\n  style,\n  submitDisabled,\n  onReady,\n  onProcessing,\n  onSucceeded,\n  onFailed,\n  onCanceled,\n}: ThrottleEmbedProps) {\n  const iframeRef = useRef<HTMLIFrameElement>(null);\n  const expectedOrigin = new URL(baseUrl).origin;\n  const [iframeReady, setIframeReady] = useState(false);\n\n  const dispatch = useCallback(\n    (msg: ThrottleMessage) => {\n      switch (msg.type) {\n        case 'throttle.ready':\n          setIframeReady(true);\n          onReady?.();\n          break;\n        case 'throttle.processing':\n          onProcessing?.();\n          break;\n        case 'throttle.completed':\n          onSucceeded?.({\n            orderId: msg.orderId,\n            paymentId: msg.paymentId,\n            ...(msg.subscriptionId !== undefined ? { subscriptionId: msg.subscriptionId } : {}),\n          });\n          break;\n        case 'throttle.error':\n          onFailed?.({ code: msg.code, message: msg.message });\n          break;\n        case 'throttle.cancelled':\n          onCanceled?.();\n          break;\n        case 'throttle.resize':\n          if (iframeRef.current) iframeRef.current.style.height = `${msg.height}px`;\n          break;\n      }\n    },\n    [onReady, onProcessing, onSucceeded, onFailed, onCanceled],\n  );\n\n  useThrottleEvents({ iframeRef, expectedOrigin, onMessage: dispatch });\n  useParentCommands({\n    iframeRef,\n    targetOrigin: expectedOrigin,\n    submitDisabled,\n    iframeReady,\n  });\n\n  const params = new URLSearchParams({ embed: '1', mode: 'payment-only', parentOrigin });\n  if (primary) params.set('primary', primary);\n  if (logo) params.set('logo', logo);\n  const cleanBase = baseUrl.replace(/\\/$/, '');\n  const src = `${cleanBase}/c/${encodeURIComponent(sessionId)}?${params.toString()}`;\n\n  return (\n    <iframe\n      ref={iframeRef}\n      src={src}\n      className={className}\n      style={{ border: 0, width: '100%', minHeight: initialHeight, ...style }}\n      allow=\"payment *\"\n      title=\"Throttle payment\"\n    />\n  );\n}\n","import { useCallback, useEffect, useMemo, useState } from 'react';\nimport {\n  CartSessionClient,\n  type Cart,\n  type AddLineItemInput,\n  type UpdateLineItemInput,\n  type SelectShippingInput,\n  type CreateCartSessionInput,\n  type CheckoutHandoffInput,\n  type CheckoutHandoff,\n} from '@usethrottle/cart';\n\nconst DEFAULT_STORAGE_KEY = 'throttle.cartSessionId';\n\nexport interface UseCartSessionOptions {\n  /** Application UUID. */\n  applicationId: string;\n  /** Workspace environment UUID the publishable token was minted for. */\n  environmentId: string;\n  /** Publishable storefront quote token (`pk_…`). */\n  quoteToken: string;\n  baseUrl?: string;\n  /**\n   * localStorage key for persisting the session id across page loads. Default\n   * `'throttle.cartSessionId'`. Pass `null` to disable persistence (in-memory\n   * only).\n   */\n  storageKey?: string | null;\n}\n\nexport interface UseCartSessionResult {\n  /** Current cart snapshot, or null before the first item / resume. */\n  cart: Cart | null;\n  /** Current opaque session id, or null before the first item. */\n  cartSessionId: string | null;\n  /** True while a request is in flight. */\n  loading: boolean;\n  /** Last error, or null. */\n  error: Error | null;\n  addItem: (input: AddLineItemInput) => Promise<void>;\n  updateItem: (itemId: string, input: UpdateLineItemInput) => Promise<void>;\n  removeItem: (itemId: string) => Promise<void>;\n  selectShipping: (input: SelectShippingInput) => Promise<void>;\n  clearShipping: () => Promise<void>;\n  applyDiscount: (code: string) => Promise<void>;\n  removeDiscount: () => Promise<void>;\n  /** Hand off to checkout. Returns the hand-off (redirect the buyer to `checkoutUrl`). */\n  checkout: (input: CheckoutHandoffInput) => Promise<CheckoutHandoff>;\n  /** Re-fetch the current cart. */\n  refresh: () => Promise<void>;\n  /** Forget the current session (a new cart is created on the next item). */\n  reset: () => void;\n}\n\nfunction readStored(key: string | null | undefined): string | null {\n  if (!key || typeof window === 'undefined') return null;\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeStored(key: string | null | undefined, value: string | null): void {\n  if (!key || typeof window === 'undefined') return;\n  try {\n    if (value === null) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, value);\n  } catch {\n    /* ignore quota / privacy-mode errors */\n  }\n}\n\n/**\n * React hook for backend-less cart ownership. Wraps {@link CartSessionClient}:\n * creates the Throttle cart lazily on the first `addItem` (so empty carts\n * aren't created on every page load), persists the session id to localStorage,\n * and resumes it on the next visit. Mutations update reactive `cart` state.\n *\n * ```tsx\n * const cart = useCartSession({ applicationId, environmentId, quoteToken });\n * <button onClick={() => cart.addItem({ name: 'Widget', unitPrice: 2999, quantity: 1 })}>Add</button>\n * <button onClick={async () => {\n *   const { checkoutUrl } = await cart.checkout({ returnUrl, cancelUrl });\n *   window.location.href = checkoutUrl;\n * }}>Checkout</button>\n * ```\n */\nexport function useCartSession(options: UseCartSessionOptions): UseCartSessionResult {\n  const { applicationId, environmentId, quoteToken, baseUrl } = options;\n  const storageKey = options.storageKey === undefined ? DEFAULT_STORAGE_KEY : options.storageKey;\n\n  const [cart, setCart] = useState<Cart | null>(null);\n  const [cartSessionId, setCartSessionId] = useState<string | null>(null);\n  const [loading, setLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  // Stable client across renders for a given config; construction validates the\n  // token, so capture any constructor error instead of throwing during render.\n  const { client, initError } = useMemo(() => {\n    try {\n      return {\n        client: new CartSessionClient({ applicationId, environmentId, quoteToken, baseUrl }),\n        initError: null as Error | null,\n      };\n    } catch (e) {\n      return { client: null as CartSessionClient | null, initError: e as Error };\n    }\n  }, [applicationId, environmentId, quoteToken, baseUrl]);\n\n  useEffect(() => {\n    if (initError) setError(initError);\n  }, [initError]);\n\n  // Resume a persisted session on mount (and whenever the client identity changes).\n  useEffect(() => {\n    if (!client) return;\n    const saved = readStored(storageKey);\n    if (!saved) return;\n    let cancelled = false;\n    client.resume(saved);\n    setCartSessionId(saved);\n    setLoading(true);\n    client\n      .get()\n      .then((s) => {\n        if (cancelled) return;\n        setCart(s.cart);\n      })\n      .catch(() => {\n        // Expired / unknown / origin-rejected → drop the stale id and start fresh.\n        if (cancelled) return;\n        writeStored(storageKey, null);\n        client.resume('');\n        setCartSessionId(null);\n        setCart(null);\n      })\n      .finally(() => {\n        if (!cancelled) setLoading(false);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [client, storageKey]);\n\n  const ensureSession = useCallback(\n    async (input?: CreateCartSessionInput): Promise<void> => {\n      if (!client) throw initError ?? new Error('CartSessionClient unavailable');\n      if (client.cartSessionId) return;\n      const session = await client.create(input ?? {});\n      writeStored(storageKey, session.cartSessionId);\n      setCartSessionId(session.cartSessionId);\n      setCart(session.cart);\n    },\n    [client, initError, storageKey],\n  );\n\n  /** Run a mutation that returns the updated cart, managing loading/error + creating the session first. */\n  const run = useCallback(\n    async (fn: () => Promise<Cart>, opts: { create?: boolean } = {}): Promise<void> => {\n      if (!client) {\n        setError(initError ?? new Error('CartSessionClient unavailable'));\n        return;\n      }\n      setLoading(true);\n      setError(null);\n      try {\n        if (opts.create) await ensureSession();\n        const next = await fn();\n        setCart(next);\n      } catch (e) {\n        setError(e as Error);\n        throw e;\n      } finally {\n        setLoading(false);\n      }\n    },\n    [client, ensureSession, initError],\n  );\n\n  const addItem = useCallback(\n    (input: AddLineItemInput) => run(() => client!.addItem(input), { create: true }),\n    [client, run],\n  );\n  const updateItem = useCallback(\n    (itemId: string, input: UpdateLineItemInput) => run(() => client!.updateItem(itemId, input)),\n    [client, run],\n  );\n  const removeItem = useCallback((itemId: string) => run(() => client!.removeItem(itemId)), [client, run]);\n  const selectShipping = useCallback(\n    (input: SelectShippingInput) => run(() => client!.selectShipping(input), { create: true }),\n    [client, run],\n  );\n  const clearShipping = useCallback(() => run(() => client!.clearShipping()), [client, run]);\n  const applyDiscount = useCallback(\n    (code: string) => run(() => client!.applyDiscount(code), { create: true }),\n    [client, run],\n  );\n  const removeDiscount = useCallback(() => run(() => client!.removeDiscount()), [client, run]);\n  const refresh = useCallback(async () => {\n    if (!client?.cartSessionId) return;\n    await run(async () => (await client.get()).cart);\n  }, [client, run]);\n\n  const checkout = useCallback(\n    async (input: CheckoutHandoffInput): Promise<CheckoutHandoff> => {\n      if (!client) throw initError ?? new Error('CartSessionClient unavailable');\n      setLoading(true);\n      setError(null);\n      try {\n        await ensureSession();\n        return await client.checkout(input);\n      } catch (e) {\n        setError(e as Error);\n        throw e;\n      } finally {\n        setLoading(false);\n      }\n    },\n    [client, ensureSession, initError],\n  );\n\n  const reset = useCallback(() => {\n    writeStored(storageKey, null);\n    client?.resume('');\n    setCartSessionId(null);\n    setCart(null);\n    setError(null);\n  }, [client, storageKey]);\n\n  return {\n    cart,\n    cartSessionId,\n    loading,\n    error,\n    addItem,\n    updateItem,\n    removeItem,\n    selectShipping,\n    clearShipping,\n    applyDiscount,\n    removeDiscount,\n    checkout,\n    refresh,\n    reset,\n  };\n}\n"],"mappings":";AAAA,SAAS,aAAa,QAAQ,YAAAA,iBAAgB;;;ACA9C,SAAS,iBAAiC;AA4BnC,SAAS,kBAAkB,EAAE,WAAW,gBAAgB,UAAU,GAA6B;AACpG,YAAU,MAAM;AACd,aAAS,OAAO,IAAkB;AAChC,UAAI,GAAG,WAAW,eAAgB;AAClC,UAAI,UAAU,WAAW,GAAG,WAAW,UAAU,QAAQ,cAAe;AACxE,YAAM,OAAO,GAAG;AAChB,UAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAI,KAAK,WAAW,cAAc,KAAK,YAAY,EAAG;AACtD,UAAI,OAAO,KAAK,SAAS,YAAY,CAAC,KAAK,KAAK,WAAW,WAAW,EAAG;AACzE,gBAAU,IAAuB;AAAA,IACnC;AACA,WAAO,iBAAiB,WAAW,MAAM;AACzC,WAAO,MAAM,OAAO,oBAAoB,WAAW,MAAM;AAAA,EAC3D,GAAG,CAAC,WAAW,gBAAgB,SAAS,CAAC;AAC3C;;;AC1CA,SAAS,aAAAC,YAAW,gBAAgC;AAmC7C,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6B;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,MAAS;AAIvE,EAAAA,WAAU,MAAM;AACd,QAAI,mBAAmB,OAAW;AAClC,UAAM,MAAM,UAAU,SAAS;AAC/B,QAAI,CAAC,IAAK;AAGV,QAAI,aAAa,kBAAkB,YAAa;AAChD,QAAI,CAAC,YAAa;AAElB,UAAM,UAAiC;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,UAAU;AAAA,IACZ;AACA,QAAI,YAAY,SAAS,YAAY;AACrC,gBAAY,cAAc;AAAA,EAC5B,GAAG,CAAC,WAAW,cAAc,gBAAgB,aAAa,QAAQ,CAAC;AACrE;;;AF4BI;AAlFJ,IAAM,mBAAmB;AAYlB,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAiD;AAC/C,QAAM,YAAY,OAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,IAAIC,UAAS,KAAK;AAEpD,QAAM,WAAW;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,0BAAgB,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,YAAY,aAAa;AAAA,EAC1E;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,iBAAiB,aAAa,CAAC;AACtF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AGpGA,SAAS,eAAAC,cAAa,UAAAC,SAAQ,YAAAC,iBAAgB;AAmF1C,gBAAAC,YAAA;AA9EJ,IAAMC,oBAAmB;AAYlB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,UAAUA;AAAA,EACV;AAAA,EACA;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuB;AACrB,QAAM,YAAYC,QAA0B,IAAI;AAChD,QAAM,iBAAiB,IAAI,IAAI,OAAO,EAAE;AACxC,QAAM,CAAC,aAAa,cAAc,IAAIC,UAAS,KAAK;AAEpD,QAAM,WAAWC;AAAA,IACf,CAAC,QAAyB;AACxB,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,yBAAe,IAAI;AACnB,oBAAU;AACV;AAAA,QACF,KAAK;AACH,yBAAe;AACf;AAAA,QACF,KAAK;AACH,wBAAc;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,GAAI,IAAI,mBAAmB,SAAY,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,UACnF,CAAC;AACD;AAAA,QACF,KAAK;AACH,qBAAW,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACnD;AAAA,QACF,KAAK;AACH,uBAAa;AACb;AAAA,QACF,KAAK;AACH,cAAI,UAAU,QAAS,WAAU,QAAQ,MAAM,SAAS,GAAG,IAAI,MAAM;AACrE;AAAA,MACJ;AAAA,IACF;AAAA,IACA,CAAC,SAAS,cAAc,aAAa,UAAU,UAAU;AAAA,EAC3D;AAEA,oBAAkB,EAAE,WAAW,gBAAgB,WAAW,SAAS,CAAC;AACpE,oBAAkB;AAAA,IAChB;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,gBAAgB,aAAa,CAAC;AACrF,MAAI,QAAS,QAAO,IAAI,WAAW,OAAO;AAC1C,MAAI,KAAM,QAAO,IAAI,QAAQ,IAAI;AACjC,QAAM,YAAY,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,MAAM,GAAG,SAAS,MAAM,mBAAmB,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAEhF,SACE,gBAAAJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA,OAAO,EAAE,QAAQ,GAAG,OAAO,QAAQ,WAAW,eAAe,GAAG,MAAM;AAAA,MACtE,OAAM;AAAA,MACN,OAAM;AAAA;AAAA,EACR;AAEJ;;;AC5FA,SAAS,eAAAK,cAAa,aAAAC,YAAW,SAAS,YAAAC,iBAAgB;AAC1D;AAAA,EACE;AAAA,OAQK;AAEP,IAAM,sBAAsB;AA0C5B,SAAS,WAAW,KAA+C;AACjE,MAAI,CAAC,OAAO,OAAO,WAAW,YAAa,QAAO;AAClD,MAAI;AACF,WAAO,OAAO,aAAa,QAAQ,GAAG;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,KAAgC,OAA4B;AAC/E,MAAI,CAAC,OAAO,OAAO,WAAW,YAAa;AAC3C,MAAI;AACF,QAAI,UAAU,KAAM,QAAO,aAAa,WAAW,GAAG;AAAA,QACjD,QAAO,aAAa,QAAQ,KAAK,KAAK;AAAA,EAC7C,QAAQ;AAAA,EAER;AACF;AAiBO,SAAS,eAAe,SAAsD;AACnF,QAAM,EAAE,eAAe,eAAe,YAAY,QAAQ,IAAI;AAC9D,QAAM,aAAa,QAAQ,eAAe,SAAY,sBAAsB,QAAQ;AAEpF,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAsB,IAAI;AAClD,QAAM,CAAC,eAAe,gBAAgB,IAAIA,UAAwB,IAAI;AACtE,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,KAAK;AAC5C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAIrD,QAAM,EAAE,QAAQ,UAAU,IAAI,QAAQ,MAAM;AAC1C,QAAI;AACF,aAAO;AAAA,QACL,QAAQ,IAAI,kBAAkB,EAAE,eAAe,eAAe,YAAY,QAAQ,CAAC;AAAA,QACnF,WAAW;AAAA,MACb;AAAA,IACF,SAAS,GAAG;AACV,aAAO,EAAE,QAAQ,MAAkC,WAAW,EAAW;AAAA,IAC3E;AAAA,EACF,GAAG,CAAC,eAAe,eAAe,YAAY,OAAO,CAAC;AAEtD,EAAAD,WAAU,MAAM;AACd,QAAI,UAAW,UAAS,SAAS;AAAA,EACnC,GAAG,CAAC,SAAS,CAAC;AAGd,EAAAA,WAAU,MAAM;AACd,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ,WAAW,UAAU;AACnC,QAAI,CAAC,MAAO;AACZ,QAAI,YAAY;AAChB,WAAO,OAAO,KAAK;AACnB,qBAAiB,KAAK;AACtB,eAAW,IAAI;AACf,WACG,IAAI,EACJ,KAAK,CAAC,MAAM;AACX,UAAI,UAAW;AACf,cAAQ,EAAE,IAAI;AAAA,IAChB,CAAC,EACA,MAAM,MAAM;AAEX,UAAI,UAAW;AACf,kBAAY,YAAY,IAAI;AAC5B,aAAO,OAAO,EAAE;AAChB,uBAAiB,IAAI;AACrB,cAAQ,IAAI;AAAA,IACd,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,YAAW,KAAK;AAAA,IAClC,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,CAAC;AAEvB,QAAM,gBAAgBD;AAAA,IACpB,OAAO,UAAkD;AACvD,UAAI,CAAC,OAAQ,OAAM,aAAa,IAAI,MAAM,+BAA+B;AACzE,UAAI,OAAO,cAAe;AAC1B,YAAM,UAAU,MAAM,OAAO,OAAO,SAAS,CAAC,CAAC;AAC/C,kBAAY,YAAY,QAAQ,aAAa;AAC7C,uBAAiB,QAAQ,aAAa;AACtC,cAAQ,QAAQ,IAAI;AAAA,IACtB;AAAA,IACA,CAAC,QAAQ,WAAW,UAAU;AAAA,EAChC;AAGA,QAAM,MAAMA;AAAA,IACV,OAAO,IAAyB,OAA6B,CAAC,MAAqB;AACjF,UAAI,CAAC,QAAQ;AACX,iBAAS,aAAa,IAAI,MAAM,+BAA+B,CAAC;AAChE;AAAA,MACF;AACA,iBAAW,IAAI;AACf,eAAS,IAAI;AACb,UAAI;AACF,YAAI,KAAK,OAAQ,OAAM,cAAc;AACrC,cAAM,OAAO,MAAM,GAAG;AACtB,gBAAQ,IAAI;AAAA,MACd,SAAS,GAAG;AACV,iBAAS,CAAU;AACnB,cAAM;AAAA,MACR,UAAE;AACA,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,eAAe,SAAS;AAAA,EACnC;AAEA,QAAM,UAAUA;AAAA,IACd,CAAC,UAA4B,IAAI,MAAM,OAAQ,QAAQ,KAAK,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IAC/E,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,aAAaA;AAAA,IACjB,CAAC,QAAgB,UAA+B,IAAI,MAAM,OAAQ,WAAW,QAAQ,KAAK,CAAC;AAAA,IAC3F,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,aAAaA,aAAY,CAAC,WAAmB,IAAI,MAAM,OAAQ,WAAW,MAAM,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AACvG,QAAM,iBAAiBA;AAAA,IACrB,CAAC,UAA+B,IAAI,MAAM,OAAQ,eAAe,KAAK,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IACzF,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,gBAAgBA,aAAY,MAAM,IAAI,MAAM,OAAQ,cAAc,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AACzF,QAAM,gBAAgBA;AAAA,IACpB,CAAC,SAAiB,IAAI,MAAM,OAAQ,cAAc,IAAI,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,IACzE,CAAC,QAAQ,GAAG;AAAA,EACd;AACA,QAAM,iBAAiBA,aAAY,MAAM,IAAI,MAAM,OAAQ,eAAe,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC;AAC3F,QAAM,UAAUA,aAAY,YAAY;AACtC,QAAI,CAAC,QAAQ,cAAe;AAC5B,UAAM,IAAI,aAAa,MAAM,OAAO,IAAI,GAAG,IAAI;AAAA,EACjD,GAAG,CAAC,QAAQ,GAAG,CAAC;AAEhB,QAAM,WAAWA;AAAA,IACf,OAAO,UAA0D;AAC/D,UAAI,CAAC,OAAQ,OAAM,aAAa,IAAI,MAAM,+BAA+B;AACzE,iBAAW,IAAI;AACf,eAAS,IAAI;AACb,UAAI;AACF,cAAM,cAAc;AACpB,eAAO,MAAM,OAAO,SAAS,KAAK;AAAA,MACpC,SAAS,GAAG;AACV,iBAAS,CAAU;AACnB,cAAM;AAAA,MACR,UAAE;AACA,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,eAAe,SAAS;AAAA,EACnC;AAEA,QAAM,QAAQA,aAAY,MAAM;AAC9B,gBAAY,YAAY,IAAI;AAC5B,YAAQ,OAAO,EAAE;AACjB,qBAAiB,IAAI;AACrB,YAAQ,IAAI;AACZ,aAAS,IAAI;AAAA,EACf,GAAG,CAAC,QAAQ,UAAU,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["useState","useEffect","useState","useCallback","useRef","useState","jsx","DEFAULT_BASE_URL","useRef","useState","useCallback","useCallback","useEffect","useState"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usethrottle/checkout-react",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "React component for embedded Throttle checkout",
   "type": "module",
   "main": "./dist/index.js",
@@ -34,6 +34,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "dependencies": {
+    "@usethrottle/cart": "^3.4.0"
+  },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",