@whop/elements-react-native 0.1.0

package/lib/module/core/payments/errors.js

@@ -0,0 +1,115 @@
+"use strict";
+
+// ported verbatim from frontend/apps/web/src/elements/payments/lib/errors.ts — keep in sync when the web element changes
+
+import { WhopError } from "../../api/client.js";
+/** The plan/inline charge-config refusals — CODED like the framework's lifecycle refusals
+ *  (switch on `code`, never string-match). The message carries the code prefix too because a
+ *  wire boot failure (`controller-failed`) delivers the MESSAGE alone to the handle's onError. */
+export class ChargeConfigError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'ChargeConfigError';
+  }
+}
+/** The merchant-of-record refusal. `BRANDING_NOT_MOUNTED` remains in the error-code contract for
+ *  clients compiled against 1.0.0-beta.1; the compatibility runtime only emits `BRANDING_HIDDEN`
+ *  when a mounted notice has been CSS-hidden or shrunk. */
+export class BrandingRequiredError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'BrandingRequiredError';
+  }
+}
+/** The `select` action's refusals — the same coded shape as ChargeConfigError (switch on `code`;
+ *  the message carries the code prefix because the wire rpc rail delivers the message alone). */
+export class SelectError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'SelectError';
+  }
+}
+/** The secure declared-field refusals (a secure value could not be tokenized, so the confirm
+ *  never ran) — the same coded shape as the other refusal families. */
+export class SecureFieldError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'SecureFieldError';
+  }
+}
+const tokenizationStageByCode = {
+  card_fields_not_ready: 'card_fields',
+  card_tokenizer_session_failed: 'card_tokenizer_session',
+  card_number_validation_failed: 'card_number',
+  card_number_tokenization_failed: 'card_number',
+  card_session_authorization_failed: 'card_session_authorization',
+  card_expiry_validation_failed: 'card_expiry',
+  card_expiry_tokenization_failed: 'card_expiry',
+  card_cvc_validation_failed: 'card_cvc',
+  card_cvc_tokenization_failed: 'card_cvc',
+  confirmation_token_create_failed: 'confirmation_token_create'
+};
+export class PaymentTokenizationError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.failureStage = tokenizationStageByCode[code];
+    this.buyerMessage = message;
+    this.name = 'PaymentTokenizationError';
+  }
+}
+export function paymentTokenizationFailureOf(error) {
+  if (error instanceof PaymentTokenizationError) {
+    return {
+      code: error.code,
+      failureStage: error.failureStage,
+      message: error.buyerMessage
+    };
+  }
+  const message = error instanceof Error ? error.message : '';
+  const match = /^\[([a-z_]+)\] ([\s\S]*)$/.exec(message);
+  const code = match?.[1];
+  if (!code || !Object.hasOwn(tokenizationStageByCode, code)) return undefined;
+  const typedCode = code;
+  return {
+    code: typedCode,
+    failureStage: tokenizationStageByCode[typedCode],
+    message: match[2] ?? ''
+  };
+}
+export function paymentTokenizationBuyerMessage(error, fallback) {
+  return paymentTokenizationFailureOf(error)?.message ?? (error instanceof Error && error.message ? error.message : fallback);
+}
+/** handleNextAction's posture refusal (a full_page-only step reached a document that cannot
+ *  navigate the whole tab, so nothing ran) — the same coded shape as the other refusal
+ *  families. */
+export class NextActionError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'NextActionError';
+  }
+}
+
+/** Whether a caught error is this family's refusal for `code`, wherever it was caught: the
+ *  structured `code` survives an in-process throw, and the `[CODE]` message prefix is the
+ *  family's own WIRE encoding — the rpc rail re-mints a rejection from `.message` alone, which
+ *  is the whole reason these constructors bake the code into the message. Decoding the prefix
+ *  here is reading that contract, not string-matching prose. */
+export function isNextActionRefusal(error, code) {
+  if (error?.code === code) return true;
+  const message = error instanceof Error ? error.message : '';
+  return message.startsWith(`[${code}]`);
+}
+export function apiErrorMessage(err, fallback) {
+  if (err instanceof WhopError) {
+    const body = err.body;
+    return body?.error?.message ?? `${fallback} (${err.statusCode})`;
+  }
+  return err instanceof Error ? err.message : fallback;
+}
+//# sourceMappingURL=errors.js.map

package/lib/module/core/payments/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WhopError","ChargeConfigError","Error","constructor","code","message","name","BrandingRequiredError","SelectError","SecureFieldError","tokenizationStageByCode","card_fields_not_ready","card_tokenizer_session_failed","card_number_validation_failed","card_number_tokenization_failed","card_session_authorization_failed","card_expiry_validation_failed","card_expiry_tokenization_failed","card_cvc_validation_failed","card_cvc_tokenization_failed","confirmation_token_create_failed","PaymentTokenizationError","failureStage","buyerMessage","paymentTokenizationFailureOf","error","match","exec","Object","hasOwn","undefined","typedCode","paymentTokenizationBuyerMessage","fallback","NextActionError","isNextActionRefusal","startsWith","apiErrorMessage","err","body","statusCode"],"sourceRoot":"../../../../src","sources":["core/payments/errors.ts"],"mappings":";;AAAA;;AAEA,SAASA,SAAS,QAAQ,qBAAkB;AAQ5C;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAASC,KAAK,CAAC;EAG3CC,WAAWA,CAACC,IAA2B,EAAEC,OAAe,EAAE;IACxD,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,mBAAmB;EACjC;AACF;AAIA;AACA;AACA;AACA,OAAO,MAAMC,qBAAqB,SAASL,KAAK,CAAC;EAG/CC,WAAWA,CAACC,IAA+B,EAAEC,OAAe,EAAE;IAC5D,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,uBAAuB;EACrC;AACF;AAIA;AACA;AACA,OAAO,MAAME,WAAW,SAASN,KAAK,CAAC;EAGrCC,WAAWA,CAACC,IAAqB,EAAEC,OAAe,EAAE;IAClD,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,aAAa;EAC3B;AACF;AAIA;AACA;AACA,OAAO,MAAMG,gBAAgB,SAASP,KAAK,CAAC;EAG1CC,WAAWA,CAACC,IAA0B,EAAEC,OAAe,EAAE;IACvD,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,kBAAkB;EAChC;AACF;AA6BA,MAAMI,uBAA8F,GAAG;EACrGC,qBAAqB,EAAE,aAAa;EACpCC,6BAA6B,EAAE,wBAAwB;EACvDC,6BAA6B,EAAE,aAAa;EAC5CC,+BAA+B,EAAE,aAAa;EAC9CC,iCAAiC,EAAE,4BAA4B;EAC/DC,6BAA6B,EAAE,aAAa;EAC5CC,+BAA+B,EAAE,aAAa;EAC9CC,0BAA0B,EAAE,UAAU;EACtCC,4BAA4B,EAAE,UAAU;EACxCC,gCAAgC,EAAE;AACpC,CAAC;AAED,OAAO,MAAMC,wBAAwB,SAASnB,KAAK,CAAC;EAKlDC,WAAWA,CAACC,IAAkC,EAAEC,OAAe,EAAE;IAC/D,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACkB,YAAY,GAAGZ,uBAAuB,CAACN,IAAI,CAAC;IACjD,IAAI,CAACmB,YAAY,GAAGlB,OAAO;IAC3B,IAAI,CAACC,IAAI,GAAG,0BAA0B;EACxC;AACF;AAEA,OAAO,SAASkB,4BAA4BA,CAACC,KAAc,EAA0C;EACnG,IAAIA,KAAK,YAAYJ,wBAAwB,EAAE;IAC7C,OAAO;MAAEjB,IAAI,EAAEqB,KAAK,CAACrB,IAAI;MAAEkB,YAAY,EAAEG,KAAK,CAACH,YAAY;MAAEjB,OAAO,EAAEoB,KAAK,CAACF;IAAa,CAAC;EAC5F;EACA,MAAMlB,OAAO,GAAGoB,KAAK,YAAYvB,KAAK,GAAGuB,KAAK,CAACpB,OAAO,GAAG,EAAE;EAC3D,MAAMqB,KAAK,GAAG,2BAA2B,CAACC,IAAI,CAACtB,OAAO,CAAC;EACvD,MAAMD,IAAI,GAAGsB,KAAK,GAAG,CAAC,CAAC;EACvB,IAAI,CAACtB,IAAI,IAAI,CAACwB,MAAM,CAACC,MAAM,CAACnB,uBAAuB,EAAEN,IAAI,CAAC,EAAE,OAAO0B,SAAS;EAC5E,MAAMC,SAAS,GAAG3B,IAAoC;EACtD,OAAO;IAAEA,IAAI,EAAE2B,SAAS;IAAET,YAAY,EAAEZ,uBAAuB,CAACqB,SAAS,CAAC;IAAE1B,OAAO,EAAEqB,KAAK,CAAC,CAAC,CAAC,IAAI;EAAG,CAAC;AACvG;AAEA,OAAO,SAASM,+BAA+BA,CAACP,KAAc,EAAEQ,QAAgB,EAAU;EACxF,OACET,4BAA4B,CAACC,KAAK,CAAC,EAAEpB,OAAO,KAAKoB,KAAK,YAAYvB,KAAK,IAAIuB,KAAK,CAACpB,OAAO,GAAGoB,KAAK,CAACpB,OAAO,GAAG4B,QAAQ,CAAC;AAExH;AAIA;AACA;AACA;AACA,OAAO,MAAMC,eAAe,SAAShC,KAAK,CAAC;EAGzCC,WAAWA,CAACC,IAAyB,EAAEC,OAAe,EAAE;IACtD,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,iBAAiB;EAC/B;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS6B,mBAAmBA,CAACV,KAAc,EAAErB,IAAyB,EAAW;EACtF,IAAKqB,KAAK,EAAgCrB,IAAI,KAAKA,IAAI,EAAE,OAAO,IAAI;EACpE,MAAMC,OAAO,GAAGoB,KAAK,YAAYvB,KAAK,GAAGuB,KAAK,CAACpB,OAAO,GAAG,EAAE;EAC3D,OAAOA,OAAO,CAAC+B,UAAU,CAAC,IAAIhC,IAAI,GAAG,CAAC;AACxC;AAEA,OAAO,SAASiC,eAAeA,CAACC,GAAY,EAAEL,QAAgB,EAAU;EACtE,IAAIK,GAAG,YAAYtC,SAAS,EAAE;IAC5B,MAAMuC,IAAI,GAAGD,GAAG,CAACC,IAA2D;IAC5E,OAAOA,IAAI,EAAEd,KAAK,EAAEpB,OAAO,IAAI,GAAG4B,QAAQ,KAAKK,GAAG,CAACE,UAAU,GAAG;EAClE;EACA,OAAOF,GAAG,YAAYpC,KAAK,GAAGoC,GAAG,CAACjC,OAAO,GAAG4B,QAAQ;AACtD","ignoreList":[]}

package/lib/module/core/payments/mint.js

@@ -0,0 +1,89 @@
+"use strict";
+
+// ported verbatim from frontend/apps/web/src/elements/payments/lib/mint.ts — keep in sync when the web element changes
+
+import { capturedBrowserInfo } from "./browser-info.js";
+import { PaymentTokenizationError, apiErrorMessage } from "./errors.js";
+
+/** The collected bag a surface's `collect` verb returns — everything the CONTROLLER needs to
+ *  mint: the assembled payment_method slice, the surface-validated billing block, and any
+ *  declared inputs that belong on billing_details. Serializable — it crosses the surface's
+ *  frame into the controller frame. */
+
+/** The ONE confirmation-token mint — run by the CONTROLLER's internal action only, in the
+ *  controller frame, with the controller's sdk + accountId/returnUrl/setupFutureUsage context.
+ *  (Exception: WhopPaymentRequest tokenizes + mints host-side — it must run without a mounted
+ *  controller.) */
+export async function mintConfirmationToken(sdk, context, paymentMethod, billingDetails, billingExtra) {
+  if (!context.accountId) throw new Error('No seller account is in scope for this surface');
+  // A SAVED reference states less than a collected one, and the API REFUSES the difference rather
+  // than ignoring it: the type is read off the stored row, and consent to store was given when the
+  // method was first saved. Sending either back is a 400 telling us the element misread the flow —
+  // so the type is dropped from the body (it is still returned to the caller from the selection)
+  // and `setup_future_usage` never rides along. A BALANCE reference keeps its type (single-valued,
+  // server-verified) but is never vaulted, so the attested consent is refused there too.
+  const saved = paymentMethod.category === 'saved';
+  const referenced = saved || paymentMethod.category === 'balance';
+  const {
+    type: _selectedType,
+    ...savedPayload
+  } = paymentMethod;
+  const token = await sdk.confirmationTokens.create({
+    account_id: context.accountId,
+    // The generated params type CLOSES payment_method over the category blocks, but the
+    // design of record sends method-DECLARED dynamic fields as top-level keys (INVENTORY
+    // backend obligation: the schema must admit them; strong params must not drop them).
+    payment_method: saved ? savedPayload : paymentMethod,
+    billing_details: {
+      ...billingDetails,
+      ...billingExtra
+    },
+    return_url: context.returnUrl,
+    setup_future_usage: referenced ? undefined : context.setupFutureUsage,
+    browser_info: capturedBrowserInfo()
+  }).catch(err => {
+    throw new PaymentTokenizationError('confirmation_token_create_failed', apiErrorMessage(err, 'collection failed'));
+  });
+  return {
+    confirmationToken: token.id,
+    type: paymentMethod.type
+  };
+}
+export function validateBillingEmail(billing) {
+  if (!billing?.email) throw new Error('billingDetails.email is required');
+  return {
+    ...billing,
+    email: billing.email
+  };
+}
+export function assertCardBilling(billing) {
+  if (!billing.name) throw new Error('billingDetails.name is required for card payments');
+}
+/** The framework's CODED lifecycle refusals (`childRefusal`, controller-core): switch on
+ *  `code`, never string-match — the message is the human channel. */
+export function isChildRefusal(err) {
+  const code = err?.code;
+  return code === 'CHILD_NOT_CREATED' || code === 'CHILD_DESTROYED';
+}
+
+/**
+ * The delegation cascade: COLLECTION belongs to the active surface, tried in precedence order —
+ * payment element, fused card element, exploded card-fields unit; each validates its own
+ * requirements and returns the serializable collected bag, and the CONTROLLER mints from it.
+ * Occupancy is DECIDED, not caught: `.created` (the advisory claim-axis probe) picks the live
+ * face; a coded lifecycle refusal (the check→invoke race — a face destroyed in between) falls
+ * through to the next; a live surface's own error re-throws untouched — its refusal is the
+ * answer.
+ */
+export async function collectThroughLiveSurface(surfaces, input) {
+  for (const surface of [surfaces.payment, surfaces.card, surfaces.cardFields]) {
+    if (!surface.created) continue;
+    try {
+      return await surface.collect(input);
+    } catch (err) {
+      if (!isChildRefusal(err)) throw err;
+    }
+  }
+  throw new Error('Mount a collection surface first — the payment element, the card element, or the card-fields unit');
+}
+//# sourceMappingURL=mint.js.map

package/lib/module/core/payments/mint.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["capturedBrowserInfo","PaymentTokenizationError","apiErrorMessage","mintConfirmationToken","sdk","context","paymentMethod","billingDetails","billingExtra","accountId","Error","saved","category","referenced","type","_selectedType","savedPayload","token","confirmationTokens","create","account_id","payment_method","billing_details","return_url","returnUrl","setup_future_usage","undefined","setupFutureUsage","browser_info","catch","err","confirmationToken","id","validateBillingEmail","billing","email","assertCardBilling","name","isChildRefusal","code","collectThroughLiveSurface","surfaces","input","surface","payment","card","cardFields","created","collect"],"sourceRoot":"../../../../src","sources":["core/payments/mint.ts"],"mappings":";;AAAA;;AAIA,SAASA,mBAAmB,QAAQ,mBAAgB;AACpD,SAASC,wBAAwB,EAAEC,eAAe,QAAQ,aAAU;;AAepE;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA,OAAO,eAAeC,qBAAqBA,CACzCC,GAAe,EACfC,OAAoB,EACpBC,aAA2E,EAC3EC,cAAkC,EAClCC,YAAqC,EACiB;EACtD,IAAI,CAACH,OAAO,CAACI,SAAS,EAAE,MAAM,IAAIC,KAAK,CAAC,gDAAgD,CAAC;EACzF;EACA;EACA;EACA;EACA;EACA;EACA,MAAMC,KAAK,GAAGL,aAAa,CAACM,QAAQ,KAAK,OAAO;EAChD,MAAMC,UAAU,GAAGF,KAAK,IAAIL,aAAa,CAACM,QAAQ,KAAK,SAAS;EAChE,MAAM;IAAEE,IAAI,EAAEC,aAAa;IAAE,GAAGC;EAAa,CAAC,GAAGV,aAAa;EAC9D,MAAMW,KAAK,GAAG,MAAMb,GAAG,CAACc,kBAAkB,CACvCC,MAAM,CAAC;IACNC,UAAU,EAAEf,OAAO,CAACI,SAAS;IAC7B;IACA;IACA;IACAY,cAAc,EAAGV,KAAK,GAAGK,YAAY,GAAGV,aAElB;IACtBgB,eAAe,EAAE;MACf,GAAGf,cAAc;MACjB,GAAGC;IACL,CAAC;IACDe,UAAU,EAAElB,OAAO,CAACmB,SAAS;IAC7BC,kBAAkB,EAAEZ,UAAU,GAAGa,SAAS,GAAGrB,OAAO,CAACsB,gBAAgB;IACrEC,YAAY,EAAE5B,mBAAmB,CAAC;EACpC,CAAC,CAAC,CACD6B,KAAK,CAAEC,GAAY,IAAK;IACvB,MAAM,IAAI7B,wBAAwB,CAAC,kCAAkC,EAAEC,eAAe,CAAC4B,GAAG,EAAE,mBAAmB,CAAC,CAAC;EACnH,CAAC,CAAC;EACJ,OAAO;IAAEC,iBAAiB,EAAEd,KAAK,CAACe,EAAE;IAAElB,IAAI,EAAER,aAAa,CAACQ;EAAK,CAAC;AAClE;AAEA,OAAO,SAASmB,oBAAoBA,CAACC,OAAuC,EAAsB;EAChG,IAAI,CAACA,OAAO,EAAEC,KAAK,EAAE,MAAM,IAAIzB,KAAK,CAAC,kCAAkC,CAAC;EACxE,OAAO;IAAE,GAAGwB,OAAO;IAAEC,KAAK,EAAED,OAAO,CAACC;EAAM,CAAC;AAC7C;AAEA,OAAO,SAASC,iBAAiBA,CAACF,OAA2B,EAAQ;EACnE,IAAI,CAACA,OAAO,CAACG,IAAI,EAAE,MAAM,IAAI3B,KAAK,CAAC,mDAAmD,CAAC;AACzF;AAmBA;AACA;AACA,OAAO,SAAS4B,cAAcA,CAACR,GAAY,EAAW;EACpD,MAAMS,IAAI,GAAIT,GAAG,EAAgCS,IAAI;EACrD,OAAOA,IAAI,KAAK,mBAAmB,IAAIA,IAAI,KAAK,iBAAiB;AACnE;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,yBAAyBA,CAC7CC,QAA4B,EAC5BC,KAAc,EACa;EAC3B,KAAK,MAAMC,OAAO,IAAI,CAACF,QAAQ,CAACG,OAAO,EAAEH,QAAQ,CAACI,IAAI,EAAEJ,QAAQ,CAACK,UAAU,CAAC,EAAE;IAC5E,IAAI,CAACH,OAAO,CAACI,OAAO,EAAE;IACtB,IAAI;MACF,OAAQ,MAAMJ,OAAO,CAACK,OAAO,CAACN,KAAK,CAAC;IACtC,CAAC,CAAC,OAAOZ,GAAG,EAAE;MACZ,IAAI,CAACQ,cAAc,CAACR,GAAG,CAAC,EAAE,MAAMA,GAAG;IACrC;EACF;EACA,MAAM,IAAIpB,KAAK,CAAC,mGAAmG,CAAC;AACtH","ignoreList":[]}

package/lib/module/core/payments/plan.js

@@ -0,0 +1,131 @@
+"use strict";
+
+// ported verbatim from frontend/apps/web/src/elements/payments/lib/plan.ts — keep in sync when the web element changes
+
+import { currencyMinorDigits } from "./currency.js";
+import { ChargeConfigError, apiErrorMessage } from "./errors.js";
+
+/** The widened props bag both runtimes hand to the charge resolution — the controller seed's
+ *  `ctx.props` and the host sources' live props view are each one branch of the plan-vs-inline
+ *  union, so every key is optional here and `chargeInputOf` decides which branch is in force. */
+
+/** `config = resolve(plan)`: the ONE normalized charge config every downstream path consumes —
+ *  the inline props ARE the degenerate case (`plan` undefined, fields verbatim), and a plan is
+ *  a preset that resolves to this same shape. */
+
+/** The optionless statics-rail boot (`WhopElements.payments.handleNextAction` — the namespace
+ *  handle mounts with an EMPTY options bag): no charge input exists and none is needed, the
+ *  static flow never collects. Collection-face projections refuse on it, loudly. */
+
+export const UNCONFIGURED_CHARGE = Object.freeze({
+  configured: false,
+  plan: undefined,
+  currency: undefined,
+  amount: undefined,
+  setupFutureUsage: undefined,
+  paymentMethodConfiguration: undefined
+});
+
+/** ZERO charge inputs mounted — the only shape that resolves to UNCONFIGURED_CHARGE; any
+ *  PARTIAL config still throws the loud ChargeConfigError (a half-config is a consumer bug). */
+export function chargeless(props) {
+  return props.accountId === undefined && props.plan === undefined && props.currency === undefined && props.amount === undefined && props.paymentMethodConfiguration === undefined;
+}
+/** The plan-XOR-inline gate: `plan` alongside any inline charge key is a conflict, and neither
+ *  is a missing config — both refuse LOUDLY with a coded `ChargeConfigError`. */
+export function chargeInputOf(props) {
+  const input = {
+    accountId: props.accountId,
+    plan: props.plan,
+    currency: props.currency,
+    amount: props.amount,
+    setupFutureUsage: props.setupFutureUsage,
+    paymentMethodConfiguration: props.paymentMethodConfiguration
+  };
+  if (input.plan !== undefined) {
+    const inlineKeys = ['currency', 'amount', 'paymentMethodConfiguration'].filter(key => input[key] !== undefined);
+    if (inlineKeys.length > 0) {
+      throw new ChargeConfigError('PLAN_INLINE_CONFLICT', `Pass a plan OR an inline charge config, never both — ${inlineKeys.join(', ')} conflict with plan ${input.plan}. The plan resolves to the same shape client-side.`);
+    }
+    return input;
+  }
+  if (input.currency === undefined || input.amount === undefined) {
+    throw new ChargeConfigError('CHARGE_CONFIG_MISSING', 'Pass a plan id, or an inline charge config with both currency and amount — neither is mounted.');
+  }
+  return input;
+}
+export function inlineCharge(input) {
+  return {
+    configured: true,
+    plan: undefined,
+    currency: (input.currency ?? '').toLowerCase(),
+    amount: input.amount ?? 0,
+    setupFutureUsage: input.setupFutureUsage,
+    paymentMethodConfiguration: input.paymentMethodConfiguration
+  };
+}
+
+/** The slice of the SDK's own plan the charge resolution reads — the schema is the author,
+ *  nothing hand-typed to drift. `effective_payment_method_configuration` is the GOVERNING
+ *  configuration resolved server-side through every layer; `null` means platform defaults, and
+ *  there is no fallback to the plan's own editable override — the backend publishing the field
+ *  deploys BENEATH this code by PR stacking. */
+
+/**
+ * Normalize a retrieved plan into the inline shape. The plan's `account_id` must MATCH the
+ * mounted `accountId` — the handle's account stays the mount key, and a foreign plan is a coded
+ * refusal, never a silent re-key. A renewing plan attests `off_session` save-consent unless the
+ * consumer set the attestation explicitly (the charge vaults the method for renewals).
+ */
+export function chargeFromPlan(resource, input) {
+  const planId = resource.id ?? input.plan;
+  const planAccount = resource.account?.id;
+  if (!planAccount || planAccount !== input.accountId) {
+    throw new ChargeConfigError('PLAN_ACCOUNT_MISMATCH', `Plan ${planId} belongs to ${planAccount ?? 'no account'}, not the mounted accountId ${input.accountId} — mount the element on the plan's own account.`);
+  }
+  const currency = resource.currency?.toLowerCase();
+  const initialPrice = resource.initial_price;
+  if (!currency || typeof initialPrice !== 'number' || !Number.isFinite(initialPrice)) {
+    throw new ChargeConfigError('PLAN_RESOLUTION_FAILED', `Plan ${planId} resolved without a currency and initial price.`);
+  }
+  return {
+    configured: true,
+    plan: planId,
+    currency,
+    // Truncate, never round — the backend's Utils.amount_in_cents is (amount.to_d * factor).to_i;
+    // toFixed(4) re-quantizes the float product to the exact decimal before the truncate.
+    amount: Math.trunc(Number((initialPrice * 10 ** currencyMinorDigits(currency)).toFixed(4))),
+    setupFutureUsage: input.setupFutureUsage ?? (resource.plan_type === 'renewal' ? 'off_session' : undefined),
+    // The GOVERNING configuration, resolved server-side — the same read a session mount gets
+    // from its own payment_method_configuration. A null answer is trusted as platform defaults;
+    // the elements NEVER re-derive a configuration layer client-side. Sliced to exactly the
+    // three known keys.
+    paymentMethodConfiguration: slicedConfiguration(resource.effective_payment_method_configuration)
+  };
+}
+function slicedConfiguration(configuration) {
+  if (!configuration) return undefined;
+  return {
+    enabled: configuration.enabled,
+    disabled: configuration.disabled,
+    include_platform_defaults: configuration.include_platform_defaults
+  };
+}
+
+/** The one charge resolution. Inline props resolve with no network; a plan costs one GET. */
+export async function resolveCharge(client, props) {
+  // The statics rail's lazy open-handle boots with an EMPTY options bag and DOES run the
+  // h.sync charge gate — a chargeless boot resolves the unconfigured sentinel there exactly
+  // like the controller seed does. Partial config still throws.
+  if (chargeless(props)) return UNCONFIGURED_CHARGE;
+  const input = chargeInputOf(props);
+  if (input.plan === undefined) return inlineCharge(input);
+  let plan;
+  try {
+    plan = await client.plans.retrieve(input.plan);
+  } catch (err) {
+    throw new ChargeConfigError('PLAN_RESOLUTION_FAILED', apiErrorMessage(err, `plan ${input.plan} could not be resolved`));
+  }
+  return chargeFromPlan(plan, input);
+}
+//# sourceMappingURL=plan.js.map

package/lib/module/core/payments/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["currencyMinorDigits","ChargeConfigError","apiErrorMessage","UNCONFIGURED_CHARGE","Object","freeze","configured","plan","undefined","currency","amount","setupFutureUsage","paymentMethodConfiguration","chargeless","props","accountId","chargeInputOf","input","inlineKeys","filter","key","length","join","inlineCharge","toLowerCase","chargeFromPlan","resource","planId","id","planAccount","account","initialPrice","initial_price","Number","isFinite","Math","trunc","toFixed","plan_type","slicedConfiguration","effective_payment_method_configuration","configuration","enabled","disabled","include_platform_defaults","resolveCharge","client","plans","retrieve","err"],"sourceRoot":"../../../../src","sources":["core/payments/plan.ts"],"mappings":";;AAAA;;AAKA,SAASA,mBAAmB,QAAQ,eAAY;AAChD,SAASC,iBAAiB,EAAEC,eAAe,QAAQ,aAAU;;AAE7D;AACA;AACA;;AAUA;AACA;AACA;;AAUA;AACA;AACA;;AAYA,OAAO,MAAMC,mBAAuC,GAAGC,MAAM,CAACC,MAAM,CAAC;EACnEC,UAAU,EAAE,KAAK;EACjBC,IAAI,EAAEC,SAAS;EACfC,QAAQ,EAAED,SAAS;EACnBE,MAAM,EAAEF,SAAS;EACjBG,gBAAgB,EAAEH,SAAS;EAC3BI,0BAA0B,EAAEJ;AAC9B,CAAC,CAAC;;AAEF;AACA;AACA,OAAO,SAASK,UAAUA,CAACC,KAAkB,EAAW;EACtD,OACEA,KAAK,CAACC,SAAS,KAAKP,SAAS,IAC7BM,KAAK,CAACP,IAAI,KAAKC,SAAS,IACxBM,KAAK,CAACL,QAAQ,KAAKD,SAAS,IAC5BM,KAAK,CAACJ,MAAM,KAAKF,SAAS,IAC1BM,KAAK,CAACF,0BAA0B,KAAKJ,SAAS;AAElD;AAWA;AACA;AACA,OAAO,SAASQ,aAAaA,CAACF,KAAkB,EAAe;EAC7D,MAAMG,KAAkB,GAAG;IACzBF,SAAS,EAAED,KAAK,CAACC,SAAS;IAC1BR,IAAI,EAAEO,KAAK,CAACP,IAAI;IAChBE,QAAQ,EAAEK,KAAK,CAACL,QAAQ;IACxBC,MAAM,EAAEI,KAAK,CAACJ,MAAM;IACpBC,gBAAgB,EAAEG,KAAK,CAACH,gBAAgB;IACxCC,0BAA0B,EAAEE,KAAK,CAACF;EACpC,CAAC;EACD,IAAIK,KAAK,CAACV,IAAI,KAAKC,SAAS,EAAE;IAC5B,MAAMU,UAAU,GAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAWC,MAAM,CACtFC,GAAG,IAAKH,KAAK,CAACG,GAAG,CAAC,KAAKZ,SAC1B,CAAC;IACD,IAAIU,UAAU,CAACG,MAAM,GAAG,CAAC,EAAE;MACzB,MAAM,IAAIpB,iBAAiB,CACzB,sBAAsB,EACtB,wDAAwDiB,UAAU,CAACI,IAAI,CAAC,IAAI,CAAC,uBAAuBL,KAAK,CAACV,IAAI,oDAChH,CAAC;IACH;IACA,OAAOU,KAAK;EACd;EACA,IAAIA,KAAK,CAACR,QAAQ,KAAKD,SAAS,IAAIS,KAAK,CAACP,MAAM,KAAKF,SAAS,EAAE;IAC9D,MAAM,IAAIP,iBAAiB,CACzB,uBAAuB,EACvB,gGACF,CAAC;EACH;EACA,OAAOgB,KAAK;AACd;AAEA,OAAO,SAASM,YAAYA,CAACN,KAAkB,EAAkB;EAC/D,OAAO;IACLX,UAAU,EAAE,IAAI;IAChBC,IAAI,EAAEC,SAAS;IACfC,QAAQ,EAAE,CAACQ,KAAK,CAACR,QAAQ,IAAI,EAAE,EAAEe,WAAW,CAAC,CAAC;IAC9Cd,MAAM,EAAEO,KAAK,CAACP,MAAM,IAAI,CAAC;IACzBC,gBAAgB,EAAEM,KAAK,CAACN,gBAAgB;IACxCC,0BAA0B,EAAEK,KAAK,CAACL;EACpC,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASa,cAAcA,CAACC,QAAuB,EAAET,KAAkB,EAAkB;EAC1F,MAAMU,MAAM,GAAGD,QAAQ,CAACE,EAAE,IAAIX,KAAK,CAACV,IAAI;EACxC,MAAMsB,WAAW,GAAGH,QAAQ,CAACI,OAAO,EAAEF,EAAE;EACxC,IAAI,CAACC,WAAW,IAAIA,WAAW,KAAKZ,KAAK,CAACF,SAAS,EAAE;IACnD,MAAM,IAAId,iBAAiB,CACzB,uBAAuB,EACvB,QAAQ0B,MAAM,eAAeE,WAAW,IAAI,YAAY,+BAA+BZ,KAAK,CAACF,SAAS,iDACxG,CAAC;EACH;EACA,MAAMN,QAAQ,GAAGiB,QAAQ,CAACjB,QAAQ,EAAEe,WAAW,CAAC,CAAC;EACjD,MAAMO,YAAY,GAAGL,QAAQ,CAACM,aAAa;EAC3C,IAAI,CAACvB,QAAQ,IAAI,OAAOsB,YAAY,KAAK,QAAQ,IAAI,CAACE,MAAM,CAACC,QAAQ,CAACH,YAAY,CAAC,EAAE;IACnF,MAAM,IAAI9B,iBAAiB,CACzB,wBAAwB,EACxB,QAAQ0B,MAAM,iDAChB,CAAC;EACH;EACA,OAAO;IACLrB,UAAU,EAAE,IAAI;IAChBC,IAAI,EAAEoB,MAAM;IACZlB,QAAQ;IACR;IACA;IACAC,MAAM,EAAEyB,IAAI,CAACC,KAAK,CAACH,MAAM,CAAC,CAACF,YAAY,GAAG,EAAE,IAAI/B,mBAAmB,CAACS,QAAQ,CAAC,EAAE4B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F1B,gBAAgB,EAAEM,KAAK,CAACN,gBAAgB,KAAKe,QAAQ,CAACY,SAAS,KAAK,SAAS,GAAG,aAAa,GAAG9B,SAAS,CAAC;IAC1G;IACA;IACA;IACA;IACAI,0BAA0B,EAAE2B,mBAAmB,CAACb,QAAQ,CAACc,sCAAsC;EACjG,CAAC;AACH;AAEA,SAASD,mBAAmBA,CAC1BE,aAAiE,EACpB;EAC7C,IAAI,CAACA,aAAa,EAAE,OAAOjC,SAAS;EACpC,OAAO;IACLkC,OAAO,EAAED,aAAa,CAACC,OAAO;IAC9BC,QAAQ,EAAEF,aAAa,CAACE,QAAQ;IAChCC,yBAAyB,EAAEH,aAAa,CAACG;EAC3C,CAAC;AACH;;AAEA;AACA,OAAO,eAAeC,aAAaA,CAACC,MAAkB,EAAEhC,KAAkB,EAAwB;EAChG;EACA;EACA;EACA,IAAID,UAAU,CAACC,KAAK,CAAC,EAAE,OAAOX,mBAAmB;EACjD,MAAMc,KAAK,GAAGD,aAAa,CAACF,KAAK,CAAC;EAClC,IAAIG,KAAK,CAACV,IAAI,KAAKC,SAAS,EAAE,OAAOe,YAAY,CAACN,KAAK,CAAC;EACxD,IAAIV,IAAkB;EACtB,IAAI;IACFA,IAAI,GAAG,MAAMuC,MAAM,CAACC,KAAK,CAACC,QAAQ,CAAC/B,KAAK,CAACV,IAAI,CAAC;EAChD,CAAC,CAAC,OAAO0C,GAAG,EAAE;IACZ,MAAM,IAAIhD,iBAAiB,CACzB,wBAAwB,EACxBC,eAAe,CAAC+C,GAAG,EAAE,QAAQhC,KAAK,CAACV,IAAI,wBAAwB,CACjE,CAAC;EACH;EACA,OAAOkB,cAAc,CAAClB,IAAI,EAAEU,KAAK,CAAC;AACpC","ignoreList":[]}

package/lib/module/core/payments/refusals.js

@@ -0,0 +1,17 @@
+"use strict";
+
+/**
+ * Refusals that exist only on React Native, kept out of the ported `errors.ts` so that file stays a
+ * clean mirror of the web element's.
+ *
+ * Every one is coded, so a caller switches on `code` and never string-matches a message.
+ */
+
+export class PaymentsRefusalError extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+    this.name = 'PaymentsRefusalError';
+  }
+}
+//# sourceMappingURL=refusals.js.map

package/lib/module/core/payments/refusals.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PaymentsRefusalError","Error","constructor","code","message","name"],"sourceRoot":"../../../../src","sources":["core/payments/refusals.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAUA,OAAO,MAAMA,oBAAoB,SAASC,KAAK,CAAC;EAG/CC,WAAWA,CAACC,IAAyB,EAAEC,OAAe,EAAE;IACvD,KAAK,CAAC,IAAID,IAAI,KAAKC,OAAO,EAAE,CAAC;IAC7B,IAAI,CAACD,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,IAAI,GAAG,sBAAsB;EACnC;AACD","ignoreList":[]}

package/lib/module/core/payments/secure-fields.js

@@ -0,0 +1,87 @@
+"use strict";
+
+// ported verbatim from frontend/apps/web/src/elements/payments/lib/secure-fields.ts — keep in sync when the web element changes
+
+/**
+ * The secure declared-field rail (payment-api.md §4): a matrix field marked `secure: true`
+ * renders as a Basis Theory hosted text element wearing the suite's input chrome, so the raw
+ * value NEVER exists in our JavaScript — at collect time the selected method's element
+ * INSTANCES are tokenized into ONE Basis Theory token intent, keyed by field name
+ * (`{ type: 'token', data: { bank_account: <element> } }`; BT interpolates each element's value
+ * server-side, producing exactly the legacy checkout's additional-data shape, so the
+ * checkout.com mandate interpolation `$.data.<name>` consumes it unchanged), and the category
+ * payload carries `{ token }`. The create rides the web-elements SDK's element path under the
+ * method's config-block publishable key (`tokenizer` + `public_key`, the card block's source).
+ * Intents expire on BT's default clock (24h) — the confirm consumes one long before that.
+ */
+
+import { SecureFieldError } from "./errors.js";
+
+/** A hosted text element instance. Opaque by construction — it carries an id and a formatter, never
+ *  the value the buyer typed. */
+
+const BT_TOKEN_INTENTS_URL = 'https://api.basistheory.com/token-intents';
+
+/** Applied by BT inside the hosted element at tokenization (String.replace semantics):
+ *  whitespace stripped — buyers type the spaced IBAN print format, the electronic format rides. */
+export const secureValueTransform = /\s+/g;
+
+// BT runs the validation regex against the value AS TYPED, while `transform` applies only at
+// tokenization (developers.basistheory.com/docs/sdks/web/web-elements/components). The matrix
+// publishes both truths ready to use: `input_formats` (what a buyer may type — whitespace
+// tolerant, authored star-height 1 because BT's frame rejects nested quantifiers as unsafe)
+// and `formats` (the stored electronic value, the fallback where no typing tolerance is
+// declared). Patterns ride verbatim — the backend is the only author.
+export function secureFieldValidation(field) {
+  const typed = Object.values(field.input_formats ?? {});
+  const patterns = typed.length > 0 ? typed : Object.values(field.formats ?? {});
+  if (patterns.length === 0) return undefined;
+  try {
+    return new RegExp(patterns.map(pattern => `(?:${pattern})`).join('|'));
+  } catch {
+    return undefined;
+  }
+}
+
+/** Raw-data token intents ride BT's REST surface with the publishable key — the wallet sheets'
+ *  leg alone (Google's tokenizationData.token is a raw string, no hosted element exists to
+ *  reference). */
+export async function createRawTokenIntent(publicKey, data) {
+  const response = await fetch(BT_TOKEN_INTENTS_URL, {
+    method: 'POST',
+    headers: {
+      'BT-API-KEY': publicKey,
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      type: 'token',
+      data
+    })
+  });
+  if (!response.ok) throw new Error(`token intent creation failed (${response.status})`);
+  const intent = await response.json().catch(() => null);
+  if (!intent?.id) throw new Error('token intent creation returned no id');
+  return intent.id;
+}
+export async function tokenizeSecureFields(bt, elements,
+/** The method's OWN config-block key. Passed per call because Basis Theory's client is a
+ *  module-level singleton — the first key constructed wins for the whole process. */
+apiKey) {
+  if (!bt) {
+    throw new SecureFieldError('SECURE_FIELD_TOKENIZER_UNAVAILABLE', 'This method declares a secure field but its tokenizer is not available');
+  }
+  try {
+    const intent = await bt.tokenIntents.create({
+      type: 'token',
+      data: elements
+    }, {
+      apiKey
+    });
+    if (!intent?.id) throw new Error('token intent creation returned no id');
+    return intent.id;
+  } catch (err) {
+    const detail = err instanceof Error && err.message ? `: ${err.message}` : '';
+    throw new SecureFieldError('SECURE_FIELD_TOKENIZE_FAILED', `Secure field tokenization failed${detail}`);
+  }
+}
+//# sourceMappingURL=secure-fields.js.map

package/lib/module/core/payments/secure-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SecureFieldError","BT_TOKEN_INTENTS_URL","secureValueTransform","secureFieldValidation","field","typed","Object","values","input_formats","patterns","length","formats","undefined","RegExp","map","pattern","join","createRawTokenIntent","publicKey","data","response","fetch","method","headers","body","JSON","stringify","type","ok","Error","status","intent","json","catch","id","tokenizeSecureFields","bt","elements","apiKey","tokenIntents","create","err","detail","message"],"sourceRoot":"../../../../src","sources":["core/payments/secure-fields.ts"],"mappings":";;AAAA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,gBAAgB,QAAQ,aAAU;;AAE3C;AACA;;AAGA,MAAMC,oBAAoB,GAAG,2CAA2C;;AAExE;AACA;AACA,OAAO,MAAMC,oBAAoB,GAAG,MAAM;;AAE1C;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CAACC,KAGrC,EAAsB;EACrB,MAAMC,KAAK,GAAGC,MAAM,CAACC,MAAM,CAACH,KAAK,CAACI,aAAa,IAAI,CAAC,CAAC,CAAC;EACtD,MAAMC,QAAQ,GAAGJ,KAAK,CAACK,MAAM,GAAG,CAAC,GAAGL,KAAK,GAAGC,MAAM,CAACC,MAAM,CAACH,KAAK,CAACO,OAAO,IAAI,CAAC,CAAC,CAAC;EAC9E,IAAIF,QAAQ,CAACC,MAAM,KAAK,CAAC,EAAE,OAAOE,SAAS;EAC3C,IAAI;IACF,OAAO,IAAIC,MAAM,CAACJ,QAAQ,CAACK,GAAG,CAAEC,OAAO,IAAK,MAAMA,OAAO,GAAG,CAAC,CAACC,IAAI,CAAC,GAAG,CAAC,CAAC;EAC1E,CAAC,CAAC,MAAM;IACN,OAAOJ,SAAS;EAClB;AACF;;AAEA;AACA;AACA;AACA,OAAO,eAAeK,oBAAoBA,CAACC,SAAiB,EAAEC,IAAa,EAAmB;EAC5F,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAACpB,oBAAoB,EAAE;IACjDqB,MAAM,EAAE,MAAM;IACdC,OAAO,EAAE;MAAE,YAAY,EAAEL,SAAS;MAAE,cAAc,EAAE;IAAmB,CAAC;IACxEM,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;MAAEC,IAAI,EAAE,OAAO;MAAER;IAAK,CAAC;EAC9C,CAAC,CAAC;EACF,IAAI,CAACC,QAAQ,CAACQ,EAAE,EAAE,MAAM,IAAIC,KAAK,CAAC,iCAAiCT,QAAQ,CAACU,MAAM,GAAG,CAAC;EACtF,MAAMC,MAAM,GAAI,MAAMX,QAAQ,CAACY,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,IAAI,CAA4B;EAClF,IAAI,CAACF,MAAM,EAAEG,EAAE,EAAE,MAAM,IAAIL,KAAK,CAAC,sCAAsC,CAAC;EACxE,OAAOE,MAAM,CAACG,EAAE;AAClB;AAEA,OAAO,eAAeC,oBAAoBA,CACxCC,EAAmC,EACnCC,QAAsC;AACtC;AACF;AACEC,MAAc,EACG;EACjB,IAAI,CAACF,EAAE,EAAE;IACP,MAAM,IAAIpC,gBAAgB,CACxB,oCAAoC,EACpC,wEACF,CAAC;EACH;EACA,IAAI;IACF,MAAM+B,MAAM,GAAG,MAAMK,EAAE,CAACG,YAAY,CAACC,MAAM,CAAC;MAAEb,IAAI,EAAE,OAAO;MAAER,IAAI,EAAEkB;IAAkB,CAAC,EAAE;MAAEC;IAAO,CAAC,CAAC;IACnG,IAAI,CAACP,MAAM,EAAEG,EAAE,EAAE,MAAM,IAAIL,KAAK,CAAC,sCAAsC,CAAC;IACxE,OAAOE,MAAM,CAACG,EAAE;EAClB,CAAC,CAAC,OAAOO,GAAG,EAAE;IACZ,MAAMC,MAAM,GAAGD,GAAG,YAAYZ,KAAK,IAAIY,GAAG,CAACE,OAAO,GAAG,KAAKF,GAAG,CAACE,OAAO,EAAE,GAAG,EAAE;IAC5E,MAAM,IAAI3C,gBAAgB,CAAC,8BAA8B,EAAE,mCAAmC0C,MAAM,EAAE,CAAC;EACzG;AACF","ignoreList":[]}