@zonos/elements 1.3.292 → 1.4.0

package/dist/cjs/zonos-airwallex-payment.cjs.entry.js

@@ -1,7 +1,7 @@
 'use strict';
 
 var index = require('./index-DAAr465v.js');
-var collect = require('./collect-Oeo5tjN5.js');
+var collect = require('./collect-DnrvaXUI.js');
 var cart = require('./cart-B6Aty-21.js');
 var localization = require('./localization-BzNeXeDe.js');
 var zonosStore = require('./zonosStore-Bx9jK82G.js');

package/dist/cjs/zonos-collect-finish_6.cjs.entry.js

@@ -1,7 +1,7 @@
 'use strict';
 
 var index = require('./index-DAAr465v.js');
-var collect = require('./collect-Oeo5tjN5.js');
+var collect = require('./collect-DnrvaXUI.js');
 var cart = require('./cart-B6Aty-21.js');
 var paypal = require('./paypal-CuKshRmZ.js');
 var localization = require('./localization-BzNeXeDe.js');

package/dist/cjs/zonos-collect.cjs.entry.js

@@ -1,7 +1,7 @@
 'use strict';
 
 var index = require('./index-DAAr465v.js');
-var collect = require('./collect-Oeo5tjN5.js');
+var collect = require('./collect-DnrvaXUI.js');
 var cart = require('./cart-B6Aty-21.js');
 var paypal = require('./paypal-CuKshRmZ.js');
 var localization = require('./localization-BzNeXeDe.js');

package/dist/cjs/zonos-controller.cjs.entry.js

@@ -194,6 +194,15 @@ const injectDomesticElementHideStyle = (domesticElementSelector) => {
         merchantSelector: domesticElementSelector,
         supportsIs: supportsIsSelector,
     });
+    // A raw `<` is never a valid CSS selector character, and it is the
+    // character that would close a `<style>` tag if this string were ever
+    // assigned as HTML. Some parsers (current jsdom) do not throw on it, so
+    // reject it before `querySelector`. `>` stays allowed: it is the child
+    // combinator.
+    if (fullSelector.includes('<')) {
+        VarianceTest.log(`Skip domesticElementSelector injection: "${domesticElementSelector}" contains "<"`, 'warn');
+        return;
+    }
     // The browser's own parser is the source of truth — `document.querySelector`
     // throws `DOMException(SyntaxError)` for syntactically invalid selectors.
     // Validating the exact string we're about to emit catches both malformed

package/dist/collection/components/utils/checkout/injectDomesticElementHideStyle.js

@@ -93,6 +93,15 @@ export const injectDomesticElementHideStyle = (domesticElementSelector) => {
         merchantSelector: domesticElementSelector,
         supportsIs: supportsIsSelector,
     });
+    // A raw `<` is never a valid CSS selector character, and it is the
+    // character that would close a `<style>` tag if this string were ever
+    // assigned as HTML. Some parsers (current jsdom) do not throw on it, so
+    // reject it before `querySelector`. `>` stays allowed: it is the child
+    // combinator.
+    if (fullSelector.includes('<')) {
+        log(`Skip domesticElementSelector injection: "${domesticElementSelector}" contains "<"`, 'warn');
+        return;
+    }
     // The browser's own parser is the source of truth — `document.querySelector`
     // throws `DOMException(SyntaxError)` for syntactically invalid selectors.
     // Validating the exact string we're about to emit catches both malformed

package/dist/collection/environment.js

@@ -5,7 +5,7 @@ import { config } from "dotenv";
 import { z } from "zod";
 // rollup and ts somehow can't compile this with absolute path
 // eslint-disable-next-line no-relative-import-paths/no-relative-import-paths
-import { formattedCloudflareApiUrl } from "./utils/formattedCloudflareApiUrl";
+import { formattedCloudflareApiUrl, resolveCloudflareDeployTarget, } from "./utils/formattedCloudflareApiUrl";
 // rollup and ts somehow can't compile this with absolute path
 // eslint-disable-next-line no-relative-import-paths/no-relative-import-paths
 import { formattedUrl } from "./utils/formattedUrl";
@@ -32,7 +32,8 @@ const UNPKG_ZONOS_URL = `https://unpkg.com/@zonos/elements@${packageVersion}`;
 const CDNJS_ZONOS_URL = `https://cdnjs.cloudflare.com/ajax/libs/zonos-elements/${packageVersion}`;
 const currentBranch = process.env.VERCEL_GIT_COMMIT_REF ||
     process.env.BRANCH_NAME ||
-    process.env.CF_PAGES_BRANCH;
+    process.env.CF_PAGES_BRANCH ||
+    process.env.WORKERS_CI_BRANCH;
 if (typeof window === 'undefined') {
     // storybook can't access to any "node" modules
     config();
@@ -98,6 +99,10 @@ export const env = createEnv({
         }),
         NEXT_PUBLIC_ZONOS_CLOUDFLARE_URL: formattedCloudflareApiUrl({
             branchName: currentBranch,
+            cloudflareTarget: resolveCloudflareDeployTarget({
+                buildEnv: process.env.BUILD_ENV,
+                cfPages: process.env.CF_PAGES,
+            }),
             inCI,
             inGithubAction: inGithubActions,
             inVercel,

package/dist/collection/scripts/_stripe.js

@@ -1,8 +1,10 @@
 /* eslint-disable no-console */
 /** Loading stripe script extracted from stripe.js repository  */
 import { logError } from "../components/utils/logging/logError";
+const STRIPE_API_VERSION = '2025-02-24.acacia';
 const V3_URL = 'https://js.stripe.com/v3';
 const V3_URL_REGEX = /^https:\/\/js\.stripe\.com\/v3\/?(\?.*)?$/;
+const V3_VERSION = 3;
 const EXISTING_SCRIPT_MESSAGE = 'loadStripe.setLoadParameters was called but an existing Stripe.js script already exists in the document; existing script parameters will be used';
 export const zonosStripeFindScript = () => {
     const scripts = document.querySelectorAll(`script[src^="${V3_URL}"]`);
@@ -83,11 +85,31 @@ const registerWrapper = (stripe, startTime) => {
     }
     stripe._registerWrapper({ name: 'stripe-js', startTime });
 };
+const getStripeVersion = (stripeConstructor) => {
+    if (!('version' in stripeConstructor)) {
+        return;
+    }
+    const { version } = stripeConstructor;
+    return typeof version === 'number' || typeof version === 'string'
+        ? version
+        : undefined;
+};
 export const initStripe = (maybeStripe, args, startTime) => {
     if (maybeStripe === null) {
         return null;
     }
-    const stripe = maybeStripe.apply(undefined, args);
+    const [publishableKey, callerOptions] = args;
+    const options = Object.assign({}, callerOptions);
+    const stripeVersion = getStripeVersion(maybeStripe);
+    const isNamedRelease = typeof stripeVersion === 'string' &&
+        stripeVersion !== V3_VERSION.toString();
+    if (isNamedRelease) {
+        delete options.apiVersion;
+    }
+    else {
+        options.apiVersion = STRIPE_API_VERSION;
+    }
+    const stripe = maybeStripe(publishableKey, options);
     registerWrapper(stripe, startTime);
     return stripe;
 };

package/dist/collection/utils/formattedCloudflareApiUrl.js

@@ -1,20 +1,30 @@
 // rollup and ts somehow can't compile this with absolute path
 // eslint-disable-next-line no-relative-import-paths/no-relative-import-paths
 import { generateCloudflareDeployUrl } from "./generateCloudflareDeployUrl";
+// eslint-disable-next-line no-relative-import-paths/no-relative-import-paths
+import { cloudflareWorkerHost, cloudflareWorkerName, generateCloudflareWorkerPreviewUrl, } from "./generateCloudflareWorkerPreviewUrl";
+// eslint-disable-next-line no-relative-import-paths/no-relative-import-paths
+import { resolveCloudflareRuntime } from "./resolveCloudflareRuntime";
+/**
+ * Pages when Cloudflare Pages sets `CF_PAGES=1`.
+ * Otherwise a Cloudflare build is the worker. Every other build stays on the Pages preview path.
+ * `USE_OPENNEXT` is not an input.
+ */
+export const resolveCloudflareDeployTarget = ({ buildEnv, cfPages, }) => {
+    if (resolveCloudflareRuntime({ buildEnv, cfPages }) === 'worker') {
+        return 'worker';
+    }
+    return 'pages';
+};
 /**
- * This is to generate cloudflare url based on the environment. This won't
- * - Get the cloudflare alias to build if the environment is Preview
- * - Get the cloudflare production url (not preview alias) if it's production
- * @note
- * This is mainly used for get correct Cloudflare API to be used in scripts
- * @note
- * "url" is the API url in Cloudflare
+ * Cloudflare API address inlined into the storefront script.
  * @returns
- * - `https://<branch_name>.<project_name>.pages.dev` if is Preview
- *   (Pages branch aliases; Workers previews use versioned `*.workers.dev` URLs)
- * - `https://route.elements.zonos.com` if is Production
+ * - `https://<label>.robert-152.workers.dev` for a non-production Worker preview
+ * - `https://zonos-elements-serverless-test.robert-152.workers.dev` for the test Worker production host
+ * - `https://<branch_name>.<project_name>.pages.dev` for a non-production Pages preview
+ * - the configured host for production, local, and GitHub Actions
  */
-export const formattedCloudflareApiUrl = ({ branchName, inCI: _inCI, inGithubAction, inVercel: _inVercel, isVercelPreview: _isVercelPreview, url, }) => {
+export const formattedCloudflareApiUrl = ({ branchName, cloudflareTarget, inCI: _inCI, inGithubAction, inVercel: _inVercel, isVercelPreview: _isVercelPreview, url, }) => {
     if (!url) {
         // return origin value so t3 can throw error when it's empty
         return url;
@@ -32,19 +42,27 @@ export const formattedCloudflareApiUrl = ({ branchName, inCI: _inCI, inGithubAct
     const isProdBranch = branchName && ['main'].includes(branchName);
     const isTest = domainOnlyUrl.includes('test.') || domainOnlyUrl.includes('test-git');
     const projectName = isTest ? 'zonos-elements-test' : 'zonos-elements';
-    // always use Cloudflare preview alias if in not production environment
+    // Preview hosts are only for non-production branches after the early returns above.
     if (!isProdBranch) {
-        // use Cloudflare branch_url instead of the production url
         if (!branchName) {
             throw new Error('Failed to get Cloudflare commit ref or branch name');
         }
-        // generate generated deploy url based on the branch name
+        if (cloudflareTarget === 'worker') {
+            const workerHost = generateCloudflareWorkerPreviewUrl({
+                branchName,
+                workerName: cloudflareWorkerName(isTest),
+            });
+            return `https://${workerHost}`;
+        }
         const cloudflareUrl = generateCloudflareDeployUrl({
             branchName,
             projectName,
         });
         return `https://${cloudflareUrl}`;
     }
+    if (cloudflareTarget === 'worker' && isTest) {
+        return `https://${cloudflareWorkerHost(cloudflareWorkerName(true))}`;
+    }
     // use cloudflare production url
     return `https://${domainOnlyUrl}`;
 };

package/dist/collection/utils/generateCloudflareDeployUrl.js

@@ -1,8 +1,7 @@
 /**
  * Generate a Cloudflare Pages-style deploy URL based on the branch name and project name.
- * Workers preview URLs are version-prefixed (`<version>-<worker>.<account>.workers.dev`)
- * and cannot be derived from a branch name, so Pages aliases remain the preview mapping
- * until a matching Workers alias exists.
+ * Worker preview hosts are built separately by `generateCloudflareWorkerPreviewUrl`.
+ * This helper only builds Cloudflare Pages aliases (`<branch>.<project>.pages.dev`).
  * @note not including https://
  * @return {url} string
  * @urlExample build-cloudflare-2.zonos-elements.pages.dev

package/dist/collection/utils/generateCloudflareWorkerPreviewUrl.js

@@ -0,0 +1,51 @@
+const WORKER_ACCOUNT_HOST = 'robert-152.workers.dev';
+const WORKER_LABEL_MAX_LENGTH = 63;
+const WORKER_NAME = 'zonos-elements-serverless';
+const WORKER_NAME_TEST = 'zonos-elements-serverless-test';
+const PREVIEW_HASH_LENGTH = 8;
+/**
+ * Lowercase, collapse non-alphanumeric runs to one hyphen, and trim hyphens.
+ */
+const normalizeWorkerBranch = (branchName) => branchName
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '');
+/** Stable 8-character suffix so two long branches cannot share one label. */
+const previewHash = (value) => {
+    let hash = 5381;
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        hash = Math.imul(hash, 33) ^ code;
+    }
+    return (hash >>> 0).toString(16).padStart(PREVIEW_HASH_LENGTH, '0');
+};
+/**
+ * Worker host without a scheme.
+ * Production is `{workerName}.robert-152.workers.dev`.
+ * Preview is `{prefix}-{workerName}.robert-152.workers.dev`.
+ * A branch longer than the prefix budget becomes `{prefix}-{hash}-{workerName}`.
+ * `{workerName}` is `zonos-elements-serverless`, or `zonos-elements-serverless-test` for the test project.
+ * The label is at most 63 characters.
+ * @example feat-checkout-zonos-elements-serverless.robert-152.workers.dev
+ * @example zonos-elements-serverless-test.robert-152.workers.dev
+ */
+export const generateCloudflareWorkerPreviewUrl = ({ branchName, workerName = WORKER_NAME, }) => {
+    const normalized = normalizeWorkerBranch(branchName);
+    if (normalized.length === 0) {
+        throw new Error('Failed to build a Cloudflare worker preview name from the branch');
+    }
+    const plainBudget = WORKER_LABEL_MAX_LENGTH - workerName.length - 1;
+    if (normalized.length <= plainBudget) {
+        return `${normalized}-${workerName}.${WORKER_ACCOUNT_HOST}`;
+    }
+    const hash = previewHash(normalized);
+    const hashedBudget = plainBudget - PREVIEW_HASH_LENGTH - 1;
+    const prefix = normalized.slice(0, hashedBudget).replace(/-+$/g, '');
+    const label = prefix.length > 0
+        ? `${prefix}-${hash}-${workerName}`
+        : `${hash}-${workerName}`;
+    return `${label}.${WORKER_ACCOUNT_HOST}`;
+};
+export const cloudflareWorkerName = (isTest) => isTest ? WORKER_NAME_TEST : WORKER_NAME;
+/** `{workerName}.robert-152.workers.dev` with no branch prefix. */
+export const cloudflareWorkerHost = (workerName) => `${workerName}.${WORKER_ACCOUNT_HOST}`;

package/dist/collection/utils/resolveCloudflareRuntime.js

@@ -0,0 +1,15 @@
+/**
+ * Pages when Cloudflare Pages sets `CF_PAGES=1`.
+ * A Cloudflare build that is not Pages is the worker.
+ * Every other build is neither.
+ * `USE_OPENNEXT` is not an input.
+ */
+export const resolveCloudflareRuntime = ({ buildEnv, cfPages, }) => {
+    if (cfPages === '1') {
+        return 'pages';
+    }
+    if (buildEnv === 'cloudflare') {
+        return 'worker';
+    }
+    return 'other';
+};

package/dist/esm/{collect-CdrR5OBy.js → collect-Eo4gtyql.js}

@@ -2045,7 +2045,7 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
     var e = new Error(message);
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
-var version = "1.35.0";
+var version = "1.35.1";
 var packageJson = {
 	version: version};
 
@@ -2144,7 +2144,8 @@ var SDK_URL_MAPPING = {
     payments: '/assets/elements.bundle.min.js',
     sca: '/hosted-sca/sdk/v1/index.js',
     taxForm: '/widgets/taxForm/sdk/v1/index.js',
-    billing: '/widgets/checkout/sdk/v1/index.js'
+    billing: '/widgets/checkout/sdk/v1/index.js',
+    balance: '/widgets/embedded-balance/sdk/v1/index.js'
 };
 var ELEMENT_TO_SDK = {
     // legacy
@@ -2178,7 +2179,16 @@ var ELEMENT_TO_SDK = {
     scaManagement: 'sca',
     taxForm: 'taxForm',
     // billing elements
-    embeddedCheckout: 'billing'
+    embeddedCheckout: 'billing',
+    // balance elements
+    balanceOverview: 'balance',
+    balanceDetail: 'balance',
+    balanceActivities: 'balance',
+    balanceActivityDetails: 'balance',
+    balanceHistoryChart: 'balance',
+    balanceInfo: 'balance',
+    balanceScheduledTransactions: 'balance',
+    balanceList: 'balance'
 };
 var ELEMENT_GROUP_TO_ELEMENT = {
     payments: [
@@ -2207,7 +2217,17 @@ var ELEMENT_GROUP_TO_ELEMENT = {
         'lendingRfi',
         'mrmRfi',
     ],
-    billing: ['embeddedCheckout']
+    billing: ['embeddedCheckout'],
+    balance: [
+        'balanceOverview',
+        'balanceDetail',
+        'balanceActivities',
+        'balanceHistoryChart',
+        'balanceInfo',
+        'balanceScheduledTransactions',
+        'balanceList',
+        'balanceActivityDetails',
+    ]
 };
 var SDK_DEPENDENCIES = {
     billing: ['payments']

package/dist/esm/index.js

@@ -131,7 +131,7 @@ const getZonosQaUrl = () => {
         return null;
     }
     const qaUrl = extractZonosQaUrl(window.location.href);
-    const cdnUrl = "https://v1.3.292.js.zonos.com";
+    const cdnUrl = "https://v1.4.0.js.zonos.com";
     // when the qaUrl is not set and the built URL is from the test domain, use the test domain for testing
     if (!qaUrl &&
         (cdnUrl.includes('test.') ||
@@ -185,8 +185,10 @@ const getZonosQaUrl = () => {
 
 /* eslint-disable no-console */
 /** Loading stripe script extracted from stripe.js repository  */
+const STRIPE_API_VERSION = '2025-02-24.acacia';
 const V3_URL = 'https://js.stripe.com/v3';
 const V3_URL_REGEX = /^https:\/\/js\.stripe\.com\/v3\/?(\?.*)?$/;
+const V3_VERSION = 3;
 const EXISTING_SCRIPT_MESSAGE = 'loadStripe.setLoadParameters was called but an existing Stripe.js script already exists in the document; existing script parameters will be used';
 const zonosStripeFindScript = () => {
     const scripts = document.querySelectorAll(`script[src^="${V3_URL}"]`);
@@ -264,11 +266,31 @@ const registerWrapper = (stripe, startTime) => {
     }
     stripe._registerWrapper({ name: 'stripe-js', startTime });
 };
+const getStripeVersion = (stripeConstructor) => {
+    if (!('version' in stripeConstructor)) {
+        return;
+    }
+    const { version } = stripeConstructor;
+    return typeof version === 'number' || typeof version === 'string'
+        ? version
+        : undefined;
+};
 const initStripe = (maybeStripe, args, startTime) => {
     if (maybeStripe === null) {
         return null;
     }
-    const stripe = maybeStripe.apply(undefined, args);
+    const [publishableKey, callerOptions] = args;
+    const options = Object.assign({}, callerOptions);
+    const stripeVersion = getStripeVersion(maybeStripe);
+    const isNamedRelease = typeof stripeVersion === 'string' &&
+        stripeVersion !== V3_VERSION.toString();
+    if (isNamedRelease) {
+        delete options.apiVersion;
+    }
+    else {
+        options.apiVersion = STRIPE_API_VERSION;
+    }
+    const stripe = maybeStripe(publishableKey, options);
     registerWrapper(stripe, startTime);
     return stripe;
 };
@@ -394,10 +416,10 @@ const zonosLoadUrl = (() => {
     return null;
 })();
 const startLoadTime = Date.now();
-const ZONOS_URL = "https://v1.3.292.js.zonos.com";
-const JS_DELIVR_ZONOS_URL = zonosLoadUrl || "https://cdn.jsdelivr.net/npm/@zonos/elements@1.3.292";
-const UNPKG_ZONOS_URL = "https://unpkg.com/@zonos/elements@1.3.292";
-const CDNJS_ZONOS_URL = "https://cdnjs.cloudflare.com/ajax/libs/zonos-elements/1.3.292";
+const ZONOS_URL = "https://v1.4.0.js.zonos.com";
+const JS_DELIVR_ZONOS_URL = zonosLoadUrl || "https://cdn.jsdelivr.net/npm/@zonos/elements@1.4.0";
+const UNPKG_ZONOS_URL = "https://unpkg.com/@zonos/elements@1.4.0";
+const CDNJS_ZONOS_URL = "https://cdnjs.cloudflare.com/ajax/libs/zonos-elements/1.4.0";
 const GOOGLE_FONT_URL = 'https://fonts.googleapis.com';
 const GOOGLE_FONT_REGEX = /^https:\/\/fonts\.googleapis\.com/;
 class Zonos {
@@ -415,7 +437,7 @@ Zonos.iframeLogType = typeof window !== 'undefined'
     ? new URLSearchParams(window.location.search).get('iframeLogType')
     : null;
 Zonos.isBigCommerce = false;
-Zonos.releaseDate = "1791222618677";
+Zonos.releaseDate = "1792186375498";
 Zonos.isLegacyCheckout = false;
 Zonos.googleAnalyticId = null;
 Zonos.googleAnalyticReady = false;
@@ -440,7 +462,7 @@ Zonos.isNpm = true;
 Zonos.zonosQaUrl = null;
 Zonos.zonosQaUrlApi = null;
 Zonos.trackEventLogs = [];
-Zonos.version = `v${"1.3.292"}`;
+Zonos.version = `v${"1.4.0"}`;
 Zonos.modeAlerted = false;
 Zonos.cartData = null;
 Zonos.paypal = null;