SDK Changelogs
This page will collect SDK package release notes as public package versions are cut.
Unreleased
Section titled “Unreleased”@proxy-checkout/cli
Section titled “@proxy-checkout/cli”- Introduces the
proxybinary with browser/device authentication, securely stored revocable test-merchant profiles, stable structured output and exit codes, and agent-readable command schemas. - Adds canonical Proxy-signed webhook forwarding to loopback servers, explicit delivery inspection/replay/order controls, renewable listener leases, and optional Stripe CLI orchestration.
- Adds generated Stripe capability profiles so local listener setup and preflight event selection stay aligned with the API manifest.
- Version 0.1.1 supports rolling API deploys in both directions: it falls back to the canonical legacy Stripe profile against an older API, while a newer API accepts an older CLI only when that legacy profile is complete. Capability-expanded profiles require 0.1.1 or newer.
@proxy-checkout/server-js
Section titled “@proxy-checkout/server-js”- Adds canonical constants and predicates for initial refund events and observation-only Shopify reconciliation-refund, renewal, renewal-refund, and fulfillment events.
- Adds typed provider-acquisition reserve, attach, list, and supersede resources plus resolved acquisition-progress webhook handling.
- Resolves
subscription.changedas the distinct non-renewalsubscription_changedresult so configuration wakeups cannot extend entitlement access. - Returns stable cart/presentation state when payer-open encounters a payment-pending or terminal session, without exposing provider-create material.
- Resolves the complete direct-subscription current-state vocabulary, including configuration action, payment/Invoice attention, trial ending, pause/resume, cancellation schedule removal, and terminal cancellation. Signed events remain wakeups; merchant current state and idempotent fulfillment stay authoritative.
@proxy-checkout/stripe-server-js
Section titled “@proxy-checkout/stripe-server-js”- Requires the coordinated 0.1.x release line of
@proxy-checkout/server-jssoopenCheckoutcan safely use commercial-mode bindings, terminal presentation state, and the expanded provider-acquisition event contract. - Makes
openCheckoutreturn an explicitreadyor terminal result, reusing a shared bound Checkout Session across concurrent viewers and performing no Stripe create for completed sessions. - Waits briefly for Proxy’s completion state when Stripe has completed or expired a Checkout Session and removed its hosted URL/client secret, so another viewer receives terminal state instead of a presentation-shape error during webhook propagation.
- Adds discriminated hosted redirect, embedded client-secret, and custom client-secret presentations. The helper rejects URL/secret/UI-mode mismatches and unsupported version descriptors before payer rendering without hosted fallback.
- Custom Checkout examples collect and update the Checkout Session email before confirmation, display the provider total, and rely on the Session’s server-created
return_urlrather than sending a duplicatereturnUrltoconfirm(). - Adds exact compatibility floors for embedded (
14.0.0/2023-10-16/2.1.8/2.3.2) and custom (18.0.0/2025-03-31.basil/7.0.0/3.6.0) plus current provider-alias support. All implemented one-time and subscription paths are generally available after the complete current Stripe credential profile validates; existing configurations must re-save or rotate the restricted key once to validate newly required subscription reads. Webhook endpoint verification is advisory setup health. - Version 0.1.0 adds exact cart-version binding and marks Checkout-created PaymentIntents with their integration path. Upgrade from 0.0.x for stale-cart protection and order-independent child-Webhook correlation; the API continues accepting the older binding body during migration.
- Adds
openSetupIntentand explicit SetupIntent/saved-PaymentMethod branches foropenSubscription. Both use the shared order-scoped acquisition owner, merchant-injected Stripe client, fixed non-metered Price validation, deterministic Stripe idempotency, Customer/PaymentMethod coherence inside the merchant server, direct Subscription roots, and discriminated initial-Invoice authentication material.
@proxy-checkout/shopify-server-js
Section titled “@proxy-checkout/shopify-server-js”- Adds Storefront Cart creation/retrieval for Proxy’s public app and native Shopify Checkout handoffs.
- Adds strict Storefront Cart validation, explicit ambiguous-create behavior, secret redaction, and complete typed cart evidence.
Packages
Section titled “Packages”@proxy-checkout/cli@proxy-checkout/server-js@proxy-checkout/stripe-server-js@proxy-checkout/shopify-server-js@proxy-checkout/client-js