@authvia/payment-method-create 1.0.7 → 1.0.9

package/dist/constants/apiHosts.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Permitted Authvia API hostnames baked in at library build time.
+ * Frozen at module load time.
+ */
+export declare const ALLOWED_API_HOSTS: readonly string[];
+/**
+ * Map of permitted API hostnames to their HTTPS origins.
+ */
+export declare const ALLOWED_BASE_URLS: Readonly<Record<string, string>>;
+/**
+ * Returns true when `apiHost` is on the compile-time allowlist.
+ *
+ * @param apiHost - Hostname to validate (not a full URL)
+ */
+export declare function isAllowedApiHost(apiHost: string): boolean;
+/**
+ * Validates `apiHost` against the allowlist.
+ *
+ * @param apiHost - Hostname to validate (not a full URL)
+ * @throws {PaymentMethodAPIError} When the hostname is not allowlisted
+ */
+export declare function assertAllowedApiHost(apiHost: string): void;

package/dist/entry/{index.d.ts → vue-plugin.d.ts}

@@ -2,7 +2,7 @@ import { App } from 'vue';
 import { default as AuthviaPaymentMethodCreate } from '../components/AuthviaPaymentMethodForm.vue';
 import { AuthviaPaymentMethodFormPluginOptions } from '../types';
 declare const AuthviaPaymentMethodCreatePlugin: {
-    install: (app: App, options?: AuthviaPaymentMethodFormPluginOptions) => void;
+    install: (app: App, options: AuthviaPaymentMethodFormPluginOptions) => void;
 };
 export default AuthviaPaymentMethodCreatePlugin;
 export { AuthviaPaymentMethodCreatePlugin };

package/dist/entry/web-component/AuthviaPaymentMethodFormElement.d.ts

@@ -0,0 +1,20 @@
+export declare class AuthviaPaymentMethodFormElement extends HTMLElement {
+    private app;
+    private shadow;
+    private container;
+    private vuetify;
+    private readonly vueLoader;
+    private readonly stylesheetManager;
+    private readonly bundledMdiUrl;
+    private readonly hasReportedMissingDependencies;
+    constructor();
+    static get observedAttributes(): string[];
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    attributeChangedCallback(name: string, oldValue: string | null, newValue: string | null): void;
+    private initializeComponent;
+    private mountComponent;
+    private dispatchCustomEvent;
+    private refreshVuetifyOverrideStyles;
+}
+export declare function registerAuthviaPaymentMethodFormElement(): void;

package/dist/entry/web-component/applyBuildTimeHostConfig.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Applies API host and Plaid environment from build-time `VITE_APP_API_BASE_URL`.
+ */
+export declare function applyBuildTimeHostConfig(): void;

package/dist/entry/web-component/constants.d.ts

@@ -0,0 +1,12 @@
+import { StylesheetDependency } from './types';
+export declare const TAG_NAME: string;
+export declare const DEPENDENCY_TIMEOUT_MS: number;
+export declare const MIN_VERSIONS: Readonly<{
+    vue: string;
+    vuetifyCss: string;
+    mdiCss: string;
+}>;
+export declare const STYLESHEET_DEPENDENCIES: StylesheetDependency[];
+export declare const OBSERVED_ATTRIBUTES: string[];
+/** Copied from :root or ancestors onto the host so embedders can theme the shadow tree. */
+export declare const HOST_CSS_VARIABLES: readonly string[];

package/dist/entry/web-component/dependencyRegistry.d.ts

@@ -0,0 +1,2 @@
+import { DependencyRegistry } from './types';
+export declare function getDependencyRegistry(): DependencyRegistry;

package/dist/entry/web-component/embeddedFormHelper.d.ts

@@ -0,0 +1,11 @@
+import { AuthviaPaymentMethodFormProps } from '../../types';
+/** Integration helper for programmatic usage */
+export declare function createEmbeddedPaymentMethodForm(config: {
+    container: HTMLElement;
+    props?: Partial<AuthviaPaymentMethodFormProps>;
+    onEvents?: Record<string, (e: Event) => void>;
+}): {
+    element: HTMLElement;
+    updateProps: (newProps: Partial<AuthviaPaymentMethodFormProps>) => void;
+    destroy: () => void;
+};

package/dist/entry/web-component/ensureDependencies.d.ts

@@ -0,0 +1,6 @@
+import { WebComponentStylesheetManager } from './stylesheetManager';
+import { WebComponentVueLoader } from './vueRuntimeLoader';
+/**
+ * Validates Vue runtime and stylesheet dependencies before mount.
+ */
+export declare function ensureWebComponentDependencies(vueLoader: WebComponentVueLoader, stylesheetManager: WebComponentStylesheetManager): Promise<void>;

package/dist/entry/web-component/index.d.ts

@@ -0,0 +1,4 @@
+import { AuthviaPaymentMethodFormElement } from './AuthviaPaymentMethodFormElement';
+import { createEmbeddedPaymentMethodForm } from './embeddedFormHelper';
+export { AuthviaPaymentMethodFormElement, createEmbeddedPaymentMethodForm };
+export default AuthviaPaymentMethodFormElement;

package/dist/entry/web-component/parseElementProps.d.ts

@@ -0,0 +1,12 @@
+import { AuthviaPaymentMethodFormProps } from '../../types';
+export type ParsedWebComponentProps = AuthviaPaymentMethodFormProps & {
+    achOnline?: boolean;
+};
+/**
+ * Maps `data-*` attributes on the custom element to Vue component props (without event handlers).
+ */
+export declare function parseElementProps(element: HTMLElement): ParsedWebComponentProps;
+/**
+ * Dialog overlays mount under the mount container; sync theme tokens there for teleports.
+ */
+export declare function syncContainerThemeTokens(container: HTMLDivElement, props: Pick<AuthviaPaymentMethodFormProps, 'color' | 'borderRadius'>): void;

package/dist/entry/web-component/reportMissingDependencies.d.ts

@@ -0,0 +1,7 @@
+import { MissingDependencyDetail } from './types';
+/**
+ * Reports missing dependency init failures to Sentry once per element lifecycle.
+ */
+export declare function reportMissingDependenciesToSentry(missing: MissingDependencyDetail[], hasReported: {
+    value: boolean;
+}): void;

package/dist/entry/web-component/semver.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Compares semver strings; returns 1 if left > right, -1 if left < right, 0 if equal.
+ */
+export declare function compareSemver(leftVersion: string, rightVersion: string): number;
+export declare function isVersionSatisfied(currentVersion: string | undefined, minimumVersion: string): boolean;

package/dist/entry/web-component/styleInjection.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Injects bundled component styles into the shadow root.
+ */
+export declare function injectComponentStyles(shadow: ShadowRoot): void;
+export declare function getVuetifyOverrideCss(element: HTMLElement): string;
+export declare function injectVuetifyOverrideStyles(shadow: ShadowRoot, css: string): void;
+/**
+ * Copy CSS variables from document :root and host ancestors onto the host element.
+ */
+export declare function copyCssVariablesFromRoot(host: HTMLElement): void;

package/dist/entry/web-component/stylesheetManager.d.ts

@@ -0,0 +1,20 @@
+import { StylesheetDependency } from './types';
+/**
+ * Resolves and injects Vuetify/MDI stylesheets into the shadow root.
+ */
+export declare class WebComponentStylesheetManager {
+    private readonly dependencyObservers;
+    private readonly shadow;
+    private readonly bundledMdiUrl;
+    private readonly hasBundledMdi;
+    constructor(shadow: ShadowRoot, bundledMdiUrl: string | null, hasBundledMdi: boolean);
+    cleanup(): void;
+    ensureStylesheetDependency(dependency: StylesheetDependency): Promise<boolean>;
+    private findParentStylesheet;
+    private observeStylesheet;
+    private injectStylesheetFromHref;
+    private insertStylesheetElement;
+    private parseVersionFromHref;
+    private injectBundledMdi;
+    private removeDependencyObserver;
+}

package/dist/entry/web-component/types.d.ts

@@ -0,0 +1,38 @@
+export type VueRuntime = typeof import('vue');
+export type DependencyKey = 'vue-runtime' | 'vuetify-css' | 'mdi-css';
+export interface StylesheetDependency {
+    key: Extract<DependencyKey, 'vuetify-css' | 'mdi-css'>;
+    label: string;
+    minVersion: string;
+    selector: string;
+    hint: string;
+}
+export interface StylesheetMatch {
+    href: string;
+    version?: string;
+}
+export interface MissingDependencyDetail {
+    dependency: DependencyKey;
+    label: string;
+    minimumVersion: string;
+    hint: string;
+}
+export type DependencyRegistry = Record<Extract<DependencyKey, 'vuetify-css' | 'mdi-css'>, {
+    status: 'pending' | 'ready' | 'missing';
+    href?: string;
+    version?: string;
+}>;
+declare global {
+    interface Window {
+        __AUTHVIA_DEPENDENCY_REGISTRY__?: DependencyRegistry;
+        __AUTHVIA_WEB_COMPONENT_CSS__?: string;
+        Vue?: VueRuntime;
+    }
+    interface GlobalThis {
+        Vue?: VueRuntime;
+    }
+}
+export declare class MissingDependencyError extends Error {
+    readonly missing: MissingDependencyDetail[];
+    constructor(missing: MissingDependencyDetail[]);
+}

package/dist/entry/web-component/vueRuntimeLoader.d.ts

@@ -0,0 +1,13 @@
+import { MissingDependencyDetail, VueRuntime } from './types';
+/**
+ * Loads Vue from global scope with polling fallback.
+ */
+export declare class WebComponentVueLoader {
+    vueRuntime: VueRuntime | null;
+    load(): Promise<VueRuntime | null>;
+    validateOrCollectMissing(): MissingDependencyDetail | null;
+    private getGlobalVueRuntime;
+    private waitForGlobalVueRuntime;
+}
+export declare function logMissingDependency(detail: MissingDependencyDetail): void;
+export declare function handleMissingDependencies(element: HTMLElement, missing: MissingDependencyDetail[]): void;

package/dist/types/index.d.ts

@@ -266,7 +266,7 @@ export interface PaymentMethodConfigItem {
 /**
  * Options for `AuthviaPaymentMethodFormPlugin` via `app.use(plugin, options)`.
  * Use when embedding in another Vue app so host config does not depend on this package's `import.meta.env`.
- * CDN and web-component-specific setup remain in `src/entry/web-component.ts`.
+ * CDN and web-component-specific setup remain in `src/entry/web-component/index.ts`.
  */
 export interface AuthviaPaymentMethodFormPluginOptions {
     apiBaseURL: string;

package/dist/utils/config.d.ts

@@ -1,9 +1,10 @@
 export declare const config: {
-    apiBaseUrl: string;
+    readonly apiBaseUrl: string;
     apiVersion: string;
     enableLogging: boolean;
     enableDebug: boolean;
     cdnUrl: string;
+    readonly plaidEnv: string;
     enableAnalytics: boolean;
     enableErrorReporting: boolean;
     enablePerformanceMonitoring: boolean;
@@ -26,11 +27,9 @@ export declare const DEFAULT_CREDIT_CARD_SCRIPT_PATH: string;
 /**
  * Resolves the `src` for the authvia-credit-card loader via {@link getCdnUrl} and `VITE_APP_CDN_URL`.
  *
- * Does not read the JWT `iss` claim. Older builds picked dev / nonprod / prod CDN hosts from the
- * token at runtime because we had no env variable to control the credit-card CDN path. We now set
- * `VITE_APP_CDN_URL` (and {@link CREDIT_CARD_WC_VERSION}) per deploy so each bundle targets one CDN.
- * API and Plaid hosts still follow the token via `resolveApiHost` in the web-component entry; publish
- * separate create-widget builds (or CDN bases) when partners need both API environments from one page.
+ * CDN and API hosts are fixed at build time via `VITE_APP_CDN_URL` and `VITE_APP_API_BASE_URL`
+ * (see `vite.config.wc.ts`). Load the dev, integration, or production CDN bundle that matches
+ * your environment. Vue plugin embeds pass `apiBaseURL` via `app.use(..., options)`.
  *
  * @returns A non-empty string suitable for a script element `src`
  */

package/dist/utils/domEventHelpers.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Returns true when `selector` matches an element on the event path.
+ * Uses composedPath so listeners on `document` work inside open Shadow DOM hosts.
+ */
+export declare function isEventInside(event: Event, selector: string): boolean;

package/dist/utils/errors.d.ts

@@ -28,5 +28,6 @@ export declare const ErrorCodes: {
     readonly INVALID_TOKEN: "INVALID_TOKEN";
     readonly PERMISSION_DENIED: "PERMISSION_DENIED";
     readonly NOT_FOUND: "NOT_FOUND";
+    readonly ENDPOINT_NOT_FOUND: "ENDPOINT_NOT_FOUND";
     readonly SERVER_ERROR: "SERVER_ERROR";
 };

package/dist/utils/normalizeApiHost.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Normalizes an API base URL or hostname to a bare hostname for {@link useHostService.api}.
+ *
+ * Accepts values such as `https://api.authvia-nonprod.com/` or `api.authvia-nonprod.com`.
+ */
+export declare function normalizeApiHost(apiBaseUrl: string): string;

package/dist/utils/tokenUtils.d.ts

@@ -13,15 +13,6 @@ export interface TokenPayload {
     'https://authvia.com/uuid'?: string;
     [key: string]: unknown;
 }
-/**
- * CDN URL of this script, captured while the module first executes so
- * `document.currentScript` is still live. Used as a fallback when the token
- * has no `iss` claim to derive the API environment from the serving hostname.
- *
- * Falls back to scanning `document.scripts` for the `authvia-payment-method-create`
- * entry (necessary for ES modules where `currentScript` is always `null`).
- */
-export declare const WC_SCRIPT_URL: string;
 /**
  * Parses a JWT and returns its payload (no signature verification).
  *
@@ -57,18 +48,6 @@ export declare function isTokenExpired(tokenParam: string, bufferSeconds?: numbe
  * Returns false if the token cannot be parsed or `scope` is missing.
  */
 export declare function hasPaymentMethodsCreateScope(tokenParam: string): boolean;
-/**
- * Derives the API hostname from a JWT's `iss` claim.
- *
- * If `token` contains a valid `iss` claim the hostname portion is returned (scheme and trailing
- * slashes stripped). When the token is absent or malformed, `scriptUrl` is used as a fallback:
- * the URL string is matched against known environment substrings to return the correct hostname.
- * Returns an empty string when neither source yields a value.
- *
- * @param token     - JWT token string (e.g. from the `data-token` attribute)
- * @param scriptUrl - Optional script URL used as an environment fallback (e.g. `WC_SCRIPT_URL`)
- */
-export declare function resolveApiHost(token?: string, scriptUrl?: string): string;
 /**
  * True when `error` is a normal token validation failure (malformed JWT, missing user claim, etc.).
  * Used to avoid reporting expected embedder or end-user mistakes to Sentry.

package/dist/vue-plugin.d.ts

@@ -1,6 +1,6 @@
-export * from '../entry/index'
+export * from '../entry/vue-plugin'
 export {}
-import AuthviaPaymentMethodCreate from '../entry/index'
+import AuthviaPaymentMethodCreate from '../entry/vue-plugin'
 export default AuthviaPaymentMethodCreate
-export * from '../entry/index'
+export * from '../entry/vue-plugin'
 export {}