@basis-theory/web-elements 3.0.0-beta.4 → 3.0.0-beta.5

package/dist/postmessage/src/event-map.d.ts

@@ -1,139 +0,0 @@
-/**
- * Type-Safe Event Map
- *
- * Provides compile-time guarantees for event names and payloads.
- * Based on TypeScript event emitter best practices.
- *
- * Pattern: Event Map with Discriminated Unions
- * Benefits:
- * - Compile-time validation of event names
- * - Type-safe payload inference
- * - Self-documenting contracts
- * - IDE autocomplete support
- */
-import type { ElementEvent } from './types';
-/**
- * Validation error structure
- */
-export interface ValidationError {
-    /** Machine-readable error code */
-    code: string;
-    /** Human-readable error message */
-    message: string;
-}
-/**
- * Change event payload (base for all elements)
- */
-export interface ChangeEventPayload {
-    /** Whether the current value is valid */
-    isValid: boolean;
-    /** Whether the input is empty */
-    isEmpty: boolean;
-    /** Validation error (null if valid) */
-    error: ValidationError | null;
-}
-/**
- * Card number specific change payload
- * Extends base with card brand detection metadata
- */
-export interface CardNumberChangePayload extends ChangeEventPayload {
-    /** Detected card brand (Visa, Mastercard, etc.) */
-    cardBrand?: string;
-    /** Last 4 digits (PCI-safe, for display) */
-    last4?: string | null;
-    /** BIN (Bank Identification Number) - first 6-8 digits */
-    bin?: string | null;
-    /** CVV lengths for detected brand (for coordinating with CVV element) */
-    cvvLengths?: number[] | null;
-    /** All brands that could potentially match */
-    potentialBrands?: string[];
-    /** Match confidence (0-1, higher = more confident) */
-    matchStrength?: number;
-}
-/**
- * Card element specific change payload (unified card element)
- * Extends base with unified card state for all 3 sub-fields
- */
-export interface CardElementChangePayload extends ChangeEventPayload {
-    /** Detected card brand (Visa, Mastercard, etc.) */
-    cardBrand?: string;
-    /** Last 4 digits (PCI-safe, for display) */
-    last4?: string | null;
-    /** BIN (Bank Identification Number) - first 6-8 digits */
-    bin?: string | null;
-}
-/**
- * Error event payload
- */
-export interface ErrorEventPayload {
-    /** Machine-readable error code */
-    code: string;
-    /** Human-readable error message */
-    message: string;
-    /** HTTP status code (for API errors) */
-    status?: number;
-    /** Field-level validation errors from API */
-    validationErrors?: Record<string, string[]>;
-    /** Additional error context */
-    metadata?: {
-        /** Error source (e.g., 'tokenize', 'mount') */
-        source?: string;
-        /** Number of retry attempts */
-        retryCount?: number;
-        /** Full API response body (for debugging) */
-        body?: unknown;
-        /** Original error object */
-        originalError?: Error;
-    };
-}
-/**
- * Event Map - Central contract for all PostMessage events
- *
- * Maps event names to their payload types for compile-time safety.
- *
- * @example
- * ```typescript
- * // Type-safe subscription
- * client.subscribe<'EVENT_READY'>('EVENT_READY', (payload) => {
- *   // payload is inferred as { elementType: string }
- * });
- *
- * // Type-safe broadcast
- * server.broadcast<'EVENT_ERROR'>('EVENT_ERROR', {
- *   code: 'API_ERROR',
- *   message: 'Failed to tokenize'
- * });
- * ```
- */
-export interface PostMessageEventMap {
-    EVENT_READY: {
-        elementType: string;
-    };
-    EVENT_VALUE_CHANGED: ChangeEventPayload | CardNumberChangePayload | CardElementChangePayload;
-    EVENT_FOCUS: Record<string, never>;
-    EVENT_BLUR: Record<string, never>;
-    EVENT_ERROR: ErrorEventPayload;
-    /** Iframe document height (e.g. card number co-badge dropdown) — parent may resize iframe */
-    EVENT_CONTENT_HEIGHT: {
-        heightPx: number;
-    };
-}
-/**
- * Extract payload type from event name
- *
- * @example
- * ```typescript
- * type ReadyPayload = EventPayload<'EVENT_READY'>;
- * // Result: { elementType: string }
- * ```
- */
-export type EventPayload<T extends ElementEvent> = T extends keyof PostMessageEventMap ? PostMessageEventMap[T] : never;
-/**
- * Type-safe event listener function
- */
-export type EventListener<T extends ElementEvent> = (payload: EventPayload<T>) => void;
-/**
- * Type guard to check if event name is valid
- */
-export declare const isValidEvent: (event: string) => event is ElementEvent;
-//# sourceMappingURL=event-map.d.ts.map

package/dist/postmessage/src/event-map.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-map.d.ts","sourceRoot":"","sources":["../../../../postmessage/src/event-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IAEb,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IAEjB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IAEjB,uCAAuC;IACvC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE7B,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IAEb,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAEhB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5C,+BAA+B;IAC/B,QAAQ,CAAC,EAAE;QACT,+CAA+C;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;QAEhB,+BAA+B;QAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,6CAA6C;QAC7C,IAAI,CAAC,EAAE,OAAO,CAAC;QAEf,4BAA4B;QAC5B,aAAa,CAAC,EAAE,KAAK,CAAC;KACvB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAElC,WAAW,EAAE;QACX,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAGF,mBAAmB,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,wBAAwB,CAAC;IAG7F,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAGnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAGlC,WAAW,EAAE,iBAAiB,CAAC;IAE/B,6FAA6F;IAC7F,oBAAoB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,YAAY,IAC7C,CAAC,SAAS,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAEvE;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,YAAY,IAAI,CAClD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KACrB,IAAI,CAAC;AAEV;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,YAUrD,CAAC"}

package/dist/postmessage/src/index.d.ts

@@ -1,9 +0,0 @@
-/**
- * @basis-theory-elements/postmessage
- * Production-ready PostMessage protocol for secure cross-iframe communication
- */
-export * from './client';
-export * from './server';
-export * from './types';
-export * from './event-map';
-//# sourceMappingURL=index.d.ts.map

package/dist/postmessage/src/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../postmessage/src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC"}

package/dist/postmessage/src/server.d.ts

@@ -1,11 +0,0 @@
-/**
- * PostMessage Server (Iframe Side)
- * Production-ready server for handling requests from parent
- */
-import type { PostMessageServer } from './types';
-export interface PostMessageServerConfig {
-    allowedOrigins: string[];
-    debug?: boolean;
-}
-export declare const createPostMessageServer: (config: PostMessageServerConfig) => PostMessageServer;
-//# sourceMappingURL=server.d.ts.map

package/dist/postmessage/src/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../postmessage/src/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAIV,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,GAClC,QAAQ,uBAAuB,KAC9B,iBA6NF,CAAC"}

package/dist/postmessage/src/types.d.ts

@@ -1,75 +0,0 @@
-/**
- * PostMessage Module Types
- * Production-ready type definitions for secure cross-iframe communication
- */
-/**
- * Message types using semantic prefixes
- * EVENT_* = iframe → parent, CMD_* = parent → iframe, RESPONSE_* = follows request
- */
-export type ElementEvent = 'EVENT_READY' | 'EVENT_MASK_READY' | 'EVENT_VALUE_CHANGED' | 'EVENT_NETWORK_CHANGED' | 'EVENT_CONTENT_HEIGHT' | 'EVENT_FOCUS' | 'EVENT_BLUR' | 'EVENT_ERROR' | 'EVENT_COPY';
-export type ElementCommand = 'CMD_SET_CONFIG' | 'CMD_UPDATE_CONFIG' | 'CMD_SET_VALUE' | 'CMD_SET_VALUE_REF' | 'CMD_FOCUS' | 'CMD_BLUR' | 'CMD_CLEAR' | 'CMD_SET_NETWORK' | 'CMD_TOKENIZE' | 'CMD_TOKENS_ENCRYPT' | 'CMD_VALIDATE';
-export type ElementResponse = 'RESPONSE_CONFIG_OK' | 'RESPONSE_CONFIG_ERROR' | 'RESPONSE_TOKEN_OK' | 'RESPONSE_TOKEN_ERROR' | 'RESPONSE_VALIDATION';
-export type SystemMessage = 'SYS_PING' | 'SYS_PONG' | 'SYS_ACK';
-export type MessageType = ElementEvent | ElementCommand | ElementResponse | SystemMessage;
-export interface RetryConfig {
-    maxRetries: number;
-    initialDelay: number;
-    maxDelay: number;
-    backoffFactor: number;
-}
-export interface PostMessageConfig {
-    targetOrigin: string;
-    timeout?: number;
-    retries?: number | RetryConfig;
-    debug?: boolean;
-}
-export interface PostMessageRequest<T = any> {
-    type: MessageType | string;
-    nonce: string;
-    timestamp: number;
-    payload?: T;
-}
-export interface PostMessageResponse<T = any> {
-    type: MessageType | string;
-    nonce: string;
-    timestamp: number;
-    payload?: T;
-    error?: PostMessageError;
-}
-export type TimeoutReason = 'timeout' | 'blocked' | 'origin_mismatch' | 'network';
-export interface PostMessageError {
-    code: string;
-    message: string;
-    reason?: TimeoutReason;
-    status?: number;
-    statusCode?: number;
-    validationErrors?: Record<string, string[]>;
-    body?: any;
-    retryCount?: number;
-    details?: Record<string, unknown>;
-}
-export interface PendingRequest<T = any> {
-    resolve: (value: T) => void;
-    reject: (error: Error) => void;
-    timeout: NodeJS.Timeout;
-    timestamp: number;
-}
-export type MessageHandler<TRequest = any, TResponse = any> = (payload: TRequest) => Promise<TResponse> | TResponse;
-export interface SendRequestOptions {
-    /** Override retries for this request (0 disables retries) */
-    retries?: number;
-}
-export interface PostMessageClient {
-    sendRequest<TResponse = any, TRequest = any>(type: string, payload?: TRequest, options?: SendRequestOptions): Promise<TResponse>;
-    ping(timeout?: number): Promise<number>;
-    subscribe(type: string, callback: (payload: any) => void): () => void;
-    destroy(): void;
-    getPendingCount(): number;
-}
-export interface PostMessageServer {
-    handle<TRequest = any, TResponse = any>(type: string, handler: MessageHandler<TRequest, TResponse>): void;
-    broadcast(type: string, payload?: any): void;
-    destroy(): void;
-    getHandlerCount(): number;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/postmessage/src/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../postmessage/src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,kBAAkB,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,aAAa,GACb,YAAY,GACZ,aAAa,GACb,YAAY,CAAC;AAEjB,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,mBAAmB,GACnB,eAAe,GACf,mBAAmB,GACnB,WAAW,GACX,UAAU,GACV,WAAW,GACX,iBAAiB,GACjB,cAAc,GACd,oBAAoB,GACpB,cAAc,CAAC;AAEnB,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAEhE,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,cAAc,GACd,eAAe,GACf,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,GAAG;IACzC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,GAAG;IAC1C,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,SAAS,GACT,iBAAiB,GACjB,SAAS,CAAC;AAEd,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IAGvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAG5C,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,GAAG;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,CAAC,QAAQ,GAAG,GAAG,EAAE,SAAS,GAAG,GAAG,IAAI,CAC5D,OAAO,EAAE,QAAQ,KACd,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,SAAS,GAAG,GAAG,EAAE,QAAQ,GAAG,GAAG,EACzC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACtE,OAAO,IAAI,IAAI,CAAC;IAChB,eAAe,IAAI,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,QAAQ,GAAG,GAAG,EAAE,SAAS,GAAG,GAAG,EACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,GAC3C,IAAI,CAAC;IACR,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC;IAChB,eAAe,IAAI,MAAM,CAAC;CAC3B"}

package/dist/shared/src/api-url-resolver.d.ts

@@ -1,22 +0,0 @@
-/**
- * API URL Resolution Utility
- *
- * Simple same-origin API detection for v3
- * Shared across SDK and Elements packages
- */
-/**
- * Get default API base URL
- *
- * If user provides apiBaseUrl, use it.
- * Otherwise auto-detect based on environment:
- * - localhost or dev → https://js.flock-dev.com/api
- * - uat → https://js.btsandbox.com/api
- * - prod → https://js.basistheory.com/api
- *
- * @param userProvidedUrl - Optional user-provided API URL
- * @param enforceOrigin - If true, throws error for unauthorized origins (default: false)
- *                        SDK: false (runs on customer domains)
- *                        Elements: true (must run on BasisTheory domains)
- */
-export declare const getDefaultApiBaseUrl: (userProvidedUrl?: string, enforceOrigin?: boolean) => string;
-//# sourceMappingURL=api-url-resolver.d.ts.map

package/dist/shared/src/api-url-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-url-resolver.d.ts","sourceRoot":"","sources":["../../../../shared/src/api-url-resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAC/B,kBAAkB,MAAM,EACxB,uBAAqB,KACpB,MAkCF,CAAC"}

package/dist/shared/src/debug-logger.d.ts

@@ -1,16 +0,0 @@
-/**
- * Universal Debug Logger
- * PCI-compliant logging that never exposes sensitive data
- *
- * FR-005: Deep Logger Sanitization
- * - Recursively sanitizes nested objects/arrays
- * - Masks PANs to first 6 + last 4
- * - Redacts CVV/PIN/passwords completely
- * - Handles circular references
- */
-export type DebugLogger = (action: string, metadata?: Record<string, unknown>) => void;
-/**
- * Create a debug logger for a specific package
- */
-export declare const createDebugLogger: (packageName: string, enabled: boolean) => DebugLogger;
-//# sourceMappingURL=debug-logger.d.ts.map

package/dist/shared/src/debug-logger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-logger.d.ts","sourceRoot":"","sources":["../../../../shared/src/debug-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,WAAW,GAAG,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,IAAI,CAAC;AAiDV;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAC5B,aAAa,MAAM,EACnB,SAAS,OAAO,KACf,WAUF,CAAC"}

package/dist/shared/src/deep-sanitization.d.ts

@@ -1,24 +0,0 @@
-/**
- * FR-005: Deep Logger Sanitization
- * PCI-DSS Requirement 3.2 - Never Store Sensitive Authentication Data
- *
- * Recursively sanitizes objects to prevent PAN/CVV leakage in logs.
- */
-/**
- * Check if a field name matches PAN patterns
- */
-export declare const isPANField: (key: string) => boolean;
-/**
- * Check if a field name matches redact patterns
- */
-export declare const isRedactField: (key: string) => boolean;
-/**
- * Deep sanitize an unknown value
- *
- * @param data - Data to sanitize
- * @param depth - Current recursion depth (max 5)
- * @param visited - WeakSet to track visited objects (circular reference detection)
- * @returns Sanitized data
- */
-export declare const sanitizeDeep: (data: unknown, depth?: number, ancestors?: WeakSet<object>) => unknown;
-//# sourceMappingURL=deep-sanitization.d.ts.map

package/dist/shared/src/deep-sanitization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deep-sanitization.d.ts","sourceRoot":"","sources":["../../../../shared/src/deep-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,OAExC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,KAAG,OAE3C,CAAC;AAgFF;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,OAAO,EACb,cAAS,EACT,2BAAiC,KAChC,OAgEF,CAAC"}

package/dist/shared/src/errors.d.ts

@@ -1,93 +0,0 @@
-/**
- * BasisTheory Structured Error Types
- *
- * Functional error factories for consistent error handling across SDK, Elements, and API Client.
- */
-export interface BasisTheoryErrorType extends Error {
-    readonly code: string;
-    readonly details?: Record<string, any>;
-    toJSON: () => {
-        name: string;
-        code: string;
-        message: string;
-        details?: Record<string, any>;
-    };
-}
-/**
- * Base BasisTheoryError factory
- * Creates error objects with consistent structure
- */
-export declare const createBasisTheoryError: (code: string, message: string, details?: Record<string, any>) => BasisTheoryErrorType;
-/**
- * BasisTheoryError - Generic base error
- */
-export declare const BasisTheoryError: (code: string, message: string, details?: Record<string, any>) => BasisTheoryErrorType;
-/**
- * ValidationError - Input validation failures
- *
- * @example
- * throw ValidationError('Card number is invalid', 'cardNumber', {
- *   received: '1234',
- *   expected: '13-19 digits'
- * });
- */
-export interface ValidationErrorType extends BasisTheoryErrorType {
-    readonly field?: string;
-}
-export declare const ValidationError: (message: string, field?: string, details?: Record<string, any>) => ValidationErrorType;
-/**
- * CoordinatorError - Errors from coordinator iframe operations
- *
- * @example
- * throw CoordinatorError('Tokenization failed', {
- *   operation: 'tokenize',
- *   elementId: 'card-123'
- * });
- */
-export declare const CoordinatorError: (message: string, details?: Record<string, any>) => BasisTheoryErrorType;
-/**
- * ElementError - Errors from element iframe operations
- *
- * @example
- * throw ElementError('Element not mounted', 'card-number-123', {
- *   reason: 'mount() was never called'
- * });
- */
-export interface ElementErrorType extends BasisTheoryErrorType {
-    readonly elementId?: string;
-}
-export declare const ElementError: (message: string, elementId?: string, details?: Record<string, any>) => ElementErrorType;
-/**
- * NetworkError - HTTP/Network-related errors
- *
- * @example
- * throw NetworkError('API request failed', 500, {
- *   url: 'https://api.basistheory.com/tokens',
- *   method: 'POST'
- * });
- */
-export interface NetworkErrorType extends BasisTheoryErrorType {
-    readonly statusCode?: number;
-}
-export declare const NetworkError: (message: string, statusCode?: number, details?: Record<string, any>) => NetworkErrorType;
-/**
- * ConfigurationError - SDK/Element configuration errors
- *
- * @example
- * throw ConfigurationError('Invalid API key', {
- *   provided: 'key_test_invalid',
- *   expected: 'key_test_* or key_live_*'
- * });
- */
-export declare const ConfigurationError: (message: string, details?: Record<string, any>) => BasisTheoryErrorType;
-/**
- * EncryptionError - Client-side encryption errors
- *
- * @example
- * throw EncryptionError('JWE encryption failed', 'ENCRYPTION_FAILED', {
- *   algorithm: 'ECDH-ES',
- *   keyId: 'key_123'
- * });
- */
-export declare const EncryptionError: (message: string, code?: string, details?: Record<string, any>) => BasisTheoryErrorType;
-//# sourceMappingURL=errors.d.ts.map

package/dist/shared/src/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../shared/src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,oBAAqB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC/B,CAAC;CACH;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GACjC,MAAM,MAAM,EACZ,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,oBAoBF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,oBAIF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,QAAQ,MAAM,EACd,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,mBAWF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAC3B,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,oBAIF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,YAAY,GACvB,SAAS,MAAM,EACf,YAAY,MAAM,EAClB,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,gBAWF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,YAAY,GACvB,SAAS,MAAM,EACf,aAAa,MAAM,EACnB,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,gBAWF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,GAC7B,SAAS,MAAM,EACf,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,oBAIF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,EACf,OAAM,MAA2B,EACjC,UAAU,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAC5B,oBAIF,CAAC"}

package/dist/shared/src/generate-id.d.ts

@@ -1,13 +0,0 @@
-/**
- * Generate a unique identifier for elements
- *
- * Uses crypto.randomUUID() if available (Node 14.17+, all modern browsers)
- * Falls back to Math.random() for older environments (rare)
- *
- * Format: Standard UUID v4 (e.g., "550e8400-e29b-41d4-a716-446655440000")
- *
- * Note: This utility is rarely needed as the coordinator generates element IDs
- * via CMD_REGISTER_ELEMENT using crypto.randomUUID() directly.
- */
-export declare const generateId: () => string;
-//# sourceMappingURL=generate-id.d.ts.map

package/dist/shared/src/generate-id.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-id.d.ts","sourceRoot":"","sources":["../../../../shared/src/generate-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,QAAO,MAuB7B,CAAC"}

package/dist/shared/src/index.d.ts

@@ -1,14 +0,0 @@
-/**
- * @basis-theory-elements/shared
- * Shared utilities for all BasisTheory Elements packages
- */
-export { createDebugLogger } from './debug-logger';
-export type { DebugLogger } from './debug-logger';
-export { sanitizeDeep } from './deep-sanitization';
-export { getDefaultApiBaseUrl } from './api-url-resolver';
-export { generateId } from './generate-id';
-export { configureLogger, getLogger, log } from './logger-context';
-export { BasisTheoryError, ValidationError, CoordinatorError, ElementError, NetworkError, ConfigurationError, EncryptionError, } from './errors';
-export type { BasisTheoryErrorType, ValidationErrorType, ElementErrorType, NetworkErrorType, } from './errors';
-export { ALLOWED_METHODS, ALLOWED_PROXY_SCHEMES, FORBIDDEN_PROXY_HEADERS, validateProxyHeaders, validateProxyTarget, validateProxyOptions, } from './proxy-validation';
-//# sourceMappingURL=index.d.ts.map

package/dist/shared/src/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../shared/src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAGnE,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC"}

package/dist/shared/src/logger-context.d.ts

@@ -1,25 +0,0 @@
-/**
- * Shared Logger Context
- *
- * Provides a global logger instance that can be controlled by the coordinator.
- * Elements import this and use the shared logger without passing it around.
- */
-import { type DebugLogger } from './debug-logger';
-/**
- * Configure the global logger (called by coordinator on init)
- *
- * @param packageName - Package name for log prefix
- * @param enabled - Whether debug logging is enabled
- */
-export declare const configureLogger: (packageName: string, enabled: boolean) => void;
-/**
- * Get the current logger instance
- *
- * Elements use this to get the shared logger
- */
-export declare const getLogger: () => DebugLogger;
-/**
- * Convenience: Log directly without getting logger first
- */
-export declare const log: (action: string, metadata?: Record<string, unknown>) => void;
-//# sourceMappingURL=logger-context.d.ts.map

package/dist/shared/src/logger-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger-context.d.ts","sourceRoot":"","sources":["../../../../shared/src/logger-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAOrE;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC1B,aAAa,MAAM,EACnB,SAAS,OAAO,KACf,IAEF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,SAAS,QAAO,WAA2B,CAAC;AAEzD;;GAEG;AACH,eAAO,MAAM,GAAG,GACd,QAAQ,MAAM,EACd,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACjC,IAEF,CAAC"}

package/dist/shared/src/proxy-validation.d.ts

@@ -1,93 +0,0 @@
-/**
- * Proxy Request Validation
- *
- * Shared validation utilities for proxy requests across SDK and Coordinator.
- * Ensures consistent security controls and validation behavior.
- */
-/**
- * Security: Allowed URL schemes for proxy requests
- *
- * Only HTTPS are permitted to prevent:
- * - javascript: XSS attacks
- * - file:// local file access
- * - data: data exfiltration
- * - Other dangerous schemes
- */
-export declare const ALLOWED_PROXY_SCHEMES: Set<string>;
-/**
- * Allowed HTTP methods for proxy requests
- */
-export declare const ALLOWED_METHODS: Set<string>;
-/**
- * Security: Headers that could enable request smuggling or bypass controls
- *
- * These headers are blocked to prevent various attack vectors:
- *
- * Request Smuggling Prevention:
- * - host: Prevents host header injection attacks
- * - content-length: Prevents content-length manipulation for request smuggling
- * - transfer-encoding: Prevents TE.CL and CL.TE smuggling attacks
- * - te: Transfer-Encoding negotiation header used in smuggling
- * - trailer: Used with chunked encoding, potential smuggling vector
- *
- * Connection Manipulation Prevention:
- * - connection: Prevents hop-by-hop header manipulation
- * - upgrade: Prevents protocol upgrade attacks (e.g., WebSocket hijacking)
- * - keep-alive: Prevents connection persistence manipulation
- * - proxy-connection: Non-standard proxy connection header
- *
- * Proxy Bypass Prevention:
- * - via: Prevents proxy chain manipulation
- * - proxy-authorization: Prevents authentication to intermediate proxies
- *
- * BasisTheory Credential Protection:
- * - bt-api-key: Prevents API key override/leakage
- * - bt-proxy-key: Prevents proxy key override/leakage
- * - bt-idempotency-key: Prevents idempotency key manipulation
- */
-export declare const FORBIDDEN_PROXY_HEADERS: Set<string>;
-/**
- * Validate that headers don't contain forbidden values
- *
- * @param headers - Headers object to validate
- * @throws ValidationError if a forbidden header is found
- */
-export declare const validateProxyHeaders: (headers?: Record<string, string>) => void;
-/**
- * Validate proxy request options (url XOR proxyKey)
- *
- * Ensures exactly one of `url` or `proxyKey` is provided.
- * - `url`: Ephemeral proxy - destination URL provided at request time
- * - `proxyKey`: Pre-configured proxy - uses server-side proxy configuration
- *
- * When `url` is provided, also validates:
- * - URL is well-formed
- * - URL scheme is https: only (prevents javascript:, file://, http:, etc.)
- * - No userinfo (username/password) in URL
- * - No private/internal IP addresses (SSRF prevention)
- * - No blocked hostnames (cloud metadata, localhost, etc.)
- *
- * @param url - Destination URL (optional)
- * @param proxyKey - Pre-configured proxy key (optional)
- * @throws ValidationError if neither or both are provided, or if URL is invalid
- */
-export declare const validateProxyTarget: (url?: string, proxyKey?: string) => void;
-/**
- * Validate complete proxy request options
- *
- * Performs all proxy validation:
- * 1. Validates options is a plain object (if provided)
- * 2. Validates url XOR proxyKey requirement
- * 3. Validates headers don't contain forbidden values
- * 4. When `method` is present, validates it is an allowed HTTP verb
- *
- * @param options - Proxy request options
- * @throws ValidationError on validation failure
- */
-export declare const validateProxyOptions: (options?: {
-    url?: string;
-    proxyKey?: string;
-    headers?: Record<string, string>;
-    method?: string;
-}) => void;
-//# sourceMappingURL=proxy-validation.d.ts.map

package/dist/shared/src/proxy-validation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-validation.d.ts","sourceRoot":"","sources":["../../../../shared/src/proxy-validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,aAAsB,CAAC;AAEzD;;GAEG;AACH,eAAO,MAAM,eAAe,aAM1B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,uBAAuB,aA2BlC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC/B,IAmBF,CAAC;AAyRF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,mBAAmB,GAC9B,MAAM,MAAM,EACZ,WAAW,MAAM,KAChB,IAeF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,GAC/B,UAAU;IACR,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,KACA,IAcF,CAAC"}

package/dist/web-elements/src/BasisTheory.d.ts

@@ -1,47 +0,0 @@
-/**
- * @basis-theory/web-elements
- * Main SDK factory function
- */
-import type { BasisTheorySDK, SDKOptions } from './types';
-/**
- * Queued command from loader
- * Commands are queued before SDK loads, then replayed
- */
-interface QueuedCommand {
-    method: 'createElement' | 'tokenize' | 'updateThemeMode';
-    args: any[];
-    resolve: (result: any) => void;
-    reject: (error: Error) => void;
-}
-/**
- * Creates a BasisTheory SDK instance
- * Factory function (no class, pure functional approach)
- *
- * @param apiKey - Your Basis Theory public API key (starts with 'pk_')
- * @param options - SDK configuration options
- * @param queuedCommands - Optional: Commands queued by loader before SDK loaded
- * @returns SDK instance with methods to create and tokenize elements
- *
- * @example
- * ```typescript
- * import BasisTheory from '@basis-theory/web-elements';
- *
- * const bt = BasisTheory('pk_test_YOUR_API_KEY');
- *
- * const cardNumber = bt.createElement('cardNumber', {
- *   placeholder: '4111 1111 1111 1111'
- * });
- *
- * await cardNumber.mount('#card-number');
- * ```
- */
-declare const BasisTheory: (apiKey: string, options?: SDKOptions, queuedCommands?: QueuedCommand[]) => BasisTheorySDK;
-declare global {
-    interface Window {
-        BasisTheory?: typeof BasisTheory;
-    }
-}
-export default BasisTheory;
-export { BasisTheory };
-export type { BasisTheorySDK, CardElement, ChangeEventDetail, Element, ElementOptions, ElementType, ErrorEventDetail, EventListener, EventType, ProxyRequestOptions, ProxyResponse, ReadyEventDetail, SDKOptions, TokenizeInput, TokenizeResult, } from './types';
-//# sourceMappingURL=BasisTheory.d.ts.map

package/dist/web-elements/src/BasisTheory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"BasisTheory.d.ts","sourceRoot":"","sources":["../../../src/BasisTheory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,KAAK,EACV,cAAc,EAUd,UAAU,EAQX,MAAM,SAAS,CAAC;AAMjB;;;GAGG;AACH,UAAU,aAAa;IACrB,MAAM,EAAE,eAAe,GAAG,UAAU,GAAG,iBAAiB,CAAC;IACzD,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,QAAA,MAAM,WAAW,GACf,QAAQ,MAAM,EACd,UAAS,UAAe,EACxB,iBAAiB,aAAa,EAAE,KAC/B,cAg+BF,CAAC;AAMF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,WAAW,CAAC,EAAE,OAAO,WAAW,CAAC;KAClC;CACF;AAgBD,eAAe,WAAW,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,CAAC;AAGvB,YAAY,EACV,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,cAAc,GACf,MAAM,SAAS,CAAC"}