@cimplify/sdk 0.103.0 → 0.104.0

package/dist/{chunk-JSWJ4XDE.js → chunk-IQFFSKE2.js}

@@ -1,8 +1,8 @@
 'use strict';
 
 var chunkCNN7Z2IP_js = require('./chunk-CNN7Z2IP.js');
-var chunkNNG6IFFX_js = require('./chunk-NNG6IFFX.js');
-var chunkJG5CQNCB_js = require('./chunk-JG5CQNCB.js');
+var chunk7PDEX54K_js = require('./chunk-7PDEX54K.js');
+var chunk4BKOKHE3_js = require('./chunk-4BKOKHE3.js');
 
 // src/types/result.ts
 function ok(value) {
@@ -117,11 +117,11 @@ function clearIntentIdempotencyKey(scope, storage = sessionStorageOrNull()) {
 
 // src/internal/safe.ts
 function toCimplifyError(error) {
-  if (error instanceof chunkJG5CQNCB_js.CimplifyError) return chunkJG5CQNCB_js.enrichError(error);
+  if (error instanceof chunk4BKOKHE3_js.CimplifyError) return chunk4BKOKHE3_js.enrichError(error);
   if (error instanceof Error) {
-    return chunkJG5CQNCB_js.enrichError(new chunkJG5CQNCB_js.CimplifyError(chunkJG5CQNCB_js.ErrorCode.UNKNOWN_ERROR, error.message, false));
+    return chunk4BKOKHE3_js.enrichError(new chunk4BKOKHE3_js.CimplifyError(chunk4BKOKHE3_js.ErrorCode.UNKNOWN_ERROR, error.message, false));
   }
-  return chunkJG5CQNCB_js.enrichError(new chunkJG5CQNCB_js.CimplifyError(chunkJG5CQNCB_js.ErrorCode.UNKNOWN_ERROR, String(error), false));
+  return chunk4BKOKHE3_js.enrichError(new chunk4BKOKHE3_js.CimplifyError(chunk4BKOKHE3_js.ErrorCode.UNKNOWN_ERROR, String(error), false));
 }
 async function safe(promise) {
   try {
@@ -696,7 +696,7 @@ var CartOperations = class {
     if (typeof updates.quantity !== "number") {
       return {
         ok: false,
-        error: new chunkJG5CQNCB_js.CimplifyError(
+        error: new chunk4BKOKHE3_js.CimplifyError(
           "VALIDATION_ERROR",
           "updateItem requires a quantity; richer mid-cart edits are not supported"
         )
@@ -909,7 +909,7 @@ var CheckoutResolver = class {
         return this.finalizeSuccess(checkoutResult);
       }
       if (this.isFailureStatus(checkoutResult.payment_status)) {
-        const normalized = chunkNNG6IFFX_js.normalizeStatusResponse({
+        const normalized = chunk7PDEX54K_js.normalizeStatusResponse({
           status: checkoutResult.payment_status,
           paid: false
         });
@@ -1045,7 +1045,7 @@ var CheckoutResolver = class {
         case NEXT_ACTION_REDIRECT: {
           const limitFailure = this.consumeAuthorizationStep(resolutionState);
           if (limitFailure) return limitFailure;
-          const authorizationUrl = chunkNNG6IFFX_js.paymentAuthorizationUrl(action.authorization_url);
+          const authorizationUrl = chunk7PDEX54K_js.paymentAuthorizationUrl(action.authorization_url);
           if (!authorizationUrl) {
             return this.fail(
               "INVALID_REDIRECT_AUTHORIZATION",
@@ -1169,22 +1169,22 @@ var CheckoutResolver = class {
       if (statusResult.value.reference) {
         paymentReference = statusResult.value.reference;
       }
-      const normalized = chunkNNG6IFFX_js.normalizeStatusResponse(statusResult.value);
-      if (normalized.paid || chunkNNG6IFFX_js.isPaymentStatusSuccess(normalized.status)) {
+      const normalized = chunk7PDEX54K_js.normalizeStatusResponse(statusResult.value);
+      if (normalized.paid || chunk7PDEX54K_js.isPaymentStatusSuccess(normalized.status)) {
         return this.finalizeSuccess({
           ...latestCheckoutResult,
           payment_status: normalized.status,
           payment_reference: paymentReference || latestCheckoutResult.payment_reference
         });
       }
-      if (chunkNNG6IFFX_js.isPaymentStatusFailure(normalized.status)) {
+      if (chunk7PDEX54K_js.isPaymentStatusFailure(normalized.status)) {
         return this.fail(
           normalized.status ? normalized.status.toUpperCase() : "PAYMENT_FAILED",
           normalized.message || "Payment failed during confirmation.",
           false
         );
       }
-      if (chunkNNG6IFFX_js.isPaymentStatusRequiresAction(normalized.status)) {
+      if (chunk7PDEX54K_js.isPaymentStatusRequiresAction(normalized.status)) {
         const authorizationType = latestCheckoutResult.authorization_type;
         const paymentId = latestCheckoutResult.payment_id;
         if (!authorizationType || !normalizeAuthorizationType(authorizationType) || !paymentId) {
@@ -1413,14 +1413,14 @@ var CheckoutResolver = class {
   getOrderCurrency(checkoutResult) {
     if (checkoutResult.fx?.pay_currency) {
       const currency2 = checkoutResult.fx.pay_currency.trim().toUpperCase();
-      return chunkJG5CQNCB_js.isSupportedCurrency(currency2) ? currency2 : void 0;
+      return chunk4BKOKHE3_js.isSupportedCurrency(currency2) ? currency2 : void 0;
     }
     if (this.checkoutData.pay_currency) {
       const currency2 = this.checkoutData.pay_currency.trim().toUpperCase();
-      return chunkJG5CQNCB_js.isSupportedCurrency(currency2) ? currency2 : void 0;
+      return chunk4BKOKHE3_js.isSupportedCurrency(currency2) ? currency2 : void 0;
     }
     const currency = this.cartCurrency.trim().toUpperCase();
-    return chunkJG5CQNCB_js.isSupportedCurrency(currency) ? currency : void 0;
+    return chunk4BKOKHE3_js.isSupportedCurrency(currency) ? currency : void 0;
   }
   emit(status, context = {}) {
     if (!this.onStatusChange) {
@@ -1451,12 +1451,12 @@ var CheckoutResolver = class {
     };
   }
   isSuccessfulStatus(status) {
-    const normalized = chunkNNG6IFFX_js.normalizeStatusResponse({ status, paid: false });
-    return normalized.paid || chunkNNG6IFFX_js.isPaymentStatusSuccess(normalized.status);
+    const normalized = chunk7PDEX54K_js.normalizeStatusResponse({ status, paid: false });
+    return normalized.paid || chunk7PDEX54K_js.isPaymentStatusSuccess(normalized.status);
   }
   isFailureStatus(status) {
-    const normalized = chunkNNG6IFFX_js.normalizeStatusResponse({ status, paid: false });
-    return chunkNNG6IFFX_js.isPaymentStatusFailure(normalized.status);
+    const normalized = chunk7PDEX54K_js.normalizeStatusResponse({ status, paid: false });
+    return chunk7PDEX54K_js.isPaymentStatusFailure(normalized.status);
   }
   ensureNotAborted() {
     if (this.signal?.aborted) {
@@ -1544,14 +1544,14 @@ var CheckoutService = class {
   }
   validateCheckoutData(data) {
     if (isOfflinePaymentMethod(data.payment_method)) {
-      return new chunkJG5CQNCB_js.CimplifyError(
+      return new chunk4BKOKHE3_js.CimplifyError(
         "INVALID_PAYMENT_METHOD",
         "Offline payment isn't available for online checkout. Please pay by card or mobile money.",
         false
       );
     }
     if (!isValidCustomerName(data.customer?.name)) {
-      return new chunkJG5CQNCB_js.CimplifyError(
+      return new chunk4BKOKHE3_js.CimplifyError(
         "INVALID_CUSTOMER_NAME",
         "Enter your name, not a phone number.",
         false
@@ -1566,10 +1566,10 @@ var CheckoutService = class {
   /** Available storefront collection methods for one presentment currency. */
   async collectionOptions(currency) {
     const normalized = currency.trim().toUpperCase();
-    if (!chunkJG5CQNCB_js.isSupportedCurrency(normalized)) {
+    if (!chunk4BKOKHE3_js.isSupportedCurrency(normalized)) {
       return err(
-        new chunkJG5CQNCB_js.CimplifyError(
-          chunkJG5CQNCB_js.ErrorCode.UNSUPPORTED_CURRENCY,
+        new chunk4BKOKHE3_js.CimplifyError(
+          chunk4BKOKHE3_js.ErrorCode.UNSUPPORTED_CURRENCY,
           "No online payment method is available for this currency.",
           false
         )
@@ -1583,8 +1583,8 @@ var CheckoutService = class {
     if (!response.ok) return response;
     const options = normalizeCollectionOptions(response.value, normalized);
     return options ? ok(options) : err(
-      new chunkJG5CQNCB_js.CimplifyError(
-        chunkJG5CQNCB_js.ErrorCode.PAYMENT_CAPABILITY_MISMATCH,
+      new chunk4BKOKHE3_js.CimplifyError(
+        chunk4BKOKHE3_js.ErrorCode.PAYMENT_CAPABILITY_MISMATCH,
         "Payment methods could not be verified for this currency.",
         false
       )
@@ -1620,14 +1620,14 @@ var CheckoutService = class {
       if (result.value.bill_token) {
         this.client.setOrderToken(result.value.order_id, result.value.bill_token);
       }
-    } else if (result.error.code !== chunkJG5CQNCB_js.ErrorCode.NETWORK_ERROR && result.error.code !== chunkJG5CQNCB_js.ErrorCode.TIMEOUT) {
+    } else if (result.error.code !== chunk4BKOKHE3_js.ErrorCode.NETWORK_ERROR && result.error.code !== chunk4BKOKHE3_js.ErrorCode.TIMEOUT) {
       clearIntentIdempotencyKey(intentScope);
     }
     return result;
   }
   async initializePayment(_orderId, _method) {
     return err(
-      new chunkJG5CQNCB_js.CimplifyError(
+      new chunk4BKOKHE3_js.CimplifyError(
         "NOT_IMPLEMENTED",
         "initializePayment is not available in REST mode.",
         false
@@ -1704,7 +1704,7 @@ var CheckoutService = class {
       pay_deposit: data.pay_deposit
     };
     const rawBaseCurrency = typeof cart.pricing.currency === "string" ? cart.pricing.currency.trim().toUpperCase() : "";
-    if (!chunkJG5CQNCB_js.isSupportedCurrency(rawBaseCurrency)) {
+    if (!chunk4BKOKHE3_js.isSupportedCurrency(rawBaseCurrency)) {
       return ok(
         toTerminalFailure(
           "INVALID_CURRENCY",
@@ -1715,7 +1715,7 @@ var CheckoutService = class {
     }
     const baseCurrency = rawBaseCurrency;
     const payCurrency = data.pay_currency?.trim().toUpperCase();
-    if (payCurrency && !chunkJG5CQNCB_js.isSupportedCurrency(payCurrency)) {
+    if (payCurrency && !chunk4BKOKHE3_js.isSupportedCurrency(payCurrency)) {
       return ok(
         toTerminalFailure(
           "INVALID_CURRENCY",
@@ -1724,7 +1724,7 @@ var CheckoutService = class {
         )
       );
     }
-    const payCurrencyCode = payCurrency && chunkJG5CQNCB_js.isSupportedCurrency(payCurrency) ? payCurrency : void 0;
+    const payCurrencyCode = payCurrency && chunk4BKOKHE3_js.isSupportedCurrency(payCurrency) ? payCurrency : void 0;
     const cartTotalAmount = typeof cart.pricing.total_price === "number" ? cart.pricing.total_price : Number.parseFloat(cart.pricing.total_price || "0");
     if (payCurrencyCode && payCurrencyCode !== baseCurrency && !checkoutData.fx_quote_id && Number.isFinite(cartTotalAmount) && cartTotalAmount > 0) {
       const fxQuoteResult = await this.client.fx.lockQuote({
@@ -1835,43 +1835,86 @@ function encodePathSegment(value) {
 var LinkService = class {
   constructor(client) {
     this.client = client;
+    this.activationGeneration = 0;
+  }
+  beginActivation() {
+    return {
+      generation: ++this.activationGeneration,
+      sessionEpoch: this.client.getSessionEpoch(),
+      publicKeyEpoch: this.client.getPublicKeyEpoch()
+    };
+  }
+  isActivationFenceCurrent(fence) {
+    return fence.generation === this.activationGeneration && fence.sessionEpoch === this.client.getSessionEpoch() && fence.publicKeyEpoch === this.client.getPublicKeyEpoch();
+  }
+  supersededActivation() {
+    return {
+      ok: false,
+      error: new chunk4BKOKHE3_js.CimplifyError(
+        "session_superseded",
+        "A newer authentication session replaced this one"
+      )
+    };
+  }
+  async activateAuthenticatedSession(result, fence) {
+    if (!result.ok || !result.value.session_token) return result;
+    if (!this.isActivationFenceCurrent(fence)) return this.supersededActivation();
+    const accessToken = result.value.session_token;
+    this.client.setAccessToken(accessToken);
+    const installedSessionEpoch = this.client.getSessionEpoch();
+    if (!this.client.getPublicKey().trim()) {
+      this.client.activity.refreshIdentity();
+      return result;
+    }
+    const claim = await this.client.support.claimConversation();
+    if (fence.generation !== this.activationGeneration || fence.publicKeyEpoch !== this.client.getPublicKeyEpoch() || this.client.getAccessToken() !== accessToken) {
+      return this.supersededActivation();
+    }
+    if (!claim.ok && claim.error.code !== "already_claimed") {
+      if (this.client.getSessionEpoch() !== installedSessionEpoch) {
+        return this.supersededActivation();
+      }
+      if (this.client.hasClaimedSessionAuthority()) {
+        this.client.clearSession();
+      } else {
+        this.client.setAccessToken(null);
+      }
+      return claim;
+    }
+    this.client.activity.refreshIdentity();
+    return result;
   }
   async requestOtp(input, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
-      this.client.linkPost("/v1/link/auth/request-otp", input, { idempotencyKey })
+      this.client.linkPost("/v1/link/auth/request-otp", input, {
+        idempotencyKey
+      })
     );
   }
   async verifyOtp(input, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
+    const activationFence = opts?.activateSession === false ? null : this.beginActivation();
     const { business_id: _ignoredBusinessId, ...body } = input;
     const result = await safe(
       this.client.linkPost("/v1/link/auth/verify-otp", body, { idempotencyKey })
     );
-    if (result.ok && result.value.session_token) {
-      this.client.setAccessToken(result.value.session_token);
-      this.client.activity.refreshIdentity();
-      this.client.autoClaimChatIdentity();
-    }
-    return result;
+    return activationFence ? this.activateAuthenticatedSession(result, activationFence) : result;
   }
   async refreshSession(sessionToken, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
+    const activationFence = opts?.activateSession === false ? null : this.beginActivation();
     const body = sessionToken ? { session_token: sessionToken } : {};
     const result = await safe(
       this.client.linkPost("/v1/link/auth/refresh", body, { idempotencyKey })
     );
-    if (result.ok && result.value.session_token) {
-      this.client.setAccessToken(result.value.session_token);
-      this.client.activity.refreshIdentity();
-      this.client.autoClaimChatIdentity();
-    }
-    return result;
+    return activationFence ? this.activateAuthenticatedSession(result, activationFence) : result;
   }
   async logout() {
-    const result = await safe(this.client.linkPost("/v1/link/auth/logout"));
+    this.activationGeneration += 1;
+    const request = safe(this.client.linkPost("/v1/link/auth/logout"));
     this.client.clearSession();
-    return result;
+    return request;
   }
   async checkStatus(contact) {
     return safe(this.client.linkPost("/v1/link/check-status", { contact }));
@@ -1917,11 +1960,9 @@ var LinkService = class {
   async enrollAndLinkOrder(data, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
-      this.client.linkPost(
-        "/v1/link/enroll-and-link-order",
-        data,
-        { idempotencyKey }
-      )
+      this.client.linkPost("/v1/link/enroll-and-link-order", data, {
+        idempotencyKey
+      })
     );
   }
   async updatePreferences(preferences) {
@@ -2090,7 +2131,7 @@ var BusinessService = class {
     if (!result.ok) return err(result.error);
     const location = result.value.find((item) => item.id === locationId);
     if (!location) {
-      return err(new chunkJG5CQNCB_js.CimplifyError(chunkJG5CQNCB_js.ErrorCode.NOT_FOUND, `Location not found: ${locationId}`, false));
+      return err(new chunk4BKOKHE3_js.CimplifyError(chunk4BKOKHE3_js.ErrorCode.NOT_FOUND, `Location not found: ${locationId}`, false));
     }
     return ok(location);
   }
@@ -2344,6 +2385,7 @@ var MESSAGE_TYPES = {
   INIT: "init",
   SET_TOKEN: "set_token",
   SET_SESSION: "set_session",
+  SESSION_CLEARED: "session_cleared",
   SET_CART: "set_cart",
   GET_DATA: "get_data",
   NAVIGATE: "navigate",
@@ -2360,6 +2402,8 @@ var MESSAGE_TYPES = {
   LOGOUT_COMPLETE: "logout_complete",
   AUTH_REQUESTED: "auth_requested",
   SESSION_ESTABLISHED: "session_established",
+  SESSION_ESTABLISHMENT_FAILED: "session_establishment_failed",
+  CONTINUE_WITHOUT_SAVED_DETAILS: "continue_without_saved_details",
   CONTACT_PROVIDED: "contact_provided",
   CHECKOUT_STATUS: "checkout_status",
   CHECKOUT_COMPLETE: "checkout_complete",
@@ -2710,7 +2754,7 @@ function startRedirectSignIn(opts, authorizeEndpoint, pkce, state) {
 
 // src/elements.ts
 function toCheckoutError(code, message, recoverable) {
-  const hint = chunkJG5CQNCB_js.getErrorHint(code);
+  const hint = chunk4BKOKHE3_js.getErrorHint(code);
   return {
     success: false,
     error: {
@@ -2723,6 +2767,7 @@ function toCheckoutError(code, message, recoverable) {
   };
 }
 var DEFAULT_LINK_URL = "https://link.cimplify.io";
+var AUTH_ESTABLISHMENT_WAIT_MS = 8e3;
 var AUTH_CONTACT_TYPES = new Set(Object.values(ELEMENTS_AUTH_CONTACT_TYPES));
 var AUTH_MODES = new Set(Object.values(ELEMENTS_AUTH_MODES));
 var AUTH_PROMPTS = new Set(Object.values(ELEMENTS_AUTH_PROMPTS));
@@ -2773,6 +2818,7 @@ var KNOWN_IFRAME_TYPES = /* @__PURE__ */ new Set([
   MESSAGE_TYPES.HEIGHT_CHANGE,
   MESSAGE_TYPES.AUTH_REQUESTED,
   MESSAGE_TYPES.SESSION_ESTABLISHED,
+  MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS,
   MESSAGE_TYPES.ERROR,
   MESSAGE_TYPES.ADDRESS_CHANGED,
   MESSAGE_TYPES.ADDRESS_SELECTED,
@@ -2817,6 +2863,7 @@ function parseIframeMessage(data) {
       if (!record.method || typeof record.method !== "object") return null;
       break;
     case MESSAGE_TYPES.CONTACT_PROVIDED:
+    case MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS:
       if (typeof record.contact !== "string" || typeof record.contactType !== "string") return null;
       break;
     case MESSAGE_TYPES.ERROR:
@@ -2826,7 +2873,8 @@ function parseIframeMessage(data) {
       if (typeof record.success !== "boolean") return null;
       break;
     case MESSAGE_TYPES.CHECKOUT_STATUS:
-      if (typeof record.status !== "string" || !record.context || typeof record.context !== "object") return null;
+      if (typeof record.status !== "string" || !record.context || typeof record.context !== "object")
+        return null;
       break;
     case MESSAGE_TYPES.READY:
     case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -2849,6 +2897,8 @@ var CimplifyElements = class {
     this.paymentData = null;
     this.checkoutInProgress = false;
     this.authInProgress = false;
+    this.authEstablishmentInProgress = false;
+    this.authGeneration = 0;
     this.activeCheckoutAbort = null;
     this.businessIdResolvePromise = null;
     this.client = client;
@@ -2883,6 +2933,12 @@ var CimplifyElements = class {
     }
   }
   destroy() {
+    this.authGeneration += 1;
+    if (this.authEstablishmentInProgress) {
+      this.client.setAccessToken(null);
+    }
+    this.authInProgress = false;
+    this.authEstablishmentInProgress = false;
     this.elements.forEach((element) => element.destroy());
     this.elements.clear();
     if (typeof window !== "undefined") {
@@ -2920,16 +2976,27 @@ var CimplifyElements = class {
   processCheckout(options) {
     let abortFn = null;
     const task = (async () => {
-      this.debug("[cimplify:checkout] processCheckout called", { cart_id: options.cart_id, order_type: options.order_type, location_id: options.location_id });
+      this.debug("[cimplify:checkout] processCheckout called", {
+        cart_id: options.cart_id,
+        order_type: options.order_type,
+        location_id: options.location_id
+      });
       if (this.checkoutInProgress) {
         this.debug("[cimplify:checkout] BLOCKED: already processing");
-        return toCheckoutError(
-          "ALREADY_PROCESSING",
-          "Checkout is already in progress.",
-          false
-        );
+        return toCheckoutError("ALREADY_PROCESSING", "Checkout is already in progress.", false);
       }
       this.checkoutInProgress = true;
+      if (this.authEstablishmentInProgress) {
+        await this.waitForAuthEstablishment(AUTH_ESTABLISHMENT_WAIT_MS);
+        if (this.authEstablishmentInProgress) {
+          this.checkoutInProgress = false;
+          return toCheckoutError(
+            "AUTH_INCOMPLETE",
+            "Authentication must finish establishing the checkout session.",
+            true
+          );
+        }
+      }
       if (!options.cart_id) {
         this.debug("[cimplify:checkout] BLOCKED: no cart_id");
         this.checkoutInProgress = false;
@@ -2987,7 +3054,11 @@ var CimplifyElements = class {
         }
         await this.hydrateCustomerData();
       }
-      this.debug("[cimplify:checkout] customer data hydrated", { customerData: this.customerData, accountId: this.accountId, isUnifiedCheckout });
+      this.debug("[cimplify:checkout] customer data hydrated", {
+        customerData: this.customerData,
+        accountId: this.accountId,
+        isUnifiedCheckout
+      });
       const processMessage = {
         type: MESSAGE_TYPES.PROCESS_CHECKOUT,
         cart_id: options.cart_id,
@@ -3051,7 +3122,10 @@ var CimplifyElements = class {
             return;
           }
           if (message.type === MESSAGE_TYPES.CHECKOUT_COMPLETE) {
-            this.debug("[cimplify:checkout] received checkout_complete", { success: message.success, error: message.error });
+            this.debug("[cimplify:checkout] received checkout_complete", {
+              success: message.success,
+              error: message.error
+            });
             settle({
               success: message.success,
               order: message.order,
@@ -3062,11 +3136,7 @@ var CimplifyElements = class {
           if (message.type === MESSAGE_TYPES.LOGOUT_COMPLETE) {
             checkoutElement.sendMessage({ type: MESSAGE_TYPES.ABORT_CHECKOUT });
             settle(
-              toCheckoutError(
-                "AUTH_LOST",
-                "Authentication was cleared during checkout.",
-                true
-              )
+              toCheckoutError("AUTH_LOST", "Authentication was cleared during checkout.", true)
             );
           }
         };
@@ -3075,16 +3145,16 @@ var CimplifyElements = class {
         }
         abortFn = () => {
           checkoutElement.sendMessage({ type: MESSAGE_TYPES.ABORT_CHECKOUT });
-          settle(
-            toCheckoutError(
-              "CANCELLED",
-              "Checkout was cancelled.",
-              true
-            )
-          );
+          settle(toCheckoutError("CANCELLED", "Checkout was cancelled.", true));
         };
         this.activeCheckoutAbort = abortFn;
-        this.debug("[cimplify:checkout] sending process_checkout to checkout iframe", { cart_id: processMessage.cart_id, order_type: processMessage.order_type, hasCustomer: !!processMessage.customer, hasAddress: !!processMessage.address, isUnifiedCheckout });
+        this.debug("[cimplify:checkout] sending process_checkout to checkout iframe", {
+          cart_id: processMessage.cart_id,
+          order_type: processMessage.order_type,
+          hasCustomer: !!processMessage.customer,
+          hasAddress: !!processMessage.address,
+          isUnifiedCheckout
+        });
         checkoutElement.sendMessage(processMessage);
         this.debug("[cimplify:checkout] postMessage sent, waiting for checkout_complete...");
       });
@@ -3130,11 +3200,16 @@ var CimplifyElements = class {
   getAppearance() {
     return this.options.appearance;
   }
-  async hydrateCustomerData() {
-    if (!this.accessToken || this.customerData) return;
+  isAuthGenerationCurrent(generation, token) {
+    return this.authGeneration === generation && this.client.getAccessToken() === token;
+  }
+  async hydrateCustomerData(generation = this.authGeneration, token = this.accessToken, force = false) {
+    if (!token || !this.isAuthGenerationCurrent(generation, token)) return false;
+    if (this.customerData && !force) return true;
     const linkDataResult = await this.client.link.getLinkData();
+    if (!this.isAuthGenerationCurrent(generation, token)) return false;
     if (!linkDataResult.ok || !linkDataResult.value?.customer) {
-      return;
+      return true;
     }
     const customer = linkDataResult.value.customer;
     this.customerData = {
@@ -3143,6 +3218,7 @@ var CimplifyElements = class {
       phone: customer.phone || null
     };
     this.customerId = customer.id;
+    return true;
   }
   sourceElementFor(event, message) {
     for (const element of this.elements.values()) {
@@ -3181,48 +3257,123 @@ var CimplifyElements = class {
     } catch {
     }
   }
+  clearClaimedAuthorityAfterRestoreFailure() {
+    if (!this.client.getAccessToken() && !this.client.hasClaimedSessionAuthority()) return;
+    this.accessToken = null;
+    this.accountId = null;
+    this.customerId = null;
+    this.customerData = null;
+    this.addressData = null;
+    this.paymentData = null;
+    this.authEstablishmentInProgress = false;
+    this.client.clearSession();
+    this.broadcastClearedSession();
+  }
   async restoreSession() {
     if (typeof window === "undefined" || this.accessToken) return;
+    const generation = ++this.authGeneration;
     const storageKey = this.sessionStorageKey();
     if (!storageKey) return;
     let refreshToken = null;
     try {
       refreshToken = window.localStorage.getItem(storageKey);
     } catch {
+      this.clearClaimedAuthorityAfterRestoreFailure();
+      return;
+    }
+    if (!refreshToken) {
+      this.clearClaimedAuthorityAfterRestoreFailure();
       return;
     }
-    if (!refreshToken) return;
-    const result = await this.client.link.refreshSession(refreshToken);
+    const result = await this.client.link.refreshSession(refreshToken, {
+      activateSession: false
+    });
+    if (this.authGeneration !== generation) return;
     if (!result.ok || !result.value.session_token) {
       this.clearPersistedSession();
+      this.clearClaimedAuthorityAfterRestoreFailure();
       return;
     }
     this.persistRefreshToken(result.value.refresh_token ?? void 0);
-    const data = await this.applyAccessToken(result.value.session_token);
-    this.broadcastAccessToken(result.value.session_token);
-    this.elements.forEach((element) => element._emitAuthenticated(data));
+    const application = await this.applyAccessToken(result.value.session_token, generation);
+    if (application.kind === "claim_failed") {
+      this.clearPersistedSession();
+      this.broadcastClearedSession();
+      return;
+    }
+    if (application.kind !== "authenticated" || !this.broadcastAccessToken(result.value.session_token, generation)) {
+      return;
+    }
+    this.elements.forEach((element) => element._emitAuthenticated(application.data));
   }
-  async applyAccessToken(token) {
+  async applyAccessToken(token, generation) {
+    if (this.authGeneration !== generation) return { kind: "incomplete" };
+    this.authEstablishmentInProgress = true;
+    this.accessToken = null;
+    this.accountId = null;
+    this.customerId = null;
+    this.customerData = null;
+    this.addressData = null;
+    this.paymentData = null;
+    this.client.setAccessToken(token);
+    const claim = await this.client.support.claimConversation();
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    if (!claim.ok && claim.error.code !== "already_claimed") {
+      if (this.client.hasClaimedSessionAuthority()) {
+        this.client.clearSession();
+      } else {
+        this.client.setAccessToken(null);
+      }
+      this.authEstablishmentInProgress = false;
+      return {
+        kind: "claim_failed",
+        code: claim.error.code,
+        message: claim.error.userMessage
+      };
+    }
     this.accessToken = token;
     this.accountId = decodeJwtSub(token);
-    this.client.setAccessToken(token);
-    this.client.autoClaimChatIdentity();
-    await this.hydrateCustomerData();
+    if (!await this.hydrateCustomerData(generation, token, true)) {
+      return { kind: "incomplete" };
+    }
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    this.authEstablishmentInProgress = false;
     return {
-      accountId: this.accountId ?? "",
-      customerId: this.customerId ?? "",
-      token,
-      customer: this.customerData ?? { name: "", email: null, phone: null }
+      kind: "authenticated",
+      data: {
+        accountId: this.accountId ?? "",
+        customerId: this.customerId ?? "",
+        token,
+        customer: this.customerData ?? { name: "", email: null, phone: null }
+      }
     };
   }
-  broadcastAccessToken(token) {
+  async waitForAuthEstablishment(timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (this.authEstablishmentInProgress && Date.now() < deadline) {
+      await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+  }
+  broadcastAccessToken(token, generation) {
+    if (!this.isAuthGenerationCurrent(generation, token) || this.accessToken !== token || this.authEstablishmentInProgress) {
+      return false;
+    }
     const sessionToken = this.client.getSessionToken();
     this.elements.forEach((element) => {
-      element.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
       if (sessionToken) {
         element.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
       }
+      element.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
+    });
+    return true;
+  }
+  broadcastClearedSession() {
+    const sessionToken = this.client.getSessionToken();
+    if (!sessionToken) return null;
+    this.elements.forEach((element) => {
+      element.sendMessage({ type: MESSAGE_TYPES.SESSION_CLEARED, sessionToken });
     });
+    return sessionToken;
   }
   startEmbeddedAuth(sourceElement, request) {
     if (this.authInProgress) return;
@@ -3236,6 +3387,7 @@ var CimplifyElements = class {
       });
       return;
     }
+    const generation = ++this.authGeneration;
     this.authInProgress = true;
     void startSignIn({
       clientId,
@@ -3250,6 +3402,7 @@ var CimplifyElements = class {
       mode: "modal",
       silentFirst: request.mode === ELEMENTS_AUTH_MODES.CHECKOUT && request.prompt !== ELEMENTS_AUTH_PROMPTS.LOGIN,
       onSuccess: async ({ accessToken }) => {
+        if (this.authGeneration !== generation) return;
         this.authInProgress = false;
         if (!accessToken) {
           sourceElement._emitError({
@@ -3258,11 +3411,18 @@ var CimplifyElements = class {
           });
           return;
         }
-        const data = await this.applyAccessToken(accessToken);
-        this.broadcastAccessToken(accessToken);
-        sourceElement._emitAuthenticated(data);
+        const application = await this.applyAccessToken(accessToken, generation);
+        if (application.kind === "authenticated" && this.broadcastAccessToken(accessToken, generation)) {
+          sourceElement._emitAuthenticated(application.data);
+        } else if (application.kind === "claim_failed") {
+          sourceElement._emitError({
+            code: application.code,
+            message: application.message
+          });
+        }
       },
       onError: (err2) => {
+        if (this.authGeneration !== generation) return;
         this.authInProgress = false;
         sourceElement._emitError({
           code: err2.error,
@@ -3270,6 +3430,7 @@ var CimplifyElements = class {
         });
       }
     }).catch((error) => {
+      if (this.authGeneration !== generation) return;
       this.authInProgress = false;
       sourceElement._emitError({
         code: "AUTH_START_FAILED",
@@ -3290,11 +3451,29 @@ var CimplifyElements = class {
         this.startEmbeddedAuth(sourceElement, message);
         break;
       case MESSAGE_TYPES.SESSION_ESTABLISHED:
-        this.persistRefreshToken(message.refreshToken);
-        void this.applyAccessToken(message.accessToken).then((data) => {
-          this.broadcastAccessToken(message.accessToken);
-          sourceElement._emitAuthenticated(data);
-        });
+        {
+          this.authInProgress = false;
+          const generation = ++this.authGeneration;
+          void this.applyAccessToken(message.accessToken, generation).then((application) => {
+            if (this.authGeneration !== generation) return;
+            if (application.kind === "claim_failed") {
+              this.clearPersistedSession();
+              sourceElement.sendMessage({
+                type: MESSAGE_TYPES.SESSION_ESTABLISHMENT_FAILED,
+                accessToken: message.accessToken,
+                code: application.code,
+                message: application.message
+              });
+              this.broadcastClearedSession();
+              return;
+            }
+            if (application.kind !== "authenticated" || !this.broadcastAccessToken(message.accessToken, generation)) {
+              return;
+            }
+            this.persistRefreshToken(message.refreshToken);
+            sourceElement._emitAuthenticated(application.data);
+          });
+        }
         break;
       case MESSAGE_TYPES.ADDRESS_CHANGED:
       case MESSAGE_TYPES.ADDRESS_SELECTED:
@@ -3313,7 +3492,35 @@ var CimplifyElements = class {
           this.customerData.phone = message.contact;
         }
         break;
+      case MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS: {
+        this.authGeneration += 1;
+        this.authInProgress = false;
+        this.authEstablishmentInProgress = false;
+        const carriedIdentityAuthority = Boolean(this.client.getAccessToken()) || this.client.hasClaimedSessionAuthority();
+        this.accessToken = null;
+        this.accountId = null;
+        this.customerId = null;
+        this.customerData = { name: "", email: null, phone: null };
+        this.addressData = null;
+        this.paymentData = null;
+        this.clearPersistedSession();
+        if (carriedIdentityAuthority) {
+          this.client.clearSession();
+        } else {
+          this.client.setAccessToken(null);
+        }
+        this.broadcastClearedSession();
+        if (message.contactType === "email") {
+          this.customerData.email = message.contact;
+        } else {
+          this.customerData.phone = message.contact;
+        }
+        break;
+      }
       case MESSAGE_TYPES.LOGOUT_COMPLETE:
+        this.authGeneration += 1;
+        this.authInProgress = false;
+        this.authEstablishmentInProgress = false;
         if (this.checkoutInProgress && this.activeCheckoutAbort) {
           this.activeCheckoutAbort();
         }
@@ -3325,6 +3532,7 @@ var CimplifyElements = class {
         this.paymentData = null;
         this.clearPersistedSession();
         this.client.clearSession();
+        this.broadcastClearedSession();
         break;
     }
   }
@@ -3458,10 +3666,9 @@ var CimplifyElement = class {
     const iframe = this.iframe;
     if (!iframe || !iframe.isConnected) {
       if (iframe && !iframe.isConnected) {
-        console.warn(
-          "[cimplify:checkout] sendMessage DROPPED \u2014 iframe detached",
-          { type: message.type }
-        );
+        console.warn("[cimplify:checkout] sendMessage DROPPED \u2014 iframe detached", {
+          type: message.type
+        });
       }
       return;
     }
@@ -3560,13 +3767,13 @@ var CimplifyElement = class {
             submitLabel: this.options.submitLabel
           });
           const token = this.parent.getAccessToken();
-          if (token) {
-            this.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
-          }
           const sessionToken = this.parent.getSessionToken();
           if (sessionToken) {
             this.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
           }
+          if (token) {
+            this.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
+          }
           this.pendingInit = null;
         }
         this.flushPending();