@cimplify/sdk 0.103.0 → 0.104.0

package/dist/{chunk-J6PNHDHL.mjs → chunk-OCCNG6MO.mjs}

@@ -1,6 +1,6 @@
 import { MOBILE_MONEY_PROVIDER, PAYMENT_METHOD, MAX_PAYMENT_AUTHORIZATION_STEPS } from './chunk-GOHSXBKW.mjs';
-import { normalizeStatusResponse, paymentAuthorizationUrl, isPaymentStatusSuccess, isPaymentStatusFailure, isPaymentStatusRequiresAction } from './chunk-M4URVKHE.mjs';
-import { CimplifyError, isSupportedCurrency, ErrorCode, enrichError, getErrorHint } from './chunk-VNPEYLB2.mjs';
+import { normalizeStatusResponse, paymentAuthorizationUrl, isPaymentStatusSuccess, isPaymentStatusFailure, isPaymentStatusRequiresAction } from './chunk-DYIAX3WI.mjs';
+import { CimplifyError, isSupportedCurrency, ErrorCode, enrichError, getErrorHint } from './chunk-H3RATH4B.mjs';
 
 // src/types/result.ts
 function ok(value) {
@@ -1833,43 +1833,86 @@ function encodePathSegment(value) {
 var LinkService = class {
   constructor(client) {
     this.client = client;
+    this.activationGeneration = 0;
+  }
+  beginActivation() {
+    return {
+      generation: ++this.activationGeneration,
+      sessionEpoch: this.client.getSessionEpoch(),
+      publicKeyEpoch: this.client.getPublicKeyEpoch()
+    };
+  }
+  isActivationFenceCurrent(fence) {
+    return fence.generation === this.activationGeneration && fence.sessionEpoch === this.client.getSessionEpoch() && fence.publicKeyEpoch === this.client.getPublicKeyEpoch();
+  }
+  supersededActivation() {
+    return {
+      ok: false,
+      error: new CimplifyError(
+        "session_superseded",
+        "A newer authentication session replaced this one"
+      )
+    };
+  }
+  async activateAuthenticatedSession(result, fence) {
+    if (!result.ok || !result.value.session_token) return result;
+    if (!this.isActivationFenceCurrent(fence)) return this.supersededActivation();
+    const accessToken = result.value.session_token;
+    this.client.setAccessToken(accessToken);
+    const installedSessionEpoch = this.client.getSessionEpoch();
+    if (!this.client.getPublicKey().trim()) {
+      this.client.activity.refreshIdentity();
+      return result;
+    }
+    const claim = await this.client.support.claimConversation();
+    if (fence.generation !== this.activationGeneration || fence.publicKeyEpoch !== this.client.getPublicKeyEpoch() || this.client.getAccessToken() !== accessToken) {
+      return this.supersededActivation();
+    }
+    if (!claim.ok && claim.error.code !== "already_claimed") {
+      if (this.client.getSessionEpoch() !== installedSessionEpoch) {
+        return this.supersededActivation();
+      }
+      if (this.client.hasClaimedSessionAuthority()) {
+        this.client.clearSession();
+      } else {
+        this.client.setAccessToken(null);
+      }
+      return claim;
+    }
+    this.client.activity.refreshIdentity();
+    return result;
   }
   async requestOtp(input, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
-      this.client.linkPost("/v1/link/auth/request-otp", input, { idempotencyKey })
+      this.client.linkPost("/v1/link/auth/request-otp", input, {
+        idempotencyKey
+      })
     );
   }
   async verifyOtp(input, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
+    const activationFence = opts?.activateSession === false ? null : this.beginActivation();
     const { business_id: _ignoredBusinessId, ...body } = input;
     const result = await safe(
       this.client.linkPost("/v1/link/auth/verify-otp", body, { idempotencyKey })
     );
-    if (result.ok && result.value.session_token) {
-      this.client.setAccessToken(result.value.session_token);
-      this.client.activity.refreshIdentity();
-      this.client.autoClaimChatIdentity();
-    }
-    return result;
+    return activationFence ? this.activateAuthenticatedSession(result, activationFence) : result;
   }
   async refreshSession(sessionToken, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
+    const activationFence = opts?.activateSession === false ? null : this.beginActivation();
     const body = sessionToken ? { session_token: sessionToken } : {};
     const result = await safe(
       this.client.linkPost("/v1/link/auth/refresh", body, { idempotencyKey })
     );
-    if (result.ok && result.value.session_token) {
-      this.client.setAccessToken(result.value.session_token);
-      this.client.activity.refreshIdentity();
-      this.client.autoClaimChatIdentity();
-    }
-    return result;
+    return activationFence ? this.activateAuthenticatedSession(result, activationFence) : result;
   }
   async logout() {
-    const result = await safe(this.client.linkPost("/v1/link/auth/logout"));
+    this.activationGeneration += 1;
+    const request = safe(this.client.linkPost("/v1/link/auth/logout"));
     this.client.clearSession();
-    return result;
+    return request;
   }
   async checkStatus(contact) {
     return safe(this.client.linkPost("/v1/link/check-status", { contact }));
@@ -1915,11 +1958,9 @@ var LinkService = class {
   async enrollAndLinkOrder(data, opts) {
     const idempotencyKey = opts?.idempotencyKey ?? generateIdempotencyKey();
     return safe(
-      this.client.linkPost(
-        "/v1/link/enroll-and-link-order",
-        data,
-        { idempotencyKey }
-      )
+      this.client.linkPost("/v1/link/enroll-and-link-order", data, {
+        idempotencyKey
+      })
     );
   }
   async updatePreferences(preferences) {
@@ -2342,6 +2383,7 @@ var MESSAGE_TYPES = {
   INIT: "init",
   SET_TOKEN: "set_token",
   SET_SESSION: "set_session",
+  SESSION_CLEARED: "session_cleared",
   SET_CART: "set_cart",
   GET_DATA: "get_data",
   NAVIGATE: "navigate",
@@ -2358,6 +2400,8 @@ var MESSAGE_TYPES = {
   LOGOUT_COMPLETE: "logout_complete",
   AUTH_REQUESTED: "auth_requested",
   SESSION_ESTABLISHED: "session_established",
+  SESSION_ESTABLISHMENT_FAILED: "session_establishment_failed",
+  CONTINUE_WITHOUT_SAVED_DETAILS: "continue_without_saved_details",
   CONTACT_PROVIDED: "contact_provided",
   CHECKOUT_STATUS: "checkout_status",
   CHECKOUT_COMPLETE: "checkout_complete",
@@ -2721,6 +2765,7 @@ function toCheckoutError(code, message, recoverable) {
   };
 }
 var DEFAULT_LINK_URL = "https://link.cimplify.io";
+var AUTH_ESTABLISHMENT_WAIT_MS = 8e3;
 var AUTH_CONTACT_TYPES = new Set(Object.values(ELEMENTS_AUTH_CONTACT_TYPES));
 var AUTH_MODES = new Set(Object.values(ELEMENTS_AUTH_MODES));
 var AUTH_PROMPTS = new Set(Object.values(ELEMENTS_AUTH_PROMPTS));
@@ -2771,6 +2816,7 @@ var KNOWN_IFRAME_TYPES = /* @__PURE__ */ new Set([
   MESSAGE_TYPES.HEIGHT_CHANGE,
   MESSAGE_TYPES.AUTH_REQUESTED,
   MESSAGE_TYPES.SESSION_ESTABLISHED,
+  MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS,
   MESSAGE_TYPES.ERROR,
   MESSAGE_TYPES.ADDRESS_CHANGED,
   MESSAGE_TYPES.ADDRESS_SELECTED,
@@ -2815,6 +2861,7 @@ function parseIframeMessage(data) {
       if (!record.method || typeof record.method !== "object") return null;
       break;
     case MESSAGE_TYPES.CONTACT_PROVIDED:
+    case MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS:
       if (typeof record.contact !== "string" || typeof record.contactType !== "string") return null;
       break;
     case MESSAGE_TYPES.ERROR:
@@ -2824,7 +2871,8 @@ function parseIframeMessage(data) {
       if (typeof record.success !== "boolean") return null;
       break;
     case MESSAGE_TYPES.CHECKOUT_STATUS:
-      if (typeof record.status !== "string" || !record.context || typeof record.context !== "object") return null;
+      if (typeof record.status !== "string" || !record.context || typeof record.context !== "object")
+        return null;
       break;
     case MESSAGE_TYPES.READY:
     case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -2847,6 +2895,8 @@ var CimplifyElements = class {
     this.paymentData = null;
     this.checkoutInProgress = false;
     this.authInProgress = false;
+    this.authEstablishmentInProgress = false;
+    this.authGeneration = 0;
     this.activeCheckoutAbort = null;
     this.businessIdResolvePromise = null;
     this.client = client;
@@ -2881,6 +2931,12 @@ var CimplifyElements = class {
     }
   }
   destroy() {
+    this.authGeneration += 1;
+    if (this.authEstablishmentInProgress) {
+      this.client.setAccessToken(null);
+    }
+    this.authInProgress = false;
+    this.authEstablishmentInProgress = false;
     this.elements.forEach((element) => element.destroy());
     this.elements.clear();
     if (typeof window !== "undefined") {
@@ -2918,16 +2974,27 @@ var CimplifyElements = class {
   processCheckout(options) {
     let abortFn = null;
     const task = (async () => {
-      this.debug("[cimplify:checkout] processCheckout called", { cart_id: options.cart_id, order_type: options.order_type, location_id: options.location_id });
+      this.debug("[cimplify:checkout] processCheckout called", {
+        cart_id: options.cart_id,
+        order_type: options.order_type,
+        location_id: options.location_id
+      });
       if (this.checkoutInProgress) {
         this.debug("[cimplify:checkout] BLOCKED: already processing");
-        return toCheckoutError(
-          "ALREADY_PROCESSING",
-          "Checkout is already in progress.",
-          false
-        );
+        return toCheckoutError("ALREADY_PROCESSING", "Checkout is already in progress.", false);
       }
       this.checkoutInProgress = true;
+      if (this.authEstablishmentInProgress) {
+        await this.waitForAuthEstablishment(AUTH_ESTABLISHMENT_WAIT_MS);
+        if (this.authEstablishmentInProgress) {
+          this.checkoutInProgress = false;
+          return toCheckoutError(
+            "AUTH_INCOMPLETE",
+            "Authentication must finish establishing the checkout session.",
+            true
+          );
+        }
+      }
       if (!options.cart_id) {
         this.debug("[cimplify:checkout] BLOCKED: no cart_id");
         this.checkoutInProgress = false;
@@ -2985,7 +3052,11 @@ var CimplifyElements = class {
         }
         await this.hydrateCustomerData();
       }
-      this.debug("[cimplify:checkout] customer data hydrated", { customerData: this.customerData, accountId: this.accountId, isUnifiedCheckout });
+      this.debug("[cimplify:checkout] customer data hydrated", {
+        customerData: this.customerData,
+        accountId: this.accountId,
+        isUnifiedCheckout
+      });
       const processMessage = {
         type: MESSAGE_TYPES.PROCESS_CHECKOUT,
         cart_id: options.cart_id,
@@ -3049,7 +3120,10 @@ var CimplifyElements = class {
             return;
           }
           if (message.type === MESSAGE_TYPES.CHECKOUT_COMPLETE) {
-            this.debug("[cimplify:checkout] received checkout_complete", { success: message.success, error: message.error });
+            this.debug("[cimplify:checkout] received checkout_complete", {
+              success: message.success,
+              error: message.error
+            });
             settle({
               success: message.success,
               order: message.order,
@@ -3060,11 +3134,7 @@ var CimplifyElements = class {
           if (message.type === MESSAGE_TYPES.LOGOUT_COMPLETE) {
             checkoutElement.sendMessage({ type: MESSAGE_TYPES.ABORT_CHECKOUT });
             settle(
-              toCheckoutError(
-                "AUTH_LOST",
-                "Authentication was cleared during checkout.",
-                true
-              )
+              toCheckoutError("AUTH_LOST", "Authentication was cleared during checkout.", true)
             );
           }
         };
@@ -3073,16 +3143,16 @@ var CimplifyElements = class {
         }
         abortFn = () => {
           checkoutElement.sendMessage({ type: MESSAGE_TYPES.ABORT_CHECKOUT });
-          settle(
-            toCheckoutError(
-              "CANCELLED",
-              "Checkout was cancelled.",
-              true
-            )
-          );
+          settle(toCheckoutError("CANCELLED", "Checkout was cancelled.", true));
         };
         this.activeCheckoutAbort = abortFn;
-        this.debug("[cimplify:checkout] sending process_checkout to checkout iframe", { cart_id: processMessage.cart_id, order_type: processMessage.order_type, hasCustomer: !!processMessage.customer, hasAddress: !!processMessage.address, isUnifiedCheckout });
+        this.debug("[cimplify:checkout] sending process_checkout to checkout iframe", {
+          cart_id: processMessage.cart_id,
+          order_type: processMessage.order_type,
+          hasCustomer: !!processMessage.customer,
+          hasAddress: !!processMessage.address,
+          isUnifiedCheckout
+        });
         checkoutElement.sendMessage(processMessage);
         this.debug("[cimplify:checkout] postMessage sent, waiting for checkout_complete...");
       });
@@ -3128,11 +3198,16 @@ var CimplifyElements = class {
   getAppearance() {
     return this.options.appearance;
   }
-  async hydrateCustomerData() {
-    if (!this.accessToken || this.customerData) return;
+  isAuthGenerationCurrent(generation, token) {
+    return this.authGeneration === generation && this.client.getAccessToken() === token;
+  }
+  async hydrateCustomerData(generation = this.authGeneration, token = this.accessToken, force = false) {
+    if (!token || !this.isAuthGenerationCurrent(generation, token)) return false;
+    if (this.customerData && !force) return true;
     const linkDataResult = await this.client.link.getLinkData();
+    if (!this.isAuthGenerationCurrent(generation, token)) return false;
     if (!linkDataResult.ok || !linkDataResult.value?.customer) {
-      return;
+      return true;
     }
     const customer = linkDataResult.value.customer;
     this.customerData = {
@@ -3141,6 +3216,7 @@ var CimplifyElements = class {
       phone: customer.phone || null
     };
     this.customerId = customer.id;
+    return true;
   }
   sourceElementFor(event, message) {
     for (const element of this.elements.values()) {
@@ -3179,48 +3255,123 @@ var CimplifyElements = class {
     } catch {
     }
   }
+  clearClaimedAuthorityAfterRestoreFailure() {
+    if (!this.client.getAccessToken() && !this.client.hasClaimedSessionAuthority()) return;
+    this.accessToken = null;
+    this.accountId = null;
+    this.customerId = null;
+    this.customerData = null;
+    this.addressData = null;
+    this.paymentData = null;
+    this.authEstablishmentInProgress = false;
+    this.client.clearSession();
+    this.broadcastClearedSession();
+  }
   async restoreSession() {
     if (typeof window === "undefined" || this.accessToken) return;
+    const generation = ++this.authGeneration;
     const storageKey = this.sessionStorageKey();
     if (!storageKey) return;
     let refreshToken = null;
     try {
       refreshToken = window.localStorage.getItem(storageKey);
     } catch {
+      this.clearClaimedAuthorityAfterRestoreFailure();
+      return;
+    }
+    if (!refreshToken) {
+      this.clearClaimedAuthorityAfterRestoreFailure();
       return;
     }
-    if (!refreshToken) return;
-    const result = await this.client.link.refreshSession(refreshToken);
+    const result = await this.client.link.refreshSession(refreshToken, {
+      activateSession: false
+    });
+    if (this.authGeneration !== generation) return;
     if (!result.ok || !result.value.session_token) {
       this.clearPersistedSession();
+      this.clearClaimedAuthorityAfterRestoreFailure();
       return;
     }
     this.persistRefreshToken(result.value.refresh_token ?? void 0);
-    const data = await this.applyAccessToken(result.value.session_token);
-    this.broadcastAccessToken(result.value.session_token);
-    this.elements.forEach((element) => element._emitAuthenticated(data));
+    const application = await this.applyAccessToken(result.value.session_token, generation);
+    if (application.kind === "claim_failed") {
+      this.clearPersistedSession();
+      this.broadcastClearedSession();
+      return;
+    }
+    if (application.kind !== "authenticated" || !this.broadcastAccessToken(result.value.session_token, generation)) {
+      return;
+    }
+    this.elements.forEach((element) => element._emitAuthenticated(application.data));
   }
-  async applyAccessToken(token) {
+  async applyAccessToken(token, generation) {
+    if (this.authGeneration !== generation) return { kind: "incomplete" };
+    this.authEstablishmentInProgress = true;
+    this.accessToken = null;
+    this.accountId = null;
+    this.customerId = null;
+    this.customerData = null;
+    this.addressData = null;
+    this.paymentData = null;
+    this.client.setAccessToken(token);
+    const claim = await this.client.support.claimConversation();
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    if (!claim.ok && claim.error.code !== "already_claimed") {
+      if (this.client.hasClaimedSessionAuthority()) {
+        this.client.clearSession();
+      } else {
+        this.client.setAccessToken(null);
+      }
+      this.authEstablishmentInProgress = false;
+      return {
+        kind: "claim_failed",
+        code: claim.error.code,
+        message: claim.error.userMessage
+      };
+    }
     this.accessToken = token;
     this.accountId = decodeJwtSub(token);
-    this.client.setAccessToken(token);
-    this.client.autoClaimChatIdentity();
-    await this.hydrateCustomerData();
+    if (!await this.hydrateCustomerData(generation, token, true)) {
+      return { kind: "incomplete" };
+    }
+    if (!this.isAuthGenerationCurrent(generation, token)) return { kind: "incomplete" };
+    this.authEstablishmentInProgress = false;
     return {
-      accountId: this.accountId ?? "",
-      customerId: this.customerId ?? "",
-      token,
-      customer: this.customerData ?? { name: "", email: null, phone: null }
+      kind: "authenticated",
+      data: {
+        accountId: this.accountId ?? "",
+        customerId: this.customerId ?? "",
+        token,
+        customer: this.customerData ?? { name: "", email: null, phone: null }
+      }
     };
   }
-  broadcastAccessToken(token) {
+  async waitForAuthEstablishment(timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (this.authEstablishmentInProgress && Date.now() < deadline) {
+      await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+  }
+  broadcastAccessToken(token, generation) {
+    if (!this.isAuthGenerationCurrent(generation, token) || this.accessToken !== token || this.authEstablishmentInProgress) {
+      return false;
+    }
     const sessionToken = this.client.getSessionToken();
     this.elements.forEach((element) => {
-      element.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
       if (sessionToken) {
         element.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
       }
+      element.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
+    });
+    return true;
+  }
+  broadcastClearedSession() {
+    const sessionToken = this.client.getSessionToken();
+    if (!sessionToken) return null;
+    this.elements.forEach((element) => {
+      element.sendMessage({ type: MESSAGE_TYPES.SESSION_CLEARED, sessionToken });
     });
+    return sessionToken;
   }
   startEmbeddedAuth(sourceElement, request) {
     if (this.authInProgress) return;
@@ -3234,6 +3385,7 @@ var CimplifyElements = class {
       });
       return;
     }
+    const generation = ++this.authGeneration;
     this.authInProgress = true;
     void startSignIn({
       clientId,
@@ -3248,6 +3400,7 @@ var CimplifyElements = class {
       mode: "modal",
       silentFirst: request.mode === ELEMENTS_AUTH_MODES.CHECKOUT && request.prompt !== ELEMENTS_AUTH_PROMPTS.LOGIN,
       onSuccess: async ({ accessToken }) => {
+        if (this.authGeneration !== generation) return;
         this.authInProgress = false;
         if (!accessToken) {
           sourceElement._emitError({
@@ -3256,11 +3409,18 @@ var CimplifyElements = class {
           });
           return;
         }
-        const data = await this.applyAccessToken(accessToken);
-        this.broadcastAccessToken(accessToken);
-        sourceElement._emitAuthenticated(data);
+        const application = await this.applyAccessToken(accessToken, generation);
+        if (application.kind === "authenticated" && this.broadcastAccessToken(accessToken, generation)) {
+          sourceElement._emitAuthenticated(application.data);
+        } else if (application.kind === "claim_failed") {
+          sourceElement._emitError({
+            code: application.code,
+            message: application.message
+          });
+        }
       },
       onError: (err2) => {
+        if (this.authGeneration !== generation) return;
         this.authInProgress = false;
         sourceElement._emitError({
           code: err2.error,
@@ -3268,6 +3428,7 @@ var CimplifyElements = class {
         });
       }
     }).catch((error) => {
+      if (this.authGeneration !== generation) return;
       this.authInProgress = false;
       sourceElement._emitError({
         code: "AUTH_START_FAILED",
@@ -3288,11 +3449,29 @@ var CimplifyElements = class {
         this.startEmbeddedAuth(sourceElement, message);
         break;
       case MESSAGE_TYPES.SESSION_ESTABLISHED:
-        this.persistRefreshToken(message.refreshToken);
-        void this.applyAccessToken(message.accessToken).then((data) => {
-          this.broadcastAccessToken(message.accessToken);
-          sourceElement._emitAuthenticated(data);
-        });
+        {
+          this.authInProgress = false;
+          const generation = ++this.authGeneration;
+          void this.applyAccessToken(message.accessToken, generation).then((application) => {
+            if (this.authGeneration !== generation) return;
+            if (application.kind === "claim_failed") {
+              this.clearPersistedSession();
+              sourceElement.sendMessage({
+                type: MESSAGE_TYPES.SESSION_ESTABLISHMENT_FAILED,
+                accessToken: message.accessToken,
+                code: application.code,
+                message: application.message
+              });
+              this.broadcastClearedSession();
+              return;
+            }
+            if (application.kind !== "authenticated" || !this.broadcastAccessToken(message.accessToken, generation)) {
+              return;
+            }
+            this.persistRefreshToken(message.refreshToken);
+            sourceElement._emitAuthenticated(application.data);
+          });
+        }
         break;
       case MESSAGE_TYPES.ADDRESS_CHANGED:
       case MESSAGE_TYPES.ADDRESS_SELECTED:
@@ -3311,7 +3490,35 @@ var CimplifyElements = class {
           this.customerData.phone = message.contact;
         }
         break;
+      case MESSAGE_TYPES.CONTINUE_WITHOUT_SAVED_DETAILS: {
+        this.authGeneration += 1;
+        this.authInProgress = false;
+        this.authEstablishmentInProgress = false;
+        const carriedIdentityAuthority = Boolean(this.client.getAccessToken()) || this.client.hasClaimedSessionAuthority();
+        this.accessToken = null;
+        this.accountId = null;
+        this.customerId = null;
+        this.customerData = { name: "", email: null, phone: null };
+        this.addressData = null;
+        this.paymentData = null;
+        this.clearPersistedSession();
+        if (carriedIdentityAuthority) {
+          this.client.clearSession();
+        } else {
+          this.client.setAccessToken(null);
+        }
+        this.broadcastClearedSession();
+        if (message.contactType === "email") {
+          this.customerData.email = message.contact;
+        } else {
+          this.customerData.phone = message.contact;
+        }
+        break;
+      }
       case MESSAGE_TYPES.LOGOUT_COMPLETE:
+        this.authGeneration += 1;
+        this.authInProgress = false;
+        this.authEstablishmentInProgress = false;
         if (this.checkoutInProgress && this.activeCheckoutAbort) {
           this.activeCheckoutAbort();
         }
@@ -3323,6 +3530,7 @@ var CimplifyElements = class {
         this.paymentData = null;
         this.clearPersistedSession();
         this.client.clearSession();
+        this.broadcastClearedSession();
         break;
     }
   }
@@ -3456,10 +3664,9 @@ var CimplifyElement = class {
     const iframe = this.iframe;
     if (!iframe || !iframe.isConnected) {
       if (iframe && !iframe.isConnected) {
-        console.warn(
-          "[cimplify:checkout] sendMessage DROPPED \u2014 iframe detached",
-          { type: message.type }
-        );
+        console.warn("[cimplify:checkout] sendMessage DROPPED \u2014 iframe detached", {
+          type: message.type
+        });
       }
       return;
     }
@@ -3558,13 +3765,13 @@ var CimplifyElement = class {
             submitLabel: this.options.submitLabel
           });
           const token = this.parent.getAccessToken();
-          if (token) {
-            this.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
-          }
           const sessionToken = this.parent.getSessionToken();
           if (sessionToken) {
             this.sendMessage({ type: MESSAGE_TYPES.SET_SESSION, sessionToken });
           }
+          if (token) {
+            this.sendMessage({ type: MESSAGE_TYPES.SET_TOKEN, token });
+          }
           this.pendingInit = null;
         }
         this.flushPending();