@cimplify/sdk 0.7.3 → 0.7.5

package/dist/advanced.d.mts

@@ -1,4 +1,4 @@
-export { A as AuthService, B as BusinessService, i as CartOperations, b as CatalogueQueries, j as CheckoutOperations, j as CheckoutService, t as CimplifyElement, s as CimplifyElements, v as ELEMENT_TYPES, E as EVENT_TYPES, z as ElementEventType, x as ElementOptions, y as ElementType, w as ElementsOptions, F as FetchQuoteInput, q as FxService, G as GetProductsOptions, I as InventoryService, L as LinkService, p as LiteService, M as MESSAGE_TYPES, O as OrderQueries, P as PriceQuote, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, o as SchedulingService, S as SearchOptions, u as createElements, k as generateIdempotencyKey } from './client-B0f__K5x.mjs';
+export { A as AuthService, B as BusinessService, i as CartOperations, b as CatalogueQueries, j as CheckoutOperations, j as CheckoutService, t as CimplifyElement, s as CimplifyElements, v as ELEMENT_TYPES, E as EVENT_TYPES, z as ElementEventType, x as ElementOptions, y as ElementType, w as ElementsOptions, F as FetchQuoteInput, q as FxService, G as GetProductsOptions, I as InventoryService, L as LinkService, p as LiteService, M as MESSAGE_TYPES, O as OrderQueries, P as PriceQuote, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, o as SchedulingService, S as SearchOptions, u as createElements, k as generateIdempotencyKey } from './client-DvoI0EIX.mjs';
 import './payment-CLIWNMaP.mjs';
 
 type Operator = "==" | "!=" | ">" | "<" | ">=" | "<=" | "contains" | "startsWith";

package/dist/advanced.d.ts

@@ -1,4 +1,4 @@
-export { A as AuthService, B as BusinessService, i as CartOperations, b as CatalogueQueries, j as CheckoutOperations, j as CheckoutService, t as CimplifyElement, s as CimplifyElements, v as ELEMENT_TYPES, E as EVENT_TYPES, z as ElementEventType, x as ElementOptions, y as ElementType, w as ElementsOptions, F as FetchQuoteInput, q as FxService, G as GetProductsOptions, I as InventoryService, L as LinkService, p as LiteService, M as MESSAGE_TYPES, O as OrderQueries, P as PriceQuote, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, o as SchedulingService, S as SearchOptions, u as createElements, k as generateIdempotencyKey } from './client-C9aOFBo_.js';
+export { A as AuthService, B as BusinessService, i as CartOperations, b as CatalogueQueries, j as CheckoutOperations, j as CheckoutService, t as CimplifyElement, s as CimplifyElements, v as ELEMENT_TYPES, E as EVENT_TYPES, z as ElementEventType, x as ElementOptions, y as ElementType, w as ElementsOptions, F as FetchQuoteInput, q as FxService, G as GetProductsOptions, I as InventoryService, L as LinkService, p as LiteService, M as MESSAGE_TYPES, O as OrderQueries, P as PriceQuote, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, o as SchedulingService, S as SearchOptions, u as createElements, k as generateIdempotencyKey } from './client-CIvQ1ZLZ.js';
 import './payment-CLIWNMaP.js';
 
 type Operator = "==" | "!=" | ">" | "<" | ">=" | "<=" | "contains" | "startsWith";

package/dist/advanced.js

@@ -2681,10 +2681,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:

package/dist/advanced.mjs

@@ -2679,10 +2679,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:

package/dist/{client-C9aOFBo_.d.ts → client-CIvQ1ZLZ.d.ts}

@@ -2170,6 +2170,7 @@ declare class CimplifyClient {
     private publicKey;
     private credentials;
     private accessToken;
+    private sessionToken;
     private timeout;
     private maxRetries;
     private retryDelay;
@@ -2216,6 +2217,9 @@ declare class CimplifyClient {
     resolveBusinessId(): Promise<string>;
     private loadAccessToken;
     private saveAccessToken;
+    private loadSessionToken;
+    private saveSessionToken;
+    private captureSessionToken;
     private getHeaders;
     private resilientFetch;
     private getDedupeKey;

package/dist/{client-B0f__K5x.d.mts → client-DvoI0EIX.d.mts}

@@ -2170,6 +2170,7 @@ declare class CimplifyClient {
     private publicKey;
     private credentials;
     private accessToken;
+    private sessionToken;
     private timeout;
     private maxRetries;
     private retryDelay;
@@ -2216,6 +2217,9 @@ declare class CimplifyClient {
     resolveBusinessId(): Promise<string>;
     private loadAccessToken;
     private saveAccessToken;
+    private loadSessionToken;
+    private saveSessionToken;
+    private captureSessionToken;
     private getHeaders;
     private resilientFetch;
     private getDedupeKey;

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { aa as AUTHORIZATION_TYPE, af as AUTH_MUTATION, $ as AbortablePromise, cc as AddressData, cE as AddressInfo, aP as AmountToPay, cn as AuthResponse, A as AuthService, m as AuthStatus, cG as AuthenticatedCustomer, cI as AuthenticatedData, c0 as AvailabilityCheck, c1 as AvailabilityResult, bF as AvailableSlot, bI as Booking, bH as BookingStatus, bJ as BookingWithDetails, b7 as BufferTimes, bm as Business, bA as BusinessHours, bl as BusinessPreferences, B as BusinessService, bz as BusinessSettings, bk as BusinessType, bx as BusinessWithLocations, a3 as CHECKOUT_MODE, ag as CHECKOUT_MUTATION, a6 as CHECKOUT_STEP, ac as CONTACT_TYPE, bQ as CancelBookingInput, bR as CancelBookingResult, b1 as CancelOrderInput, b9 as CancellationPolicy, i as CartOperations, b as CatalogueQueries, aC as CatalogueResult, aD as CatalogueSnapshot, bB as CategoryInfo, bN as CheckSlotAvailabilityInput, bO as CheckSlotAvailabilityResult, cq as CheckoutAddressInfo, cs as CheckoutCustomerInfo, N as CheckoutFormData, a$ as CheckoutInput, D as CheckoutMode, j as CheckoutOperations, H as CheckoutOrderType, J as CheckoutPaymentMethod, V as CheckoutResult, j as CheckoutService, Z as CheckoutStatus, _ as CheckoutStatusContext, K as CheckoutStep, C as CimplifyClient, a as CimplifyConfig, t as CimplifyElement, s as CimplifyElements, a2 as ContactType, c8 as CreateAddressInput, ca as CreateMobileMoneyInput, c3 as Customer, c4 as CustomerAddress, bL as CustomerBooking, bK as CustomerBookingServiceItem, c6 as CustomerLinkPreferences, c5 as CustomerMobileMoney, b6 as CustomerServicePreferences, ak as DEFAULT_COUNTRY, aj as DEFAULT_CURRENCY, ab as DEVICE_TYPE, bG as DayAvailability, bg as DepositResult, a1 as DeviceType, v as ELEMENT_TYPES, E as EVENT_TYPES, cD as ElementAppearance, cN as ElementEventHandler, z as ElementEventType, x as ElementOptions, y as ElementType, cJ as ElementsCheckoutData, cK as ElementsCheckoutResult, cH as ElementsCustomerInfo, w as ElementsOptions, ce as EnrollAndLinkOrderInput, ch as EnrollAndLinkOrderResult, cb as EnrollmentData, an as Err, aO as FeeBearerType, F as FetchQuoteInput, aM as FulfillmentLink, aL as FulfillmentStatus, aK as FulfillmentType, cu as FxQuote, ct as FxQuoteRequest, cv as FxRateResponse, q as FxService, bM as GetAvailableSlotsInput, l as GetOrdersOptions, G as GetProductsOptions, cM as IframeToParentMessage, I as InventoryService, c2 as InventorySummary, ae as LINK_MUTATION, ad as LINK_QUERY, aQ as LineItem, aH as LineType, c7 as LinkData, cg as LinkEnrollResult, L as LinkService, ci as LinkSession, cf as LinkStatusResult, r as LiteBootstrap, p as LiteService, bp as Location, bj as LocationAppointment, b$ as LocationStock, bn as LocationTaxBehavior, bo as LocationTaxOverrides, bs as LocationTimeProfile, by as LocationWithDetails, M as MESSAGE_TYPES, a9 as MOBILE_MONEY_PROVIDER, cd as MobileMoneyData, cr as MobileMoneyDetails, a0 as MobileMoneyProvider, ai as ORDER_MUTATION, a4 as ORDER_TYPE, cC as ObservabilityHooks, am as Ok, aR as Order, aG as OrderChannel, a_ as OrderFilter, aN as OrderFulfillmentSummary, aU as OrderGroup, aY as OrderGroupDetails, aV as OrderGroupPayment, aT as OrderGroupPaymentState, aX as OrderGroupPaymentSummary, aS as OrderHistory, aI as OrderLineState, aJ as OrderLineStatus, aZ as OrderPaymentEvent, O as OrderQueries, aW as OrderSplitDetail, aE as OrderStatus, n as OtpResult, a5 as PAYMENT_METHOD, ah as PAYMENT_MUTATION, a7 as PAYMENT_STATE, a8 as PICKUP_TIME_TYPE, cL as ParentToIframeMessage, cF as PaymentMethodInfo, aF as PaymentState, cp as PickupTime, co as PickupTimeType, P as PriceQuote, bb as PricingOverrides, Y as ProcessAndResolveOptions, W as ProcessCheckoutOptions, X as ProcessCheckoutResult, bZ as ProductStock, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, b2 as RefundOrderInput, b5 as ReminderMethod, b8 as ReminderSettings, cw as RequestContext, cz as RequestErrorEvent, cl as RequestOtpInput, cx as RequestStartEvent, cy as RequestSuccessEvent, bP as RescheduleBookingInput, bS as RescheduleBookingResult, be as ResourceAssignment, al as Result, cA as RetryEvent, ck as RevokeAllSessionsResult, cj as RevokeSessionResult, bu as Room, bc as SchedulingMetadata, bf as SchedulingResult, o as SchedulingService, S as SearchOptions, bC as Service, bT as ServiceAvailabilityParams, bU as ServiceAvailabilityResult, bv as ServiceCharge, ba as ServiceNotes, bh as ServiceScheduleRequest, b3 as ServiceStatus, cB as SessionChangeEvent, bD as Staff, bd as StaffAssignment, b4 as StaffRole, bi as StaffScheduleItem, bX as Stock, bY as StockLevel, bV as StockOwnershipType, bW as StockStatus, bw as StorefrontBootstrap, bt as Table, T as TableInfo, bq as TimeRange, br as TimeRanges, bE as TimeSlot, c9 as UpdateAddressInput, b0 as UpdateOrderStatusInput, U as UpdateProfileInput, b_ as VariantStock, cm as VerifyOtpInput, aA as combine, aB as combineObject, c as createCimplifyClient, u as createElements, ap as err, au as flatMap, ay as fromPromise, k as generateIdempotencyKey, av as getOrElse, ar as isErr, aq as isOk, at as mapError, as as mapResult, ao as ok, ax as toNullable, az as tryCatch, aw as unwrap } from './client-B0f__K5x.mjs';
+export { aa as AUTHORIZATION_TYPE, af as AUTH_MUTATION, $ as AbortablePromise, cc as AddressData, cE as AddressInfo, aP as AmountToPay, cn as AuthResponse, A as AuthService, m as AuthStatus, cG as AuthenticatedCustomer, cI as AuthenticatedData, c0 as AvailabilityCheck, c1 as AvailabilityResult, bF as AvailableSlot, bI as Booking, bH as BookingStatus, bJ as BookingWithDetails, b7 as BufferTimes, bm as Business, bA as BusinessHours, bl as BusinessPreferences, B as BusinessService, bz as BusinessSettings, bk as BusinessType, bx as BusinessWithLocations, a3 as CHECKOUT_MODE, ag as CHECKOUT_MUTATION, a6 as CHECKOUT_STEP, ac as CONTACT_TYPE, bQ as CancelBookingInput, bR as CancelBookingResult, b1 as CancelOrderInput, b9 as CancellationPolicy, i as CartOperations, b as CatalogueQueries, aC as CatalogueResult, aD as CatalogueSnapshot, bB as CategoryInfo, bN as CheckSlotAvailabilityInput, bO as CheckSlotAvailabilityResult, cq as CheckoutAddressInfo, cs as CheckoutCustomerInfo, N as CheckoutFormData, a$ as CheckoutInput, D as CheckoutMode, j as CheckoutOperations, H as CheckoutOrderType, J as CheckoutPaymentMethod, V as CheckoutResult, j as CheckoutService, Z as CheckoutStatus, _ as CheckoutStatusContext, K as CheckoutStep, C as CimplifyClient, a as CimplifyConfig, t as CimplifyElement, s as CimplifyElements, a2 as ContactType, c8 as CreateAddressInput, ca as CreateMobileMoneyInput, c3 as Customer, c4 as CustomerAddress, bL as CustomerBooking, bK as CustomerBookingServiceItem, c6 as CustomerLinkPreferences, c5 as CustomerMobileMoney, b6 as CustomerServicePreferences, ak as DEFAULT_COUNTRY, aj as DEFAULT_CURRENCY, ab as DEVICE_TYPE, bG as DayAvailability, bg as DepositResult, a1 as DeviceType, v as ELEMENT_TYPES, E as EVENT_TYPES, cD as ElementAppearance, cN as ElementEventHandler, z as ElementEventType, x as ElementOptions, y as ElementType, cJ as ElementsCheckoutData, cK as ElementsCheckoutResult, cH as ElementsCustomerInfo, w as ElementsOptions, ce as EnrollAndLinkOrderInput, ch as EnrollAndLinkOrderResult, cb as EnrollmentData, an as Err, aO as FeeBearerType, F as FetchQuoteInput, aM as FulfillmentLink, aL as FulfillmentStatus, aK as FulfillmentType, cu as FxQuote, ct as FxQuoteRequest, cv as FxRateResponse, q as FxService, bM as GetAvailableSlotsInput, l as GetOrdersOptions, G as GetProductsOptions, cM as IframeToParentMessage, I as InventoryService, c2 as InventorySummary, ae as LINK_MUTATION, ad as LINK_QUERY, aQ as LineItem, aH as LineType, c7 as LinkData, cg as LinkEnrollResult, L as LinkService, ci as LinkSession, cf as LinkStatusResult, r as LiteBootstrap, p as LiteService, bp as Location, bj as LocationAppointment, b$ as LocationStock, bn as LocationTaxBehavior, bo as LocationTaxOverrides, bs as LocationTimeProfile, by as LocationWithDetails, M as MESSAGE_TYPES, a9 as MOBILE_MONEY_PROVIDER, cd as MobileMoneyData, cr as MobileMoneyDetails, a0 as MobileMoneyProvider, ai as ORDER_MUTATION, a4 as ORDER_TYPE, cC as ObservabilityHooks, am as Ok, aR as Order, aG as OrderChannel, a_ as OrderFilter, aN as OrderFulfillmentSummary, aU as OrderGroup, aY as OrderGroupDetails, aV as OrderGroupPayment, aT as OrderGroupPaymentState, aX as OrderGroupPaymentSummary, aS as OrderHistory, aI as OrderLineState, aJ as OrderLineStatus, aZ as OrderPaymentEvent, O as OrderQueries, aW as OrderSplitDetail, aE as OrderStatus, n as OtpResult, a5 as PAYMENT_METHOD, ah as PAYMENT_MUTATION, a7 as PAYMENT_STATE, a8 as PICKUP_TIME_TYPE, cL as ParentToIframeMessage, cF as PaymentMethodInfo, aF as PaymentState, cp as PickupTime, co as PickupTimeType, P as PriceQuote, bb as PricingOverrides, Y as ProcessAndResolveOptions, W as ProcessCheckoutOptions, X as ProcessCheckoutResult, bZ as ProductStock, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, b2 as RefundOrderInput, b5 as ReminderMethod, b8 as ReminderSettings, cw as RequestContext, cz as RequestErrorEvent, cl as RequestOtpInput, cx as RequestStartEvent, cy as RequestSuccessEvent, bP as RescheduleBookingInput, bS as RescheduleBookingResult, be as ResourceAssignment, al as Result, cA as RetryEvent, ck as RevokeAllSessionsResult, cj as RevokeSessionResult, bu as Room, bc as SchedulingMetadata, bf as SchedulingResult, o as SchedulingService, S as SearchOptions, bC as Service, bT as ServiceAvailabilityParams, bU as ServiceAvailabilityResult, bv as ServiceCharge, ba as ServiceNotes, bh as ServiceScheduleRequest, b3 as ServiceStatus, cB as SessionChangeEvent, bD as Staff, bd as StaffAssignment, b4 as StaffRole, bi as StaffScheduleItem, bX as Stock, bY as StockLevel, bV as StockOwnershipType, bW as StockStatus, bw as StorefrontBootstrap, bt as Table, T as TableInfo, bq as TimeRange, br as TimeRanges, bE as TimeSlot, c9 as UpdateAddressInput, b0 as UpdateOrderStatusInput, U as UpdateProfileInput, b_ as VariantStock, cm as VerifyOtpInput, aA as combine, aB as combineObject, c as createCimplifyClient, u as createElements, ap as err, au as flatMap, ay as fromPromise, k as generateIdempotencyKey, av as getOrElse, ar as isErr, aq as isOk, at as mapError, as as mapResult, ao as ok, ax as toNullable, az as tryCatch, aw as unwrap } from './client-DvoI0EIX.mjs';
 export { QueryBuilder, query } from './advanced.mjs';
 import { A as ApiError } from './payment-CLIWNMaP.mjs';
 export { B as AddOn, at as AddOnDetails, aP as AddOnGroupDetails, G as AddOnOption, aO as AddOnOptionDetails, H as AddOnOptionPrice, F as AddOnWithOptions, aU as AddToCartInput, ai as AdjustmentType, ap as AppliedDiscount, a_ as AuthorizationType, ao as BenefitType, T as Bundle, Y as BundleComponentData, _ as BundleComponentInfo, R as BundlePriceType, W as BundleProduct, ay as BundleSelectionData, aw as BundleSelectionInput, ax as BundleStoredSelection, U as BundleSummary, X as BundleWithDetails, aD as Cart, au as CartAddOn, ag as CartChannel, aE as CartItem, aR as CartItemDetails, af as CartStatus, aW as CartSummary, aF as CartTotals, K as Category, L as CategorySummary, an as ChosenPrice, h as CimplifyError, N as Collection, Q as CollectionProduct, O as CollectionSummary, a4 as ComponentGroup, a5 as ComponentGroupWithComponents, a9 as ComponentPriceBreakdown, a7 as ComponentSelectionInput, a1 as ComponentSourceType, a2 as Composite, a6 as CompositeComponent, aA as CompositePriceBreakdown, a8 as CompositePriceResult, $ as CompositePricingMode, aB as CompositeSelectionData, a7 as CompositeSelectionInput, az as CompositeStoredSelection, a3 as CompositeWithDetails, b as Currency, C as CurrencyCode, p as DepositType, D as DigitalProductType, aq as DiscountBreakdown, ar as DiscountDetails, aI as DisplayAddOn, aJ as DisplayAddOnOption, aG as DisplayCart, aH as DisplayCartItem, g as ERROR_HINTS, E as ErrorCode, e as ErrorCodeType, f as ErrorHint, a0 as GroupPricingBehavior, b2 as InitializePaymentResult, I as InventoryType, aC as LineConfiguration, ac as LocationProductPrice, M as Money, d as Pagination, P as PaginationParams, b1 as Payment, b5 as PaymentErrorDetails, b0 as PaymentMethod, aZ as PaymentMethodType, a$ as PaymentProcessingState, aY as PaymentProvider, b3 as PaymentResponse, aX as PaymentStatus, b4 as PaymentStatusResponse, ab as Price, aj as PriceAdjustment, am as PriceDecisionPath, aa as PriceEntryType, al as PricePathTaxInfo, ah as PriceSource, q as Product, J as ProductAddOn, ad as ProductAvailability, o as ProductRenderHint, ae as ProductTimeProfile, n as ProductType, s as ProductVariant, x as ProductVariantValue, r as ProductWithDetails, S as SalesChannel, as as SelectedAddOnOption, b6 as SubmitAuthorizationInput, ak as TaxPathComponent, aS as UICart, aK as UICartBusiness, aM as UICartCustomer, aL as UICartLocation, aN as UICartPricing, aT as UICartResponse, aV as UpdateCartItemInput, u as VariantAxis, z as VariantAxisSelection, w as VariantAxisValue, v as VariantAxisWithValues, av as VariantDetails, aQ as VariantDetailsDTO, t as VariantDisplayAttribute, y as VariantLocationAvailability, V as VariantStrategy, Z as ZERO, c as currencyCode, k as enrichError, j as getErrorHint, i as isCimplifyError, l as isRetryableError, m as money, a as moneyFromNumber } from './payment-CLIWNMaP.mjs';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { aa as AUTHORIZATION_TYPE, af as AUTH_MUTATION, $ as AbortablePromise, cc as AddressData, cE as AddressInfo, aP as AmountToPay, cn as AuthResponse, A as AuthService, m as AuthStatus, cG as AuthenticatedCustomer, cI as AuthenticatedData, c0 as AvailabilityCheck, c1 as AvailabilityResult, bF as AvailableSlot, bI as Booking, bH as BookingStatus, bJ as BookingWithDetails, b7 as BufferTimes, bm as Business, bA as BusinessHours, bl as BusinessPreferences, B as BusinessService, bz as BusinessSettings, bk as BusinessType, bx as BusinessWithLocations, a3 as CHECKOUT_MODE, ag as CHECKOUT_MUTATION, a6 as CHECKOUT_STEP, ac as CONTACT_TYPE, bQ as CancelBookingInput, bR as CancelBookingResult, b1 as CancelOrderInput, b9 as CancellationPolicy, i as CartOperations, b as CatalogueQueries, aC as CatalogueResult, aD as CatalogueSnapshot, bB as CategoryInfo, bN as CheckSlotAvailabilityInput, bO as CheckSlotAvailabilityResult, cq as CheckoutAddressInfo, cs as CheckoutCustomerInfo, N as CheckoutFormData, a$ as CheckoutInput, D as CheckoutMode, j as CheckoutOperations, H as CheckoutOrderType, J as CheckoutPaymentMethod, V as CheckoutResult, j as CheckoutService, Z as CheckoutStatus, _ as CheckoutStatusContext, K as CheckoutStep, C as CimplifyClient, a as CimplifyConfig, t as CimplifyElement, s as CimplifyElements, a2 as ContactType, c8 as CreateAddressInput, ca as CreateMobileMoneyInput, c3 as Customer, c4 as CustomerAddress, bL as CustomerBooking, bK as CustomerBookingServiceItem, c6 as CustomerLinkPreferences, c5 as CustomerMobileMoney, b6 as CustomerServicePreferences, ak as DEFAULT_COUNTRY, aj as DEFAULT_CURRENCY, ab as DEVICE_TYPE, bG as DayAvailability, bg as DepositResult, a1 as DeviceType, v as ELEMENT_TYPES, E as EVENT_TYPES, cD as ElementAppearance, cN as ElementEventHandler, z as ElementEventType, x as ElementOptions, y as ElementType, cJ as ElementsCheckoutData, cK as ElementsCheckoutResult, cH as ElementsCustomerInfo, w as ElementsOptions, ce as EnrollAndLinkOrderInput, ch as EnrollAndLinkOrderResult, cb as EnrollmentData, an as Err, aO as FeeBearerType, F as FetchQuoteInput, aM as FulfillmentLink, aL as FulfillmentStatus, aK as FulfillmentType, cu as FxQuote, ct as FxQuoteRequest, cv as FxRateResponse, q as FxService, bM as GetAvailableSlotsInput, l as GetOrdersOptions, G as GetProductsOptions, cM as IframeToParentMessage, I as InventoryService, c2 as InventorySummary, ae as LINK_MUTATION, ad as LINK_QUERY, aQ as LineItem, aH as LineType, c7 as LinkData, cg as LinkEnrollResult, L as LinkService, ci as LinkSession, cf as LinkStatusResult, r as LiteBootstrap, p as LiteService, bp as Location, bj as LocationAppointment, b$ as LocationStock, bn as LocationTaxBehavior, bo as LocationTaxOverrides, bs as LocationTimeProfile, by as LocationWithDetails, M as MESSAGE_TYPES, a9 as MOBILE_MONEY_PROVIDER, cd as MobileMoneyData, cr as MobileMoneyDetails, a0 as MobileMoneyProvider, ai as ORDER_MUTATION, a4 as ORDER_TYPE, cC as ObservabilityHooks, am as Ok, aR as Order, aG as OrderChannel, a_ as OrderFilter, aN as OrderFulfillmentSummary, aU as OrderGroup, aY as OrderGroupDetails, aV as OrderGroupPayment, aT as OrderGroupPaymentState, aX as OrderGroupPaymentSummary, aS as OrderHistory, aI as OrderLineState, aJ as OrderLineStatus, aZ as OrderPaymentEvent, O as OrderQueries, aW as OrderSplitDetail, aE as OrderStatus, n as OtpResult, a5 as PAYMENT_METHOD, ah as PAYMENT_MUTATION, a7 as PAYMENT_STATE, a8 as PICKUP_TIME_TYPE, cL as ParentToIframeMessage, cF as PaymentMethodInfo, aF as PaymentState, cp as PickupTime, co as PickupTimeType, P as PriceQuote, bb as PricingOverrides, Y as ProcessAndResolveOptions, W as ProcessCheckoutOptions, X as ProcessCheckoutResult, bZ as ProductStock, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, b2 as RefundOrderInput, b5 as ReminderMethod, b8 as ReminderSettings, cw as RequestContext, cz as RequestErrorEvent, cl as RequestOtpInput, cx as RequestStartEvent, cy as RequestSuccessEvent, bP as RescheduleBookingInput, bS as RescheduleBookingResult, be as ResourceAssignment, al as Result, cA as RetryEvent, ck as RevokeAllSessionsResult, cj as RevokeSessionResult, bu as Room, bc as SchedulingMetadata, bf as SchedulingResult, o as SchedulingService, S as SearchOptions, bC as Service, bT as ServiceAvailabilityParams, bU as ServiceAvailabilityResult, bv as ServiceCharge, ba as ServiceNotes, bh as ServiceScheduleRequest, b3 as ServiceStatus, cB as SessionChangeEvent, bD as Staff, bd as StaffAssignment, b4 as StaffRole, bi as StaffScheduleItem, bX as Stock, bY as StockLevel, bV as StockOwnershipType, bW as StockStatus, bw as StorefrontBootstrap, bt as Table, T as TableInfo, bq as TimeRange, br as TimeRanges, bE as TimeSlot, c9 as UpdateAddressInput, b0 as UpdateOrderStatusInput, U as UpdateProfileInput, b_ as VariantStock, cm as VerifyOtpInput, aA as combine, aB as combineObject, c as createCimplifyClient, u as createElements, ap as err, au as flatMap, ay as fromPromise, k as generateIdempotencyKey, av as getOrElse, ar as isErr, aq as isOk, at as mapError, as as mapResult, ao as ok, ax as toNullable, az as tryCatch, aw as unwrap } from './client-C9aOFBo_.js';
+export { aa as AUTHORIZATION_TYPE, af as AUTH_MUTATION, $ as AbortablePromise, cc as AddressData, cE as AddressInfo, aP as AmountToPay, cn as AuthResponse, A as AuthService, m as AuthStatus, cG as AuthenticatedCustomer, cI as AuthenticatedData, c0 as AvailabilityCheck, c1 as AvailabilityResult, bF as AvailableSlot, bI as Booking, bH as BookingStatus, bJ as BookingWithDetails, b7 as BufferTimes, bm as Business, bA as BusinessHours, bl as BusinessPreferences, B as BusinessService, bz as BusinessSettings, bk as BusinessType, bx as BusinessWithLocations, a3 as CHECKOUT_MODE, ag as CHECKOUT_MUTATION, a6 as CHECKOUT_STEP, ac as CONTACT_TYPE, bQ as CancelBookingInput, bR as CancelBookingResult, b1 as CancelOrderInput, b9 as CancellationPolicy, i as CartOperations, b as CatalogueQueries, aC as CatalogueResult, aD as CatalogueSnapshot, bB as CategoryInfo, bN as CheckSlotAvailabilityInput, bO as CheckSlotAvailabilityResult, cq as CheckoutAddressInfo, cs as CheckoutCustomerInfo, N as CheckoutFormData, a$ as CheckoutInput, D as CheckoutMode, j as CheckoutOperations, H as CheckoutOrderType, J as CheckoutPaymentMethod, V as CheckoutResult, j as CheckoutService, Z as CheckoutStatus, _ as CheckoutStatusContext, K as CheckoutStep, C as CimplifyClient, a as CimplifyConfig, t as CimplifyElement, s as CimplifyElements, a2 as ContactType, c8 as CreateAddressInput, ca as CreateMobileMoneyInput, c3 as Customer, c4 as CustomerAddress, bL as CustomerBooking, bK as CustomerBookingServiceItem, c6 as CustomerLinkPreferences, c5 as CustomerMobileMoney, b6 as CustomerServicePreferences, ak as DEFAULT_COUNTRY, aj as DEFAULT_CURRENCY, ab as DEVICE_TYPE, bG as DayAvailability, bg as DepositResult, a1 as DeviceType, v as ELEMENT_TYPES, E as EVENT_TYPES, cD as ElementAppearance, cN as ElementEventHandler, z as ElementEventType, x as ElementOptions, y as ElementType, cJ as ElementsCheckoutData, cK as ElementsCheckoutResult, cH as ElementsCustomerInfo, w as ElementsOptions, ce as EnrollAndLinkOrderInput, ch as EnrollAndLinkOrderResult, cb as EnrollmentData, an as Err, aO as FeeBearerType, F as FetchQuoteInput, aM as FulfillmentLink, aL as FulfillmentStatus, aK as FulfillmentType, cu as FxQuote, ct as FxQuoteRequest, cv as FxRateResponse, q as FxService, bM as GetAvailableSlotsInput, l as GetOrdersOptions, G as GetProductsOptions, cM as IframeToParentMessage, I as InventoryService, c2 as InventorySummary, ae as LINK_MUTATION, ad as LINK_QUERY, aQ as LineItem, aH as LineType, c7 as LinkData, cg as LinkEnrollResult, L as LinkService, ci as LinkSession, cf as LinkStatusResult, r as LiteBootstrap, p as LiteService, bp as Location, bj as LocationAppointment, b$ as LocationStock, bn as LocationTaxBehavior, bo as LocationTaxOverrides, bs as LocationTimeProfile, by as LocationWithDetails, M as MESSAGE_TYPES, a9 as MOBILE_MONEY_PROVIDER, cd as MobileMoneyData, cr as MobileMoneyDetails, a0 as MobileMoneyProvider, ai as ORDER_MUTATION, a4 as ORDER_TYPE, cC as ObservabilityHooks, am as Ok, aR as Order, aG as OrderChannel, a_ as OrderFilter, aN as OrderFulfillmentSummary, aU as OrderGroup, aY as OrderGroupDetails, aV as OrderGroupPayment, aT as OrderGroupPaymentState, aX as OrderGroupPaymentSummary, aS as OrderHistory, aI as OrderLineState, aJ as OrderLineStatus, aZ as OrderPaymentEvent, O as OrderQueries, aW as OrderSplitDetail, aE as OrderStatus, n as OtpResult, a5 as PAYMENT_METHOD, ah as PAYMENT_MUTATION, a7 as PAYMENT_STATE, a8 as PICKUP_TIME_TYPE, cL as ParentToIframeMessage, cF as PaymentMethodInfo, aF as PaymentState, cp as PickupTime, co as PickupTimeType, P as PriceQuote, bb as PricingOverrides, Y as ProcessAndResolveOptions, W as ProcessCheckoutOptions, X as ProcessCheckoutResult, bZ as ProductStock, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, f as QuoteDynamicBuckets, e as QuoteStatus, g as QuoteUiMessage, R as RefreshQuoteInput, h as RefreshQuoteResult, b2 as RefundOrderInput, b5 as ReminderMethod, b8 as ReminderSettings, cw as RequestContext, cz as RequestErrorEvent, cl as RequestOtpInput, cx as RequestStartEvent, cy as RequestSuccessEvent, bP as RescheduleBookingInput, bS as RescheduleBookingResult, be as ResourceAssignment, al as Result, cA as RetryEvent, ck as RevokeAllSessionsResult, cj as RevokeSessionResult, bu as Room, bc as SchedulingMetadata, bf as SchedulingResult, o as SchedulingService, S as SearchOptions, bC as Service, bT as ServiceAvailabilityParams, bU as ServiceAvailabilityResult, bv as ServiceCharge, ba as ServiceNotes, bh as ServiceScheduleRequest, b3 as ServiceStatus, cB as SessionChangeEvent, bD as Staff, bd as StaffAssignment, b4 as StaffRole, bi as StaffScheduleItem, bX as Stock, bY as StockLevel, bV as StockOwnershipType, bW as StockStatus, bw as StorefrontBootstrap, bt as Table, T as TableInfo, bq as TimeRange, br as TimeRanges, bE as TimeSlot, c9 as UpdateAddressInput, b0 as UpdateOrderStatusInput, U as UpdateProfileInput, b_ as VariantStock, cm as VerifyOtpInput, aA as combine, aB as combineObject, c as createCimplifyClient, u as createElements, ap as err, au as flatMap, ay as fromPromise, k as generateIdempotencyKey, av as getOrElse, ar as isErr, aq as isOk, at as mapError, as as mapResult, ao as ok, ax as toNullable, az as tryCatch, aw as unwrap } from './client-CIvQ1ZLZ.js';
 export { QueryBuilder, query } from './advanced.js';
 import { A as ApiError } from './payment-CLIWNMaP.js';
 export { B as AddOn, at as AddOnDetails, aP as AddOnGroupDetails, G as AddOnOption, aO as AddOnOptionDetails, H as AddOnOptionPrice, F as AddOnWithOptions, aU as AddToCartInput, ai as AdjustmentType, ap as AppliedDiscount, a_ as AuthorizationType, ao as BenefitType, T as Bundle, Y as BundleComponentData, _ as BundleComponentInfo, R as BundlePriceType, W as BundleProduct, ay as BundleSelectionData, aw as BundleSelectionInput, ax as BundleStoredSelection, U as BundleSummary, X as BundleWithDetails, aD as Cart, au as CartAddOn, ag as CartChannel, aE as CartItem, aR as CartItemDetails, af as CartStatus, aW as CartSummary, aF as CartTotals, K as Category, L as CategorySummary, an as ChosenPrice, h as CimplifyError, N as Collection, Q as CollectionProduct, O as CollectionSummary, a4 as ComponentGroup, a5 as ComponentGroupWithComponents, a9 as ComponentPriceBreakdown, a7 as ComponentSelectionInput, a1 as ComponentSourceType, a2 as Composite, a6 as CompositeComponent, aA as CompositePriceBreakdown, a8 as CompositePriceResult, $ as CompositePricingMode, aB as CompositeSelectionData, a7 as CompositeSelectionInput, az as CompositeStoredSelection, a3 as CompositeWithDetails, b as Currency, C as CurrencyCode, p as DepositType, D as DigitalProductType, aq as DiscountBreakdown, ar as DiscountDetails, aI as DisplayAddOn, aJ as DisplayAddOnOption, aG as DisplayCart, aH as DisplayCartItem, g as ERROR_HINTS, E as ErrorCode, e as ErrorCodeType, f as ErrorHint, a0 as GroupPricingBehavior, b2 as InitializePaymentResult, I as InventoryType, aC as LineConfiguration, ac as LocationProductPrice, M as Money, d as Pagination, P as PaginationParams, b1 as Payment, b5 as PaymentErrorDetails, b0 as PaymentMethod, aZ as PaymentMethodType, a$ as PaymentProcessingState, aY as PaymentProvider, b3 as PaymentResponse, aX as PaymentStatus, b4 as PaymentStatusResponse, ab as Price, aj as PriceAdjustment, am as PriceDecisionPath, aa as PriceEntryType, al as PricePathTaxInfo, ah as PriceSource, q as Product, J as ProductAddOn, ad as ProductAvailability, o as ProductRenderHint, ae as ProductTimeProfile, n as ProductType, s as ProductVariant, x as ProductVariantValue, r as ProductWithDetails, S as SalesChannel, as as SelectedAddOnOption, b6 as SubmitAuthorizationInput, ak as TaxPathComponent, aS as UICart, aK as UICartBusiness, aM as UICartCustomer, aL as UICartLocation, aN as UICartPricing, aT as UICartResponse, aV as UpdateCartItemInput, u as VariantAxis, z as VariantAxisSelection, w as VariantAxisValue, v as VariantAxisWithValues, av as VariantDetails, aQ as VariantDetailsDTO, t as VariantDisplayAttribute, y as VariantLocationAvailability, V as VariantStrategy, Z as ZERO, c as currencyCode, k as enrichError, j as getErrorHint, i as isCimplifyError, l as isRetryableError, m as money, a as moneyFromNumber } from './payment-CLIWNMaP.js';

package/dist/index.js

@@ -3129,10 +3129,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -3187,7 +3192,9 @@ function createElements(client, businessId, options) {
 
 // src/client.ts
 var ACCESS_TOKEN_STORAGE_KEY = "cimplify_access_token";
+var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
+var SESSION_TOKEN_HEADER = "x-session-token";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 var DEFAULT_RETRY_DELAY_MS = 1e3;
@@ -3272,6 +3279,7 @@ function getEnvPublicKey() {
 var CimplifyClient = class {
   constructor(config = {}) {
     this.accessToken = null;
+    this.sessionToken = null;
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
@@ -3286,6 +3294,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.accessToken = this.loadAccessToken();
+    this.sessionToken = this.loadSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "pk_..." } to createCimplifyClient().'
@@ -3322,7 +3331,11 @@ var CimplifyClient = class {
   clearSession() {
     const previous = this.accessToken;
     this.accessToken = null;
+    this.sessionToken = null;
     this.saveAccessToken(null);
+    if (typeof window !== "undefined" && window.localStorage) {
+      localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    }
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -3419,6 +3432,27 @@ var CimplifyClient = class {
       }
     }
   }
+  loadSessionToken() {
+    if (typeof window !== "undefined" && window.localStorage) {
+      return localStorage.getItem(SESSION_TOKEN_STORAGE_KEY);
+    }
+    return null;
+  }
+  saveSessionToken(token) {
+    if (typeof window !== "undefined" && window.localStorage) {
+      try {
+        localStorage.setItem(SESSION_TOKEN_STORAGE_KEY, token);
+      } catch {
+      }
+    }
+  }
+  captureSessionToken(response) {
+    const token = response.headers.get(SESSION_TOKEN_HEADER);
+    if (token && token !== this.sessionToken) {
+      this.sessionToken = token;
+      this.saveSessionToken(token);
+    }
+  }
   getHeaders() {
     const headers = {
       "Content-Type": "application/json"
@@ -3430,6 +3464,9 @@ var CimplifyClient = class {
     if (this.accessToken) {
       headers["Authorization"] = `Bearer ${this.accessToken}`;
     }
+    if (this.sessionToken) {
+      headers[SESSION_TOKEN_HEADER] = this.sessionToken;
+    }
     return headers;
   }
   async resilientFetch(url, options) {
@@ -3455,6 +3492,7 @@ var CimplifyClient = class {
           signal: controller.signal
         });
         clearTimeout(timeoutId);
+        this.captureSessionToken(response);
         if (response.ok) {
           this.hooks.onRequestSuccess?.({
             ...context,

package/dist/index.mjs

@@ -3127,10 +3127,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -3185,7 +3190,9 @@ function createElements(client, businessId, options) {
 
 // src/client.ts
 var ACCESS_TOKEN_STORAGE_KEY = "cimplify_access_token";
+var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
+var SESSION_TOKEN_HEADER = "x-session-token";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 var DEFAULT_RETRY_DELAY_MS = 1e3;
@@ -3270,6 +3277,7 @@ function getEnvPublicKey() {
 var CimplifyClient = class {
   constructor(config = {}) {
     this.accessToken = null;
+    this.sessionToken = null;
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
@@ -3284,6 +3292,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.accessToken = this.loadAccessToken();
+    this.sessionToken = this.loadSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "pk_..." } to createCimplifyClient().'
@@ -3320,7 +3329,11 @@ var CimplifyClient = class {
   clearSession() {
     const previous = this.accessToken;
     this.accessToken = null;
+    this.sessionToken = null;
     this.saveAccessToken(null);
+    if (typeof window !== "undefined" && window.localStorage) {
+      localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    }
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -3417,6 +3430,27 @@ var CimplifyClient = class {
       }
     }
   }
+  loadSessionToken() {
+    if (typeof window !== "undefined" && window.localStorage) {
+      return localStorage.getItem(SESSION_TOKEN_STORAGE_KEY);
+    }
+    return null;
+  }
+  saveSessionToken(token) {
+    if (typeof window !== "undefined" && window.localStorage) {
+      try {
+        localStorage.setItem(SESSION_TOKEN_STORAGE_KEY, token);
+      } catch {
+      }
+    }
+  }
+  captureSessionToken(response) {
+    const token = response.headers.get(SESSION_TOKEN_HEADER);
+    if (token && token !== this.sessionToken) {
+      this.sessionToken = token;
+      this.saveSessionToken(token);
+    }
+  }
   getHeaders() {
     const headers = {
       "Content-Type": "application/json"
@@ -3428,6 +3462,9 @@ var CimplifyClient = class {
     if (this.accessToken) {
       headers["Authorization"] = `Bearer ${this.accessToken}`;
     }
+    if (this.sessionToken) {
+      headers[SESSION_TOKEN_HEADER] = this.sessionToken;
+    }
     return headers;
   }
   async resilientFetch(url, options) {
@@ -3453,6 +3490,7 @@ var CimplifyClient = class {
           signal: controller.signal
         });
         clearTimeout(timeoutId);
+        this.captureSessionToken(response);
         if (response.ok) {
           this.hooks.onRequestSuccess?.({
             ...context,

package/dist/react.d.mts

@@ -1,4 +1,4 @@
-import { C as CimplifyClient, X as ProcessCheckoutResult, Z as CheckoutStatus, _ as CheckoutStatusContext, bp as Location, bm as Business, aR as Order, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, P as PriceQuote, g as QuoteUiMessage, s as CimplifyElements, w as ElementsOptions, cI as AuthenticatedData, cE as AddressInfo, cF as PaymentMethodInfo, cK as ElementsCheckoutResult, W as ProcessCheckoutOptions } from './client-B0f__K5x.mjs';
+import { C as CimplifyClient, X as ProcessCheckoutResult, Z as CheckoutStatus, _ as CheckoutStatusContext, bp as Location, bm as Business, aR as Order, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, P as PriceQuote, g as QuoteUiMessage, s as CimplifyElements, w as ElementsOptions, cI as AuthenticatedData, cE as AddressInfo, cF as PaymentMethodInfo, cK as ElementsCheckoutResult, W as ProcessCheckoutOptions } from './client-DvoI0EIX.mjs';
 import React, { ReactNode } from 'react';
 import { q as Product, d as Pagination, h as CimplifyError, r as ProductWithDetails, K as Category, aw as BundleSelectionInput, a7 as ComponentSelectionInput, N as Collection, X as BundleWithDetails, a3 as CompositeWithDetails, a8 as CompositePriceResult, C as CurrencyCode } from './payment-CLIWNMaP.mjs';
 import { A as AdSlot, a as AdPosition, e as AdContextValue } from './ads-t3FBTU8p.mjs';

package/dist/react.d.ts

@@ -1,4 +1,4 @@
-import { C as CimplifyClient, X as ProcessCheckoutResult, Z as CheckoutStatus, _ as CheckoutStatusContext, bp as Location, bm as Business, aR as Order, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, P as PriceQuote, g as QuoteUiMessage, s as CimplifyElements, w as ElementsOptions, cI as AuthenticatedData, cE as AddressInfo, cF as PaymentMethodInfo, cK as ElementsCheckoutResult, W as ProcessCheckoutOptions } from './client-C9aOFBo_.js';
+import { C as CimplifyClient, X as ProcessCheckoutResult, Z as CheckoutStatus, _ as CheckoutStatusContext, bp as Location, bm as Business, aR as Order, d as QuoteBundleSelectionInput, Q as QuoteCompositeSelectionInput, P as PriceQuote, g as QuoteUiMessage, s as CimplifyElements, w as ElementsOptions, cI as AuthenticatedData, cE as AddressInfo, cF as PaymentMethodInfo, cK as ElementsCheckoutResult, W as ProcessCheckoutOptions } from './client-CIvQ1ZLZ.js';
 import React, { ReactNode } from 'react';
 import { q as Product, d as Pagination, h as CimplifyError, r as ProductWithDetails, K as Category, aw as BundleSelectionInput, a7 as ComponentSelectionInput, N as Collection, X as BundleWithDetails, a3 as CompositeWithDetails, a8 as CompositePriceResult, C as CurrencyCode } from './payment-CLIWNMaP.js';
 import { A as AdSlot, a as AdPosition, e as AdContextValue } from './ads-t3FBTU8p.js';

package/dist/react.js

@@ -3370,10 +3370,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -3428,7 +3433,9 @@ function createElements(client, businessId, options) {
 
 // src/client.ts
 var ACCESS_TOKEN_STORAGE_KEY = "cimplify_access_token";
+var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
+var SESSION_TOKEN_HEADER = "x-session-token";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 var DEFAULT_RETRY_DELAY_MS = 1e3;
@@ -3513,6 +3520,7 @@ function getEnvPublicKey() {
 var CimplifyClient = class {
   constructor(config = {}) {
     this.accessToken = null;
+    this.sessionToken = null;
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
@@ -3527,6 +3535,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.accessToken = this.loadAccessToken();
+    this.sessionToken = this.loadSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "pk_..." } to createCimplifyClient().'
@@ -3563,7 +3572,11 @@ var CimplifyClient = class {
   clearSession() {
     const previous = this.accessToken;
     this.accessToken = null;
+    this.sessionToken = null;
     this.saveAccessToken(null);
+    if (typeof window !== "undefined" && window.localStorage) {
+      localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    }
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -3660,6 +3673,27 @@ var CimplifyClient = class {
       }
     }
   }
+  loadSessionToken() {
+    if (typeof window !== "undefined" && window.localStorage) {
+      return localStorage.getItem(SESSION_TOKEN_STORAGE_KEY);
+    }
+    return null;
+  }
+  saveSessionToken(token) {
+    if (typeof window !== "undefined" && window.localStorage) {
+      try {
+        localStorage.setItem(SESSION_TOKEN_STORAGE_KEY, token);
+      } catch {
+      }
+    }
+  }
+  captureSessionToken(response) {
+    const token = response.headers.get(SESSION_TOKEN_HEADER);
+    if (token && token !== this.sessionToken) {
+      this.sessionToken = token;
+      this.saveSessionToken(token);
+    }
+  }
   getHeaders() {
     const headers = {
       "Content-Type": "application/json"
@@ -3671,6 +3705,9 @@ var CimplifyClient = class {
     if (this.accessToken) {
       headers["Authorization"] = `Bearer ${this.accessToken}`;
     }
+    if (this.sessionToken) {
+      headers[SESSION_TOKEN_HEADER] = this.sessionToken;
+    }
     return headers;
   }
   async resilientFetch(url, options) {
@@ -3696,6 +3733,7 @@ var CimplifyClient = class {
           signal: controller.signal
         });
         clearTimeout(timeoutId);
+        this.captureSessionToken(response);
         if (response.ok) {
           this.hooks.onRequestSuccess?.({
             ...context,

package/dist/react.mjs

@@ -3368,10 +3368,15 @@ var CimplifyElement = class {
     if (!isAllowedOrigin(event.origin)) {
       return;
     }
+    const iframeWindow = this.iframe?.contentWindow;
+    if (iframeWindow && event.source && event.source !== iframeWindow) {
+      return;
+    }
     const message = parseIframeMessage(event.data);
     if (!message) return;
     switch (message.type) {
       case MESSAGE_TYPES.READY:
+        if (this.iframe && message.height) this.iframe.style.height = `${message.height}px`;
         this.emit(EVENT_TYPES.READY, { height: message.height });
         break;
       case MESSAGE_TYPES.HEIGHT_CHANGE:
@@ -3426,7 +3431,9 @@ function createElements(client, businessId, options) {
 
 // src/client.ts
 var ACCESS_TOKEN_STORAGE_KEY = "cimplify_access_token";
+var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
+var SESSION_TOKEN_HEADER = "x-session-token";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 var DEFAULT_RETRY_DELAY_MS = 1e3;
@@ -3511,6 +3518,7 @@ function getEnvPublicKey() {
 var CimplifyClient = class {
   constructor(config = {}) {
     this.accessToken = null;
+    this.sessionToken = null;
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
@@ -3525,6 +3533,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.accessToken = this.loadAccessToken();
+    this.sessionToken = this.loadSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "pk_..." } to createCimplifyClient().'
@@ -3561,7 +3570,11 @@ var CimplifyClient = class {
   clearSession() {
     const previous = this.accessToken;
     this.accessToken = null;
+    this.sessionToken = null;
     this.saveAccessToken(null);
+    if (typeof window !== "undefined" && window.localStorage) {
+      localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
+    }
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -3658,6 +3671,27 @@ var CimplifyClient = class {
       }
     }
   }
+  loadSessionToken() {
+    if (typeof window !== "undefined" && window.localStorage) {
+      return localStorage.getItem(SESSION_TOKEN_STORAGE_KEY);
+    }
+    return null;
+  }
+  saveSessionToken(token) {
+    if (typeof window !== "undefined" && window.localStorage) {
+      try {
+        localStorage.setItem(SESSION_TOKEN_STORAGE_KEY, token);
+      } catch {
+      }
+    }
+  }
+  captureSessionToken(response) {
+    const token = response.headers.get(SESSION_TOKEN_HEADER);
+    if (token && token !== this.sessionToken) {
+      this.sessionToken = token;
+      this.saveSessionToken(token);
+    }
+  }
   getHeaders() {
     const headers = {
       "Content-Type": "application/json"
@@ -3669,6 +3703,9 @@ var CimplifyClient = class {
     if (this.accessToken) {
       headers["Authorization"] = `Bearer ${this.accessToken}`;
     }
+    if (this.sessionToken) {
+      headers[SESSION_TOKEN_HEADER] = this.sessionToken;
+    }
     return headers;
   }
   async resilientFetch(url, options) {
@@ -3694,6 +3731,7 @@ var CimplifyClient = class {
           signal: controller.signal
         });
         clearTimeout(timeoutId);
+        this.captureSessionToken(response);
         if (response.ok) {
           this.hooks.onRequestSuccess?.({
             ...context,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/sdk",
-  "version": "0.7.3",
+  "version": "0.7.5",
   "description": "Cimplify Commerce SDK for storefronts",
   "keywords": [
     "cimplify",