@cimplify/sdk 0.87.0 → 0.89.0

package/dist/{chunk-P3352VXA.js → chunk-T2CJ67QV.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkFWEF2DHR_js = require('./chunk-FWEF2DHR.js');
+var chunkGHFDYM5K_js = require('./chunk-GHFDYM5K.js');
 var chunkAETVRBKI_js = require('./chunk-AETVRBKI.js');
 
 // src/store-credit.ts
@@ -13,7 +13,7 @@ var StoreCreditQueries = class {
    * currency. Requires a signed-in customer; returns an error otherwise.
    */
   async balance() {
-    return chunkFWEF2DHR_js.safe(this.client.get("/api/v1/store-credit/balance"));
+    return chunkGHFDYM5K_js.safe(this.client.get("/api/v1/store-credit/balance"));
   }
 };
 
@@ -95,7 +95,7 @@ var ActivityService = class {
     this.sendEvents([event]);
   }
   async getState() {
-    return chunkFWEF2DHR_js.safe(this.client.get("/api/v1/activity/state"));
+    return chunkGHFDYM5K_js.safe(this.client.get("/api/v1/activity/state"));
   }
   async getRecommendations(options) {
     const params = new URLSearchParams();
@@ -103,10 +103,10 @@ var ActivityService = class {
     if (options?.limit) params.set("limit", String(options.limit));
     const query = params.toString();
     const path = query ? `/api/v1/activity/recommendations?${query}` : "/api/v1/activity/recommendations";
-    return chunkFWEF2DHR_js.safe(this.client.get(path));
+    return chunkGHFDYM5K_js.safe(this.client.get(path));
   }
   async dismissMessage(code) {
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post("/api/v1/activity/messages/dismiss", { code })
     );
   }
@@ -142,16 +142,16 @@ var SubscriptionService = class {
     this.client = client;
   }
   async list() {
-    return chunkFWEF2DHR_js.safe(this.client.get("/api/v1/subscriptions"));
+    return chunkGHFDYM5K_js.safe(this.client.get("/api/v1/subscriptions"));
   }
   async get(id) {
     const encodedId = encodeURIComponent(id);
-    return chunkFWEF2DHR_js.safe(this.client.get(`/api/v1/subscriptions/${encodedId}`));
+    return chunkGHFDYM5K_js.safe(this.client.get(`/api/v1/subscriptions/${encodedId}`));
   }
   async cancel(id, reason, opts) {
     const encodedId = encodeURIComponent(id);
-    const idempotencyKey = opts?.idempotencyKey ?? chunkFWEF2DHR_js.generateIdempotencyKey();
-    return chunkFWEF2DHR_js.safe(
+    const idempotencyKey = opts?.idempotencyKey ?? chunkGHFDYM5K_js.generateIdempotencyKey();
+    return chunkGHFDYM5K_js.safe(
       this.client.post(
         `/api/v1/subscriptions/${encodedId}/cancel`,
         { reason },
@@ -161,20 +161,20 @@ var SubscriptionService = class {
   }
   async pause(id) {
     const encodedId = encodeURIComponent(id);
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post(`/api/v1/subscriptions/${encodedId}/pause`)
     );
   }
   async resume(id) {
     const encodedId = encodeURIComponent(id);
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post(`/api/v1/subscriptions/${encodedId}/resume`)
     );
   }
   async skipNextRenewal(id, opts) {
     const encodedId = encodeURIComponent(id);
-    const idempotencyKey = opts?.idempotencyKey ?? chunkFWEF2DHR_js.generateIdempotencyKey();
-    return chunkFWEF2DHR_js.safe(
+    const idempotencyKey = opts?.idempotencyKey ?? chunkGHFDYM5K_js.generateIdempotencyKey();
+    return chunkGHFDYM5K_js.safe(
       this.client.post(
         `/api/v1/subscriptions/${encodedId}/skip`,
         void 0,
@@ -190,8 +190,8 @@ var UploadService = class {
     this.client = client;
   }
   async init(filename, contentType, sizeBytes, opts) {
-    const idempotencyKey = opts?.idempotencyKey ?? chunkFWEF2DHR_js.generateIdempotencyKey();
-    return chunkFWEF2DHR_js.safe(
+    const idempotencyKey = opts?.idempotencyKey ?? chunkGHFDYM5K_js.generateIdempotencyKey();
+    return chunkGHFDYM5K_js.safe(
       this.client.post(
         "/api/v1/uploads/init",
         {
@@ -204,7 +204,7 @@ var UploadService = class {
     );
   }
   async confirm(uploadId) {
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post("/api/v1/uploads/confirm", {
         upload_id: uploadId
       })
@@ -250,7 +250,7 @@ var PlacesService = class {
     this.client = client;
   }
   async autocomplete(input, sessionToken) {
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post("/api/v1/places/autocomplete", {
         input,
         sessionToken
@@ -258,7 +258,7 @@ var PlacesService = class {
     );
   }
   async details(placeId, sessionToken) {
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.post("/api/v1/places/details", {
         place_id: placeId,
         sessionToken
@@ -277,7 +277,7 @@ var DeliveryService = class {
     params.set("dropoff_lat", String(dropoffLat));
     params.set("dropoff_lng", String(dropoffLng));
     if (country) params.set("country", country);
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.get(`/api/v1/delivery/fee?${params.toString()}`)
     );
   }
@@ -289,7 +289,7 @@ var DeliveryService = class {
     params.set("dropoff_lng", String(dropoffLng));
     if (opts?.country) params.set("country", opts.country);
     if (opts?.orderValue != null) params.set("order_value", String(opts.orderValue));
-    return chunkFWEF2DHR_js.safe(
+    return chunkGHFDYM5K_js.safe(
       this.client.get(`/api/v1/delivery/options?${params.toString()}`)
     );
   }
@@ -302,20 +302,25 @@ var SupportService = class {
   }
   /** Open (or resume) the customer's widget conversation. */
   async openConversation(opts) {
-    const idempotencyKey = opts?.idempotencyKey ?? chunkFWEF2DHR_js.generateIdempotencyKey();
-    return chunkFWEF2DHR_js.safe(
+    const idempotencyKey = opts?.idempotencyKey ?? chunkGHFDYM5K_js.generateIdempotencyKey();
+    return chunkGHFDYM5K_js.safe(
       this.client.post("/api/v1/support/conversation", void 0, {
         idempotencyKey
       })
     );
   }
-  /** Send a message in the active conversation. */
+  /**
+   * Send a message in the active conversation.
+   *
+   * The idempotency key doubles as the message `client_id`: the backend
+   * dedupes on it, so client retries of the same send never insert twice.
+   */
   async sendMessage(content, opts) {
-    const idempotencyKey = opts?.idempotencyKey ?? chunkFWEF2DHR_js.generateIdempotencyKey();
-    return chunkFWEF2DHR_js.safe(
+    const idempotencyKey = opts?.idempotencyKey ?? chunkGHFDYM5K_js.generateIdempotencyKey();
+    return chunkGHFDYM5K_js.safe(
       this.client.post(
         "/api/v1/support/conversation/messages",
-        { content },
+        { content, client_id: idempotencyKey },
         { idempotencyKey }
       )
     );
@@ -327,7 +332,7 @@ var SupportService = class {
     if (options.limit) params.set("limit", String(options.limit));
     const query = params.toString();
     const path = query ? `/api/v1/support/conversation/messages?${query}` : "/api/v1/support/conversation/messages";
-    return chunkFWEF2DHR_js.safe(this.client.get(path));
+    return chunkGHFDYM5K_js.safe(this.client.get(path));
   }
 };
 
@@ -396,6 +401,16 @@ function mergeOptionHeaders(base, opts) {
   }
   return merged;
 }
+function generateSessionToken() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+    const r = Math.random() * 16 | 0;
+    const v = c === "x" ? r : r & 3 | 8;
+    return v.toString(16);
+  });
+}
 function isRetryable(error) {
   if (error instanceof TypeError && error.message.includes("fetch")) {
     return true;
@@ -493,7 +508,7 @@ var CimplifyClient = class {
     this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;
     this.hooks = config.hooks ?? {};
     this.fetchImpl = (config.fetch ?? globalThis.fetch).bind(globalThis);
-    this.sessionToken = this.loadSessionToken();
+    this.sessionToken = this.loadSessionToken() ?? this.mintSessionToken();
     if (!this.publicKey && !config.suppressPublicKeyWarning) {
       console.warn(
         '[Cimplify] No public key found. Set NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY in your environment, or pass { publicKey: "cpk_..." } to createCimplifyClient().'
@@ -541,6 +556,7 @@ var CimplifyClient = class {
     if (typeof window !== "undefined" && window.localStorage) {
       localStorage.removeItem(SESSION_TOKEN_STORAGE_KEY);
     }
+    this.sessionToken = this.mintSessionToken();
     this.hooks.onSessionChange?.({
       previousToken: previous,
       newToken: null,
@@ -602,6 +618,17 @@ var CimplifyClient = class {
     }
     this.businessId = normalized;
   }
+  // Set the storefront public key after construction. Needed by hosts that
+  // create the client before they know the key (e.g. the Link element, which
+  // receives it in its INIT message) — without it, storefront calls carry no
+  // X-API-Key and the business can't be resolved.
+  setPublicKey(publicKey) {
+    const normalized = publicKey.trim();
+    if (!normalized) {
+      return;
+    }
+    this.publicKey = normalized;
+  }
   getBusinessId() {
     return this.businessId;
   }
@@ -639,6 +666,23 @@ var CimplifyClient = class {
     }
     return null;
   }
+  /**
+   * Mint the session token client-side so the very first request already
+   * carries it. Without this, parallel first-load requests each get a
+   * different server-minted token and last-writer-wins splits the session
+   * (cart writes and chat conversations land on dropped tokens).
+   *
+   * Browser-only: minting on a server-shared client instance would pin
+   * every visitor to one session, so SSR keeps the lazy server-minted flow.
+   */
+  mintSessionToken() {
+    if (typeof window === "undefined" || !window.localStorage) {
+      return null;
+    }
+    const token = generateSessionToken();
+    this.saveSessionToken(token);
+    return token;
+  }
   saveSessionToken(token) {
     if (typeof window !== "undefined" && window.localStorage) {
       try {
@@ -889,14 +933,9 @@ var CimplifyClient = class {
         const originalCreatedAt = typeof json.error === "object" && json.error?.original_created_at || "";
         throw new chunkAETVRBKI_js.IdempotencyMismatchError(errorMessage, originalCreatedAt);
       }
-      const error = chunkAETVRBKI_js.enrichError(
-        new chunkAETVRBKI_js.CimplifyError(
-          errorCode,
-          errorMessage,
-          retryable
-        ),
-        { isTestMode: this.isTestMode() }
-      );
+      const error = chunkAETVRBKI_js.enrichError(new chunkAETVRBKI_js.CimplifyError(errorCode, errorMessage, retryable), {
+        isTestMode: this.isTestMode()
+      });
       if ((response.status === 401 || error.code === chunkAETVRBKI_js.ErrorCode.UNAUTHORIZED) && this.accessToken) {
         console.warn(
           "[Cimplify] Received 401 Unauthorized. Access token may be missing/expired. Refresh authentication and retry the request."
@@ -922,25 +961,25 @@ var CimplifyClient = class {
   }
   get catalogue() {
     if (!this._catalogue) {
-      this._catalogue = new chunkFWEF2DHR_js.CatalogueQueries(this);
+      this._catalogue = new chunkGHFDYM5K_js.CatalogueQueries(this);
     }
     return this._catalogue;
   }
   get cart() {
     if (!this._cart) {
-      this._cart = new chunkFWEF2DHR_js.CartOperations(this);
+      this._cart = new chunkGHFDYM5K_js.CartOperations(this);
     }
     return this._cart;
   }
   get checkout() {
     if (!this._checkout) {
-      this._checkout = new chunkFWEF2DHR_js.CheckoutService(this);
+      this._checkout = new chunkGHFDYM5K_js.CheckoutService(this);
     }
     return this._checkout;
   }
   get orders() {
     if (!this._orders) {
-      this._orders = new chunkFWEF2DHR_js.OrderQueries(this);
+      this._orders = new chunkGHFDYM5K_js.OrderQueries(this);
     }
     return this._orders;
   }
@@ -970,43 +1009,43 @@ var CimplifyClient = class {
   }
   get link() {
     if (!this._link) {
-      this._link = new chunkFWEF2DHR_js.LinkService(this);
+      this._link = new chunkGHFDYM5K_js.LinkService(this);
     }
     return this._link;
   }
   get auth() {
     if (!this._auth) {
-      this._auth = new chunkFWEF2DHR_js.AuthService(this);
+      this._auth = new chunkGHFDYM5K_js.AuthService(this);
     }
     return this._auth;
   }
   get business() {
     if (!this._business) {
-      this._business = new chunkFWEF2DHR_js.BusinessService(this);
+      this._business = new chunkGHFDYM5K_js.BusinessService(this);
     }
     return this._business;
   }
   get inventory() {
     if (!this._inventory) {
-      this._inventory = new chunkFWEF2DHR_js.InventoryService(this);
+      this._inventory = new chunkGHFDYM5K_js.InventoryService(this);
     }
     return this._inventory;
   }
   get scheduling() {
     if (!this._scheduling) {
-      this._scheduling = new chunkFWEF2DHR_js.SchedulingService(this);
+      this._scheduling = new chunkGHFDYM5K_js.SchedulingService(this);
     }
     return this._scheduling;
   }
   get lite() {
     if (!this._lite) {
-      this._lite = new chunkFWEF2DHR_js.LiteService(this);
+      this._lite = new chunkGHFDYM5K_js.LiteService(this);
     }
     return this._lite;
   }
   get fx() {
     if (!this._fx) {
-      this._fx = new chunkFWEF2DHR_js.FxService(this);
+      this._fx = new chunkGHFDYM5K_js.FxService(this);
     }
     return this._fx;
   }
@@ -1041,7 +1080,7 @@ var CimplifyClient = class {
     if (businessId) {
       this.setBusinessId(businessId);
     }
-    return chunkFWEF2DHR_js.createElements(this, businessId ?? this.businessId ?? void 0, options);
+    return chunkGHFDYM5K_js.createElements(this, businessId ?? this.businessId ?? void 0, options);
   }
 };
 function createCimplifyClient(config = {}) {

package/dist/{chunk-U57TYZLD.mjs → chunk-ZU4ZRYUR.mjs}

@@ -2304,6 +2304,7 @@ var MESSAGE_TYPES = {
   PAYMENT_METHOD_SELECTED: "payment_method_selected",
   LOGOUT_COMPLETE: "logout_complete",
   AUTH_REQUESTED: "auth_requested",
+  SESSION_ESTABLISHED: "session_established",
   CONTACT_PROVIDED: "contact_provided",
   CHECKOUT_STATUS: "checkout_status",
   CHECKOUT_COMPLETE: "checkout_complete",
@@ -2798,6 +2799,7 @@ var CimplifyElements = class {
     if (typeof window !== "undefined") {
       window.addEventListener("message", this.boundHandleMessage);
     }
+    void this.restoreSession();
   }
   debug(...args) {
     if (this.client.isTestMode()) {
@@ -3087,6 +3089,56 @@ var CimplifyElements = class {
     }
     return null;
   }
+  // Refresh token kept first-party (keyed by public key) so a signed-in shopper
+  // survives reloads. Standard SPA tradeoff; far safer than the third-party
+  // iframe, whose storage/cookies are partitioned or blocked.
+  sessionStorageKey() {
+    const key = this.client.getPublicKey().trim();
+    return key ? `cimplify.link.rt.${key}` : null;
+  }
+  persistRefreshToken(refreshToken) {
+    if (typeof window === "undefined") return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    try {
+      if (refreshToken) {
+        window.localStorage.setItem(storageKey, refreshToken);
+      } else {
+        window.localStorage.removeItem(storageKey);
+      }
+    } catch {
+    }
+  }
+  clearPersistedSession() {
+    if (typeof window === "undefined") return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    try {
+      window.localStorage.removeItem(storageKey);
+    } catch {
+    }
+  }
+  async restoreSession() {
+    if (typeof window === "undefined" || this.accessToken) return;
+    const storageKey = this.sessionStorageKey();
+    if (!storageKey) return;
+    let refreshToken = null;
+    try {
+      refreshToken = window.localStorage.getItem(storageKey);
+    } catch {
+      return;
+    }
+    if (!refreshToken) return;
+    const result = await this.client.link.refreshSession(refreshToken);
+    if (!result.ok || !result.value.session_token) {
+      this.clearPersistedSession();
+      return;
+    }
+    this.persistRefreshToken(result.value.refresh_token ?? void 0);
+    const data = await this.applyAccessToken(result.value.session_token);
+    this.broadcastAccessToken(result.value.session_token);
+    this.elements.forEach((element) => element._emitAuthenticated(data));
+  }
   async applyAccessToken(token) {
     this.accessToken = token;
     this.accountId = decodeJwtSub(token);
@@ -3169,6 +3221,13 @@ var CimplifyElements = class {
       case MESSAGE_TYPES.AUTH_REQUESTED:
         this.startEmbeddedAuth(sourceElement, message);
         break;
+      case MESSAGE_TYPES.SESSION_ESTABLISHED:
+        this.persistRefreshToken(message.refreshToken);
+        void this.applyAccessToken(message.accessToken).then((data) => {
+          this.broadcastAccessToken(message.accessToken);
+          sourceElement._emitAuthenticated(data);
+        });
+        break;
       case MESSAGE_TYPES.ADDRESS_CHANGED:
       case MESSAGE_TYPES.ADDRESS_SELECTED:
         this.addressData = message.address;
@@ -3196,6 +3255,7 @@ var CimplifyElements = class {
         this.customerData = null;
         this.addressData = null;
         this.paymentData = null;
+        this.clearPersistedSession();
         this.client.clearSession();
         break;
     }
@@ -3244,10 +3304,11 @@ var CimplifyElement = class {
     }
   }
   /**
-   * Size the iframe to the element's reported content height. The checkout can
-   * exceed the viewport, so cap it at the viewport height — the checkout then
-   * scrolls internally instead of growing (and scrolling) the host page. Other
-   * element types size to content as before.
+   * Size the iframe to the element's reported content height (in pixels). We do
+   * NOT cap checkout at the viewport: capping forced a tall checkout to scroll
+   * *inside* a viewport-height iframe — a nested scroll-within-scroll. Sizing to
+   * content lets the iframe grow and the host page scroll naturally as one
+   * surface, which is the standard embedded-checkout behaviour.
    */
   applyHeight(reportedHeight) {
     if (!this.iframe) return;
@@ -3256,12 +3317,7 @@ var CimplifyElement = class {
     }
     const content = this.lastReportedHeight;
     if (!content) return;
-    if (this.type !== "checkout" || typeof window === "undefined") {
-      this.iframe.style.height = `${content}px`;
-      return;
-    }
-    const capped = Math.max(320, Math.min(content, window.innerHeight));
-    this.iframe.style.height = `${capped}px`;
+    this.iframe.style.height = `${Math.max(320, content)}px`;
   }
   mount(container) {
     if (this.mounted) {

package/dist/{client-BMOdyC1F.d.mts → client-CAY2NbRG.d.mts}

@@ -1,5 +1,5 @@
-import { ac as CimplifyClient } from './client-BIt37FjS.mjs';
-import { A as AppHandle, C as CreateAppOptions } from './server-0TnEJt8U.mjs';
+import { ac as CimplifyClient } from './client-D8ZFs-sq.mjs';
+import { A as AppHandle, C as CreateAppOptions } from './server-Bk_hlefX.mjs';
 
 /**
  * Test client + fixtures.

package/dist/{client-BvWtk822.d.ts → client-CUbwb6Om.d.ts}

@@ -1,5 +1,5 @@
-import { ac as CimplifyClient } from './client-Dfl6WY2F.js';
-import { A as AppHandle, C as CreateAppOptions } from './server-P2G43ENi.js';
+import { ac as CimplifyClient } from './client-CqZgdUtw.js';
+import { A as AppHandle, C as CreateAppOptions } from './server-Bei5lBrc.js';
 
 /**
  * Test client + fixtures.

package/dist/{client-BIt37FjS.d.mts → client-CqZgdUtw.d.ts}

@@ -1,5 +1,5 @@
-import { V as CimplifyError, S as Category, aZ as Product, f as AddOnWithOptions, aQ as Pagination, bb as ProductWithDetails, b9 as ProductVariant, bF as VariantAxis, bG as VariantAxisSelection, A as AddOn, W as Collection, G as BundleSummary, u as Bundle, a3 as Composite, a1 as ComponentSelectionInput, a8 as CompositePriceResult, U as ChosenPrice, b6 as ProductTaxonomy, bx as TaxonomyWithChildren, ax as EligiblePlansQuery, b1 as ProductBillingPlan, b7 as ProductTimeProfile, b0 as ProductAvailabilityNow, aj as Deal, b2 as ProductDealInfo, ap as DiscountValidation, bu as TagsResponse, ae as CustomAttributeDefinition, af as CustomAttributeValue, bc as PropertyFacet, bw as TaxonomyAttributeTemplate, aJ as KnowledgeArticle, by as UICart, L as CartItem, Q as CartSummary, g as AddToCartInput, N as CartMutationResult, bE as UpdateCartItemInput, ao as DiscountDetails, aO as Money, ad as CurrencyCode, aK as LineConfiguration, bL as VariantDetails, bM as VariantDetailsDTO, a as AddOnDetails, d as AddOnOptionDetails, b as AddOnGroupDetails, D as BundleSelectionData, aa as CompositeSelectionData, ag as CustomerInputValue, bS as components, bk as SchedulingMode, av as DurationUnit, bo as Subscription, bs as SubscriptionWithDetails } from './product-C0Lr81ze.mjs';
-import { a as AuthorizationType, c as PaymentMethod, I as InitializePaymentResult, S as SubmitAuthorizationInput, i as PaymentStatusResponse } from './payment-CLp__KpE.mjs';
+import { V as CimplifyError, S as Category, aZ as Product, f as AddOnWithOptions, aQ as Pagination, bb as ProductWithDetails, b9 as ProductVariant, bF as VariantAxis, bG as VariantAxisSelection, A as AddOn, W as Collection, G as BundleSummary, u as Bundle, a3 as Composite, a1 as ComponentSelectionInput, a8 as CompositePriceResult, U as ChosenPrice, b6 as ProductTaxonomy, bx as TaxonomyWithChildren, ax as EligiblePlansQuery, b1 as ProductBillingPlan, b7 as ProductTimeProfile, b0 as ProductAvailabilityNow, aj as Deal, b2 as ProductDealInfo, ap as DiscountValidation, bu as TagsResponse, ae as CustomAttributeDefinition, af as CustomAttributeValue, bc as PropertyFacet, bw as TaxonomyAttributeTemplate, aJ as KnowledgeArticle, by as UICart, L as CartItem, Q as CartSummary, g as AddToCartInput, N as CartMutationResult, bE as UpdateCartItemInput, ao as DiscountDetails, aO as Money, ad as CurrencyCode, aK as LineConfiguration, bL as VariantDetails, bM as VariantDetailsDTO, a as AddOnDetails, d as AddOnOptionDetails, b as AddOnGroupDetails, D as BundleSelectionData, aa as CompositeSelectionData, ag as CustomerInputValue, bS as components, bk as SchedulingMode, av as DurationUnit, bo as Subscription, bs as SubscriptionWithDetails } from './product-BakHcsP2.js';
+import { a as AuthorizationType, c as PaymentMethod, I as InitializePaymentResult, S as SubmitAuthorizationInput, i as PaymentStatusResponse } from './payment-Xq0WDZXh.js';
 
 interface RequestContext {
     method: "GET" | "POST" | "PATCH" | "DELETE";
@@ -1052,6 +1052,7 @@ declare const MESSAGE_TYPES: {
     readonly PAYMENT_METHOD_SELECTED: "payment_method_selected";
     readonly LOGOUT_COMPLETE: "logout_complete";
     readonly AUTH_REQUESTED: "auth_requested";
+    readonly SESSION_ESTABLISHED: "session_established";
     readonly CONTACT_PROVIDED: "contact_provided";
     readonly CHECKOUT_STATUS: "checkout_status";
     readonly CHECKOUT_COMPLETE: "checkout_complete";
@@ -1269,6 +1270,10 @@ type IframeToParentMessage = {
     saveToLink: boolean;
 } | {
     type: typeof MESSAGE_TYPES.LOGOUT_COMPLETE;
+} | {
+    type: typeof MESSAGE_TYPES.SESSION_ESTABLISHED;
+    accessToken: string;
+    refreshToken?: string;
 } | {
     type: typeof MESSAGE_TYPES.AUTH_REQUESTED;
     loginHint?: string;
@@ -2515,7 +2520,12 @@ declare class SupportService {
     constructor(client: CimplifyClient);
     /** Open (or resume) the customer's widget conversation. */
     openConversation(opts?: IdempotencyOption): Promise<Result<ChatConversationResponse, CimplifyError>>;
-    /** Send a message in the active conversation. */
+    /**
+     * Send a message in the active conversation.
+     *
+     * The idempotency key doubles as the message `client_id`: the backend
+     * dedupes on it, so client retries of the same send never insert twice.
+     */
     sendMessage(content: string, opts?: IdempotencyOption): Promise<Result<ChatMessage, CimplifyError>>;
     /** Poll for new messages since the given cursor. */
     getMessages(options?: {
@@ -2557,6 +2567,10 @@ declare class CimplifyElements {
     getAppearance(): ElementsOptions["appearance"];
     private hydrateCustomerData;
     private sourceElementFor;
+    private sessionStorageKey;
+    private persistRefreshToken;
+    private clearPersistedSession;
+    private restoreSession;
     private applyAccessToken;
     private broadcastAccessToken;
     private startEmbeddedAuth;
@@ -2586,10 +2600,11 @@ declare class CimplifyElement {
     private listening;
     constructor(type: ElementType, businessId: string | null, linkUrl: string, options: ElementOptions, parent: CimplifyElements);
     /**
-     * Size the iframe to the element's reported content height. The checkout can
-     * exceed the viewport, so cap it at the viewport height — the checkout then
-     * scrolls internally instead of growing (and scrolling) the host page. Other
-     * element types size to content as before.
+     * Size the iframe to the element's reported content height (in pixels). We do
+     * NOT cap checkout at the viewport: capping forced a tall checkout to scroll
+     * *inside* a viewport-height iframe — a nested scroll-within-scroll. Sizing to
+     * content lets the iframe grow and the host page scroll naturally as one
+     * surface, which is the standard embedded-checkout behaviour.
      */
     private applyHeight;
     mount(container: string | HTMLElement): void;
@@ -2711,10 +2726,21 @@ declare class CimplifyClient {
     setLocationId(locationId: string | null): void;
     getLocationId(): string | null;
     setBusinessId(businessId: string): void;
+    setPublicKey(publicKey: string): void;
     getBusinessId(): string | null;
     resolveBusinessId(): Promise<string>;
     private authedFetch;
     private loadSessionToken;
+    /**
+     * Mint the session token client-side so the very first request already
+     * carries it. Without this, parallel first-load requests each get a
+     * different server-minted token and last-writer-wins splits the session
+     * (cart writes and chat conversations land on dropped tokens).
+     *
+     * Browser-only: minting on a server-shared client instance would pin
+     * every visitor to one session, so SSR keeps the lazy server-minted flow.
+     */
+    private mintSessionToken;
     private saveSessionToken;
     private captureSessionToken;
     private getHeaders;