@cowprotocol/widget-lib 4.0.5 → 4.2.0

package/allowedWindowOpenUrl.d.ts

@@ -0,0 +1 @@
+export declare function isAllowedWindowOpenUrl(url: string): boolean;

package/index.cjs

@@ -1 +1,53 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("@cowprotocol/iframe-transport"),G=require("@cowprotocol/events"),N="allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox",v="strict-origin-when-cross-origin",U="clipboard-read; clipboard-write";var c=(e=>(e.ACTIVATE="ACTIVATE",e.READY="READY",e.UPDATE_HEIGHT="UPDATE_HEIGHT",e.SET_FULL_HEIGHT="SET_FULL_HEIGHT",e.EMIT_COW_EVENT="EMIT_COW_EVENT",e.PROVIDER_RPC_REQUEST="PROVIDER_RPC_REQUEST",e.INTERCEPT_WINDOW_OPEN="INTERCEPT_WINDOW_OPEN",e.PROCESS_HOOK="PROCESS_HOOK",e))(c||{}),O=(e=>(e.UPDATE_PARAMS="UPDATE_PARAMS",e.UPDATE_APP_DATA="UPDATE_APP_DATA",e.PROVIDER_RPC_RESPONSE="PROVIDER_RPC_RESPONSE",e.PROVIDER_ON_EVENT="PROVIDER_ON_EVENT",e.HOOK_RESULT="HOOK_RESULT",e))(O||{}),p=(e=>(e.ON_BEFORE_APPROVAL="ON_BEFORE_APPROVAL",e.ON_BEFORE_TRADE="ON_BEFORE_TRADE",e.ON_BEFORE_WRAP_UNWRAP="ON_BEFORE_WRAP_UNWRAP",e.ON_BEFORE_ORDER_CANCEL="ON_BEFORE_ORDER_CANCEL",e.ON_BEFORE_ORDERS_CANCEL="ON_BEFORE_ORDERS_CANCEL",e))(p||{}),h=(e=>(e.SWAP="swap",e.LIMIT="limit",e.ADVANCED="advanced",e.YIELD="yield",e))(h||{});const $=["primary","background","paper","text","danger","warning","alert","info","success"],d=new S.IframeTransport("cowSwapWidget");class j{constructor(t,n,o,r=[]){this.contentWindow=t,this.updateListeners(r),this.widgetListener=d.listenToMessageFromWindow(this.contentWindow,o,c.EMIT_COW_EVENT,i=>this.eventEmitter.emit(i.event,i.payload),n)}eventEmitter=new G.SimpleCowEventEmitter;listeners=[];widgetListener;stopListeningIframe(){d.stopListeningWindowListener(this.contentWindow,this.widgetListener)}updateListeners(t){for(const n of this.listeners)this.eventEmitter.off(n);this.listeners=t||[];for(const n of this.listeners)this.eventEmitter.on(n)}}class x{constructor(t,n){this.appWindow=t,this.iframeWidow=n,this.forwardSdkMessage=o=>{Q(o.data)&&(typeof window<"u"&&o.origin===window.location.origin||(K(o.data)?this.appWindow.parent.postMessage(o.data,"*"):Y(o.data)&&this.iframeWidow.postMessage(o.data,"*")))},this.startListening()}forwardSdkMessage;startListening(){this.appWindow.addEventListener("message",this.forwardSdkMessage)}stopListening(){this.appWindow.removeEventListener("message",this.forwardSdkMessage)}}function Q(e){return typeof e=="object"&&e!==null&&"id"in e&&typeof e.id=="string"}function K(e){return"method"in e&&typeof e.method=="string"&&"params"in e&&"env"in e&&typeof e.env=="object"&&e.env!==null&&"sdkVersion"in e.env}function Y(e){return"success"in e&&typeof e.success=="boolean"&&"version"in e&&typeof e.version=="string"}function X(e="Default",t="#1c5dbf",...n){console.debug(`%c [COW][${e}]`,`font-weight: bold; color: ${t}`,...n)}function z(...e){process.env.NODE_ENV!=="test"&&X("Widget","#47aba8",...e)}const F="https://swap.cow.fi";function b(e){return!!(e&&typeof e=="object")}const m="_",J="CoW Swap widget: invalid baseUrl.",H=!1;function Z(e){return e==="localhost"||e==="127.0.0.1"||e==="::1"||e.endsWith(".localhost")}function g(e,t){const n=`${J} ${e}`;if(t)throw new Error(n);return console.error("[CoW Widget]",n),F}function y(e,t=H){const n=typeof e=="string"?e.trim():"";if(!n)return F;let o;try{o=new URL(n)}catch{return g(`Not a valid URL: ${JSON.stringify(n)}`,t)}if(o.username||o.password)return g("Userinfo (username/password) in URL is not allowed.",t);const r=o.protocol==="https:",i=o.protocol==="http:"&&Z(o.hostname);if(!r&&!i)return g(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`,t);const u=o.pathname==="/"||o.pathname===""?"":o.pathname.replace(/\/+$/,"");return`${o.origin}${u}`}function q(e){const t=y(e.baseUrl),n=B(e);return t+"/#"+n+"?"+M(e)}function B(e){const{chainId:t=1,sell:n,buy:o,tradeType:r=h.SWAP}=e,i=[n?.asset||m,o?.asset||m].map(encodeURIComponent).join("/");return`/${t}/widget/${r}/${i}`}function M(e){const t=new URLSearchParams;return re(oe(ne(te(ee(t,e),e),e),e),e)}function ee(e,t){const{sell:n,buy:o}=t;return n?.amount&&e.append("sellAmount",n.amount),o?.amount&&e.append("buyAmount",o.amount),e}function te(e,t){const n=t.theme;return n?(b(n)?(e.append("palette",encodeURIComponent(JSON.stringify(n))),e.append("theme",n.baseTheme)):(e.append("palette","null"),e.append("theme",n)),e):(e.append("palette","null"),e)}function ne(e,t){return t.targetChainId&&e.append("targetChainId",t.targetChainId.toString()),e}function oe(e,t){return t.locale&&e.append("lng",t.locale),e}function re(e,t){return ie(t.hooks)?e.append("hooksEnabled","true"):e.delete("hooksEnabled"),e}function ie(e){return!!e&&Object.values(e).some(Boolean)}const V="640px",se="450px",ae=20,de={iframe:null,updateParams:()=>{},updateListeners:()=>{},updateProvider:()=>{},destroy:()=>{}};function le(e,t){const{params:n,provider:o,listeners:r,onReady:i}=t;let u=o,f=n;if(typeof window>"u")return de;const l=ce(n),s=ue(l);z("Resolved trusted iframe origin",{iframeOrigin:s});const _=[];e.innerHTML="",e.appendChild(l);const{contentWindow:a}=l;if(!a)throw console.error("Iframe does not contain a window",l),new Error("Iframe does not contain a window!");i&&_.push(pe(a,s,i)),_.push(Ee(a,s,n.appCode)),_.push(...Re(l,s,n.height,n.maxHeight));let T=null;function L(){a&&(T&&window.removeEventListener("message",T),!f.disableWindowOpen&&(T=fe(s,a),_.push(T)))}let A=null;function I(){a&&(A&&window.removeEventListener("message",A),A=Ae(a,s,f.hooks),_.push(A))}L(),I();const W=new j(window,s,a,r);let P=C(a,s,null,u);l.addEventListener("load",()=>{D(a,s,f,u)});const k=new x(window,a);return{iframe:l,updateParams:E=>{f=E,D(a,s,f,u),L(),I()},updateListeners:E=>W.updateListeners(E),updateProvider:E=>{u=E,P=C(a,s,P,E)},destroy:()=>{P.disconnect(),W.stopListeningIframe(),_.forEach(E=>window.removeEventListener("message",E)),k.stopListening(),e.removeChild(l)}}}function C(e,t,n,o){n&&n.disconnect();const r=n||new S.IframeRpcProviderBridge(e,t);return o&&r.onConnect(o),r}function ce(e){const{width:t=se,height:n=V}=e,o=document.createElement("iframe");return o.src=q(e),o.width=t,o.height=n,o.style.border="0",o.setAttribute("sandbox",N),o.referrerPolicy=v,o.allow=U,o}function ue(e){return new URL(e.src).origin}function D(e,t,n,o){const r=!!o,i=B(n),u=M(n).toString(),{theme:f,hooks:l,...s}=n;d.postMessageToWindow(e,O.UPDATE_PARAMS,{urlParams:{pathname:i,search:u},appParams:s,hasProvider:r},t)}function Ee(e,t,n){return d.listenToMessageFromWindow(window,e,c.ACTIVATE,()=>{d.postMessageToWindow(e,O.UPDATE_APP_DATA,{metaData:n?{appCode:n}:void 0},t)},t)}function pe(e,t,n){let o=!1;return d.listenToMessageFromWindow(window,e,c.READY,()=>{o||(o=!0,n())},t)}function fe(e,t){return d.listenToMessageFromWindow(window,t,c.INTERCEPT_WINDOW_OPEN,({href:n,rel:o,target:r})=>{const i=_e(n.toString(),e);i&&we(i)&&window.open(i,r,o)},e)}function _e(e,t){const n=e.trim();if(!n)return null;try{return new URL(n,t).toString()}catch{return null}}function we(e){try{const t=new URL(e).protocol;return t==="http:"||t==="https:"}catch{return!1}}function Re(e,t,n=V,o){return e.contentWindow?[d.listenToMessageFromWindow(window,e.contentWindow,c.UPDATE_HEIGHT,r=>{const i=r.height?r.height+ae:void 0;e.style.height=i?`${o?Math.min(i,o):i}px`:n},t),d.listenToMessageFromWindow(window,e.contentWindow,c.SET_FULL_HEIGHT,({isUpToSmall:r})=>{e.style.height=r?n:`${o||document.body.offsetHeight}px`},t)]:[]}const Oe={[p.ON_BEFORE_APPROVAL]:(e,t)=>t?.onBeforeApproval?t.onBeforeApproval(e):!0,[p.ON_BEFORE_TRADE]:(e,t)=>t?.onBeforeTrade?t.onBeforeTrade(e):!0,[p.ON_BEFORE_WRAP_UNWRAP]:(e,t)=>t?.onBeforeWrapOrUnwrap?t.onBeforeWrapOrUnwrap(e):!0,[p.ON_BEFORE_ORDER_CANCEL]:(e,t)=>t?.onBeforeOrderCancel?t.onBeforeOrderCancel(e):!0,[p.ON_BEFORE_ORDERS_CANCEL]:(e,t)=>t?.onBeforeOrdersCancel?t.onBeforeOrdersCancel(e):!0};function Te(e,t){return Oe[e.event](e.payload,t)}function Ae(e,t,n){return d.listenToMessageFromWindow(window,e,c.PROCESS_HOOK,async o=>{let r=!1;try{r=await Te(o,n)}catch{}d.postMessageToWindow(e,O.HOOK_RESULT,{id:o.id,result:r},t)},t)}const he=Object.values(h);function Pe(e,t,n){if(w(e)){const o=e[n];return R(o)?o[t]:o}if(R(e)){const o=e[t];return w(o)?o[n]:o}return e}function w(e){return typeof e!="object"?!1:Object.keys(e).every(t=>he.includes(t))}const ge=/^\d+$/;function R(e){return typeof e!="object"?!1:Object.keys(e).every(t=>ge.test(t))}function Le(e){return w(e)?Object.values(e).flatMap(t=>R(t)?Object.values(t):[t]):R(e)?Object.values(e).flatMap(t=>w(t)?Object.values(t):[t]):[e]}exports.SHOULD_THROW_IF_INVALID_URL=H;exports.TradeType=h;exports.WIDGET_IFRAME_ALLOW=U;exports.WIDGET_IFRAME_REFERRER_POLICY=v;exports.WIDGET_IFRAME_SANDBOX=N;exports.WIDGET_PALETTE_COLORS=$;exports.WidgetHookEvents=p;exports.WidgetMethodsEmit=c;exports.WidgetMethodsListen=O;exports.createCowSwapWidget=le;exports.isCowSwapWidgetPalette=b;exports.isPerNetworkConfig=R;exports.isPerTradeTypeConfig=w;exports.resolveFlexibleConfig=Pe;exports.resolveFlexibleConfigValues=Le;exports.sanitizeWidgetBaseUrl=y;exports.widgetIframeTransport=d;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const y=require("@cowprotocol/iframe-transport"),K=require("@cowprotocol/events"),Q=new Set(["wc:","metamask:","imtokenv2:","trustassetapp:","okex:","ledgerlive:","rainbow:","argent:","exodus:","zerion:","okxwallet:","uniswap:","robinhood-wallet:","krakenwallet:","bitpay:","oneinch:","safe:","backpack:","tangem:","mathwallet:","keplrwallet:","coin98:","tpoutside:","bncus:","bnc:"]),Y=new Set(["http:","https:"]);function z(e){try{const t=new URL(e).protocol;return Y.has(t)||Q.has(t)}catch{return!1}}const U="allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox",F="strict-origin-when-cross-origin",B="clipboard-read; clipboard-write";var f=(e=>(e.ACTIVATE="ACTIVATE",e.READY="READY",e.UPDATE_HEIGHT="UPDATE_HEIGHT",e.SET_FULL_HEIGHT="SET_FULL_HEIGHT",e.EMIT_COW_EVENT="EMIT_COW_EVENT",e.PROVIDER_RPC_REQUEST="PROVIDER_RPC_REQUEST",e.INTERCEPT_WINDOW_OPEN="INTERCEPT_WINDOW_OPEN",e.PROCESS_HOOK="PROCESS_HOOK",e))(f||{}),g=(e=>(e.UPDATE_PARAMS="UPDATE_PARAMS",e.UPDATE_APP_DATA="UPDATE_APP_DATA",e.PROVIDER_RPC_RESPONSE="PROVIDER_RPC_RESPONSE",e.PROVIDER_ON_EVENT="PROVIDER_ON_EVENT",e.HOOK_RESULT="HOOK_RESULT",e))(g||{}),_=(e=>(e.ON_BEFORE_APPROVAL="ON_BEFORE_APPROVAL",e.ON_BEFORE_TRADE="ON_BEFORE_TRADE",e.ON_BEFORE_WRAP_UNWRAP="ON_BEFORE_WRAP_UNWRAP",e.ON_BEFORE_ORDER_CANCEL="ON_BEFORE_ORDER_CANCEL",e.ON_BEFORE_ORDERS_CANCEL="ON_BEFORE_ORDERS_CANCEL",e))(_||{}),P=(e=>(e.SWAP="swap",e.LIMIT="limit",e.ADVANCED="advanced",e.YIELD="yield",e))(P||{});const X=["primary","background","paper","text","danger","warning","alert","info","success"],c=new y.IframeTransport("cowSwapWidget");class J{constructor(t,n,o,r=[]){this.contentWindow=t,this.updateListeners(r),this.widgetListener=c.listenToMessageFromWindow(this.contentWindow,o,f.EMIT_COW_EVENT,i=>this.eventEmitter.emit(i.event,i.payload),n)}eventEmitter=new K.SimpleCowEventEmitter;listeners=[];widgetListener;stopListeningIframe(){c.stopListeningWindowListener(this.contentWindow,this.widgetListener)}updateListeners(t){for(const n of this.listeners)this.eventEmitter.off(n);this.listeners=t||[];for(const n of this.listeners)this.eventEmitter.on(n)}}class Z{constructor(t,n){this.appWindow=t,this.iframeWidow=n,this.forwardSdkMessage=o=>{q(o.data)&&(typeof window<"u"&&o.origin===window.location.origin||(ee(o.data)?this.appWindow.parent.postMessage(o.data,"*"):te(o.data)&&this.iframeWidow.postMessage(o.data,"*")))},this.startListening()}forwardSdkMessage;startListening(){this.appWindow.addEventListener("message",this.forwardSdkMessage)}stopListening(){this.appWindow.removeEventListener("message",this.forwardSdkMessage)}}function q(e){return typeof e=="object"&&e!==null&&"id"in e&&typeof e.id=="string"}function ee(e){return"method"in e&&typeof e.method=="string"&&"params"in e&&"env"in e&&typeof e.env=="object"&&e.env!==null&&"sdkVersion"in e.env}function te(e){return"success"in e&&typeof e.success=="boolean"&&"version"in e&&typeof e.version=="string"}function ne(e="Default",t="#1c5dbf",...n){console.debug(`%c [COW][${e}]`,`font-weight: bold; color: ${t}`,...n)}function oe(...e){process.env.NODE_ENV!=="test"&&ne("Widget","#47aba8",...e)}const H="https://swap.cow.fi";function k(e){return!!(e&&typeof e=="object")}const v="_",re="CoW Swap widget: invalid baseUrl.",M=!1;function ie(e){return e==="localhost"||e==="127.0.0.1"||e==="::1"||e.endsWith(".localhost")}function C(e,t){const n=`${re} ${e}`;if(t)throw new Error(n);return console.error("[CoW Widget]",n),H}function x(e,t=M){const n=typeof e=="string"?e.trim():"";if(!n)return H;let o;try{o=new URL(n)}catch{return C(`Not a valid URL: ${JSON.stringify(n)}`,t)}if(o.username||o.password)return C("Userinfo (username/password) in URL is not allowed.",t);const r=o.protocol==="https:",i=o.protocol==="http:"&&ie(o.hostname);if(!r&&!i)return C(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`,t);const u=o.pathname==="/"||o.pathname===""?"":o.pathname.replace(/\/+$/,"");return`${o.origin}${u}`}function se(e){const t=x(e.baseUrl),n=V(e);return t+"/#"+n+"?"+$(e)}function V(e){const{chainId:t=1,sell:n,buy:o,tradeType:r=P.SWAP}=e,i=[n?.asset||v,o?.asset||v].map(encodeURIComponent).join("/");return`/${t}/widget/${r}/${i}`}function $(e){const t=new URLSearchParams;return ue(ce(le(de(ae(t,e),e),e),e),e)}function ae(e,t){const{sell:n,buy:o}=t;return n?.amount&&e.append("sellAmount",n.amount),o?.amount&&e.append("buyAmount",o.amount),e}function de(e,t){const n=t.theme;return n?(k(n)?(e.append("palette",encodeURIComponent(JSON.stringify(n))),e.append("theme",n.baseTheme)):(e.append("palette","null"),e.append("theme",n)),e):(e.append("palette","null"),e)}function le(e,t){return t.targetChainId&&e.append("targetChainId",t.targetChainId.toString()),e}function ce(e,t){return t.locale&&e.append("lng",t.locale),e}function ue(e,t){return pe(t.hooks)?e.append("hooksEnabled","true"):e.delete("hooksEnabled"),e}function pe(e){return!!e&&Object.values(e).some(Boolean)}const fe=3e4,m="coWWidgetContentReloadButton";function Ee(e,t,n){const o=e.src;let r=!1,i=!1,u;function E(){e.srcdoc=we,t?.()}function p(){clearTimeout(u),u=setTimeout(()=>{r||i||E()},fe)}function s(){r||i||(e.removeAttribute("srcdoc"),e.src=o,p())}function a(){if(r)return;const d=e.contentDocument,T=d?.querySelector(`.${m}`);if(!(!d||!T)&&(T.addEventListener("click",s),n)){const h=d.createElement("style");h.textContent=n,d.head.appendChild(h)}}return e.addEventListener("error",d=>{r||(console.error("Could not load iframe",d),E())}),e.addEventListener("load",a),p(),{cancelWidgetLoading(){r=!0,clearTimeout(u),e.removeEventListener("load",a)},onWidgetReady(){i=!0,clearTimeout(u)}}}const we=`<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <style>
+      html, body { margin: 0; padding: 0; width: 100%; height: 100%; }
+      .errorContent {
+        display: flex;
+        flex-direction: column;
+        gap: 16px;
+        align-items: center;
+        justify-content: center;
+        text-align: center;
+
+        width: 100%;
+        height: 100%;
+
+        padding: 24px;
+        box-sizing: border-box;
+
+        background: #fff5f5;
+        color: #d32f2f;
+
+        border: 1px solid #f5c2c7;
+        border-radius: 12px;
+
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+        font-size: 14px;
+        line-height: 1.5;
+        font-weight: 500;
+      }
+      .${m} {
+        padding: 8px 24px;
+        border: 1px solid #d32f2f;
+        border-radius: 8px;
+        background: transparent;
+        color: #d32f2f;
+        font: inherit;
+        cursor: pointer;
+      }
+      .${m}:hover {
+        background: #d32f2f;
+        color: #fff5f5;
+      }
+    </style>
+  </head>
+  <body>
+    <div class="errorContent">
+      <span>Couldn't load the widget. Please try again later.</span>
+
+      <button class="${m}">Retry</button>
+    </div>
+  </body>
+</html>`,G="640px",_e="450px",Oe=20,Re={iframe:null,updateParams:()=>{},updateListeners:()=>{},updateProvider:()=>{},destroy:()=>{}};function ge(e,t){const{params:n,provider:o,listeners:r,onReady:i,enableSafeSdkBridge:u=!0}=t;let E=o,p=n;if(typeof window>"u")return Re;const s=Te(n),a=he(s);oe("Resolved trusted iframe origin",{iframeOrigin:a});const d=[];e.innerHTML="",e.appendChild(s);const{cancelWidgetLoading:T,onWidgetReady:h}=Ee(s,t.onLoadingError,t.loadingErrorStyles),{contentWindow:l}=s;if(!l)throw console.error("Iframe does not contain a window",s),new Error("Iframe does not contain a window!");d.push(Ae(l,a,()=>{i?.(),h()})),d.push(Le(l,a,n.appCode)),d.push(...Ie(s,a,n.height,n.maxHeight));let L=null;function W(){l&&(L&&window.removeEventListener("message",L),!p.disableWindowOpen&&(L=me(a,l),d.push(L)))}let A=null;function S(){l&&(A&&window.removeEventListener("message",A),A=Se(l,a,p.hooks),d.push(A))}W(),S();const D=new J(window,a,l,r);let I=b(l,a,null,E);s.addEventListener("load",()=>{N(l,a,p,E)});const j=u?new Z(window,l):null;return{iframe:s,updateParams:w=>{p=w,N(l,a,p,E),W(),S()},updateListeners:w=>D.updateListeners(w),updateProvider:w=>{E=w,I=b(l,a,I,w)},destroy:()=>{I.disconnect(),D.stopListeningIframe(),d.forEach(w=>window.removeEventListener("message",w)),j?.stopListening(),s&&s.parentNode===e&&e.removeChild(s),T()}}}function b(e,t,n,o){n&&n.disconnect();const r=n||new y.IframeRpcProviderBridge(e,t);return o&&r.onConnect(o),r}function Te(e){const{width:t=_e,height:n=G}=e,o=document.createElement("iframe");return o.src=se(e),o.width=t,o.height=n,o.style.border="0",o.setAttribute("sandbox",U),o.referrerPolicy=F,o.allow=B,o}function he(e){return new URL(e.src).origin}function N(e,t,n,o){const r=!!o,i=V(n),u=$(n).toString(),{theme:E,hooks:p,...s}=n;c.postMessageToWindow(e,g.UPDATE_PARAMS,{urlParams:{pathname:i,search:u},appParams:s,hasProvider:r},t)}function Le(e,t,n){return c.listenToMessageFromWindow(window,e,f.ACTIVATE,()=>{c.postMessageToWindow(e,g.UPDATE_APP_DATA,{metaData:n?{appCode:n}:void 0},t)},t)}function Ae(e,t,n){let o=!1;return c.listenToMessageFromWindow(window,e,f.READY,()=>{o||(o=!0,n())},t)}function me(e,t){return c.listenToMessageFromWindow(window,t,f.INTERCEPT_WINDOW_OPEN,({href:n,rel:o,target:r})=>{const i=Pe(n.toString(),e);i&&z(i)&&window.open(i,r,o)},e)}function Pe(e,t){const n=e.trim();if(!n)return null;try{return new URL(n,t).toString()}catch{return null}}function Ie(e,t,n=G,o){return e.contentWindow?[c.listenToMessageFromWindow(window,e.contentWindow,f.UPDATE_HEIGHT,r=>{const i=r.height?r.height+Oe:void 0;e.style.height=i?`${o?Math.min(i,o):i}px`:n},t),c.listenToMessageFromWindow(window,e.contentWindow,f.SET_FULL_HEIGHT,({isUpToSmall:r})=>{e.style.height=r?n:`${o||document.body.offsetHeight}px`},t)]:[]}const Ce={[_.ON_BEFORE_APPROVAL]:(e,t)=>t?.onBeforeApproval?t.onBeforeApproval(e):!0,[_.ON_BEFORE_TRADE]:(e,t)=>t?.onBeforeTrade?t.onBeforeTrade(e):!0,[_.ON_BEFORE_WRAP_UNWRAP]:(e,t)=>t?.onBeforeWrapOrUnwrap?t.onBeforeWrapOrUnwrap(e):!0,[_.ON_BEFORE_ORDER_CANCEL]:(e,t)=>t?.onBeforeOrderCancel?t.onBeforeOrderCancel(e):!0,[_.ON_BEFORE_ORDERS_CANCEL]:(e,t)=>t?.onBeforeOrdersCancel?t.onBeforeOrdersCancel(e):!0};function We(e,t){return Ce[e.event](e.payload,t)}function Se(e,t,n){return c.listenToMessageFromWindow(window,e,f.PROCESS_HOOK,async o=>{let r=!1;try{r=await We(o,n)}catch{}c.postMessageToWindow(e,g.HOOK_RESULT,{id:o.id,result:r},t)},t)}const De=Object.values(P);function ve(e,t,n){if(O(e)){const o=e[n];return R(o)?o[t]:o}if(R(e)){const o=e[t];return O(o)?o[n]:o}return e}function O(e){return typeof e!="object"?!1:Object.keys(e).every(t=>De.includes(t))}const be=/^\d+$/;function R(e){return typeof e!="object"?!1:Object.keys(e).every(t=>be.test(t))}function Ne(e){return O(e)?Object.values(e).flatMap(t=>R(t)?Object.values(t):[t]):R(e)?Object.values(e).flatMap(t=>O(t)?Object.values(t):[t]):[e]}exports.SHOULD_THROW_IF_INVALID_URL=M;exports.TradeType=P;exports.WIDGET_IFRAME_ALLOW=B;exports.WIDGET_IFRAME_REFERRER_POLICY=F;exports.WIDGET_IFRAME_SANDBOX=U;exports.WIDGET_PALETTE_COLORS=X;exports.WidgetHookEvents=_;exports.WidgetMethodsEmit=f;exports.WidgetMethodsListen=g;exports.createCowSwapWidget=ge;exports.isCowSwapWidgetPalette=k;exports.isPerNetworkConfig=R;exports.isPerTradeTypeConfig=O;exports.resolveFlexibleConfig=ve;exports.resolveFlexibleConfigValues=Ne;exports.sanitizeWidgetBaseUrl=x;exports.widgetIframeTransport=c;

package/index.js

@@ -1,17 +1,53 @@
-import { IframeTransport as b, IframeRpcProviderBridge as F } from "@cowprotocol/iframe-transport";
-import { SimpleCowEventEmitter as y } from "@cowprotocol/events";
-const B = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox", M = "strict-origin-when-cross-origin", V = "clipboard-read; clipboard-write";
-var p = /* @__PURE__ */ ((e) => (e.ACTIVATE = "ACTIVATE", e.READY = "READY", e.UPDATE_HEIGHT = "UPDATE_HEIGHT", e.SET_FULL_HEIGHT = "SET_FULL_HEIGHT", e.EMIT_COW_EVENT = "EMIT_COW_EVENT", e.PROVIDER_RPC_REQUEST = "PROVIDER_RPC_REQUEST", e.INTERCEPT_WINDOW_OPEN = "INTERCEPT_WINDOW_OPEN", e.PROCESS_HOOK = "PROCESS_HOOK", e))(p || {}), h = /* @__PURE__ */ ((e) => (e.UPDATE_PARAMS = "UPDATE_PARAMS", e.UPDATE_APP_DATA = "UPDATE_APP_DATA", e.PROVIDER_RPC_RESPONSE = "PROVIDER_RPC_RESPONSE", e.PROVIDER_ON_EVENT = "PROVIDER_ON_EVENT", e.HOOK_RESULT = "HOOK_RESULT", e))(h || {}), w = /* @__PURE__ */ ((e) => (e.ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL", e.ON_BEFORE_TRADE = "ON_BEFORE_TRADE", e.ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP", e.ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL", e.ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL", e))(w || {}), m = /* @__PURE__ */ ((e) => (e.SWAP = "swap", e.LIMIT = "limit", e.ADVANCED = "advanced", e.YIELD = "yield", e))(m || {});
-const ge = ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"], d = new b("cowSwapWidget");
-class k {
+import { IframeTransport as k, IframeRpcProviderBridge as x } from "@cowprotocol/iframe-transport";
+import { SimpleCowEventEmitter as M } from "@cowprotocol/events";
+const V = /* @__PURE__ */ new Set([
+  "wc:",
+  // default Wallet-connect protocol
+  "metamask:",
+  "imtokenv2:",
+  "trustassetapp:",
+  "okex:",
+  "ledgerlive:",
+  "rainbow:",
+  "argent:",
+  "exodus:",
+  "zerion:",
+  "okxwallet:",
+  "uniswap:",
+  "robinhood-wallet:",
+  "krakenwallet:",
+  "bitpay:",
+  "oneinch:",
+  "safe:",
+  "backpack:",
+  "tangem:",
+  "mathwallet:",
+  "keplrwallet:",
+  "coin98:",
+  "tpoutside:",
+  "bncus:",
+  "bnc:"
+]), $ = /* @__PURE__ */ new Set(["http:", "https:"]);
+function G(e) {
+  try {
+    const t = new URL(e).protocol;
+    return $.has(t) || V.has(t);
+  } catch {
+    return !1;
+  }
+}
+const j = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox", K = "strict-origin-when-cross-origin", Q = "clipboard-read; clipboard-write";
+var w = /* @__PURE__ */ ((e) => (e.ACTIVATE = "ACTIVATE", e.READY = "READY", e.UPDATE_HEIGHT = "UPDATE_HEIGHT", e.SET_FULL_HEIGHT = "SET_FULL_HEIGHT", e.EMIT_COW_EVENT = "EMIT_COW_EVENT", e.PROVIDER_RPC_REQUEST = "PROVIDER_RPC_REQUEST", e.INTERCEPT_WINDOW_OPEN = "INTERCEPT_WINDOW_OPEN", e.PROCESS_HOOK = "PROCESS_HOOK", e))(w || {}), A = /* @__PURE__ */ ((e) => (e.UPDATE_PARAMS = "UPDATE_PARAMS", e.UPDATE_APP_DATA = "UPDATE_APP_DATA", e.PROVIDER_RPC_RESPONSE = "PROVIDER_RPC_RESPONSE", e.PROVIDER_ON_EVENT = "PROVIDER_ON_EVENT", e.HOOK_RESULT = "HOOK_RESULT", e))(A || {}), _ = /* @__PURE__ */ ((e) => (e.ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL", e.ON_BEFORE_TRADE = "ON_BEFORE_TRADE", e.ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP", e.ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL", e.ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL", e))(_ || {}), I = /* @__PURE__ */ ((e) => (e.SWAP = "swap", e.LIMIT = "limit", e.ADVANCED = "advanced", e.YIELD = "yield", e))(I || {});
+const Ne = ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"], c = new k("cowSwapWidget");
+class Y {
   constructor(t, n, o, r = []) {
-    this.contentWindow = t, this.updateListeners(r), this.widgetListener = d.listenToMessageFromWindow(this.contentWindow, o, p.EMIT_COW_EVENT, (i) => this.eventEmitter.emit(i.event, i.payload), n);
+    this.contentWindow = t, this.updateListeners(r), this.widgetListener = c.listenToMessageFromWindow(this.contentWindow, o, w.EMIT_COW_EVENT, (i) => this.eventEmitter.emit(i.event, i.payload), n);
   }
-  eventEmitter = new y();
+  eventEmitter = new M();
   listeners = [];
   widgetListener;
   stopListeningIframe() {
-    d.stopListeningWindowListener(this.contentWindow, this.widgetListener);
+    c.stopListeningWindowListener(this.contentWindow, this.widgetListener);
   }
   updateListeners(t) {
     for (const n of this.listeners)
@@ -21,10 +57,10 @@ class k {
       this.eventEmitter.on(n);
   }
 }
-class $ {
+class z {
   constructor(t, n) {
     this.appWindow = t, this.iframeWidow = n, this.forwardSdkMessage = (o) => {
-      G(o.data) && (typeof window < "u" && o.origin === window.location.origin || (j(o.data) ? this.appWindow.parent.postMessage(o.data, "*") : x(o.data) && this.iframeWidow.postMessage(o.data, "*")));
+      X(o.data) && (typeof window < "u" && o.origin === window.location.origin || (J(o.data) ? this.appWindow.parent.postMessage(o.data, "*") : Z(o.data) && this.iframeWidow.postMessage(o.data, "*")));
     }, this.startListening();
   }
   forwardSdkMessage;
@@ -35,94 +71,180 @@ class $ {
     this.appWindow.removeEventListener("message", this.forwardSdkMessage);
   }
 }
-function G(e) {
+function X(e) {
   return typeof e == "object" && e !== null && "id" in e && typeof e.id == "string";
 }
-function j(e) {
+function J(e) {
   return "method" in e && typeof e.method == "string" && "params" in e && "env" in e && typeof e.env == "object" && e.env !== null && "sdkVersion" in e.env;
 }
-function x(e) {
+function Z(e) {
   return "success" in e && typeof e.success == "boolean" && "version" in e && typeof e.version == "string";
 }
-function Q(e = "Default", t = "#1c5dbf", ...n) {
+function q(e = "Default", t = "#1c5dbf", ...n) {
   console.debug(`%c [COW][${e}]`, `font-weight: bold; color: ${t}`, ...n);
 }
-function K(...e) {
-  process.env.NODE_ENV !== "test" && Q("Widget", "#47aba8", ...e);
+function ee(...e) {
+  process.env.NODE_ENV !== "test" && q("Widget", "#47aba8", ...e);
 }
-const S = "https://swap.cow.fi";
-function Y(e) {
+const y = "https://swap.cow.fi";
+function te(e) {
   return !!(e && typeof e == "object");
 }
-const C = "_", X = "CoW Swap widget: invalid baseUrl.", J = !1;
-function z(e) {
+const v = "_", ne = "CoW Swap widget: invalid baseUrl.", oe = !1;
+function re(e) {
   return e === "localhost" || e === "127.0.0.1" || e === "::1" || e.endsWith(".localhost");
 }
-function P(e, t) {
-  const n = `${X} ${e}`;
+function C(e, t) {
+  const n = `${ne} ${e}`;
   if (t)
     throw new Error(n);
-  return console.error("[CoW Widget]", n), S;
+  return console.error("[CoW Widget]", n), y;
 }
-function Z(e, t = J) {
+function ie(e, t = oe) {
   const n = typeof e == "string" ? e.trim() : "";
   if (!n)
-    return S;
+    return y;
   let o;
   try {
     o = new URL(n);
   } catch {
-    return P(`Not a valid URL: ${JSON.stringify(n)}`, t);
+    return C(`Not a valid URL: ${JSON.stringify(n)}`, t);
   }
   if (o.username || o.password)
-    return P("Userinfo (username/password) in URL is not allowed.", t);
-  const r = o.protocol === "https:", i = o.protocol === "http:" && z(o.hostname);
+    return C("Userinfo (username/password) in URL is not allowed.", t);
+  const r = o.protocol === "https:", i = o.protocol === "http:" && re(o.hostname);
   if (!r && !i)
-    return P(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`, t);
-  const l = o.pathname === "/" || o.pathname === "" ? "" : o.pathname.replace(/\/+$/, "");
-  return `${o.origin}${l}`;
+    return C(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`, t);
+  const u = o.pathname === "/" || o.pathname === "" ? "" : o.pathname.replace(/\/+$/, "");
+  return `${o.origin}${u}`;
 }
-function q(e) {
-  const t = Z(e.baseUrl), n = N(e);
-  return t + "/#" + n + "?" + v(e);
+function se(e) {
+  const t = ie(e.baseUrl), n = U(e);
+  return t + "/#" + n + "?" + B(e);
 }
-function N(e) {
+function U(e) {
   const {
     chainId: t = 1,
     sell: n,
     buy: o,
-    tradeType: r = m.SWAP
-  } = e, i = [n?.asset || C, o?.asset || C].map(encodeURIComponent).join("/");
+    tradeType: r = I.SWAP
+  } = e, i = [n?.asset || v, o?.asset || v].map(encodeURIComponent).join("/");
   return `/${t}/widget/${r}/${i}`;
 }
-function v(e) {
+function B(e) {
   const t = new URLSearchParams();
-  return re(oe(ne(te(ee(t, e), e), e), e), e);
+  return ue(ce(le(de(ae(t, e), e), e), e), e);
 }
-function ee(e, t) {
+function ae(e, t) {
   const {
     sell: n,
     buy: o
   } = t;
   return n?.amount && e.append("sellAmount", n.amount), o?.amount && e.append("buyAmount", o.amount), e;
 }
-function te(e, t) {
+function de(e, t) {
   const n = t.theme;
-  return n ? (Y(n) ? (e.append("palette", encodeURIComponent(JSON.stringify(n))), e.append("theme", n.baseTheme)) : (e.append("palette", "null"), e.append("theme", n)), e) : (e.append("palette", "null"), e);
+  return n ? (te(n) ? (e.append("palette", encodeURIComponent(JSON.stringify(n))), e.append("theme", n.baseTheme)) : (e.append("palette", "null"), e.append("theme", n)), e) : (e.append("palette", "null"), e);
 }
-function ne(e, t) {
+function le(e, t) {
   return t.targetChainId && e.append("targetChainId", t.targetChainId.toString()), e;
 }
-function oe(e, t) {
+function ce(e, t) {
   return t.locale && e.append("lng", t.locale), e;
 }
-function re(e, t) {
-  return ie(t.hooks) ? e.append("hooksEnabled", "true") : e.delete("hooksEnabled"), e;
+function ue(e, t) {
+  return pe(t.hooks) ? e.append("hooksEnabled", "true") : e.delete("hooksEnabled"), e;
 }
-function ie(e) {
+function pe(e) {
   return !!e && Object.values(e).some(Boolean);
 }
-const U = "640px", se = "450px", ae = 20, de = {
+const fe = 3e4, T = "coWWidgetContentReloadButton";
+function Ee(e, t, n) {
+  const o = e.src;
+  let r = !1, i = !1, u;
+  function f() {
+    e.srcdoc = we, t?.();
+  }
+  function p() {
+    clearTimeout(u), u = setTimeout(() => {
+      r || i || f();
+    }, fe);
+  }
+  function s() {
+    r || i || (e.removeAttribute("srcdoc"), e.src = o, p());
+  }
+  function a() {
+    if (r) return;
+    const d = e.contentDocument, O = d?.querySelector(`.${T}`);
+    if (!(!d || !O) && (O.addEventListener("click", s), n)) {
+      const R = d.createElement("style");
+      R.textContent = n, d.head.appendChild(R);
+    }
+  }
+  return e.addEventListener("error", (d) => {
+    r || (console.error("Could not load iframe", d), f());
+  }), e.addEventListener("load", a), p(), {
+    cancelWidgetLoading() {
+      r = !0, clearTimeout(u), e.removeEventListener("load", a);
+    },
+    onWidgetReady() {
+      i = !0, clearTimeout(u);
+    }
+  };
+}
+const we = `<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <style>
+      html, body { margin: 0; padding: 0; width: 100%; height: 100%; }
+      .errorContent {
+        display: flex;
+        flex-direction: column;
+        gap: 16px;
+        align-items: center;
+        justify-content: center;
+        text-align: center;
+
+        width: 100%;
+        height: 100%;
+
+        padding: 24px;
+        box-sizing: border-box;
+
+        background: #fff5f5;
+        color: #d32f2f;
+
+        border: 1px solid #f5c2c7;
+        border-radius: 12px;
+
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+        font-size: 14px;
+        line-height: 1.5;
+        font-weight: 500;
+      }
+      .${T} {
+        padding: 8px 24px;
+        border: 1px solid #d32f2f;
+        border-radius: 8px;
+        background: transparent;
+        color: #d32f2f;
+        font: inherit;
+        cursor: pointer;
+      }
+      .${T}:hover {
+        background: #d32f2f;
+        color: #fff5f5;
+      }
+    </style>
+  </head>
+  <body>
+    <div class="errorContent">
+      <span>Couldn't load the widget. Please try again later.</span>
+
+      <button class="${T}">Retry</button>
+    </div>
+  </body>
+</html>`, F = "640px", _e = "450px", Oe = 20, Re = {
   iframe: null,
   updateParams: () => {
   },
@@ -133,112 +255,118 @@ const U = "640px", se = "450px", ae = 20, de = {
   destroy: () => {
   }
 };
-function Le(e, t) {
+function ye(e, t) {
   const {
     params: n,
     provider: o,
     listeners: r,
-    onReady: i
+    onReady: i,
+    enableSafeSdkBridge: u = !0
   } = t;
-  let l = o, E = n;
-  if (typeof window > "u") return de;
-  const c = ce(n), s = le(c);
-  K("Resolved trusted iframe origin", {
-    iframeOrigin: s
+  let f = o, p = n;
+  if (typeof window > "u") return Re;
+  const s = he(n), a = ge(s);
+  ee("Resolved trusted iframe origin", {
+    iframeOrigin: a
   });
-  const f = [];
-  e.innerHTML = "", e.appendChild(c);
+  const d = [];
+  e.innerHTML = "", e.appendChild(s);
   const {
-    contentWindow: a
-  } = c;
-  if (!a)
-    throw console.error("Iframe does not contain a window", c), new Error("Iframe does not contain a window!");
-  i && f.push(pe(a, s, i)), f.push(ue(a, s, n.appCode)), f.push(..._e(c, s, n.height, n.maxHeight));
-  let _ = null;
-  function g() {
-    a && (_ && window.removeEventListener("message", _), !E.disableWindowOpen && (_ = Ee(s, a), f.push(_)));
+    cancelWidgetLoading: O,
+    onWidgetReady: R
+  } = Ee(s, t.onLoadingError, t.loadingErrorStyles), {
+    contentWindow: l
+  } = s;
+  if (!l)
+    throw console.error("Iframe does not contain a window", s), new Error("Iframe does not contain a window!");
+  d.push(me(l, a, () => {
+    i?.(), R();
+  })), d.push(Te(l, a, n.appCode)), d.push(...Pe(s, a, n.height, n.maxHeight));
+  let h = null;
+  function S() {
+    l && (h && window.removeEventListener("message", h), !p.disableWindowOpen && (h = Le(a, l), d.push(h)));
   }
-  let O = null;
-  function L() {
-    a && (O && window.removeEventListener("message", O), O = Te(a, s, E.hooks), f.push(O));
+  let g = null;
+  function W() {
+    l && (g && window.removeEventListener("message", g), g = Se(l, a, p.hooks), d.push(g));
   }
-  g(), L();
-  const I = new k(window, s, a, r);
-  let A = D(a, s, null, l);
-  c.addEventListener("load", () => {
-    W(a, s, E, l);
+  S(), W();
+  const D = new Y(window, a, l, r);
+  let P = b(l, a, null, f);
+  s.addEventListener("load", () => {
+    N(l, a, p, f);
   });
-  const H = new $(window, a);
+  const H = u ? new z(window, l) : null;
   return {
-    iframe: c,
-    updateParams: (u) => {
-      E = u, W(a, s, E, l), g(), L();
+    iframe: s,
+    updateParams: (E) => {
+      p = E, N(l, a, p, f), S(), W();
     },
-    updateListeners: (u) => I.updateListeners(u),
-    updateProvider: (u) => {
-      l = u, A = D(a, s, A, u);
+    updateListeners: (E) => D.updateListeners(E),
+    updateProvider: (E) => {
+      f = E, P = b(l, a, P, E);
     },
     destroy: () => {
-      A.disconnect(), I.stopListeningIframe(), f.forEach((u) => window.removeEventListener("message", u)), H.stopListening(), e.removeChild(c);
+      P.disconnect(), D.stopListeningIframe(), d.forEach((E) => window.removeEventListener("message", E)), H?.stopListening(), s && s.parentNode === e && e.removeChild(s), O();
     }
   };
 }
-function D(e, t, n, o) {
+function b(e, t, n, o) {
   n && n.disconnect();
-  const r = n || new F(e, t);
+  const r = n || new x(e, t);
   return o && r.onConnect(o), r;
 }
-function ce(e) {
+function he(e) {
   const {
-    width: t = se,
-    height: n = U
+    width: t = _e,
+    height: n = F
   } = e, o = document.createElement("iframe");
-  return o.src = q(e), o.width = t, o.height = n, o.style.border = "0", o.setAttribute("sandbox", B), o.referrerPolicy = M, o.allow = V, o;
+  return o.src = se(e), o.width = t, o.height = n, o.style.border = "0", o.setAttribute("sandbox", j), o.referrerPolicy = K, o.allow = Q, o;
 }
-function le(e) {
+function ge(e) {
   return new URL(e.src).origin;
 }
-function W(e, t, n, o) {
-  const r = !!o, i = N(n), l = v(n).toString(), {
-    theme: E,
-    hooks: c,
+function N(e, t, n, o) {
+  const r = !!o, i = U(n), u = B(n).toString(), {
+    theme: f,
+    hooks: p,
     ...s
   } = n;
-  d.postMessageToWindow(e, h.UPDATE_PARAMS, {
+  c.postMessageToWindow(e, A.UPDATE_PARAMS, {
     urlParams: {
       pathname: i,
-      search: l
+      search: u
     },
     appParams: s,
     hasProvider: r
   }, t);
 }
-function ue(e, t, n) {
-  return d.listenToMessageFromWindow(window, e, p.ACTIVATE, () => {
-    d.postMessageToWindow(e, h.UPDATE_APP_DATA, {
+function Te(e, t, n) {
+  return c.listenToMessageFromWindow(window, e, w.ACTIVATE, () => {
+    c.postMessageToWindow(e, A.UPDATE_APP_DATA, {
       metaData: n ? {
         appCode: n
       } : void 0
     }, t);
   }, t);
 }
-function pe(e, t, n) {
+function me(e, t, n) {
   let o = !1;
-  return d.listenToMessageFromWindow(window, e, p.READY, () => {
+  return c.listenToMessageFromWindow(window, e, w.READY, () => {
     o || (o = !0, n());
   }, t);
 }
-function Ee(e, t) {
-  return d.listenToMessageFromWindow(window, t, p.INTERCEPT_WINDOW_OPEN, ({
+function Le(e, t) {
+  return c.listenToMessageFromWindow(window, t, w.INTERCEPT_WINDOW_OPEN, ({
     href: n,
     rel: o,
     target: r
   }) => {
-    const i = fe(n.toString(), e);
-    i && we(i) && window.open(i, r, o);
+    const i = Ae(n.toString(), e);
+    i && G(i) && window.open(i, r, o);
   }, e);
 }
-function fe(e, t) {
+function Ae(e, t) {
   const n = e.trim();
   if (!n)
     return null;
@@ -248,85 +376,77 @@ function fe(e, t) {
     return null;
   }
 }
-function we(e) {
-  try {
-    const t = new URL(e).protocol;
-    return t === "http:" || t === "https:";
-  } catch {
-    return !1;
-  }
-}
-function _e(e, t, n = U, o) {
-  return e.contentWindow ? [d.listenToMessageFromWindow(window, e.contentWindow, p.UPDATE_HEIGHT, (r) => {
-    const i = r.height ? r.height + ae : void 0;
+function Pe(e, t, n = F, o) {
+  return e.contentWindow ? [c.listenToMessageFromWindow(window, e.contentWindow, w.UPDATE_HEIGHT, (r) => {
+    const i = r.height ? r.height + Oe : void 0;
     e.style.height = i ? `${o ? Math.min(i, o) : i}px` : n;
-  }, t), d.listenToMessageFromWindow(window, e.contentWindow, p.SET_FULL_HEIGHT, ({
+  }, t), c.listenToMessageFromWindow(window, e.contentWindow, w.SET_FULL_HEIGHT, ({
     isUpToSmall: r
   }) => {
     e.style.height = r ? n : `${o || document.body.offsetHeight}px`;
   }, t)] : [];
 }
-const Oe = {
-  [w.ON_BEFORE_APPROVAL]: (e, t) => t?.onBeforeApproval ? t.onBeforeApproval(e) : !0,
-  [w.ON_BEFORE_TRADE]: (e, t) => t?.onBeforeTrade ? t.onBeforeTrade(e) : !0,
-  [w.ON_BEFORE_WRAP_UNWRAP]: (e, t) => t?.onBeforeWrapOrUnwrap ? t.onBeforeWrapOrUnwrap(e) : !0,
-  [w.ON_BEFORE_ORDER_CANCEL]: (e, t) => t?.onBeforeOrderCancel ? t.onBeforeOrderCancel(e) : !0,
-  [w.ON_BEFORE_ORDERS_CANCEL]: (e, t) => t?.onBeforeOrdersCancel ? t.onBeforeOrdersCancel(e) : !0
+const Ce = {
+  [_.ON_BEFORE_APPROVAL]: (e, t) => t?.onBeforeApproval ? t.onBeforeApproval(e) : !0,
+  [_.ON_BEFORE_TRADE]: (e, t) => t?.onBeforeTrade ? t.onBeforeTrade(e) : !0,
+  [_.ON_BEFORE_WRAP_UNWRAP]: (e, t) => t?.onBeforeWrapOrUnwrap ? t.onBeforeWrapOrUnwrap(e) : !0,
+  [_.ON_BEFORE_ORDER_CANCEL]: (e, t) => t?.onBeforeOrderCancel ? t.onBeforeOrderCancel(e) : !0,
+  [_.ON_BEFORE_ORDERS_CANCEL]: (e, t) => t?.onBeforeOrdersCancel ? t.onBeforeOrdersCancel(e) : !0
 };
-function Re(e, t) {
-  return Oe[e.event](e.payload, t);
+function Ie(e, t) {
+  return Ce[e.event](e.payload, t);
 }
-function Te(e, t, n) {
-  return d.listenToMessageFromWindow(window, e, p.PROCESS_HOOK, async (o) => {
+function Se(e, t, n) {
+  return c.listenToMessageFromWindow(window, e, w.PROCESS_HOOK, async (o) => {
     let r = !1;
     try {
-      r = await Re(o, n);
+      r = await Ie(o, n);
     } catch {
     }
-    d.postMessageToWindow(e, h.HOOK_RESULT, {
+    c.postMessageToWindow(e, A.HOOK_RESULT, {
       id: o.id,
       result: r
     }, t);
   }, t);
 }
-const he = Object.values(m);
-function Ie(e, t, n) {
-  if (R(e)) {
+const We = Object.values(I);
+function Ue(e, t, n) {
+  if (m(e)) {
     const o = e[n];
-    return T(o) ? o[t] : o;
+    return L(o) ? o[t] : o;
   }
-  if (T(e)) {
+  if (L(e)) {
     const o = e[t];
-    return R(o) ? o[n] : o;
+    return m(o) ? o[n] : o;
   }
   return e;
 }
-function R(e) {
-  return typeof e != "object" ? !1 : Object.keys(e).every((t) => he.includes(t));
+function m(e) {
+  return typeof e != "object" ? !1 : Object.keys(e).every((t) => We.includes(t));
 }
-const Ae = /^\d+$/;
-function T(e) {
-  return typeof e != "object" ? !1 : Object.keys(e).every((t) => Ae.test(t));
+const De = /^\d+$/;
+function L(e) {
+  return typeof e != "object" ? !1 : Object.keys(e).every((t) => De.test(t));
 }
-function Ce(e) {
-  return R(e) ? Object.values(e).flatMap((t) => T(t) ? Object.values(t) : [t]) : T(e) ? Object.values(e).flatMap((t) => R(t) ? Object.values(t) : [t]) : [e];
+function Be(e) {
+  return m(e) ? Object.values(e).flatMap((t) => L(t) ? Object.values(t) : [t]) : L(e) ? Object.values(e).flatMap((t) => m(t) ? Object.values(t) : [t]) : [e];
 }
 export {
-  J as SHOULD_THROW_IF_INVALID_URL,
-  m as TradeType,
-  V as WIDGET_IFRAME_ALLOW,
-  M as WIDGET_IFRAME_REFERRER_POLICY,
-  B as WIDGET_IFRAME_SANDBOX,
-  ge as WIDGET_PALETTE_COLORS,
-  w as WidgetHookEvents,
-  p as WidgetMethodsEmit,
-  h as WidgetMethodsListen,
-  Le as createCowSwapWidget,
-  Y as isCowSwapWidgetPalette,
-  T as isPerNetworkConfig,
-  R as isPerTradeTypeConfig,
-  Ie as resolveFlexibleConfig,
-  Ce as resolveFlexibleConfigValues,
-  Z as sanitizeWidgetBaseUrl,
-  d as widgetIframeTransport
+  oe as SHOULD_THROW_IF_INVALID_URL,
+  I as TradeType,
+  Q as WIDGET_IFRAME_ALLOW,
+  K as WIDGET_IFRAME_REFERRER_POLICY,
+  j as WIDGET_IFRAME_SANDBOX,
+  Ne as WIDGET_PALETTE_COLORS,
+  _ as WidgetHookEvents,
+  w as WidgetMethodsEmit,
+  A as WidgetMethodsListen,
+  ye as createCowSwapWidget,
+  te as isCowSwapWidgetPalette,
+  L as isPerNetworkConfig,
+  m as isPerTradeTypeConfig,
+  Ue as resolveFlexibleConfig,
+  Be as resolveFlexibleConfigValues,
+  ie as sanitizeWidgetBaseUrl,
+  c as widgetIframeTransport
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cowprotocol/widget-lib",
-  "version": "4.0.5",
+  "version": "4.2.0",
   "description": "CoW Swap Widget Library. Allows you to easily embed a CoW Swap widget on your website.",
   "repository": {
     "type": "git",
@@ -15,9 +15,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@cowprotocol/cow-sdk": "9.1.1",
-    "@cowprotocol/events": "^4.4.1",
-    "@cowprotocol/iframe-transport": "^2.2.6"
+    "@cowprotocol/cow-sdk": "9.1.2",
+    "@cowprotocol/events": "^4.6.0",
+    "@cowprotocol/iframe-transport": "^2.3.0"
   },
   "exports": {
     ".": {

package/types.d.ts

@@ -75,6 +75,13 @@ export interface CowSwapWidgetProps {
     provider?: EthereumProvider;
     listeners?: CowWidgetEventListeners;
     onReady?(): void;
+    onLoadingError?(): void;
+    /**
+     * Custom CSS appended to the error document displayed inside the iframe when the widget fails to load.
+     * Use it to override the default look (`.errorContent` and `.reloadButton` classes).
+     */
+    loadingErrorStyles?: string;
+    enableSafeSdkBridge?: boolean;
 }
 export interface JsonRpcRequest {
     id: number;
@@ -304,11 +311,33 @@ export interface CowSwapWidgetParams {
      * Defaults to false.
      */
     disableCrossChainSwap?: boolean;
+    /**
+     * Disable setting custom recipient for all trading widgets (swap,limit,twap)
+     * Important! Cross-chain swaps are based on custom recipient functionality!
+     * If you want always having recipient === order owner, then set disableCrossChainSwap=true as well
+     */
+    disableCustomRecipient?: boolean;
     /**
      * Disables adding custom tokens and custom token lists.
      * Defaults to false.
      */
     disableTokenImport?: boolean;
+    /**
+     * Disables the EIP-2612 permit signing flow. When `true`, the widget will
+     * never sign an off-chain permit and will always send an on-chain approval
+     * transaction — even for tokens that support permit.
+     *
+     * Defaults to false.
+     */
+    disableEIP2612Permits?: boolean;
+    /**
+     * Disables infinite (MAX_UINT256) ERC-20 approvals. When `true`, every
+     * approval transaction approves only the exact trade-size amount, and the
+     * "Partial approval" toggle in Settings is shown but locked on.
+     *
+     * Defaults to false.
+     */
+    disableInfiniteApprove?: boolean;
     /**
      * Disables showing the confirmation modal you get after posting an order.
      * Defaults to false.

package/widgetIframeLoading.d.ts

@@ -0,0 +1,6 @@
+type IframeLoadingState = {
+    cancelWidgetLoading: () => void;
+    onWidgetReady: () => void;
+};
+export declare function widgetIframeLoading(iframe: HTMLIFrameElement, onWidgetLoadingError?: () => void, customErrorStyles?: string): IframeLoadingState;
+export {};