@cowprotocol/widget-lib 4.4.0 → 4.4.2

package/IframeSafeSdkBridge.d.ts

@@ -1,8 +1,12 @@
 export declare class IframeSafeSdkBridge {
     private appWindow;
-    private iframeWidow;
+    private iframeWindow;
+    private iframeOrigin;
+    private parentOrigin;
     forwardSdkMessage: (event: MessageEvent<unknown>) => void;
-    constructor(appWindow: Window, iframeWidow: Window);
+    constructor(appWindow: Window, iframeWindow: Window, iframeOrigin: string, parentOrigin: string | null);
     private startListening;
     stopListening(): void;
+    private forwardRequest;
+    private forwardResponse;
 }

package/cowSwapWidget.constants.d.ts

@@ -11,6 +11,12 @@ export declare const DEFAULT_WIDGET_PARAMS: {
  * - allow-forms: trade inputs and similar controls.
  * - allow-popups + allow-popups-to-escape-sandbox: wallet connect / WalletConnect windows.
  */
+/**
+ * Iframe sandbox allowlist for hosts that opt out of opening widget popups.
+ * Omitting allow-popups makes `disableWindowOpen` browser-enforced instead of
+ * only disabling the parent-window relay.
+ */
+export declare const WIDGET_IFRAME_SANDBOX_WITHOUT_POPUPS = "allow-scripts allow-same-origin allow-forms";
 export declare const WIDGET_IFRAME_SANDBOX = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox";
 /** Limits referrer leakage when the widget is embedded on third-party origins. */
 export declare const WIDGET_IFRAME_REFERRER_POLICY = "strict-origin-when-cross-origin";

package/flexibleConfig.d.ts

@@ -1,5 +1,5 @@
 import { SupportedChainId } from '@cowprotocol/cow-sdk';
 import { FlexibleConfig, PerNetworkConfig, PerTradeTypeConfig, TradeType } from './types';
-export declare function resolveFlexibleConfig<T>(config: FlexibleConfig<T>, chainId: SupportedChainId, tradeType: TradeType): T | undefined;
 export declare function isPerTradeTypeConfig<T>(config: FlexibleConfig<T>): config is PerTradeTypeConfig<T>;
+export declare function resolveFlexibleConfig<T>(config: FlexibleConfig<T>, chainId: SupportedChainId, tradeType: TradeType): T | undefined;
 export declare function isPerNetworkConfig<T>(config: FlexibleConfig<T>): config is PerNetworkConfig<T>;

package/index.cjs

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const j=require("@cowprotocol/iframe-transport"),oe=require("@cowprotocol/events"),re=new Set(["wc:","metamask:","imtokenv2:","trustassetapp:","okex:","ledgerlive:","rainbow:","argent:","exodus:","zerion:","okxwallet:","uniswap:","robinhood-wallet:","krakenwallet:","bitpay:","oneinch:","safe:","backpack:","tangem:","mathwallet:","keplrwallet:","coin98:","tpoutside:","bncus:","bnc:"]),ie=new Set(["http:","https:"]);function se(e){try{const t=new URL(e).protocol;return ie.has(t)||re.has(t)}catch{return!1}}function ae(e,t){if(t){e.removeAttribute("style");for(const n of Object.keys(t)){const o=n,r=t[o];if(r==null||typeof r!="string"&&typeof r!="number")continue;const i=`${r}`;e.style[o]=i}}}const K="cowswap-widget-iframe",le="cowswap-widget",de={appCode:""},Y="allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox",Q="strict-origin-when-cross-origin",z="clipboard-read; clipboard-write";var w=(e=>(e.ACTIVATE="ACTIVATE",e.READY="READY",e.UPDATE_HEIGHT="UPDATE_HEIGHT",e.SET_FULL_HEIGHT="SET_FULL_HEIGHT",e.EMIT_COW_EVENT="EMIT_COW_EVENT",e.PROVIDER_RPC_REQUEST="PROVIDER_RPC_REQUEST",e.INTERCEPT_WINDOW_OPEN="INTERCEPT_WINDOW_OPEN",e.PROCESS_HOOK="PROCESS_HOOK",e))(w||{}),T=(e=>(e.UPDATE_PARAMS="UPDATE_PARAMS",e.UPDATE_APP_DATA="UPDATE_APP_DATA",e.PROVIDER_RPC_RESPONSE="PROVIDER_RPC_RESPONSE",e.PROVIDER_ON_EVENT="PROVIDER_ON_EVENT",e.HOOK_RESULT="HOOK_RESULT",e))(T||{}),_=(e=>(e.ON_BEFORE_APPROVAL="ON_BEFORE_APPROVAL",e.ON_BEFORE_TRADE="ON_BEFORE_TRADE",e.ON_BEFORE_WRAP_UNWRAP="ON_BEFORE_WRAP_UNWRAP",e.ON_BEFORE_ORDER_CANCEL="ON_BEFORE_ORDER_CANCEL",e.ON_BEFORE_ORDERS_CANCEL="ON_BEFORE_ORDERS_CANCEL",e))(_||{}),L=(e=>(e.SWAP="swap",e.LIMIT="limit",e.ADVANCED="advanced",e.YIELD="yield",e))(L||{});const ce=["primary","background","paper","text","danger","warning","alert","info","success"],p=new j.IframeTransport("cowSwapWidget");class ue{constructor(t,n,o,r=[]){this.contentWindow=t,this.updateListeners(r),this.widgetListener=p.listenToMessageFromWindow(this.contentWindow,o,w.EMIT_COW_EVENT,i=>this.eventEmitter.emit(i.event,i.payload),n)}eventEmitter=new oe.SimpleCowEventEmitter;listeners=[];widgetListener;stopListeningIframe(){p.stopListeningWindowListener(this.contentWindow,this.widgetListener)}updateListeners(t){for(const n of this.listeners)this.eventEmitter.off(n);this.listeners=t||[];for(const n of this.listeners)this.eventEmitter.on(n)}}class pe{constructor(t,n){this.appWindow=t,this.iframeWidow=n,this.forwardSdkMessage=o=>{fe(o.data)&&(typeof window<"u"&&o.origin===window.location.origin||(Ee(o.data)?this.appWindow.parent.postMessage(o.data,"*"):we(o.data)&&this.iframeWidow.postMessage(o.data,"*")))},this.startListening()}forwardSdkMessage;startListening(){this.appWindow.addEventListener("message",this.forwardSdkMessage)}stopListening(){this.appWindow.removeEventListener("message",this.forwardSdkMessage)}}function fe(e){return typeof e=="object"&&e!==null&&"id"in e&&typeof e.id=="string"}function Ee(e){return"method"in e&&typeof e.method=="string"&&"params"in e&&"env"in e&&typeof e.env=="object"&&e.env!==null&&"sdkVersion"in e.env}function we(e){return"success"in e&&typeof e.success=="boolean"&&"version"in e&&typeof e.version=="string"}function he(e="Default",t="#1c5dbf",...n){console.debug(`%c [COW][${e}]`,`font-weight: bold; color: ${t}`,...n)}function _e(...e){process.env.NODE_ENV!=="test"&&he("Widget","#47aba8",...e)}function D(e){return!!(e&&typeof e=="object")}const X="https://swap.cow.fi",x="_",ge="CoW Swap widget: invalid baseUrl.",J=!1;function Re(e){return e==="localhost"||e==="127.0.0.1"||e==="::1"||e.endsWith(".localhost")}function v(e,t){const n=`${ge} ${e}`;if(t)throw new Error(n);return console.error("[CoW Widget]",n),X}function Z(e,t=J){const n=typeof e=="string"?e.trim():"";if(!n)return X;let o;try{o=new URL(n)}catch{return v(`Not a valid URL: ${JSON.stringify(n)}`,t)}if(o.username||o.password)return v("Userinfo (username/password) in URL is not allowed.",t);const r=o.protocol==="https:",i=o.protocol==="http:"&&Re(o.hostname);if(!r&&!i)return v(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`,t);const f=o.pathname==="/"||o.pathname===""?"":o.pathname.replace(/\/+$/,"");return`${o.origin}${f}`}function me(e){const t=Z(e.baseUrl),n=q(e);return t+"/#"+n+"?"+ee(e)}function q(e){const{chainId:t=1,sell:n,buy:o,tradeType:r=L.SWAP}=e,i=[n?.asset||x,o?.asset||x].map(encodeURIComponent).join("/");return`/${t}/widget/${r}/${i}`}function ee(e){const t=new URLSearchParams;return Ae(ye(Te(Se(Oe(t,e),e),e),e),e)}function Oe(e,t){const{sell:n,buy:o}=t;return n?.amount&&e.append("sellAmount",n.amount),o?.amount&&e.append("buyAmount",o.amount),e}function Se(e,t){const n=t.theme;return n?(D(n)?(e.append("palette",encodeURIComponent(JSON.stringify(n))),e.append("theme",n.baseTheme)):(e.append("palette","null"),e.append("theme",n)),e):(e.append("palette","null"),e)}function Te(e,t){return t.targetChainId&&e.append("targetChainId",t.targetChainId.toString()),e}function ye(e,t){return t.locale&&e.append("lng",t.locale),e}function Ae(e,t){return Le(t.hooks)?e.append("hooksEnabled","true"):e.delete("hooksEnabled"),e}function Le(e){return!!e&&Object.values(e).some(Boolean)}const Ce=3e4,h="cow-widget-loading-error",B=`data-${h}`;function Ie(e,t,n,o,r){const i=t.src;let f=!1,E=null;function c(){r?.(),t.style.display="none",Pe();const l=document.createElement("div"),s=document.createElement("button"),d=document.createElement("p");s.innerText="Reload",s.addEventListener("click",()=>{e.removeChild(l),o(!0),t.src="about:blank",t.style.display="",setTimeout(()=>{t.src=i,n()},100)}),d.innerText="Couldn't load the page. Please, try again later",l.classList.add(h),l.appendChild(d),l.appendChild(s),e.appendChild(l)}return t.addEventListener("error",l=>{f||(console.error("Could not load iframe",l),c())}),E=window.setTimeout(()=>{f||c()},Ce),{onWidgetReady(){E&&clearTimeout(E);const l=document.getElementsByClassName(h)[0];l&&e.removeChild(l)},cancelWidgetLoading(){f=!0}}}let m=null;function Pe(){if(!(typeof document>"u")){if(ve()){m||(m=new CSSStyleSheet,m.replaceSync(k)),document.adoptedStyleSheets.includes(m)||(document.adoptedStyleSheets=[...document.adoptedStyleSheets,m]);return}if(!document.head.querySelector(`style[${B}]`)){const e=document.createElement("style");e.setAttribute(B,""),e.textContent=k,document.head.appendChild(e)}}}function ve(){return typeof document<"u"&&"adoptedStyleSheets"in Document.prototype&&typeof CSSStyleSheet=="function"&&typeof CSSStyleSheet.prototype.replaceSync=="function"}const k=`
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const v=require("@cowprotocol/iframe-transport"),se=require("@cowprotocol/events"),ae=new Set(["wc:","metamask:","imtokenv2:","trustassetapp:","okex:","ledgerlive:","rainbow:","argent:","exodus:","zerion:","okxwallet:","uniswap:","robinhood-wallet:","krakenwallet:","bitpay:","oneinch:","safe:","backpack:","tangem:","mathwallet:","keplrwallet:","coin98:","tpoutside:","bncus:","bnc:"]),de=new Set(["http:","https:"]);function le(e){try{const t=new URL(e).protocol;return de.has(t)||ae.has(t)}catch{return!1}}function ce(e,t){if(t){e.removeAttribute("style");for(const n of Object.keys(t)){const o=n,r=t[o];if(r==null||typeof r!="string"&&typeof r!="number")continue;const i=`${r}`;e.style[o]=i}}}const Y="cowswap-widget-iframe",ue="cowswap-widget",pe={appCode:""},Q="allow-scripts allow-same-origin allow-forms",z=`${Q} allow-popups allow-popups-to-escape-sandbox`,X="strict-origin-when-cross-origin",J="clipboard-read; clipboard-write";var I=(e=>(e.SWAP="swap",e.LIMIT="limit",e.ADVANCED="advanced",e.YIELD="yield",e))(I||{}),g=(e=>(e.ON_BEFORE_APPROVAL="ON_BEFORE_APPROVAL",e.ON_BEFORE_TRADE="ON_BEFORE_TRADE",e.ON_BEFORE_WRAP_UNWRAP="ON_BEFORE_WRAP_UNWRAP",e.ON_BEFORE_ORDER_CANCEL="ON_BEFORE_ORDER_CANCEL",e.ON_BEFORE_ORDERS_CANCEL="ON_BEFORE_ORDERS_CANCEL",e))(g||{}),w=(e=>(e.ACTIVATE="ACTIVATE",e.READY="READY",e.UPDATE_HEIGHT="UPDATE_HEIGHT",e.SET_FULL_HEIGHT="SET_FULL_HEIGHT",e.EMIT_COW_EVENT="EMIT_COW_EVENT",e.PROVIDER_RPC_REQUEST="PROVIDER_RPC_REQUEST",e.INTERCEPT_WINDOW_OPEN="INTERCEPT_WINDOW_OPEN",e.PROCESS_HOOK="PROCESS_HOOK",e))(w||{}),T=(e=>(e.UPDATE_PARAMS="UPDATE_PARAMS",e.UPDATE_APP_DATA="UPDATE_APP_DATA",e.PROVIDER_RPC_RESPONSE="PROVIDER_RPC_RESPONSE",e.PROVIDER_ON_EVENT="PROVIDER_ON_EVENT",e.HOOK_RESULT="HOOK_RESULT",e))(T||{});const fe=["primary","background","paper","text","danger","warning","alert","info","success"],p=new v.IframeTransport("cowSwapWidget");class Ee{constructor(t,n,o,r=[]){this.contentWindow=t,this.updateListeners(r),this.widgetListener=p.listenToMessageFromWindow(this.contentWindow,o,w.EMIT_COW_EVENT,i=>this.eventEmitter.emit(i.event,i.payload),n)}eventEmitter=new se.SimpleCowEventEmitter;listeners=[];widgetListener;stopListeningIframe(){p.stopListeningWindowListener(this.contentWindow,this.widgetListener)}updateListeners(t){for(const n of this.listeners)this.eventEmitter.off(n);this.listeners=t||[];for(const n of this.listeners)this.eventEmitter.on(n)}}class we{constructor(t,n,o,r){this.appWindow=t,this.iframeWindow=n,this.iframeOrigin=o,this.parentOrigin=r,this.forwardSdkMessage=i=>{he(i.data)&&(ge(i.data)?this.forwardRequest(i,i.data):_e(i.data)&&this.forwardResponse(i,i.data))},this.startListening()}forwardSdkMessage;startListening(){this.appWindow.addEventListener("message",this.forwardSdkMessage)}stopListening(){this.appWindow.removeEventListener("message",this.forwardSdkMessage)}forwardRequest(t,n){!this.parentOrigin||this.appWindow.parent===this.appWindow||t.source!==this.iframeWindow||t.origin!==this.iframeOrigin||this.appWindow.parent.postMessage(n,this.parentOrigin)}forwardResponse(t,n){this.appWindow.parent!==this.appWindow&&(t.source!==this.appWindow.parent||t.origin!==this.parentOrigin||this.iframeWindow.postMessage(n,this.iframeOrigin))}}function he(e){return typeof e=="object"&&e!==null&&"id"in e&&typeof e.id=="string"}function ge(e){return"method"in e&&typeof e.method=="string"&&"params"in e&&"env"in e&&typeof e.env=="object"&&e.env!==null&&"sdkVersion"in e.env}function _e(e){return"success"in e&&typeof e.success=="boolean"&&"version"in e&&typeof e.version=="string"}function Oe(...e){process.env.NODE_ENV!=="test"&&Re("Widget","#47aba8",...e)}function Re(e="Default",t="#1c5dbf",...n){console.debug(`%c [COW][${e}]`,`font-weight: bold; color: ${t}`,...n)}function D(e){return!!(e&&typeof e=="object")}const Z="https://swap.cow.fi",k="_",me="CoW Swap widget: invalid baseUrl.",q=!1;function ee(e){const{chainId:t=1,sell:n,buy:o,tradeType:r=I.SWAP}=e,i=[n?.asset||k,o?.asset||k].map(encodeURIComponent).join("/");return`/${t}/widget/${r}/${i}`}function te(e){const t=oe(e.baseUrl),n=ee(e);return t+"/#"+n+"?"+ne(e)}function ne(e){const t=new URLSearchParams;return Se(Te(ye(Ae(Ie(t,e),e),e),e),e)}function oe(e,t=q){const n=typeof e=="string"?e.trim():"";if(!n)return Z;let o;try{o=new URL(n)}catch{return W(`Not a valid URL: ${JSON.stringify(n)}`,t)}if(o.username||o.password)return W("Userinfo (username/password) in URL is not allowed.",t);const r=o.protocol==="https:",i=o.protocol==="http:"&&Ce(o.hostname);if(!r&&!i)return W(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`,t);const f=o.pathname==="/"||o.pathname===""?"":o.pathname.replace(/\/+$/,"");return`${o.origin}${f}`}function Se(e,t){return Le(t.hooks)?e.append("hooksEnabled","true"):e.delete("hooksEnabled"),e}function Te(e,t){return t.locale&&e.append("lng",t.locale),e}function ye(e,t){return t.targetChainId&&e.append("targetChainId",t.targetChainId.toString()),e}function Ae(e,t){const n=t.theme;return n?(D(n)?(e.append("palette",encodeURIComponent(JSON.stringify(n))),e.append("theme",n.baseTheme)):(e.append("palette","null"),e.append("theme",n)),e):(e.append("palette","null"),e)}function Ie(e,t){const{sell:n,buy:o}=t;return n?.amount&&e.append("sellAmount",n.amount),o?.amount&&e.append("buyAmount",o.amount),e}function W(e,t){const n=`${me} ${e}`;if(t)throw new Error(n);return console.error("[CoW Widget]",n),Z}function Le(e){return!!e&&Object.values(e).some(Boolean)}function Ce(e){return e==="localhost"||e==="127.0.0.1"||e==="::1"||e.endsWith(".localhost")}const Pe=3e4,h="cow-widget-loading-error",M=`data-${h}`;function We(e,t,n,o,r){const i=t.src;let f=!1,E=null;function d(){r?.(),t.style.display="none",be();const c=document.createElement("div"),s=document.createElement("button"),l=document.createElement("p");s.innerText="Reload",s.addEventListener("click",()=>{e.removeChild(c),o(!0),t.src="about:blank",t.style.display="",setTimeout(()=>{t.src=i,n()},100)}),l.innerText="Couldn't load the page. Please, try again later",c.classList.add(h),c.appendChild(l),c.appendChild(s),e.appendChild(c)}return t.addEventListener("error",c=>{f||(console.error("Could not load iframe",c),d())}),E=window.setTimeout(()=>{f||d()},Pe),{onWidgetReady(){E&&clearTimeout(E);const c=document.getElementsByClassName(h)[0];c&&e.removeChild(c)},cancelWidgetLoading(){f=!0}}}let R=null;function be(){if(!(typeof document>"u")){if(ve()){R||(R=new CSSStyleSheet,R.replaceSync(V)),document.adoptedStyleSheets.includes(R)||(document.adoptedStyleSheets=[...document.adoptedStyleSheets,R]);return}if(!document.head.querySelector(`style[${M}]`)){const e=document.createElement("style");e.setAttribute(M,""),e.textContent=V,document.head.appendChild(e)}}}function ve(){return typeof document<"u"&&"adoptedStyleSheets"in Document.prototype&&typeof CSSStyleSheet=="function"&&typeof CSSStyleSheet.prototype.replaceSync=="function"}const V=`
 .${h} {
   display: flex;
   flex-direction: column;
@@ -41,4 +41,4 @@
 .${h} button:not(:disabled):hover {
   background: #d32f2f;
   color: #fff5f5;
-}`,We={iframe:null,updateParams:()=>{},updateListeners:()=>{},updateProvider:()=>{},destroy:()=>{}};function De(e,t){const{params:n,provider:o,listeners:r,onReady:i,enableSafeSdkBridge:f=!0}=t;let E=o,c=M(n),l="";if(typeof window>"u")return We;const s=be(c),d=Ne(s);_e("Resolved trusted iframe origin",{iframeOrigin:d});const y=[];e.innerHTML="",e.appendChild(s),$(e,c);let a=null,C=()=>{},I=()=>{},b=()=>{},P=null,A=null,N=null,U=[],R=null;function H(){if(a=s.contentWindow,!a)throw console.error("Iframe does not contain a window",s),new Error("Iframe does not contain a window!");y.push(He(a,d,()=>{i?.(),te()})),y.push(Ue(a,d,c.appCode)),U=ke(e,s,d,ne=>{l=ne});let u=null;C=()=>{a&&(u&&window.removeEventListener("message",u),!c.disableWindowOpen&&(u=Fe(d,a),y.push(u)))},I=()=>{a&&(R&&window.removeEventListener("message",R),R=$e(a,d,c.hooks))},C(),I(),P=new ue(window,d,a,r),A=V(a,d,null,E),s.addEventListener("load",()=>{a&&G(a,d,c,E)}),N=f?new pe(window,a):null;const g=Ie(e,s,H,F,t.onLoadingError);b=g.cancelWidgetLoading;const te=g.onWidgetReady}function F(u=!1){A?.disconnect(),P?.stopListeningIframe(),U.forEach(g=>window.removeEventListener("message",g)),y.forEach(g=>window.removeEventListener("message",g)),R&&window.removeEventListener("message",R),N?.stopListening(),!u&&s&&s.parentNode===e&&e.removeChild(s),b?.()}return H(),{iframe:s,updateParams:u=>{a&&(c=M(u),$(e,c,l),G(a,d,c,E),C(),I())},updateListeners:u=>P?.updateListeners(u),updateProvider:u=>{a&&(E=u,A=V(a,d,A,u))},destroy:F}}function M(e){const t={...de,...e};if(typeof t.appCode!="string"||t.appCode.trim().length===0)throw new Error("Required param `appCode` is missing");return t}function V(e,t,n,o){n&&n.disconnect();const r=n||new j.IframeRpcProviderBridge(e,t);return o&&r.onConnect(o),r}function be(e){const t=document.createElement("iframe");return t.id=K,t.src=me(e),t.setAttribute("sandbox",Y),t.referrerPolicy=Q,t.allow=z,t.style.width="100%",t.style.height="100%",t.style.border="0",t.style.display="block",t}function $(e,t,n){ae(e,t.rootStyle),[{name:"params.width",value:t.width,replacementName:"rootStyle.width",replacementValue:t.rootStyle?.width,applyDeprecated:()=>t.width?e.style.width=t.width:void 0},{name:"params.height",value:t.height,replacementName:"rootStyle.height",replacementValue:t.rootStyle?.height,applyDeprecated:()=>t.height?e.style.height=t.height:void 0},{name:"params.maxHeight",value:t.maxHeight,replacementName:"rootStyle.maxHeight",replacementValue:t.rootStyle?.maxHeight,applyDeprecated:()=>t.maxHeight?e.style.maxHeight=`${t.maxHeight}px`:void 0},{name:"params.theme.boxShadow",value:D(t.theme)?t.theme.boxShadow:void 0,replacementName:"cardStyle.boxShadow",replacementValue:t.cardStyle?.boxShadow,applyDeprecated:()=>{}}].filter(r=>!!r.value).forEach(r=>{r.replacementValue?console.warn(`Both ${r.name} and ${r.replacementName} have been set. ${r.name} will be ignored.`):(console.warn(`${r.name} is deprecated. Use ${r.replacementName} instead.`),r.applyDeprecated())}),n&&e.style.setProperty(W,n)}function Ne(e){return new URL(e.src).origin}function G(e,t,n,o){const r=!!o,i=q(n),f=ee(n).toString(),{theme:E,hooks:c,rootStyle:l,...s}=n;p.postMessageToWindow(e,T.UPDATE_PARAMS,{urlParams:{pathname:i,search:f},appParams:s,hasProvider:r},t)}function Ue(e,t,n){return p.listenToMessageFromWindow(window,e,w.ACTIVATE,()=>{p.postMessageToWindow(e,T.UPDATE_APP_DATA,{metaData:n?{appCode:n}:void 0},t)},t)}function He(e,t,n){let o=!1;return p.listenToMessageFromWindow(window,e,w.READY,()=>{o||(o=!0,n())},t)}function Fe(e,t){return p.listenToMessageFromWindow(window,t,w.INTERCEPT_WINDOW_OPEN,({href:n,rel:o,target:r})=>{const i=xe(n.toString(),e);i&&se(i)&&window.open(i,r,o)},e)}function xe(e,t){const n=e.trim();if(!n)return null;try{return new URL(n,t).toString()}catch{return null}}const W="--dynamicHeight",Be=0;function ke(e,t,n,o){return t.contentWindow?[p.listenToMessageFromWindow(window,t.contentWindow,w.UPDATE_HEIGHT,r=>{const i=`${(r?.height??0)+Be}px`;e.style.setProperty(W,i),o(i)},n),p.listenToMessageFromWindow(window,t.contentWindow,w.SET_FULL_HEIGHT,()=>{e.style.setProperty(W,"100dvh"),o("100dvh")},n)]:[]}const Me={[_.ON_BEFORE_APPROVAL]:(e,t)=>t?.onBeforeApproval?t.onBeforeApproval(e):!0,[_.ON_BEFORE_TRADE]:(e,t)=>t?.onBeforeTrade?t.onBeforeTrade(e):!0,[_.ON_BEFORE_WRAP_UNWRAP]:(e,t)=>t?.onBeforeWrapOrUnwrap?t.onBeforeWrapOrUnwrap(e):!0,[_.ON_BEFORE_ORDER_CANCEL]:(e,t)=>t?.onBeforeOrderCancel?t.onBeforeOrderCancel(e):!0,[_.ON_BEFORE_ORDERS_CANCEL]:(e,t)=>t?.onBeforeOrdersCancel?t.onBeforeOrdersCancel(e):!0};function Ve(e,t){return Me[e.event](e.payload,t)}function $e(e,t,n){return p.listenToMessageFromWindow(window,e,w.PROCESS_HOOK,async o=>{let r=!1;try{r=await Ve(o,n)}catch{}p.postMessageToWindow(e,T.HOOK_RESULT,{id:o.id,result:r},t)},t)}const Ge=Object.values(L);function je(e,t,n){if(O(e)){const o=e[n];return S(o)?o[t]:o}if(S(e)){const o=e[t];return O(o)?o[n]:o}return e}function O(e){return typeof e!="object"?!1:Object.keys(e).every(t=>Ge.includes(t))}const Ke=/^\d+$/;function S(e){return typeof e!="object"?!1:Object.keys(e).every(t=>Ke.test(t))}function Ye(e){return O(e)?Object.values(e).flatMap(t=>S(t)?Object.values(t):[t]):S(e)?Object.values(e).flatMap(t=>O(t)?Object.values(t):[t]):[e]}exports.SHOULD_THROW_IF_INVALID_URL=J;exports.TradeType=L;exports.WIDGET_CONTAINER_ID=le;exports.WIDGET_IFRAME_ALLOW=z;exports.WIDGET_IFRAME_ID=K;exports.WIDGET_IFRAME_REFERRER_POLICY=Q;exports.WIDGET_IFRAME_SANDBOX=Y;exports.WIDGET_PALETTE_COLORS=ce;exports.WidgetHookEvents=_;exports.WidgetMethodsEmit=w;exports.WidgetMethodsListen=T;exports.createCowSwapWidget=De;exports.isCowSwapWidgetPalette=D;exports.isPerNetworkConfig=S;exports.isPerTradeTypeConfig=O;exports.resolveFlexibleConfig=je;exports.resolveFlexibleConfigValues=Ye;exports.sanitizeWidgetBaseUrl=Z;exports.widgetIframeTransport=p;
+}`,De={iframe:null,updateParams:()=>{},updateListeners:()=>{},updateProvider:()=>{},destroy:()=>{}};function Ne(e,t){const{params:n,provider:o,listeners:r,onReady:i,enableSafeSdkBridge:f=!0}=t;let E=o,d=G(n),c="";if(typeof window>"u")return De;const s=Ue(d),l=He(s);Oe("Resolved trusted iframe origin",{iframeOrigin:l});const y=[];e.innerHTML="",e.appendChild(s),$(e,d);let a=null,L=()=>{},C=()=>{},U=()=>{},P=null,A=null,x=null,H=[],O=null;function F(){if(a=s.contentWindow,!a)throw console.error("Iframe does not contain a window",s),new Error("Iframe does not contain a window!");y.push(Be(a,l,()=>{i?.(),re()})),y.push($e(a,l,d.appCode)),H=je(e,s,l,ie=>{c=ie});let u=null;L=()=>{a&&(u&&window.removeEventListener("message",u),!d.disableWindowOpen&&(u=Fe(l,a),y.push(u)))},C=()=>{a&&(O&&window.removeEventListener("message",O),O=Qe(a,l,d.hooks))},L(),C(),P=new Ee(window,l,a,r),A=K(a,l,null,E),s.addEventListener("load",()=>{a&&j(a,l,d,E)}),x=xe(f,window,a,l);const _=We(e,s,F,B,t.onLoadingError);U=_.cancelWidgetLoading;const re=_.onWidgetReady}function B(u=!1){A?.disconnect(),P?.stopListeningIframe(),H.forEach(_=>window.removeEventListener("message",_)),y.forEach(_=>window.removeEventListener("message",_)),O&&window.removeEventListener("message",O),x?.stopListening(),!u&&s&&s.parentNode===e&&e.removeChild(s),U?.()}return F(),{iframe:s,updateParams:u=>{a&&(d=G(u),$(e,d,c),Me(s,d)?ke(s,d):j(a,l,d,E),L(),C())},updateListeners:u=>P?.updateListeners(u),updateProvider:u=>{a&&(E=u,A=K(a,l,A,u))},destroy:B}}function $(e,t,n){ce(e,t.rootStyle),[{name:"params.width",value:t.width,replacementName:"rootStyle.width",replacementValue:t.rootStyle?.width,applyDeprecated:()=>t.width?e.style.width=t.width:void 0},{name:"params.height",value:t.height,replacementName:"rootStyle.height",replacementValue:t.rootStyle?.height,applyDeprecated:()=>t.height?e.style.height=t.height:void 0},{name:"params.maxHeight",value:t.maxHeight,replacementName:"rootStyle.maxHeight",replacementValue:t.rootStyle?.maxHeight,applyDeprecated:()=>t.maxHeight?e.style.maxHeight=`${t.maxHeight}px`:void 0},{name:"params.theme.boxShadow",value:D(t.theme)?t.theme.boxShadow:void 0,replacementName:"cardStyle.boxShadow",replacementValue:t.cardStyle?.boxShadow,applyDeprecated:()=>{}}].filter(r=>!!r.value).forEach(r=>{r.replacementValue?console.warn(`Both ${r.name} and ${r.replacementName} have been set. ${r.name} will be ignored.`):(console.warn(`${r.name} is deprecated. Use ${r.replacementName} instead.`),r.applyDeprecated())}),n&&e.style.setProperty(b,n)}function Ue(e){const t=document.createElement("iframe");return t.id=Y,t.src=te(e),t.setAttribute("sandbox",N(e)),t.referrerPolicy=X,t.allow=J,t.style.width="100%",t.style.height="100%",t.style.border="0",t.style.display="block",t}function xe(e,t,n,o){return e?new we(t,n,o,v.getParentOrigin()||null):null}function He(e){return new URL(e.src).origin}function N(e){return e.disableWindowOpen?Q:z}function Fe(e,t){return p.listenToMessageFromWindow(window,t,w.INTERCEPT_WINDOW_OPEN,({href:n,rel:o,target:r})=>{const i=Ve(n.toString(),e);i&&le(i)&&window.open(i,r,o)},e)}function Be(e,t,n){let o=!1;return p.listenToMessageFromWindow(window,e,w.READY,()=>{o||(o=!0,n())},t)}function ke(e,t){const n=N(t),o=te(t);e.addEventListener("load",()=>{e.src=o},{once:!0}),e.setAttribute("sandbox",n),e.src="about:blank"}function Me(e,t){const n=N(t);return e.getAttribute("sandbox")!==n}function G(e){const t={...pe,...e};if(typeof t.appCode!="string"||t.appCode.trim().length===0)throw new Error("Required param `appCode` is missing");if(t.disableWindowOpen&&t.standaloneMode!==!1)throw new Error("`disableWindowOpen: true` requires `standaloneMode: false`");return t}function Ve(e,t){const n=e.trim();if(!n)return null;try{return new URL(n,t).toString()}catch{return null}}function $e(e,t,n){return p.listenToMessageFromWindow(window,e,w.ACTIVATE,()=>{p.postMessageToWindow(e,T.UPDATE_APP_DATA,{metaData:n?{appCode:n}:void 0},t)},t)}function j(e,t,n,o){const r=!!o,i=ee(n),f=ne(n).toString(),{theme:E,hooks:d,rootStyle:c,...s}=n;p.postMessageToWindow(e,T.UPDATE_PARAMS,{urlParams:{pathname:i,search:f},appParams:s,hasProvider:r},t)}function K(e,t,n,o){n&&n.disconnect();const r=n||new v.IframeRpcProviderBridge(e,t);return o&&r.onConnect(o),r}const b="--dynamicHeight",Ge=0;function je(e,t,n,o){return t.contentWindow?[p.listenToMessageFromWindow(window,t.contentWindow,w.UPDATE_HEIGHT,r=>{const i=`${(r?.height??0)+Ge}px`;e.style.setProperty(b,i),o(i)},n),p.listenToMessageFromWindow(window,t.contentWindow,w.SET_FULL_HEIGHT,()=>{e.style.setProperty(b,"100dvh"),o("100dvh")},n)]:[]}const Ke={[g.ON_BEFORE_APPROVAL]:(e,t)=>t?.onBeforeApproval?t.onBeforeApproval(e):!0,[g.ON_BEFORE_TRADE]:(e,t)=>t?.onBeforeTrade?t.onBeforeTrade(e):!0,[g.ON_BEFORE_WRAP_UNWRAP]:(e,t)=>t?.onBeforeWrapOrUnwrap?t.onBeforeWrapOrUnwrap(e):!0,[g.ON_BEFORE_ORDER_CANCEL]:(e,t)=>t?.onBeforeOrderCancel?t.onBeforeOrderCancel(e):!0,[g.ON_BEFORE_ORDERS_CANCEL]:(e,t)=>t?.onBeforeOrdersCancel?t.onBeforeOrdersCancel(e):!0};function Ye(e,t){return Ke[e.event](e.payload,t)}function Qe(e,t,n){return p.listenToMessageFromWindow(window,e,w.PROCESS_HOOK,async o=>{let r=!1;try{r=await Ye(o,n)}catch{}p.postMessageToWindow(e,T.HOOK_RESULT,{id:o.id,result:r},t)},t)}const ze=Object.values(I);function m(e){return typeof e!="object"?!1:Object.keys(e).every(t=>ze.includes(t))}function Xe(e,t,n){if(m(e)){const o=e[n];return S(o)?o[t]:o}if(S(e)){const o=e[t];return m(o)?o[n]:o}return e}const Je=/^\d+$/;function S(e){return typeof e!="object"?!1:Object.keys(e).every(t=>Je.test(t))}function Ze(e){return m(e)?Object.values(e).flatMap(t=>S(t)?Object.values(t):[t]):S(e)?Object.values(e).flatMap(t=>m(t)?Object.values(t):[t]):[e]}exports.SHOULD_THROW_IF_INVALID_URL=q;exports.TradeType=I;exports.WIDGET_CONTAINER_ID=ue;exports.WIDGET_IFRAME_ALLOW=J;exports.WIDGET_IFRAME_ID=Y;exports.WIDGET_IFRAME_REFERRER_POLICY=X;exports.WIDGET_IFRAME_SANDBOX=z;exports.WIDGET_PALETTE_COLORS=fe;exports.WidgetHookEvents=g;exports.WidgetMethodsEmit=w;exports.WidgetMethodsListen=T;exports.createCowSwapWidget=Ne;exports.isCowSwapWidgetPalette=D;exports.isPerNetworkConfig=S;exports.isPerTradeTypeConfig=m;exports.resolveFlexibleConfig=Xe;exports.resolveFlexibleConfigValues=Ze;exports.sanitizeWidgetBaseUrl=oe;exports.widgetIframeTransport=p;

package/index.js

@@ -1,6 +1,6 @@
-import { IframeTransport as X, IframeRpcProviderBridge as J } from "@cowprotocol/iframe-transport";
-import { SimpleCowEventEmitter as Z } from "@cowprotocol/events";
-const q = /* @__PURE__ */ new Set([
+import { IframeTransport as q, IframeRpcProviderBridge as ee, getParentOrigin as te } from "@cowprotocol/iframe-transport";
+import { SimpleCowEventEmitter as ne } from "@cowprotocol/events";
+const oe = /* @__PURE__ */ new Set([
   "wc:",
   // default Wallet-connect protocol
   "metamask:",
@@ -27,16 +27,16 @@ const q = /* @__PURE__ */ new Set([
   "tpoutside:",
   "bncus:",
   "bnc:"
-]), ee = /* @__PURE__ */ new Set(["http:", "https:"]);
-function te(e) {
+]), re = /* @__PURE__ */ new Set(["http:", "https:"]);
+function ie(e) {
   try {
     const t = new URL(e).protocol;
-    return ee.has(t) || q.has(t);
+    return re.has(t) || oe.has(t);
   } catch {
     return !1;
   }
 }
-function ne(e, t) {
+function se(e, t) {
   if (t) {
     e.removeAttribute("style");
     for (const n of Object.keys(t)) {
@@ -48,16 +48,16 @@ function ne(e, t) {
     }
   }
 }
-const oe = "cowswap-widget-iframe", Ke = "cowswap-widget", re = {
+const ae = "cowswap-widget-iframe", Ze = "cowswap-widget", de = {
   appCode: ""
-}, ie = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox", se = "strict-origin-when-cross-origin", ae = "clipboard-read; clipboard-write";
-var h = /* @__PURE__ */ ((e) => (e.ACTIVATE = "ACTIVATE", e.READY = "READY", e.UPDATE_HEIGHT = "UPDATE_HEIGHT", e.SET_FULL_HEIGHT = "SET_FULL_HEIGHT", e.EMIT_COW_EVENT = "EMIT_COW_EVENT", e.PROVIDER_RPC_REQUEST = "PROVIDER_RPC_REQUEST", e.INTERCEPT_WINDOW_OPEN = "INTERCEPT_WINDOW_OPEN", e.PROCESS_HOOK = "PROCESS_HOOK", e))(h || {}), A = /* @__PURE__ */ ((e) => (e.UPDATE_PARAMS = "UPDATE_PARAMS", e.UPDATE_APP_DATA = "UPDATE_APP_DATA", e.PROVIDER_RPC_RESPONSE = "PROVIDER_RPC_RESPONSE", e.PROVIDER_ON_EVENT = "PROVIDER_ON_EVENT", e.HOOK_RESULT = "HOOK_RESULT", e))(A || {}), g = /* @__PURE__ */ ((e) => (e.ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL", e.ON_BEFORE_TRADE = "ON_BEFORE_TRADE", e.ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP", e.ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL", e.ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL", e))(g || {}), b = /* @__PURE__ */ ((e) => (e.SWAP = "swap", e.LIMIT = "limit", e.ADVANCED = "advanced", e.YIELD = "yield", e))(b || {});
-const Ye = ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"], p = new X("cowSwapWidget");
-class le {
+}, j = "allow-scripts allow-same-origin allow-forms", le = `${j} allow-popups allow-popups-to-escape-sandbox`, ce = "strict-origin-when-cross-origin", ue = "clipboard-read; clipboard-write";
+var W = /* @__PURE__ */ ((e) => (e.SWAP = "swap", e.LIMIT = "limit", e.ADVANCED = "advanced", e.YIELD = "yield", e))(W || {}), m = /* @__PURE__ */ ((e) => (e.ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL", e.ON_BEFORE_TRADE = "ON_BEFORE_TRADE", e.ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP", e.ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL", e.ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL", e))(m || {}), h = /* @__PURE__ */ ((e) => (e.ACTIVATE = "ACTIVATE", e.READY = "READY", e.UPDATE_HEIGHT = "UPDATE_HEIGHT", e.SET_FULL_HEIGHT = "SET_FULL_HEIGHT", e.EMIT_COW_EVENT = "EMIT_COW_EVENT", e.PROVIDER_RPC_REQUEST = "PROVIDER_RPC_REQUEST", e.INTERCEPT_WINDOW_OPEN = "INTERCEPT_WINDOW_OPEN", e.PROCESS_HOOK = "PROCESS_HOOK", e))(h || {}), A = /* @__PURE__ */ ((e) => (e.UPDATE_PARAMS = "UPDATE_PARAMS", e.UPDATE_APP_DATA = "UPDATE_APP_DATA", e.PROVIDER_RPC_RESPONSE = "PROVIDER_RPC_RESPONSE", e.PROVIDER_ON_EVENT = "PROVIDER_ON_EVENT", e.HOOK_RESULT = "HOOK_RESULT", e))(A || {});
+const qe = ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"], p = new q("cowSwapWidget");
+class pe {
   constructor(t, n, o, r = []) {
     this.contentWindow = t, this.updateListeners(r), this.widgetListener = p.listenToMessageFromWindow(this.contentWindow, o, h.EMIT_COW_EVENT, (i) => this.eventEmitter.emit(i.event, i.payload), n);
   }
-  eventEmitter = new Z();
+  eventEmitter = new ne();
   listeners = [];
   widgetListener;
   stopListeningIframe() {
@@ -71,10 +71,10 @@ class le {
       this.eventEmitter.on(n);
   }
 }
-class de {
-  constructor(t, n) {
-    this.appWindow = t, this.iframeWidow = n, this.forwardSdkMessage = (o) => {
-      ce(o.data) && (typeof window < "u" && o.origin === window.location.origin || (ue(o.data) ? this.appWindow.parent.postMessage(o.data, "*") : pe(o.data) && this.iframeWidow.postMessage(o.data, "*")));
+class fe {
+  constructor(t, n, o, r) {
+    this.appWindow = t, this.iframeWindow = n, this.iframeOrigin = o, this.parentOrigin = r, this.forwardSdkMessage = (i) => {
+      Ee(i.data) && (we(i.data) ? this.forwardRequest(i, i.data) : he(i.data) && this.forwardResponse(i, i.data));
     }, this.startListening();
   }
   forwardSdkMessage;
@@ -84,138 +84,144 @@ class de {
   stopListening() {
     this.appWindow.removeEventListener("message", this.forwardSdkMessage);
   }
+  forwardRequest(t, n) {
+    !this.parentOrigin || this.appWindow.parent === this.appWindow || t.source !== this.iframeWindow || t.origin !== this.iframeOrigin || this.appWindow.parent.postMessage(n, this.parentOrigin);
+  }
+  forwardResponse(t, n) {
+    this.appWindow.parent !== this.appWindow && (t.source !== this.appWindow.parent || t.origin !== this.parentOrigin || this.iframeWindow.postMessage(n, this.iframeOrigin));
+  }
 }
-function ce(e) {
+function Ee(e) {
   return typeof e == "object" && e !== null && "id" in e && typeof e.id == "string";
 }
-function ue(e) {
+function we(e) {
   return "method" in e && typeof e.method == "string" && "params" in e && "env" in e && typeof e.env == "object" && e.env !== null && "sdkVersion" in e.env;
 }
-function pe(e) {
+function he(e) {
   return "success" in e && typeof e.success == "boolean" && "version" in e && typeof e.version == "string";
 }
-function fe(e = "Default", t = "#1c5dbf", ...n) {
-  console.debug(`%c [COW][${e}]`, `font-weight: bold; color: ${t}`, ...n);
+function ge(...e) {
+  process.env.NODE_ENV !== "test" && me("Widget", "#47aba8", ...e);
 }
-function Ee(...e) {
-  process.env.NODE_ENV !== "test" && fe("Widget", "#47aba8", ...e);
+function me(e = "Default", t = "#1c5dbf", ...n) {
+  console.debug(`%c [COW][${e}]`, `font-weight: bold; color: ${t}`, ...n);
 }
-function G(e) {
+function K(e) {
   return !!(e && typeof e == "object");
 }
-const j = "https://swap.cow.fi", x = "_", we = "CoW Swap widget: invalid baseUrl.", he = !1;
-function me(e) {
-  return e === "localhost" || e === "127.0.0.1" || e === "::1" || e.endsWith(".localhost");
+const Y = "https://swap.cow.fi", B = "_", _e = "CoW Swap widget: invalid baseUrl.", Oe = !1;
+function Q(e) {
+  const {
+    chainId: t = 1,
+    sell: n,
+    buy: o,
+    tradeType: r = W.SWAP
+  } = e, i = [n?.asset || B, o?.asset || B].map(encodeURIComponent).join("/");
+  return `/${t}/widget/${r}/${i}`;
 }
-function v(e, t) {
-  const n = `${we} ${e}`;
-  if (t)
-    throw new Error(n);
-  return console.error("[CoW Widget]", n), j;
+function z(e) {
+  const t = Re(e.baseUrl), n = Q(e);
+  return t + "/#" + n + "?" + X(e);
 }
-function ge(e, t = he) {
+function X(e) {
+  const t = new URLSearchParams();
+  return Se(Te(ye(Ae(Le(t, e), e), e), e), e);
+}
+function Re(e, t = Oe) {
   const n = typeof e == "string" ? e.trim() : "";
   if (!n)
-    return j;
+    return Y;
   let o;
   try {
     o = new URL(n);
   } catch {
-    return v(`Not a valid URL: ${JSON.stringify(n)}`, t);
+    return b(`Not a valid URL: ${JSON.stringify(n)}`, t);
   }
   if (o.username || o.password)
-    return v("Userinfo (username/password) in URL is not allowed.", t);
-  const r = o.protocol === "https:", i = o.protocol === "http:" && me(o.hostname);
+    return b("Userinfo (username/password) in URL is not allowed.", t);
+  const r = o.protocol === "https:", i = o.protocol === "http:" && Ce(o.hostname);
   if (!r && !i)
-    return v(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`, t);
+    return b(`Use https, or http only on localhost / 127.0.0.1 / ::1 / *.localhost (got ${o.protocol}//${o.hostname}).`, t);
   const f = o.pathname === "/" || o.pathname === "" ? "" : o.pathname.replace(/\/+$/, "");
   return `${o.origin}${f}`;
 }
-function _e(e) {
-  const t = ge(e.baseUrl), n = K(e);
-  return t + "/#" + n + "?" + Y(e);
+function Se(e, t) {
+  return Pe(t.hooks) ? e.append("hooksEnabled", "true") : e.delete("hooksEnabled"), e;
 }
-function K(e) {
-  const {
-    chainId: t = 1,
-    sell: n,
-    buy: o,
-    tradeType: r = b.SWAP
-  } = e, i = [n?.asset || x, o?.asset || x].map(encodeURIComponent).join("/");
-  return `/${t}/widget/${r}/${i}`;
+function Te(e, t) {
+  return t.locale && e.append("lng", t.locale), e;
 }
-function Y(e) {
-  const t = new URLSearchParams();
-  return Te(ye(Se(Oe(Re(t, e), e), e), e), e);
+function ye(e, t) {
+  return t.targetChainId && e.append("targetChainId", t.targetChainId.toString()), e;
+}
+function Ae(e, t) {
+  const n = t.theme;
+  return n ? (K(n) ? (e.append("palette", encodeURIComponent(JSON.stringify(n))), e.append("theme", n.baseTheme)) : (e.append("palette", "null"), e.append("theme", n)), e) : (e.append("palette", "null"), e);
 }
-function Re(e, t) {
+function Le(e, t) {
   const {
     sell: n,
     buy: o
   } = t;
   return n?.amount && e.append("sellAmount", n.amount), o?.amount && e.append("buyAmount", o.amount), e;
 }
-function Oe(e, t) {
-  const n = t.theme;
-  return n ? (G(n) ? (e.append("palette", encodeURIComponent(JSON.stringify(n))), e.append("theme", n.baseTheme)) : (e.append("palette", "null"), e.append("theme", n)), e) : (e.append("palette", "null"), e);
-}
-function Se(e, t) {
-  return t.targetChainId && e.append("targetChainId", t.targetChainId.toString()), e;
-}
-function ye(e, t) {
-  return t.locale && e.append("lng", t.locale), e;
-}
-function Te(e, t) {
-  return Ae(t.hooks) ? e.append("hooksEnabled", "true") : e.delete("hooksEnabled"), e;
+function b(e, t) {
+  const n = `${_e} ${e}`;
+  if (t)
+    throw new Error(n);
+  return console.error("[CoW Widget]", n), Y;
 }
-function Ae(e) {
+function Pe(e) {
   return !!e && Object.values(e).some(Boolean);
 }
-const Le = 3e4, w = "cow-widget-loading-error", B = `data-${w}`;
-function Ce(e, t, n, o, r) {
+function Ce(e) {
+  return e === "localhost" || e === "127.0.0.1" || e === "::1" || e.endsWith(".localhost");
+}
+const be = 3e4, w = "cow-widget-loading-error", k = `data-${w}`;
+function Ie(e, t, n, o, r) {
   const i = t.src;
   let f = !1, E = null;
-  function c() {
-    r?.(), t.style.display = "none", Pe();
-    const l = document.createElement("div"), s = document.createElement("button"), d = document.createElement("p");
+  function d() {
+    r?.(), t.style.display = "none", We();
+    const c = document.createElement("div"), s = document.createElement("button"), l = document.createElement("p");
     s.innerText = "Reload", s.addEventListener("click", () => {
-      e.removeChild(l), o(!0), t.src = "about:blank", t.style.display = "", setTimeout(() => {
+      e.removeChild(c), o(!0), t.src = "about:blank", t.style.display = "", setTimeout(() => {
         t.src = i, n();
       }, 100);
-    }), d.innerText = "Couldn't load the page. Please, try again later", l.classList.add(w), l.appendChild(d), l.appendChild(s), e.appendChild(l);
+    }), l.innerText = "Couldn't load the page. Please, try again later", c.classList.add(w), c.appendChild(l), c.appendChild(s), e.appendChild(c);
   }
-  return t.addEventListener("error", (l) => {
-    f || (console.error("Could not load iframe", l), c());
+  return t.addEventListener("error", (c) => {
+    f || (console.error("Could not load iframe", c), d());
   }), E = window.setTimeout(() => {
-    f || c();
-  }, Le), {
+    f || d();
+  }, be), {
     onWidgetReady() {
       E && clearTimeout(E);
-      const l = document.getElementsByClassName(w)[0];
-      l && e.removeChild(l);
+      const c = document.getElementsByClassName(w)[0];
+      c && e.removeChild(c);
     },
     cancelWidgetLoading() {
       f = !0;
     }
   };
 }
-let R = null;
-function Pe() {
+let O = null;
+function We() {
   if (!(typeof document > "u")) {
     if (ve()) {
-      R || (R = new CSSStyleSheet(), R.replaceSync(k)), document.adoptedStyleSheets.includes(R) || (document.adoptedStyleSheets = [...document.adoptedStyleSheets, R]);
+      O || (O = new CSSStyleSheet(), O.replaceSync(F)), document.adoptedStyleSheets.includes(O) || (document.adoptedStyleSheets = [...document.adoptedStyleSheets, O]);
       return;
     }
-    if (!document.head.querySelector(`style[${B}]`)) {
+    if (!document.head.querySelector(`style[${k}]`)) {
       const e = document.createElement("style");
-      e.setAttribute(B, ""), e.textContent = k, document.head.appendChild(e);
+      e.setAttribute(k, ""), e.textContent = F, document.head.appendChild(e);
     }
   }
 }
 function ve() {
   return typeof document < "u" && "adoptedStyleSheets" in Document.prototype && typeof CSSStyleSheet == "function" && typeof CSSStyleSheet.prototype.replaceSync == "function";
 }
-const k = `
+const F = `
 .${w} {
   display: flex;
   flex-direction: column;
@@ -258,7 +264,7 @@ const k = `
 .${w} button:not(:disabled):hover {
   background: #d32f2f;
   color: #fff5f5;
-}`, Ie = {
+}`, De = {
   iframe: null,
   updateParams: () => {
   },
@@ -269,7 +275,7 @@ const k = `
   destroy: () => {
   }
 };
-function Qe(e, t) {
+function et(e, t) {
   const {
     params: n,
     provider: o,
@@ -277,73 +283,55 @@ function Qe(e, t) {
     onReady: i,
     enableSafeSdkBridge: f = !0
   } = t;
-  let E = o, c = F(n), l = "";
-  if (typeof window > "u") return Ie;
-  const s = be(c), d = De(s);
-  Ee("Resolved trusted iframe origin", {
-    iframeOrigin: d
+  let E = o, d = V(n), c = "";
+  if (typeof window > "u") return De;
+  const s = Ne(d), l = xe(s);
+  ge("Resolved trusted iframe origin", {
+    iframeOrigin: l
   });
-  const O = [];
-  e.innerHTML = "", e.appendChild(s), M(e, c);
+  const R = [];
+  e.innerHTML = "", e.appendChild(s), M(e, d);
   let a = null, L = () => {
-  }, C = () => {
+  }, P = () => {
   }, D = () => {
-  }, P = null, S = null, N = null, W = [], _ = null;
-  function U() {
+  }, C = null, S = null, N = null, U = [], _ = null;
+  function x() {
     if (a = s.contentWindow, !a)
       throw console.error("Iframe does not contain a window", s), new Error("Iframe does not contain a window!");
-    O.push(We(a, d, () => {
-      i?.(), Q();
-    })), O.push(Ne(a, d, c.appCode)), W = Be(e, s, d, (z) => {
-      l = z;
+    R.push(Be(a, l, () => {
+      i?.(), J();
+    })), R.push(Ve(a, l, d.appCode)), U = Ge(e, s, l, (Z) => {
+      c = Z;
     });
     let u = null;
     L = () => {
-      a && (u && window.removeEventListener("message", u), !c.disableWindowOpen && (u = Ue(d, a), O.push(u)));
-    }, C = () => {
-      a && (_ && window.removeEventListener("message", _), _ = Ve(a, d, c.hooks));
-    }, L(), C(), P = new le(window, d, a, r), S = V(a, d, null, E), s.addEventListener("load", () => {
-      a && $(a, d, c, E);
-    }), N = f ? new de(window, a) : null;
-    const m = Ce(e, s, U, H, t.onLoadingError);
-    D = m.cancelWidgetLoading;
-    const Q = m.onWidgetReady;
+      a && (u && window.removeEventListener("message", u), !d.disableWindowOpen && (u = He(l, a), R.push(u)));
+    }, P = () => {
+      a && (_ && window.removeEventListener("message", _), _ = Ye(a, l, d.hooks));
+    }, L(), P(), C = new pe(window, l, a, r), S = G(a, l, null, E), s.addEventListener("load", () => {
+      a && $(a, l, d, E);
+    }), N = Ue(f, window, a, l);
+    const g = Ie(e, s, x, H, t.onLoadingError);
+    D = g.cancelWidgetLoading;
+    const J = g.onWidgetReady;
   }
   function H(u = !1) {
-    S?.disconnect(), P?.stopListeningIframe(), W.forEach((m) => window.removeEventListener("message", m)), O.forEach((m) => window.removeEventListener("message", m)), _ && window.removeEventListener("message", _), N?.stopListening(), !u && s && s.parentNode === e && e.removeChild(s), D?.();
+    S?.disconnect(), C?.stopListeningIframe(), U.forEach((g) => window.removeEventListener("message", g)), R.forEach((g) => window.removeEventListener("message", g)), _ && window.removeEventListener("message", _), N?.stopListening(), !u && s && s.parentNode === e && e.removeChild(s), D?.();
   }
-  return U(), {
+  return x(), {
     iframe: s,
     updateParams: (u) => {
-      a && (c = F(u), M(e, c, l), $(a, d, c, E), L(), C());
+      a && (d = V(u), M(e, d, c), Fe(s, d) ? ke(s, d) : $(a, l, d, E), L(), P());
     },
-    updateListeners: (u) => P?.updateListeners(u),
+    updateListeners: (u) => C?.updateListeners(u),
     updateProvider: (u) => {
-      a && (E = u, S = V(a, d, S, u));
+      a && (E = u, S = G(a, l, S, u));
     },
     destroy: H
   };
 }
-function F(e) {
-  const t = {
-    ...re,
-    ...e
-  };
-  if (typeof t.appCode != "string" || t.appCode.trim().length === 0)
-    throw new Error("Required param `appCode` is missing");
-  return t;
-}
-function V(e, t, n, o) {
-  n && n.disconnect();
-  const r = n || new J(e, t);
-  return o && r.onConnect(o), r;
-}
-function be(e) {
-  const t = document.createElement("iframe");
-  return t.id = oe, t.src = _e(e), t.setAttribute("sandbox", ie), t.referrerPolicy = se, t.allow = ae, t.style.width = "100%", t.style.height = "100%", t.style.border = "0", t.style.display = "block", t;
-}
 function M(e, t, n) {
-  ne(e, t.rootStyle), [{
+  se(e, t.rootStyle), [{
     name: "params.width",
     value: t.width,
     replacementName: "rootStyle.width",
@@ -363,7 +351,7 @@ function M(e, t, n) {
     applyDeprecated: () => t.maxHeight ? e.style.maxHeight = `${t.maxHeight}px` : void 0
   }, {
     name: "params.theme.boxShadow",
-    value: G(t.theme) ? t.theme.boxShadow : void 0,
+    value: K(t.theme) ? t.theme.boxShadow : void 0,
     replacementName: "cardStyle.boxShadow",
     replacementValue: t.cardStyle?.boxShadow,
     applyDeprecated: () => {
@@ -372,51 +360,59 @@ function M(e, t, n) {
     r.replacementValue ? console.warn(`Both ${r.name} and ${r.replacementName} have been set. ${r.name} will be ignored.`) : (console.warn(`${r.name} is deprecated. Use ${r.replacementName} instead.`), r.applyDeprecated());
   }), n && e.style.setProperty(I, n);
 }
-function De(e) {
-  return new URL(e.src).origin;
+function Ne(e) {
+  const t = document.createElement("iframe");
+  return t.id = ae, t.src = z(e), t.setAttribute("sandbox", v(e)), t.referrerPolicy = ce, t.allow = ue, t.style.width = "100%", t.style.height = "100%", t.style.border = "0", t.style.display = "block", t;
 }
-function $(e, t, n, o) {
-  const r = !!o, i = K(n), f = Y(n).toString(), {
-    theme: E,
-    hooks: c,
-    rootStyle: l,
-    ...s
-  } = n;
-  p.postMessageToWindow(e, A.UPDATE_PARAMS, {
-    urlParams: {
-      pathname: i,
-      search: f
-    },
-    appParams: s,
-    hasProvider: r
-  }, t);
+function Ue(e, t, n, o) {
+  return e ? new fe(t, n, o, te() || null) : null;
 }
-function Ne(e, t, n) {
-  return p.listenToMessageFromWindow(window, e, h.ACTIVATE, () => {
-    p.postMessageToWindow(e, A.UPDATE_APP_DATA, {
-      metaData: n ? {
-        appCode: n
-      } : void 0
-    }, t);
-  }, t);
+function xe(e) {
+  return new URL(e.src).origin;
 }
-function We(e, t, n) {
-  let o = !1;
-  return p.listenToMessageFromWindow(window, e, h.READY, () => {
-    o || (o = !0, n());
-  }, t);
+function v(e) {
+  return e.disableWindowOpen ? j : le;
 }
-function Ue(e, t) {
+function He(e, t) {
   return p.listenToMessageFromWindow(window, t, h.INTERCEPT_WINDOW_OPEN, ({
     href: n,
     rel: o,
     target: r
   }) => {
-    const i = He(n.toString(), e);
-    i && te(i) && window.open(i, r, o);
+    const i = Me(n.toString(), e);
+    i && ie(i) && window.open(i, r, o);
   }, e);
 }
-function He(e, t) {
+function Be(e, t, n) {
+  let o = !1;
+  return p.listenToMessageFromWindow(window, e, h.READY, () => {
+    o || (o = !0, n());
+  }, t);
+}
+function ke(e, t) {
+  const n = v(t), o = z(t);
+  e.addEventListener("load", () => {
+    e.src = o;
+  }, {
+    once: !0
+  }), e.setAttribute("sandbox", n), e.src = "about:blank";
+}
+function Fe(e, t) {
+  const n = v(t);
+  return e.getAttribute("sandbox") !== n;
+}
+function V(e) {
+  const t = {
+    ...de,
+    ...e
+  };
+  if (typeof t.appCode != "string" || t.appCode.trim().length === 0)
+    throw new Error("Required param `appCode` is missing");
+  if (t.disableWindowOpen && t.standaloneMode !== !1)
+    throw new Error("`disableWindowOpen: true` requires `standaloneMode: false`");
+  return t;
+}
+function Me(e, t) {
   const n = e.trim();
   if (!n)
     return null;
@@ -426,30 +422,60 @@ function He(e, t) {
     return null;
   }
 }
-const I = "--dynamicHeight", xe = 0;
-function Be(e, t, n, o) {
+function Ve(e, t, n) {
+  return p.listenToMessageFromWindow(window, e, h.ACTIVATE, () => {
+    p.postMessageToWindow(e, A.UPDATE_APP_DATA, {
+      metaData: n ? {
+        appCode: n
+      } : void 0
+    }, t);
+  }, t);
+}
+function $(e, t, n, o) {
+  const r = !!o, i = Q(n), f = X(n).toString(), {
+    theme: E,
+    hooks: d,
+    rootStyle: c,
+    ...s
+  } = n;
+  p.postMessageToWindow(e, A.UPDATE_PARAMS, {
+    urlParams: {
+      pathname: i,
+      search: f
+    },
+    appParams: s,
+    hasProvider: r
+  }, t);
+}
+function G(e, t, n, o) {
+  n && n.disconnect();
+  const r = n || new ee(e, t);
+  return o && r.onConnect(o), r;
+}
+const I = "--dynamicHeight", $e = 0;
+function Ge(e, t, n, o) {
   return t.contentWindow ? [p.listenToMessageFromWindow(window, t.contentWindow, h.UPDATE_HEIGHT, (r) => {
-    const i = `${(r?.height ?? 0) + xe}px`;
+    const i = `${(r?.height ?? 0) + $e}px`;
     e.style.setProperty(I, i), o(i);
   }, n), p.listenToMessageFromWindow(window, t.contentWindow, h.SET_FULL_HEIGHT, () => {
     e.style.setProperty(I, "100dvh"), o("100dvh");
   }, n)] : [];
 }
-const ke = {
-  [g.ON_BEFORE_APPROVAL]: (e, t) => t?.onBeforeApproval ? t.onBeforeApproval(e) : !0,
-  [g.ON_BEFORE_TRADE]: (e, t) => t?.onBeforeTrade ? t.onBeforeTrade(e) : !0,
-  [g.ON_BEFORE_WRAP_UNWRAP]: (e, t) => t?.onBeforeWrapOrUnwrap ? t.onBeforeWrapOrUnwrap(e) : !0,
-  [g.ON_BEFORE_ORDER_CANCEL]: (e, t) => t?.onBeforeOrderCancel ? t.onBeforeOrderCancel(e) : !0,
-  [g.ON_BEFORE_ORDERS_CANCEL]: (e, t) => t?.onBeforeOrdersCancel ? t.onBeforeOrdersCancel(e) : !0
+const je = {
+  [m.ON_BEFORE_APPROVAL]: (e, t) => t?.onBeforeApproval ? t.onBeforeApproval(e) : !0,
+  [m.ON_BEFORE_TRADE]: (e, t) => t?.onBeforeTrade ? t.onBeforeTrade(e) : !0,
+  [m.ON_BEFORE_WRAP_UNWRAP]: (e, t) => t?.onBeforeWrapOrUnwrap ? t.onBeforeWrapOrUnwrap(e) : !0,
+  [m.ON_BEFORE_ORDER_CANCEL]: (e, t) => t?.onBeforeOrderCancel ? t.onBeforeOrderCancel(e) : !0,
+  [m.ON_BEFORE_ORDERS_CANCEL]: (e, t) => t?.onBeforeOrdersCancel ? t.onBeforeOrdersCancel(e) : !0
 };
-function Fe(e, t) {
-  return ke[e.event](e.payload, t);
+function Ke(e, t) {
+  return je[e.event](e.payload, t);
 }
-function Ve(e, t, n) {
+function Ye(e, t, n) {
   return p.listenToMessageFromWindow(window, e, h.PROCESS_HOOK, async (o) => {
     let r = !1;
     try {
-      r = await Fe(o, n);
+      r = await Ke(o, n);
     } catch {
     }
     p.postMessageToWindow(e, A.HOOK_RESULT, {
@@ -458,46 +484,46 @@ function Ve(e, t, n) {
     }, t);
   }, t);
 }
-const Me = Object.values(b);
-function ze(e, t, n) {
-  if (y(e)) {
+const Qe = Object.values(W);
+function T(e) {
+  return typeof e != "object" ? !1 : Object.keys(e).every((t) => Qe.includes(t));
+}
+function tt(e, t, n) {
+  if (T(e)) {
     const o = e[n];
-    return T(o) ? o[t] : o;
+    return y(o) ? o[t] : o;
   }
-  if (T(e)) {
+  if (y(e)) {
     const o = e[t];
-    return y(o) ? o[n] : o;
+    return T(o) ? o[n] : o;
   }
   return e;
 }
+const ze = /^\d+$/;
 function y(e) {
-  return typeof e != "object" ? !1 : Object.keys(e).every((t) => Me.includes(t));
-}
-const $e = /^\d+$/;
-function T(e) {
-  return typeof e != "object" ? !1 : Object.keys(e).every((t) => $e.test(t));
+  return typeof e != "object" ? !1 : Object.keys(e).every((t) => ze.test(t));
 }
-function Xe(e) {
-  return y(e) ? Object.values(e).flatMap((t) => T(t) ? Object.values(t) : [t]) : T(e) ? Object.values(e).flatMap((t) => y(t) ? Object.values(t) : [t]) : [e];
+function nt(e) {
+  return T(e) ? Object.values(e).flatMap((t) => y(t) ? Object.values(t) : [t]) : y(e) ? Object.values(e).flatMap((t) => T(t) ? Object.values(t) : [t]) : [e];
 }
 export {
-  he as SHOULD_THROW_IF_INVALID_URL,
-  b as TradeType,
-  Ke as WIDGET_CONTAINER_ID,
-  ae as WIDGET_IFRAME_ALLOW,
-  oe as WIDGET_IFRAME_ID,
-  se as WIDGET_IFRAME_REFERRER_POLICY,
-  ie as WIDGET_IFRAME_SANDBOX,
-  Ye as WIDGET_PALETTE_COLORS,
-  g as WidgetHookEvents,
+  Oe as SHOULD_THROW_IF_INVALID_URL,
+  W as TradeType,
+  Ze as WIDGET_CONTAINER_ID,
+  ue as WIDGET_IFRAME_ALLOW,
+  ae as WIDGET_IFRAME_ID,
+  ce as WIDGET_IFRAME_REFERRER_POLICY,
+  le as WIDGET_IFRAME_SANDBOX,
+  qe as WIDGET_PALETTE_COLORS,
+  m as WidgetHookEvents,
   h as WidgetMethodsEmit,
   A as WidgetMethodsListen,
-  Qe as createCowSwapWidget,
-  G as isCowSwapWidgetPalette,
-  T as isPerNetworkConfig,
-  y as isPerTradeTypeConfig,
-  ze as resolveFlexibleConfig,
-  Xe as resolveFlexibleConfigValues,
-  ge as sanitizeWidgetBaseUrl,
+  et as createCowSwapWidget,
+  K as isCowSwapWidgetPalette,
+  y as isPerNetworkConfig,
+  T as isPerTradeTypeConfig,
+  tt as resolveFlexibleConfig,
+  nt as resolveFlexibleConfigValues,
+  Re as sanitizeWidgetBaseUrl,
   p as widgetIframeTransport
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cowprotocol/widget-lib",
-  "version": "4.4.0",
+  "version": "4.4.2",
   "description": "CoW Swap Widget Library. Allows you to easily embed a CoW Swap widget on your website.",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@cowprotocol/cow-sdk": "9.2.2",
-    "@cowprotocol/events": "^4.7.1",
+    "@cowprotocol/events": "^4.8.0",
     "@cowprotocol/iframe-transport": "^2.3.2"
   },
   "devDependencies": {

package/types.d.ts

@@ -3,9 +3,69 @@ import { CowWidgetEventListeners, CowWidgetEventPayloadMap, CowWidgetEvents, OnT
 import type * as CSS from 'csstype';
 export type { SupportedChainId } from '@cowprotocol/cow-sdk';
 export type { OnTradeParamsPayload } from '@cowprotocol/events';
-export type PerTradeTypeConfig<T> = Partial<Record<TradeType, T>>;
-export type PerNetworkConfig<T> = Partial<Record<SupportedChainId, T>>;
+export type CowSwapTheme = 'dark' | 'light';
+export interface CowSwapWidgetProps {
+    params: CowSwapWidgetParams;
+    provider?: EthereumProvider;
+    listeners?: CowWidgetEventListeners;
+    onReady?(): void;
+    onLoadingError?(): void;
+    enableSafeSdkBridge?: boolean;
+}
+export interface EthereumProvider {
+    /**
+     * Subscribes to Ethereum-related events.
+     * @param event - The event to subscribe to.
+     * @param args - Arguments for the event.
+     */
+    on(event: string, args: unknown): void;
+    /**
+     * Sends a JSON-RPC request to the Ethereum provider and returns the response.
+     * @param params - JSON-RPC request parameters.
+     * @returns A promise that resolves with the response.
+     */
+    request<T>(params: JsonRpcRequest): Promise<T>;
+}
 export type FlexibleConfig<T> = T | PerNetworkConfig<T> | PerTradeTypeConfig<T> | PerTradeTypeConfig<PerNetworkConfig<T>> | PerNetworkConfig<PerTradeTypeConfig<T>>;
+export type ForcedOrderDeadline = FlexibleConfig<number>;
+export interface JsonRpcRequest {
+    id: number;
+    method: string;
+    params: unknown[];
+}
+export interface OnApprovalPayload {
+    chainId: SupportedChainId;
+    sellToken: TokenInfo;
+    sellAmount: string;
+    walletAddress: string;
+    spenderAddress: string;
+}
+/**
+ * The partner fee
+ */
+export interface PartnerFee {
+    /**
+     * The fee in basis points (BPS). One basis point is equivalent to 0.01% (1/100th of a percent)
+     */
+    bps: FlexibleConfig<number>;
+    /**
+     * The Ethereum address of the partner to receive the fee.
+     */
+    recipient: FlexibleConfig<string>;
+}
+export type PerNetworkConfig<T> = Partial<Record<SupportedChainId, T>>;
+export type PerTradeTypeConfig<T> = Partial<Record<TradeType, T>>;
+/**
+ * ERC-20 token information
+ */
+export type TokenInfo = {
+    chainId: number;
+    address: string;
+    name: string;
+    decimals: number;
+    symbol: string;
+    logoURI?: string;
+};
 /**
  * A single forbidden sell→buy token combination for the widget.
  *
@@ -39,6 +99,24 @@ export type TokenPairConstraint = {
         chainId: SupportedChainId;
     };
 };
+export type WidgetHookResult = Promise<boolean> | boolean;
+export declare enum TradeType {
+    SWAP = "swap",
+    LIMIT = "limit",
+    /**
+     * Currently it means only TWAP orders.
+     * But in the future it can be extended to support other order types.
+     */
+    ADVANCED = "advanced",
+    YIELD = "yield"
+}
+export declare enum WidgetHookEvents {
+    ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL",
+    ON_BEFORE_TRADE = "ON_BEFORE_TRADE",
+    ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP",
+    ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL",
+    ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL"
+}
 export declare enum WidgetMethodsEmit {
     ACTIVATE = "ACTIVATE",
     READY = "READY",
@@ -56,49 +134,6 @@ export declare enum WidgetMethodsListen {
     PROVIDER_ON_EVENT = "PROVIDER_ON_EVENT",
     HOOK_RESULT = "HOOK_RESULT"
 }
-export declare enum WidgetHookEvents {
-    ON_BEFORE_APPROVAL = "ON_BEFORE_APPROVAL",
-    ON_BEFORE_TRADE = "ON_BEFORE_TRADE",
-    ON_BEFORE_WRAP_UNWRAP = "ON_BEFORE_WRAP_UNWRAP",
-    ON_BEFORE_ORDER_CANCEL = "ON_BEFORE_ORDER_CANCEL",
-    ON_BEFORE_ORDERS_CANCEL = "ON_BEFORE_ORDERS_CANCEL"
-}
-export type WidgetHookResult = Promise<boolean> | boolean;
-export interface OnApprovalPayload {
-    chainId: SupportedChainId;
-    sellToken: TokenInfo;
-    sellAmount: string;
-    walletAddress: string;
-    spenderAddress: string;
-}
-export interface CowSwapWidgetProps {
-    params: CowSwapWidgetParams;
-    provider?: EthereumProvider;
-    listeners?: CowWidgetEventListeners;
-    onReady?(): void;
-    onLoadingError?(): void;
-    enableSafeSdkBridge?: boolean;
-}
-export interface JsonRpcRequest {
-    id: number;
-    method: string;
-    params: unknown[];
-}
-export interface EthereumProvider {
-    /**
-     * Subscribes to Ethereum-related events.
-     * @param event - The event to subscribe to.
-     * @param args - Arguments for the event.
-     */
-    on(event: string, args: unknown): void;
-    /**
-     * Sends a JSON-RPC request to the Ethereum provider and returns the response.
-     * @param params - JSON-RPC request parameters.
-     * @returns A promise that resolves with the response.
-     */
-    request<T>(params: JsonRpcRequest): Promise<T>;
-}
-export type CowSwapTheme = 'dark' | 'light';
 /**
  *Trade asset parameters, for example:
  * { asset: 'WBTC', amount: 12 }
@@ -114,46 +149,23 @@ interface TradeAsset {
      */
     amount?: string;
 }
-export type ForcedOrderDeadline = FlexibleConfig<number>;
-export declare enum TradeType {
-    SWAP = "swap",
-    LIMIT = "limit",
-    /**
-     * Currently it means only TWAP orders.
-     * But in the future it can be extended to support other order types.
-     */
-    ADVANCED = "advanced",
-    YIELD = "yield"
+export declare const WIDGET_PALETTE_COLORS: readonly ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"];
+export interface BaseJsonRpcResponseMessage {
+    id: number;
+    jsonrpc: '2.0';
 }
-/**
- * The partner fee
- */
-export interface PartnerFee {
-    /**
-     * The fee in basis points (BPS). One basis point is equivalent to 0.01% (1/100th of a percent)
-     */
-    bps: FlexibleConfig<number>;
+export type CowSwapWidgetAppParams = Omit<CowSwapWidgetParams, 'theme' | 'hooks' | 'rootStyle'>;
+export interface CowSwapWidgetContent {
+    feeLabel?: string;
+    feeTooltipMarkdown?: string;
+}
+export interface CowSwapWidgetImages {
     /**
-     * The Ethereum address of the partner to receive the fee.
+     * The image to display when the orders table is empty (no orders yet). It defaults to "Yoga CoW" image.
+     * Alternatively, you can use a URL to a custom image file, or set to null to disable the image.
      */
-    recipient: FlexibleConfig<string>;
+    emptyOrders?: string | null;
 }
-/**
- * ERC-20 token information
- */
-export type TokenInfo = {
-    chainId: number;
-    address: string;
-    name: string;
-    decimals: number;
-    symbol: string;
-    logoURI?: string;
-};
-export declare const WIDGET_PALETTE_COLORS: readonly ["primary", "background", "paper", "text", "danger", "warning", "alert", "info", "success"];
-export type CowSwapWidgetPaletteColors = (typeof WIDGET_PALETTE_COLORS)[number];
-export type CowSwapWidgetPaletteParams = {
-    [K in CowSwapWidgetPaletteColors]: string;
-};
 export type CowSwapWidgetPalette = {
     baseTheme: CowSwapTheme;
     /**
@@ -164,43 +176,10 @@ export type CowSwapWidgetPalette = {
      */
     boxShadow?: string;
 } & CowSwapWidgetPaletteParams;
-export interface CowSwapWidgetSounds {
-    /**
-     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap moooooooooo!
-     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
-     */
-    postOrder?: string | null;
-    /**
-     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap happy moooooooooo!
-     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
-     */
-    orderExecuted?: string | null;
-    /**
-     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap unhappy moooooooooo!
-     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
-     */
-    orderError?: string | null;
-}
-export interface CowSwapWidgetImages {
-    /**
-     * The image to display when the orders table is empty (no orders yet). It defaults to "Yoga CoW" image.
-     * Alternatively, you can use a URL to a custom image file, or set to null to disable the image.
-     */
-    emptyOrders?: string | null;
-}
-export interface CowSwapWidgetContent {
-    feeLabel?: string;
-    feeTooltipMarkdown?: string;
-}
-export interface SlippageConfig {
-    /** Minimum slippage in basis points (e.g., 10 = 0.1%) */
-    min?: number;
-    /** Maximum slippage in basis points (e.g., 5000 = 50%) - 5000 is max value for dApp */
-    max?: number;
-    /** Default slippage value in basis points (e.g., 50 = 0.5%) - min <= defaultValue <= max */
-    defaultValue?: number;
-}
-export type FlexibleSlippageConfig = FlexibleConfig<SlippageConfig>;
+export type CowSwapWidgetPaletteColors = (typeof WIDGET_PALETTE_COLORS)[number];
+export type CowSwapWidgetPaletteParams = {
+    [K in CowSwapWidgetPaletteColors]: string;
+};
 export interface CowSwapWidgetParams {
     /**
      * The unique identifier of the widget consumer.
@@ -394,7 +373,9 @@ export interface CowSwapWidgetParams {
      */
     disableToastMessages?: boolean;
     /**
-     * When `true`, the host page will not use `window.open` to open links requested by the widget.
+     * When `true`, the host page will not use `window.open` to open links requested by the widget,
+     * and the widget iframe sandbox will not allow direct popups.
+     * Requires `standaloneMode: false`.
      * Defaults to `false`.
      */
     disableWindowOpen?: boolean;
@@ -467,27 +448,69 @@ export interface CowSwapWidgetParams {
         onBeforeOrdersCancel(payload: EnrichedOrder[]): WidgetHookResult;
     }>;
 }
-export interface WidgetMethodsEmitPayloadMap {
-    [WidgetMethodsEmit.ACTIVATE]: void;
-    [WidgetMethodsEmit.READY]: void;
-    [WidgetMethodsEmit.EMIT_COW_EVENT]: EmitCowEventPayload<CowWidgetEvents>;
-    [WidgetMethodsEmit.UPDATE_HEIGHT]: UpdateWidgetHeightPayload;
-    [WidgetMethodsEmit.SET_FULL_HEIGHT]: void;
-    [WidgetMethodsEmit.PROVIDER_RPC_REQUEST]: ProviderRpcRequestPayload;
-    [WidgetMethodsEmit.INTERCEPT_WINDOW_OPEN]: WindowOpenPayload;
-    [WidgetMethodsEmit.PROCESS_HOOK]: WidgetHookPayload<WidgetHookEvents>;
+export interface CowSwapWidgetSounds {
+    /**
+     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap moooooooooo!
+     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
+     */
+    postOrder?: string | null;
+    /**
+     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap happy moooooooooo!
+     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
+     */
+    orderExecuted?: string | null;
+    /**
+     * The sound to play when the order is executed. Defaults to world wide famous CoW Swap unhappy moooooooooo!
+     * Alternatively, you can use a URL to a custom sound file, or set to null to disable the sound.
+     */
+    orderError?: string | null;
 }
-export interface WidgetMethodsListenPayloadMap {
-    [WidgetMethodsListen.UPDATE_APP_DATA]: UpdateAppDataPayload;
-    [WidgetMethodsListen.UPDATE_PARAMS]: UpdateParamsPayload;
-    [WidgetMethodsListen.PROVIDER_RPC_RESPONSE]: ProviderRpcResponsePayload;
-    [WidgetMethodsListen.PROVIDER_ON_EVENT]: ProviderOnEventPayload;
-    [WidgetMethodsListen.HOOK_RESULT]: WidgetHookResultPayload;
+export interface EmitCowEventPayload<T extends CowWidgetEvents> {
+    event: T;
+    payload: CowWidgetEventPayloadMap[T];
+}
+export type FlexibleSlippageConfig = FlexibleConfig<SlippageConfig>;
+export interface JsonRpcError<TData = unknown> {
+    code: number;
+    message: string;
+    data?: TData;
+}
+export interface JsonRpcErrorResponseMessage<TErrorData = unknown> extends BaseJsonRpcResponseMessage {
+    error: JsonRpcError<TErrorData>;
+}
+export interface JsonRpcRequestMessage {
+    jsonrpc: '2.0';
+    id?: number;
+    method: string;
+    params: unknown[];
+}
+export type JsonRpcResponse = JsonRpcRequestMessage | JsonRpcErrorResponseMessage | JsonRpcSucessfulResponseMessage;
+export interface JsonRpcSucessfulResponseMessage<TResult = unknown> extends BaseJsonRpcResponseMessage {
+    result: TResult;
+}
+export interface ProviderOnEventPayload {
+    event: string;
+    params: unknown;
+}
+export interface ProviderRpcRequestPayload {
+    rpcRequest: JsonRpcRequestMessage;
+}
+export type ProviderRpcResponsePayload = {
+    rpcResponse: JsonRpcResponse;
+};
+export interface SlippageConfig {
+    /** Minimum slippage in basis points (e.g., 10 = 0.1%) */
+    min?: number;
+    /** Maximum slippage in basis points (e.g., 5000 = 50%) - 5000 is max value for dApp */
+    max?: number;
+    /** Default slippage value in basis points (e.g., 50 = 0.5%) - min <= defaultValue <= max */
+    defaultValue?: number;
+}
+export interface UpdateAppDataPayload {
+    metaData?: {
+        appCode: string;
+    };
 }
-export type WidgetEventsPayloadMap = WidgetMethodsEmitPayloadMap & WidgetMethodsListenPayloadMap;
-export type WidgetMethodsEmitPayloads = WidgetMethodsEmitPayloadMap[WidgetMethodsEmit];
-export type WidgetMethodsListenPayloads = WidgetMethodsListenPayloadMap[WidgetMethodsListen];
-export type CowSwapWidgetAppParams = Omit<CowSwapWidgetParams, 'theme' | 'hooks' | 'rootStyle'>;
 export interface UpdateParamsPayload {
     urlParams: {
         pathname: string;
@@ -496,24 +519,16 @@ export interface UpdateParamsPayload {
     appParams: CowSwapWidgetAppParams;
     hasProvider: boolean;
 }
-export interface UpdateAppDataPayload {
-    metaData?: {
-        appCode: string;
-    };
-}
 export interface UpdateWidgetHeightPayload {
     height?: number;
 }
+export type WidgetEventsPayloadMap = WidgetMethodsEmitPayloadMap & WidgetMethodsListenPayloadMap;
 export type WidgetHookId = string;
 export interface WidgetHookPayload<T extends WidgetHookEvents> {
     id: WidgetHookId;
     event: T;
     payload: WidgetHookPayloadMap[T];
 }
-export interface WidgetHookResultPayload {
-    id: WidgetHookId;
-    result: boolean;
-}
 export interface WidgetHookPayloadMap {
     [WidgetHookEvents.ON_BEFORE_APPROVAL]: OnApprovalPayload;
     [WidgetHookEvents.ON_BEFORE_TRADE]: OnTradeParamsPayload;
@@ -521,50 +536,37 @@ export interface WidgetHookPayloadMap {
     [WidgetHookEvents.ON_BEFORE_ORDER_CANCEL]: EnrichedOrder;
     [WidgetHookEvents.ON_BEFORE_ORDERS_CANCEL]: EnrichedOrder[];
 }
-export interface EmitCowEventPayload<T extends CowWidgetEvents> {
-    event: T;
-    payload: CowWidgetEventPayloadMap[T];
+export interface WidgetHookResultPayload {
+    id: WidgetHookId;
+    result: boolean;
 }
+export type WidgetMethodHandler<T extends WidgetMethodsEmit> = (payload: WidgetMethodsEmitPayloadMap[T]) => void;
 export type WidgetMethodsEmitListener<T extends WidgetMethodsEmit> = T extends WidgetMethodsEmit ? {
     event: T;
     handler: WidgetMethodHandler<T>;
 } : never;
-export type WidgetMethodHandler<T extends WidgetMethodsEmit> = (payload: WidgetMethodsEmitPayloadMap[T]) => void;
-export interface ProviderRpcRequestPayload {
-    rpcRequest: JsonRpcRequestMessage;
+export interface WidgetMethodsEmitPayloadMap {
+    [WidgetMethodsEmit.ACTIVATE]: void;
+    [WidgetMethodsEmit.READY]: void;
+    [WidgetMethodsEmit.EMIT_COW_EVENT]: EmitCowEventPayload<CowWidgetEvents>;
+    [WidgetMethodsEmit.UPDATE_HEIGHT]: UpdateWidgetHeightPayload;
+    [WidgetMethodsEmit.SET_FULL_HEIGHT]: void;
+    [WidgetMethodsEmit.PROVIDER_RPC_REQUEST]: ProviderRpcRequestPayload;
+    [WidgetMethodsEmit.INTERCEPT_WINDOW_OPEN]: WindowOpenPayload;
+    [WidgetMethodsEmit.PROCESS_HOOK]: WidgetHookPayload<WidgetHookEvents>;
 }
+export type WidgetMethodsEmitPayloads = WidgetMethodsEmitPayloadMap[WidgetMethodsEmit];
+export interface WidgetMethodsListenPayloadMap {
+    [WidgetMethodsListen.UPDATE_APP_DATA]: UpdateAppDataPayload;
+    [WidgetMethodsListen.UPDATE_PARAMS]: UpdateParamsPayload;
+    [WidgetMethodsListen.PROVIDER_RPC_RESPONSE]: ProviderRpcResponsePayload;
+    [WidgetMethodsListen.PROVIDER_ON_EVENT]: ProviderOnEventPayload;
+    [WidgetMethodsListen.HOOK_RESULT]: WidgetHookResultPayload;
+}
+export type WidgetMethodsListenPayloads = WidgetMethodsListenPayloadMap[WidgetMethodsListen];
+export type WindowListener = (event: MessageEvent<unknown>) => void;
 export interface WindowOpenPayload {
     href: string | URL;
     target: string;
     rel: string;
 }
-export interface JsonRpcRequestMessage {
-    jsonrpc: '2.0';
-    id?: number;
-    method: string;
-    params: unknown[];
-}
-export interface BaseJsonRpcResponseMessage {
-    id: number;
-    jsonrpc: '2.0';
-}
-export interface JsonRpcSucessfulResponseMessage<TResult = unknown> extends BaseJsonRpcResponseMessage {
-    result: TResult;
-}
-export interface JsonRpcError<TData = unknown> {
-    code: number;
-    message: string;
-    data?: TData;
-}
-export interface JsonRpcErrorResponseMessage<TErrorData = unknown> extends BaseJsonRpcResponseMessage {
-    error: JsonRpcError<TErrorData>;
-}
-export type ProviderRpcResponsePayload = {
-    rpcResponse: JsonRpcResponse;
-};
-export type JsonRpcResponse = JsonRpcRequestMessage | JsonRpcErrorResponseMessage | JsonRpcSucessfulResponseMessage;
-export interface ProviderOnEventPayload {
-    event: string;
-    params: unknown;
-}
-export type WindowListener = (event: MessageEvent<unknown>) => void;

package/urlUtils.d.ts

@@ -4,6 +4,9 @@ import { CowSwapWidgetParams } from './types';
  * When `false`, invalid values are reported with `console.error` and the iframe falls back to the production host.
  */
 export declare const SHOULD_THROW_IF_INVALID_URL = false;
+export declare function buildWidgetPath(params: Partial<CowSwapWidgetParams>): string;
+export declare function buildWidgetUrl(params: Partial<CowSwapWidgetParams>): string;
+export declare function buildWidgetUrlQuery(params: Partial<CowSwapWidgetParams>): URLSearchParams;
 /**
  * Normalizes `baseUrl` for the widget iframe `src` and rejects unsafe values.
  * - Omits or blank `baseUrl` → production default (https://swap.cow.fi).
@@ -13,6 +16,3 @@ export declare const SHOULD_THROW_IF_INVALID_URL = false;
  * @throws {Error} When validation fails and `throwIfInvalid` is true (see {@link SHOULD_THROW_IF_INVALID_URL}).
  */
 export declare function sanitizeWidgetBaseUrl(baseUrl: string | undefined, throwIfInvalid?: boolean): string;
-export declare function buildWidgetUrl(params: Partial<CowSwapWidgetParams>): string;
-export declare function buildWidgetPath(params: Partial<CowSwapWidgetParams>): string;
-export declare function buildWidgetUrlQuery(params: Partial<CowSwapWidgetParams>): URLSearchParams;