@hypermid/checkout 0.1.0

package/README.md

@@ -0,0 +1,107 @@
+# @hypermid/checkout
+
+Embeddable crypto checkout for [Hypermid](https://hypermid.io) — **pay with any token, the merchant receives the token they asked for.** Drop it into any site with a single script tag or npm import; it mounts the live Hypermid checkout app in a sandboxed iframe, so it always reflects production with zero maintenance on your side.
+
+The destination — amount, token, chain, recipient — is bound to the checkout session **server-side** when you create it. The only thing the payer chooses is which token to pay with; the destination can never be overridden from the client.
+
+## How it works
+
+1. **Server-side**, create a checkout with your secret key:
+
+   ```bash
+   curl -X POST https://api.hypermid.io/v1/checkout \
+     -H "Authorization: Bearer sk_live_…" \
+     -H "Content-Type: application/json" \
+     -d '{ "amount": "100000000", "token": "0x833…913", "chain": 8453,
+           "recipient": "0xYourTreasury", "orderId": "order-123" }'
+   # → { "data": { "id": "co_…", … } }
+   ```
+
+2. **Client-side**, embed the returned `checkoutId`.
+
+## Install
+
+```bash
+npm install @hypermid/checkout
+```
+
+```ts
+import { HypermidCheckout } from "@hypermid/checkout";
+
+const checkout = HypermidCheckout.init({
+  containerId: "pay",
+  checkoutId: "co_…",                 // from POST /v1/checkout (server-side)
+  theme: "dark",
+  onSuccess: ({ checkoutId }) => {     // backend on-chain-VERIFIED completion
+    // fulfill the order
+  },
+  onError: ({ reason }) => {
+    // show a retry
+  },
+});
+```
+
+## Script tag (no build step)
+
+```html
+<div id="hypermid-checkout"></div>
+<script src="https://hypermid.io/checkout/v1/embed.js"></script>
+<script>
+  HypermidCheckout.init({
+    containerId: "hypermid-checkout",
+    checkoutId: "co_…",
+    theme: "dark",
+    onSuccess: function (p) { /* fulfill order */ },
+  });
+</script>
+```
+
+Or auto-init from a data attribute:
+
+```html
+<div data-hypermid-checkout data-checkout-id="co_…" data-theme="light" id="hypermid-checkout"></div>
+<script src="https://hypermid.io/checkout/v1/embed.js"></script>
+```
+
+## Config
+
+| Option | Type | Notes |
+| --- | --- | --- |
+| `containerId` | `string` | **Required.** Element id to mount into. |
+| `checkoutId` | `string` | **Required.** Session id (`co_…`) from `POST /v1/checkout`. |
+| `theme` | `"dark" \| "light"` | Default `"dark"`. |
+| `label` | `string` | Action label, e.g. `"Pay"` / `"Deposit"`. |
+| `accent`, `bgPage`, `bgCard`, `border`, `textPrimary`, `textMuted` | `string` (hex) | Full theme-token overrides. |
+| `fontFamily` | `string` | Font family for the embed. |
+| `width`, `height`, `borderRadius` | `string` (CSS) | `height` is a floor — the frame grows to fit taller content. |
+
+## Events
+
+The embed relays the checkout lifecycle to your callbacks over `postMessage`. Only messages from a Hypermid origin **and** this embed's own iframe are accepted.
+
+| Callback | Fires when | Payload |
+| --- | --- | --- |
+| `onReady()` | the iframe has mounted | — |
+| `onResize(height)` | content height changed (grow-only floor) | `number` |
+| `onSuccess(p)` | the payment is **backend on-chain-verified complete** | `{ checkoutId, status, paidAmount?, txHash? }` |
+| `onError(p)` | the payment failed | `{ checkoutId, reason? }` |
+| `onClose()` | the payer dismissed the checkout | — |
+
+> `onSuccess` is the **only** trustworthy "paid" signal — it fires on the backend's on-chain settlement verification (delivered amount ≥ the requested amount), never merely because a transaction mined. Fulfill orders on `onSuccess`.
+
+## Methods
+
+```ts
+checkout.update({ checkoutId: "co_next…" }); // swap in a new session + reload
+checkout.destroy();                          // remove the embed + its listener
+```
+
+## Security
+
+- The iframe is `sandbox`ed; the wallet signature is the final gate.
+- The destination is server-bound to the session — query params can only set cosmetics / the pay-token, never money.
+- `onSuccess` is gated on backend on-chain verification, not on a mined tx.
+
+## License
+
+MIT

package/dist/checkout.esm.js

@@ -0,0 +1,140 @@
+const APP_BASE = "https://app.hypermid.io";
+const ALLOWED_ORIGINS = [APP_BASE, "https://hypermid.io"];
+const hex = (c) => encodeURIComponent(c.replace("#", ""));
+function buildUrl(config) {
+  const p = [];
+  p.push("checkoutId=" + encodeURIComponent(config.checkoutId));
+  if (config.theme) p.push("theme=" + encodeURIComponent(config.theme));
+  if (config.label) p.push("label=" + encodeURIComponent(config.label));
+  if (config.accent) p.push("accent=" + hex(config.accent));
+  if (config.bgPage) p.push("bgPage=" + hex(config.bgPage));
+  if (config.bgCard) p.push("bgCard=" + hex(config.bgCard));
+  if (config.border) p.push("border=" + hex(config.border));
+  if (config.textPrimary) p.push("textPrimary=" + hex(config.textPrimary));
+  if (config.textMuted) p.push("textMuted=" + hex(config.textMuted));
+  if (config.fontFamily) p.push("font=" + encodeURIComponent(config.fontFamily));
+  p.push("embed=1");
+  return APP_BASE + "/checkout?" + p.join("&");
+}
+class HypermidCheckout {
+  constructor(config) {
+    this.container = null;
+    this.iframe = null;
+    this.onMessage = null;
+    this.config = { theme: "dark", ...config };
+  }
+  /** Construct + mount in one call (mirrors the script-tag `HypermidCheckout.init`). */
+  static init(config) {
+    const c = new HypermidCheckout(config);
+    c.mount();
+    return c;
+  }
+  mount() {
+    if (typeof document === "undefined") return this;
+    if (!this.config.checkoutId) {
+      console.error("[HypermidCheckout] `checkoutId` is required");
+      return this;
+    }
+    const container = document.getElementById(this.config.containerId);
+    if (!container) {
+      console.error("[HypermidCheckout] Element #" + this.config.containerId + " not found");
+      return this;
+    }
+    this.container = container;
+    const iframe = document.createElement("iframe");
+    iframe.src = buildUrl(this.config);
+    iframe.title = "Hypermid Checkout";
+    iframe.allow = "clipboard-write; payment; web-share";
+    iframe.setAttribute(
+      "sandbox",
+      "allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation-by-user-activation"
+    );
+    const width = this.config.width || "400px";
+    const height = this.config.height || "640px";
+    const radius = this.config.borderRadius || "24px";
+    iframe.style.cssText = [
+      "width:" + width,
+      "height:" + height,
+      "max-width:100%",
+      "border:none",
+      "border-radius:" + radius,
+      "box-shadow:0 4px 24px rgba(0,0,0,0.15)",
+      "display:block",
+      "margin:0 auto",
+      "color-scheme:normal"
+    ].join(";");
+    this.iframe = iframe;
+    container.innerHTML = "";
+    container.appendChild(iframe);
+    this.listen();
+    return this;
+  }
+  listen() {
+    const floor = parseInt(String(this.config.height), 10) || 640;
+    this.onMessage = (event) => {
+      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+      if (ALLOWED_ORIGINS.indexOf(event.origin) === -1) return;
+      if (!this.iframe || event.source !== this.iframe.contentWindow) return;
+      const data = event.data;
+      if (!data || typeof data.type !== "string" || data.type.indexOf("hypermid:") !== 0) return;
+      switch (data.type.slice("hypermid:".length)) {
+        case "ready":
+          (_b = (_a = this.config).onReady) == null ? void 0 : _b.call(_a);
+          break;
+        case "success":
+          (_d = (_c = this.config).onSuccess) == null ? void 0 : _d.call(_c, data.payload);
+          break;
+        case "error":
+          (_f = (_e = this.config).onError) == null ? void 0 : _f.call(_e, data.payload);
+          break;
+        case "close":
+          (_h = (_g = this.config).onClose) == null ? void 0 : _h.call(_g);
+          break;
+        case "resize":
+          if (this.iframe && data.payload && typeof data.payload.height === "number") {
+            const h = Math.max(data.payload.height, floor);
+            this.iframe.style.height = h + "px";
+            (_j = (_i = this.config).onResize) == null ? void 0 : _j.call(_i, h);
+          }
+          break;
+      }
+    };
+    window.addEventListener("message", this.onMessage);
+  }
+  /** Merge new config and reload the iframe URL (e.g. swap in a new checkoutId). */
+  update(partial) {
+    this.config = { ...this.config, ...partial };
+    if (this.iframe) this.iframe.src = buildUrl(this.config);
+  }
+  /** Remove the embed + its listener. */
+  destroy() {
+    if (this.onMessage) window.removeEventListener("message", this.onMessage);
+    if (this.container) this.container.innerHTML = "";
+    this.onMessage = null;
+    this.iframe = null;
+    this.container = null;
+  }
+}
+if (typeof window !== "undefined") {
+  window.HypermidCheckout = HypermidCheckout;
+  if (typeof document !== "undefined") {
+    document.addEventListener("DOMContentLoaded", () => {
+      const el = document.querySelector("[data-hypermid-checkout]");
+      if (!el) return;
+      const checkoutId = el.getAttribute("data-checkout-id");
+      if (!checkoutId) return;
+      HypermidCheckout.init({
+        containerId: el.id || "hypermid-checkout",
+        checkoutId,
+        theme: el.getAttribute("data-theme") || "dark",
+        label: el.getAttribute("data-label") || void 0,
+        accent: el.getAttribute("data-accent") || void 0
+      });
+    });
+  }
+}
+export {
+  HypermidCheckout,
+  HypermidCheckout as default
+};
+//# sourceMappingURL=checkout.esm.js.map

package/dist/checkout.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.esm.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * @hypermid/checkout\n *\n * Embeddable crypto checkout for Hypermid — \"pay with any token, the merchant\n * receives the token they asked for.\" Mounts the live Hypermid checkout app\n * (wallet connect, pay-token picker, approval, on-chain-verified settlement) in\n * a sandboxed iframe, so it always reflects production with zero maintenance on\n * the integrator's side. This is the typed, npm-distributed counterpart of the\n * hosted `embed.js` script tag; both share the same iframe contract.\n *\n * The merchant creates a checkout server-side (POST /v1/checkout with their\n * sk_live key) and passes the returned `checkoutId` here. The destination —\n * amount, token, chain, recipient — is bound to that session on the server and\n * can never be overridden from the client (the only thing the payer chooses is\n * which token to pay with).\n *\n * Usage (npm):\n *   import { HypermidCheckout } from \"@hypermid/checkout\";\n *   const checkout = HypermidCheckout.init({\n *     containerId: \"pay\",\n *     checkoutId: \"co_…\",         // from POST /v1/checkout (server-side)\n *     theme: \"dark\",\n *     onSuccess: ({ checkoutId }) => fulfillOrder(checkoutId),\n *     onError:   ({ reason })     => showRetry(reason),\n *   });\n *\n * Usage (script tag / UMD):\n *   <div id=\"hypermid-checkout\"></div>\n *   <script src=\"https://hypermid.io/checkout/v1/embed.js\"></script>\n *   <script>\n *     HypermidCheckout.init({ containerId: \"hypermid-checkout\", checkoutId: \"co_…\" });\n *   </script>\n */\n\nconst APP_BASE = \"https://app.hypermid.io\";\nconst ALLOWED_ORIGINS = [APP_BASE, \"https://hypermid.io\"];\n\nexport interface HypermidCheckoutSuccess {\n  checkoutId: string;\n  status: \"completed\";\n  /** On-chain-verified delivered amount (base units), when surfaced. */\n  paidAmount?: string | null;\n  /** The payer's source-chain transaction hash. */\n  txHash?: string | null;\n}\n\nexport interface HypermidCheckoutError {\n  checkoutId: string;\n  reason?: string;\n}\n\nexport interface HypermidCheckoutConfig {\n  /** DOM element id to mount into. Required. */\n  containerId: string;\n  /** The checkout session id (co_…) from POST /v1/checkout. Required. */\n  checkoutId: string;\n\n  theme?: \"dark\" | \"light\";\n  /** Action label, e.g. \"Pay\" | \"Deposit\" (merchant-configurable, D-16). */\n  label?: string;\n\n  /** Theming overrides (hex, with or without `#`) — full token set (D-18). */\n  accent?: string;\n  bgPage?: string;\n  bgCard?: string;\n  border?: string;\n  textPrimary?: string;\n  textMuted?: string;\n  fontFamily?: string;\n\n  /** Layout. Height is a floor — the frame grows to fit taller content. */\n  width?: string;\n  height?: string;\n  borderRadius?: string;\n\n  /** Event callbacks. */\n  onReady?: () => void;\n  /** Fires on backend on-chain-VERIFIED completion — the only \"paid\" signal. */\n  onSuccess?: (payload: HypermidCheckoutSuccess) => void;\n  onError?: (payload: HypermidCheckoutError) => void;\n  onClose?: () => void;\n  onResize?: (height: number) => void;\n}\n\nconst hex = (c: string) => encodeURIComponent(c.replace(\"#\", \"\"));\n\nfunction buildUrl(config: HypermidCheckoutConfig): string {\n  const p: string[] = [];\n  // checkoutId is the ONLY money-affecting input — destination is server-bound.\n  p.push(\"checkoutId=\" + encodeURIComponent(config.checkoutId));\n  if (config.theme) p.push(\"theme=\" + encodeURIComponent(config.theme));\n  if (config.label) p.push(\"label=\" + encodeURIComponent(config.label));\n\n  if (config.accent) p.push(\"accent=\" + hex(config.accent));\n  if (config.bgPage) p.push(\"bgPage=\" + hex(config.bgPage));\n  if (config.bgCard) p.push(\"bgCard=\" + hex(config.bgCard));\n  if (config.border) p.push(\"border=\" + hex(config.border));\n  if (config.textPrimary) p.push(\"textPrimary=\" + hex(config.textPrimary));\n  if (config.textMuted) p.push(\"textMuted=\" + hex(config.textMuted));\n  if (config.fontFamily) p.push(\"font=\" + encodeURIComponent(config.fontFamily));\n\n  p.push(\"embed=1\");\n  return APP_BASE + \"/checkout?\" + p.join(\"&\");\n}\n\nexport class HypermidCheckout {\n  private config: HypermidCheckoutConfig;\n  private container: HTMLElement | null = null;\n  private iframe: HTMLIFrameElement | null = null;\n  private onMessage: ((e: MessageEvent) => void) | null = null;\n\n  constructor(config: HypermidCheckoutConfig) {\n    this.config = { theme: \"dark\", ...config };\n  }\n\n  /** Construct + mount in one call (mirrors the script-tag `HypermidCheckout.init`). */\n  static init(config: HypermidCheckoutConfig): HypermidCheckout {\n    const c = new HypermidCheckout(config);\n    c.mount();\n    return c;\n  }\n\n  mount(): this {\n    if (typeof document === \"undefined\") return this; // SSR no-op\n    if (!this.config.checkoutId) {\n      console.error(\"[HypermidCheckout] `checkoutId` is required\");\n      return this;\n    }\n    const container = document.getElementById(this.config.containerId);\n    if (!container) {\n      console.error(\"[HypermidCheckout] Element #\" + this.config.containerId + \" not found\");\n      return this;\n    }\n    this.container = container;\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = buildUrl(this.config);\n    iframe.title = \"Hypermid Checkout\";\n    iframe.allow = \"clipboard-write; payment; web-share\";\n    iframe.setAttribute(\n      \"sandbox\",\n      \"allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation-by-user-activation\",\n    );\n    const width = this.config.width || \"400px\";\n    const height = this.config.height || \"640px\";\n    const radius = this.config.borderRadius || \"24px\";\n    iframe.style.cssText = [\n      \"width:\" + width,\n      \"height:\" + height,\n      \"max-width:100%\",\n      \"border:none\",\n      \"border-radius:\" + radius,\n      \"box-shadow:0 4px 24px rgba(0,0,0,0.15)\",\n      \"display:block\",\n      \"margin:0 auto\",\n      \"color-scheme:normal\",\n    ].join(\";\");\n\n    this.iframe = iframe;\n    container.innerHTML = \"\";\n    container.appendChild(iframe);\n    this.listen();\n    return this;\n  }\n\n  private listen(): void {\n    const floor = parseInt(String(this.config.height), 10) || 640;\n    this.onMessage = (event: MessageEvent) => {\n      // Accept only messages from a Hypermid origin AND this checkout's own\n      // iframe (supports multiple embeds per page).\n      if (ALLOWED_ORIGINS.indexOf(event.origin) === -1) return;\n      if (!this.iframe || event.source !== this.iframe.contentWindow) return;\n      const data = event.data as { type?: string; payload?: any };\n      if (!data || typeof data.type !== \"string\" || data.type.indexOf(\"hypermid:\") !== 0) return;\n\n      switch (data.type.slice(\"hypermid:\".length)) {\n        case \"ready\":\n          this.config.onReady?.();\n          break;\n        case \"success\":\n          this.config.onSuccess?.(data.payload as HypermidCheckoutSuccess);\n          break;\n        case \"error\":\n          this.config.onError?.(data.payload as HypermidCheckoutError);\n          break;\n        case \"close\":\n          this.config.onClose?.();\n          break;\n        case \"resize\":\n          // Grow-only: never shrink below the configured/default height, so a\n          // transient small measurement can't collapse the embed.\n          if (this.iframe && data.payload && typeof data.payload.height === \"number\") {\n            const h = Math.max(data.payload.height, floor);\n            this.iframe.style.height = h + \"px\";\n            this.config.onResize?.(h);\n          }\n          break;\n      }\n    };\n    window.addEventListener(\"message\", this.onMessage);\n  }\n\n  /** Merge new config and reload the iframe URL (e.g. swap in a new checkoutId). */\n  update(partial: Partial<HypermidCheckoutConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.iframe) this.iframe.src = buildUrl(this.config);\n  }\n\n  /** Remove the embed + its listener. */\n  destroy(): void {\n    if (this.onMessage) window.removeEventListener(\"message\", this.onMessage);\n    if (this.container) this.container.innerHTML = \"\";\n    this.onMessage = null;\n    this.iframe = null;\n    this.container = null;\n  }\n}\n\nexport default HypermidCheckout;\n\n// Script-tag (UMD) convenience: expose globally + auto-init from data attributes.\nif (typeof window !== \"undefined\") {\n  (window as any).HypermidCheckout = HypermidCheckout;\n  if (typeof document !== \"undefined\") {\n    document.addEventListener(\"DOMContentLoaded\", () => {\n      const el = document.querySelector(\"[data-hypermid-checkout]\") as HTMLElement | null;\n      if (!el) return;\n      const checkoutId = el.getAttribute(\"data-checkout-id\");\n      if (!checkoutId) return;\n      HypermidCheckout.init({\n        containerId: el.id || \"hypermid-checkout\",\n        checkoutId,\n        theme: (el.getAttribute(\"data-theme\") as \"dark\" | \"light\") || \"dark\",\n        label: el.getAttribute(\"data-label\") || undefined,\n        accent: el.getAttribute(\"data-accent\") || undefined,\n      });\n    });\n  }\n}\n"],"names":[],"mappings":"AAkCA,MAAM,WAAW;AACjB,MAAM,kBAAkB,CAAC,UAAU,qBAAqB;AAiDxD,MAAM,MAAM,CAAC,MAAc,mBAAmB,EAAE,QAAQ,KAAK,EAAE,CAAC;AAEhE,SAAS,SAAS,QAAwC;AACxD,QAAM,IAAc,CAAA;AAEpB,IAAE,KAAK,gBAAgB,mBAAmB,OAAO,UAAU,CAAC;AAC5D,MAAI,OAAO,MAAO,GAAE,KAAK,WAAW,mBAAmB,OAAO,KAAK,CAAC;AACpE,MAAI,OAAO,MAAO,GAAE,KAAK,WAAW,mBAAmB,OAAO,KAAK,CAAC;AAEpE,MAAI,OAAO,OAAQ,GAAE,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC;AACxD,MAAI,OAAO,OAAQ,GAAE,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC;AACxD,MAAI,OAAO,OAAQ,GAAE,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC;AACxD,MAAI,OAAO,OAAQ,GAAE,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC;AACxD,MAAI,OAAO,YAAa,GAAE,KAAK,iBAAiB,IAAI,OAAO,WAAW,CAAC;AACvE,MAAI,OAAO,UAAW,GAAE,KAAK,eAAe,IAAI,OAAO,SAAS,CAAC;AACjE,MAAI,OAAO,WAAY,GAAE,KAAK,UAAU,mBAAmB,OAAO,UAAU,CAAC;AAE7E,IAAE,KAAK,SAAS;AAChB,SAAO,WAAW,eAAe,EAAE,KAAK,GAAG;AAC7C;AAEO,MAAM,iBAAiB;AAAA,EAM5B,YAAY,QAAgC;AAJ5C,SAAQ,YAAgC;AACxC,SAAQ,SAAmC;AAC3C,SAAQ,YAAgD;AAGtD,SAAK,SAAS,EAAE,OAAO,QAAQ,GAAG,OAAA;AAAA,EACpC;AAAA;AAAA,EAGA,OAAO,KAAK,QAAkD;AAC5D,UAAM,IAAI,IAAI,iBAAiB,MAAM;AACrC,MAAE,MAAA;AACF,WAAO;AAAA,EACT;AAAA,EAEA,QAAc;AACZ,QAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,QAAI,CAAC,KAAK,OAAO,YAAY;AAC3B,cAAQ,MAAM,6CAA6C;AAC3D,aAAO;AAAA,IACT;AACA,UAAM,YAAY,SAAS,eAAe,KAAK,OAAO,WAAW;AACjE,QAAI,CAAC,WAAW;AACd,cAAQ,MAAM,iCAAiC,KAAK,OAAO,cAAc,YAAY;AACrF,aAAO;AAAA,IACT;AACA,SAAK,YAAY;AAEjB,UAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,WAAO,MAAM,SAAS,KAAK,MAAM;AACjC,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IAAA;AAEF,UAAM,QAAQ,KAAK,OAAO,SAAS;AACnC,UAAM,SAAS,KAAK,OAAO,UAAU;AACrC,UAAM,SAAS,KAAK,OAAO,gBAAgB;AAC3C,WAAO,MAAM,UAAU;AAAA,MACrB,WAAW;AAAA,MACX,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA,EACA,KAAK,GAAG;AAEV,SAAK,SAAS;AACd,cAAU,YAAY;AACtB,cAAU,YAAY,MAAM;AAC5B,SAAK,OAAA;AACL,WAAO;AAAA,EACT;AAAA,EAEQ,SAAe;AACrB,UAAM,QAAQ,SAAS,OAAO,KAAK,OAAO,MAAM,GAAG,EAAE,KAAK;AAC1D,SAAK,YAAY,CAAC,UAAwB;AArI9C;AAwIM,UAAI,gBAAgB,QAAQ,MAAM,MAAM,MAAM,GAAI;AAClD,UAAI,CAAC,KAAK,UAAU,MAAM,WAAW,KAAK,OAAO,cAAe;AAChE,YAAM,OAAO,MAAM;AACnB,UAAI,CAAC,QAAQ,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,QAAQ,WAAW,MAAM,EAAG;AAEpF,cAAQ,KAAK,KAAK,MAAM,YAAY,MAAM,GAAA;AAAA,QACxC,KAAK;AACH,2BAAK,QAAO,YAAZ;AACA;AAAA,QACF,KAAK;AACH,2BAAK,QAAO,cAAZ,4BAAwB,KAAK;AAC7B;AAAA,QACF,KAAK;AACH,2BAAK,QAAO,YAAZ,4BAAsB,KAAK;AAC3B;AAAA,QACF,KAAK;AACH,2BAAK,QAAO,YAAZ;AACA;AAAA,QACF,KAAK;AAGH,cAAI,KAAK,UAAU,KAAK,WAAW,OAAO,KAAK,QAAQ,WAAW,UAAU;AAC1E,kBAAM,IAAI,KAAK,IAAI,KAAK,QAAQ,QAAQ,KAAK;AAC7C,iBAAK,OAAO,MAAM,SAAS,IAAI;AAC/B,6BAAK,QAAO,aAAZ,4BAAuB;AAAA,UACzB;AACA;AAAA,MAAA;AAAA,IAEN;AACA,WAAO,iBAAiB,WAAW,KAAK,SAAS;AAAA,EACnD;AAAA;AAAA,EAGA,OAAO,SAAgD;AACrD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,QAAA;AACnC,QAAI,KAAK,OAAQ,MAAK,OAAO,MAAM,SAAS,KAAK,MAAM;AAAA,EACzD;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI,KAAK,UAAW,QAAO,oBAAoB,WAAW,KAAK,SAAS;AACxE,QAAI,KAAK,UAAW,MAAK,UAAU,YAAY;AAC/C,SAAK,YAAY;AACjB,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AACF;AAKA,IAAI,OAAO,WAAW,aAAa;AAChC,SAAe,mBAAmB;AACnC,MAAI,OAAO,aAAa,aAAa;AACnC,aAAS,iBAAiB,oBAAoB,MAAM;AAClD,YAAM,KAAK,SAAS,cAAc,0BAA0B;AAC5D,UAAI,CAAC,GAAI;AACT,YAAM,aAAa,GAAG,aAAa,kBAAkB;AACrD,UAAI,CAAC,WAAY;AACjB,uBAAiB,KAAK;AAAA,QACpB,aAAa,GAAG,MAAM;AAAA,QACtB;AAAA,QACA,OAAQ,GAAG,aAAa,YAAY,KAA0B;AAAA,QAC9D,OAAO,GAAG,aAAa,YAAY,KAAK;AAAA,QACxC,QAAQ,GAAG,aAAa,aAAa,KAAK;AAAA,MAAA,CAC3C;AAAA,IACH,CAAC;AAAA,EACH;AACF;"}

package/dist/checkout.js

@@ -0,0 +1,2 @@
+!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).HypermidCheckout={})}(this,function(e){"use strict";const t="https://app.hypermid.io",i=[t,"https://hypermid.io"],o=e=>encodeURIComponent(e.replace("#",""));function n(e){const i=[];return i.push("checkoutId="+encodeURIComponent(e.checkoutId)),e.theme&&i.push("theme="+encodeURIComponent(e.theme)),e.label&&i.push("label="+encodeURIComponent(e.label)),e.accent&&i.push("accent="+o(e.accent)),e.bgPage&&i.push("bgPage="+o(e.bgPage)),e.bgCard&&i.push("bgCard="+o(e.bgCard)),e.border&&i.push("border="+o(e.border)),e.textPrimary&&i.push("textPrimary="+o(e.textPrimary)),e.textMuted&&i.push("textMuted="+o(e.textMuted)),e.fontFamily&&i.push("font="+encodeURIComponent(e.fontFamily)),i.push("embed=1"),t+"/checkout?"+i.join("&")}class s{constructor(e){this.container=null,this.iframe=null,this.onMessage=null,this.config={theme:"dark",...e}}static init(e){const t=new s(e);return t.mount(),t}mount(){if("undefined"==typeof document)return this;if(!this.config.checkoutId)return console.error("[HypermidCheckout] `checkoutId` is required"),this;const e=document.getElementById(this.config.containerId);if(!e)return console.error("[HypermidCheckout] Element #"+this.config.containerId+" not found"),this;this.container=e;const t=document.createElement("iframe");t.src=n(this.config),t.title="Hypermid Checkout",t.allow="clipboard-write; payment; web-share",t.setAttribute("sandbox","allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation-by-user-activation");const i=this.config.width||"400px",o=this.config.height||"640px",s=this.config.borderRadius||"24px";return t.style.cssText=["width:"+i,"height:"+o,"max-width:100%","border:none","border-radius:"+s,"box-shadow:0 4px 24px rgba(0,0,0,0.15)","display:block","margin:0 auto","color-scheme:normal"].join(";"),this.iframe=t,e.innerHTML="",e.appendChild(t),this.listen(),this}listen(){const e=parseInt(String(this.config.height),10)||640;this.onMessage=t=>{var o,n,s,r,a,c,d,h,l,u;if(-1===i.indexOf(t.origin))return;if(!this.iframe||t.source!==this.iframe.contentWindow)return;const p=t.data;if(p&&"string"==typeof p.type&&0===p.type.indexOf("hypermid:"))switch(p.type.slice(9)){case"ready":null==(n=(o=this.config).onReady)||n.call(o);break;case"success":null==(r=(s=this.config).onSuccess)||r.call(s,p.payload);break;case"error":null==(c=(a=this.config).onError)||c.call(a,p.payload);break;case"close":null==(h=(d=this.config).onClose)||h.call(d);break;case"resize":if(this.iframe&&p.payload&&"number"==typeof p.payload.height){const t=Math.max(p.payload.height,e);this.iframe.style.height=t+"px",null==(u=(l=this.config).onResize)||u.call(l,t)}}},window.addEventListener("message",this.onMessage)}update(e){this.config={...this.config,...e},this.iframe&&(this.iframe.src=n(this.config))}destroy(){this.onMessage&&window.removeEventListener("message",this.onMessage),this.container&&(this.container.innerHTML=""),this.onMessage=null,this.iframe=null,this.container=null}}"undefined"!=typeof window&&(window.HypermidCheckout=s,"undefined"!=typeof document&&document.addEventListener("DOMContentLoaded",()=>{const e=document.querySelector("[data-hypermid-checkout]");if(!e)return;const t=e.getAttribute("data-checkout-id");t&&s.init({containerId:e.id||"hypermid-checkout",checkoutId:t,theme:e.getAttribute("data-theme")||"dark",label:e.getAttribute("data-label")||void 0,accent:e.getAttribute("data-accent")||void 0})})),e.HypermidCheckout=s,e.default=s,Object.defineProperties(e,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}})});
+//# sourceMappingURL=checkout.js.map

package/dist/checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * @hypermid/checkout\n *\n * Embeddable crypto checkout for Hypermid — \"pay with any token, the merchant\n * receives the token they asked for.\" Mounts the live Hypermid checkout app\n * (wallet connect, pay-token picker, approval, on-chain-verified settlement) in\n * a sandboxed iframe, so it always reflects production with zero maintenance on\n * the integrator's side. This is the typed, npm-distributed counterpart of the\n * hosted `embed.js` script tag; both share the same iframe contract.\n *\n * The merchant creates a checkout server-side (POST /v1/checkout with their\n * sk_live key) and passes the returned `checkoutId` here. The destination —\n * amount, token, chain, recipient — is bound to that session on the server and\n * can never be overridden from the client (the only thing the payer chooses is\n * which token to pay with).\n *\n * Usage (npm):\n *   import { HypermidCheckout } from \"@hypermid/checkout\";\n *   const checkout = HypermidCheckout.init({\n *     containerId: \"pay\",\n *     checkoutId: \"co_…\",         // from POST /v1/checkout (server-side)\n *     theme: \"dark\",\n *     onSuccess: ({ checkoutId }) => fulfillOrder(checkoutId),\n *     onError:   ({ reason })     => showRetry(reason),\n *   });\n *\n * Usage (script tag / UMD):\n *   <div id=\"hypermid-checkout\"></div>\n *   <script src=\"https://hypermid.io/checkout/v1/embed.js\"></script>\n *   <script>\n *     HypermidCheckout.init({ containerId: \"hypermid-checkout\", checkoutId: \"co_…\" });\n *   </script>\n */\n\nconst APP_BASE = \"https://app.hypermid.io\";\nconst ALLOWED_ORIGINS = [APP_BASE, \"https://hypermid.io\"];\n\nexport interface HypermidCheckoutSuccess {\n  checkoutId: string;\n  status: \"completed\";\n  /** On-chain-verified delivered amount (base units), when surfaced. */\n  paidAmount?: string | null;\n  /** The payer's source-chain transaction hash. */\n  txHash?: string | null;\n}\n\nexport interface HypermidCheckoutError {\n  checkoutId: string;\n  reason?: string;\n}\n\nexport interface HypermidCheckoutConfig {\n  /** DOM element id to mount into. Required. */\n  containerId: string;\n  /** The checkout session id (co_…) from POST /v1/checkout. Required. */\n  checkoutId: string;\n\n  theme?: \"dark\" | \"light\";\n  /** Action label, e.g. \"Pay\" | \"Deposit\" (merchant-configurable, D-16). */\n  label?: string;\n\n  /** Theming overrides (hex, with or without `#`) — full token set (D-18). */\n  accent?: string;\n  bgPage?: string;\n  bgCard?: string;\n  border?: string;\n  textPrimary?: string;\n  textMuted?: string;\n  fontFamily?: string;\n\n  /** Layout. Height is a floor — the frame grows to fit taller content. */\n  width?: string;\n  height?: string;\n  borderRadius?: string;\n\n  /** Event callbacks. */\n  onReady?: () => void;\n  /** Fires on backend on-chain-VERIFIED completion — the only \"paid\" signal. */\n  onSuccess?: (payload: HypermidCheckoutSuccess) => void;\n  onError?: (payload: HypermidCheckoutError) => void;\n  onClose?: () => void;\n  onResize?: (height: number) => void;\n}\n\nconst hex = (c: string) => encodeURIComponent(c.replace(\"#\", \"\"));\n\nfunction buildUrl(config: HypermidCheckoutConfig): string {\n  const p: string[] = [];\n  // checkoutId is the ONLY money-affecting input — destination is server-bound.\n  p.push(\"checkoutId=\" + encodeURIComponent(config.checkoutId));\n  if (config.theme) p.push(\"theme=\" + encodeURIComponent(config.theme));\n  if (config.label) p.push(\"label=\" + encodeURIComponent(config.label));\n\n  if (config.accent) p.push(\"accent=\" + hex(config.accent));\n  if (config.bgPage) p.push(\"bgPage=\" + hex(config.bgPage));\n  if (config.bgCard) p.push(\"bgCard=\" + hex(config.bgCard));\n  if (config.border) p.push(\"border=\" + hex(config.border));\n  if (config.textPrimary) p.push(\"textPrimary=\" + hex(config.textPrimary));\n  if (config.textMuted) p.push(\"textMuted=\" + hex(config.textMuted));\n  if (config.fontFamily) p.push(\"font=\" + encodeURIComponent(config.fontFamily));\n\n  p.push(\"embed=1\");\n  return APP_BASE + \"/checkout?\" + p.join(\"&\");\n}\n\nexport class HypermidCheckout {\n  private config: HypermidCheckoutConfig;\n  private container: HTMLElement | null = null;\n  private iframe: HTMLIFrameElement | null = null;\n  private onMessage: ((e: MessageEvent) => void) | null = null;\n\n  constructor(config: HypermidCheckoutConfig) {\n    this.config = { theme: \"dark\", ...config };\n  }\n\n  /** Construct + mount in one call (mirrors the script-tag `HypermidCheckout.init`). */\n  static init(config: HypermidCheckoutConfig): HypermidCheckout {\n    const c = new HypermidCheckout(config);\n    c.mount();\n    return c;\n  }\n\n  mount(): this {\n    if (typeof document === \"undefined\") return this; // SSR no-op\n    if (!this.config.checkoutId) {\n      console.error(\"[HypermidCheckout] `checkoutId` is required\");\n      return this;\n    }\n    const container = document.getElementById(this.config.containerId);\n    if (!container) {\n      console.error(\"[HypermidCheckout] Element #\" + this.config.containerId + \" not found\");\n      return this;\n    }\n    this.container = container;\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = buildUrl(this.config);\n    iframe.title = \"Hypermid Checkout\";\n    iframe.allow = \"clipboard-write; payment; web-share\";\n    iframe.setAttribute(\n      \"sandbox\",\n      \"allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-forms allow-top-navigation-by-user-activation\",\n    );\n    const width = this.config.width || \"400px\";\n    const height = this.config.height || \"640px\";\n    const radius = this.config.borderRadius || \"24px\";\n    iframe.style.cssText = [\n      \"width:\" + width,\n      \"height:\" + height,\n      \"max-width:100%\",\n      \"border:none\",\n      \"border-radius:\" + radius,\n      \"box-shadow:0 4px 24px rgba(0,0,0,0.15)\",\n      \"display:block\",\n      \"margin:0 auto\",\n      \"color-scheme:normal\",\n    ].join(\";\");\n\n    this.iframe = iframe;\n    container.innerHTML = \"\";\n    container.appendChild(iframe);\n    this.listen();\n    return this;\n  }\n\n  private listen(): void {\n    const floor = parseInt(String(this.config.height), 10) || 640;\n    this.onMessage = (event: MessageEvent) => {\n      // Accept only messages from a Hypermid origin AND this checkout's own\n      // iframe (supports multiple embeds per page).\n      if (ALLOWED_ORIGINS.indexOf(event.origin) === -1) return;\n      if (!this.iframe || event.source !== this.iframe.contentWindow) return;\n      const data = event.data as { type?: string; payload?: any };\n      if (!data || typeof data.type !== \"string\" || data.type.indexOf(\"hypermid:\") !== 0) return;\n\n      switch (data.type.slice(\"hypermid:\".length)) {\n        case \"ready\":\n          this.config.onReady?.();\n          break;\n        case \"success\":\n          this.config.onSuccess?.(data.payload as HypermidCheckoutSuccess);\n          break;\n        case \"error\":\n          this.config.onError?.(data.payload as HypermidCheckoutError);\n          break;\n        case \"close\":\n          this.config.onClose?.();\n          break;\n        case \"resize\":\n          // Grow-only: never shrink below the configured/default height, so a\n          // transient small measurement can't collapse the embed.\n          if (this.iframe && data.payload && typeof data.payload.height === \"number\") {\n            const h = Math.max(data.payload.height, floor);\n            this.iframe.style.height = h + \"px\";\n            this.config.onResize?.(h);\n          }\n          break;\n      }\n    };\n    window.addEventListener(\"message\", this.onMessage);\n  }\n\n  /** Merge new config and reload the iframe URL (e.g. swap in a new checkoutId). */\n  update(partial: Partial<HypermidCheckoutConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.iframe) this.iframe.src = buildUrl(this.config);\n  }\n\n  /** Remove the embed + its listener. */\n  destroy(): void {\n    if (this.onMessage) window.removeEventListener(\"message\", this.onMessage);\n    if (this.container) this.container.innerHTML = \"\";\n    this.onMessage = null;\n    this.iframe = null;\n    this.container = null;\n  }\n}\n\nexport default HypermidCheckout;\n\n// Script-tag (UMD) convenience: expose globally + auto-init from data attributes.\nif (typeof window !== \"undefined\") {\n  (window as any).HypermidCheckout = HypermidCheckout;\n  if (typeof document !== \"undefined\") {\n    document.addEventListener(\"DOMContentLoaded\", () => {\n      const el = document.querySelector(\"[data-hypermid-checkout]\") as HTMLElement | null;\n      if (!el) return;\n      const checkoutId = el.getAttribute(\"data-checkout-id\");\n      if (!checkoutId) return;\n      HypermidCheckout.init({\n        containerId: el.id || \"hypermid-checkout\",\n        checkoutId,\n        theme: (el.getAttribute(\"data-theme\") as \"dark\" | \"light\") || \"dark\",\n        label: el.getAttribute(\"data-label\") || undefined,\n        accent: el.getAttribute(\"data-accent\") || undefined,\n      });\n    });\n  }\n}\n"],"names":["APP_BASE","ALLOWED_ORIGINS","hex","c","encodeURIComponent","replace","buildUrl","config","p","push","checkoutId","theme","label","accent","bgPage","bgCard","border","textPrimary","textMuted","fontFamily","join","HypermidCheckout","constructor","this","container","iframe","onMessage","init","mount","document","console","error","getElementById","containerId","createElement","src","title","allow","setAttribute","width","height","radius","borderRadius","style","cssText","innerHTML","appendChild","listen","floor","parseInt","String","event","indexOf","origin","source","contentWindow","data","type","slice","_b","_a","onReady","call","_d","_c","onSuccess","payload","_f","_e","onError","_h","_g","onClose","h","Math","max","_j","_i","onResize","window","addEventListener","update","partial","destroy","removeEventListener","el","querySelector","getAttribute","id"],"mappings":"uPAkCA,MAAMA,EAAW,0BACXC,EAAkB,CAACD,EAAU,uBAiD7BE,EAAOC,GAAcC,mBAAmBD,EAAEE,QAAQ,IAAK,KAE7D,SAASC,EAASC,GAChB,MAAMC,EAAc,GAepB,OAbAA,EAAEC,KAAK,cAAgBL,mBAAmBG,EAAOG,aAC7CH,EAAOI,OAAOH,EAAEC,KAAK,SAAWL,mBAAmBG,EAAOI,QAC1DJ,EAAOK,OAAOJ,EAAEC,KAAK,SAAWL,mBAAmBG,EAAOK,QAE1DL,EAAOM,QAAQL,EAAEC,KAAK,UAAYP,EAAIK,EAAOM,SAC7CN,EAAOO,QAAQN,EAAEC,KAAK,UAAYP,EAAIK,EAAOO,SAC7CP,EAAOQ,QAAQP,EAAEC,KAAK,UAAYP,EAAIK,EAAOQ,SAC7CR,EAAOS,QAAQR,EAAEC,KAAK,UAAYP,EAAIK,EAAOS,SAC7CT,EAAOU,aAAaT,EAAEC,KAAK,eAAiBP,EAAIK,EAAOU,cACvDV,EAAOW,WAAWV,EAAEC,KAAK,aAAeP,EAAIK,EAAOW,YACnDX,EAAOY,YAAYX,EAAEC,KAAK,QAAUL,mBAAmBG,EAAOY,aAElEX,EAAEC,KAAK,WACAT,EAAW,aAAeQ,EAAEY,KAAK,IAC1C,CAEO,MAAMC,EAMX,WAAAC,CAAYf,GAJZgB,KAAQC,UAAgC,KACxCD,KAAQE,OAAmC,KAC3CF,KAAQG,UAAgD,KAGtDH,KAAKhB,OAAS,CAAEI,MAAO,UAAWJ,EACpC,CAGA,WAAOoB,CAAKpB,GACV,MAAMJ,EAAI,IAAIkB,EAAiBd,GAE/B,OADAJ,EAAEyB,QACKzB,CACT,CAEA,KAAAyB,GACE,GAAwB,oBAAbC,SAA0B,OAAON,KAC5C,IAAKA,KAAKhB,OAAOG,WAEf,OADAoB,QAAQC,MAAM,+CACPR,KAET,MAAMC,EAAYK,SAASG,eAAeT,KAAKhB,OAAO0B,aACtD,IAAKT,EAEH,OADAM,QAAQC,MAAM,+BAAiCR,KAAKhB,OAAO0B,YAAc,cAClEV,KAETA,KAAKC,UAAYA,EAEjB,MAAMC,EAASI,SAASK,cAAc,UACtCT,EAAOU,IAAM7B,EAASiB,KAAKhB,QAC3BkB,EAAOW,MAAQ,oBACfX,EAAOY,MAAQ,sCACfZ,EAAOa,aACL,UACA,mIAEF,MAAMC,EAAQhB,KAAKhB,OAAOgC,OAAS,QAC7BC,EAASjB,KAAKhB,OAAOiC,QAAU,QAC/BC,EAASlB,KAAKhB,OAAOmC,cAAgB,OAiB3C,OAhBAjB,EAAOkB,MAAMC,QAAU,CACrB,SAAWL,EACX,UAAYC,EACZ,iBACA,cACA,iBAAmBC,EACnB,yCACA,gBACA,gBACA,uBACArB,KAAK,KAEPG,KAAKE,OAASA,EACdD,EAAUqB,UAAY,GACtBrB,EAAUsB,YAAYrB,GACtBF,KAAKwB,SACExB,IACT,CAEQ,MAAAwB,GACN,MAAMC,EAAQC,SAASC,OAAO3B,KAAKhB,OAAOiC,QAAS,KAAO,IAC1DjB,KAAKG,UAAayB,4BAGhB,IAA8C,IAA1ClD,EAAgBmD,QAAQD,EAAME,QAAgB,OAClD,IAAK9B,KAAKE,QAAU0B,EAAMG,SAAW/B,KAAKE,OAAO8B,cAAe,OAChE,MAAMC,EAAOL,EAAMK,KACnB,GAAKA,GAA6B,iBAAdA,EAAKC,MAAwD,IAAnCD,EAAKC,KAAKL,QAAQ,aAEhE,OAAQI,EAAKC,KAAKC,MAAM,IACtB,IAAK,QACH,OAAAC,GAAAC,EAAArC,KAAKhB,QAAOsD,UAAZF,EAAAG,KAAAF,GACA,MACF,IAAK,UACH,OAAAG,GAAAC,EAAAzC,KAAKhB,QAAO0D,YAAZF,EAAAD,KAAAE,EAAwBR,EAAKU,SAC7B,MACF,IAAK,QACH,OAAAC,GAAAC,EAAA7C,KAAKhB,QAAO8D,UAAZF,EAAAL,KAAAM,EAAsBZ,EAAKU,SAC3B,MACF,IAAK,QACH,OAAAI,GAAAC,EAAAhD,KAAKhB,QAAOiE,UAAZF,EAAAR,KAAAS,GACA,MACF,IAAK,SAGH,GAAIhD,KAAKE,QAAU+B,EAAKU,SAA0C,iBAAxBV,EAAKU,QAAQ1B,OAAqB,CAC1E,MAAMiC,EAAIC,KAAKC,IAAInB,EAAKU,QAAQ1B,OAAQQ,GACxCzB,KAAKE,OAAOkB,MAAMH,OAASiC,EAAI,KAC/B,OAAAG,GAAAC,EAAAtD,KAAKhB,QAAOuE,WAAZF,EAAAd,KAAAe,EAAuBJ,EACzB,IAINM,OAAOC,iBAAiB,UAAWzD,KAAKG,UAC1C,CAGA,MAAAuD,CAAOC,GACL3D,KAAKhB,OAAS,IAAKgB,KAAKhB,UAAW2E,GAC/B3D,KAAKE,SAAQF,KAAKE,OAAOU,IAAM7B,EAASiB,KAAKhB,QACnD,CAGA,OAAA4E,GACM5D,KAAKG,WAAWqD,OAAOK,oBAAoB,UAAW7D,KAAKG,WAC3DH,KAAKC,YAAWD,KAAKC,UAAUqB,UAAY,IAC/CtB,KAAKG,UAAY,KACjBH,KAAKE,OAAS,KACdF,KAAKC,UAAY,IACnB,EAMoB,oBAAXuD,SACRA,OAAe1D,iBAAmBA,EACX,oBAAbQ,UACTA,SAASmD,iBAAiB,mBAAoB,KAC5C,MAAMK,EAAKxD,SAASyD,cAAc,4BAClC,IAAKD,EAAI,OACT,MAAM3E,EAAa2E,EAAGE,aAAa,oBAC9B7E,GACLW,EAAiBM,KAAK,CACpBM,YAAaoD,EAAGG,IAAM,oBACtB9E,aACAC,MAAQ0E,EAAGE,aAAa,eAAsC,OAC9D3E,MAAOyE,EAAGE,aAAa,oBAAiB,EACxC1E,OAAQwE,EAAGE,aAAa,qBAAkB"}

package/dist/index.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @hypermid/checkout
+ *
+ * Embeddable crypto checkout for Hypermid — "pay with any token, the merchant
+ * receives the token they asked for." Mounts the live Hypermid checkout app
+ * (wallet connect, pay-token picker, approval, on-chain-verified settlement) in
+ * a sandboxed iframe, so it always reflects production with zero maintenance on
+ * the integrator's side. This is the typed, npm-distributed counterpart of the
+ * hosted `embed.js` script tag; both share the same iframe contract.
+ *
+ * The merchant creates a checkout server-side (POST /v1/checkout with their
+ * sk_live key) and passes the returned `checkoutId` here. The destination —
+ * amount, token, chain, recipient — is bound to that session on the server and
+ * can never be overridden from the client (the only thing the payer chooses is
+ * which token to pay with).
+ *
+ * Usage (npm):
+ *   import { HypermidCheckout } from "@hypermid/checkout";
+ *   const checkout = HypermidCheckout.init({
+ *     containerId: "pay",
+ *     checkoutId: "co_…",         // from POST /v1/checkout (server-side)
+ *     theme: "dark",
+ *     onSuccess: ({ checkoutId }) => fulfillOrder(checkoutId),
+ *     onError:   ({ reason })     => showRetry(reason),
+ *   });
+ *
+ * Usage (script tag / UMD):
+ *   <div id="hypermid-checkout"></div>
+ *   <script src="https://hypermid.io/checkout/v1/embed.js"></script>
+ *   <script>
+ *     HypermidCheckout.init({ containerId: "hypermid-checkout", checkoutId: "co_…" });
+ *   </script>
+ */
+export interface HypermidCheckoutSuccess {
+    checkoutId: string;
+    status: "completed";
+    /** On-chain-verified delivered amount (base units), when surfaced. */
+    paidAmount?: string | null;
+    /** The payer's source-chain transaction hash. */
+    txHash?: string | null;
+}
+export interface HypermidCheckoutError {
+    checkoutId: string;
+    reason?: string;
+}
+export interface HypermidCheckoutConfig {
+    /** DOM element id to mount into. Required. */
+    containerId: string;
+    /** The checkout session id (co_…) from POST /v1/checkout. Required. */
+    checkoutId: string;
+    theme?: "dark" | "light";
+    /** Action label, e.g. "Pay" | "Deposit" (merchant-configurable, D-16). */
+    label?: string;
+    /** Theming overrides (hex, with or without `#`) — full token set (D-18). */
+    accent?: string;
+    bgPage?: string;
+    bgCard?: string;
+    border?: string;
+    textPrimary?: string;
+    textMuted?: string;
+    fontFamily?: string;
+    /** Layout. Height is a floor — the frame grows to fit taller content. */
+    width?: string;
+    height?: string;
+    borderRadius?: string;
+    /** Event callbacks. */
+    onReady?: () => void;
+    /** Fires on backend on-chain-VERIFIED completion — the only "paid" signal. */
+    onSuccess?: (payload: HypermidCheckoutSuccess) => void;
+    onError?: (payload: HypermidCheckoutError) => void;
+    onClose?: () => void;
+    onResize?: (height: number) => void;
+}
+export declare class HypermidCheckout {
+    private config;
+    private container;
+    private iframe;
+    private onMessage;
+    constructor(config: HypermidCheckoutConfig);
+    /** Construct + mount in one call (mirrors the script-tag `HypermidCheckout.init`). */
+    static init(config: HypermidCheckoutConfig): HypermidCheckout;
+    mount(): this;
+    private listen;
+    /** Merge new config and reload the iframe URL (e.g. swap in a new checkoutId). */
+    update(partial: Partial<HypermidCheckoutConfig>): void;
+    /** Remove the embed + its listener. */
+    destroy(): void;
+}
+export default HypermidCheckout;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IAEnB,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,uBAAuB;IACvB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACvD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAuBD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAA4C;gBAEjD,MAAM,EAAE,sBAAsB;IAI1C,sFAAsF;IACtF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,GAAG,gBAAgB;IAM7D,KAAK,IAAI,IAAI;IA2Cb,OAAO,CAAC,MAAM;IAqCd,kFAAkF;IAClF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;IAKtD,uCAAuC;IACvC,OAAO,IAAI,IAAI;CAOhB;AAED,eAAe,gBAAgB,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@hypermid/checkout",
+  "version": "0.1.0",
+  "description": "Embeddable crypto checkout for Hypermid — pay with any token, the merchant receives the token they asked for. Drop in with a single script tag or npm import.",
+  "type": "module",
+  "main": "dist/checkout.js",
+  "module": "dist/checkout.esm.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/checkout.esm.js",
+      "require": "./dist/checkout.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build && tsc --emitDeclarationOnly --declaration --outDir dist",
+    "preview": "vite preview",
+    "typecheck": "tsc --noEmit",
+    "test": "tsx --test test/*.test.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "viem": "^2.21.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.61.0",
+    "terser": "^5.31.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.4.0",
+    "vite": "^5.4.0"
+  },
+  "keywords": [
+    "hypermid",
+    "checkout",
+    "crypto",
+    "payments",
+    "web3",
+    "stablecoin",
+    "embeddable"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hypermid/checkout.git"
+  }
+}