@melio-eng/web-sdk 1.1.0-pr.93.4b31895 → 1.1.0

package/dist/flows/Flow.d.ts

@@ -13,25 +13,11 @@ export declare class Flow implements FlowInstance {
     private eventListeners;
     protected keepAliveInterval: number | null;
     private messageHandler;
-    private loadWatchdog;
-    private watchdogReports;
-    private iframeLoaded;
-    private readyForInteraction;
     constructor(containerId: string, config: BaseFlowConfig, partnerName: string, environment: Environment, branchOverride?: string | undefined);
     /**
      * Initialize the flow by creating and injecting the iframe
      */
     initialize(): Promise<void>;
-    /**
-     * Report a flow that has neither loaded nor become interactive within the budget.
-     *
-     * Diagnostic only: this logs and does nothing else. It separates "the iframe
-     * never loaded" from "it loaded but never reported READY_FOR_INTERACTION",
-     * which is the difference between a transport problem and the embedded app
-     * stalling after its document arrived.
-     */
-    private startLoadWatchdog;
-    private clearLoadWatchdog;
     /**
      * Construct the specific flow URL - can be overridden by subclasses
      */
@@ -41,7 +27,6 @@ export declare class Flow implements FlowInstance {
      */
     protected createFlowUrl(): string;
     private setupEventListeners;
-    private handleMessage;
     /**
      * Emit events to registered listeners
      */

package/dist/flows/Flow.js

@@ -1,5 +1,4 @@
 import { getBaseUrl } from './utils.js';
-import { logger, redactUrl, describeError, LOAD_WATCHDOG_MS, WATCHDOG_MAX_REPORTS, } from './logger.js';
 /**
  * Flow class implementation for handling iframe flows and events
  */
@@ -15,10 +14,6 @@ export class Flow {
         this.eventListeners = new Map();
         this.keepAliveInterval = null;
         this.messageHandler = null;
-        this.loadWatchdog = null;
-        this.watchdogReports = 0;
-        this.iframeLoaded = false;
-        this.readyForInteraction = false;
         this.setupEventListeners();
     }
     /**
@@ -27,87 +22,15 @@ export class Flow {
     async initialize() {
         this.container = document.getElementById(this.containerId);
         if (!this.container) {
-            logger.error('Flow container not found in the DOM', {
-                containerId: this.containerId,
-                partnerName: this.partnerName,
-            });
             throw new Error(`Container with ID "${this.containerId}" not found`);
         }
-        let safeUrl = '<url not yet built>';
-        try {
-            const url = this.createFlowUrl();
-            safeUrl = redactUrl(url);
-            this.iframe = document.createElement('iframe');
-            this.iframe.src = url;
-            this.iframe.style.width = '100%';
-            this.iframe.style.height = '1000px';
-            this.iframe.style.border = 'none';
-            this.iframe.style.display = 'block';
-            this.iframe.addEventListener('load', () => {
-                this.iframeLoaded = true;
-                logger.debug('Flow iframe fired `load`', { url: safeUrl });
-            });
-            // Fires for network-level failures. A document that loads but then stalls
-            // internally will NOT fire this — that case is covered by the watchdog.
-            this.iframe.addEventListener('error', () => {
-                this.clearLoadWatchdog();
-                logger.error('Flow iframe failed to load', { url: safeUrl });
-            });
-            this.startLoadWatchdog(safeUrl);
-            logger.debug('Injecting flow iframe', {
-                url: safeUrl,
-                containerId: this.containerId,
-            });
-            this.container.appendChild(this.iframe);
-        }
-        catch (error) {
-            this.clearLoadWatchdog();
-            logger.error('Failed to inject flow iframe', {
-                url: safeUrl,
-                ...describeError(error),
-            });
-            throw error;
-        }
-    }
-    /**
-     * Report a flow that has neither loaded nor become interactive within the budget.
-     *
-     * Diagnostic only: this logs and does nothing else. It separates "the iframe
-     * never loaded" from "it loaded but never reported READY_FOR_INTERACTION",
-     * which is the difference between a transport problem and the embedded app
-     * stalling after its document arrived.
-     */
-    startLoadWatchdog(safeUrl) {
-        this.loadWatchdog = window.setInterval(() => {
-            if (this.iframeLoaded && this.readyForInteraction) {
-                this.clearLoadWatchdog();
-                return;
-            }
-            this.watchdogReports += 1;
-            const context = {
-                url: safeUrl,
-                waitedMs: this.watchdogReports * LOAD_WATCHDOG_MS,
-                report: `${this.watchdogReports}/${WATCHDOG_MAX_REPORTS}`,
-                containerId: this.containerId,
-                environment: this.environment,
-            };
-            if (!this.iframeLoaded) {
-                logger.error('Flow iframe has not fired `load` — the flow document appears to be stuck', context);
-            }
-            else {
-                logger.error('Flow iframe loaded but never sent READY_FOR_INTERACTION — the embedded app is stuck after its document loaded', context);
-            }
-            if (this.watchdogReports >= WATCHDOG_MAX_REPORTS) {
-                logger.error('Giving up on stuck-flow reporting — the flow never became interactive. If this is the last SDK line in the console, the page stopped executing here', context);
-                this.clearLoadWatchdog();
-            }
-        }, LOAD_WATCHDOG_MS);
-    }
-    clearLoadWatchdog() {
-        if (this.loadWatchdog !== null) {
-            clearInterval(this.loadWatchdog);
-            this.loadWatchdog = null;
-        }
+        this.iframe = document.createElement('iframe');
+        this.iframe.src = this.createFlowUrl();
+        this.iframe.style.width = '100%';
+        this.iframe.style.height = '1000px';
+        this.iframe.style.border = 'none';
+        this.iframe.style.display = 'block';
+        this.container.appendChild(this.iframe);
     }
     /**
      * Construct the specific flow URL - can be overridden by subclasses
@@ -119,6 +42,11 @@ export class Flow {
      * Create flow URL using partner name and environment
      */
     createFlowUrl() {
+        console.log('🔧 Creating flow URL...');
+        console.log('📝 Config:', this.config);
+        console.log('🏢 Partner:', this.partnerName);
+        console.log('🌍 Environment:', this.environment);
+        console.log('🔝 Branch Override:', this.branchOverride);
         const baseUrl = getBaseUrl(this.environment);
         let finalUrl = this.constructFlowUrl(baseUrl);
         // Add cdn_branch_override parameter for non-production environments
@@ -126,123 +54,70 @@ export class Flow {
             const separator = finalUrl.includes('?') ? '&' : '?';
             finalUrl += `${separator}cdn_branch_override=${this.branchOverride}`;
         }
-        logger.debug('Created flow URL', {
-            url: redactUrl(finalUrl),
-            partnerName: this.partnerName,
-            environment: this.environment,
-            branchOverride: this.branchOverride,
-            config: this.config,
-        });
+        console.log('🌐 Final URL:', finalUrl);
         return finalUrl;
     }
     setupEventListeners() {
         // Add post message handlers for internal events - setHeight, scroll etc
         // Also need to implement callbacks for flow completed exit etc in the platform-app
         this.messageHandler = (event) => {
-            try {
-                this.handleMessage(event);
+            if (!/melio\.com|melioservices\.com/.test(event.origin)) {
+                return;
             }
-            catch (error) {
-                // A throw here would escape into the host page as an uncaught listener
-                // error with no indication it came from the SDK.
-                logger.error('Failed to handle message from flow iframe', {
-                    origin: event.origin,
-                    ...describeError(error),
-                });
+            const { type, ...data } = event.data;
+            console.log('📬 Received message from iframe:', {
+                type,
+                data,
+                origin: event.origin,
+            });
+            switch (type) {
+                case 'FLOW_COMPLETED':
+                    this.emit('completed', data);
+                    break;
+                case 'FLOW_EXIT':
+                    this.emit('exit');
+                    break;
+                case 'NAVIGATED_TO_TARGET':
+                    this.emit('navigated', data);
+                    break;
+                case 'ONBOARDING_FORM_COMPLETED':
+                    this.emit('onboardingCompleted');
+                    break;
+                case 'ONBOARDING_REQUIRED':
+                    this.emit('onboardingRequired');
+                    break;
+                case 'READY_FOR_INTERACTION':
+                    this.emit('loaded');
+                    break;
+                case 'PAYMENT_SCHEDULED':
+                    this.emit('completed', { flowName: 'payment', ...data });
+                    break;
+                case 'MELIO_ERROR':
+                    if (data.code === 'failed_to_sync_bills') {
+                        this.emit('error', { errorCode: 'billsSyncFailed' });
+                    }
+                    break;
+                case 'HEIGHT_CHANGE':
+                    if (this.iframe) {
+                        this.iframe.style.height = `${data.height}px`;
+                    }
+                    break;
             }
         };
         window.addEventListener('message', this.messageHandler);
     }
-    handleMessage(event) {
-        if (!/melio\.com|melioservices\.com/.test(event.origin)) {
-            // Only surface near-misses. Host pages receive plenty of unrelated
-            // postMessage traffic and logging all of it would bury the signal.
-            if (/melio/i.test(event.origin)) {
-                logger.warn('Ignored message from an unrecognised Melio origin — check the origin allowlist', { origin: event.origin });
-            }
-            return;
-        }
-        // Destructuring a null or primitive payload throws, and this handler runs
-        // for every message that clears the origin check.
-        if (event.data === null || typeof event.data !== 'object') {
-            logger.warn('Ignored non-object message from a Melio origin', {
-                origin: event.origin,
-                dataType: event.data === null ? 'null' : typeof event.data,
-            });
-            return;
-        }
-        const { type, ...data } = event.data;
-        logger.debug('Received message from flow iframe', {
-            type,
-            data,
-            origin: event.origin,
-        });
-        switch (type) {
-            case 'FLOW_COMPLETED':
-                this.emit('completed', data);
-                break;
-            case 'FLOW_EXIT':
-                this.emit('exit');
-                break;
-            case 'NAVIGATED_TO_TARGET':
-                this.emit('navigated', data);
-                break;
-            case 'ONBOARDING_FORM_COMPLETED':
-                this.emit('onboardingCompleted');
-                break;
-            case 'ONBOARDING_REQUIRED':
-                this.emit('onboardingRequired');
-                break;
-            case 'READY_FOR_INTERACTION':
-                this.readyForInteraction = true;
-                this.clearLoadWatchdog();
-                logger.debug('Flow reported READY_FOR_INTERACTION');
-                this.emit('loaded');
-                break;
-            case 'PAYMENT_SCHEDULED':
-                this.emit('completed', { flowName: 'payment', ...data });
-                break;
-            case 'MELIO_ERROR':
-                logger.error('Embedded app reported MELIO_ERROR', { ...data });
-                if (data.code === 'failed_to_sync_bills') {
-                    this.emit('error', { errorCode: 'billsSyncFailed' });
-                }
-                else {
-                    // Only failed_to_sync_bills maps to a public ErrorData code, so any
-                    // other code is not forwarded to the host at all. Log it loudly
-                    // rather than dropping it silently.
-                    logger.error('MELIO_ERROR code has no mapping and was not forwarded to the host', { code: data.code });
-                }
-                break;
-            case 'HEIGHT_CHANGE':
-                if (this.iframe) {
-                    this.iframe.style.height = `${data.height}px`;
-                }
-                else {
-                    logger.warn('Received HEIGHT_CHANGE but the flow iframe no longer exists', { height: data.height });
-                }
-                break;
-            default:
-                logger.debug('Unhandled message type from flow iframe', { type });
-                break;
-        }
-    }
     emit(event, data) {
         const listeners = this.eventListeners.get(event);
-        if (!listeners || listeners.size === 0) {
-            if (event === 'error' || event === 'authenticationFailed') {
-                logger.warn(`Emitted '${event}' but no listener is registered — the host will not learn about it`, { data });
-            }
-            return;
+        if (listeners) {
+            listeners.forEach((callback) => {
+                try {
+                    callback(data);
+                }
+                catch (error) {
+                    console.error(`Error in ${event} event listener:`, error);
+                }
+            });
         }
-        listeners.forEach((callback) => {
-            try {
-                callback(data);
-            }
-            catch (error) {
-                logger.error(`Listener for '${event}' threw`, describeError(error));
-            }
-        });
     }
     on(event, callback) {
         if (!this.eventListeners.has(event)) {
@@ -264,25 +139,12 @@ export class Flow {
      * Close the flow and clean up resources
      */
     close() {
-        logger.debug('Closing flow', {
-            containerId: this.containerId,
-            iframeLoaded: this.iframeLoaded,
-            readyForInteraction: this.readyForInteraction,
-        });
-        this.clearLoadWatchdog();
         if (this.keepAliveInterval) {
             clearInterval(this.keepAliveInterval);
             this.keepAliveInterval = null;
         }
         if (this.iframe && this.container) {
-            try {
-                this.container.removeChild(this.iframe);
-            }
-            catch (error) {
-                // Throwing here would abandon the rest of teardown, leaving the message
-                // listener attached and the keep-alive running.
-                logger.error('Failed to remove the flow iframe during close — continuing teardown', describeError(error));
-            }
+            this.container.removeChild(this.iframe);
             this.iframe = null;
         }
         if (this.messageHandler) {

package/dist/flows/InitFlow.d.ts

@@ -13,26 +13,11 @@ export declare class InitFlow implements InitFlowInstance {
     private partnerName;
     private environment;
     private branchOverride?;
-    private loadWatchdog;
-    private watchdogReports;
-    private iframeLoaded;
-    private authResolved;
-    private keepAliveTargetLost;
     constructor(config: InitConfig, partnerName: string, environment: Environment, branchOverride?: string);
     /**
      * Initialize the init flow by creating and injecting a hidden iframe
      */
     initialize(): Promise<void>;
-    /**
-     * Report a flow that has neither loaded nor authenticated within the budget.
-     *
-     * Diagnostic only: this logs and does nothing else. It deliberately separates
-     * "the auth document never loaded" from "it loaded but never authenticated",
-     * because those point at different layers and the distinction is invisible
-     * from the host page otherwise.
-     */
-    private startLoadWatchdog;
-    private clearLoadWatchdog;
     /**
      * Construct the specific flow URL for initialization
      */
@@ -45,7 +30,6 @@ export declare class InitFlow implements InitFlowInstance {
      * Setup event listeners to only handle authentication events
      */
     private setupEventListeners;
-    private handleMessage;
     /**
      * Emit events to registered listeners
      */

package/dist/flows/InitFlow.js

@@ -1,5 +1,4 @@
 import { isEmptyString, getBaseUrl } from './utils.js';
-import { logger, redactUrl, describeError, LOAD_WATCHDOG_MS, WATCHDOG_MAX_REPORTS, KEEP_ALIVE_INTERVAL_MS, } from './logger.js';
 /**
  * Standalone InitFlow class for handling initialization with callbacks
  */
@@ -10,16 +9,7 @@ export class InitFlow {
         this.eventListeners = new Map();
         this.keepAliveInterval = null;
         this.messageHandler = null;
-        this.loadWatchdog = null;
-        this.watchdogReports = 0;
-        this.iframeLoaded = false;
-        this.authResolved = false;
-        this.keepAliveTargetLost = false;
         if (isEmptyString(config.authCode)) {
-            logger.error('Cannot create init flow: authorization code is missing', {
-                partnerName,
-                environment,
-            });
             throw new Error('Authorization code is required for init flow');
         }
         this.authorizationCode = config.authCode;
@@ -33,92 +23,15 @@ export class InitFlow {
      * Initialize the init flow by creating and injecting a hidden iframe
      */
     async initialize() {
-        let safeUrl = '<url not yet built>';
-        try {
-            const url = this.createFlowUrl();
-            safeUrl = redactUrl(url);
-            // The SDK is preloaded, so it can run before the host document has a
-            // body. Without this the failure surfaces as an opaque TypeError from
-            // appendChild.
-            if (!document.body) {
-                logger.error('Cannot inject auth iframe: document.body does not exist yet — the SDK was initialized before the host document was ready', { url: safeUrl, readyState: document.readyState });
-                throw new Error('document.body is not available for iframe injection');
-            }
-            this.container = document.body;
-            this.iframe = document.createElement('iframe');
-            this.iframe.src = url;
-            this.iframe.style.width = '1px';
-            this.iframe.style.height = '1px';
-            this.iframe.style.position = 'absolute';
-            this.iframe.style.left = '-9999px';
-            this.iframe.style.top = '-9999px';
-            this.iframe.addEventListener('load', () => {
-                this.iframeLoaded = true;
-                logger.debug('Auth iframe fired `load`', { url: safeUrl });
-            });
-            // Fires for network-level failures. A document that loads but then stalls
-            // internally will NOT fire this — that case is covered by the watchdog.
-            this.iframe.addEventListener('error', () => {
-                this.clearLoadWatchdog();
-                logger.error('Auth iframe failed to load', { url: safeUrl });
-            });
-            this.startLoadWatchdog(safeUrl);
-            logger.debug('Injecting hidden auth iframe', {
-                url: safeUrl,
-                partnerName: this.partnerName,
-                environment: this.environment,
-            });
-            this.container.appendChild(this.iframe);
-        }
-        catch (error) {
-            this.clearLoadWatchdog();
-            logger.error('Failed to inject auth iframe', {
-                url: safeUrl,
-                ...describeError(error),
-            });
-            throw error;
-        }
-    }
-    /**
-     * Report a flow that has neither loaded nor authenticated within the budget.
-     *
-     * Diagnostic only: this logs and does nothing else. It deliberately separates
-     * "the auth document never loaded" from "it loaded but never authenticated",
-     * because those point at different layers and the distinction is invisible
-     * from the host page otherwise.
-     */
-    startLoadWatchdog(safeUrl) {
-        this.loadWatchdog = window.setInterval(() => {
-            if (this.iframeLoaded && this.authResolved) {
-                this.clearLoadWatchdog();
-                return;
-            }
-            this.watchdogReports += 1;
-            const waitedMs = this.watchdogReports * LOAD_WATCHDOG_MS;
-            const context = {
-                url: safeUrl,
-                waitedMs,
-                report: `${this.watchdogReports}/${WATCHDOG_MAX_REPORTS}`,
-                partnerName: this.partnerName,
-                environment: this.environment,
-            };
-            if (!this.iframeLoaded) {
-                logger.error('Auth iframe has not fired `load` — the auth document appears to be stuck', context);
-            }
-            else {
-                logger.error('Auth iframe loaded but never reported AUTHENTICATION_SUCCESS or AUTHENTICATION_ERROR — auth is stuck inside the iframe', context);
-            }
-            if (this.watchdogReports >= WATCHDOG_MAX_REPORTS) {
-                logger.error('Giving up on stuck-flow reporting — the auth flow never resolved. If this is the last SDK line in the console, the page stopped executing here', context);
-                this.clearLoadWatchdog();
-            }
-        }, LOAD_WATCHDOG_MS);
-    }
-    clearLoadWatchdog() {
-        if (this.loadWatchdog !== null) {
-            clearInterval(this.loadWatchdog);
-            this.loadWatchdog = null;
-        }
+        this.container = document.body;
+        this.iframe = document.createElement('iframe');
+        this.iframe.src = this.createFlowUrl();
+        this.iframe.style.width = '1px';
+        this.iframe.style.height = '1px';
+        this.iframe.style.position = 'absolute';
+        this.iframe.style.left = '-9999px';
+        this.iframe.style.top = '-9999px';
+        this.container.appendChild(this.iframe);
     }
     /**
      * Construct the specific flow URL for initialization
@@ -148,80 +61,42 @@ export class InitFlow {
      */
     setupEventListeners() {
         this.messageHandler = (event) => {
-            try {
-                this.handleMessage(event);
+            if (!/melio\.com|melioservices\.com/.test(event.origin)) {
+                return;
             }
-            catch (error) {
-                // A throw here would escape into the host page as an uncaught listener
-                // error with no indication it came from the SDK.
-                logger.error('Failed to handle message from auth iframe', {
-                    origin: event.origin,
-                    ...describeError(error),
-                });
+            const { type, ...data } = event.data;
+            console.log('📬 Received message from iframe:', {
+                type,
+                data,
+                origin: event.origin,
+            });
+            switch (type) {
+                case 'AUTHENTICATION_SUCCESS':
+                    this.emit('authenticationSucceeded');
+                    break;
+                case 'AUTHENTICATION_ERROR':
+                    this.emit('authenticationFailed');
+                    break;
             }
         };
         window.addEventListener('message', this.messageHandler);
     }
-    handleMessage(event) {
-        if (!/melio\.com|melioservices\.com/.test(event.origin)) {
-            // Only surface near-misses. Host pages receive plenty of unrelated
-            // postMessage traffic and logging all of it would bury the signal.
-            if (/melio/i.test(event.origin)) {
-                logger.warn('Ignored message from an unrecognised Melio origin — check the origin allowlist', { origin: event.origin });
-            }
-            return;
-        }
-        // Destructuring a null or primitive payload throws, and this handler runs
-        // for every message that clears the origin check.
-        if (event.data === null || typeof event.data !== 'object') {
-            logger.warn('Ignored non-object message from a Melio origin', {
-                origin: event.origin,
-                dataType: event.data === null ? 'null' : typeof event.data,
-            });
-            return;
-        }
-        const { type, ...data } = event.data;
-        logger.debug('Received message from auth iframe', {
-            type,
-            data,
-            origin: event.origin,
-        });
-        switch (type) {
-            case 'AUTHENTICATION_SUCCESS':
-                this.authResolved = true;
-                this.clearLoadWatchdog();
-                logger.debug('Authentication succeeded');
-                this.emit('authenticationSucceeded');
-                break;
-            case 'AUTHENTICATION_ERROR':
-                this.authResolved = true;
-                this.clearLoadWatchdog();
-                logger.error('Authentication failed', { ...data });
-                this.emit('authenticationFailed', data);
-                break;
-            default:
-                logger.debug('Unhandled message type from auth iframe', { type });
-                break;
-        }
-    }
     /**
      * Emit events to registered listeners
      */
     /* eslint-disable @typescript-eslint/no-explicit-any */
     emit(event, data) {
         const listeners = this.eventListeners.get(event);
-        if (!listeners || listeners.size === 0) {
-            logger.warn(`Emitted '${event}' but no listener is registered — the host will not learn about it`, { data });
-            return;
+        if (listeners) {
+            listeners.forEach((callback) => {
+                try {
+                    callback(data);
+                }
+                catch (error) {
+                    console.error(`Error in ${event} event listener:`, error);
+                }
+            });
         }
-        listeners.forEach((callback) => {
-            try {
-                callback(data);
-            }
-            catch (error) {
-                logger.error(`Listener for '${event}' threw`, describeError(error));
-            }
-        });
     }
     /**
      * Register an event listener
@@ -246,24 +121,12 @@ export class InitFlow {
      * Close the flow and clean up resources
      */
     close() {
-        logger.debug('Closing init flow', {
-            iframeLoaded: this.iframeLoaded,
-            authResolved: this.authResolved,
-        });
-        this.clearLoadWatchdog();
         if (this.keepAliveInterval) {
             clearInterval(this.keepAliveInterval);
             this.keepAliveInterval = null;
         }
         if (this.iframe && this.container) {
-            try {
-                this.container.removeChild(this.iframe);
-            }
-            catch (error) {
-                // Throwing here would abandon the rest of teardown, leaving the message
-                // listener attached and the keep-alive running.
-                logger.error('Failed to remove the auth iframe during close — continuing teardown', describeError(error));
-            }
+            this.container.removeChild(this.iframe);
             this.iframe = null;
         }
         if (this.messageHandler) {
@@ -273,35 +136,10 @@ export class InitFlow {
         this.eventListeners.clear();
     }
     setupKeepAlive() {
-        if (this.keepAliveInterval !== null) {
-            logger.warn('setupKeepAlive called while a keep-alive is already running — clearing the previous interval to avoid a leak');
-            clearInterval(this.keepAliveInterval);
-            this.keepAliveInterval = null;
-        }
         this.keepAliveInterval = window.setInterval(() => {
-            if (!this.iframe || !this.iframe.contentWindow) {
-                // Logged once: the interval keeps running, so an unguarded log here
-                // would repeat every 30s for the life of the page.
-                if (!this.keepAliveTargetLost) {
-                    this.keepAliveTargetLost = true;
-                    logger.error('Keep-alive ping has no target — the auth iframe or its content window is gone, every subsequent ping is a no-op', {
-                        hasIframe: Boolean(this.iframe),
-                        iframeLoaded: this.iframeLoaded,
-                        authResolved: this.authResolved,
-                    });
-                }
-                return;
-            }
-            if (this.keepAliveTargetLost) {
-                this.keepAliveTargetLost = false;
-                logger.warn('Keep-alive target recovered');
-            }
-            try {
+            if (this.iframe && this.iframe.contentWindow) {
                 this.iframe.contentWindow.postMessage({ type: 'USER_ACTIVE_PING' }, '*');
             }
-            catch (error) {
-                logger.error('Keep-alive ping threw', describeError(error));
-            }
-        }, KEEP_ALIVE_INTERVAL_MS);
+        }, 30000); // Send ping every 30 seconds
     }
 }

package/dist/flows/utils.js

@@ -1,4 +1,3 @@
-import { logger } from './logger.js';
 /**
  * Utility function to get the base URL for a given environment
  */
@@ -17,7 +16,6 @@ export function getBaseUrl(environment) {
         case 'localhost':
             return 'http://localhost:3005';
         default:
-            logger.warn('Unknown environment — falling back to the default base URL, which may not serve this partner', { environment, fallback: 'https://partnerships.melioservices.com' });
             return 'https://partnerships.melioservices.com';
     }
 }

package/dist/index.js

@@ -1,5 +1,4 @@
 import { InitFlow, OnboardingFlow, PayFlow, JustPayFlow, SettingsFlow, PaymentsDashboardFlow, isEmptyString, } from './flows/index.js';
-import { logger, markInitStart, describeError } from './flows/logger.js';
 /**
  * Main SDK implementation - now partner agnostic
  */
@@ -17,26 +16,20 @@ export class MelioSDK {
      */
     init(authenticationCode, options) {
         if (this.initFlow) {
-            logger.warn('SDK already initialized. Returning existing init flow instance.');
+            console.log('SDK already initialized. Returning existing init flow instance.');
             return this.initFlow;
         }
-        markInitStart();
         this.partnerName = options.partnerName;
         this.environment = options.environment || 'production';
         this.branchOverride = options.branchOverride;
         this.authCode = authenticationCode;
-        logger.debug('Starting init flow', {
+        console.log('starting init flow', {
             partnerName: this.partnerName,
             environment: this.environment,
-            keepAlive: Boolean(options.keepAlive),
         });
         const initFlow = new InitFlow({ authCode: authenticationCode, containerId: '' }, this.partnerName, this.environment, this.branchOverride);
-        // `initialize()` is intentionally not awaited — `init()` is synchronous by
-        // contract — but its rejection must not become an unhandled promise, which
-        // is invisible to partners debugging from the console.
-        initFlow.initialize().catch((error) => {
-            logger.error('Init flow failed to initialize', describeError(error));
-        });
+        initFlow.initialize();
+        console.log('InitFlow initialized successfully');
         if (options.keepAlive)
             initFlow.setupKeepAlive();
         this.initFlow = initFlow;
@@ -50,9 +43,7 @@ export class MelioSDK {
             throw new Error('SDK not initialized. Please call init() before opening onboarding flow.');
         }
         const flow = new OnboardingFlow(config.containerId, config, this.partnerName, this.environment, this.authCode, this.branchOverride);
-        flow.initialize().catch((error) => {
-            logger.error(`${flow.constructor.name} failed to initialize`, describeError(error));
-        });
+        flow.initialize();
         return flow;
     }
     /**
@@ -63,9 +54,7 @@ export class MelioSDK {
             throw new Error('SDK not initialized. Please call init() before opening pay flow.');
         }
         const flow = new PayFlow(config.containerId, config, this.partnerName, this.environment, this.authCode, this.branchOverride);
-        flow.initialize().catch((error) => {
-            logger.error(`${flow.constructor.name} failed to initialize`, describeError(error));
-        });
+        flow.initialize();
         return flow;
     }
     /**
@@ -76,9 +65,7 @@ export class MelioSDK {
             throw new Error('SDK not initialized. Please call init() before opening just pay flow.');
         }
         const flow = new JustPayFlow(config.containerId, config, this.partnerName, this.environment, this.authCode, this.branchOverride);
-        flow.initialize().catch((error) => {
-            logger.error(`${flow.constructor.name} failed to initialize`, describeError(error));
-        });
+        flow.initialize();
         return flow;
     }
     /**
@@ -89,9 +76,7 @@ export class MelioSDK {
             throw new Error('SDK not initialized. Please call init() before opening settings flow.');
         }
         const flow = new SettingsFlow(config.containerId, config, this.partnerName, this.environment, this.authCode, this.branchOverride);
-        flow.initialize().catch((error) => {
-            logger.error(`${flow.constructor.name} failed to initialize`, describeError(error));
-        });
+        flow.initialize();
         return flow;
     }
     /**
@@ -102,9 +87,7 @@ export class MelioSDK {
             throw new Error('SDK not initialized. Please call init() before opening payments dashboard flow.');
         }
         const flow = new PaymentsDashboardFlow(config.containerId, config, this.partnerName, this.environment, this.authCode, this.branchOverride);
-        flow.initialize().catch((error) => {
-            logger.error(`${flow.constructor.name} failed to initialize`, describeError(error));
-        });
+        flow.initialize();
         return flow;
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melio-eng/web-sdk",
-  "version": "1.1.0-pr.93.4b31895",
+  "version": "1.1.0",
   "description": "Melio Web SDK - Embed core Melio workflows directly into partner UI with minimal effort",
   "main": "dist/index.js",
   "module": "dist/index.js",

package/dist/flows/logger.d.ts

@@ -1,39 +0,0 @@
-/**
- * Lightweight console logger for the SDK.
- *
- * Every line is prefixed with `[melio-sdk]` so partners can filter SDK output out
- * of a busy host page, and carries `msSinceInit` — elapsed time since `init()` was
- * called. The elapsed time is what makes a *hang* legible in a console capture: a
- * hard failure shows up as an error either way, but a flow that simply never
- * finishes is only visible as a gap on the clock.
- */
-/**
- * How long a flow may stay unloaded before the SDK reports it as stuck, and how
- * often it keeps repeating that report afterwards.
- *
- * Diagnostic only — reaching it logs, it does not tear the flow down.
- *
- * The repeat matters for diagnosing a page that dies rather than recovers: a
- * stuck flow keeps announcing itself every 15s, so the timestamp of the *last*
- * report marks the moment the tab stopped executing. A one-shot log cannot
- * distinguish "still hanging" from "the renderer was killed".
- */
-export declare const LOAD_WATCHDOG_MS = 15000;
-/** Stop repeating the stuck-flow report after this many rounds (~2 minutes). */
-export declare const WATCHDOG_MAX_REPORTS = 8;
-/** Interval between keep-alive pings to an initialized flow. */
-export declare const KEEP_ALIVE_INTERVAL_MS = 30000;
-/** Start the SDK clock. Called once from `init()`. */
-export declare const markInitStart: () => void;
-/**
- * Strip credential-bearing query params so a flow URL can be logged safely.
- * On a URL we cannot parse we fall back to the path, never the raw string.
- */
-export declare const redactUrl: (url: string) => string;
-/** Flatten an unknown throwable into something that survives a console capture. */
-export declare const describeError: (error: unknown) => Record<string, unknown>;
-export declare const logger: {
-    debug(message: string, context?: Record<string, unknown>): void;
-    warn(message: string, context?: Record<string, unknown>): void;
-    error(message: string, context?: Record<string, unknown>): void;
-};

package/dist/flows/logger.js

@@ -1,75 +0,0 @@
-/**
- * Lightweight console logger for the SDK.
- *
- * Every line is prefixed with `[melio-sdk]` so partners can filter SDK output out
- * of a busy host page, and carries `msSinceInit` — elapsed time since `init()` was
- * called. The elapsed time is what makes a *hang* legible in a console capture: a
- * hard failure shows up as an error either way, but a flow that simply never
- * finishes is only visible as a gap on the clock.
- */
-const PREFIX = '[melio-sdk]';
-/** Query params that may carry a credential and must never reach the console. */
-const REDACTED_PARAMS = ['token', 'authCode', 'code'];
-/**
- * How long a flow may stay unloaded before the SDK reports it as stuck, and how
- * often it keeps repeating that report afterwards.
- *
- * Diagnostic only — reaching it logs, it does not tear the flow down.
- *
- * The repeat matters for diagnosing a page that dies rather than recovers: a
- * stuck flow keeps announcing itself every 15s, so the timestamp of the *last*
- * report marks the moment the tab stopped executing. A one-shot log cannot
- * distinguish "still hanging" from "the renderer was killed".
- */
-export const LOAD_WATCHDOG_MS = 15000;
-/** Stop repeating the stuck-flow report after this many rounds (~2 minutes). */
-export const WATCHDOG_MAX_REPORTS = 8;
-/** Interval between keep-alive pings to an initialized flow. */
-export const KEEP_ALIVE_INTERVAL_MS = 30000;
-let initTimestamp = null;
-/** Start the SDK clock. Called once from `init()`. */
-export const markInitStart = () => {
-    initTimestamp = Date.now();
-};
-const buildContext = (context) => ({
-    ...(initTimestamp === null
-        ? {}
-        : { msSinceInit: Date.now() - initTimestamp }),
-    ...context,
-});
-/**
- * Strip credential-bearing query params so a flow URL can be logged safely.
- * On a URL we cannot parse we fall back to the path, never the raw string.
- */
-export const redactUrl = (url) => {
-    try {
-        const parsed = new URL(url);
-        REDACTED_PARAMS.forEach((param) => {
-            if (parsed.searchParams.has(param)) {
-                parsed.searchParams.set(param, 'redacted');
-            }
-        });
-        return parsed.toString();
-    }
-    catch {
-        return `${url.split('?')[0]}?[unparsed-query-redacted]`;
-    }
-};
-/** Flatten an unknown throwable into something that survives a console capture. */
-export const describeError = (error) => {
-    if (error instanceof Error) {
-        return { name: error.name, message: error.message, stack: error.stack };
-    }
-    return { thrown: String(error) };
-};
-export const logger = {
-    debug(message, context) {
-        console.log(`${PREFIX} ${message}`, buildContext(context));
-    },
-    warn(message, context) {
-        console.warn(`${PREFIX} ${message}`, buildContext(context));
-    },
-    error(message, context) {
-        console.error(`${PREFIX} ${message}`, buildContext(context));
-    },
-};