@nevermined-io/ui-widgets 0.4.5 → 0.5.1

package/dist/event-emitter.d.ts

@@ -0,0 +1,11 @@
+type EventHandler<T> = (payload: T) => void;
+export declare class TypedEventEmitter<Events extends object> {
+    private listeners;
+    on<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
+    off<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
+    once<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
+    removeAllListeners(event?: keyof Events): this;
+    emit<K extends keyof Events>(event: K, payload: Events[K]): void;
+}
+export {};
+//# sourceMappingURL=event-emitter.d.ts.map

package/dist/event-emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-emitter.d.ts","sourceRoot":"","sources":["../src/event-emitter.ts"],"names":[],"mappings":"AAAA,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAA;AAE3C,qBAAa,iBAAiB,CAAC,MAAM,SAAS,MAAM;IAClD,OAAO,CAAC,SAAS,CAAsD;IAEvE,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAO5E,GAAG,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAS7E,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAS9E,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI;IAS9C,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI;CAWjE"}

package/dist/iframe-manager.d.ts

@@ -0,0 +1,21 @@
+import { type WidgetMessage } from './messages.js';
+export interface IframeOptions {
+    container?: HTMLElement;
+    style?: Partial<CSSStyleDeclaration>;
+}
+export declare class IframeManager {
+    private expectedOrigin;
+    private iframe;
+    private messageHandlers;
+    private protocolErrorHandlers;
+    private messageListener;
+    private destroyed;
+    constructor(expectedOrigin: string);
+    create(url: string, options?: IframeOptions): HTMLIFrameElement;
+    destroy(): void;
+    postMessage(msg: WidgetMessage): void;
+    onMessage(handler: (msg: WidgetMessage) => void): () => void;
+    onProtocolError(handler: (reason: string) => void): () => void;
+    private ensureListener;
+}
+//# sourceMappingURL=iframe-manager.d.ts.map

package/dist/iframe-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframe-manager.d.ts","sourceRoot":"","sources":["../src/iframe-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAEhE,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACrC;AAED,qBAAa,aAAa;IAOZ,OAAO,CAAC,cAAc;IANlC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,SAAS,CAAQ;gBAEL,cAAc,EAAE,MAAM;IAQ1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,iBAAiB;IA6B/D,OAAO,IAAI,IAAI;IAYf,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAKrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI;IAO5D,eAAe,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAO9D,OAAO,CAAC,cAAc;CAiCvB"}

package/dist/index.d.ts

@@ -1,345 +1,14 @@
-export declare interface CardAction {
-    /** Currently the only emitted action; reserved as a discriminator for future ones. */
-    action: 'delegate';
-    paymentMethodId: string;
-}
-
-export declare interface CheckoutOptions {
-    did: string;
-    planId?: string;
-    container?: HTMLElement;
-    onBooted?: () => void;
-    onReady?: () => void;
-    onSuccess?: (result: CheckoutResult) => void;
-    onError?: (error: EmbedError) => void;
-    onClose?: () => void;
-}
-
-export declare interface CheckoutResult {
-    did: string;
-    planId?: string;
-    txHash?: string;
-}
-
-/**
- * Checkout widget.
- *
- * Lifecycle note for SDK consumers: when the iframe sends `nvm:close` the
- * widget instance auto-calls `destroy()` and becomes terminal — any
- * subsequent `start()` call throws. If the host page needs to re-show the
- * checkout after a close, construct a new `CheckoutWidget` (typically via
- * `nvm.checkout`) and call `start()` on the fresh instance.
- */
-export declare class CheckoutWidget {
-    private readonly session;
-    private readonly webappBase;
-    private manager;
-    private destroyed;
-    constructor(session: SessionManager, webappBase: string);
-    /**
-     * Mounts the checkout iframe into `options.container`.
-     * Throws if called after `destroy()` (including the implicit destroy on
-     * `nvm:close` — see class JSDoc).
-     */
-    start(options: CheckoutOptions): void;
-    destroy(): void;
-    private handleMessage;
-}
-
-export declare interface CreateDelegationOptions {
-    paymentMethodId: string;
-    container?: HTMLElement;
-    onBooted?: () => void;
-    onReady?: () => void;
-    onSuccess?: (result: CreateDelegationResult) => void;
-    onError?: (error: EmbedError) => void;
-    onClose?: () => void;
-}
-
-export declare interface CreateDelegationResult {
-    delegationId: string;
-    paymentMethodId: string;
-}
-
-export declare function createMessage<T>(type: WidgetMessageType, payload?: T): WidgetMessage<T>;
-
-/**
- * Card and delegation management widget.
- *
- * Surfaces three iframe-based flows (enrollment, listing, delegation creation)
- * and two SDK-direct revocations. The three iframe flows share the single
- * `manager` slot — calling any of them destroys the previously-mounted iframe
- * (same semantics as calling `enrollCard()` twice). Once any iframe is closed
- * by the user (`nvm:close`), the instance is implicitly destroyed and any
- * subsequent iframe call throws. Construct a fresh widget (via
- * `nvm.delegations`) to mount another flow after a close.
- *
- * The two `revoke*` methods do NOT use an iframe — they hit the
- * `/api/v1/widgets/...` endpoints directly with the widget session token.
- * They exist because the SDK consumer on the host page only holds the widget
- * session token; the apiKeyHash that gates the standard delegation/payment
- * endpoints never leaves the embedded iframe.
- */
-export declare class DelegationsWidget {
-    private readonly session;
-    private readonly webappBase;
-    private readonly apiBase;
-    private manager;
-    private destroyed;
-    constructor(session: SessionManager, webappBase: string, apiBase: string);
-    /**
-     * Mounts the enrollment iframe at `/embed/cards/enroll`.
-     * Throws if called after `destroy()` (including the implicit destroy on
-     * `nvm:close` — see class JSDoc).
-     */
-    enrollCard(options: EnrollCardOptions): void;
-    /**
-     * Mounts the cards-list iframe at `/embed/cards/list`. Per-row actions
-     * (currently only "Create Delegation") are forwarded via `onCardAction` so
-     * the host can mount the appropriate follow-up widget.
-     */
-    listCards(options: ListCardsOptions): void;
-    /**
-     * Mounts the delegation creation iframe at `/embed/cards/delegate` for a
-     * specific payment method. The `paymentMethodId` is required and is passed
-     * as a search param so the embed route can scope the form to that card.
-     */
-    createDelegation(options: CreateDelegationOptions): void;
-    /**
-     * Revoke (detach) a payment method via the widget-prefixed API endpoint.
-     * Resolves on 2xx; throws `WidgetApiError` on any other response or
-     * network failure.
-     */
-    revokeCard(paymentMethodId: string): Promise<void>;
-    /**
-     * Revoke a delegation via the widget-prefixed API endpoint.
-     * Resolves on 2xx; throws `WidgetApiError` on any other response or
-     * network failure.
-     */
-    revokeDelegation(delegationId: string): Promise<void>;
-    destroy(): void;
-    private assertAlive;
-    private mountIframe;
-    private postInitOnBooted;
-    private handleEnrollMessage;
-    private handleListMessage;
-    private handleCreateDelegationMessage;
-    private deleteWithSession;
-}
-
-export declare interface EmbedError {
-    code: 'UNAUTHORIZED' | 'NETWORK' | 'PAYMENT_NOT_CONFIRMED' | 'UNKNOWN';
-    message: string;
-    status?: number;
-    apiCode?: string;
-}
-
-export declare interface EnrollCardOptions {
-    container?: HTMLElement;
-    onBooted?: () => void;
-    onReady?: () => void;
-    onSuccess?: (result: EnrollCardResult) => void;
-    onError?: (error: EmbedError) => void;
-    onClose?: () => void;
-}
-
-export declare interface EnrollCardResult {
-    paymentMethodId: string;
-}
-
-export declare type Environment = (typeof ENVIRONMENTS)[number];
-
-declare const ENVIRONMENTS: readonly ["local", "sandbox", "live", "staging_sandbox", "staging_live"];
-
-declare type EventHandler<T> = (payload: T) => void;
-
-export declare class IframeManager {
-    private expectedOrigin;
-    private iframe;
-    private messageHandlers;
-    private protocolErrorHandlers;
-    private messageListener;
-    private destroyed;
-    constructor(expectedOrigin: string);
-    create(url: string, options?: IframeOptions): HTMLIFrameElement;
-    destroy(): void;
-    postMessage(msg: WidgetMessage): void;
-    onMessage(handler: (msg: WidgetMessage) => void): () => void;
-    onProtocolError(handler: (reason: string) => void): () => void;
-    private ensureListener;
-}
-
-export declare interface IframeOptions {
-    container?: HTMLElement;
-    style?: Partial<CSSStyleDeclaration>;
-}
-
-export declare interface ListCardsOptions {
-    container?: HTMLElement;
-    onBooted?: () => void;
-    onReady?: () => void;
-    onCardAction?: (action: CardAction) => void;
-    onError?: (error: EmbedError) => void;
-    onClose?: () => void;
-}
-
-export declare class NeverminedWidgets {
-    private readonly sessionManager;
-    private readonly _account;
-    private readonly environment;
-    private _checkout;
-    private _delegations;
-    private readonly events;
-    private constructor();
-    static initialize(config: WidgetConfig): Promise<NeverminedWidgets>;
-    private refreshSession;
-    on<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
-    off<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
-    get account(): WidgetAccount;
-    get hasValidSession(): boolean;
-    getSessionToken(): string;
-    get checkout(): CheckoutWidget;
-    get delegations(): DelegationsWidget;
-    /**
-     * Resets the parent widget container: tears down any live child widget (e.g.
-     * the checkout widget) and clears the internal cache. This is a reset, not a
-     * terminal state — accessing `widget.checkout` after `destroy()` lazily
-     * creates a fresh `CheckoutWidget` instance. If you need a terminal "this
-     * widget can no longer be used" semantics, call `destroy()` on the child
-     * widget directly (e.g. `widget.checkout.destroy()`), which flips its
-     * internal `destroyed` flag and makes subsequent `start()` calls throw.
-     */
-    destroy(): void;
-}
-
-declare interface NeverminedWidgetsEvents {
-    'session-expired': void;
-}
-
-export declare function parseMessage(data: unknown): ParseResult;
-
-export declare type ParseResult<T = unknown> = {
-    ok: true;
-    message: WidgetMessage<T>;
-} | {
-    ok: false;
-    reason: string;
-};
-
-export declare class SessionManager {
-    private session;
-    private expiresMs;
-    private timer;
-    constructor(session: WidgetSession);
-    isValid(): boolean;
-    getToken(): string;
-    getSession(): WidgetSession;
-    startAutoRefresh(refreshFn: () => Promise<WidgetSession>, onExpired: () => void): void;
-    stopAutoRefresh(): void;
-}
-
-export declare class TypedEventEmitter<Events extends object> {
-    private listeners;
-    on<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    off<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    once<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    removeAllListeners(event?: keyof Events): this;
-    emit<K extends keyof Events>(event: K, payload: Events[K]): void;
-}
-
-declare const WIDGET_ERRORS: {
-    readonly MISSING_INIT_TOKEN: {
-        readonly numericCode: "WDG.0001";
-        readonly message: "initToken is required and must be a non-empty string";
-    };
-    readonly INVALID_ENVIRONMENT: {
-        readonly numericCode: "WDG.0002";
-        readonly message: "environment must be one of: sandbox, live, staging_sandbox, staging_live, local";
-    };
-    readonly INVALID_INIT_TOKEN: {
-        readonly numericCode: "WDG.0003";
-        readonly message: "Init token is invalid or expired";
-    };
-    readonly INVALID_RESPONSE: {
-        readonly numericCode: "WDG.0004";
-        readonly message: "Server response is missing required fields";
-    };
-    readonly NETWORK_ERROR: {
-        readonly numericCode: "WDG.0005";
-        readonly message: "Network request failed";
-    };
-    readonly SESSION_EXPIRED: {
-        readonly numericCode: "WDG.0006";
-        readonly message: "Widget session has expired";
-    };
-};
-
-export declare const WIDGET_MESSAGE_VERSION: "1";
-
-export declare interface WidgetAccount {
-    userId: string;
-    userWallet: `0x${string}`;
-}
-
-/**
- * Thrown by SDK methods that hit the API directly (no iframe), e.g.
- * `delegations.revokeCard()` / `delegations.revokeDelegation()`. Carries the
- * HTTP status and the optional BCK error code so consumers can branch on
- * 401/403/etc. without parsing the message.
- */
-export declare class WidgetApiError extends Error {
-    readonly status?: number | undefined;
-    readonly apiCode?: string | undefined;
-    constructor(message: string, status?: number | undefined, apiCode?: string | undefined);
-}
-
-export declare interface WidgetConfig {
-    initToken: string;
-    environment: Environment;
-}
-
-declare type WidgetErrorCode = keyof typeof WIDGET_ERRORS;
-
-export declare class WidgetInitError extends Error {
-    readonly code: WidgetErrorCode;
-    constructor(code: WidgetErrorCode, message?: string, cause?: unknown);
-}
-
-export declare interface WidgetMessage<T = unknown> {
-    type: WidgetMessageType;
-    version: '1';
-    payload?: T;
-}
-
-export declare enum WidgetMessageType {
-    INIT = "nvm:init",
-    CLOSE = "nvm:close",
-    BOOTED = "nvm:booted",
-    READY = "nvm:ready",
-    RESIZE = "nvm:resize",
-    SUCCESS = "nvm:success",
-    ERROR = "nvm:error",
-    CARD_ACTION = "nvm:card-action"
-}
-
-export declare interface WidgetSession {
-    sessionToken: string;
-    userId: string;
-    userWallet: `0x${string}`;
-    /**
-     * Hash of the NVM API key bound to this widget session user. Returned by
-     * `POST /api/v1/widgets/session` so host pages that want to call user-scoped
-     * endpoints directly (outside the iframe) have the bearer token to do so.
-     * The embedded iframe flow consumes it via the session JWT claims rather
-     * than this field.
-     */
-    apiKeyHash: string;
-    expiresAt: string;
-}
-
-export declare class WidgetSessionExpiredError extends Error {
-    readonly code: "SESSION_EXPIRED";
-    constructor();
-}
-
-export { }
+export { NeverminedWidgets } from './nevermined-widgets.js';
+export { SessionManager } from './session.js';
+export { IframeManager } from './iframe-manager.js';
+export { CheckoutWidget } from './widgets/checkout.js';
+export { DelegationsWidget } from './widgets/delegations.js';
+export { TypedEventEmitter } from './event-emitter.js';
+export { WidgetMessageType, WIDGET_MESSAGE_VERSION, createMessage, parseMessage, } from './messages.js';
+export { WidgetApiError, WidgetInitError, WidgetSessionExpiredError } from './utils/errors.js';
+export type { WidgetConfig, WidgetSession, WidgetAccount, Environment, EmbedError, } from './types.js';
+export type { IframeOptions } from './iframe-manager.js';
+export type { CheckoutOptions, CheckoutResult } from './widgets/checkout.js';
+export type { CardAction, CreateDelegationOptions, CreateDelegationResult, EnrollCardOptions, EnrollCardResult, ListCardsOptions, } from './widgets/delegations.js';
+export type { WidgetMessage, ParseResult } from './messages.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC9F,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA"}

package/dist/messages.d.ts

@@ -0,0 +1,26 @@
+export declare enum WidgetMessageType {
+    INIT = "nvm:init",
+    CLOSE = "nvm:close",
+    BOOTED = "nvm:booted",
+    READY = "nvm:ready",
+    RESIZE = "nvm:resize",
+    SUCCESS = "nvm:success",
+    ERROR = "nvm:error",
+    CARD_ACTION = "nvm:card-action"
+}
+export interface WidgetMessage<T = unknown> {
+    type: WidgetMessageType;
+    version: '1';
+    payload?: T;
+}
+export declare const WIDGET_MESSAGE_VERSION: "1";
+export declare function createMessage<T>(type: WidgetMessageType, payload?: T): WidgetMessage<T>;
+export type ParseResult<T = unknown> = {
+    ok: true;
+    message: WidgetMessage<T>;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function parseMessage(data: unknown): ParseResult;
+//# sourceMappingURL=messages.d.ts.map

package/dist/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAE3B,IAAI,aAAa;IACjB,KAAK,cAAc;IAEnB,MAAM,eAAe;IACrB,KAAK,cAAc;IACnB,MAAM,eAAe;IACrB,OAAO,gBAAgB;IACvB,KAAK,cAAc;IAInB,WAAW,oBAAoB;CAChC;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,GAAG,CAAA;IACZ,OAAO,CAAC,EAAE,CAAC,CAAA;CACZ;AAED,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAA;AAWlD,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAMvF;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CA8BvD"}

package/dist/nevermined-widgets.d.ts

@@ -0,0 +1,36 @@
+import type { WidgetConfig, WidgetAccount } from './types.js';
+import { CheckoutWidget } from './widgets/checkout.js';
+import { DelegationsWidget } from './widgets/delegations.js';
+interface NeverminedWidgetsEvents {
+    'session-expired': void;
+}
+export declare class NeverminedWidgets {
+    private readonly sessionManager;
+    private readonly _account;
+    private readonly environment;
+    private _checkout;
+    private _delegations;
+    private readonly events;
+    private constructor();
+    static initialize(config: WidgetConfig): Promise<NeverminedWidgets>;
+    private refreshSession;
+    on<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
+    off<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
+    get account(): WidgetAccount;
+    get hasValidSession(): boolean;
+    getSessionToken(): string;
+    get checkout(): CheckoutWidget;
+    get delegations(): DelegationsWidget;
+    /**
+     * Resets the parent widget container: tears down any live child widget (e.g.
+     * the checkout widget) and clears the internal cache. This is a reset, not a
+     * terminal state — accessing `widget.checkout` after `destroy()` lazily
+     * creates a fresh `CheckoutWidget` instance. If you need a terminal "this
+     * widget can no longer be used" semantics, call `destroy()` on the child
+     * widget directly (e.g. `widget.checkout.destroy()`), which flips its
+     * internal `destroyed` flag and makes subsequent `start()` calls throw.
+     */
+    destroy(): void;
+}
+export {};
+//# sourceMappingURL=nevermined-widgets.d.ts.map

package/dist/nevermined-widgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nevermined-widgets.d.ts","sourceRoot":"","sources":["../src/nevermined-widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAA;AAMzF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,UAAU,uBAAuB;IAC/B,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAYD,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,OAAO;WAMM,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;YA+C3D,cAAc;IAwB5B,EAAE,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,GAAG,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,IAAI,OAAO,IAAI,aAAa,CAE3B;IAED,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED,eAAe,IAAI,MAAM;IAKzB,IAAI,QAAQ,IAAI,cAAc,CAK7B;IAED,IAAI,WAAW,IAAI,iBAAiB,CASnC;IAED;;;;;;;;OAQG;IACH,OAAO,IAAI,IAAI;CAQhB"}

package/dist/session.d.ts

@@ -0,0 +1,13 @@
+import type { WidgetSession } from './types.js';
+export declare class SessionManager {
+    private session;
+    private expiresMs;
+    private timer;
+    constructor(session: WidgetSession);
+    isValid(): boolean;
+    getToken(): string;
+    getSession(): WidgetSession;
+    startAutoRefresh(refreshFn: () => Promise<WidgetSession>, onExpired: () => void): void;
+    stopAutoRefresh(): void;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAI/C,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,KAAK,CAA6C;gBAE9C,OAAO,EAAE,aAAa;IAWlC,OAAO,IAAI,OAAO;IAIlB,QAAQ,IAAI,MAAM;IAIlB,UAAU,IAAI,aAAa;IAI3B,gBAAgB,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI;IA8BtF,eAAe,IAAI,IAAI;CAMxB"}

package/dist/types.d.ts

@@ -0,0 +1,31 @@
+export declare const ENVIRONMENTS: readonly ["local", "sandbox", "live", "staging_sandbox", "staging_live"];
+export type Environment = (typeof ENVIRONMENTS)[number];
+export interface WidgetConfig {
+    initToken: string;
+    environment: Environment;
+}
+export interface WidgetSession {
+    sessionToken: string;
+    userId: string;
+    userWallet: `0x${string}`;
+    /**
+     * Hash of the NVM API key bound to this widget session user. Returned by
+     * `POST /api/v1/widgets/session` so host pages that want to call user-scoped
+     * endpoints directly (outside the iframe) have the bearer token to do so.
+     * The embedded iframe flow consumes it via the session JWT claims rather
+     * than this field.
+     */
+    apiKeyHash: string;
+    expiresAt: string;
+}
+export interface WidgetAccount {
+    userId: string;
+    userWallet: `0x${string}`;
+}
+export interface EmbedError {
+    code: 'UNAUTHORIZED' | 'NETWORK' | 'PAYMENT_NOT_CONFIRMED' | 'UNKNOWN';
+    message: string;
+    status?: number;
+    apiCode?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,0EAA2E,CAAA;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,WAAW,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;IACzB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAAA;IACtE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB"}

package/dist/utils/environment.d.ts

@@ -0,0 +1,4 @@
+import type { Environment } from '../types.js';
+export declare function getApiBaseUrl(environment: Environment): string;
+export declare function getWebappBaseUrl(environment: Environment): string;
+//# sourceMappingURL=environment.d.ts.map

package/dist/utils/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAkB9C,wBAAgB,aAAa,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAEjE"}

package/dist/utils/errors.d.ts

@@ -0,0 +1,47 @@
+export declare const WIDGET_ERRORS: {
+    readonly MISSING_INIT_TOKEN: {
+        readonly numericCode: "WDG.0001";
+        readonly message: "initToken is required and must be a non-empty string";
+    };
+    readonly INVALID_ENVIRONMENT: {
+        readonly numericCode: "WDG.0002";
+        readonly message: "environment must be one of: sandbox, live, staging_sandbox, staging_live, local";
+    };
+    readonly INVALID_INIT_TOKEN: {
+        readonly numericCode: "WDG.0003";
+        readonly message: "Init token is invalid or expired";
+    };
+    readonly INVALID_RESPONSE: {
+        readonly numericCode: "WDG.0004";
+        readonly message: "Server response is missing required fields";
+    };
+    readonly NETWORK_ERROR: {
+        readonly numericCode: "WDG.0005";
+        readonly message: "Network request failed";
+    };
+    readonly SESSION_EXPIRED: {
+        readonly numericCode: "WDG.0006";
+        readonly message: "Widget session has expired";
+    };
+};
+export type WidgetErrorCode = keyof typeof WIDGET_ERRORS;
+export declare class WidgetInitError extends Error {
+    readonly code: WidgetErrorCode;
+    constructor(code: WidgetErrorCode, message?: string, cause?: unknown);
+}
+export declare class WidgetSessionExpiredError extends Error {
+    readonly code: "SESSION_EXPIRED";
+    constructor();
+}
+/**
+ * Thrown by SDK methods that hit the API directly (no iframe), e.g.
+ * `delegations.revokeCard()` / `delegations.revokeDelegation()`. Carries the
+ * HTTP status and the optional BCK error code so consumers can branch on
+ * 401/403/etc. without parsing the message.
+ */
+export declare class WidgetApiError extends Error {
+    readonly status?: number | undefined;
+    readonly apiCode?: string | undefined;
+    constructor(message: string, status?: number | undefined, apiCode?: string | undefined);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;CAgBmD,CAAA;AAE7E,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAA;AAExD,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EACrC,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,OAAO;CAKlB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAS;;CAM3C;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,MAAM,CAAC,EAAE,MAAM;aACf,OAAO,CAAC,EAAE,MAAM;gBAFhC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,YAAA;CAKnC"}

package/dist/widgets/checkout.d.ts

@@ -0,0 +1,42 @@
+import { SessionManager } from '../session.js';
+import type { EmbedError } from '../types.js';
+export interface CheckoutResult {
+    did: string;
+    planId?: string;
+    txHash?: string;
+}
+export interface CheckoutOptions {
+    did: string;
+    planId?: string;
+    container?: HTMLElement;
+    onBooted?: () => void;
+    onReady?: () => void;
+    onSuccess?: (result: CheckoutResult) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+/**
+ * Checkout widget.
+ *
+ * Lifecycle note for SDK consumers: when the iframe sends `nvm:close` the
+ * widget instance auto-calls `destroy()` and becomes terminal — any
+ * subsequent `start()` call throws. If the host page needs to re-show the
+ * checkout after a close, construct a new `CheckoutWidget` (typically via
+ * `nvm.checkout`) and call `start()` on the fresh instance.
+ */
+export declare class CheckoutWidget {
+    private readonly session;
+    private readonly webappBase;
+    private manager;
+    private destroyed;
+    constructor(session: SessionManager, webappBase: string);
+    /**
+     * Mounts the checkout iframe into `options.container`.
+     * Throws if called after `destroy()` (including the implicit destroy on
+     * `nvm:close` — see class JSDoc).
+     */
+    start(options: CheckoutOptions): void;
+    destroy(): void;
+    private handleMessage;
+}
+//# sourceMappingURL=checkout.d.ts.map

package/dist/widgets/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/widgets/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAA;IAC5C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAID;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM;IAGrC;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAwBrC,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,aAAa;CAsCtB"}

package/dist/widgets/delegations.d.ts

@@ -0,0 +1,103 @@
+import { SessionManager } from '../session.js';
+import type { EmbedError } from '../types.js';
+export interface EnrollCardResult {
+    paymentMethodId: string;
+}
+export interface EnrollCardOptions {
+    container?: HTMLElement;
+    onBooted?: () => void;
+    onReady?: () => void;
+    onSuccess?: (result: EnrollCardResult) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+export interface CardAction {
+    /** Currently the only emitted action; reserved as a discriminator for future ones. */
+    action: 'delegate';
+    paymentMethodId: string;
+}
+export interface ListCardsOptions {
+    container?: HTMLElement;
+    onBooted?: () => void;
+    onReady?: () => void;
+    onCardAction?: (action: CardAction) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+export interface CreateDelegationResult {
+    delegationId: string;
+    paymentMethodId: string;
+}
+export interface CreateDelegationOptions {
+    paymentMethodId: string;
+    container?: HTMLElement;
+    onBooted?: () => void;
+    onReady?: () => void;
+    onSuccess?: (result: CreateDelegationResult) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+/**
+ * Card and delegation management widget.
+ *
+ * Surfaces three iframe-based flows (enrollment, listing, delegation creation)
+ * and two SDK-direct revocations. The three iframe flows share the single
+ * `manager` slot — calling any of them destroys the previously-mounted iframe
+ * (same semantics as calling `enrollCard()` twice). Once any iframe is closed
+ * by the user (`nvm:close`), the instance is implicitly destroyed and any
+ * subsequent iframe call throws. Construct a fresh widget (via
+ * `nvm.delegations`) to mount another flow after a close.
+ *
+ * The two `revoke*` methods do NOT use an iframe — they hit the
+ * `/api/v1/widgets/...` endpoints directly with the widget session token.
+ * They exist because the SDK consumer on the host page only holds the widget
+ * session token; the apiKeyHash that gates the standard delegation/payment
+ * endpoints never leaves the embedded iframe.
+ */
+export declare class DelegationsWidget {
+    private readonly session;
+    private readonly webappBase;
+    private readonly apiBase;
+    private manager;
+    private destroyed;
+    constructor(session: SessionManager, webappBase: string, apiBase: string);
+    /**
+     * Mounts the enrollment iframe at `/embed/cards/enroll`.
+     * Throws if called after `destroy()` (including the implicit destroy on
+     * `nvm:close` — see class JSDoc).
+     */
+    enrollCard(options: EnrollCardOptions): void;
+    /**
+     * Mounts the cards-list iframe at `/embed/cards/list`. Per-row actions
+     * (currently only "Create Delegation") are forwarded via `onCardAction` so
+     * the host can mount the appropriate follow-up widget.
+     */
+    listCards(options: ListCardsOptions): void;
+    /**
+     * Mounts the delegation creation iframe at `/embed/cards/delegate` for a
+     * specific payment method. The `paymentMethodId` is required and is passed
+     * as a search param so the embed route can scope the form to that card.
+     */
+    createDelegation(options: CreateDelegationOptions): void;
+    /**
+     * Revoke (detach) a payment method via the widget-prefixed API endpoint.
+     * Resolves on 2xx; throws `WidgetApiError` on any other response or
+     * network failure.
+     */
+    revokeCard(paymentMethodId: string): Promise<void>;
+    /**
+     * Revoke a delegation via the widget-prefixed API endpoint.
+     * Resolves on 2xx; throws `WidgetApiError` on any other response or
+     * network failure.
+     */
+    revokeDelegation(delegationId: string): Promise<void>;
+    destroy(): void;
+    private assertAlive;
+    private mountIframe;
+    private postInitOnBooted;
+    private handleEnrollMessage;
+    private handleListMessage;
+    private handleCreateDelegationMessage;
+    private deleteWithSession;
+}
+//# sourceMappingURL=delegations.d.ts.map

package/dist/widgets/delegations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegations.d.ts","sourceRoot":"","sources":["../../src/widgets/delegations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAC9C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,sFAAsF;IACtF,MAAM,EAAE,UAAU,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAA;IACpD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM;IAGlC;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAM5C;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAM1C;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAWxD;;;;OAIG;IACG,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxD;;;;OAIG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,WAAW;IAsBnB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,mBAAmB;IAsC3B,OAAO,CAAC,iBAAiB;IA6CzB,OAAO,CAAC,6BAA6B;YAyCvB,iBAAiB;CAgChC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/ui-widgets",
-  "version": "0.4.5",
+  "version": "0.5.1",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",