@nevermined-io/ui-widgets 0.5.11 → 0.5.13

package/dist/widgets/delegations.d.ts

@@ -0,0 +1,156 @@
+import { SessionManager } from '../session.js';
+import type { EmbedError, WidgetSuccessEvent } from '../types.js';
+export interface EnrollCardResult {
+    paymentMethodId: string;
+}
+/**
+ * #1668 sub-task 2: which tokenization flow renders inside the embedded
+ * enrol-card iframe.
+ *
+ * - `'stripe'` (default): Stripe Elements + SetupIntent. The existing flow.
+ * - `'braintree'`: Braintree Drop-in (PayPal vault).
+ * - `'visa'`: Visa Agentic Tokens via VGS Collect → CMP. **Requires an
+ *   HTTPS parent page** — the Visa VTS iframe enforces
+ *   `frame-ancestors 'self' https:` so a non-HTTPS host (e.g. plain
+ *   `http://localhost`) cannot embed this provider.
+ */
+export type EnrollCardProvider = 'stripe' | 'braintree' | 'visa';
+export interface EnrollCardOptions {
+    container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
+    /** See `EnrollCardProvider`. Defaults to `'stripe'`. */
+    provider?: EnrollCardProvider;
+    onBooted?: () => void;
+    onReady?: () => void;
+    /** See `CheckoutOptions.onSuccess`. */
+    onSuccess?: (event: WidgetSuccessEvent<EnrollCardResult>) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+export interface CardAction {
+    /**
+     * `delegate` — the user asked to create a delegation for this card (host
+     * should mount `createDelegation`). `revoked` — the user removed this card
+     * inline; the list iframe stays open so this is an intra-flow event, not
+     * flow completion (which is why it is NOT an `nvm:success`). See #1411.
+     */
+    action: 'delegate' | 'revoked';
+    paymentMethodId: string;
+}
+export interface ListCardsOptions {
+    container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
+    onBooted?: () => void;
+    onReady?: () => void;
+    onCardAction?: (action: CardAction) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+export interface CreateDelegationResult {
+    delegationId: string;
+    paymentMethodId: string;
+}
+export interface CreateDelegationOptions {
+    paymentMethodId: string;
+    container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
+    onBooted?: () => void;
+    onReady?: () => void;
+    /** See `CheckoutOptions.onSuccess`. */
+    onSuccess?: (event: WidgetSuccessEvent<CreateDelegationResult>) => void;
+    onError?: (error: EmbedError) => void;
+    onClose?: () => void;
+}
+/**
+ * Card and delegation management widget.
+ *
+ * Surfaces three iframe-based flows (enrollment, listing, delegation creation)
+ * and two SDK-direct revocations. The three iframe flows share the single
+ * `manager` slot — calling any of them destroys the previously-mounted iframe
+ * (same semantics as calling `enrollCard()` twice). Once any iframe is closed
+ * by the user (`nvm:close`), the instance is implicitly destroyed and any
+ * subsequent iframe call throws. Construct a fresh widget (via
+ * `nvm.delegations`) to mount another flow after a close.
+ *
+ * The two `revoke*` methods do NOT use an iframe — they hit the
+ * `/api/v1/widgets/...` endpoints directly with the widget session token.
+ * They exist because the SDK consumer on the host page only holds the widget
+ * session token; the apiKeyHash that gates the standard delegation/payment
+ * endpoints never leaves the embedded iframe.
+ */
+export declare class DelegationsWidget {
+    private readonly session;
+    private readonly webappBase;
+    private readonly apiBase;
+    private manager;
+    private destroyed;
+    constructor(session: SessionManager, webappBase: string, apiBase: string);
+    /**
+     * Mounts the enrollment iframe at `/embed/cards/enroll`.
+     * Throws if called after `destroy()` (including the implicit destroy on
+     * `nvm:close` — see class JSDoc).
+     */
+    enrollCard(options: EnrollCardOptions): void;
+    /**
+     * Mounts the cards-list iframe at `/embed/cards/list`. Per-row actions
+     * ("Create Delegation" → `'delegate'`, "Remove Card" → `'revoked'`) are
+     * forwarded via `onCardAction` so the host can react (mount a follow-up
+     * widget, refresh its own list, etc.). See `CardAction`.
+     */
+    listCards(options: ListCardsOptions): void;
+    /**
+     * Mounts the delegation creation iframe at `/embed/cards/delegate` for a
+     * specific payment method. The `paymentMethodId` is required and is passed
+     * as a search param so the embed route can scope the form to that card.
+     */
+    createDelegation(options: CreateDelegationOptions): void;
+    /**
+     * Revoke (detach) a payment method via the widget-prefixed API endpoint.
+     * Resolves on 2xx; throws `WidgetApiError` on any other response or
+     * network failure.
+     */
+    revokeCard(paymentMethodId: string): Promise<void>;
+    /**
+     * Revoke a delegation via the widget-prefixed API endpoint.
+     * Resolves on 2xx; throws `WidgetApiError` on any other response or
+     * network failure.
+     */
+    revokeDelegation(delegationId: string): Promise<void>;
+    destroy(): void;
+    private assertAlive;
+    private mountIframe;
+    private postInitOnBooted;
+    private handleEnrollMessage;
+    private handleListMessage;
+    private handleCreateDelegationMessage;
+    /**
+     * #1668: shared close path for `handle.close()` (integrator-driven) and
+     * `nvm:close` (iframe-driven). Idempotent so a race between the
+     * integrator dismissing the widget and the iframe emitting CLOSE
+     * collapses to a single `onClose` + destroy. Generic over the three
+     * options shapes — only `onClose` is referenced.
+     *
+     * `manager` is the IframeManager this close was bound to when the handle
+     * was minted. The three iframe flows share the single `manager` slot, so a
+     * stale handle from an earlier flow (e.g. an uncalled `enrollCard` success
+     * handle held past a later `createDelegation`) must NOT tear down the
+     * now-live iframe — we bail once it no longer owns `this.manager`.
+     *
+     * Ordering is load-bearing: `destroy()` runs before `onClose()` so a
+     * throwing `onClose` cannot leak a second close — `destroyed` is already
+     * true by the time the callback runs.
+     */
+    private closeFromIframe;
+    private buildSuccessHandle;
+    private deleteWithSession;
+}
+//# sourceMappingURL=delegations.d.ts.map

package/dist/widgets/delegations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegations.d.ts","sourceRoot":"","sources":["../../src/widgets/delegations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAGjE,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAA;AAEhE,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAA;IACjE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;IAC9B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAA;IACvE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM;IAGlC;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAY5C;;;;;OAKG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAS1C;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAgBxD;;;;OAIG;IACG,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxD;;;;OAIG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,iBAAiB;IAgDzB,OAAO,CAAC,6BAA6B;IA4CrC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,kBAAkB;YAMZ,iBAAiB;CAgChC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/ui-widgets",
-  "version": "0.5.11",
+  "version": "0.5.13",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",