npm - @nevermined-io/ui-widgets - Versions diffs - 0.5.7 → 0.5.9 - Mend

@nevermined-io/ui-widgets 0.5.7 → 0.5.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/README.md +40 -33
package/dist/iframe-manager.d.ts +23 -0
package/dist/iframe-manager.d.ts.map +1 -1
package/dist/index.d.ts +2 -2
package/dist/index.d.ts.map +1 -1
package/dist/index.js +1 -1
package/dist/index.mjs +136 -100
package/dist/messages.d.ts.map +1 -1
package/dist/nevermined-widgets.d.ts.map +1 -1
package/dist/types.d.ts +58 -13
package/dist/types.d.ts.map +1 -1
package/dist/utils/errors.d.ts +4 -12
package/dist/utils/errors.d.ts.map +1 -1
package/dist/widgets/checkout.d.ts +40 -4
package/dist/widgets/checkout.d.ts.map +1 -1
package/dist/widgets/delegations.d.ts +60 -7
package/dist/widgets/delegations.d.ts.map +1 -1
package/package.json +2 -2

package/README.md CHANGED Viewed

@@ -2,7 +2,7 @@
 Browser SDK for embedding Nevermined flows (checkout, card enrollment, card management, delegations) into your own website via secure iframes.
-Pairs with [`@nevermined-io/ui-widgets-server`](https://www.npmjs.com/package/@nevermined-io/ui-widgets-server), which mints the short-lived init tokens this SDK exchanges for an authenticated widget session.
+Pairs with [`@nevermined-io/ui-widgets-server`](https://www.npmjs.com/package/@nevermined-io/ui-widgets-server), which mints widget sessions server-to-server from your backend and hands the response to this SDK.
 ## Install
@@ -19,12 +19,14 @@ ESM-only. Works in any modern browser bundler (Vite, webpack 5, Rspack, esbuild,
 ```ts
 import { NeverminedWidgets } from '@nevermined-io/ui-widgets'
-// 1. Get an init token from your backend (see ui-widgets-server)
-const { initToken } = await fetch('/api/widget-init-token').then(r => r.json())
+// 1. Get a widget session from your backend (see ui-widgets-server). The
+//    backend calls Nevermined with your widget key `rawSecret` and forwards
+//    the response — the secret never reaches the browser.
+const session = await fetch('/api/widget-session').then((r) => r.json())
 // 2. Initialize the SDK
 const nvm = await NeverminedWidgets.initialize({
-  initToken,
+  session,
   environment: 'sandbox',
 })
@@ -33,8 +35,8 @@ nvm.checkout.start({
   did: 'did:nv:abc...',
   container: document.getElementById('checkout')!,
   onReady: () => console.log('iframe ready'),
-  onSuccess: result => console.log('purchase complete', result),
-  onError: error => console.error('checkout error', error),
+  onSuccess: (result) => console.log('purchase complete', result),
+  onError: (error) => console.error('checkout error', error),
   onClose: () => console.log('user closed the iframe'),
 })
 ```
@@ -43,13 +45,13 @@ The widget renders inside `container` as an iframe. The host page never sees Str
 ## Environments
-| Value             | API base URL                            | Webapp URL                  |
-| ----------------- | --------------------------------------- | --------------------------- |
-| `live`            | `https://api.live.nevermined.app`       | `https://nevermined.app`    |
-| `sandbox`         | `https://api.sandbox.nevermined.app`    | `https://nevermined.app`    |
-| `staging_live`    | `https://api.live.nevermined.dev`       | `https://nevermined.dev`    |
-| `staging_sandbox` | `https://api.sandbox.nevermined.dev`    | `https://nevermined.dev`    |
-| `local`           | `http://localhost:3001`                 | `http://localhost:4200`     |
+| Value             | API base URL                         | Webapp URL               |
+| ----------------- | ------------------------------------ | ------------------------ |
+| `live`            | `https://api.live.nevermined.app`    | `https://nevermined.app` |
+| `sandbox`         | `https://api.sandbox.nevermined.app` | `https://nevermined.app` |
+| `staging_live`    | `https://api.live.nevermined.dev`    | `https://nevermined.dev` |
+| `staging_sandbox` | `https://api.sandbox.nevermined.dev` | `https://nevermined.dev` |
+| `local`           | `http://localhost:3001`              | `http://localhost:4200`  |
 `local` is for developing against a self-hosted stack. Production integrations should use `live` or `sandbox`.
@@ -57,11 +59,11 @@ The widget renders inside `container` as an iframe. The host page never sees Str
 ### `NeverminedWidgets.initialize(config)`
-Exchanges the init token for a widget session. Returns a `NeverminedWidgets` instance you keep around for the lifetime of the page (or until logout).
+Accepts a widget session minted server-to-server by your backend (typically via `@nevermined-io/ui-widgets-server.createWidgetSession`) and returns a `NeverminedWidgets` instance you keep around for the lifetime of the page (or until logout). The SDK does **not** mint sessions itself; the widget key `rawSecret` stays on your backend.
 ```ts
 const nvm = await NeverminedWidgets.initialize({
-  initToken: '...',     // from your backend
+  session, // WidgetSession returned by your backend
   environment: 'live',
 })
 ```
@@ -70,7 +72,7 @@ The session refreshes itself automatically in the background. If a refresh fails
 ```ts
 nvm.on('session-expired', () => {
-  // Fetch a new init token from your backend and re-initialize.
+  // Fetch a fresh widget session from your backend and re-initialize.
 })
 ```
@@ -139,15 +141,15 @@ Tears down any active iframe, stops the session refresh timer, and clears event
 ### `WidgetInitError`
-Thrown by `NeverminedWidgets.initialize()` when the init token is rejected, the response is malformed, or the network call fails.
+Thrown by `NeverminedWidgets.initialize()` when the session is missing or malformed, or the refresh network call fails later.
 ```ts
 try {
-  await NeverminedWidgets.initialize({ initToken, environment: 'live' })
+  await NeverminedWidgets.initialize({ session, environment: 'live' })
 } catch (err) {
   if (err instanceof WidgetInitError) {
-    // err.code: MISSING_INIT_TOKEN | INVALID_INIT_TOKEN | INVALID_ENVIRONMENT
-    //         | INVALID_RESPONSE  | NETWORK_ERROR
+    // err.code: MISSING_SESSION | INVALID_SESSION | INVALID_ENVIRONMENT
+    //         | NETWORK_ERROR
   }
 }
 ```
@@ -168,8 +170,8 @@ Errors surfaced through `onError` callbacks have a normalized shape:
 type EmbedError = {
   code: 'UNAUTHORIZED' | 'NETWORK' | 'PAYMENT_NOT_CONFIRMED' | 'UNKNOWN'
   message: string
-  status?: number    // HTTP status when applicable
-  apiCode?: string   // BCK.* error code when the iframe surfaces one
+  status?: number // HTTP status when applicable
+  apiCode?: string // BCK.* error code when the iframe surfaces one
 }
 ```
@@ -178,21 +180,26 @@ type EmbedError = {
 The SDK and the embedded iframes communicate over `window.postMessage` with a versioned message envelope. Most consumers never need to deal with this directly, but the types are exported in case you want to inspect frames or build a custom integration:
 ```ts
-import { WidgetMessageType, parseMessage, createMessage, WIDGET_MESSAGE_VERSION } from '@nevermined-io/ui-widgets'
+import {
+  WidgetMessageType,
+  parseMessage,
+  createMessage,
+  WIDGET_MESSAGE_VERSION,
+} from '@nevermined-io/ui-widgets'
 ```
 Message types:
-| Type              | Direction          | When                                                      |
-| ----------------- | ------------------ | --------------------------------------------------------- |
-| `nvm:booted`      | iframe → parent    | DOM mounted, before the iframe knows the session token    |
-| `nvm:init`        | parent → iframe    | SDK responds to `booted` with the session token           |
-| `nvm:ready`       | iframe → parent    | Auth validated, iframe rendered                           |
-| `nvm:resize`      | iframe → parent    | Iframe content height changed                             |
-| `nvm:success`     | iframe → parent    | Terminal success (purchase complete, card enrolled, etc.) |
-| `nvm:error`       | iframe → parent    | Error (terminal or recoverable; check `EmbedError.code`)  |
-| `nvm:card-action` | iframe → parent    | Per-row action inside `listCards` (e.g. delegate)         |
-| `nvm:close`       | iframe ↔ parent    | Iframe is being dismissed                                 |
+| Type              | Direction       | When                                                      |
+| ----------------- | --------------- | --------------------------------------------------------- |
+| `nvm:booted`      | iframe → parent | DOM mounted, before the iframe knows the session token    |
+| `nvm:init`        | parent → iframe | SDK responds to `booted` with the session token           |
+| `nvm:ready`       | iframe → parent | Auth validated, iframe rendered                           |
+| `nvm:resize`      | iframe → parent | Iframe content height changed                             |
+| `nvm:success`     | iframe → parent | Terminal success (purchase complete, card enrolled, etc.) |
+| `nvm:error`       | iframe → parent | Error (terminal or recoverable; check `EmbedError.code`)  |
+| `nvm:card-action` | iframe → parent | Per-row action inside `listCards` (e.g. delegate)         |
+| `nvm:close`       | iframe ↔ parent | Iframe is being dismissed                                 |
 All frames carry `version: '1'`. The SDK rejects frames with mismatched versions to keep upgrades safe.

package/dist/iframe-manager.d.ts CHANGED Viewed

@@ -2,7 +2,30 @@ import { type WidgetMessage } from './messages.js';
 export interface IframeOptions {
     container?: HTMLElement;
     style?: Partial<CSSStyleDeclaration>;
+    /**
+     * Fixed CSS width for inline (container) mode. #1668: the widget renders
+     * as a fixed-size box, like a Privy UI component, so the integrator can
+     * place it predictably on their page. Clamped to
+     * `[INLINE_MIN_WIDTH, INLINE_MAX_WIDTH]`. Default: `INLINE_DEFAULT_WIDTH`
+     * — the constants are the single source of truth, so future re-tunings
+     * don't require touching this JSDoc. Ignored in fullscreen overlay mode.
+     */
+    width?: number;
+    /**
+     * Fixed CSS height for inline mode. Clamped to
+     * `[INLINE_MIN_HEIGHT, INLINE_MAX_HEIGHT]`. Default: `INLINE_DEFAULT_HEIGHT`.
+     * The embed content uses responsive CSS to adapt to the dimensions the
+     * integrator picks — within the clamped range — without distorting (no
+     * CSS transform scale). Ignored in fullscreen overlay mode.
+     */
+    height?: number;
 }
+export declare const INLINE_MIN_WIDTH = 440;
+export declare const INLINE_MAX_WIDTH = 720;
+export declare const INLINE_DEFAULT_WIDTH = 480;
+export declare const INLINE_MIN_HEIGHT = 640;
+export declare const INLINE_MAX_HEIGHT = 960;
+export declare const INLINE_DEFAULT_HEIGHT = 720;
 export declare class IframeManager {
     private expectedOrigin;
     private iframe;

package/dist/iframe-manager.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"iframe-manager.d.ts","sourceRoot":"","sources":["../src/iframe-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAEhE,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;~~CACrC~~;~~AAED~~,qBAAa,aAAa;IAOZ,OAAO,CAAC,cAAc;IANlC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,SAAS,CAAQ;gBAEL,cAAc,EAAE,MAAM;IAQ1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,iBAAiB;~~IA6B~~/D,OAAO,IAAI,IAAI;IAYf,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAKrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI;IAO5D,eAAe,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAO9D,OAAO,CAAC,cAAc;CAiCvB"}
1	+ {"version":3,"file":"iframe-manager.d.ts","sourceRoot":"","sources":["../src/iframe-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAEhE,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACpC;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AASD,eAAO,MAAM,gBAAgB,MAAM,CAAA;AACnC,eAAO,MAAM,gBAAgB,MAAM,CAAA;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAA;AACvC,eAAO,MAAM,iBAAiB,MAAM,CAAA;AACpC,eAAO,MAAM,iBAAiB,MAAM,CAAA;AACpC,eAAO,MAAM,qBAAqB,MAAM,CAAA;AAMxC,qBAAa,aAAa;IAOZ,OAAO,CAAC,cAAc;IANlC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,SAAS,CAAQ;gBAEL,cAAc,EAAE,MAAM;IAQ1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,iBAAiB;IAiD/D,OAAO,IAAI,IAAI;IAYf,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAKrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI;IAO5D,eAAe,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAO9D,OAAO,CAAC,cAAc;CAiCvB"}

package/dist/index.d.ts CHANGED Viewed

@@ -6,9 +6,9 @@ export { DelegationsWidget } from './widgets/delegations.js';
 export { TypedEventEmitter } from './event-emitter.js';
 export { WidgetMessageType, WIDGET_MESSAGE_VERSION, createMessage, parseMessage, } from './messages.js';
 export { WidgetApiError, WidgetInitError, WidgetSessionExpiredError } from './utils/errors.js';
-export type { WidgetConfig, WidgetSession, WidgetAccount, Environment, EmbedError, AuthMismatchDetail, AuthSwitchRequestDetail, } from './types.js';
+export type { WidgetConfig, WidgetSession, WidgetAccount, Environment, EmbedError, AuthMismatchDetail, AuthSwitchRequestDetail, WidgetSuccessHandle, WidgetSuccessEvent, } from './types.js';
 export type { IframeOptions } from './iframe-manager.js';
 export type { CheckoutOptions, CheckoutResult } from './widgets/checkout.js';
-export type { CardAction, CreateDelegationOptions, CreateDelegationResult, EnrollCardOptions, EnrollCardResult, ListCardsOptions, } from './widgets/delegations.js';
+export type { CardAction, CreateDelegationOptions, CreateDelegationResult, EnrollCardOptions, EnrollCardProvider, EnrollCardResult, ListCardsOptions, } from './widgets/delegations.js';
 export type { WidgetMessage, ParseResult } from './messages.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC9F,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,uBAAuB,~~GACxB~~,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC9F,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA"}

package/dist/index.js CHANGED Viewed

	@@ -1 +1 @@
1	- (function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports):typeof define==`function`&&define.amd?define([`exports`],t):(e=typeof globalThis<`u`?globalThis:e\|\|self,t(e.NeverminedWidgets={}))})(this,function(e){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var t=[`local`,`sandbox`,`live`,`staging_sandbox`,`staging_live`],n={local:`http://localhost:3001`,sandbox:`https://api.sandbox.nevermined.app`,live:`https://api.live.nevermined.app`,staging_sandbox:`https://api.sandbox.nevermined.dev`,staging_live:`https://api.live.nevermined.dev`},r={local:`http://localhost:4200`,sandbox:`https://nevermined.app`,live:`https://nevermined.app`,staging_sandbox:`https://nevermined.dev`,staging_live:`https://nevermined.dev`};function i(e){return n[e]}function a(e){return r[e]}var o={MISSING_INIT_TOKEN:{numericCode:`WDG.0001`,message:`initToken is required and must be a non-empty string`},INVALID_ENVIRONMENT:{numericCode:`WDG.0002`,message:`environment must be one of: sandbox, live, staging_sandbox, staging_live, local`},INVALID_INIT_TOKEN:{numericCode:`WDG.0003`,message:`Init token is invalid or expired`},INVALID_RESPONSE:{numericCode:`WDG.0004`,message:`Server response is missing required fields`},NETWORK_ERROR:{numericCode:`WDG.0005`,message:`Network request failed`},SESSION_EXPIRED:{numericCode:`WDG.0006`,message:`Widget session has expired`}},s=class extends Error{constructor(e,t,n){super(t??o[e].message,{cause:n}),this.code=e,this.name=`WidgetInitError`}},c=class extends Error{code=`SESSION_EXPIRED`;constructor(){super(o.SESSION_EXPIRED.message),this.name=`WidgetSessionExpiredError`}},l=class extends Error{constructor(e,t,n){super(e),this.status=t,this.apiCode=n,this.name=`WidgetApiError`}},u=.8,d=class{session;expiresMs;timer=null;constructor(e){this.session=e,this.expiresMs=new Date(e.expiresAt).getTime(),Number.isNaN(this.expiresMs)&&console.warn(`[SessionManager] malformed expiresAt, session will be treated as expired:`,e.expiresAt)}isValid(){return!Number.isNaN(this.expiresMs)&&this.expiresMs>Date.now()}getToken(){return this.session.sessionToken}getSession(){return this.session}startAutoRefresh(e,t){if(this.stopAutoRefresh(),!this.isValid()){t();return}let n=Math.max(0,Math.floor((this.expiresMs-Date.now())u));this.timer=setTimeout(()=>{this.timer=null,e().then(n=>{if(this.session=n,this.expiresMs=new Date(n.expiresAt).getTime(),!this.isValid()){t();return}this.startAutoRefresh(e,t)},e=>{console.error(`[SessionManager] session refresh failed:`,e),t()})},n)}stopAutoRefresh(){this.timer!==null&&(clearTimeout(this.timer),this.timer=null)}},f=class{listeners=new Map;on(e,t){let n=this.listeners.get(e)??new Set;return n.add(t),this.listeners.set(e,n),this}off(e,t){let n=this.listeners.get(e);return n?(n.delete(t),n.size===0&&this.listeners.delete(e),this):this}once(e,t){let n=r=>{this.off(e,n),t(r)};return this.on(e,n)}removeAllListeners(e){return e===void 0?this.listeners.clear():this.listeners.delete(e),this}emit(e,t){let n=this.listeners.get(e);n&&[...n].forEach(e=>{try{e(t)}catch(e){console.error(`[TypedEventEmitter] Handler threw:`,e)}})}},p=function(e){return e.INIT=`nvm:init`,e.CLOSE=`nvm:close`,e.BOOTED=`nvm:booted`,e.READY=`nvm:ready`,e.RESIZE=`nvm:resize`,e.SUCCESS=`nvm:success`,e.ERROR=`nvm:error`,e.CARD_ACTION=`nvm:card-action`,e.AUTH_MISMATCH=`nvm:auth-mismatch`,e.AUTH_SWITCH_REQUEST=`nvm:auth-switch-request`,e}({}),m=`1`,h=`1`;function g(e){return typeof e==`string`&&Object.values(p).includes(e)}function _(e,t){return{type:e,version:h,payload:t}}function v(e){if(typeof e!=`object`\|\|!e)return{ok:!1,reason:`not an object`};let t=e;return g(t.type)?t.version===h?{ok:!0,message:{type:t.type,version:t.version,payload:t.payload}}:{ok:!1,reason:`version mismatch: received "${t.version}", expected "${h}"`}:{ok:!1,reason:typeof t.type==`string`&&t.type.startsWith(`nvm:`)?`unknown nvm: type "${t.type}"`:`missing or unknown type`}}var y=class{iframe=null;messageHandlers=new Set;protocolErrorHandlers=new Set;messageListener=null;destroyed=!1;constructor(e){if(this.expectedOrigin=e,e===``)throw Error(`[IframeManager] Wildcard origin "*" is not allowed — pass an explicit origin`)}create(e,t){this.iframe?.remove();let n=document.createElement(`iframe`);return n.src=e,n.style.width=`100%`,n.style.height=`100%`,n.style.border=`none`,n.style.display=`block`,n.setAttribute(`sandbox`,`allow-scripts allow-same-origin allow-forms`),t?.container\|\|(n.style.position=`fixed`,n.style.top=`0`,n.style.left=`0`,n.style.right=`0`,n.style.bottom=`0`,n.style.zIndex=`9999`),t?.style&&Object.assign(n.style,t.style),(t?.container??document.body).appendChild(n),this.iframe=n,n}destroy(){this.destroyed=!0,this.messageListener&&=(window.removeEventListener(`message`,this.messageListener),null),this.messageHandlers.clear(),this.protocolErrorHandlers.clear(),this.iframe?.remove(),this.iframe=null}postMessage(e){this.destroyed\|\|this.iframe?.contentWindow?.postMessage(e,this.expectedOrigin)}onMessage(e){return this.destroyed?()=>void 0:(this.messageHandlers.add(e),this.ensureListener(),()=>this.messageHandlers.delete(e))}onProtocolError(e){return this.destroyed?()=>void 0:(this.protocolErrorHandlers.add(e),this.ensureListener(),()=>this.protocolErrorHandlers.delete(e))}ensureListener(){this.messageListener\|\|(this.messageListener=e=>{if(e.origin!==this.expectedOrigin)return;let t=v(e.data);if(!t.ok){console.warn(`[IframeManager] Discarding message from ${this.expectedOrigin}: ${t.reason}`),this.protocolErrorHandlers.forEach(e=>{try{e(t.reason)}catch(e){console.error(`[IframeManager] Protocol error handler threw:`,e)}});return}this.messageHandlers.forEach(e=>{try{e(t.message)}catch(e){console.error(`[IframeManager] Message handler threw:`,e)}})},window.addEventListener(`message`,this.messageListener))}},b={code:`UNKNOWN`,message:`Unknown widget error`},x=class{manager=null;destroyed=!1;constructor(e,t){this.session=e,this.webappBase=t}start(e){if(this.destroyed)throw Error(`[CheckoutWidget] cannot start: instance has been destroyed`);if(!e.did\|\|typeof e.did!=`string`)throw Error(`[CheckoutWidget] did is required`);this.manager?.destroy();let t=new URL(this.webappBase).origin,n=window.location.origin,r=new URL(`/embed/checkout/${encodeURIComponent(e.did)}`,this.webappBase);r.searchParams.set(`parentOrigin`,n),e.planId&&r.searchParams.set(`planId`,e.planId);let i=new y(t);this.manager=i,i.create(r.toString(),{container:e.container}),i.onMessage(t=>this.handleMessage(t,e))}destroy(){this.destroyed=!0,this.manager?.destroy(),this.manager=null}handleMessage(e,t){if(!w(e,t))switch(e.type){case p.BOOTED:this.manager?.postMessage(_(p.INIT,{sessionToken:this.session.getToken()})),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let n=e.payload??{};t.onSuccess?.({did:n.did??t.did,planId:n.planId??t.planId,txHash:n.txHash});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??b);return}case p.CLOSE:t.onClose?.(),this.destroy();return;default:return}}};function S(e){if(typeof e!=`object`\|\|!e)return null;let t=e.expectedEmail;return typeof t!=`string`\|\|t.length===0?null:{expectedEmail:t}}function C(e){if(typeof e!=`object`\|\|!e)return null;let t=e.requestedEmail,n=e.expectedEmail;return typeof t!=`string`\|\|t.length===0\|\|typeof n!=`string`\|\|n.length===0?null:{requestedEmail:t,expectedEmail:n}}function w(e,t){if(e.type===p.AUTH_MISMATCH){let n=S(e.payload);return n&&t.onAuthMismatch?.(n),!0}if(e.type===p.AUTH_SWITCH_REQUEST){let n=C(e.payload);return n&&t.onAuthSwitchRequest?.(n),!0}return!1}var T={code:`UNKNOWN`,message:`Unknown widget error`},E={code:`UNKNOWN`,message:`Malformed nvm:success payload — paymentMethodId missing or invalid`},D={code:`UNKNOWN`,message:`Malformed nvm:success payload — delegationId missing or invalid`},O=class{manager=null;destroyed=!1;constructor(e,t,n){this.session=e,this.webappBase=t,this.apiBase=n}enrollCard(e){this.assertAlive(`enrollCard`),this.mountIframe(`/embed/cards/enroll`,e.container).onMessage(t=>this.handleEnrollMessage(t,e))}listCards(e){this.assertAlive(`listCards`),this.mountIframe(`/embed/cards/list`,e.container).onMessage(t=>this.handleListMessage(t,e))}createDelegation(e){if(this.assertAlive(`createDelegation`),typeof e.paymentMethodId!=`string`\|\|e.paymentMethodId.length===0)throw Error(`[DelegationsWidget] createDelegation: paymentMethodId is required`);this.mountIframe(`/embed/cards/delegate`,e.container,{paymentMethodId:e.paymentMethodId}).onMessage(t=>this.handleCreateDelegationMessage(t,e))}async revokeCard(e){if(typeof e!=`string`\|\|e.length===0)throw Error(`[DelegationsWidget] revokeCard: paymentMethodId is required`);await this.deleteWithSession(`${this.apiBase}/api/v1/widgets/payment-methods/${encodeURIComponent(e)}`,`Failed to revoke payment method`)}async revokeDelegation(e){if(typeof e!=`string`\|\|e.length===0)throw Error(`[DelegationsWidget] revokeDelegation: delegationId is required`);await this.deleteWithSession(`${this.apiBase}/api/v1/widgets/delegation/${encodeURIComponent(e)}`,`Failed to revoke delegation`)}destroy(){this.destroyed=!0,this.manager?.destroy(),this.manager=null}assertAlive(e){if(this.destroyed)throw Error(`[DelegationsWidget] cannot ${e}: instance has been destroyed`)}mountIframe(e,t,n={}){this.manager?.destroy();let r=new URL(this.webappBase).origin,i=window.location.origin,a=new URL(e,this.webappBase);a.searchParams.set(`parentOrigin`,i);for(let[e,t]of Object.entries(n))a.searchParams.set(e,t);let o=new y(r);return this.manager=o,o.create(a.toString(),{container:t}),o}postInitOnBooted(){this.manager?.postMessage(_(p.INIT,{sessionToken:this.session.getToken()}))}handleEnrollMessage(e,t){if(!w(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let n=(e.payload??{}).paymentMethodId;if(typeof n!=`string`\|\|n.length===0){t.onError?.(E);return}t.onSuccess?.({paymentMethodId:n});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??T);return}case p.CLOSE:t.onClose?.(),this.destroy();return;default:return}}handleListMessage(e,t){if(!w(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.CARD_ACTION:{let n=e.payload??{};if(n.action!==`delegate`\|\|typeof n.paymentMethodId!=`string`\|\|n.paymentMethodId.length===0)return;t.onCardAction?.({action:n.action,paymentMethodId:n.paymentMethodId});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??T);return}case p.CLOSE:t.onClose?.(),this.destroy();return;default:return}}handleCreateDelegationMessage(e,t){if(!w(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let n=(e.payload??{}).delegationId;if(typeof n!=`string`\|\|n.length===0){t.onError?.(D);return}t.onSuccess?.({delegationId:n,paymentMethodId:t.paymentMethodId});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??T);return}case p.CLOSE:t.onClose?.(),this.destroy();return;default:return}}async deleteWithSession(e,t){let n;try{n=await fetch(e,{method:`DELETE`,headers:{Authorization:`Bearer ${this.session.getToken()}`,Accept:`application/json`}})}catch(e){throw new l(e instanceof Error&&e.message?e.message:t)}if(n.ok)return;let r,i=t;try{let e=await n.json();typeof e?.message==`string`&&e.message.length>0&&(i=e.message),typeof e?.code==`string`&&(r=e.code)}catch{}throw new l(i,n.status,r)}};function k(e){if(typeof e!=`object`\|\|!e)return!1;let t=e;return[`sessionToken`,`userId`,`expiresAt`,`apiKeyHash`].every(e=>typeof t[e]==`string`)&&typeof t.userWallet==`string`&&t.userWallet.startsWith(`0x`)}var A=class e{_checkout=null;_delegations=null;events=new f;constructor(e,t,n){this.sessionManager=e,this._account=t,this.environment=n}static async initialize(n){let{initToken:r,environment:a}=n;if(!r\|\|typeof r!=`string`)throw new s(`MISSING_INIT_TOKEN`);if(!a\|\|!t.includes(a))throw new s(`INVALID_ENVIRONMENT`);let o=i(a),c;try{c=await fetch(`${o}/api/v1/widgets/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({initToken:r})})}catch(e){throw console.error(`[NeverminedWidgets] fetch failed:`,e),new s(`NETWORK_ERROR`,void 0,e)}if(!c.ok)throw c.status===401?new s(`INVALID_INIT_TOKEN`):new s(`NETWORK_ERROR`,`Request failed with status ${c.status}`);let l;try{l=await c.json()}catch(e){throw new s(`INVALID_RESPONSE`,void 0,e)}if(!k(l))throw new s(`INVALID_RESPONSE`);let u=new d(l),f=new e(u,{userId:l.userId,userWallet:l.userWallet},a);return u.startAutoRefresh(()=>f.refreshSession(),()=>f.events.emit(`session-expired`,void 0)),f}async refreshSession(){let e=await fetch(`${i(this.environment)}/api/v1/widgets/session/refresh`,{method:`POST`,headers:{Authorization:`Bearer ${this.sessionManager.getToken()}`}});if(!e.ok)throw Error(`Session refresh failed with status ${e.status}`);let t=await e.json();if(!k(t))throw Error(`Session refresh returned an invalid response`);return t}on(e,t){return this.events.on(e,t),this}off(e,t){return this.events.off(e,t),this}get account(){return this._account}get hasValidSession(){return this.sessionManager.isValid()}getSessionToken(){if(!this.sessionManager.isValid())throw new c;return this.sessionManager.getToken()}get checkout(){return this._checkout\|\|=new x(this.sessionManager,a(this.environment)),this._checkout}get delegations(){return this._delegations\|\|=new O(this.sessionManager,a(this.environment),i(this.environment)),this._delegations}destroy(){this.sessionManager.stopAutoRefresh(),this._checkout?.destroy(),this._checkout=null,this._delegations?.destroy(),this._delegations=null,this.events.removeAllListeners()}};e.CheckoutWidget=x,e.DelegationsWidget=O,e.IframeManager=y,e.NeverminedWidgets=A,e.SessionManager=d,e.TypedEventEmitter=f,e.WIDGET_MESSAGE_VERSION=m,e.WidgetApiError=l,e.WidgetInitError=s,e.WidgetMessageType=p,e.WidgetSessionExpiredError=c,e.createMessage=_,e.parseMessage=v});
1	+ (function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports):typeof define==`function`&&define.amd?define([`exports`],t):(e=typeof globalThis<`u`?globalThis:e\|\|self,t(e.NeverminedWidgets={}))})(this,function(e){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var t=[`local`,`sandbox`,`live`,`staging_sandbox`,`staging_live`],n={local:`http://localhost:3001`,sandbox:`https://api.sandbox.nevermined.app`,live:`https://api.live.nevermined.app`,staging_sandbox:`https://api.sandbox.nevermined.dev`,staging_live:`https://api.live.nevermined.dev`},r={local:`http://localhost:4200`,sandbox:`https://nevermined.app`,live:`https://nevermined.app`,staging_sandbox:`https://nevermined.dev`,staging_live:`https://nevermined.dev`};function i(e){return n[e]}function a(e){return r[e]}var o={MISSING_SESSION:{numericCode:`WDG.0001`,message:`session is required — pass the WidgetSession returned by createWidgetSession on the backend`},INVALID_ENVIRONMENT:{numericCode:`WDG.0002`,message:`environment must be one of: sandbox, live, staging_sandbox, staging_live, local`},INVALID_SESSION:{numericCode:`WDG.0003`,message:`session is missing required fields`},SESSION_EXPIRED:{numericCode:`WDG.0006`,message:`Widget session has expired`}},s=class extends Error{code;constructor(e,t,n){super(t??o[e].message,{cause:n}),this.code=e,this.name=`WidgetInitError`}},c=class extends Error{code=`SESSION_EXPIRED`;constructor(){super(o.SESSION_EXPIRED.message),this.name=`WidgetSessionExpiredError`}},l=class extends Error{status;apiCode;constructor(e,t,n){super(e),this.status=t,this.apiCode=n,this.name=`WidgetApiError`}},u=.8,d=class{session;expiresMs;timer=null;constructor(e){this.session=e,this.expiresMs=new Date(e.expiresAt).getTime(),Number.isNaN(this.expiresMs)&&console.warn(`[SessionManager] malformed expiresAt, session will be treated as expired:`,e.expiresAt)}isValid(){return!Number.isNaN(this.expiresMs)&&this.expiresMs>Date.now()}getToken(){return this.session.sessionToken}getSession(){return this.session}startAutoRefresh(e,t){if(this.stopAutoRefresh(),!this.isValid()){t();return}let n=Math.max(0,Math.floor((this.expiresMs-Date.now())u));this.timer=setTimeout(()=>{this.timer=null,e().then(n=>{if(this.session=n,this.expiresMs=new Date(n.expiresAt).getTime(),!this.isValid()){t();return}this.startAutoRefresh(e,t)},e=>{console.error(`[SessionManager] session refresh failed:`,e),t()})},n)}stopAutoRefresh(){this.timer!==null&&(clearTimeout(this.timer),this.timer=null)}},f=class{listeners=new Map;on(e,t){let n=this.listeners.get(e)??new Set;return n.add(t),this.listeners.set(e,n),this}off(e,t){let n=this.listeners.get(e);return n?(n.delete(t),n.size===0&&this.listeners.delete(e),this):this}once(e,t){let n=r=>{this.off(e,n),t(r)};return this.on(e,n)}removeAllListeners(e){return e===void 0?this.listeners.clear():this.listeners.delete(e),this}emit(e,t){let n=this.listeners.get(e);n&&[...n].forEach(e=>{try{e(t)}catch(e){console.error(`[TypedEventEmitter] Handler threw:`,e)}})}},p=function(e){return e.INIT=`nvm:init`,e.CLOSE=`nvm:close`,e.BOOTED=`nvm:booted`,e.READY=`nvm:ready`,e.RESIZE=`nvm:resize`,e.SUCCESS=`nvm:success`,e.ERROR=`nvm:error`,e.CARD_ACTION=`nvm:card-action`,e.AUTH_MISMATCH=`nvm:auth-mismatch`,e.AUTH_SWITCH_REQUEST=`nvm:auth-switch-request`,e}({}),m=`1`,h=`1`;function g(e){return typeof e==`string`&&Object.values(p).includes(e)}function _(e,t){return{type:e,version:h,payload:t}}function v(e){if(typeof e!=`object`\|\|!e)return{ok:!1,reason:`not an object`};let t=e;return g(t.type)?t.version===h?{ok:!0,message:{type:t.type,version:t.version,payload:t.payload}}:{ok:!1,reason:`version mismatch: received "${t.version}", expected "${h}"`}:{ok:!1,reason:typeof t.type==`string`&&t.type.startsWith(`nvm:`)?`unknown nvm: type "${t.type}"`:`missing or unknown type`}}function y(e,t,n){return Math.max(t,Math.min(n,Math.round(e)))}var b=class{expectedOrigin;iframe=null;messageHandlers=new Set;protocolErrorHandlers=new Set;messageListener=null;destroyed=!1;constructor(e){if(this.expectedOrigin=e,e===``)throw Error(`[IframeManager] Wildcard origin "*" is not allowed — pass an explicit origin`)}create(e,t){this.iframe?.remove();let n=document.createElement(`iframe`);if(n.src=e,n.style.display=`block`,n.setAttribute(`sandbox`,`allow-scripts allow-same-origin allow-forms`),!t?.container)n.style.width=`100%`,n.style.height=`100%`,n.style.border=`none`,n.style.position=`fixed`,n.style.top=`0`,n.style.left=`0`,n.style.right=`0`,n.style.bottom=`0`,n.style.zIndex=`9999`;else{let e=y(t.width??480,440,720),r=y(t.height??720,640,960);n.style.width=`${e}px`,n.style.height=`${r}px`,n.style.border=`1px solid #e5e7eb`,n.style.borderRadius=`8px`,n.style.boxSizing=`border-box`}return t?.style&&Object.assign(n.style,t.style),(t?.container??document.body).appendChild(n),this.iframe=n,n}destroy(){this.destroyed=!0,this.messageListener&&=(window.removeEventListener(`message`,this.messageListener),null),this.messageHandlers.clear(),this.protocolErrorHandlers.clear(),this.iframe?.remove(),this.iframe=null}postMessage(e){this.destroyed\|\|this.iframe?.contentWindow?.postMessage(e,this.expectedOrigin)}onMessage(e){return this.destroyed?()=>void 0:(this.messageHandlers.add(e),this.ensureListener(),()=>this.messageHandlers.delete(e))}onProtocolError(e){return this.destroyed?()=>void 0:(this.protocolErrorHandlers.add(e),this.ensureListener(),()=>this.protocolErrorHandlers.delete(e))}ensureListener(){this.messageListener\|\|(this.messageListener=e=>{if(e.origin!==this.expectedOrigin)return;let t=v(e.data);if(!t.ok){console.warn(`[IframeManager] Discarding message from ${this.expectedOrigin}: ${t.reason}`),this.protocolErrorHandlers.forEach(e=>{try{e(t.reason)}catch(e){console.error(`[IframeManager] Protocol error handler threw:`,e)}});return}this.messageHandlers.forEach(e=>{try{e(t.message)}catch(e){console.error(`[IframeManager] Message handler threw:`,e)}})},window.addEventListener(`message`,this.messageListener))}},x={code:`UNKNOWN`,message:`Unknown widget error`},S=class{session;webappBase;manager=null;destroyed=!1;constructor(e,t){this.session=e,this.webappBase=t}start(e){if(this.destroyed)throw Error(`[CheckoutWidget] cannot start: instance has been destroyed`);if(!e.did\|\|typeof e.did!=`string`)throw Error(`[CheckoutWidget] did is required`);this.manager?.destroy();let t=new URL(this.webappBase).origin,n=window.location.origin,r=new URL(`/embed/checkout/${encodeURIComponent(e.did)}`,this.webappBase);r.searchParams.set(`parentOrigin`,n),e.planId&&r.searchParams.set(`planId`,e.planId);let i=new b(t);this.manager=i,i.create(r.toString(),{container:e.container,width:e.width,height:e.height}),i.onMessage(t=>this.handleMessage(t,e,i))}destroy(){this.destroyed=!0,this.manager?.destroy(),this.manager=null}closeFromIframe(e,t){this.destroyed\|\|this.manager!==t\|\|(this.destroy(),e.onClose?.())}buildSuccessHandle(e,t){return{close:()=>this.closeFromIframe(e,t)}}handleMessage(e,t,n){if(!T(e,t))switch(e.type){case p.BOOTED:this.manager?.postMessage(_(p.INIT,{sessionToken:this.session.getToken()})),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let r=e.payload??{},i={did:r.did??t.did,planId:r.planId??t.planId,txHash:r.txHash};t.onSuccess?.({result:i,handle:this.buildSuccessHandle(t,n)});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??x);return}case p.CLOSE:this.closeFromIframe(t,n);return;default:return}}};function C(e){if(typeof e!=`object`\|\|!e)return null;let t=e.expectedEmail;return typeof t!=`string`\|\|t.length===0?null:{expectedEmail:t}}function w(e){if(typeof e!=`object`\|\|!e)return null;let t=e.requestedEmail,n=e.expectedEmail;return typeof t!=`string`\|\|t.length===0\|\|typeof n!=`string`\|\|n.length===0?null:{requestedEmail:t,expectedEmail:n}}function T(e,t){if(e.type===p.AUTH_MISMATCH){let n=C(e.payload);return n&&t.onAuthMismatch?.(n),!0}if(e.type===p.AUTH_SWITCH_REQUEST){let n=w(e.payload);return n&&t.onAuthSwitchRequest?.(n),!0}return!1}var E={code:`UNKNOWN`,message:`Unknown widget error`},D={code:`UNKNOWN`,message:`Malformed nvm:success payload — paymentMethodId missing or invalid`},O={code:`UNKNOWN`,message:`Malformed nvm:success payload — delegationId missing or invalid`},k=class{session;webappBase;apiBase;manager=null;destroyed=!1;constructor(e,t,n){this.session=e,this.webappBase=t,this.apiBase=n}enrollCard(e){this.assertAlive(`enrollCard`);let t=e.provider??`stripe`,n=this.mountIframe(`/embed/cards/enroll`,e.container,{provider:t},{width:e.width,height:e.height});n.onMessage(t=>this.handleEnrollMessage(t,e,n))}listCards(e){this.assertAlive(`listCards`);let t=this.mountIframe(`/embed/cards/list`,e.container,void 0,{width:e.width,height:e.height});t.onMessage(n=>this.handleListMessage(n,e,t))}createDelegation(e){if(this.assertAlive(`createDelegation`),typeof e.paymentMethodId!=`string`\|\|e.paymentMethodId.length===0)throw Error(`[DelegationsWidget] createDelegation: paymentMethodId is required`);let t=this.mountIframe(`/embed/cards/delegate`,e.container,{paymentMethodId:e.paymentMethodId},{width:e.width,height:e.height});t.onMessage(n=>this.handleCreateDelegationMessage(n,e,t))}async revokeCard(e){if(typeof e!=`string`\|\|e.length===0)throw Error(`[DelegationsWidget] revokeCard: paymentMethodId is required`);await this.deleteWithSession(`${this.apiBase}/api/v1/widgets/payment-methods/${encodeURIComponent(e)}`,`Failed to revoke payment method`)}async revokeDelegation(e){if(typeof e!=`string`\|\|e.length===0)throw Error(`[DelegationsWidget] revokeDelegation: delegationId is required`);await this.deleteWithSession(`${this.apiBase}/api/v1/widgets/delegation/${encodeURIComponent(e)}`,`Failed to revoke delegation`)}destroy(){this.destroyed=!0,this.manager?.destroy(),this.manager=null}assertAlive(e){if(this.destroyed)throw Error(`[DelegationsWidget] cannot ${e}: instance has been destroyed`)}mountIframe(e,t,n={},r={}){this.manager?.destroy();let i=new URL(this.webappBase).origin,a=window.location.origin,o=new URL(e,this.webappBase);o.searchParams.set(`parentOrigin`,a);for(let[e,t]of Object.entries(n))o.searchParams.set(e,t);let s=new b(i);return this.manager=s,s.create(o.toString(),{container:t,width:r.width,height:r.height}),s}postInitOnBooted(){this.manager?.postMessage(_(p.INIT,{sessionToken:this.session.getToken()}))}handleEnrollMessage(e,t,n){if(!T(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let r=(e.payload??{}).paymentMethodId;if(typeof r!=`string`\|\|r.length===0){t.onError?.(D);return}t.onSuccess?.({result:{paymentMethodId:r},handle:this.buildSuccessHandle(t,n)});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??E);return}case p.CLOSE:this.closeFromIframe(t,n);return;default:return}}handleListMessage(e,t,n){if(!T(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.CARD_ACTION:{let n=e.payload??{};if(n.action!==`delegate`&&n.action!==`revoked`\|\|typeof n.paymentMethodId!=`string`\|\|n.paymentMethodId.length===0)return;t.onCardAction?.({action:n.action,paymentMethodId:n.paymentMethodId});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??E);return}case p.CLOSE:this.closeFromIframe(t,n);return;default:return}}handleCreateDelegationMessage(e,t,n){if(!T(e,t))switch(e.type){case p.BOOTED:this.postInitOnBooted(),t.onBooted?.();return;case p.READY:t.onReady?.();return;case p.SUCCESS:{let r=(e.payload??{}).delegationId;if(typeof r!=`string`\|\|r.length===0){t.onError?.(O);return}t.onSuccess?.({result:{delegationId:r,paymentMethodId:t.paymentMethodId},handle:this.buildSuccessHandle(t,n)});return}case p.ERROR:{let n=e.payload;t.onError?.(n?.error??E);return}case p.CLOSE:this.closeFromIframe(t,n);return;default:return}}closeFromIframe(e,t){this.destroyed\|\|this.manager!==t\|\|(this.destroy(),e.onClose?.())}buildSuccessHandle(e,t){return{close:()=>this.closeFromIframe(e,t)}}async deleteWithSession(e,t){let n;try{n=await fetch(e,{method:`DELETE`,headers:{Authorization:`Bearer ${this.session.getToken()}`,Accept:`application/json`}})}catch(e){throw new l(e instanceof Error&&e.message?e.message:t)}if(n.ok)return;let r,i=t;try{let e=await n.json();typeof e?.message==`string`&&e.message.length>0&&(i=e.message),typeof e?.code==`string`&&(r=e.code)}catch{}throw new l(i,n.status,r)}};function A(e){if(typeof e!=`object`\|\|!e)return!1;let t=e;return[`sessionToken`,`userId`,`expiresAt`,`apiKeyHash`].every(e=>typeof t[e]==`string`)&&typeof t.userWallet==`string`&&t.userWallet.startsWith(`0x`)}var j=class e{sessionManager;_account;environment;_checkout=null;_delegations=null;events=new f;constructor(e,t,n){this.sessionManager=e,this._account=t,this.environment=n}static async initialize(n){let{session:r,environment:i}=n;if(!r\|\|typeof r!=`object`)throw new s(`MISSING_SESSION`);if(!i\|\|!t.includes(i))throw new s(`INVALID_ENVIRONMENT`);if(!A(r))throw new s(`INVALID_SESSION`);let a=new d(r),o=new e(a,{userId:r.userId,userWallet:r.userWallet},i);return a.startAutoRefresh(()=>o.refreshSession(),()=>o.events.emit(`session-expired`,void 0)),o}async refreshSession(){let e=await fetch(`${i(this.environment)}/api/v1/widgets/session/refresh`,{method:`POST`,headers:{Authorization:`Bearer ${this.sessionManager.getToken()}`}});if(!e.ok)throw Error(`Session refresh failed with status ${e.status}`);let t=await e.json();if(!A(t))throw Error(`Session refresh returned an invalid response`);return t}on(e,t){return this.events.on(e,t),this}off(e,t){return this.events.off(e,t),this}get account(){return this._account}get hasValidSession(){return this.sessionManager.isValid()}getSessionToken(){if(!this.sessionManager.isValid())throw new c;return this.sessionManager.getToken()}get checkout(){return this._checkout\|\|=new S(this.sessionManager,a(this.environment)),this._checkout}get delegations(){return this._delegations\|\|=new k(this.sessionManager,a(this.environment),i(this.environment)),this._delegations}destroy(){this.sessionManager.stopAutoRefresh(),this._checkout?.destroy(),this._checkout=null,this._delegations?.destroy(),this._delegations=null,this.events.removeAllListeners()}};e.CheckoutWidget=S,e.DelegationsWidget=k,e.IframeManager=b,e.NeverminedWidgets=j,e.SessionManager=d,e.TypedEventEmitter=f,e.WIDGET_MESSAGE_VERSION=m,e.WidgetApiError=l,e.WidgetInitError=s,e.WidgetMessageType=p,e.WidgetSessionExpiredError=c,e.createMessage=_,e.parseMessage=v});

package/dist/index.mjs CHANGED Viewed

@@ -27,31 +27,24 @@ function i(e) {
 //#endregion
 //#region src/utils/errors.ts
 var a = {
-	MISSING_INIT_TOKEN: {
+	MISSING_SESSION: {
 		numericCode: "WDG.0001",
-		message: "initToken is required and must be a non-empty string"
+		message: "session is required — pass the WidgetSession returned by createWidgetSession on the backend"
 	},
 	INVALID_ENVIRONMENT: {
 		numericCode: "WDG.0002",
 		message: "environment must be one of: sandbox, live, staging_sandbox, staging_live, local"
 	},
-	INVALID_INIT_TOKEN: {
+	INVALID_SESSION: {
 		numericCode: "WDG.0003",
-		message: "Init token is invalid or expired"
-	},
-	INVALID_RESPONSE: {
-		numericCode: "WDG.0004",
-		message: "Server response is missing required fields"
-	},
-	NETWORK_ERROR: {
-		numericCode: "WDG.0005",
-		message: "Network request failed"
+		message: "session is missing required fields"
 	},
 	SESSION_EXPIRED: {
 		numericCode: "WDG.0006",
 		message: "Widget session has expired"
 	}
 }, o = class extends Error {
+	code;
 	constructor(e, t, n) {
 		super(t ?? a[e].message, { cause: n }), this.code = e, this.name = "WidgetInitError";
 	}
@@ -61,6 +54,8 @@ var a = {
 		super(a.SESSION_EXPIRED.message), this.name = "WidgetSessionExpiredError";
 	}
 }, c = class extends Error {
+	status;
+	apiCode;
 	constructor(e, t, n) {
 		super(e), this.status = t, this.apiCode = n, this.name = "WidgetApiError";
 	}
@@ -164,9 +159,11 @@ function _(e) {
 		reason: typeof t.type == "string" && t.type.startsWith("nvm:") ? `unknown nvm: type "${t.type}"` : "missing or unknown type"
 	};
 }
-//#endregion
-//#region src/iframe-manager.ts
-var v = class {
+function v(e, t, n) {
+	return Math.max(t, Math.min(n, Math.round(e)));
+}
+var y = class {
+	expectedOrigin;
 	iframe = null;
 	messageHandlers = /* @__PURE__ */ new Set();
 	protocolErrorHandlers = /* @__PURE__ */ new Set();
@@ -178,7 +175,12 @@ var v = class {
 	create(e, t) {
 		this.iframe?.remove();
 		let n = document.createElement("iframe");
-		return n.src = e, n.style.width = "100%", n.style.height = "100%", n.style.border = "none", n.style.display = "block", n.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms"), t?.container || (n.style.position = "fixed", n.style.top = "0", n.style.left = "0", n.style.right = "0", n.style.bottom = "0", n.style.zIndex = "9999"), t?.style && Object.assign(n.style, t.style), (t?.container ?? document.body).appendChild(n), this.iframe = n, n;
+		if (n.src = e, n.style.display = "block", n.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms"), !t?.container) n.style.width = "100%", n.style.height = "100%", n.style.border = "none", n.style.position = "fixed", n.style.top = "0", n.style.left = "0", n.style.right = "0", n.style.bottom = "0", n.style.zIndex = "9999";
+		else {
+			let e = v(t.width ?? 480, 440, 720), r = v(t.height ?? 720, 640, 960);
+			n.style.width = `${e}px`, n.style.height = `${r}px`, n.style.border = "1px solid #e5e7eb", n.style.borderRadius = "8px", n.style.boxSizing = "border-box";
+		}
+		return t?.style && Object.assign(n.style, t.style), (t?.container ?? document.body).appendChild(n), this.iframe = n, n;
 	}
 	destroy() {
 		this.destroyed = !0, this.messageListener &&= (window.removeEventListener("message", this.messageListener), null), this.messageHandlers.clear(), this.protocolErrorHandlers.clear(), this.iframe?.remove(), this.iframe = null;
@@ -215,10 +217,12 @@ var v = class {
 			});
 		}, window.addEventListener("message", this.messageListener));
 	}
-}, y = {
+}, b = {
 	code: "UNKNOWN",
 	message: "Unknown widget error"
-}, b = class {
+}, x = class {
+	session;
+	webappBase;
 	manager = null;
 	destroyed = !1;
 	constructor(e, t) {
@@ -230,14 +234,24 @@ var v = class {
 		this.manager?.destroy();
 		let t = new URL(this.webappBase).origin, n = window.location.origin, r = new URL(`/embed/checkout/${encodeURIComponent(e.did)}`, this.webappBase);
 		r.searchParams.set("parentOrigin", n), e.planId && r.searchParams.set("planId", e.planId);
-		let i = new v(t);
-		this.manager = i, i.create(r.toString(), { container: e.container }), i.onMessage((t) => this.handleMessage(t, e));
+		let i = new y(t);
+		this.manager = i, i.create(r.toString(), {
+			container: e.container,
+			width: e.width,
+			height: e.height
+		}), i.onMessage((t) => this.handleMessage(t, e, i));
 	}
 	destroy() {
 		this.destroyed = !0, this.manager?.destroy(), this.manager = null;
 	}
-	handleMessage(e, t) {
-		if (!C(e, t)) switch (e.type) {
+	closeFromIframe(e, t) {
+		this.destroyed || this.manager !== t || (this.destroy(), e.onClose?.());
+	}
+	buildSuccessHandle(e, t) {
+		return { close: () => this.closeFromIframe(e, t) };
+	}
+	handleMessage(e, t, n) {
+		if (!w(e, t)) switch (e.type) {
 			case f.BOOTED:
 				this.manager?.postMessage(g(f.INIT, { sessionToken: this.session.getToken() })), t.onBooted?.();
 				return;
@@ -245,32 +259,35 @@ var v = class {
 				t.onReady?.();
 				return;
 			case f.SUCCESS: {
-				let n = e.payload ?? {};
+				let r = e.payload ?? {}, i = {
+					did: r.did ?? t.did,
+					planId: r.planId ?? t.planId,
+					txHash: r.txHash
+				};
 				t.onSuccess?.({
-					did: n.did ?? t.did,
-					planId: n.planId ?? t.planId,
-					txHash: n.txHash
+					result: i,
+					handle: this.buildSuccessHandle(t, n)
 				});
 				return;
 			}
 			case f.ERROR: {
 				let n = e.payload;
-				t.onError?.(n?.error ?? y);
+				t.onError?.(n?.error ?? b);
 				return;
 			}
 			case f.CLOSE:
-				t.onClose?.(), this.destroy();
+				this.closeFromIframe(t, n);
 				return;
 			default: return;
 		}
 	}
 };
-function x(e) {
+function S(e) {
 	if (typeof e != "object" || !e) return null;
 	let t = e.expectedEmail;
 	return typeof t != "string" || t.length === 0 ? null : { expectedEmail: t };
 }
-function S(e) {
+function C(e) {
 	if (typeof e != "object" || !e) return null;
 	let t = e.requestedEmail, n = e.expectedEmail;
 	return typeof t != "string" || t.length === 0 || typeof n != "string" || n.length === 0 ? null : {
@@ -278,43 +295,60 @@ function S(e) {
 		expectedEmail: n
 	};
 }
-function C(e, t) {
+function w(e, t) {
 	if (e.type === f.AUTH_MISMATCH) {
-		let n = x(e.payload);
+		let n = S(e.payload);
 		return n && t.onAuthMismatch?.(n), !0;
 	}
 	if (e.type === f.AUTH_SWITCH_REQUEST) {
-		let n = S(e.payload);
+		let n = C(e.payload);
 		return n && t.onAuthSwitchRequest?.(n), !0;
 	}
 	return !1;
 }
 //#endregion
 //#region src/widgets/delegations.ts
-var w = {
+var T = {
 	code: "UNKNOWN",
 	message: "Unknown widget error"
-}, T = {
+}, E = {
 	code: "UNKNOWN",
 	message: "Malformed nvm:success payload — paymentMethodId missing or invalid"
-}, E = {
+}, D = {
 	code: "UNKNOWN",
 	message: "Malformed nvm:success payload — delegationId missing or invalid"
-}, D = class {
+}, O = class {
+	session;
+	webappBase;
+	apiBase;
 	manager = null;
 	destroyed = !1;
 	constructor(e, t, n) {
 		this.session = e, this.webappBase = t, this.apiBase = n;
 	}
 	enrollCard(e) {
-		this.assertAlive("enrollCard"), this.mountIframe("/embed/cards/enroll", e.container).onMessage((t) => this.handleEnrollMessage(t, e));
+		this.assertAlive("enrollCard");
+		let t = e.provider ?? "stripe", n = this.mountIframe("/embed/cards/enroll", e.container, { provider: t }, {
+			width: e.width,
+			height: e.height
+		});
+		n.onMessage((t) => this.handleEnrollMessage(t, e, n));
 	}
 	listCards(e) {
-		this.assertAlive("listCards"), this.mountIframe("/embed/cards/list", e.container).onMessage((t) => this.handleListMessage(t, e));
+		this.assertAlive("listCards");
+		let t = this.mountIframe("/embed/cards/list", e.container, void 0, {
+			width: e.width,
+			height: e.height
+		});
+		t.onMessage((n) => this.handleListMessage(n, e, t));
 	}
 	createDelegation(e) {
 		if (this.assertAlive("createDelegation"), typeof e.paymentMethodId != "string" || e.paymentMethodId.length === 0) throw Error("[DelegationsWidget] createDelegation: paymentMethodId is required");
-		this.mountIframe("/embed/cards/delegate", e.container, { paymentMethodId: e.paymentMethodId }).onMessage((t) => this.handleCreateDelegationMessage(t, e));
+		let t = this.mountIframe("/embed/cards/delegate", e.container, { paymentMethodId: e.paymentMethodId }, {
+			width: e.width,
+			height: e.height
+		});
+		t.onMessage((n) => this.handleCreateDelegationMessage(n, e, t));
 	}
 	async revokeCard(e) {
 		if (typeof e != "string" || e.length === 0) throw Error("[DelegationsWidget] revokeCard: paymentMethodId is required");
@@ -330,19 +364,23 @@ var w = {
 	assertAlive(e) {
 		if (this.destroyed) throw Error(`[DelegationsWidget] cannot ${e}: instance has been destroyed`);
 	}
-	mountIframe(e, t, n = {}) {
+	mountIframe(e, t, n = {}, r = {}) {
 		this.manager?.destroy();
-		let r = new URL(this.webappBase).origin, i = window.location.origin, a = new URL(e, this.webappBase);
-		a.searchParams.set("parentOrigin", i);
-		for (let [e, t] of Object.entries(n)) a.searchParams.set(e, t);
-		let o = new v(r);
-		return this.manager = o, o.create(a.toString(), { container: t }), o;
+		let i = new URL(this.webappBase).origin, a = window.location.origin, o = new URL(e, this.webappBase);
+		o.searchParams.set("parentOrigin", a);
+		for (let [e, t] of Object.entries(n)) o.searchParams.set(e, t);
+		let s = new y(i);
+		return this.manager = s, s.create(o.toString(), {
+			container: t,
+			width: r.width,
+			height: r.height
+		}), s;
 	}
 	postInitOnBooted() {
 		this.manager?.postMessage(g(f.INIT, { sessionToken: this.session.getToken() }));
 	}
-	handleEnrollMessage(e, t) {
-		if (!C(e, t)) switch (e.type) {
+	handleEnrollMessage(e, t, n) {
+		if (!w(e, t)) switch (e.type) {
 			case f.BOOTED:
 				this.postInitOnBooted(), t.onBooted?.();
 				return;
@@ -350,27 +388,30 @@ var w = {
 				t.onReady?.();
 				return;
 			case f.SUCCESS: {
-				let n = (e.payload ?? {}).paymentMethodId;
-				if (typeof n != "string" || n.length === 0) {
-					t.onError?.(T);
+				let r = (e.payload ?? {}).paymentMethodId;
+				if (typeof r != "string" || r.length === 0) {
+					t.onError?.(E);
 					return;
 				}
-				t.onSuccess?.({ paymentMethodId: n });
+				t.onSuccess?.({
+					result: { paymentMethodId: r },
+					handle: this.buildSuccessHandle(t, n)
+				});
 				return;
 			}
 			case f.ERROR: {
 				let n = e.payload;
-				t.onError?.(n?.error ?? w);
+				t.onError?.(n?.error ?? T);
 				return;
 			}
 			case f.CLOSE:
-				t.onClose?.(), this.destroy();
+				this.closeFromIframe(t, n);
 				return;
 			default: return;
 		}
 	}
-	handleListMessage(e, t) {
-		if (!C(e, t)) switch (e.type) {
+	handleListMessage(e, t, n) {
+		if (!w(e, t)) switch (e.type) {
 			case f.BOOTED:
 				this.postInitOnBooted(), t.onBooted?.();
 				return;
@@ -379,7 +420,7 @@ var w = {
 				return;
 			case f.CARD_ACTION: {
 				let n = e.payload ?? {};
-				if (n.action !== "delegate" || typeof n.paymentMethodId != "string" || n.paymentMethodId.length === 0) return;
+				if (n.action !== "delegate" && n.action !== "revoked" || typeof n.paymentMethodId != "string" || n.paymentMethodId.length === 0) return;
 				t.onCardAction?.({
 					action: n.action,
 					paymentMethodId: n.paymentMethodId
@@ -388,17 +429,17 @@ var w = {
 			}
 			case f.ERROR: {
 				let n = e.payload;
-				t.onError?.(n?.error ?? w);
+				t.onError?.(n?.error ?? T);
 				return;
 			}
 			case f.CLOSE:
-				t.onClose?.(), this.destroy();
+				this.closeFromIframe(t, n);
 				return;
 			default: return;
 		}
 	}
-	handleCreateDelegationMessage(e, t) {
-		if (!C(e, t)) switch (e.type) {
+	handleCreateDelegationMessage(e, t, n) {
+		if (!w(e, t)) switch (e.type) {
 			case f.BOOTED:
 				this.postInitOnBooted(), t.onBooted?.();
 				return;
@@ -406,28 +447,37 @@ var w = {
 				t.onReady?.();
 				return;
 			case f.SUCCESS: {
-				let n = (e.payload ?? {}).delegationId;
-				if (typeof n != "string" || n.length === 0) {
-					t.onError?.(E);
+				let r = (e.payload ?? {}).delegationId;
+				if (typeof r != "string" || r.length === 0) {
+					t.onError?.(D);
 					return;
 				}
 				t.onSuccess?.({
-					delegationId: n,
-					paymentMethodId: t.paymentMethodId
+					result: {
+						delegationId: r,
+						paymentMethodId: t.paymentMethodId
+					},
+					handle: this.buildSuccessHandle(t, n)
 				});
 				return;
 			}
 			case f.ERROR: {
 				let n = e.payload;
-				t.onError?.(n?.error ?? w);
+				t.onError?.(n?.error ?? T);
 				return;
 			}
 			case f.CLOSE:
-				t.onClose?.(), this.destroy();
+				this.closeFromIframe(t, n);
 				return;
 			default: return;
 		}
 	}
+	closeFromIframe(e, t) {
+		this.destroyed || this.manager !== t || (this.destroy(), e.onClose?.());
+	}
+	buildSuccessHandle(e, t) {
+		return { close: () => this.closeFromIframe(e, t) };
+	}
 	async deleteWithSession(e, t) {
 		let n;
 		try {
@@ -452,7 +502,7 @@ var w = {
 };
 //#endregion
 //#region src/nevermined-widgets.ts
-function O(e) {
+function k(e) {
 	if (typeof e != "object" || !e) return !1;
 	let t = e;
 	return [
@@ -462,7 +512,10 @@ function O(e) {
 		"apiKeyHash"
 	].every((e) => typeof t[e] == "string") && typeof t.userWallet == "string" && t.userWallet.startsWith("0x");
 }
-var k = class t {
+var A = class t {
+	sessionManager;
+	_account;
+	environment;
 	_checkout = null;
 	_delegations = null;
 	events = new d();
@@ -470,32 +523,15 @@ var k = class t {
 		this.sessionManager = e, this._account = t, this.environment = n;
 	}
 	static async initialize(n) {
-		let { initToken: i, environment: a } = n;
-		if (!i || typeof i != "string") throw new o("MISSING_INIT_TOKEN");
-		if (!a || !e.includes(a)) throw new o("INVALID_ENVIRONMENT");
-		let s = r(a), c;
-		try {
-			c = await fetch(`${s}/api/v1/widgets/session`, {
-				method: "POST",
-				headers: { "Content-Type": "application/json" },
-				body: JSON.stringify({ initToken: i })
-			});
-		} catch (e) {
-			throw console.error("[NeverminedWidgets] fetch failed:", e), new o("NETWORK_ERROR", void 0, e);
-		}
-		if (!c.ok) throw c.status === 401 ? new o("INVALID_INIT_TOKEN") : new o("NETWORK_ERROR", `Request failed with status ${c.status}`);
-		let l;
-		try {
-			l = await c.json();
-		} catch (e) {
-			throw new o("INVALID_RESPONSE", void 0, e);
-		}
-		if (!O(l)) throw new o("INVALID_RESPONSE");
-		let d = new u(l), f = new t(d, {
-			userId: l.userId,
-			userWallet: l.userWallet
-		}, a);
-		return d.startAutoRefresh(() => f.refreshSession(), () => f.events.emit("session-expired", void 0)), f;
+		let { session: r, environment: i } = n;
+		if (!r || typeof r != "object") throw new o("MISSING_SESSION");
+		if (!i || !e.includes(i)) throw new o("INVALID_ENVIRONMENT");
+		if (!k(r)) throw new o("INVALID_SESSION");
+		let a = new u(r), s = new t(a, {
+			userId: r.userId,
+			userWallet: r.userWallet
+		}, i);
+		return a.startAutoRefresh(() => s.refreshSession(), () => s.events.emit("session-expired", void 0)), s;
 	}
 	async refreshSession() {
 		let e = await fetch(`${r(this.environment)}/api/v1/widgets/session/refresh`, {
@@ -504,7 +540,7 @@ var k = class t {
 		});
 		if (!e.ok) throw Error(`Session refresh failed with status ${e.status}`);
 		let t = await e.json();
-		if (!O(t)) throw Error("Session refresh returned an invalid response");
+		if (!k(t)) throw Error("Session refresh returned an invalid response");
 		return t;
 	}
 	on(e, t) {
@@ -524,14 +560,14 @@ var k = class t {
 		return this.sessionManager.getToken();
 	}
 	get checkout() {
-		return this._checkout ||= new b(this.sessionManager, i(this.environment)), this._checkout;
+		return this._checkout ||= new x(this.sessionManager, i(this.environment)), this._checkout;
 	}
 	get delegations() {
-		return this._delegations ||= new D(this.sessionManager, i(this.environment), r(this.environment)), this._delegations;
+		return this._delegations ||= new O(this.sessionManager, i(this.environment), r(this.environment)), this._delegations;
 	}
 	destroy() {
 		this.sessionManager.stopAutoRefresh(), this._checkout?.destroy(), this._checkout = null, this._delegations?.destroy(), this._delegations = null, this.events.removeAllListeners();
 	}
 };
 //#endregion
-export { b as CheckoutWidget, D as DelegationsWidget, v as IframeManager, k as NeverminedWidgets, u as SessionManager, d as TypedEventEmitter, p as WIDGET_MESSAGE_VERSION, c as WidgetApiError, o as WidgetInitError, f as WidgetMessageType, s as WidgetSessionExpiredError, g as createMessage, _ as parseMessage };
+export { x as CheckoutWidget, O as DelegationsWidget, y as IframeManager, A as NeverminedWidgets, u as SessionManager, d as TypedEventEmitter, p as WIDGET_MESSAGE_VERSION, c as WidgetApiError, o as WidgetInitError, f as WidgetMessageType, s as WidgetSessionExpiredError, g as createMessage, _ as parseMessage };

package/dist/messages.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAE3B,IAAI,aAAa;IACjB,KAAK,cAAc;IAEnB,MAAM,eAAe;IACrB,KAAK,cAAc;IACnB,MAAM,eAAe;IACrB,OAAO,gBAAgB;IACvB,KAAK,cAAc;IAInB,WAAW,oBAAoB;IAI/B,aAAa,sBAAsB;~~IAInC~~,mBAAmB,4BAA4B;CAChD;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,GAAG,CAAA;IACZ,OAAO,CAAC,EAAE,CAAC,CAAA;CACZ;AAED,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAA;AAWlD,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAMvF;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CA8BvD"}
1	+ {"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAE3B,IAAI,aAAa;IACjB,KAAK,cAAc;IAEnB,MAAM,eAAe;IACrB,KAAK,cAAc;IACnB,MAAM,eAAe;IACrB,OAAO,gBAAgB;IACvB,KAAK,cAAc;IAInB,WAAW,oBAAoB;IAI/B,aAAa,sBAAsB;IAKnC,mBAAmB,4BAA4B;CAChD;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,GAAG,CAAA;IACZ,OAAO,CAAC,EAAE,CAAC,CAAA;CACZ;AAED,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAA;AAWlD,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAMvF;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CA8BvD"}

package/dist/nevermined-widgets.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"nevermined-widgets.d.ts","sourceRoot":"","sources":["../src/nevermined-widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAA;AAMzF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,UAAU,uBAAuB;IAC/B,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAYD,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,OAAO;WAMM,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;~~YA+C3D~~,cAAc;IAwB5B,EAAE,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,GAAG,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,IAAI,OAAO,IAAI,aAAa,CAE3B;IAED,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED,eAAe,IAAI,MAAM;IAKzB,IAAI,QAAQ,IAAI,cAAc,CAK7B;IAED,IAAI,WAAW,IAAI,iBAAiB,CASnC;IAED;;;;;;;;OAQG;IACH,OAAO,IAAI,IAAI;CAQhB"}
1	+ {"version":3,"file":"nevermined-widgets.d.ts","sourceRoot":"","sources":["../src/nevermined-widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAA;AAMzF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,UAAU,uBAAuB;IAC/B,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAYD,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,OAAO;WAMM,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;YA0B3D,cAAc;IAwB5B,EAAE,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,GAAG,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,IAAI,OAAO,IAAI,aAAa,CAE3B;IAED,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED,eAAe,IAAI,MAAM;IAKzB,IAAI,QAAQ,IAAI,cAAc,CAK7B;IAED,IAAI,WAAW,IAAI,iBAAiB,CASnC;IAED;;;;;;;;OAQG;IACH,OAAO,IAAI,IAAI;CAQhB"}

package/dist/types.d.ts CHANGED Viewed

@@ -1,7 +1,13 @@
 export declare const ENVIRONMENTS: readonly ["local", "sandbox", "live", "staging_sandbox", "staging_live"];
 export type Environment = (typeof ENVIRONMENTS)[number];
 export interface WidgetConfig {
-    initToken: string;
+    /**
+     * Widget session minted server-to-server by the integrator backend
+     * (typically via `@nevermined-io/ui-widgets-server.createWidgetSession`).
+     * Forward the response object verbatim — the SDK never holds the widget
+     * key `rawSecret`.
+     */
+    session: WidgetSession;
     environment: Environment;
 }
 export interface WidgetSession {
@@ -24,41 +30,80 @@ export interface WidgetAccount {
 }
 export interface EmbedError {
     code: 'UNAUTHORIZED' | 'NETWORK' | 'PAYMENT_NOT_CONFIRMED' | 'UNKNOWN';
+    /**
+     * Raw, host-facing message. Carries the underlying detail (e.g. the backend
+     * `NVMException.message`) and is what the SDK forwards over the `nvm:error`
+     * postMessage for the integrator to log. May contain operational/technical
+     * text, so it is NOT safe to render in an end-user surface verbatim.
+     */
     message: string;
+    /**
+     * Safe, user-facing message. Generic per-`code` copy with no operational
+     * detail — render this (falling back to `message`) in any UI shown to the
+     * end user, such as the widgets' terminal error panels. Optional and
+     * additive: existing host integrations that only read `message` are
+     * unaffected.
+     */
+    userMessage?: string;
     status?: number;
     apiCode?: string;
 }
 /**
  * Emitted (via the per-widget `onAuthMismatch` callback) when the iframe
  * detects a live host Privy session whose email does not match the email
- * baked into the widget init token. The iframe renders a two-button prompt
- * (continue as the host identity, or switch to the init-token identity by
- * signing out of Privy inside the iframe) and the host page is informed so
- * it can mirror that affordance on its own UI. The widget is effectively
- * halted until either button is clicked or the host re-issues an init
- * token via the action below.
+ * the widget session was minted for. The iframe renders a two-button prompt
+ * (continue as the host identity, or switch to the widget-session identity
+ * by signing out of Privy inside the iframe) and the host page is informed
+ * so it can mirror that affordance on its own UI. The widget is effectively
+ * halted until either button is clicked or the host re-mints a widget
+ * session via the action below.
  */
 export interface AuthMismatchDetail {
-    /** Email expected by the widget init token (normalized — trimmed, lower-cased). */
+    /** Email the widget session was minted for (normalized — trimmed, lower-cased). */
     expectedEmail: string;
 }
 /**
  * Emitted (via the per-widget `onAuthSwitchRequest` callback) when the user
  * picks "Continue as <hostEmail>" on the mismatch prompt. The host page is
- * expected to re-issue an init token bound to `requestedEmail` and reopen
+ * expected to re-mint a widget session bound to `requestedEmail` and reopen
  * the widget; the iframe stays on the prompt until that happens.
  *
  * **Security note for integrators:** the SDK posts this event to the host
  * via `window.postMessage`, but the host's `window.addEventListener('message',
  * ...)` listens to ALL frames on the page. Validate `event.origin === <your
- * widget host>` (e.g. `https://app.nevermined.io`) before re-issuing tokens
- * — otherwise a malicious sub-frame could spoof this event and trick your
- * backend into minting a token for an attacker-supplied email.
+ * widget host>` (e.g. `https://app.nevermined.io`) before re-minting a
+ * session — otherwise a malicious sub-frame could spoof this event and
+ * trick your backend into minting a session for an attacker-supplied email.
  */
 export interface AuthSwitchRequestDetail {
     /** Email the user wants the widget to operate under (their live Privy identity). */
     requestedEmail: string;
-    /** Email originally baked into the init token, for reference / telemetry. */
+    /** Email the original widget session was minted for, for reference / telemetry. */
     expectedEmail: string;
 }
+/**
+ * Control surface passed to every widget's `onSuccess` callback (#1668
+ * sub-tasks 3 + 4). The iframe stays mounted indefinitely after a
+ * successful action so the integrator can show their own post-action UI
+ * (toast, next-step prompt, etc.) while the success state remains visible
+ * inside the widget. The integrator dismisses the widget by calling
+ * `handle.close()` — which destroys the iframe and invokes `onClose` —
+ * whenever their own flow is ready.
+ */
+export interface WidgetSuccessHandle {
+    /**
+     * Destroys the iframe and invokes the widget's `onClose` callback.
+     * Idempotent: calling close on an already-closed widget is a no-op.
+     */
+    close(): void;
+}
+/**
+ * Payload shape passed to every widget's `onSuccess` callback. `result`
+ * is the per-widget data (paymentMethodId, delegationId, etc.); `handle`
+ * lets the integrator dismiss the widget on their own schedule.
+ */
+export interface WidgetSuccessEvent<T> {
+    result: T;
+    handle: WidgetSuccessHandle;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,0EAA2E,CAAA;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC3B,~~SAAS~~,EAAE,~~MAAM~~,CAAA;~~IACjB~~,WAAW,EAAE,WAAW,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;IACzB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAAA;IACtE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAA;IACtB,~~6EAA6E~~;~~IAC7E~~,aAAa,EAAE,MAAM,CAAA;CACtB"}
1	+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,0EAA2E,CAAA;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,OAAO,EAAE,aAAa,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;IACzB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAAA;IACtE;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAA;IACtB,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,KAAK,IAAI,IAAI,CAAA;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,CAAA;IACT,MAAM,EAAE,mBAAmB,CAAA;CAC5B"}

package/dist/utils/errors.d.ts CHANGED Viewed

@@ -1,23 +1,15 @@
 export declare const WIDGET_ERRORS: {
-    readonly MISSING_INIT_TOKEN: {
+    readonly MISSING_SESSION: {
         readonly numericCode: "WDG.0001";
-        readonly message: "initToken is required and must be a non-empty string";
+        readonly message: "session is required — pass the WidgetSession returned by createWidgetSession on the backend";
     };
     readonly INVALID_ENVIRONMENT: {
         readonly numericCode: "WDG.0002";
         readonly message: "environment must be one of: sandbox, live, staging_sandbox, staging_live, local";
     };
-    readonly INVALID_INIT_TOKEN: {
+    readonly INVALID_SESSION: {
         readonly numericCode: "WDG.0003";
-        readonly message: "Init token is invalid or expired";
-    };
-    readonly INVALID_RESPONSE: {
-        readonly numericCode: "WDG.0004";
-        readonly message: "Server response is missing required fields";
-    };
-    readonly NETWORK_ERROR: {
-        readonly numericCode: "WDG.0005";
-        readonly message: "Network request failed";
+        readonly message: "session is missing required fields";
     };
     readonly SESSION_EXPIRED: {
         readonly numericCode: "WDG.0006";

package/dist/utils/errors.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa~~;;;;;;;;;;;;;;;;;;;;;;;;;CAgBmD~~,CAAA;AAE7E,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAA;AAExD,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EACrC,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,OAAO;CAKlB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAS;;CAM3C;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,MAAM,CAAC,EAAE,MAAM;aACf,OAAO,CAAC,EAAE,MAAM;gBAFhC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,YAAA;CAKnC"}
1	+ {"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;CAemD,CAAA;AAE7E,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAA;AAExD,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EACrC,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,OAAO;CAKlB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAS;;CAM3C;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,MAAM,CAAC,EAAE,MAAM;aACf,OAAO,CAAC,EAAE,MAAM;gBAFhC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,YAAA;CAKnC"}

package/dist/widgets/checkout.d.ts CHANGED Viewed

@@ -1,6 +1,6 @@
 import { SessionManager } from '../session.js';
 import { type WidgetMessage } from '../messages.js';
-import type { AuthMismatchDetail, AuthSwitchRequestDetail, EmbedError } from '../types.js';
+import type { AuthMismatchDetail, AuthSwitchRequestDetail, EmbedError, WidgetSuccessEvent } from '../types.js';
 export interface CheckoutResult {
     did: string;
     planId?: string;
@@ -10,20 +10,37 @@ export interface CheckoutOptions {
     did: string;
     planId?: string;
     container?: HTMLElement;
+    /**
+     * Fixed iframe width in pixels. Clamped by the SDK to a supported range
+     * (see `INLINE_MIN_WIDTH` / `INLINE_MAX_WIDTH` / `INLINE_DEFAULT_WIDTH`
+     * in `iframe-manager`). Ignored in fullscreen overlay mode (no container).
+     */
+    width?: number;
+    /**
+     * Fixed iframe height in pixels. Clamped by the SDK to a supported range
+     * (see `INLINE_MIN_HEIGHT` / `INLINE_MAX_HEIGHT` / `INLINE_DEFAULT_HEIGHT`
+     * in `iframe-manager`). Ignored in fullscreen overlay mode.
+     */
+    height?: number;
     onBooted?: () => void;
     onReady?: () => void;
-    onSuccess?: (result: CheckoutResult) => void;
+    /**
+     * Fires when the iframe posts `nvm:success`. The widget stays mounted in
+     * its success state — the integrator dismisses it via `event.handle.close()`
+     * when their own post-success flow is ready. There is no auto-dismiss.
+     */
+    onSuccess?: (event: WidgetSuccessEvent<CheckoutResult>) => void;
     onError?: (error: EmbedError) => void;
     /**
      * Fires when the iframe detects that the live host Privy session belongs
-     * to a different account than the email baked into the widget init token.
+     * to a different account than the email the widget session was minted for.
      * The iframe stays mounted on a two-button prompt; the host can mirror that
      * affordance on its own UI. See `AuthMismatchDetail`.
      */
     onAuthMismatch?: (detail: AuthMismatchDetail) => void;
     /**
      * Fires when, on the mismatch prompt, the user picks "Continue as
-     * <hostEmail>". The host should re-issue an init token bound to
+     * <hostEmail>". The host should re-mint a widget session bound to
      * `requestedEmail` and reopen the widget. The iframe stays on the prompt
      * until then. See `AuthSwitchRequestDetail`.
      */
@@ -52,6 +69,25 @@ export declare class CheckoutWidget {
      */
     start(options: CheckoutOptions): void;
     destroy(): void;
+    /**
+     * Shared close path for `handle.close()` (integrator-driven) and
+     * `nvm:close` (iframe-driven). Idempotent — multiple calls collapse to a
+     * single `onClose` + destroy, which matters because `handle.close()`
+     * could race with a `nvm:close` from the iframe if the integrator's
+     * post-success UI happens to mount instantly.
+     *
+     * `manager` is the IframeManager this close was bound to when the handle
+     * was minted. A stale handle from a previous mount (the instance was
+     * remounted via a second `start()` without an intervening close) must NOT
+     * tear down the now-live iframe, so we bail once it no longer owns
+     * `this.manager`.
+     *
+     * Ordering is load-bearing: `destroy()` runs before `onClose()` so a
+     * throwing `onClose` cannot leak a second close — `destroyed` is already
+     * true by the time the callback runs.
+     */
+    private closeFromIframe;
+    private buildSuccessHandle;
     private handleMessage;
 }
 /**

package/dist/widgets/checkout.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/widgets/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACrF,OAAO,KAAK,~~EAAE~~,kBAAkB,~~EAAE~~,uBAAuB,~~EAAE~~,UAAU,~~EAAE~~,MAAM,aAAa,CAAA;~~AAE1F~~,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,~~MAAM~~,EAAE,cAAc,KAAK,IAAI,CAAA;~~IAC5C~~,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAID;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM;IAGrC;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;~~IAwBrC~~,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,aAAa;~~CAwCtB~~;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAK7E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAOvF;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAY3F"}
1	+ {"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/widgets/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACrF,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EACnB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAID;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM;IAGrC;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IA4BrC,OAAO,IAAI,IAAI;IAMf;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,aAAa;CA4CtB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAK7E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAOvF;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAY3F"}

package/dist/widgets/delegations.d.ts CHANGED Viewed

@@ -1,13 +1,32 @@
 import { SessionManager } from '../session.js';
-import type { AuthMismatchDetail, AuthSwitchRequestDetail, EmbedError } from '../types.js';
+import type { AuthMismatchDetail, AuthSwitchRequestDetail, EmbedError, WidgetSuccessEvent } from '../types.js';
 export interface EnrollCardResult {
     paymentMethodId: string;
 }
+/**
+ * #1668 sub-task 2: which tokenization flow renders inside the embedded
+ * enrol-card iframe.
+ *
+ * - `'stripe'` (default): Stripe Elements + SetupIntent. The existing flow.
+ * - `'braintree'`: Braintree Drop-in (PayPal vault).
+ * - `'visa'`: Visa Agentic Tokens via VGS Collect → CMP. **Requires an
+ *   HTTPS parent page** — the Visa VTS iframe enforces
+ *   `frame-ancestors 'self' https:` so a non-HTTPS host (e.g. plain
+ *   `http://localhost`) cannot embed this provider.
+ */
+export type EnrollCardProvider = 'stripe' | 'braintree' | 'visa';
 export interface EnrollCardOptions {
     container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
+    /** See `EnrollCardProvider`. Defaults to `'stripe'`. */
+    provider?: EnrollCardProvider;
     onBooted?: () => void;
     onReady?: () => void;
-    onSuccess?: (result: EnrollCardResult) => void;
+    /** See `CheckoutOptions.onSuccess`. */
+    onSuccess?: (event: WidgetSuccessEvent<EnrollCardResult>) => void;
     onError?: (error: EmbedError) => void;
     /** See `CheckoutOptions.onAuthMismatch`. */
     onAuthMismatch?: (detail: AuthMismatchDetail) => void;
@@ -16,12 +35,21 @@ export interface EnrollCardOptions {
     onClose?: () => void;
 }
 export interface CardAction {
-    /** Currently the only emitted action; reserved as a discriminator for future ones. */
-    action: 'delegate';
+    /**
+     * `delegate` — the user asked to create a delegation for this card (host
+     * should mount `createDelegation`). `revoked` — the user removed this card
+     * inline; the list iframe stays open so this is an intra-flow event, not
+     * flow completion (which is why it is NOT an `nvm:success`). See #1411.
+     */
+    action: 'delegate' | 'revoked';
     paymentMethodId: string;
 }
 export interface ListCardsOptions {
     container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
     onBooted?: () => void;
     onReady?: () => void;
     onCardAction?: (action: CardAction) => void;
@@ -39,9 +67,14 @@ export interface CreateDelegationResult {
 export interface CreateDelegationOptions {
     paymentMethodId: string;
     container?: HTMLElement;
+    /** See `CheckoutOptions.width`. */
+    width?: number;
+    /** See `CheckoutOptions.height`. */
+    height?: number;
     onBooted?: () => void;
     onReady?: () => void;
-    onSuccess?: (result: CreateDelegationResult) => void;
+    /** See `CheckoutOptions.onSuccess`. */
+    onSuccess?: (event: WidgetSuccessEvent<CreateDelegationResult>) => void;
     onError?: (error: EmbedError) => void;
     /** See `CheckoutOptions.onAuthMismatch`. */
     onAuthMismatch?: (detail: AuthMismatchDetail) => void;
@@ -81,8 +114,9 @@ export declare class DelegationsWidget {
     enrollCard(options: EnrollCardOptions): void;
     /**
      * Mounts the cards-list iframe at `/embed/cards/list`. Per-row actions
-     * (currently only "Create Delegation") are forwarded via `onCardAction` so
-     * the host can mount the appropriate follow-up widget.
+     * ("Create Delegation" → `'delegate'`, "Remove Card" → `'revoked'`) are
+     * forwarded via `onCardAction` so the host can react (mount a follow-up
+     * widget, refresh its own list, etc.). See `CardAction`.
      */
     listCards(options: ListCardsOptions): void;
     /**
@@ -110,6 +144,25 @@ export declare class DelegationsWidget {
     private handleEnrollMessage;
     private handleListMessage;
     private handleCreateDelegationMessage;
+    /**
+     * #1668: shared close path for `handle.close()` (integrator-driven) and
+     * `nvm:close` (iframe-driven). Idempotent so a race between the
+     * integrator dismissing the widget and the iframe emitting CLOSE
+     * collapses to a single `onClose` + destroy. Generic over the three
+     * options shapes — only `onClose` is referenced.
+     *
+     * `manager` is the IframeManager this close was bound to when the handle
+     * was minted. The three iframe flows share the single `manager` slot, so a
+     * stale handle from an earlier flow (e.g. an uncalled `enrollCard` success
+     * handle held past a later `createDelegation`) must NOT tear down the
+     * now-live iframe — we bail once it no longer owns `this.manager`.
+     *
+     * Ordering is load-bearing: `destroy()` runs before `onClose()` so a
+     * throwing `onClose` cannot leak a second close — `destroyed` is already
+     * true by the time the callback runs.
+     */
+    private closeFromIframe;
+    private buildSuccessHandle;
     private deleteWithSession;
 }
 //# sourceMappingURL=delegations.d.ts.map

package/dist/widgets/delegations.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"delegations.d.ts","sourceRoot":"","sources":["../../src/widgets/delegations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,~~EAAE~~,kBAAkB,~~EAAE~~,uBAAuB,~~EAAE~~,UAAU,~~EAAE~~,MAAM,aAAa,CAAA;~~AAI1F~~,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,~~MAAM~~,EAAE,gBAAgB,KAAK,IAAI,CAAA;~~IAC9C~~,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB~~,sFAAsF~~;~~IACtF~~,MAAM,EAAE,UAAU,CAAA;~~IAClB~~,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,SAAS,CAAC,EAAE,CAAC,~~MAAM~~,EAAE,sBAAsB,KAAK,IAAI,CAAA;~~IACpD~~,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM;IAGlC;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;~~IAM5C;;;;OAIG~~;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;~~IAM1C~~;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;~~IAWxD~~;;;;OAIG;IACG,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxD;;;;OAIG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,WAAW;~~IAsBnB~~,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,mBAAmB;~~IAwC3B~~,OAAO,CAAC,iBAAiB;~~IA+CzB~~,OAAO,CAAC,6BAA6B;~~YA2CvB~~,iBAAiB;CAgChC"}
1	+ {"version":3,"file":"delegations.d.ts","sourceRoot":"","sources":["../../src/widgets/delegations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EACnB,MAAM,aAAa,CAAA;AAIpB,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAA;AAEhE,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAA;IACjE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;IAC9B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAA;IACvE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM;IAGlC;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAY5C;;;;;OAKG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAS1C;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI;IAgBxD;;;;OAIG;IACG,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxD;;;;OAIG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,mBAAmB;IA8C3B,OAAO,CAAC,iBAAiB;IAkDzB,OAAO,CAAC,6BAA6B;IA8CrC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,kBAAkB;YAMZ,iBAAiB;CAgChC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/ui-widgets",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -18,7 +18,7 @@
     "!**/*.tsbuildinfo"
   ],
   "devDependencies": {
-    "vite": "^8.0.5",
+    "vite": "^8.0.13",
     "vite-plugin-dts": "^4.5.4"
   }
 }