@nevermined-io/ui-widgets 0.5.9 → 0.5.11

package/dist/index.mjs

@@ -231,15 +231,21 @@ var y = class {
 	start(e) {
 		if (this.destroyed) throw Error("[CheckoutWidget] cannot start: instance has been destroyed");
 		if (!e.did || typeof e.did != "string") throw Error("[CheckoutWidget] did is required");
-		this.manager?.destroy();
-		let t = new URL(this.webappBase).origin, n = window.location.origin, r = new URL(`/embed/checkout/${encodeURIComponent(e.did)}`, this.webappBase);
-		r.searchParams.set("parentOrigin", n), e.planId && r.searchParams.set("planId", e.planId);
-		let i = new y(t);
-		this.manager = i, i.create(r.toString(), {
-			container: e.container,
-			width: e.width,
-			height: e.height
-		}), i.onMessage((t) => this.handleMessage(t, e, i));
+		let t = new URL(`/embed/checkout/${encodeURIComponent(e.did)}`, this.webappBase);
+		e.planId && t.searchParams.set("planId", e.planId), this.mount(t, e, (t) => ({
+			did: t.did ?? e.did,
+			planId: t.planId ?? e.planId,
+			txHash: t.txHash
+		}), e.onSuccess);
+	}
+	startPlan(e) {
+		if (this.destroyed) throw Error("[CheckoutWidget] cannot start: instance has been destroyed");
+		if (!e.planId || typeof e.planId != "string") throw Error("[CheckoutWidget] planId is required");
+		let t = new URL(`/embed/checkout/plan/${encodeURIComponent(e.planId)}`, this.webappBase);
+		this.mount(t, e, (t) => ({
+			planId: t.planId ?? e.planId,
+			txHash: t.txHash
+		}), e.onSuccess);
 	}
 	destroy() {
 		this.destroyed = !0, this.manager?.destroy(), this.manager = null;
@@ -250,7 +256,18 @@ var y = class {
 	buildSuccessHandle(e, t) {
 		return { close: () => this.closeFromIframe(e, t) };
 	}
-	handleMessage(e, t, n) {
+	mount(e, t, n, r) {
+		this.manager?.destroy();
+		let i = new URL(this.webappBase).origin;
+		e.searchParams.set("parentOrigin", window.location.origin);
+		let a = new y(i);
+		this.manager = a, a.create(e.toString(), {
+			container: t.container,
+			width: t.width,
+			height: t.height
+		}), a.onMessage((e) => this.handleMessage(e, t, a, n, r));
+	}
+	handleMessage(e, t, n, r, i) {
 		if (!w(e, t)) switch (e.type) {
 			case f.BOOTED:
 				this.manager?.postMessage(g(f.INIT, { sessionToken: this.session.getToken() })), t.onBooted?.();
@@ -259,13 +276,9 @@ var y = class {
 				t.onReady?.();
 				return;
 			case f.SUCCESS: {
-				let r = e.payload ?? {}, i = {
-					did: r.did ?? t.did,
-					planId: r.planId ?? t.planId,
-					txHash: r.txHash
-				};
-				t.onSuccess?.({
-					result: i,
+				let a = r(e.payload != null && typeof e.payload == "object" ? e.payload : {});
+				i?.({
+					result: a,
 					handle: this.buildSuccessHandle(t, n)
 				});
 				return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/ui-widgets",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/dist/event-emitter.d.ts

@@ -1,11 +0,0 @@
-type EventHandler<T> = (payload: T) => void;
-export declare class TypedEventEmitter<Events extends object> {
-    private listeners;
-    on<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    off<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    once<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): this;
-    removeAllListeners(event?: keyof Events): this;
-    emit<K extends keyof Events>(event: K, payload: Events[K]): void;
-}
-export {};
-//# sourceMappingURL=event-emitter.d.ts.map

package/dist/event-emitter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-emitter.d.ts","sourceRoot":"","sources":["../src/event-emitter.ts"],"names":[],"mappings":"AAAA,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAA;AAE3C,qBAAa,iBAAiB,CAAC,MAAM,SAAS,MAAM;IAClD,OAAO,CAAC,SAAS,CAAsD;IAEvE,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAO5E,GAAG,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAS7E,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAS9E,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI;IAS9C,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI;CAWjE"}

package/dist/iframe-manager.d.ts

@@ -1,44 +0,0 @@
-import { type WidgetMessage } from './messages.js';
-export interface IframeOptions {
-    container?: HTMLElement;
-    style?: Partial<CSSStyleDeclaration>;
-    /**
-     * Fixed CSS width for inline (container) mode. #1668: the widget renders
-     * as a fixed-size box, like a Privy UI component, so the integrator can
-     * place it predictably on their page. Clamped to
-     * `[INLINE_MIN_WIDTH, INLINE_MAX_WIDTH]`. Default: `INLINE_DEFAULT_WIDTH`
-     * — the constants are the single source of truth, so future re-tunings
-     * don't require touching this JSDoc. Ignored in fullscreen overlay mode.
-     */
-    width?: number;
-    /**
-     * Fixed CSS height for inline mode. Clamped to
-     * `[INLINE_MIN_HEIGHT, INLINE_MAX_HEIGHT]`. Default: `INLINE_DEFAULT_HEIGHT`.
-     * The embed content uses responsive CSS to adapt to the dimensions the
-     * integrator picks — within the clamped range — without distorting (no
-     * CSS transform scale). Ignored in fullscreen overlay mode.
-     */
-    height?: number;
-}
-export declare const INLINE_MIN_WIDTH = 440;
-export declare const INLINE_MAX_WIDTH = 720;
-export declare const INLINE_DEFAULT_WIDTH = 480;
-export declare const INLINE_MIN_HEIGHT = 640;
-export declare const INLINE_MAX_HEIGHT = 960;
-export declare const INLINE_DEFAULT_HEIGHT = 720;
-export declare class IframeManager {
-    private expectedOrigin;
-    private iframe;
-    private messageHandlers;
-    private protocolErrorHandlers;
-    private messageListener;
-    private destroyed;
-    constructor(expectedOrigin: string);
-    create(url: string, options?: IframeOptions): HTMLIFrameElement;
-    destroy(): void;
-    postMessage(msg: WidgetMessage): void;
-    onMessage(handler: (msg: WidgetMessage) => void): () => void;
-    onProtocolError(handler: (reason: string) => void): () => void;
-    private ensureListener;
-}
-//# sourceMappingURL=iframe-manager.d.ts.map

package/dist/iframe-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"iframe-manager.d.ts","sourceRoot":"","sources":["../src/iframe-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAEhE,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACpC;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AASD,eAAO,MAAM,gBAAgB,MAAM,CAAA;AACnC,eAAO,MAAM,gBAAgB,MAAM,CAAA;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAA;AACvC,eAAO,MAAM,iBAAiB,MAAM,CAAA;AACpC,eAAO,MAAM,iBAAiB,MAAM,CAAA;AACpC,eAAO,MAAM,qBAAqB,MAAM,CAAA;AAMxC,qBAAa,aAAa;IAOZ,OAAO,CAAC,cAAc;IANlC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,SAAS,CAAQ;gBAEL,cAAc,EAAE,MAAM;IAQ1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,iBAAiB;IAiD/D,OAAO,IAAI,IAAI;IAYf,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAKrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI;IAO5D,eAAe,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAO9D,OAAO,CAAC,cAAc;CAiCvB"}

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC9F,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA"}

package/dist/messages.d.ts

@@ -1,28 +0,0 @@
-export declare enum WidgetMessageType {
-    INIT = "nvm:init",
-    CLOSE = "nvm:close",
-    BOOTED = "nvm:booted",
-    READY = "nvm:ready",
-    RESIZE = "nvm:resize",
-    SUCCESS = "nvm:success",
-    ERROR = "nvm:error",
-    CARD_ACTION = "nvm:card-action",
-    AUTH_MISMATCH = "nvm:auth-mismatch",
-    AUTH_SWITCH_REQUEST = "nvm:auth-switch-request"
-}
-export interface WidgetMessage<T = unknown> {
-    type: WidgetMessageType;
-    version: '1';
-    payload?: T;
-}
-export declare const WIDGET_MESSAGE_VERSION: "1";
-export declare function createMessage<T>(type: WidgetMessageType, payload?: T): WidgetMessage<T>;
-export type ParseResult<T = unknown> = {
-    ok: true;
-    message: WidgetMessage<T>;
-} | {
-    ok: false;
-    reason: string;
-};
-export declare function parseMessage(data: unknown): ParseResult;
-//# sourceMappingURL=messages.d.ts.map

package/dist/messages.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAE3B,IAAI,aAAa;IACjB,KAAK,cAAc;IAEnB,MAAM,eAAe;IACrB,KAAK,cAAc;IACnB,MAAM,eAAe;IACrB,OAAO,gBAAgB;IACvB,KAAK,cAAc;IAInB,WAAW,oBAAoB;IAI/B,aAAa,sBAAsB;IAKnC,mBAAmB,4BAA4B;CAChD;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,IAAI,EAAE,iBAAiB,CAAA;IACvB,OAAO,EAAE,GAAG,CAAA;IACZ,OAAO,CAAC,EAAE,CAAC,CAAA;CACZ;AAED,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAA;AAWlD,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAMvF;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CA8BvD"}

package/dist/nevermined-widgets.d.ts

@@ -1,36 +0,0 @@
-import type { WidgetConfig, WidgetAccount } from './types.js';
-import { CheckoutWidget } from './widgets/checkout.js';
-import { DelegationsWidget } from './widgets/delegations.js';
-interface NeverminedWidgetsEvents {
-    'session-expired': void;
-}
-export declare class NeverminedWidgets {
-    private readonly sessionManager;
-    private readonly _account;
-    private readonly environment;
-    private _checkout;
-    private _delegations;
-    private readonly events;
-    private constructor();
-    static initialize(config: WidgetConfig): Promise<NeverminedWidgets>;
-    private refreshSession;
-    on<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
-    off<K extends keyof NeverminedWidgetsEvents>(event: K, handler: (payload: NeverminedWidgetsEvents[K]) => void): this;
-    get account(): WidgetAccount;
-    get hasValidSession(): boolean;
-    getSessionToken(): string;
-    get checkout(): CheckoutWidget;
-    get delegations(): DelegationsWidget;
-    /**
-     * Resets the parent widget container: tears down any live child widget (e.g.
-     * the checkout widget) and clears the internal cache. This is a reset, not a
-     * terminal state — accessing `widget.checkout` after `destroy()` lazily
-     * creates a fresh `CheckoutWidget` instance. If you need a terminal "this
-     * widget can no longer be used" semantics, call `destroy()` on the child
-     * widget directly (e.g. `widget.checkout.destroy()`), which flips its
-     * internal `destroyed` flag and makes subsequent `start()` calls throw.
-     */
-    destroy(): void;
-}
-export {};
-//# sourceMappingURL=nevermined-widgets.d.ts.map

package/dist/nevermined-widgets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nevermined-widgets.d.ts","sourceRoot":"","sources":["../src/nevermined-widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAA;AAMzF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,UAAU,uBAAuB;IAC/B,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAYD,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAP9B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,OAAO;WAMM,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;YA0B3D,cAAc;IAwB5B,EAAE,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,GAAG,CAAC,CAAC,SAAS,MAAM,uBAAuB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GACrD,IAAI;IAKP,IAAI,OAAO,IAAI,aAAa,CAE3B;IAED,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED,eAAe,IAAI,MAAM;IAKzB,IAAI,QAAQ,IAAI,cAAc,CAK7B;IAED,IAAI,WAAW,IAAI,iBAAiB,CASnC;IAED;;;;;;;;OAQG;IACH,OAAO,IAAI,IAAI;CAQhB"}

package/dist/session.d.ts

@@ -1,13 +0,0 @@
-import type { WidgetSession } from './types.js';
-export declare class SessionManager {
-    private session;
-    private expiresMs;
-    private timer;
-    constructor(session: WidgetSession);
-    isValid(): boolean;
-    getToken(): string;
-    getSession(): WidgetSession;
-    startAutoRefresh(refreshFn: () => Promise<WidgetSession>, onExpired: () => void): void;
-    stopAutoRefresh(): void;
-}
-//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAI/C,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,KAAK,CAA6C;gBAE9C,OAAO,EAAE,aAAa;IAWlC,OAAO,IAAI,OAAO;IAIlB,QAAQ,IAAI,MAAM;IAIlB,UAAU,IAAI,aAAa;IAI3B,gBAAgB,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI;IA8BtF,eAAe,IAAI,IAAI;CAMxB"}

package/dist/types.d.ts

@@ -1,109 +0,0 @@
-export declare const ENVIRONMENTS: readonly ["local", "sandbox", "live", "staging_sandbox", "staging_live"];
-export type Environment = (typeof ENVIRONMENTS)[number];
-export interface WidgetConfig {
-    /**
-     * Widget session minted server-to-server by the integrator backend
-     * (typically via `@nevermined-io/ui-widgets-server.createWidgetSession`).
-     * Forward the response object verbatim — the SDK never holds the widget
-     * key `rawSecret`.
-     */
-    session: WidgetSession;
-    environment: Environment;
-}
-export interface WidgetSession {
-    sessionToken: string;
-    userId: string;
-    userWallet: `0x${string}`;
-    /**
-     * Hash of the NVM API key bound to this widget session user. Returned by
-     * `POST /api/v1/widgets/session` so host pages that want to call user-scoped
-     * endpoints directly (outside the iframe) have the bearer token to do so.
-     * The embedded iframe flow consumes it via the session JWT claims rather
-     * than this field.
-     */
-    apiKeyHash: string;
-    expiresAt: string;
-}
-export interface WidgetAccount {
-    userId: string;
-    userWallet: `0x${string}`;
-}
-export interface EmbedError {
-    code: 'UNAUTHORIZED' | 'NETWORK' | 'PAYMENT_NOT_CONFIRMED' | 'UNKNOWN';
-    /**
-     * Raw, host-facing message. Carries the underlying detail (e.g. the backend
-     * `NVMException.message`) and is what the SDK forwards over the `nvm:error`
-     * postMessage for the integrator to log. May contain operational/technical
-     * text, so it is NOT safe to render in an end-user surface verbatim.
-     */
-    message: string;
-    /**
-     * Safe, user-facing message. Generic per-`code` copy with no operational
-     * detail — render this (falling back to `message`) in any UI shown to the
-     * end user, such as the widgets' terminal error panels. Optional and
-     * additive: existing host integrations that only read `message` are
-     * unaffected.
-     */
-    userMessage?: string;
-    status?: number;
-    apiCode?: string;
-}
-/**
- * Emitted (via the per-widget `onAuthMismatch` callback) when the iframe
- * detects a live host Privy session whose email does not match the email
- * the widget session was minted for. The iframe renders a two-button prompt
- * (continue as the host identity, or switch to the widget-session identity
- * by signing out of Privy inside the iframe) and the host page is informed
- * so it can mirror that affordance on its own UI. The widget is effectively
- * halted until either button is clicked or the host re-mints a widget
- * session via the action below.
- */
-export interface AuthMismatchDetail {
-    /** Email the widget session was minted for (normalized — trimmed, lower-cased). */
-    expectedEmail: string;
-}
-/**
- * Emitted (via the per-widget `onAuthSwitchRequest` callback) when the user
- * picks "Continue as <hostEmail>" on the mismatch prompt. The host page is
- * expected to re-mint a widget session bound to `requestedEmail` and reopen
- * the widget; the iframe stays on the prompt until that happens.
- *
- * **Security note for integrators:** the SDK posts this event to the host
- * via `window.postMessage`, but the host's `window.addEventListener('message',
- * ...)` listens to ALL frames on the page. Validate `event.origin === <your
- * widget host>` (e.g. `https://app.nevermined.io`) before re-minting a
- * session — otherwise a malicious sub-frame could spoof this event and
- * trick your backend into minting a session for an attacker-supplied email.
- */
-export interface AuthSwitchRequestDetail {
-    /** Email the user wants the widget to operate under (their live Privy identity). */
-    requestedEmail: string;
-    /** Email the original widget session was minted for, for reference / telemetry. */
-    expectedEmail: string;
-}
-/**
- * Control surface passed to every widget's `onSuccess` callback (#1668
- * sub-tasks 3 + 4). The iframe stays mounted indefinitely after a
- * successful action so the integrator can show their own post-action UI
- * (toast, next-step prompt, etc.) while the success state remains visible
- * inside the widget. The integrator dismisses the widget by calling
- * `handle.close()` — which destroys the iframe and invokes `onClose` —
- * whenever their own flow is ready.
- */
-export interface WidgetSuccessHandle {
-    /**
-     * Destroys the iframe and invokes the widget's `onClose` callback.
-     * Idempotent: calling close on an already-closed widget is a no-op.
-     */
-    close(): void;
-}
-/**
- * Payload shape passed to every widget's `onSuccess` callback. `result`
- * is the per-widget data (paymentMethodId, delegationId, etc.); `handle`
- * lets the integrator dismiss the widget on their own schedule.
- */
-export interface WidgetSuccessEvent<T> {
-    result: T;
-    handle: WidgetSuccessHandle;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,0EAA2E,CAAA;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,OAAO,EAAE,aAAa,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;IACzB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAAA;IACtE;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAA;IACtB,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,KAAK,IAAI,IAAI,CAAA;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,CAAA;IACT,MAAM,EAAE,mBAAmB,CAAA;CAC5B"}

package/dist/utils/environment.d.ts

@@ -1,4 +0,0 @@
-import type { Environment } from '../types.js';
-export declare function getApiBaseUrl(environment: Environment): string;
-export declare function getWebappBaseUrl(environment: Environment): string;
-//# sourceMappingURL=environment.d.ts.map

package/dist/utils/environment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAkB9C,wBAAgB,aAAa,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAE9D;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAEjE"}

package/dist/utils/errors.d.ts

@@ -1,39 +0,0 @@
-export declare const WIDGET_ERRORS: {
-    readonly MISSING_SESSION: {
-        readonly numericCode: "WDG.0001";
-        readonly message: "session is required — pass the WidgetSession returned by createWidgetSession on the backend";
-    };
-    readonly INVALID_ENVIRONMENT: {
-        readonly numericCode: "WDG.0002";
-        readonly message: "environment must be one of: sandbox, live, staging_sandbox, staging_live, local";
-    };
-    readonly INVALID_SESSION: {
-        readonly numericCode: "WDG.0003";
-        readonly message: "session is missing required fields";
-    };
-    readonly SESSION_EXPIRED: {
-        readonly numericCode: "WDG.0006";
-        readonly message: "Widget session has expired";
-    };
-};
-export type WidgetErrorCode = keyof typeof WIDGET_ERRORS;
-export declare class WidgetInitError extends Error {
-    readonly code: WidgetErrorCode;
-    constructor(code: WidgetErrorCode, message?: string, cause?: unknown);
-}
-export declare class WidgetSessionExpiredError extends Error {
-    readonly code: "SESSION_EXPIRED";
-    constructor();
-}
-/**
- * Thrown by SDK methods that hit the API directly (no iframe), e.g.
- * `delegations.revokeCard()` / `delegations.revokeDelegation()`. Carries the
- * HTTP status and the optional BCK error code so consumers can branch on
- * 401/403/etc. without parsing the message.
- */
-export declare class WidgetApiError extends Error {
-    readonly status?: number | undefined;
-    readonly apiCode?: string | undefined;
-    constructor(message: string, status?: number | undefined, apiCode?: string | undefined);
-}
-//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;CAemD,CAAA;AAE7E,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAA;AAExD,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EACrC,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,OAAO;CAKlB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAS;;CAM3C;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,MAAM,CAAC,EAAE,MAAM;aACf,OAAO,CAAC,EAAE,MAAM;gBAFhC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,YAAA;CAKnC"}

package/dist/widgets/checkout.d.ts

@@ -1,110 +0,0 @@
-import { SessionManager } from '../session.js';
-import { type WidgetMessage } from '../messages.js';
-import type { AuthMismatchDetail, AuthSwitchRequestDetail, EmbedError, WidgetSuccessEvent } from '../types.js';
-export interface CheckoutResult {
-    did: string;
-    planId?: string;
-    txHash?: string;
-}
-export interface CheckoutOptions {
-    did: string;
-    planId?: string;
-    container?: HTMLElement;
-    /**
-     * Fixed iframe width in pixels. Clamped by the SDK to a supported range
-     * (see `INLINE_MIN_WIDTH` / `INLINE_MAX_WIDTH` / `INLINE_DEFAULT_WIDTH`
-     * in `iframe-manager`). Ignored in fullscreen overlay mode (no container).
-     */
-    width?: number;
-    /**
-     * Fixed iframe height in pixels. Clamped by the SDK to a supported range
-     * (see `INLINE_MIN_HEIGHT` / `INLINE_MAX_HEIGHT` / `INLINE_DEFAULT_HEIGHT`
-     * in `iframe-manager`). Ignored in fullscreen overlay mode.
-     */
-    height?: number;
-    onBooted?: () => void;
-    onReady?: () => void;
-    /**
-     * Fires when the iframe posts `nvm:success`. The widget stays mounted in
-     * its success state — the integrator dismisses it via `event.handle.close()`
-     * when their own post-success flow is ready. There is no auto-dismiss.
-     */
-    onSuccess?: (event: WidgetSuccessEvent<CheckoutResult>) => void;
-    onError?: (error: EmbedError) => void;
-    /**
-     * Fires when the iframe detects that the live host Privy session belongs
-     * to a different account than the email the widget session was minted for.
-     * The iframe stays mounted on a two-button prompt; the host can mirror that
-     * affordance on its own UI. See `AuthMismatchDetail`.
-     */
-    onAuthMismatch?: (detail: AuthMismatchDetail) => void;
-    /**
-     * Fires when, on the mismatch prompt, the user picks "Continue as
-     * <hostEmail>". The host should re-mint a widget session bound to
-     * `requestedEmail` and reopen the widget. The iframe stays on the prompt
-     * until then. See `AuthSwitchRequestDetail`.
-     */
-    onAuthSwitchRequest?: (detail: AuthSwitchRequestDetail) => void;
-    onClose?: () => void;
-}
-/**
- * Checkout widget.
- *
- * Lifecycle note for SDK consumers: when the iframe sends `nvm:close` the
- * widget instance auto-calls `destroy()` and becomes terminal — any
- * subsequent `start()` call throws. If the host page needs to re-show the
- * checkout after a close, construct a new `CheckoutWidget` (typically via
- * `nvm.checkout`) and call `start()` on the fresh instance.
- */
-export declare class CheckoutWidget {
-    private readonly session;
-    private readonly webappBase;
-    private manager;
-    private destroyed;
-    constructor(session: SessionManager, webappBase: string);
-    /**
-     * Mounts the checkout iframe into `options.container`.
-     * Throws if called after `destroy()` (including the implicit destroy on
-     * `nvm:close` — see class JSDoc).
-     */
-    start(options: CheckoutOptions): void;
-    destroy(): void;
-    /**
-     * Shared close path for `handle.close()` (integrator-driven) and
-     * `nvm:close` (iframe-driven). Idempotent — multiple calls collapse to a
-     * single `onClose` + destroy, which matters because `handle.close()`
-     * could race with a `nvm:close` from the iframe if the integrator's
-     * post-success UI happens to mount instantly.
-     *
-     * `manager` is the IframeManager this close was bound to when the handle
-     * was minted. A stale handle from a previous mount (the instance was
-     * remounted via a second `start()` without an intervening close) must NOT
-     * tear down the now-live iframe, so we bail once it no longer owns
-     * `this.manager`.
-     *
-     * Ordering is load-bearing: `destroy()` runs before `onClose()` so a
-     * throwing `onClose` cannot leak a second close — `destroyed` is already
-     * true by the time the callback runs.
-     */
-    private closeFromIframe;
-    private buildSuccessHandle;
-    private handleMessage;
-}
-/**
- * Drop the message if the payload doesn't match the contract — keeps stray
- * protocol updates from crashing host pages.
- */
-export declare function parseAuthMismatch(payload: unknown): AuthMismatchDetail | null;
-export declare function parseAuthSwitchRequest(payload: unknown): AuthSwitchRequestDetail | null;
-export interface AuthMessageHandlers {
-    onAuthMismatch?: (detail: AuthMismatchDetail) => void;
-    onAuthSwitchRequest?: (detail: AuthSwitchRequestDetail) => void;
-}
-/**
- * Centralizes the auth-related iframe → host messages so every widget
- * `handleMessage` switch can stay a one-liner. Returns true when the message
- * was an auth event (the caller should `return` and skip the rest of its
- * switch), false otherwise.
- */
-export declare function handleAuthMessage(msg: WidgetMessage, options: AuthMessageHandlers): boolean;
-//# sourceMappingURL=checkout.d.ts.map

package/dist/widgets/checkout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/widgets/checkout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACrF,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EACnB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AAID;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAKvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,SAAS,CAAQ;gBAGN,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM;IAGrC;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IA4BrC,OAAO,IAAI,IAAI;IAMf;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,aAAa;CA4CtB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAK7E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAOvF;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;IACrD,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAY3F"}