@nowramp/sdk 0.1.0

package/dist/index.cjs

@@ -0,0 +1,6 @@
+/*!
+ * @nowramp/sdk v0.1.0
+ * (c) 2026 NowRamp
+ * @license MIT
+ */
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});const e={evm:{pattern:/^0x[a-fA-F0-9]{40}$/,description:"EVM address must start with 0x followed by 40 hexadecimal characters"},solana:{pattern:/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,description:"Solana address must be 32-44 base58 characters"},bitcoin:{pattern:/^(1[a-km-zA-HJ-NP-Z1-9]{25,34}|3[a-km-zA-HJ-NP-Z1-9]{25,34}|bc1[a-zA-HJ-NP-Z0-9]{39,59})$/,description:"Bitcoin address must be a valid legacy, SegWit, or native SegWit format"}},t={ETH:"evm",USDC:"evm",USDT:"evm",DAI:"evm",WETH:"evm",WBTC:"evm",MATIC:"evm",SOL:"solana",BTC:"bitcoin"},i=["https:"],n=["localhost","127.0.0.1"],r={public:"pk_",secret:"sk_"};function o(e){return e?e.includes(r.secret)?{valid:!1,error:"Secret API keys (sk_) cannot be used in the SDK. Use a public key (pk_) instead. Secret keys should only be used in backend server code."}:(e.includes(r.public)||console.warn("RampWidget: API key does not have a public key prefix (pk_). For security, please generate a new public key for frontend use."),{valid:!0}):{valid:!1,error:"apiKey is required"}}function s(e){if(!e)return{valid:!0};try{const t=new URL(e);return i.includes(t.protocol)||"http:"===t.protocol&&n.includes(t.hostname)?{valid:!0}:{valid:!1,error:`redirectUrl must use HTTPS (got ${t.protocol})`}}catch{return{valid:!1,error:"redirectUrl is not a valid URL"}}}function a(i,n){if(!i)return{valid:!0};const r=i.trim();if(n){const i=t[n.toUpperCase()];if(i){const{pattern:t,description:n}=e[i];return t.test(r)?{valid:!0}:{valid:!1,error:n}}}for(const{pattern:t}of Object.values(e))if(t.test(r))return{valid:!0};return r.length>=10&&r.length<=100?{valid:!0}:{valid:!1,error:"walletAddress format is not recognized"}}function d(e,t){if(!t)return!0;try{if(e===new URL(t).origin)return!0;const i=new URL(e);return"localhost"===i.hostname||"127.0.0.1"===i.hostname}catch{return!1}}const c={production:"https://widget.nowramp.com",staging:"https://widget.staging.nowramp.com",development:"http://localhost:7482"},l=c.production;class h{constructor(e){this.iframe=null,this.modalContainer=null,this.boundMessageHandler=null,this.isOpen=!1;const t=e.widgetUrl||(e.environment?c[e.environment]:l);this.config={widgetUrl:t,flowType:"buy",theme:"light",...e},this.validateConfig()}open(){this.isOpen?console.warn("RampWidget: Widget is already open"):(this.isOpen=!0,this.setupMessageListener(),this.createIframe())}close(){this.isOpen&&(this.isOpen=!1,this.cleanup(),this.config.onClose?.())}setAmount(e){this.sendCommand("SET_AMOUNT",e)}setTheme(e){this.sendCommand("SET_THEME",e)}refreshQuote(){this.sendCommand("REFRESH_QUOTE")}validateConfig(){if(!this.config.apiKey)throw new Error("RampWidget: apiKey is required");if(!this.config.projectId)throw new Error("RampWidget: projectId is required");if(!this.config.externalUserId)throw new Error("RampWidget: externalUserId is required");const e=o(this.config.apiKey);if(!e.valid)throw new Error(`RampWidget: ${e.error}`);if(this.config.redirectUrl){const e=s(this.config.redirectUrl);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}if(this.config.walletAddress){const e=a(this.config.walletAddress,this.config.destinationCurrency);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}}buildWidgetUrl(){const e=new URLSearchParams({apiKey:this.config.apiKey,projectId:this.config.projectId,externalUserId:this.config.externalUserId,parentOrigin:window.location.origin,flowType:this.config.flowType||"buy",theme:this.config.theme||"light"});return this.config.locale&&e.set("locale",this.config.locale),void 0!==this.config.amount&&e.set("amount",String(this.config.amount)),this.config.sourceCurrency&&e.set("sourceCurrency",this.config.sourceCurrency),this.config.destinationCurrency&&e.set("destinationCurrency",this.config.destinationCurrency),this.config.walletAddress&&e.set("walletAddress",this.config.walletAddress),this.config.redirectUrl&&e.set("redirectUrl",this.config.redirectUrl),!1===this.config.autoRedirect&&e.set("autoRedirect","false"),`${this.config.widgetUrl}?${e.toString()}`}createIframe(){this.iframe=document.createElement("iframe"),this.iframe.src=this.buildWidgetUrl(),this.iframe.style.border="none",this.iframe.style.width="100%",this.iframe.style.height="100%",this.iframe.allow="camera *; microphone *; geolocation *; encrypted-media *; clipboard-read; clipboard-write",this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups allow-modals");const e=this.getContainer();e?e.appendChild(this.iframe):this.createModal()}getContainer(){return this.config.container?"string"==typeof this.config.container?document.querySelector(this.config.container):this.config.container:null}createModal(){this.modalContainer=document.createElement("div"),this.modalContainer.style.cssText="\n      position: fixed;\n      inset: 0;\n      z-index: 9999;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      background: rgba(0, 0, 0, 0.5);\n      backdrop-filter: blur(4px);\n    ";const e=document.createElement("div");e.style.cssText="\n      position: relative;\n      width: 100%;\n      max-width: 440px;\n      height: 90vh;\n      max-height: 700px;\n      background: white;\n      border-radius: 16px;\n      overflow: hidden;\n      box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25);\n    ";const t=document.createElement("button");t.innerHTML="&times;",t.style.cssText="\n      position: absolute;\n      top: 8px;\n      right: 8px;\n      z-index: 10;\n      width: 32px;\n      height: 32px;\n      border: none;\n      background: rgba(0, 0, 0, 0.1);\n      border-radius: 50%;\n      font-size: 20px;\n      cursor: pointer;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n    ",t.onclick=()=>this.close(),e.appendChild(t),this.iframe&&e.appendChild(this.iframe),this.modalContainer.appendChild(e),this.modalContainer.onclick=e=>{e.target===this.modalContainer&&this.close()};document.addEventListener("keydown",e=>{"Escape"===e.key&&this.close()}),document.body.appendChild(this.modalContainer),document.body.style.overflow="hidden"}setupMessageListener(){this.boundMessageHandler=this.handleMessage.bind(this),window.addEventListener("message",this.boundMessageHandler)}handleMessage(e){if(!d(e.origin,this.config.widgetUrl))return;const t=e.data;if(t&&"ramp-widget"===t.source)switch(t.type){case"WIDGET_READY":this.config.onReady?.();break;case"WIDGET_CLOSE":this.close();break;case"STEP_CHANGE":this.config.onStepChange?.(t.payload.step);break;case"QUOTE_CREATED":this.config.onQuoteCreated?.(t.payload);break;case"ORDER_CREATED":this.config.onOrderCreated?.(t.payload);break;case"ORDER_COMPLETED":this.config.onSuccess?.(t.payload);break;case"ERROR":this.config.onError?.(t.payload)}}sendCommand(e,t){if(!this.iframe?.contentWindow)return void console.warn("RampWidget: Cannot send command, widget not open");const i=this.config.widgetUrl?new URL(this.config.widgetUrl).origin:"*";this.iframe.contentWindow.postMessage({source:"ramp-sdk",type:e,payload:t},i)}cleanup(){this.boundMessageHandler&&(window.removeEventListener("message",this.boundMessageHandler),this.boundMessageHandler=null),this.iframe?.parentNode&&this.iframe.parentNode.removeChild(this.iframe),this.iframe=null,this.modalContainer?.parentNode&&(this.modalContainer.parentNode.removeChild(this.modalContainer),document.body.style.overflow=""),this.modalContainer=null}}exports.ADDRESS_PATTERNS=e,exports.ALLOWED_PROTOCOLS=i,exports.API_KEY_PREFIXES=r,exports.CURRENCY_CHAIN_MAP=t,exports.DEV_ALLOWED_HOSTNAMES=n,exports.RampWidget=h,exports.VERSION="0.1.0",exports.WIDGET_URLS=c,exports.default=h,exports.validateApiKey=o,exports.validateMessageOrigin=d,exports.validateRedirectUrl=s,exports.validateWalletAddress=a;

package/dist/index.d.ts

@@ -0,0 +1,226 @@
+/**
+ * SDK Type Definitions
+ */
+type FlowType = 'buy' | 'sell';
+type Theme = 'light' | 'dark';
+type Locale = 'en' | 'es' | 'fr' | 'de';
+type ChainType = 'evm' | 'solana' | 'bitcoin';
+interface QuoteData {
+    id: string;
+    sourceAmount: number;
+    sourceCurrency: string;
+    destinationAmount: number;
+    destinationCurrency: string;
+    rate: number;
+    fees: {
+        network: number;
+        service: number;
+        total: number;
+    };
+    expiresAt: string;
+}
+interface OrderData {
+    id: string;
+    status: string;
+    quoteId: string;
+    txHash?: string;
+}
+interface ErrorData {
+    error: string;
+}
+interface RampWidgetConfig {
+    /** Partner API key (required) */
+    apiKey: string;
+    /** Project ID (required) */
+    projectId: string;
+    /** External user identifier from partner system (required) */
+    externalUserId: string;
+    /** Environment: 'production' (default), 'staging', or 'development' */
+    environment?: 'production' | 'staging' | 'development';
+    /** Custom widget base URL (overrides environment setting) */
+    widgetUrl?: string;
+    /** Flow type: buy crypto or sell crypto */
+    flowType?: FlowType;
+    /** Theme: light or dark */
+    theme?: Theme;
+    /** Locale for translations (default: 'en') */
+    locale?: Locale;
+    /** Pre-fill amount */
+    amount?: number;
+    /** Pre-fill source currency (fiat for buy, crypto for sell) */
+    sourceCurrency?: string;
+    /** Pre-fill destination currency (crypto for buy, fiat for sell) */
+    destinationCurrency?: string;
+    /** Pre-fill destination wallet address */
+    walletAddress?: string;
+    /** URL to redirect to after order completion */
+    redirectUrl?: string;
+    /** Auto-redirect after completion (default: true), or show button if false */
+    autoRedirect?: boolean;
+    /** Container element or selector (default: creates modal) */
+    container?: HTMLElement | string;
+    /** Callback when widget is ready */
+    onReady?: () => void;
+    /** Callback when step changes */
+    onStepChange?: (step: string) => void;
+    /** Callback when quote is created */
+    onQuoteCreated?: (quote: QuoteData) => void;
+    /** Callback when order is created */
+    onOrderCreated?: (order: OrderData) => void;
+    /** Callback when order is completed successfully */
+    onSuccess?: (order: OrderData) => void;
+    /** Callback when widget is closed */
+    onClose?: () => void;
+    /** Callback when an error occurs */
+    onError?: (error: ErrorData) => void;
+}
+type WidgetEventType = 'WIDGET_READY' | 'WIDGET_CLOSE' | 'STEP_CHANGE' | 'QUOTE_CREATED' | 'ORDER_CREATED' | 'ORDER_COMPLETED' | 'KYC_STARTED' | 'KYC_COMPLETED' | 'ERROR';
+interface WidgetMessage {
+    source: 'ramp-widget';
+    type: WidgetEventType;
+    payload?: unknown;
+}
+interface ValidationResult {
+    valid: boolean;
+    error?: string;
+}
+
+/**
+ * SDK Validation Utilities
+ *
+ * Security-focused validation for API keys, wallet addresses, and URLs.
+ */
+
+/**
+ * Address validation patterns by chain type
+ */
+declare const ADDRESS_PATTERNS: Record<ChainType, {
+    pattern: RegExp;
+    description: string;
+}>;
+/**
+ * Currency to chain type mapping
+ */
+declare const CURRENCY_CHAIN_MAP: Record<string, ChainType>;
+/**
+ * Allowed protocols for redirect URLs
+ */
+declare const ALLOWED_PROTOCOLS: string[];
+/**
+ * Hostnames allowed for HTTP (development only)
+ */
+declare const DEV_ALLOWED_HOSTNAMES: string[];
+/**
+ * API Key prefixes
+ * - pk_ = public key (safe for frontend)
+ * - sk_ = secret key (backend only - NEVER expose!)
+ */
+declare const API_KEY_PREFIXES: {
+    readonly public: "pk_";
+    readonly secret: "sk_";
+};
+/**
+ * Validate API key type and format
+ *
+ * Ensures secret keys (sk_) are never used in frontend code.
+ */
+declare function validateApiKey(apiKey: string): ValidationResult;
+/**
+ * Validate redirect URL
+ *
+ * Only HTTPS URLs are allowed in production.
+ * HTTP is allowed for localhost in development.
+ */
+declare function validateRedirectUrl(url: string): ValidationResult;
+/**
+ * Validate wallet address format
+ *
+ * Validates against chain-specific patterns if currency is provided,
+ * otherwise attempts auto-detection.
+ */
+declare function validateWalletAddress(address: string, destinationCurrency?: string): ValidationResult;
+/**
+ * Validate message origin against expected widget URL
+ *
+ * Allows localhost/127.0.0.1 for development.
+ */
+declare function validateMessageOrigin(eventOrigin: string, widgetUrl?: string): boolean;
+
+/**
+ * RampWidget Class
+ *
+ * Main widget controller that handles iframe creation, messaging, and modal display.
+ */
+
+/** Widget URLs by environment */
+declare const WIDGET_URLS: {
+    readonly production: "https://widget.nowramp.com";
+    readonly staging: "https://widget.staging.nowramp.com";
+    readonly development: "http://localhost:7482";
+};
+type Environment = keyof typeof WIDGET_URLS;
+declare class RampWidget {
+    private config;
+    private iframe;
+    private modalContainer;
+    private boundMessageHandler;
+    private isOpen;
+    constructor(config: RampWidgetConfig);
+    /**
+     * Open the widget
+     */
+    open(): void;
+    /**
+     * Close the widget
+     */
+    close(): void;
+    /**
+     * Set amount programmatically
+     */
+    setAmount(amount: number): void;
+    /**
+     * Set theme programmatically
+     */
+    setTheme(theme: Theme): void;
+    /**
+     * Refresh the current quote
+     */
+    refreshQuote(): void;
+    private validateConfig;
+    private buildWidgetUrl;
+    private createIframe;
+    private getContainer;
+    private createModal;
+    private setupMessageListener;
+    private handleMessage;
+    private sendCommand;
+    private cleanup;
+}
+
+/**
+ * NowRamp Widget SDK
+ *
+ * Provides a simple API for embedding the NowRamp Widget in partner applications.
+ *
+ * @example
+ * ```typescript
+ * import { RampWidget } from '@nowramp/sdk';
+ *
+ * const widget = new RampWidget({
+ *   apiKey: 'pk_xxx',
+ *   projectId: 'proj_xxx',
+ *   externalUserId: 'user_123',
+ *   onSuccess: (data) => console.log('Order complete:', data),
+ *   onClose: () => console.log('Widget closed'),
+ * });
+ *
+ * widget.open();
+ * ```
+ */
+/**
+ * SDK version string (e.g., "1.0.0")
+ */
+declare const VERSION: string;
+
+export { ADDRESS_PATTERNS, ALLOWED_PROTOCOLS, API_KEY_PREFIXES, CURRENCY_CHAIN_MAP, DEV_ALLOWED_HOSTNAMES, RampWidget, VERSION, WIDGET_URLS, RampWidget as default, validateApiKey, validateMessageOrigin, validateRedirectUrl, validateWalletAddress };
+export type { ChainType, Environment, ErrorData, FlowType, Locale, OrderData, QuoteData, RampWidgetConfig, Theme, ValidationResult, WidgetEventType, WidgetMessage };

package/dist/index.js

@@ -0,0 +1,6 @@
+/*!
+ * @nowramp/sdk v0.1.0
+ * (c) 2026 NowRamp
+ * @license MIT
+ */
+const e={evm:{pattern:/^0x[a-fA-F0-9]{40}$/,description:"EVM address must start with 0x followed by 40 hexadecimal characters"},solana:{pattern:/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,description:"Solana address must be 32-44 base58 characters"},bitcoin:{pattern:/^(1[a-km-zA-HJ-NP-Z1-9]{25,34}|3[a-km-zA-HJ-NP-Z1-9]{25,34}|bc1[a-zA-HJ-NP-Z0-9]{39,59})$/,description:"Bitcoin address must be a valid legacy, SegWit, or native SegWit format"}},t={ETH:"evm",USDC:"evm",USDT:"evm",DAI:"evm",WETH:"evm",WBTC:"evm",MATIC:"evm",SOL:"solana",BTC:"bitcoin"},i=["https:"],n=["localhost","127.0.0.1"],r={public:"pk_",secret:"sk_"};function o(e){return e?e.includes(r.secret)?{valid:!1,error:"Secret API keys (sk_) cannot be used in the SDK. Use a public key (pk_) instead. Secret keys should only be used in backend server code."}:(e.includes(r.public)||console.warn("RampWidget: API key does not have a public key prefix (pk_). For security, please generate a new public key for frontend use."),{valid:!0}):{valid:!1,error:"apiKey is required"}}function s(e){if(!e)return{valid:!0};try{const t=new URL(e);return i.includes(t.protocol)||"http:"===t.protocol&&n.includes(t.hostname)?{valid:!0}:{valid:!1,error:`redirectUrl must use HTTPS (got ${t.protocol})`}}catch{return{valid:!1,error:"redirectUrl is not a valid URL"}}}function a(i,n){if(!i)return{valid:!0};const r=i.trim();if(n){const i=t[n.toUpperCase()];if(i){const{pattern:t,description:n}=e[i];return t.test(r)?{valid:!0}:{valid:!1,error:n}}}for(const{pattern:t}of Object.values(e))if(t.test(r))return{valid:!0};return r.length>=10&&r.length<=100?{valid:!0}:{valid:!1,error:"walletAddress format is not recognized"}}function d(e,t){if(!t)return!0;try{if(e===new URL(t).origin)return!0;const i=new URL(e);return"localhost"===i.hostname||"127.0.0.1"===i.hostname}catch{return!1}}const c={production:"https://widget.nowramp.com",staging:"https://widget.staging.nowramp.com",development:"http://localhost:7482"},l=c.production;class h{constructor(e){this.iframe=null,this.modalContainer=null,this.boundMessageHandler=null,this.isOpen=!1;const t=e.widgetUrl||(e.environment?c[e.environment]:l);this.config={widgetUrl:t,flowType:"buy",theme:"light",...e},this.validateConfig()}open(){this.isOpen?console.warn("RampWidget: Widget is already open"):(this.isOpen=!0,this.setupMessageListener(),this.createIframe())}close(){this.isOpen&&(this.isOpen=!1,this.cleanup(),this.config.onClose?.())}setAmount(e){this.sendCommand("SET_AMOUNT",e)}setTheme(e){this.sendCommand("SET_THEME",e)}refreshQuote(){this.sendCommand("REFRESH_QUOTE")}validateConfig(){if(!this.config.apiKey)throw new Error("RampWidget: apiKey is required");if(!this.config.projectId)throw new Error("RampWidget: projectId is required");if(!this.config.externalUserId)throw new Error("RampWidget: externalUserId is required");const e=o(this.config.apiKey);if(!e.valid)throw new Error(`RampWidget: ${e.error}`);if(this.config.redirectUrl){const e=s(this.config.redirectUrl);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}if(this.config.walletAddress){const e=a(this.config.walletAddress,this.config.destinationCurrency);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}}buildWidgetUrl(){const e=new URLSearchParams({apiKey:this.config.apiKey,projectId:this.config.projectId,externalUserId:this.config.externalUserId,parentOrigin:window.location.origin,flowType:this.config.flowType||"buy",theme:this.config.theme||"light"});return this.config.locale&&e.set("locale",this.config.locale),void 0!==this.config.amount&&e.set("amount",String(this.config.amount)),this.config.sourceCurrency&&e.set("sourceCurrency",this.config.sourceCurrency),this.config.destinationCurrency&&e.set("destinationCurrency",this.config.destinationCurrency),this.config.walletAddress&&e.set("walletAddress",this.config.walletAddress),this.config.redirectUrl&&e.set("redirectUrl",this.config.redirectUrl),!1===this.config.autoRedirect&&e.set("autoRedirect","false"),`${this.config.widgetUrl}?${e.toString()}`}createIframe(){this.iframe=document.createElement("iframe"),this.iframe.src=this.buildWidgetUrl(),this.iframe.style.border="none",this.iframe.style.width="100%",this.iframe.style.height="100%",this.iframe.allow="camera *; microphone *; geolocation *; encrypted-media *; clipboard-read; clipboard-write",this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups allow-modals");const e=this.getContainer();e?e.appendChild(this.iframe):this.createModal()}getContainer(){return this.config.container?"string"==typeof this.config.container?document.querySelector(this.config.container):this.config.container:null}createModal(){this.modalContainer=document.createElement("div"),this.modalContainer.style.cssText="\n      position: fixed;\n      inset: 0;\n      z-index: 9999;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      background: rgba(0, 0, 0, 0.5);\n      backdrop-filter: blur(4px);\n    ";const e=document.createElement("div");e.style.cssText="\n      position: relative;\n      width: 100%;\n      max-width: 440px;\n      height: 90vh;\n      max-height: 700px;\n      background: white;\n      border-radius: 16px;\n      overflow: hidden;\n      box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25);\n    ";const t=document.createElement("button");t.innerHTML="&times;",t.style.cssText="\n      position: absolute;\n      top: 8px;\n      right: 8px;\n      z-index: 10;\n      width: 32px;\n      height: 32px;\n      border: none;\n      background: rgba(0, 0, 0, 0.1);\n      border-radius: 50%;\n      font-size: 20px;\n      cursor: pointer;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n    ",t.onclick=()=>this.close(),e.appendChild(t),this.iframe&&e.appendChild(this.iframe),this.modalContainer.appendChild(e),this.modalContainer.onclick=e=>{e.target===this.modalContainer&&this.close()};document.addEventListener("keydown",e=>{"Escape"===e.key&&this.close()}),document.body.appendChild(this.modalContainer),document.body.style.overflow="hidden"}setupMessageListener(){this.boundMessageHandler=this.handleMessage.bind(this),window.addEventListener("message",this.boundMessageHandler)}handleMessage(e){if(!d(e.origin,this.config.widgetUrl))return;const t=e.data;if(t&&"ramp-widget"===t.source)switch(t.type){case"WIDGET_READY":this.config.onReady?.();break;case"WIDGET_CLOSE":this.close();break;case"STEP_CHANGE":this.config.onStepChange?.(t.payload.step);break;case"QUOTE_CREATED":this.config.onQuoteCreated?.(t.payload);break;case"ORDER_CREATED":this.config.onOrderCreated?.(t.payload);break;case"ORDER_COMPLETED":this.config.onSuccess?.(t.payload);break;case"ERROR":this.config.onError?.(t.payload)}}sendCommand(e,t){if(!this.iframe?.contentWindow)return void console.warn("RampWidget: Cannot send command, widget not open");const i=this.config.widgetUrl?new URL(this.config.widgetUrl).origin:"*";this.iframe.contentWindow.postMessage({source:"ramp-sdk",type:e,payload:t},i)}cleanup(){this.boundMessageHandler&&(window.removeEventListener("message",this.boundMessageHandler),this.boundMessageHandler=null),this.iframe?.parentNode&&this.iframe.parentNode.removeChild(this.iframe),this.iframe=null,this.modalContainer?.parentNode&&(this.modalContainer.parentNode.removeChild(this.modalContainer),document.body.style.overflow=""),this.modalContainer=null}}const p="0.1.0";export{e as ADDRESS_PATTERNS,i as ALLOWED_PROTOCOLS,r as API_KEY_PREFIXES,t as CURRENCY_CHAIN_MAP,n as DEV_ALLOWED_HOSTNAMES,h as RampWidget,p as VERSION,c as WIDGET_URLS,h as default,o as validateApiKey,d as validateMessageOrigin,s as validateRedirectUrl,a as validateWalletAddress};

package/dist/sdk.umd.js

@@ -0,0 +1,6 @@
+/*!
+ * @nowramp/sdk v0.1.0
+ * (c) 2026 NowRamp
+ * @license MIT
+ */
+!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).NowRamp={})}(this,function(e){"use strict";const t={evm:{pattern:/^0x[a-fA-F0-9]{40}$/,description:"EVM address must start with 0x followed by 40 hexadecimal characters"},solana:{pattern:/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,description:"Solana address must be 32-44 base58 characters"},bitcoin:{pattern:/^(1[a-km-zA-HJ-NP-Z1-9]{25,34}|3[a-km-zA-HJ-NP-Z1-9]{25,34}|bc1[a-zA-HJ-NP-Z0-9]{39,59})$/,description:"Bitcoin address must be a valid legacy, SegWit, or native SegWit format"}},i={ETH:"evm",USDC:"evm",USDT:"evm",DAI:"evm",WETH:"evm",WBTC:"evm",MATIC:"evm",SOL:"solana",BTC:"bitcoin"},n=["https:"],r=["localhost","127.0.0.1"],o={public:"pk_",secret:"sk_"};function s(e){return e?e.includes(o.secret)?{valid:!1,error:"Secret API keys (sk_) cannot be used in the SDK. Use a public key (pk_) instead. Secret keys should only be used in backend server code."}:(e.includes(o.public)||console.warn("RampWidget: API key does not have a public key prefix (pk_). For security, please generate a new public key for frontend use."),{valid:!0}):{valid:!1,error:"apiKey is required"}}function a(e){if(!e)return{valid:!0};try{const t=new URL(e);return n.includes(t.protocol)||"http:"===t.protocol&&r.includes(t.hostname)?{valid:!0}:{valid:!1,error:`redirectUrl must use HTTPS (got ${t.protocol})`}}catch{return{valid:!1,error:"redirectUrl is not a valid URL"}}}function d(e,n){if(!e)return{valid:!0};const r=e.trim();if(n){const e=i[n.toUpperCase()];if(e){const{pattern:i,description:n}=t[e];return i.test(r)?{valid:!0}:{valid:!1,error:n}}}for(const{pattern:e}of Object.values(t))if(e.test(r))return{valid:!0};return r.length>=10&&r.length<=100?{valid:!0}:{valid:!1,error:"walletAddress format is not recognized"}}function c(e,t){if(!t)return!0;try{if(e===new URL(t).origin)return!0;const i=new URL(e);return"localhost"===i.hostname||"127.0.0.1"===i.hostname}catch{return!1}}const l={production:"https://widget.nowramp.com",staging:"https://widget.staging.nowramp.com",development:"http://localhost:7482"},h=l.production;class p{constructor(e){this.iframe=null,this.modalContainer=null,this.boundMessageHandler=null,this.isOpen=!1;const t=e.widgetUrl||(e.environment?l[e.environment]:h);this.config={widgetUrl:t,flowType:"buy",theme:"light",...e},this.validateConfig()}open(){this.isOpen?console.warn("RampWidget: Widget is already open"):(this.isOpen=!0,this.setupMessageListener(),this.createIframe())}close(){this.isOpen&&(this.isOpen=!1,this.cleanup(),this.config.onClose?.())}setAmount(e){this.sendCommand("SET_AMOUNT",e)}setTheme(e){this.sendCommand("SET_THEME",e)}refreshQuote(){this.sendCommand("REFRESH_QUOTE")}validateConfig(){if(!this.config.apiKey)throw new Error("RampWidget: apiKey is required");if(!this.config.projectId)throw new Error("RampWidget: projectId is required");if(!this.config.externalUserId)throw new Error("RampWidget: externalUserId is required");const e=s(this.config.apiKey);if(!e.valid)throw new Error(`RampWidget: ${e.error}`);if(this.config.redirectUrl){const e=a(this.config.redirectUrl);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}if(this.config.walletAddress){const e=d(this.config.walletAddress,this.config.destinationCurrency);if(!e.valid)throw new Error(`RampWidget: ${e.error}`)}}buildWidgetUrl(){const e=new URLSearchParams({apiKey:this.config.apiKey,projectId:this.config.projectId,externalUserId:this.config.externalUserId,parentOrigin:window.location.origin,flowType:this.config.flowType||"buy",theme:this.config.theme||"light"});return this.config.locale&&e.set("locale",this.config.locale),void 0!==this.config.amount&&e.set("amount",String(this.config.amount)),this.config.sourceCurrency&&e.set("sourceCurrency",this.config.sourceCurrency),this.config.destinationCurrency&&e.set("destinationCurrency",this.config.destinationCurrency),this.config.walletAddress&&e.set("walletAddress",this.config.walletAddress),this.config.redirectUrl&&e.set("redirectUrl",this.config.redirectUrl),!1===this.config.autoRedirect&&e.set("autoRedirect","false"),`${this.config.widgetUrl}?${e.toString()}`}createIframe(){this.iframe=document.createElement("iframe"),this.iframe.src=this.buildWidgetUrl(),this.iframe.style.border="none",this.iframe.style.width="100%",this.iframe.style.height="100%",this.iframe.allow="camera *; microphone *; geolocation *; encrypted-media *; clipboard-read; clipboard-write",this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups allow-modals");const e=this.getContainer();e?e.appendChild(this.iframe):this.createModal()}getContainer(){return this.config.container?"string"==typeof this.config.container?document.querySelector(this.config.container):this.config.container:null}createModal(){this.modalContainer=document.createElement("div"),this.modalContainer.style.cssText="\n      position: fixed;\n      inset: 0;\n      z-index: 9999;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n      background: rgba(0, 0, 0, 0.5);\n      backdrop-filter: blur(4px);\n    ";const e=document.createElement("div");e.style.cssText="\n      position: relative;\n      width: 100%;\n      max-width: 440px;\n      height: 90vh;\n      max-height: 700px;\n      background: white;\n      border-radius: 16px;\n      overflow: hidden;\n      box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25);\n    ";const t=document.createElement("button");t.innerHTML="&times;",t.style.cssText="\n      position: absolute;\n      top: 8px;\n      right: 8px;\n      z-index: 10;\n      width: 32px;\n      height: 32px;\n      border: none;\n      background: rgba(0, 0, 0, 0.1);\n      border-radius: 50%;\n      font-size: 20px;\n      cursor: pointer;\n      display: flex;\n      align-items: center;\n      justify-content: center;\n    ",t.onclick=()=>this.close(),e.appendChild(t),this.iframe&&e.appendChild(this.iframe),this.modalContainer.appendChild(e),this.modalContainer.onclick=e=>{e.target===this.modalContainer&&this.close()};document.addEventListener("keydown",e=>{"Escape"===e.key&&this.close()}),document.body.appendChild(this.modalContainer),document.body.style.overflow="hidden"}setupMessageListener(){this.boundMessageHandler=this.handleMessage.bind(this),window.addEventListener("message",this.boundMessageHandler)}handleMessage(e){if(!c(e.origin,this.config.widgetUrl))return;const t=e.data;if(t&&"ramp-widget"===t.source)switch(t.type){case"WIDGET_READY":this.config.onReady?.();break;case"WIDGET_CLOSE":this.close();break;case"STEP_CHANGE":this.config.onStepChange?.(t.payload.step);break;case"QUOTE_CREATED":this.config.onQuoteCreated?.(t.payload);break;case"ORDER_CREATED":this.config.onOrderCreated?.(t.payload);break;case"ORDER_COMPLETED":this.config.onSuccess?.(t.payload);break;case"ERROR":this.config.onError?.(t.payload)}}sendCommand(e,t){if(!this.iframe?.contentWindow)return void console.warn("RampWidget: Cannot send command, widget not open");const i=this.config.widgetUrl?new URL(this.config.widgetUrl).origin:"*";this.iframe.contentWindow.postMessage({source:"ramp-sdk",type:e,payload:t},i)}cleanup(){this.boundMessageHandler&&(window.removeEventListener("message",this.boundMessageHandler),this.boundMessageHandler=null),this.iframe?.parentNode&&this.iframe.parentNode.removeChild(this.iframe),this.iframe=null,this.modalContainer?.parentNode&&(this.modalContainer.parentNode.removeChild(this.modalContainer),document.body.style.overflow=""),this.modalContainer=null}}e.ADDRESS_PATTERNS=t,e.ALLOWED_PROTOCOLS=n,e.API_KEY_PREFIXES=o,e.CURRENCY_CHAIN_MAP=i,e.DEV_ALLOWED_HOSTNAMES=r,e.RampWidget=p,e.VERSION="0.1.0",e.WIDGET_URLS=l,e.default=p,e.validateApiKey=s,e.validateMessageOrigin=c,e.validateRedirectUrl=a,e.validateWalletAddress=d,Object.defineProperty(e,"__esModule",{value:!0})});

package/package.json

@@ -0,0 +1,53 @@
+{
+	"name": "@nowramp/sdk",
+	"version": "0.1.0",
+	"description": "Official SDK for embedding the NowRamp fiat-to-crypto widget",
+	"author": "NowRamp <support@nowramp.com>",
+	"license": "MIT",
+	"homepage": "https://docs.nowramp.com/sdk",
+	"keywords": [
+		"crypto",
+		"fiat",
+		"onramp",
+		"offramp",
+		"widget",
+		"payment"
+	],
+	"type": "module",
+	"main": "./dist/index.cjs",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"unpkg": "./dist/sdk.umd.js",
+	"jsdelivr": "./dist/sdk.umd.js",
+	"exports": {
+		".": {
+			"import": "./dist/index.js",
+			"require": "./dist/index.cjs",
+			"types": "./dist/index.d.ts"
+		}
+	},
+	"files": [
+		"dist"
+	],
+	"sideEffects": false,
+	"scripts": {
+		"build": "rollup -c",
+		"build:prod": "NODE_ENV=production rollup -c",
+		"dev": "rollup -c -w",
+		"clean": "rm -rf dist",
+		"prepublishOnly": "npm run build:prod"
+	},
+	"devDependencies": {
+		"@rollup/plugin-json": "^6.1.0",
+		"@rollup/plugin-replace": "^5.0.7",
+		"@rollup/plugin-terser": "^0.4.4",
+		"@rollup/plugin-typescript": "^11.1.6",
+		"rollup": "^4.18.0",
+		"rollup-plugin-dts": "^6.1.1",
+		"tslib": "^2.6.3",
+		"typescript": "^5.4.5"
+	},
+	"engines": {
+		"node": ">=18"
+	}
+}