@ozura/elements 1.2.0-next.30 → 1.2.0-next.31

package/dist/types/frame/elementFrame.d.ts

@@ -22,6 +22,8 @@ export declare class ElementFrame {
     private vaultId;
     private frameId;
     private hostOrigin;
+    /** Mirrors the parent vault's debug flag — set via OZ_INIT. */
+    private debug;
     private rawValue;
     private cardBrand;
     private cvvMaxLength;

package/dist/types/frame/tokenizerFrame.d.ts

@@ -30,7 +30,16 @@ export declare class TokenizerFrame {
     private waxKey;
     private pending;
     private pendingBank;
+    /** Mirrors the parent vault's debug flag — set via OZ_INIT. When true, the frame relays debug-level info in addition to errors/warnings. */
+    private debug;
     constructor();
+    /**
+     * Relays a warning or error message to the parent window as OZ_DEBUG_LOG so
+     * it surfaces in the merchant page's DevTools console rather than the hidden
+     * tokenizer-frame context. Errors/warnings are always relayed; debug-level
+     * info is gated on this.debug.
+     */
+    private postDebugLog;
     private onMessage;
     /**
      * Shared vault POST helper. Handles origin guard, header construction,

package/dist/types/sdk/OzElement.d.ts

@@ -24,7 +24,8 @@ export declare class OzElement {
     private handlers;
     /** Called by OzVault when this element is destroyed so it can remove stale map entries. @internal */
     private _onDestroy;
-    constructor(elementType: AnyElementType, options: ElementOptions, vaultId: string, frameBaseUrl: string, fonts?: FontSource[], appearanceStyle?: ElementStyleConfig, onDestroy?: () => void);
+    private debug;
+    constructor(elementType: AnyElementType, options: ElementOptions, vaultId: string, frameBaseUrl: string, fonts?: FontSource[], appearanceStyle?: ElementStyleConfig, onDestroy?: () => void, debug?: boolean);
     /** The element type this proxy represents. */
     get type(): AnyElementType;
     /** True once the element iframe has loaded and signalled ready. */

package/dist/types/server/index.d.ts

@@ -51,6 +51,13 @@ export interface OzuraConfig {
     timeoutMs?: number;
     /** Max retry attempts for 5xx / network errors. Default: 2 (up to 3 total attempts). Set 0 to disable. */
     retries?: number;
+    /**
+     * Enables structured debug logging to the server console.
+     * Logs method, path, HTTP status, and duration for every Pay API and vault request.
+     * Request bodies are included with sensitive fields (tokens, session keys) redacted.
+     * Never enable in production — for local development and CI debugging only.
+     */
+    debug?: boolean;
 }
 export declare class OzuraError extends Error {
     readonly statusCode: number;
@@ -191,7 +198,15 @@ export declare class Ozura {
     private vaultUrl;
     private timeoutMs;
     private retries;
+    private debug;
     constructor(config: OzuraConfig);
+    /** Emits a `[Ozura]`-prefixed entry to `console.log`. No-op when `debug` is not set. */
+    private log;
+    /**
+     * Returns a copy of `body` with known-sensitive fields replaced by `'[REDACTED]'`.
+     * Used to make debug logs safe to emit without leaking vault tokens or session keys.
+     */
+    private static redactBody;
     /**
      * Charge a tokenized card. Maps the friendly `CardSaleInput` shape to the
      * Pay API's flat field format and handles headers, defaults, and errors.

package/dist/types/types/index.d.ts

@@ -656,7 +656,7 @@ export interface TransactionQueryResponse {
     data: TransactionData[];
     pagination: TransactionQueryPagination;
 }
-export type OzMessageType = 'OZ_FRAME_READY' | 'OZ_INIT' | 'OZ_UPDATE' | 'OZ_CLEAR' | 'OZ_CHANGE' | 'OZ_FOCUS' | 'OZ_BLUR' | 'OZ_RESIZE' | 'OZ_BEGIN_COLLECT' | 'OZ_FIELD_VALUE' | 'OZ_TOKENIZE' | 'OZ_TOKEN_RESULT' | 'OZ_TOKEN_ERROR' | 'OZ_FOCUS_REQUEST' | 'OZ_BLUR_REQUEST' | 'OZ_SET_CVV_LENGTH' | 'OZ_BANK_TOKENIZE' | 'OZ_BANK_TOKEN_RESULT' | 'OZ_TOKENIZE_CANCEL';
+export type OzMessageType = 'OZ_FRAME_READY' | 'OZ_INIT' | 'OZ_UPDATE' | 'OZ_CLEAR' | 'OZ_CHANGE' | 'OZ_FOCUS' | 'OZ_BLUR' | 'OZ_RESIZE' | 'OZ_BEGIN_COLLECT' | 'OZ_FIELD_VALUE' | 'OZ_TOKENIZE' | 'OZ_TOKEN_RESULT' | 'OZ_TOKEN_ERROR' | 'OZ_FOCUS_REQUEST' | 'OZ_BLUR_REQUEST' | 'OZ_SET_CVV_LENGTH' | 'OZ_BANK_TOKENIZE' | 'OZ_BANK_TOKEN_RESULT' | 'OZ_TOKENIZE_CANCEL' | 'OZ_DEBUG_LOG';
 export interface OzMessage {
     __oz: true;
     /** Protocol version stamped by the frame on OZ_FRAME_READY. Read by the SDK to detect stale CDN frames. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ozura/elements",
-  "version": "1.2.0-next.30",
+  "version": "1.2.0-next.31",
   "description": "PCI-compliant card tokenization SDK for the Ozura Vault — collect card data in iframe-isolated fields and tokenize without PCI scope",
   "main": "dist/oz-elements.umd.js",
   "module": "dist/oz-elements.esm.js",