@paydock/client-sdk 1.142.0 → 1.144.0-beta

package/bundles/index.cjs

@@ -1194,7 +1194,7 @@ SDK.headerKeys = Object.freeze({
   version: 'x-sdk-version',
   type: 'x-sdk-type'
 });
-SDK._version = 'v1.142.0';
+SDK._version = 'v1.144.0-beta';
 
 function isFunction(value) {
     return typeof value === 'function';
@@ -4804,127 +4804,162 @@ var Api = /*#__PURE__*/function (_ApiBase) {
   }]);
 }(ApiBase);
 
-var Url = /*#__PURE__*/function () {
-  function Url() {
-    _classCallCheck(this, Url);
+var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
+var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
+var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
+var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
+var ApiChargeInternal = /*#__PURE__*/function () {
+  function ApiChargeInternal(api) {
+    _classCallCheck(this, ApiChargeInternal);
+    this.api = api;
   }
-  return _createClass(Url, null, [{
-    key: "extendSearchParams",
-    value: function extendSearchParams(uri, key, val) {
-      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
+  return _createClass(ApiChargeInternal, [{
+    key: "walletCapture",
+    value: function walletCapture(payload) {
+      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
     }
   }, {
-    key: "serialize",
-    value: function serialize(params) {
-      return Object.keys(params).map(function (key) {
-        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
-      }).join('&');
+    key: "walletCallback",
+    value: function walletCallback(payload) {
+      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsProcess",
+    value: function standalone3dsProcess(payload) {
+      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsHandle",
+    value: function standalone3dsHandle() {
+      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
     }
   }]);
 }();
 
-var Uuid = /*#__PURE__*/function () {
-  function Uuid() {
-    _classCallCheck(this, Uuid);
+var CALLBACK_LINK = '/v1/checkouts/callback';
+var INSTRUCTION_LINK = '/v1/checkouts/instruction';
+var STATUS_LINK = '/v1/checkouts';
+var ApiCheckoutInternal = /*#__PURE__*/function () {
+  function ApiCheckoutInternal(api) {
+    _classCallCheck(this, ApiCheckoutInternal);
+    this.api = api;
+    this.getInstructionLink = function () {
+      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
+    };
   }
-  return _createClass(Uuid, null, [{
-    key: "generate",
-    value: function generate() {
-      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
-        var buf = new Uint16Array(8);
-        window.crypto.getRandomValues(buf);
-        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
-      } else {
-        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
-      }
+  return _createClass(ApiCheckoutInternal, [{
+    key: "instructions",
+    value: function instructions() {
+      return this.api.requestObservable('GET', this.getInstructionLink(), {});
     }
   }, {
-    key: "hash",
-    value: function hash(number) {
-      var hash = number.toString(16);
-      while (hash.length < 4) {
-        hash = "0" + hash;
-      }
-      return hash;
+    key: "callback",
+    value: function callback(payload) {
+      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
     }
   }, {
-    key: "random",
-    value: function random() {
-      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
+    key: "status",
+    value: function status(id) {
+      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
     }
   }]);
 }();
 
-var WIDGET_LINK = '/remote-action';
-var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
-var PAYMENT_SOURCE_LINK = '/payment-sources';
-var SECURE_3D = '/3ds/webhook';
-var FLYPAY_LINK = '/wallet/flypay';
-var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
-var MESSAGE_WIDGET_LINK = '/message-widget';
-var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
-var Link = /*#__PURE__*/function () {
-  function Link(linkResource) {
-    _classCallCheck(this, Link);
-    this.params = {};
-    this.widgetId = Uuid.generate();
-    this.linkResource = linkResource;
-    this.env = new Env(WIDGET_URL);
-    this.setParams({
-      widget_id: this.widgetId
-    });
+var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
+var ApiGatewayInternal = /*#__PURE__*/function () {
+  function ApiGatewayInternal(api) {
+    _classCallCheck(this, ApiGatewayInternal);
+    this.api = api;
   }
-  return _createClass(Link, [{
-    key: "getNetUrl",
-    value: function getNetUrl() {
-      return this.env.getConf().url + this.linkResource;
+  return _createClass(ApiGatewayInternal, [{
+    key: "getWalletConfig",
+    value: function getWalletConfig(gateway_id) {
+      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
     }
-  }, {
-    key: "getUrl",
-    value: function getUrl() {
-      var url = this.getNetUrl();
-      var params = this.getParams();
-      for (var key in params) {
-        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
-      }
-      return url;
+  }]);
+}();
+
+var CREATE_OTT = '/v1/payment_sources/tokens';
+var CREATE_SESSION = '/v1/payment_sources/payment-session';
+var ApiPaymentSourceInternal = /*#__PURE__*/function () {
+  function ApiPaymentSourceInternal(api) {
+    _classCallCheck(this, ApiPaymentSourceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiPaymentSourceInternal, [{
+    key: "createOTT",
+    value: function createOTT(payload) {
+      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
     }
   }, {
-    key: "setParams",
-    value: function setParams(params) {
-      this.params = _extends({}, this.params, params);
+    key: "createSession",
+    value: function createSession(payload) {
+      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
     }
-  }, {
-    key: "concatParams",
-    value: function concatParams(params) {
-      for (var key in params) {
-        if (!params.hasOwnProperty(key) || !params[key].length) continue;
-        if (typeof this.params[key] !== 'string') this.params[key] = '';
-        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
-      }
+  }]);
+}();
+
+var GET_CONFIG = '/v1/services/:service_id/config';
+var ApiServiceInternal = /*#__PURE__*/function () {
+  function ApiServiceInternal(api) {
+    _classCallCheck(this, ApiServiceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiServiceInternal, [{
+    key: "getConfig",
+    value: function getConfig(service_id) {
+      var url = GET_CONFIG.replace(':service_id', service_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
+    }
+  }]);
+}();
+var SERVICE_TYPES;
+(function (SERVICE_TYPES) {
+  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
+  SERVICE_TYPES["BOOKING"] = "Booking";
+  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
+  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
+  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
+  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
+  SERVICE_TYPES["FORTER"] = "Forter";
+  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
+  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
+})(SERVICE_TYPES || (SERVICE_TYPES = {}));
+
+var ApiInternal = /*#__PURE__*/function (_ApiBase) {
+  function ApiInternal() {
+    _classCallCheck(this, ApiInternal);
+    return _callSuper(this, ApiInternal, arguments);
+  }
+  _inherits(ApiInternal, _ApiBase);
+  return _createClass(ApiInternal, [{
+    key: "charge",
+    value: function charge() {
+      return new ApiChargeInternal(this);
     }
   }, {
-    key: "getParams",
-    value: function getParams() {
-      return this.params;
+    key: "service",
+    value: function service() {
+      return new ApiServiceInternal(this);
     }
   }, {
-    key: "setEnv",
-    value: function setEnv(env, alias) {
-      this.env.setEnv(env, alias);
+    key: "checkout",
+    value: function checkout() {
+      return new ApiCheckoutInternal(this);
     }
   }, {
-    key: "getEnv",
-    value: function getEnv() {
-      return this.env.getEnv();
+    key: "gateway",
+    value: function gateway() {
+      return new ApiGatewayInternal(this);
     }
   }, {
-    key: "getBaseUrl",
-    value: function getBaseUrl() {
-      return this.env.getConf().url;
+    key: "paymentSource",
+    value: function paymentSource() {
+      return new ApiPaymentSourceInternal(this);
     }
   }]);
-}();
+}(ApiBase);
 
 var IFrame = /*#__PURE__*/function () {
   function IFrame(container) {
@@ -5035,7 +5070,7 @@ var IFrame = /*#__PURE__*/function () {
   }]);
 }();
 
-var EVENT$5 = {
+var EVENT$4 = {
   AFTER_LOAD: 'afterLoad',
   SUBMIT: 'submit',
   FINISH: 'finish',
@@ -5092,9 +5127,9 @@ var IFrameEvent = /*#__PURE__*/function () {
   }, {
     key: "on",
     value: function on(eventName, widgetId, cb) {
-      for (var event in EVENT$5) {
-        if (!EVENT$5.hasOwnProperty(event)) continue;
-        if (eventName === EVENT$5[event]) {
+      for (var event in EVENT$4) {
+        if (!EVENT$4.hasOwnProperty(event)) continue;
+        if (eventName === EVENT$4[event]) {
           this.listeners.push({
             event: eventName,
             listener: cb,
@@ -5121,10 +5156,10 @@ var IFrameEvent = /*#__PURE__*/function () {
 }();
 
 var hiddenStyle = {
-  visibility: "hidden",
-  border: "0",
-  width: "0",
-  height: "0"
+  visibility: 'hidden',
+  border: '0',
+  width: '0',
+  height: '0'
 };
 var PROCESS_STANDALONE_3DS_STATUS;
 (function (PROCESS_STANDALONE_3DS_STATUS) {
@@ -5146,14 +5181,30 @@ var IFRAME_STATUS;
   IFRAME_STATUS["TIMEOUT"] = "AuthTimedOut";
   IFRAME_STATUS["INVALID"] = "invalid_event";
 })(IFRAME_STATUS || (IFRAME_STATUS = {}));
+/**
+ * Event name constants emitted during the Standalone 3DS (GPayments) flow.
+ * Used internally by `GPaymentsService` and re-exported publicly as `CANVAS_3DS_EVENT`.
+ */
 var GPAYMENTS_EVENT = {
+  /** Authentication succeeded. Payload: `Canvas3dsAuthPayload`. */
   AUTH_SUCCESS: 'chargeAuthSuccess',
+  /** Authentication failed — covers issuer rejection, iframe timeout (`AuthTimedOut`), and invalid-event outcomes. Payload: `Canvas3dsAuthPayload`. */
   AUTH_ERROR: 'chargeAuthReject',
+  /** Decoupled authentication — issuer will authenticate out-of-band. Payload: `Canvas3dsAuthPayload`. */
   DECOUPLED: 'chargeAuthDecoupled',
+  /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
   CHALLENGE: 'chargeAuthChallenge',
+  /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
   INFO: 'chargeAuthInfo',
+  /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
   ERROR: 'error'
 };
+/**
+ * Public alias for GPAYMENTS_EVENT. Same object reference — no behavioral change.
+ * Prefer `CANVAS_3DS_EVENT` in public-facing code; `GPAYMENTS_EVENT` remains for
+ * backwards-compatible internal usage.
+ */
+var CANVAS_3DS_EVENT = GPAYMENTS_EVENT;
 var GPaymentsService = /*#__PURE__*/function () {
   function GPaymentsService(container, api, eventEmitter) {
     _classCallCheck(this, GPaymentsService);
@@ -5181,20 +5232,22 @@ var GPaymentsService = /*#__PURE__*/function () {
     value: function initializeIFrames(initializationUrl, secondaryUrl, title) {
       var hideAuthorization = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
       var container = this.container.getElement();
-      if (!container) return;
-      var divAuthorization = document.createElement("div");
-      divAuthorization.setAttribute("id", "paydock_authorization_iframe");
+      if (!container) {
+        return;
+      }
+      var divAuthorization = document.createElement('div');
+      divAuthorization.setAttribute('id', 'paydock_authorization_iframe');
       container.appendChild(divAuthorization);
-      this.browserAndChallengeContainer = new Container("#paydock_authorization_iframe");
+      this.browserAndChallengeContainer = new Container('#paydock_authorization_iframe');
       this.iFrameAuthorization = new IFrame(this.browserAndChallengeContainer);
       this.iFrameAuthorization.load(initializationUrl, {
         title: title
       });
       if (secondaryUrl) {
-        var divSecondaryURL = document.createElement("div");
-        divSecondaryURL.setAttribute("id", "paydock_secondary_iframe");
+        var divSecondaryURL = document.createElement('div');
+        divSecondaryURL.setAttribute('id', 'paydock_secondary_iframe');
         container.appendChild(divSecondaryURL);
-        this.monitoringContainer = new Container("#paydock_secondary_iframe");
+        this.monitoringContainer = new Container('#paydock_secondary_iframe');
         this.iFrameSecondaryUrl = new IFrame(this.monitoringContainer);
         this.iFrameSecondaryUrl.load(secondaryUrl, {
           title: title
@@ -5210,8 +5263,12 @@ var GPaymentsService = /*#__PURE__*/function () {
       var hideAuthorization = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
       var _a;
       for (var prop in hiddenStyle) {
-        if (!hiddenStyle.hasOwnProperty(prop)) continue;
-        if (hideAuthorization) this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        if (!Object.hasOwn(hiddenStyle, prop)) {
+          continue;
+        }
+        if (hideAuthorization) {
+          this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        }
         (_a = this.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.setStyle(prop, hiddenStyle[prop]);
       }
     }
@@ -5219,17 +5276,21 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "setupIFrameEvents",
     value: function setupIFrameEvents(widgetId) {
       var _this = this;
-      this.iFrameEvent.on(EVENT$5.CHARGE_AUTH, widgetId, function (data) {
+      this.iFrameEvent.on(EVENT$4.CHARGE_AUTH, widgetId, function (data) {
         if (data.status === IFRAME_STATUS.SKIPPED || data.status === IFRAME_STATUS.FINISHED) {
-          if (data.info) _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
-            info: data.info
-          });
+          if (data.info) {
+            _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
+              info: data.info
+            });
+          }
           _this.performAuthentication(data);
-        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
-          status: data.status
-        }, data.charge_3ds_id));
+        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) {
+          _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
+            status: data.status
+          }, data.charge_3ds_id));
+        }
       });
-      this.iFrameEvent.on(EVENT$5.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
+      this.iFrameEvent.on(EVENT$4.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
         _this.processResult(data.charge_3ds_id);
       });
     }
@@ -5267,13 +5328,19 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "processResult",
     value: function processResult(charge3dsId) {
       var _this2 = this;
-      if (this.resultRead) return;
+      if (this.resultRead) {
+        return;
+      }
       this.resultRead = true;
       this.api.charge().standalone3dsHandle().then(function (result) {
         var _a;
         _this2.iFrameAuthorization.remove();
         (_a = _this2.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.remove();
-        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));else _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));
+        } else {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        }
       }, function (err) {
         _this2.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this2.parseError(err, charge3dsId));
       });
@@ -5298,10 +5365,16 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "doPolling",
     value: function doPolling(url, charge3dsId) {
       var _this3 = this;
-      this.externalAPI("GET", url).then(function (data) {
-        if (!data.event || data.event === "AuthResultNotReady") setTimeout(function () {
-          _this3.doPolling(url, charge3dsId);
-        }, 2000);else if (data.event === 'AuthResultReady') _this3.processResult(charge3dsId);else throw new Error("Event not supported");
+      this.externalAPI('GET', url).then(function (data) {
+        if (!data.event || data.event === 'AuthResultNotReady') {
+          setTimeout(function () {
+            _this3.doPolling(url, charge3dsId);
+          }, 2000);
+        } else if (data.event === 'AuthResultReady') {
+          _this3.processResult(charge3dsId);
+        } else {
+          throw new Error('Event not supported');
+        }
       })["catch"](function (err) {
         return _this3.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this3.parseError(err, charge3dsId));
       });
@@ -5318,16 +5391,24 @@ var GPaymentsService = /*#__PURE__*/function () {
         charge_3ds_id: charge_3ds_id
       }).then(function (authenticationResult) {
         var _a, _b;
-        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
+        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) {
+          _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
           if ((_a = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _a === void 0 ? void 0 : _a.challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.CHALLENGE, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
             _this4.initializeIFrames(authenticationResult.result.challenge_url, undefined, 'Authentication Challenge', false);
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           } else if ((_b = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _b === void 0 ? void 0 : _b.decoupled_challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.DECOUPLED, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           }
-        } else return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else {
+          return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        }
       }, function (err) {
         _this4.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this4.parseError(err, charge_3ds_id));
       });
@@ -5335,192 +5416,159 @@ var GPaymentsService = /*#__PURE__*/function () {
   }]);
 }();
 
-var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
-var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
-var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
-var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
-var ApiChargeInternal = /*#__PURE__*/function () {
-  function ApiChargeInternal(api) {
-    _classCallCheck(this, ApiChargeInternal);
-    this.api = api;
+var STANDALONE_3DS_GATEWAYS = {
+  GPAYMENTS: 'GPayments'
+};
+var Standalone3dsService = /*#__PURE__*/function () {
+  function Standalone3dsService(container, eventEmitter) {
+    _classCallCheck(this, Standalone3dsService);
+    this.env = DEFAULT_ENV;
+    this.container = container;
+    this.eventEmitter = eventEmitter;
   }
-  return _createClass(ApiChargeInternal, [{
-    key: "walletCapture",
-    value: function walletCapture(payload) {
-      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
-    }
-  }, {
-    key: "walletCallback",
-    value: function walletCallback(payload) {
-      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
-    }
-  }, {
-    key: "standalone3dsProcess",
-    value: function standalone3dsProcess(payload) {
-      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+  return _createClass(Standalone3dsService, [{
+    key: "load",
+    value: function load(token, options) {
+      var parsedToken = AccessToken.validateJWT(token);
+      if (!parsedToken) {
+        throw new Error('Invalid charge token');
+      }
+      var tokenData = AccessToken.extractData(parsedToken.body);
+      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
+      api.setEnv(this.env, this.alias);
+      switch (tokenData.service_type) {
+        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
+          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
+          break;
+      }
     }
   }, {
-    key: "standalone3dsHandle",
-    value: function standalone3dsHandle() {
-      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
+    key: "setEnv",
+    value: function setEnv(env, alias) {
+      this.env = env;
+      this.alias = alias;
     }
   }]);
 }();
 
-var CALLBACK_LINK = '/v1/checkouts/callback';
-var INSTRUCTION_LINK = '/v1/checkouts/instruction';
-var STATUS_LINK = '/v1/checkouts';
-var ApiCheckoutInternal = /*#__PURE__*/function () {
-  function ApiCheckoutInternal(api) {
-    _classCallCheck(this, ApiCheckoutInternal);
-    this.api = api;
-    this.getInstructionLink = function () {
-      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
-    };
+var Url = /*#__PURE__*/function () {
+  function Url() {
+    _classCallCheck(this, Url);
   }
-  return _createClass(ApiCheckoutInternal, [{
-    key: "instructions",
-    value: function instructions() {
-      return this.api.requestObservable('GET', this.getInstructionLink(), {});
-    }
-  }, {
-    key: "callback",
-    value: function callback(payload) {
-      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
+  return _createClass(Url, null, [{
+    key: "extendSearchParams",
+    value: function extendSearchParams(uri, key, val) {
+      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
     }
   }, {
-    key: "status",
-    value: function status(id) {
-      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
-    }
-  }]);
-}();
-
-var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
-var ApiGatewayInternal = /*#__PURE__*/function () {
-  function ApiGatewayInternal(api) {
-    _classCallCheck(this, ApiGatewayInternal);
-    this.api = api;
-  }
-  return _createClass(ApiGatewayInternal, [{
-    key: "getWalletConfig",
-    value: function getWalletConfig(gateway_id) {
-      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+    key: "serialize",
+    value: function serialize(params) {
+      return Object.keys(params).map(function (key) {
+        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
+      }).join('&');
     }
   }]);
 }();
 
-var CREATE_OTT = '/v1/payment_sources/tokens';
-var CREATE_SESSION = '/v1/payment_sources/payment-session';
-var ApiPaymentSourceInternal = /*#__PURE__*/function () {
-  function ApiPaymentSourceInternal(api) {
-    _classCallCheck(this, ApiPaymentSourceInternal);
-    this.api = api;
+var Uuid = /*#__PURE__*/function () {
+  function Uuid() {
+    _classCallCheck(this, Uuid);
   }
-  return _createClass(ApiPaymentSourceInternal, [{
-    key: "createOTT",
-    value: function createOTT(payload) {
-      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
+  return _createClass(Uuid, null, [{
+    key: "generate",
+    value: function generate() {
+      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
+        var buf = new Uint16Array(8);
+        window.crypto.getRandomValues(buf);
+        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
+      } else {
+        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
+      }
     }
   }, {
-    key: "createSession",
-    value: function createSession(payload) {
-      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
+    key: "hash",
+    value: function hash(number) {
+      var hash = number.toString(16);
+      while (hash.length < 4) {
+        hash = "0" + hash;
+      }
+      return hash;
     }
-  }]);
-}();
-
-var GET_CONFIG = '/v1/services/:service_id/config';
-var ApiServiceInternal = /*#__PURE__*/function () {
-  function ApiServiceInternal(api) {
-    _classCallCheck(this, ApiServiceInternal);
-    this.api = api;
-  }
-  return _createClass(ApiServiceInternal, [{
-    key: "getConfig",
-    value: function getConfig(service_id) {
-      var url = GET_CONFIG.replace(':service_id', service_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+  }, {
+    key: "random",
+    value: function random() {
+      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
     }
   }]);
 }();
-var SERVICE_TYPES;
-(function (SERVICE_TYPES) {
-  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
-  SERVICE_TYPES["BOOKING"] = "Booking";
-  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
-  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
-  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
-  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
-  SERVICE_TYPES["FORTER"] = "Forter";
-  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
-  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
-})(SERVICE_TYPES || (SERVICE_TYPES = {}));
 
-var ApiInternal = /*#__PURE__*/function (_ApiBase) {
-  function ApiInternal() {
-    _classCallCheck(this, ApiInternal);
-    return _callSuper(this, ApiInternal, arguments);
+var WIDGET_LINK = '/remote-action';
+var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
+var PAYMENT_SOURCE_LINK = '/payment-sources';
+var SECURE_3D = '/3ds/webhook';
+var FLYPAY_LINK = '/wallet/flypay';
+var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
+var MESSAGE_WIDGET_LINK = '/message-widget';
+var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
+var Link = /*#__PURE__*/function () {
+  function Link(linkResource) {
+    _classCallCheck(this, Link);
+    this.params = {};
+    this.widgetId = Uuid.generate();
+    this.linkResource = linkResource;
+    this.env = new Env(WIDGET_URL);
+    this.setParams({
+      widget_id: this.widgetId
+    });
   }
-  _inherits(ApiInternal, _ApiBase);
-  return _createClass(ApiInternal, [{
-    key: "charge",
-    value: function charge() {
-      return new ApiChargeInternal(this);
+  return _createClass(Link, [{
+    key: "getNetUrl",
+    value: function getNetUrl() {
+      return this.env.getConf().url + this.linkResource;
     }
   }, {
-    key: "service",
-    value: function service() {
-      return new ApiServiceInternal(this);
+    key: "getUrl",
+    value: function getUrl() {
+      var url = this.getNetUrl();
+      var params = this.getParams();
+      for (var key in params) {
+        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
+      }
+      return url;
     }
   }, {
-    key: "checkout",
-    value: function checkout() {
-      return new ApiCheckoutInternal(this);
+    key: "setParams",
+    value: function setParams(params) {
+      this.params = _extends({}, this.params, params);
     }
   }, {
-    key: "gateway",
-    value: function gateway() {
-      return new ApiGatewayInternal(this);
+    key: "concatParams",
+    value: function concatParams(params) {
+      for (var key in params) {
+        if (!params.hasOwnProperty(key) || !params[key].length) continue;
+        if (typeof this.params[key] !== 'string') this.params[key] = '';
+        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
+      }
     }
   }, {
-    key: "paymentSource",
-    value: function paymentSource() {
-      return new ApiPaymentSourceInternal(this);
-    }
-  }]);
-}(ApiBase);
-
-var STANDALONE_3DS_GATEWAYS = {
-  GPAYMENTS: "GPayments"
-};
-var Standalone3dsService = /*#__PURE__*/function () {
-  function Standalone3dsService(container, eventEmitter) {
-    _classCallCheck(this, Standalone3dsService);
-    this.env = DEFAULT_ENV;
-    this.container = container;
-    this.eventEmitter = eventEmitter;
-  }
-  return _createClass(Standalone3dsService, [{
-    key: "load",
-    value: function load(token, options) {
-      var parsedToken = AccessToken.validateJWT(token);
-      if (!parsedToken) throw new Error("Invalid charge token");
-      var tokenData = AccessToken.extractData(parsedToken.body);
-      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
-      api.setEnv(this.env, this.alias);
-      switch (tokenData.service_type) {
-        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
-          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
-          break;
-      }
+    key: "getParams",
+    value: function getParams() {
+      return this.params;
     }
   }, {
     key: "setEnv",
     value: function setEnv(env, alias) {
-      this.env = env;
-      this.alias = alias;
+      this.env.setEnv(env, alias);
+    }
+  }, {
+    key: "getEnv",
+    value: function getEnv() {
+      return this.env.getEnv();
+    }
+  }, {
+    key: "getBaseUrl",
+    value: function getBaseUrl() {
+      return this.env.getConf().url;
     }
   }]);
 }();
@@ -5560,7 +5608,7 @@ var TOKEN_FORMAT$2;
  * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
  * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
  * @param {string} ERROR=error
-*/
+ */
 /**
  * Class Canvas3ds include method for working on html
  * @constructor
@@ -5596,13 +5644,21 @@ var Canvas3ds = /*#__PURE__*/function () {
      *
      */
     function load() {
-      if (this.token.format === TOKEN_FORMAT$2.HTML) this.iFrame.loadFromHtml(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.URL) this.iFrame.load(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) this.standalone3dsService.load(this.token.content, {
-        title: '3d secure authentication'
-      });else console.error('Token contain unsupported payload');
+      if (this.token.format === TOKEN_FORMAT$2.HTML) {
+        this.iFrame.loadFromHtml(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.URL) {
+        this.iFrame.load(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
+        this.standalone3dsService.load(this.token.content, {
+          title: '3d secure authentication'
+        });
+      } else {
+        console.error('Token contain unsupported payload');
+      }
     }
     /**
      * Current method can change environment. By default environment = sandbox.
@@ -5619,7 +5675,9 @@ var Canvas3ds = /*#__PURE__*/function () {
       this.link.setEnv(env, alias);
       this.standalone3dsService.setEnv(env, alias);
       for (var index in this.configs) {
-        if (!this.configs.hasOwnProperty(index)) continue;
+        if (!Object.hasOwn(this.configs, index)) {
+          continue;
+        }
         this.configs[index].setEnv(env, alias);
       }
     }
@@ -5629,34 +5687,45 @@ var Canvas3ds = /*#__PURE__*/function () {
       return this.link.getEnv();
     }
     /**
-     * Listen to events of widget
+     * Listen to events of widget.
      *
-     * @example
+     * Available event names are defined in {@link Canvas3dsEventMap} (typed) and
+     * {@link CANVAS_3DS_EVENT} (string constants). Using a literal event name
+     * narrows the callback payload via the typed overloads.
      *
-     * widget.on('chargeAuthReject', function (data) {
-     *      console.log(data);
+     * @example
+     * // Callback form — payload is narrowed by the event name
+     * widget.on('chargeAuthReject', (data) => {
+     *   console.log(data); // data is Canvas3dsAuthPayload | Canvas3dsChargeAuthEventPayload
      * });
-     * // or
-     * widget.on('chargeAuthReject').then(function (data) {
-     *      console.log(data);
+     *
+     * // Promise form
+     * widget.on('chargeAuthReject').then((data) => {
+     *   console.log(data);
      * });
-     * @param {string} eventName - Available event names [EVENT]{@link EVENT} [STANDALONE_3DS_EVENT]{@link STANDALONE_3DS_EVENT}
-     * @param {listener} [cb]
-     * @return {Promise<IEventData> | void}
+     *
+     * @param eventName - Event name from {@link Canvas3dsEventMap} or any string for dynamic events.
+     * @param cb - Optional listener callback. If omitted, returns a Promise that resolves on the next emission.
+     * @returns `void` when a callback is provided; otherwise a Promise that resolves with the event payload.
      */
+    // biome-ignore lint/suspicious/noExplicitAny: implementation signature must accept any payload shape to satisfy all overloads above
   }, {
     key: "on",
     value: function on(eventName, cb) {
       var _this = this;
       if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
-        if (typeof cb === 'function') return this.eventEmitter.subscribe(eventName, cb);
+        if (typeof cb === 'function') {
+          return this.eventEmitter.subscribe(eventName, cb);
+        }
         return new Promise(function (resolve) {
           return _this.eventEmitter.subscribe(eventName, function (res) {
             return resolve(res);
           });
         });
       } else {
-        if (typeof cb === 'function') return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        if (typeof cb === 'function') {
+          return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        }
         return new Promise(function (resolve) {
           return _this.event.on(eventName, _this.link.getParams().ref_id, function (res) {
             return resolve(res);
@@ -5700,6 +5769,19 @@ var Canvas3ds = /*#__PURE__*/function () {
   }]);
 }();
 
+/**
+ * Public, tree-shakeable alias for the internal `TOKEN_FORMAT` enum in canvas-3ds.ts.
+ * Mirrors the string values of that enum without exposing the private enum itself.
+ */
+var Canvas3dsTokenFormat = {
+  /** Token whose `content` is a complete HTML page. The SDK renders it inside an iframe. */
+  HTML: 'html',
+  /** Token whose `content` is a URL. The SDK loads it inside an iframe. */
+  URL: 'url',
+  /** Token whose `content` describes a standalone 3DS service (e.g. GPayments). The SDK delegates to that service's flow. */
+  STANDALONE_3DS: 'standalone_3ds'
+};
+
 var Spinner = /*#__PURE__*/function () {
   function Spinner() {
     _classCallCheck(this, Spinner);
@@ -6781,7 +6863,7 @@ var ZipmoneyContextualRunner = /*#__PURE__*/function (_ContextualRunner) {
     key: "setCompleteCheckoutListener",
     value: function setCompleteCheckoutListener() {
       var _this5 = this;
-      this.event.on(EVENT$5.FINISH, this.widgetId, function (event) {
+      this.event.on(EVENT$4.FINISH, this.widgetId, function (event) {
         _this5.event.clear();
         clearInterval(_this5.checkInterval);
         if (_this5.checkoutTab && !_this5.checkoutTab.closed) {
@@ -6868,15 +6950,15 @@ var StorageDispatcher = /*#__PURE__*/function () {
     value: function setupIframeEventListeners() {
       var _this = this;
       if (!this.widgetId) return;
-      this.iframeEvent.on(EVENT$5.AFTER_LOAD, this.widgetId, function (_event) {
+      this.iframeEvent.on(EVENT$4.AFTER_LOAD, this.widgetId, function (_event) {
         var _a;
         (_a = _this.onLoadCallback) === null || _a === void 0 ? void 0 : _a.call(_this);
       });
-      this.iframeEvent.on(EVENT$5.DISPATCH_SUCCESS, this.widgetId, function (_event) {
+      this.iframeEvent.on(EVENT$4.DISPATCH_SUCCESS, this.widgetId, function (_event) {
         var _a, _b;
         (_b = (_a = _this.pushCallbacks) === null || _a === void 0 ? void 0 : _a.onSuccess) === null || _b === void 0 ? void 0 : _b.call(_a);
       });
-      this.iframeEvent.on(EVENT$5.DISPATCH_ERROR, this.widgetId, function (_event) {
+      this.iframeEvent.on(EVENT$4.DISPATCH_ERROR, this.widgetId, function (_event) {
         var _a, _b;
         (_b = (_a = _this.pushCallbacks) === null || _a === void 0 ? void 0 : _a.onError) === null || _b === void 0 ? void 0 : _b.call(_a);
       });
@@ -8090,7 +8172,7 @@ var AfterPayWalletService = /*#__PURE__*/function (_WalletService) {
   }]);
 }(WalletService);
 
-/*! @license DOMPurify 3.3.3 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.3/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 
 var purify_cjs;
 var hasRequiredPurify_cjs;
@@ -8298,7 +8380,7 @@ function requirePurify_cjs () {
 
 	const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'exportparts', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inert', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'part', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'slot', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
 	const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'mask-type', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
-	const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
+	const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnalign', 'columnlines', 'columnspacing', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lquote', 'lspace', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
 	const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
 
 	// eslint-disable-next-line unicorn/better-regex
@@ -8395,7 +8477,7 @@ function requirePurify_cjs () {
 	function createDOMPurify() {
 	  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
 	  const DOMPurify = root => createDOMPurify(root);
-	  DOMPurify.version = '3.3.3';
+	  DOMPurify.version = '3.4.0';
 	  DOMPurify.removed = [];
 	  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
 	    // Not running in a browser, provide a factory function
@@ -8671,7 +8753,7 @@ function requirePurify_cjs () {
 	    NAMESPACE = cfg.NAMESPACE || HTML_NAMESPACE;
 	    MATHML_TEXT_INTEGRATION_POINTS = cfg.MATHML_TEXT_INTEGRATION_POINTS || MATHML_TEXT_INTEGRATION_POINTS;
 	    HTML_INTEGRATION_POINTS = cfg.HTML_INTEGRATION_POINTS || HTML_INTEGRATION_POINTS;
-	    CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || {};
+	    CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || create(null);
 	    if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
 	      CUSTOM_ELEMENT_HANDLING.tagNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
 	    }
@@ -8711,13 +8793,10 @@ function requirePurify_cjs () {
 	        addToSet(ALLOWED_ATTR, xml);
 	      }
 	    }
-	    /* Prevent function-based ADD_ATTR / ADD_TAGS from leaking across calls */
-	    if (!objectHasOwnProperty(cfg, 'ADD_TAGS')) {
-	      EXTRA_ELEMENT_HANDLING.tagCheck = null;
-	    }
-	    if (!objectHasOwnProperty(cfg, 'ADD_ATTR')) {
-	      EXTRA_ELEMENT_HANDLING.attributeCheck = null;
-	    }
+	    /* Always reset function-based ADD_TAGS / ADD_ATTR checks to prevent
+	     * leaking across calls when switching from function to array config */
+	    EXTRA_ELEMENT_HANDLING.tagCheck = null;
+	    EXTRA_ELEMENT_HANDLING.attributeCheck = null;
 	    /* Merge configuration parameters */
 	    if (cfg.ADD_TAGS) {
 	      if (typeof cfg.ADD_TAGS === 'function') {
@@ -9040,6 +9119,11 @@ function requirePurify_cjs () {
 	      _forceRemove(currentNode);
 	      return true;
 	    }
+	    /* Remove risky CSS construction leading to mXSS */
+	    if (SAFE_FOR_XML && currentNode.namespaceURI === HTML_NAMESPACE && tagName === 'style' && _isNode(currentNode.firstElementChild)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
 	    /* Remove any occurrence of processing instructions */
 	    if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
 	      _forceRemove(currentNode);
@@ -9051,7 +9135,7 @@ function requirePurify_cjs () {
 	      return true;
 	    }
 	    /* Remove element if anything forbids its presence */
-	    if (!(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])) {
+	    if (FORBID_TAGS[tagName] || !(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && !ALLOWED_TAGS[tagName]) {
 	      /* Check if we have a custom element to handle */
 	      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
 	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
@@ -9290,7 +9374,7 @@ function requirePurify_cjs () {
 	   *
 	   * @param fragment to iterate over recursively
 	   */
-	  const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
+	  const _sanitizeShadowDOM2 = function _sanitizeShadowDOM(fragment) {
 	    let shadowNode = null;
 	    const shadowIterator = _createNodeIterator(fragment);
 	    /* Execute a hook if present */
@@ -9304,7 +9388,7 @@ function requirePurify_cjs () {
 	      _sanitizeAttributes(shadowNode);
 	      /* Deep shadow DOM detected */
 	      if (shadowNode.content instanceof DocumentFragment) {
-	        _sanitizeShadowDOM(shadowNode.content);
+	        _sanitizeShadowDOM2(shadowNode.content);
 	      }
 	    }
 	    /* Execute a hook if present */
@@ -9399,7 +9483,7 @@ function requirePurify_cjs () {
 	      _sanitizeAttributes(currentNode);
 	      /* Shadow DOM detected, sanitize it */
 	      if (currentNode.content instanceof DocumentFragment) {
-	        _sanitizeShadowDOM(currentNode.content);
+	        _sanitizeShadowDOM2(currentNode.content);
 	      }
 	    }
 	    /* If we sanitized `dirty` in-place, return it. */
@@ -9408,6 +9492,14 @@ function requirePurify_cjs () {
 	    }
 	    /* Return sanitized string or DOM */
 	    if (RETURN_DOM) {
+	      if (SAFE_FOR_TEMPLATES) {
+	        body.normalize();
+	        let html = body.innerHTML;
+	        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+	          html = stringReplace(html, expr, ' ');
+	        });
+	        body.innerHTML = html;
+	      }
 	      if (RETURN_DOM_FRAGMENT) {
 	        returnNode = createDocumentFragment.call(body.ownerDocument);
 	        while (body.firstChild) {
@@ -10240,6 +10332,44 @@ var FlypayWalletService = /*#__PURE__*/function (_WalletService) {
   }]);
 }(WalletService);
 
+/**
+ * Maximum Apple Pay JS API version the SDK targets.
+ * Bump this when adopting features from a newer version.
+ */
+var APPLE_PAY_MAX_VERSION = 14;
+/**
+ * Minimum Apple Pay JS API version the SDK can operate with.
+ *
+ * Version 3 (iOS 11 / macOS 10.13) is required because the SDK uses:
+ * - `ApplePayError` constructor
+ * - Object-form `completeShippingContactSelection(update)`
+ * - Object-form `completeShippingMethodSelection(update)`
+ * - `supportedCountries` in payment requests
+ *
+ * All of these were introduced in version 3.
+ */
+var APPLE_PAY_MIN_VERSION = 3;
+/**
+ * Detects the highest Apple Pay JS API version the current device supports,
+ * starting from {@link APPLE_PAY_MAX_VERSION} down to {@link APPLE_PAY_MIN_VERSION}.
+ *
+ * Returns `0` if Apple Pay is not available or the device does not support
+ * the minimum required version.
+ *
+ * @see https://developer.apple.com/documentation/apple_pay_on_the_web/applepaysession/supportsversion
+ */
+function getSupportedApplePayVersion() {
+  if (!window.ApplePaySession) {
+    return 0;
+  }
+  for (var v = APPLE_PAY_MAX_VERSION; v >= APPLE_PAY_MIN_VERSION; v--) {
+    if (ApplePaySession.supportsVersion(v)) {
+      return v;
+    }
+  }
+  return 0;
+}
+
 var DEFAULT_APPLE_PAY_CAPABILITIES$2 = ['paymentCredentialsAvailable'];
 var AppleWalletService = /*#__PURE__*/function (_WalletService) {
   function AppleWalletService(publicKey, meta, gatewayName, eventEmitter) {
@@ -10569,7 +10699,14 @@ var AppleWalletService = /*#__PURE__*/function (_WalletService) {
     key: "onApplePayButtonClicked",
     value: function onApplePayButtonClicked() {
       var _this5 = this;
-      this.paymentSession = new ApplePaySession(14, this.createRequest());
+      var applePayApiVersion = getSupportedApplePayVersion();
+      if (applePayApiVersion === 0) {
+        this.eventEmitter.emit(WALLET_EVENT.UNAVAILABLE, {
+          wallet: WALLET_TYPE.APPLE
+        });
+        return;
+      }
+      this.paymentSession = new ApplePaySession(applePayApiVersion, this.createRequest());
       this.paymentSession.onvalidatemerchant = this.onValidateMerchant;
       this.paymentSession.onpaymentauthorized = this.onPaymentAuthorized;
       this.paymentSession.oncancel = this.onCancelPayment;
@@ -11718,7 +11855,7 @@ var StripeWalletService = /*#__PURE__*/function (_WalletService) {
  * @param {string} ON_CLICK=onClick
  * @param {string} LOADED=onWalletLoaded
  */
-var EVENT$4 = {
+var EVENT$3 = {
   UNAVAILABLE: EventEnum.UNAVAILABLE,
   UPDATE: EventEnum.UPDATE,
   PAYMENT_SUCCESSFUL: EventEnum.PAYMENT_SUCCESSFUL,
@@ -11844,7 +11981,7 @@ var WalletButtons = /*#__PURE__*/function () {
         this.setupServiceCallbacks();
         this.service.load(this.container);
       } catch (err) {
-        this.eventEmitter.emit(EVENT$4.UNAVAILABLE, null);
+        this.eventEmitter.emit(EVENT$3.UNAVAILABLE, null);
         throw err;
       }
     }
@@ -11981,7 +12118,7 @@ var WalletButtons = /*#__PURE__*/function () {
     key: "on",
     value: function on(eventName, cb) {
       var _this = this;
-      if (eventName === EVENT$4.UPDATE) {
+      if (eventName === EVENT$3.UPDATE) {
         this.hasUpdateHandler = true;
       }
       if (typeof cb === 'function') {
@@ -12016,10 +12153,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onUnavailable(handler) {
       var _this2 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.UNAVAILABLE, handler);
+        return this.eventEmitter.subscribe(EVENT$3.UNAVAILABLE, handler);
       }
       return new Promise(function (resolve) {
-        return _this2.eventEmitter.subscribe(EVENT$4.UNAVAILABLE, function () {
+        return _this2.eventEmitter.subscribe(EVENT$3.UNAVAILABLE, function () {
           return resolve();
         });
       });
@@ -12045,10 +12182,10 @@ var WalletButtons = /*#__PURE__*/function () {
       var _this3 = this;
       this.hasUpdateHandler = true;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.UPDATE, handler);
+        return this.eventEmitter.subscribe(EVENT$3.UPDATE, handler);
       }
       return new Promise(function (resolve) {
-        return _this3.eventEmitter.subscribe(EVENT$4.UPDATE, function (data) {
+        return _this3.eventEmitter.subscribe(EVENT$3.UPDATE, function (data) {
           return resolve(data);
         });
       });
@@ -12072,10 +12209,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onPaymentSuccessful(handler) {
       var _this4 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.PAYMENT_SUCCESSFUL, handler);
+        return this.eventEmitter.subscribe(EVENT$3.PAYMENT_SUCCESSFUL, handler);
       }
       return new Promise(function (resolve) {
-        return _this4.eventEmitter.subscribe(EVENT$4.PAYMENT_SUCCESSFUL, function (data) {
+        return _this4.eventEmitter.subscribe(EVENT$3.PAYMENT_SUCCESSFUL, function (data) {
           return resolve(data);
         });
       });
@@ -12099,10 +12236,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onPaymentInReview(handler) {
       var _this5 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.PAYMENT_IN_REVIEW, handler);
+        return this.eventEmitter.subscribe(EVENT$3.PAYMENT_IN_REVIEW, handler);
       }
       return new Promise(function (resolve) {
-        return _this5.eventEmitter.subscribe(EVENT$4.PAYMENT_IN_REVIEW, function (data) {
+        return _this5.eventEmitter.subscribe(EVENT$3.PAYMENT_IN_REVIEW, function (data) {
           return resolve(data);
         });
       });
@@ -12126,10 +12263,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onPaymentError(handler) {
       var _this6 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.PAYMENT_ERROR, handler);
+        return this.eventEmitter.subscribe(EVENT$3.PAYMENT_ERROR, handler);
       }
       return new Promise(function (resolve) {
-        return _this6.eventEmitter.subscribe(EVENT$4.PAYMENT_ERROR, function (err) {
+        return _this6.eventEmitter.subscribe(EVENT$3.PAYMENT_ERROR, function (err) {
           return resolve(err);
         });
       });
@@ -12155,10 +12292,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onAuthTokensChanged(handler) {
       var _this7 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.AUTH_TOKENS_CHANGED, handler);
+        return this.eventEmitter.subscribe(EVENT$3.AUTH_TOKENS_CHANGED, handler);
       }
       return new Promise(function (resolve) {
-        return _this7.eventEmitter.subscribe(EVENT$4.AUTH_TOKENS_CHANGED, function (err) {
+        return _this7.eventEmitter.subscribe(EVENT$3.AUTH_TOKENS_CHANGED, function (err) {
           return resolve(err);
         });
       });
@@ -12181,7 +12318,7 @@ var WalletButtons = /*#__PURE__*/function () {
     key: "onClick",
     value: function onClick(handler) {
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.ON_CLICK, handler);
+        return this.eventEmitter.subscribe(EVENT$3.ON_CLICK, handler);
       }
     }
     /**
@@ -12200,10 +12337,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onCheckoutOpen(handler) {
       var _this8 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.ON_CHECKOUT_OPEN, handler);
+        return this.eventEmitter.subscribe(EVENT$3.ON_CHECKOUT_OPEN, handler);
       }
       return new Promise(function (resolve) {
-        return _this8.eventEmitter.subscribe(EVENT$4.ON_CHECKOUT_OPEN, function (err) {
+        return _this8.eventEmitter.subscribe(EVENT$3.ON_CHECKOUT_OPEN, function (err) {
           return resolve(err);
         });
       });
@@ -12224,10 +12361,10 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function onCheckoutClose(handler) {
       var _this9 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$4.ON_CHECKOUT_CLOSE, handler);
+        return this.eventEmitter.subscribe(EVENT$3.ON_CHECKOUT_CLOSE, handler);
       }
       return new Promise(function (resolve) {
-        return _this9.eventEmitter.subscribe(EVENT$4.ON_CHECKOUT_CLOSE, function (err) {
+        return _this9.eventEmitter.subscribe(EVENT$3.ON_CHECKOUT_CLOSE, function (err) {
           return resolve(err);
         });
       });
@@ -12253,8 +12390,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupOnWalletLoadedCallback() {
       var _this0 = this;
       this.service.on(WALLET_EVENT.LOADED, function (eventData) {
-        _this0.eventEmitter.emit(EVENT$4.ON_WALLET_LOADED, {
-          event: EVENT$4.ON_WALLET_LOADED,
+        _this0.eventEmitter.emit(EVENT$3.ON_WALLET_LOADED, {
+          event: EVENT$3.ON_WALLET_LOADED,
           data: eventData
         });
       });
@@ -12264,8 +12401,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupUnavailableCallback() {
       var _this1 = this;
       this.service.on(WALLET_EVENT.UNAVAILABLE, function (eventData) {
-        return _this1.eventEmitter.emit(EVENT$4.UNAVAILABLE, {
-          event: EVENT$4.UNAVAILABLE,
+        return _this1.eventEmitter.emit(EVENT$3.UNAVAILABLE, {
+          event: EVENT$3.UNAVAILABLE,
           data: eventData
         });
       });
@@ -12275,8 +12412,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupUpdateCallback() {
       var _this10 = this;
       this.service.on(WALLET_EVENT.UPDATE, function (eventData) {
-        return _this10.hasUpdateHandler ? _this10.eventEmitter.emit(EVENT$4.UPDATE, {
-          event: EVENT$4.UPDATE,
+        return _this10.hasUpdateHandler ? _this10.eventEmitter.emit(EVENT$3.UPDATE, {
+          event: EVENT$3.UPDATE,
           data: eventData
         }) : _this10.update({
           success: true
@@ -12288,8 +12425,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupOnClickCallback() {
       var _this11 = this;
       this.service.on(WALLET_EVENT.BUTTON_CLICK, function (data) {
-        return _this11.eventEmitter.emit(EVENT$4.ON_CLICK, {
-          event: EVENT$4.ON_CLICK,
+        return _this11.eventEmitter.emit(EVENT$3.ON_CLICK, {
+          event: EVENT$3.ON_CLICK,
           data: data
         });
       });
@@ -12299,8 +12436,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupOnCheckoutOpenCallback() {
       var _this12 = this;
       this.service.on(WALLET_EVENT.CHECKOUT_OPEN, function (data) {
-        return _this12.eventEmitter.emit(EVENT$4.ON_CHECKOUT_OPEN, {
-          event: EVENT$4.ON_CHECKOUT_OPEN,
+        return _this12.eventEmitter.emit(EVENT$3.ON_CHECKOUT_OPEN, {
+          event: EVENT$3.ON_CHECKOUT_OPEN,
           data: data
         });
       });
@@ -12310,8 +12447,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupOnCheckoutCloseCallback() {
       var _this13 = this;
       this.service.on(WALLET_EVENT.CHECKOUT_CLOSE, function (data) {
-        return _this13.eventEmitter.emit(EVENT$4.ON_CHECKOUT_CLOSE, {
-          event: EVENT$4.ON_CHECKOUT_CLOSE,
+        return _this13.eventEmitter.emit(EVENT$3.ON_CHECKOUT_CLOSE, {
+          event: EVENT$3.ON_CHECKOUT_CLOSE,
           data: data
         });
       });
@@ -12343,7 +12480,7 @@ var WalletButtons = /*#__PURE__*/function () {
           if (typeof onSuccess === 'function') {
             onSuccess();
           }
-          var event = captureResult.status === 'inreview' ? EVENT$4.PAYMENT_IN_REVIEW : EVENT$4.PAYMENT_SUCCESSFUL;
+          var event = captureResult.status === 'inreview' ? EVENT$3.PAYMENT_IN_REVIEW : EVENT$3.PAYMENT_SUCCESSFUL;
           _this15.eventEmitter.emit(event, {
             event: event,
             data: _extends(_extends({}, captureResult), data.customer && {
@@ -12356,8 +12493,8 @@ var WalletButtons = /*#__PURE__*/function () {
           if (typeof onError === 'function') {
             onError(err);
           }
-          _this15.eventEmitter.emit(EVENT$4.PAYMENT_ERROR, {
-            event: EVENT$4.PAYMENT_ERROR,
+          _this15.eventEmitter.emit(EVENT$3.PAYMENT_ERROR, {
+            event: EVENT$3.PAYMENT_ERROR,
             data: err
           });
         });
@@ -12368,8 +12505,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupPaymentSuccessCallback() {
       var _this16 = this;
       this.service.on(WALLET_EVENT.PAYMENT_SUCCESS, function (eventData) {
-        return _this16.eventEmitter.emit(EVENT$4.PAYMENT_SUCCESSFUL, {
-          event: EVENT$4.PAYMENT_SUCCESSFUL,
+        return _this16.eventEmitter.emit(EVENT$3.PAYMENT_SUCCESSFUL, {
+          event: EVENT$3.PAYMENT_SUCCESSFUL,
           data: eventData
         });
       });
@@ -12379,8 +12516,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupPaymentInReviewCallback() {
       var _this17 = this;
       this.service.on(WALLET_EVENT.PAYMENT_IN_REVIEW, function (eventData) {
-        return _this17.eventEmitter.emit(EVENT$4.PAYMENT_IN_REVIEW, {
-          event: EVENT$4.PAYMENT_IN_REVIEW,
+        return _this17.eventEmitter.emit(EVENT$3.PAYMENT_IN_REVIEW, {
+          event: EVENT$3.PAYMENT_IN_REVIEW,
           data: eventData
         });
       });
@@ -12390,8 +12527,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupPaymentErrorCallback() {
       var _this18 = this;
       this.service.on(WALLET_EVENT.PAYMENT_ERROR, function (eventData) {
-        return _this18.eventEmitter.emit(EVENT$4.PAYMENT_ERROR, {
-          event: EVENT$4.PAYMENT_ERROR,
+        return _this18.eventEmitter.emit(EVENT$3.PAYMENT_ERROR, {
+          event: EVENT$3.PAYMENT_ERROR,
           data: eventData
         });
       });
@@ -12401,8 +12538,8 @@ var WalletButtons = /*#__PURE__*/function () {
     value: function setupAuthTokensChangedCallback() {
       var _this19 = this;
       this.service.on(WALLET_EVENT.AUTH_TOKENS_CHANGED, function (eventData) {
-        return _this19.eventEmitter.emit(EVENT$4.AUTH_TOKENS_CHANGED, {
-          event: EVENT$4.AUTH_TOKENS_CHANGED,
+        return _this19.eventEmitter.emit(EVENT$3.AUTH_TOKENS_CHANGED, {
+          event: EVENT$3.AUTH_TOKENS_CHANGED,
           data: eventData
         });
       });
@@ -12730,28 +12867,59 @@ function getHandleCvv(configuration) {
   }
 }
 
+/**
+ * Top-level classification of an error. Used by the SDK to route errors to the
+ * right category in instrumentation and to give consumers a coarse-grained
+ * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+ * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+ */
 var ERROR_CATEGORY = {
+  /** SDK was misconfigured (missing keys, invalid options, etc.). */
   CONFIGURATION: 'configuration',
+  /** Authentication or authorization failure. */
   IDENTITY: 'identity_access_management',
+  /** SDK internal failure or upstream service problem. */
   INTERNAL: 'internal',
+  /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
   PROCESS: 'process',
+  /** Resource lookup failed or was rate-limited. */
   RESOURCE: 'resource',
+  /** Invalid input or business-rule validation failure. */
   VALIDATION: 'validation'
 };
+/**
+ * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+ * useful for deciding programmatic responses (e.g. show a retry button only
+ * when `cause` is `'service_unreachable'` or `'server_busy'`).
+ */
 var ERROR_CAUSE = {
+  /** Operation was aborted programmatically. */
   ABORTED: 'aborted',
+  /** Caller has insufficient permissions for the operation. */
   ACCESS_FORBIDDEN: 'access_forbidden',
+  /** Resource already exists when create was expected. */
   ALREADY_EXISTS: 'already_exists',
+  /** User cancelled the flow (e.g. closed the wallet sheet). */
   CANCELED: 'canceled',
+  /** SDK was instantiated or invoked with invalid configuration. */
   INVALID_CONFIGURATION: 'invalid_configuration',
+  /** Input failed structural or business-rule validation. */
   INVALID_INPUT: 'invalid_input',
+  /** Resource was not found by the backend. */
   NOT_FOUND: 'not_found',
+  /** Operation is not supported in the current context or version. */
   NOT_IMPLEMENTED: 'not_implemented',
+  /** Caller exceeded the allowed request rate. */
   RATE_LIMITED: 'rate_limited',
+  /** Backend is healthy but currently overloaded — typically retryable. */
   SERVER_BUSY: 'server_busy',
+  /** Backend or third-party service could not be reached — typically retryable. */
   SERVICE_UNREACHABLE: 'service_unreachable',
+  /** Caller is not authenticated. */
   UNAUTHORIZED: 'unauthorized',
+  /** Catch-all when no other cause applies. */
   UNKNOWN: 'unknown_error',
+  /** Request was syntactically valid but semantically rejected. */
   UNPROCESSABLE_ENTITY: 'unprocessable_entity'
 };
 var EventError = /*#__PURE__*/function (_Error) {
@@ -13917,7 +14085,7 @@ var MultiWidget = /*#__PURE__*/function () {
   }, {
     key: "handleErrorEvent",
     value: function handleErrorEvent(event, error, purpose) {
-      if (Object.values(EVENT$5).includes(event)) {
+      if (Object.values(EVENT$4).includes(event)) {
         this.event.emit({
           error: error,
           event: event,
@@ -14103,7 +14271,7 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
       }, function (error) {
         if (error instanceof EventError) {
           error.setContextId(_this2.link.getParams().widget_id);
-          _this2.handleErrorEvent(EVENT$5.ERROR, error.toJSON().error, error.purpose);
+          _this2.handleErrorEvent(EVENT$4.ERROR, error.toJSON().error, error.purpose);
         }
         console.error('Error when creating a token, widget will not be loaded');
       });
@@ -14115,7 +14283,7 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
     key: "afterLoad",
     value: function afterLoad() {
       var _this3 = this;
-      this.on(EVENT$5.VALIDATION, function (data) {
+      this.on(EVENT$4.VALIDATION, function (data) {
         _this3.validationData = data;
       });
     }
@@ -14374,7 +14542,7 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
   }, {
     key: "onFinishInsert",
     value: function onFinishInsert(selector, dataType) {
-      this.on(EVENT$5.FINISH, function (event) {
+      this.on(EVENT$4.FINISH, function (event) {
         Event$1.insertToInput(selector, dataType, event);
       });
     }
@@ -14412,7 +14580,7 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
       var formInterceptor = new FormInterceptor(selector);
       formInterceptor.beforeSubmit(function () {
         _this5.triggerElement.push(TRIGGER$1.SUBMIT_FORM, {});
-        _this5.event.on(EVENT$5.FINISH, _this5.link.getParams().widget_id, function () {
+        _this5.event.on(EVENT$4.FINISH, _this5.link.getParams().widget_id, function () {
           formInterceptor.continueSubmit();
         });
       });
@@ -14425,13 +14593,13 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
     value: function useCheckoutAutoSubmit() {
       var _this6 = this;
       this.setHiddenElements([ELEMENT.SUBMIT_BUTTON]);
-      this.on(EVENT$5.CHECKOUT_SUCCESS, function () {
+      this.on(EVENT$4.CHECKOUT_SUCCESS, function () {
         _this6.trigger(TRIGGER$1.SUBMIT_FORM);
       });
-      this.on(EVENT$5.VALIDATION_ERROR, function () {
+      this.on(EVENT$4.VALIDATION_ERROR, function () {
         _this6.trigger(TRIGGER$1.REFRESH_CHECKOUT);
       });
-      this.on(EVENT$5.SYSTEM_ERROR, function () {
+      this.on(EVENT$4.SYSTEM_ERROR, function () {
         _this6.trigger(TRIGGER$1.REFRESH_CHECKOUT);
       });
     }
@@ -14448,7 +14616,7 @@ var HtmlMultiWidget = /*#__PURE__*/function (_MultiWidget) {
     key: "useAutoResize",
     value: function useAutoResize() {
       var _this7 = this;
-      this.on(EVENT$5.RESIZE, function (data) {
+      this.on(EVENT$4.RESIZE, function (data) {
         if (_this7.iFrame.getElement()) {
           _this7.iFrame.getElement().scrolling = 'no';
           if (data.height) {
@@ -14811,7 +14979,6 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -14828,13 +14995,13 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -16185,7 +16352,7 @@ var Message = /*#__PURE__*/function () {
     key: "useAutoResize",
     value: function useAutoResize() {
       var _this = this;
-      this.event.on(EVENT$5.RESIZE, this.link.getParams().widget_id, function (data) {
+      this.event.on(EVENT$4.RESIZE, this.link.getParams().widget_id, function (data) {
         if (_this.iFrame.getElement()) {
           _this.iFrame.getElement().scrolling = 'no';
           if (data.height) {
@@ -17026,7 +17193,7 @@ var InstructionAfterpayWalletFormShow = /*#__PURE__*/function (_InstructionHandl
       var _this = this;
       this.widget = new WalletButtons(this.selector, context.payload.charge_token, context.payload.meta);
       this.widget.setEnv(this.getEnv(context.instruction_token));
-      this.widget.on(EVENT$4.ON_WALLET_LOADED, function () {
+      this.widget.on(EVENT$3.ON_WALLET_LOADED, function () {
         addGoBackToPaymentsButton(_this.selector, _this.checkoutWidget, _this.api);
       });
       this.widget.load();
@@ -17047,7 +17214,7 @@ var InstructionApplePayFormShow = /*#__PURE__*/function (_InstructionHandler) {
       var _this = this;
       this.widget = new WalletButtons(this.selector, context === null || context === void 0 ? void 0 : context.payload.charge_token, context === null || context === void 0 ? void 0 : context.payload.meta);
       this.widget.setEnv(this.getEnv(context.instruction_token));
-      this.widget.on(EVENT$4.ON_WALLET_LOADED, function () {
+      this.widget.on(EVENT$3.ON_WALLET_LOADED, function () {
         addGoBackToPaymentsButton(_this.selector, _this.checkoutWidget, _this.api);
         hideLoadingSpinner();
       });
@@ -17202,7 +17369,6 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -17219,13 +17385,13 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -17380,7 +17546,7 @@ var InstructionCardFormShow = /*#__PURE__*/function (_InstructionHandler) {
       this.widget.load();
       this.widget.useAutoResize();
       this.widget.setHiddenElements(['submit_button']);
-      this.widget.on(EVENT$5.AFTER_LOAD, function () {
+      this.widget.on(EVENT$4.AFTER_LOAD, function () {
         _this.timeoutId = setTimeout(function () {
           _this.addSubmitButton();
           addGoBackToPaymentsButton(_this.selector, _this.checkoutWidget, _this.api);
@@ -17390,7 +17556,7 @@ var InstructionCardFormShow = /*#__PURE__*/function (_InstructionHandler) {
       this.widget.on('submit', function () {
         return showLoadingSpinner();
       });
-      this.widget.on(EVENT$5.FINISH, function (event) {
+      this.widget.on(EVENT$4.FINISH, function (event) {
         var _a;
         var get = new Api(context.instruction_token);
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
@@ -17426,7 +17592,7 @@ var InstructionCardFormShow = /*#__PURE__*/function (_InstructionHandler) {
           return console.error('callback.card_form.ott_created: error', error);
         });
       });
-      this.widget.on(EVENT$5.VALIDATION_ERROR, function (event) {
+      this.widget.on(EVENT$4.VALIDATION_ERROR, function (event) {
         var _a;
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
@@ -17711,7 +17877,7 @@ var InstructionGooglePayFormShow = /*#__PURE__*/function (_InstructionHandler) {
       var _this = this;
       this.widget = new WalletButtons(this.selector, context === null || context === void 0 ? void 0 : context.payload.charge_token, context === null || context === void 0 ? void 0 : context.payload.meta);
       this.widget.setEnv(this.getEnv(context.instruction_token));
-      this.widget.on(EVENT$4.ON_WALLET_LOADED, function () {
+      this.widget.on(EVENT$3.ON_WALLET_LOADED, function () {
         addGoBackToPaymentsButton(_this.selector, _this.checkoutWidget, _this.api);
         hideLoadingSpinner();
       });
@@ -18026,7 +18192,7 @@ var InstructionPaypalFormShow = /*#__PURE__*/function (_InstructionHandler) {
         standalone: true
       }));
       this.widget.setEnv(this.getEnv(context.instruction_token));
-      this.widget.on(EVENT$4.ON_WALLET_LOADED, function () {
+      this.widget.on(EVENT$3.ON_WALLET_LOADED, function () {
         addGoBackToPaymentsButton(_this.selector, _this.checkoutWidget, _this.api);
         hideLoadingSpinner();
       });
@@ -18592,10 +18758,16 @@ function getCheckoutVersionHandler(version) {
   }
 }
 
-var EVENT$3 = {
-  PAYMENT_SUCCESSFUL: 'paymentSuccessful',
-  PAYMENT_FAILURE: 'paymentFailure',
-  PAYMENT_EXPIRED: 'paymentExpired'
+/** Event name emitted when a checkout payment completes successfully. */
+var PAYMENT_SUCCESSFUL = 'paymentSuccessful';
+/** Event name emitted when a checkout payment fails. */
+var PAYMENT_FAILURE = 'paymentFailure';
+/** Event name emitted when a checkout session expires. */
+var PAYMENT_EXPIRED = 'paymentExpired';
+var EVENT$2 = {
+  PAYMENT_SUCCESSFUL: PAYMENT_SUCCESSFUL,
+  PAYMENT_FAILURE: PAYMENT_FAILURE,
+  PAYMENT_EXPIRED: PAYMENT_EXPIRED
 };
 /**
  * Class CheckoutButton transform usual button into checkout
@@ -18620,7 +18792,7 @@ var Checkout = /*#__PURE__*/function () {
     this.checkoutFinished = false;
     try {
       this.eventEmitter = new EventEmitter();
-      this.intentTokenPayload = this.extractIntentTokenPayload(intentToken);
+      this.intentTokenPayload = this.extractCheckoutIntentTokenPayload(intentToken);
       this.checkoutVersionHandler = getCheckoutVersionHandler(this.intentTokenPayload.version);
       this.instructions = this.initContractVersion();
       this.api = new ApiInternal(this.intentToken, API_AUTH_TYPE.TOKEN);
@@ -18681,8 +18853,8 @@ var Checkout = /*#__PURE__*/function () {
       }, 14 * 60 * 1000 + 45 * 1000);
     }
   }, {
-    key: "extractIntentTokenPayload",
-    value: function extractIntentTokenPayload(intentToken) {
+    key: "extractCheckoutIntentTokenPayload",
+    value: function extractCheckoutIntentTokenPayload(intentToken) {
       var tokenContent = AccessToken.validateJWT(intentToken);
       if (!tokenContent) {
         throw new Error('Intent token is broken or expired. Please, issue new one.');
@@ -18710,7 +18882,7 @@ var Checkout = /*#__PURE__*/function () {
     value: function ready() {
       var _this3 = this;
       this.changeLoadingSpinnerVisibility(true);
-      // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+      // biome-ignore lint/suspicious/noExplicitAny: checkoutApi.status returns a dynamic shape whose fields are narrowed at the call-sites below
       this.checkoutApi.status(this.intentTokenPayload.intent_id).then(function (response) {
         if (!(response === null || response === void 0 ? void 0 : response.status)) {
           throw new Error('Checkout Intent Status structure inconsistent');
@@ -18798,7 +18970,7 @@ var Checkout = /*#__PURE__*/function () {
   }, {
     key: "onPaymentSuccessful",
     value: function onPaymentSuccessful(handler) {
-      return this.eventEmitter.subscribe(EVENT$3.PAYMENT_SUCCESSFUL, handler);
+      return this.eventEmitter.subscribe(EVENT$2.PAYMENT_SUCCESSFUL, handler);
     }
     /**
      * If the payment was not successful, the function passed as parameter will be called.
@@ -18812,21 +18984,21 @@ var Checkout = /*#__PURE__*/function () {
   }, {
     key: "onPaymentFailure",
     value: function onPaymentFailure(handler) {
-      return this.eventEmitter.subscribe(EVENT$3.PAYMENT_FAILURE, handler);
+      return this.eventEmitter.subscribe(EVENT$2.PAYMENT_FAILURE, handler);
     }
     /**
      * If the payment was expired, the function passed as parameter will be called.
      * Important: Do not perform thread blocking operations in callback such as window.alert() calls.
      *
      * @example
-     * widget.onPaymentInReview((data) => {
-     *      console.log('Payment in fraud review');
+     * widget.onPaymentExpired((data) => {
+     *      console.log('Payment session expired');
      * });
      */
   }, {
     key: "onPaymentExpired",
     value: function onPaymentExpired(handler) {
-      return this.eventEmitter.subscribe(EVENT$3.PAYMENT_EXPIRED, handler);
+      return this.eventEmitter.subscribe(EVENT$2.PAYMENT_EXPIRED, handler);
     }
   }, {
     key: "createWidgetStructure",
@@ -18902,7 +19074,7 @@ exports.ERROR_OPERATION = void 0;
 /**
  * Events emitted during the OpenWallet payment lifecycle.
  */
-var EVENT$2;
+var EVENT$1;
 (function (EVENT) {
   /** Emitted when the wallet button is clicked by the user. */
   EVENT["ON_CLICK"] = "onClick";
@@ -18920,7 +19092,7 @@ var EVENT$2;
   EVENT["ON_SHIPPING_ADDRESS_CHANGE"] = "onShippingAddressChange";
   /** Emitted when the customer selects a shipping option. */
   EVENT["ON_SHIPPING_OPTIONS_CHANGE"] = "onShippingOptionsChange";
-})(EVENT$2 || (EVENT$2 = {}));
+})(EVENT$1 || (EVENT$1 = {}));
 
 /**
  * @classdesc Abstract base class for Open Wallet buttons. **Do not instantiate directly.**
@@ -18941,7 +19113,15 @@ var OpenWalletButtons = /*#__PURE__*/function () {
   function OpenWalletButtons(selector, publicKeyOrAccessToken, serviceId, meta) {
     _classCallCheck(this, OpenWalletButtons);
     this.env = DEFAULT_ENV;
+    this.isDisabled = false;
     this.onShippingOptionsChangeHandlerRegistered = false;
+    // Runtime guard: TypeScript's `abstract` keyword exists only at compile time.
+    // Without this check, instantiating the base class directly silently fails
+    // later when `this.validateWalletMeta()` resolves to `undefined`, producing
+    // a confusing "is not a function" error far from the actual mistake.
+    if ((this instanceof OpenWalletButtons ? this.constructor : void 0) === OpenWalletButtons) {
+      throw new Error('OpenWalletButtons is an abstract base class and cannot be instantiated directly. ' + 'Use ApplePayOpenWalletButton or GooglePayOpenWalletButton instead.');
+    }
     this.eventEmitter = new EventEmitter();
     this.container = new Container(selector);
     this.api = new ApiInternal(publicKeyOrAccessToken, this.getApiAuthType(publicKeyOrAccessToken));
@@ -19044,7 +19224,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
         console.error('Wallet operation error:', error);
       }
       var errorData = {
-        event: EVENT$2.ERROR,
+        event: EVENT$1.ERROR,
         data: {
           error: error,
           context: {
@@ -19052,7 +19232,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
           }
         }
       };
-      this.eventEmitter.emit(EVENT$2.ERROR, errorData);
+      this.eventEmitter.emit(EVENT$1.ERROR, errorData);
     }
     /**
      * Loads and initializes the wallet button based on the service configuration.
@@ -19078,6 +19258,68 @@ var OpenWalletButtons = /*#__PURE__*/function () {
         _this.handleOnError(error instanceof Error ? error : new Error(String(error)), exports.ERROR_OPERATION.CONFIGURATION);
       });
     }
+    /**
+     * Enables the wallet button, restoring interactivity and visual appearance.
+     * If the button was previously disabled via `disable()`, calling this method
+     * re-enables clicks and removes the disabled visual state.
+     *
+     * Idempotent — calling on an already-enabled button has no effect.
+     *
+     * @example
+     * button.enable();
+     */
+  }, {
+    key: "enable",
+    value: function enable() {
+      this.isDisabled = false;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Disables the wallet button, preventing clicks and applying a visual disabled state.
+     * When disabled, the button appears grayed out (`opacity: 0.5`) and does not
+     * respond to user interaction (`pointer-events: none`). For accessibility, the
+     * `aria-disabled="true"` attribute is also set on the container.
+     *
+     * Programmatic clicks (e.g. invoked by the wallet provider's SDK) are blocked
+     * by an explicit guard inside the click handler — the button's wallet service
+     * checks the disabled state before processing.
+     *
+     * Idempotent — calling on an already-disabled button has no effect.
+     * Safe to call before `load()` (no-throw); the styles are applied once the
+     * container element exists.
+     *
+     * @example
+     * button.disable();
+     */
+  }, {
+    key: "disable",
+    value: function disable() {
+      this.isDisabled = true;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Applies the disabled / enabled visual state to the container element.
+     * Reads `this.isDisabled` and toggles the corresponding CSS + ARIA attributes.
+     *
+     * @private
+     */
+  }, {
+    key: "applyDisabledStyles",
+    value: function applyDisabledStyles() {
+      var element = this.container.getElement();
+      if (!element) {
+        return;
+      }
+      if (this.isDisabled) {
+        element.style.pointerEvents = 'none';
+        element.style.opacity = '0.5';
+        element.setAttribute('aria-disabled', 'true');
+      } else {
+        element.style.pointerEvents = '';
+        element.style.opacity = '';
+        element.removeAttribute('aria-disabled');
+      }
+    }
     /**
      * Current method can change environment. By default environment = sandbox.
      * Also we can change domain alias for this environment. By default domain_alias = paydock.com
@@ -19174,7 +19416,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     key: "onClick",
     value: function onClick(handler) {
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.ON_CLICK, handler);
+        this.eventEmitter.subscribe(EVENT$1.ON_CLICK, handler);
         return;
       }
       this.handleOnError(new Error('onClick event handler is required.'), exports.ERROR_OPERATION.HANDLER_REGISTRATION);
@@ -19213,7 +19455,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onSuccess(handler) {
       var _this2 = this;
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.SUCCESS, function (data) {
+        this.eventEmitter.subscribe(EVENT$1.SUCCESS, function (data) {
           return __awaiter(_this2, void 0, void 0, /*#__PURE__*/_regenerator().m(function _callee2() {
             var _t3;
             return _regenerator().w(function (_context2) {
@@ -19265,7 +19507,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onUnavailable(handler) {
       var _this3 = this;
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.UNAVAILABLE, function (data) {
+        this.eventEmitter.subscribe(EVENT$1.UNAVAILABLE, function (data) {
           return __awaiter(_this3, void 0, void 0, /*#__PURE__*/_regenerator().m(function _callee3() {
             var _t4;
             return _regenerator().w(function (_context3) {
@@ -19318,7 +19560,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onError(handler) {
       var _this4 = this;
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.ERROR, function (data) {
+        this.eventEmitter.subscribe(EVENT$1.ERROR, function (data) {
           return __awaiter(_this4, void 0, void 0, /*#__PURE__*/_regenerator().m(function _callee4() {
             var _t5;
             return _regenerator().w(function (_context4) {
@@ -19370,7 +19612,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onCancel(handler) {
       var _this5 = this;
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.CHECKOUT_CLOSE, function (data) {
+        this.eventEmitter.subscribe(EVENT$1.CHECKOUT_CLOSE, function (data) {
           return __awaiter(_this5, void 0, void 0, /*#__PURE__*/_regenerator().m(function _callee5() {
             var _t6;
             return _regenerator().w(function (_context5) {
@@ -19415,7 +19657,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onLoaded(handler) {
       var _this6 = this;
       if (typeof handler === 'function') {
-        this.eventEmitter.subscribe(EVENT$2.LOADED, function (data) {
+        this.eventEmitter.subscribe(EVENT$1.LOADED, function (data) {
           return __awaiter(_this6, void 0, void 0, /*#__PURE__*/_regenerator().m(function _callee6() {
             var _t7;
             return _regenerator().w(function (_context6) {
@@ -19487,7 +19729,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     key: "onShippingAddressChange",
     value: function onShippingAddressChange(handler) {
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT$2.ON_SHIPPING_ADDRESS_CHANGE, handler);
+        return this.eventEmitter.subscribe(EVENT$1.ON_SHIPPING_ADDRESS_CHANGE, handler);
       }
       this.handleOnError(new Error('onShippingAddressChange event handler is required.'), exports.ERROR_OPERATION.HANDLER_REGISTRATION);
     }
@@ -19532,7 +19774,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
     value: function onShippingOptionsChange(handler) {
       if (typeof handler === 'function') {
         this.onShippingOptionsChangeHandlerRegistered = true;
-        return this.eventEmitter.subscribe(EVENT$2.ON_SHIPPING_OPTIONS_CHANGE, handler);
+        return this.eventEmitter.subscribe(EVENT$1.ON_SHIPPING_OPTIONS_CHANGE, handler);
       }
       this.handleOnError(new Error('onShippingOptionsChange event handler is required.'), exports.ERROR_OPERATION.HANDLER_REGISTRATION);
     }
@@ -19567,7 +19809,9 @@ var SERVICE_GROUP;
  * Returns `undefined` if the resulting object has no remaining properties.
  */
 function stripEmpty(obj) {
-  if (!obj || _typeof$1(obj) !== 'object') return undefined;
+  if (!obj || _typeof$1(obj) !== 'object') {
+    return undefined;
+  }
   var result = {};
   for (var _i = 0, _Object$entries = Object.entries(obj); _i < _Object$entries.length; _i++) {
     var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
@@ -19616,13 +19860,30 @@ var OpenWalletService = /*#__PURE__*/function () {
     this.serviceGroup = SERVICE_GROUP.WALLET;
   }
   /**
-   * Creates a One-Time Token (OTT) by sending the payment data to the API.
-   * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+   * Returns whether the wallet button is currently disabled.
+   * Reads the `aria-disabled` attribute from the container element — set by the
+   * button class via {@link OpenWalletButtons.disable} / {@link OpenWalletButtons.enable}.
+   *
+   * Used to short-circuit click handlers in concrete wallet services for clicks
+   * that bypass the DOM `pointer-events: none` guard (e.g. invoked by the wallet
+   * provider's SDK callback).
    *
-   * @param data - The payment data including amount, shipping, billing, card info, and ref token.
-   * @returns A promise resolving to the OTT response.
+   * @returns `true` if the container is marked as disabled, `false` otherwise.
    */
   return _createClass(OpenWalletService, [{
+    key: "isButtonDisabled",
+    value: function isButtonDisabled() {
+      var element = this.container.getElement();
+      return (element === null || element === void 0 ? void 0 : element.getAttribute('aria-disabled')) === 'true';
+    }
+    /**
+     * Creates a One-Time Token (OTT) by sending the payment data to the API.
+     * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+     *
+     * @param data - The payment data including amount, shipping, billing, card info, and ref token.
+     * @returns A promise resolving to the OTT response.
+     */
+  }, {
     key: "createOTT",
     value: function createOTT(data) {
       var _this = this;
@@ -19646,8 +19907,8 @@ var OpenWalletService = /*#__PURE__*/function () {
       return this.api.paymentSource().createOTT(requestData).then(function (response) {
         var cleanShipping = stripEmpty(shipping);
         var cleanBilling = stripEmpty(billing);
-        _this.eventEmitter.emit(EVENT$2.SUCCESS, {
-          event: EVENT$2.SUCCESS,
+        _this.eventEmitter.emit(EVENT$1.SUCCESS, {
+          event: EVENT$1.SUCCESS,
           data: _extends(_extends({
             token: response,
             amount: amount
@@ -19660,8 +19921,8 @@ var OpenWalletService = /*#__PURE__*/function () {
         return response;
       })["catch"](function (err) {
         var _a, _b, _c, _d;
-        _this.eventEmitter.emit(EVENT$2.ERROR, {
-          event: EVENT$2.ERROR,
+        _this.eventEmitter.emit(EVENT$1.ERROR, {
+          event: EVENT$1.ERROR,
           data: {
             message: ((_a = err === null || err === void 0 ? void 0 : err.error) === null || _a === void 0 ? void 0 : _a.message) || (err === null || err === void 0 ? void 0 : err.message) || ((_b = err === null || err === void 0 ? void 0 : err.error_summary) === null || _b === void 0 ? void 0 : _b.message),
             code: ((_c = err === null || err === void 0 ? void 0 : err.error) === null || _c === void 0 ? void 0 : _c.code) || (err === null || err === void 0 ? void 0 : err.code) || ((_d = err === null || err === void 0 ? void 0 : err.error_summary) === null || _d === void 0 ? void 0 : _d.code)
@@ -19708,7 +19969,7 @@ var OpenWalletService = /*#__PURE__*/function () {
     value: function handleOnUnavailable() {
       var reason = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 'Wallet not available';
       var unavailableData = {
-        event: EVENT$2.UNAVAILABLE,
+        event: EVENT$1.UNAVAILABLE,
         data: {
           reason: reason,
           details: {
@@ -19716,7 +19977,7 @@ var OpenWalletService = /*#__PURE__*/function () {
           }
         }
       };
-      this.eventEmitter.emit(EVENT$2.UNAVAILABLE, unavailableData);
+      this.eventEmitter.emit(EVENT$1.UNAVAILABLE, unavailableData);
     }
     /**
      * Emits the {@link EVENT.ERROR} event and logs the error to the console.
@@ -19732,7 +19993,7 @@ var OpenWalletService = /*#__PURE__*/function () {
         console.error('Wallet operation error:', error);
       }
       var errorData = {
-        event: EVENT$2.ERROR,
+        event: EVENT$1.ERROR,
         data: {
           error: error,
           context: {
@@ -19740,7 +20001,7 @@ var OpenWalletService = /*#__PURE__*/function () {
           }
         }
       };
-      this.eventEmitter.emit(EVENT$2.ERROR, errorData);
+      this.eventEmitter.emit(EVENT$1.ERROR, errorData);
     }
     /**
      * Removes the wallet button element from the DOM.
@@ -19790,8 +20051,8 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
     _this.serviceConfig = serviceConfig;
     _this.latestShippingData = {};
     _this.onCancelPayment = function () {
-      return _this.eventEmitter.emit(EVENT$2.CHECKOUT_CLOSE, {
-        event: EVENT$2.CHECKOUT_CLOSE
+      return _this.eventEmitter.emit(EVENT$1.CHECKOUT_CLOSE, {
+        event: EVENT$1.CHECKOUT_CLOSE
       });
     };
     _this.onValidateMerchant = function () {
@@ -19871,7 +20132,7 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
           while (1) switch (_context.n) {
             case 0:
               return _context.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT$2.ON_SHIPPING_ADDRESS_CHANGE,
+                event: EVENT$1.ON_SHIPPING_ADDRESS_CHANGE,
                 data: this.parseShippingContactUpdateEvent(data)
               }).then(function (response) {
                 var _a, _b;
@@ -19920,7 +20181,7 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
           while (1) switch (_context2.n) {
             case 0:
               return _context2.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT$2.ON_SHIPPING_OPTIONS_CHANGE,
+                event: EVENT$1.ON_SHIPPING_OPTIONS_CHANGE,
                 data: this.parseShippingMethodUpdateEvent(data)
               }).then(function (response) {
                 var _a;
@@ -20135,15 +20396,23 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
         return;
       }
       applePayButton.addEventListener('click', this.onApplePayButtonClicked.bind(this));
-      this.eventEmitter.emit(EVENT$2.LOADED, {
-        event: EVENT$2.LOADED
+      this.eventEmitter.emit(EVENT$1.LOADED, {
+        event: EVENT$1.LOADED
       });
     }
   }, {
     key: "onApplePayButtonClicked",
     value: function onApplePayButtonClicked() {
       var _this7 = this;
-      this.paymentSession = new ApplePaySession(14, this.mapMetaToApplePayPaymentRequest());
+      if (this.isButtonDisabled()) {
+        return;
+      }
+      var applePayApiVersion = getSupportedApplePayVersion();
+      if (applePayApiVersion === 0) {
+        this.handleOnUnavailable('Apple Pay version not supported');
+        return;
+      }
+      this.paymentSession = new ApplePaySession(applePayApiVersion, this.mapMetaToApplePayPaymentRequest());
       this.paymentSession.onvalidatemerchant = this.onValidateMerchant;
       this.paymentSession.onpaymentauthorized = this.onPaymentAuthorized;
       this.paymentSession.oncancel = this.onCancelPayment;
@@ -20189,8 +20458,8 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
           while (1) switch (_context4.n) {
             case 0:
               _context4.n = 1;
-              return this.eventEmitter.emitWithResult(EVENT$2.ON_CLICK, {
-                event: EVENT$2.ON_CLICK
+              return this.eventEmitter.emitWithResult(EVENT$1.ON_CLICK, {
+                event: EVENT$1.ON_CLICK
               });
             case 1:
               results = _context4.v;
@@ -20514,8 +20783,8 @@ var GOOGLE_PAY_CARD_NETWORKS = ['AMEX', 'DISCOVER', 'INTERAC', 'JCB', 'MASTERCAR
  * Used to translate shipping-related Google Pay events to the unified event system.
  */
 ({
-  SHIPPING_ADDRESS: EVENT$2.ON_SHIPPING_ADDRESS_CHANGE,
-  SHIPPING_OPTION: EVENT$2.ON_SHIPPING_OPTIONS_CHANGE
+  SHIPPING_ADDRESS: EVENT$1.ON_SHIPPING_ADDRESS_CHANGE,
+  SHIPPING_OPTION: EVENT$1.ON_SHIPPING_OPTIONS_CHANGE
 });
 
 /**
@@ -20880,14 +21149,17 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
         buttonColor: ((_c = this.getMetaStyles()) === null || _c === void 0 ? void 0 : _c.button_color) || 'default'
       });
       button.appendChild(googlePayButton);
-      this.eventEmitter.emit(EVENT$2.LOADED, {
-        event: EVENT$2.LOADED
+      this.eventEmitter.emit(EVENT$1.LOADED, {
+        event: EVENT$1.LOADED
       });
     }
   }, {
     key: "onGooglePayButtonClicked",
     value: function onGooglePayButtonClicked() {
       var _this5 = this;
+      if (this.isButtonDisabled()) {
+        return;
+      }
       if (this.processingButtonClick) {
         console.warn('Google Pay button clicked while processing.');
         return;
@@ -20910,8 +21182,8 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
           while (1) switch (_context3.n) {
             case 0:
               _context3.n = 1;
-              return this.eventEmitter.emitWithResult(EVENT$2.ON_CLICK, {
-                event: EVENT$2.ON_CLICK
+              return this.eventEmitter.emitWithResult(EVENT$1.ON_CLICK, {
+                event: EVENT$1.ON_CLICK
               });
             case 1:
               results = _context3.v;
@@ -20937,8 +21209,8 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
           while (1) switch (_context4.n) {
             case 0:
               return _context4.a(2, this.paymentsClient.loadPaymentData(this.createPaymentDataRequest())["catch"](function (err) {
-                _this6.eventEmitter.emit(EVENT$2.CHECKOUT_CLOSE, {
-                  event: EVENT$2.CHECKOUT_CLOSE
+                _this6.eventEmitter.emit(EVENT$1.CHECKOUT_CLOSE, {
+                  event: EVENT$1.CHECKOUT_CLOSE
                 });
                 _this6.processingButtonClick = false;
                 throw err;
@@ -21002,13 +21274,13 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
       if (intermediatePaymentData.callbackTrigger === 'INITIALIZE' || intermediatePaymentData.callbackTrigger === 'SHIPPING_ADDRESS') {
         callbackIntent = 'SHIPPING_ADDRESS';
         eventData = {
-          event: EVENT$2.ON_SHIPPING_ADDRESS_CHANGE,
+          event: EVENT$1.ON_SHIPPING_ADDRESS_CHANGE,
           data: parsedUpdateData.shipping
         };
       } else if (intermediatePaymentData.callbackTrigger === 'SHIPPING_OPTION') {
         callbackIntent = 'SHIPPING_OPTION';
         eventData = {
-          event: EVENT$2.ON_SHIPPING_OPTIONS_CHANGE,
+          event: EVENT$1.ON_SHIPPING_OPTIONS_CHANGE,
           data: {
             shipping_option_id: (_a = parsedUpdateData.selected_shipping_option) === null || _a === void 0 ? void 0 : _a.id,
             label: (_b = parsedUpdateData.selected_shipping_option) === null || _b === void 0 ? void 0 : _b.label,
@@ -21708,7 +21980,7 @@ var HtmlPaymentSourceWidget = /*#__PURE__*/function (_PaymentSourceWidget) {
   }, {
     key: "onSelectInsert",
     value: function onSelectInsert(selector, dataType) {
-      this.on(EVENT$5.SELECT, function (event) {
+      this.on(EVENT$4.SELECT, function (event) {
         Event$1.insertToInput(selector, dataType, event);
       });
     }
@@ -22278,7 +22550,7 @@ var PayPalSavePaymentSourceWidget = /*#__PURE__*/function () {
  * @param {string} CHECKOUT_COMPLETED=checkoutCompleted Event sent on successful checkout by customer. Check [data](#EventDataCheckoutCompletedData) for more information.
  * @param {string} CHECKOUT_ERROR=checkoutError Event sent on error checkout by customer. Check [data](#EventData) for more information.
  */
-var EVENT$1;
+var EVENT;
 (function (EVENT) {
   EVENT["IFRAME_LOADED"] = "iframeLoaded";
   EVENT["CHECKOUT_READY"] = "checkoutReady";
@@ -22286,7 +22558,7 @@ var EVENT$1;
   EVENT["CHECKOUT_ERROR"] = "checkoutError";
   EVENT["CHECKOUT_POPUP_OPEN"] = "checkoutPopupOpen";
   EVENT["CHECKOUT_POPUP_CLOSE"] = "checkoutPopupClose";
-})(EVENT$1 || (EVENT$1 = {}));
+})(EVENT || (EVENT = {}));
 /**
  * List of available event data types
  * @enum EVENT_DATA_TYPE
@@ -22456,25 +22728,25 @@ var ClickToPaySRC = /*#__PURE__*/function () {
       var _this = this;
       var widgetId = this.link.getParams().widget_id;
       if (!widgetId) return;
-      this.iFrameEvent.on(EVENT$1.CHECKOUT_READY, widgetId, function (_ref) {
+      this.iFrameEvent.on(EVENT.CHECKOUT_READY, widgetId, function (_ref) {
         var data = _ref.data;
-        _this.eventEmitter.emit(EVENT$1.CHECKOUT_READY, data);
+        _this.eventEmitter.emit(EVENT.CHECKOUT_READY, data);
       });
-      this.iFrameEvent.on(EVENT$1.CHECKOUT_COMPLETED, widgetId, function (_ref2) {
+      this.iFrameEvent.on(EVENT.CHECKOUT_COMPLETED, widgetId, function (_ref2) {
         var data = _ref2.data;
-        _this.eventEmitter.emit(EVENT$1.CHECKOUT_COMPLETED, data);
+        _this.eventEmitter.emit(EVENT.CHECKOUT_COMPLETED, data);
       });
-      this.iFrameEvent.on(EVENT$1.CHECKOUT_POPUP_OPEN, widgetId, function (_ref3) {
+      this.iFrameEvent.on(EVENT.CHECKOUT_POPUP_OPEN, widgetId, function (_ref3) {
         var data = _ref3.data;
-        _this.eventEmitter.emit(EVENT$1.CHECKOUT_POPUP_OPEN, data);
+        _this.eventEmitter.emit(EVENT.CHECKOUT_POPUP_OPEN, data);
       });
-      this.iFrameEvent.on(EVENT$1.CHECKOUT_POPUP_CLOSE, widgetId, function (_ref4) {
+      this.iFrameEvent.on(EVENT.CHECKOUT_POPUP_CLOSE, widgetId, function (_ref4) {
         var data = _ref4.data;
-        _this.eventEmitter.emit(EVENT$1.CHECKOUT_POPUP_CLOSE, data);
+        _this.eventEmitter.emit(EVENT.CHECKOUT_POPUP_CLOSE, data);
       });
-      this.iFrameEvent.on(EVENT$1.CHECKOUT_ERROR, widgetId, function (_ref5) {
+      this.iFrameEvent.on(EVENT.CHECKOUT_ERROR, widgetId, function (_ref5) {
         var data = _ref5.data;
-        _this.eventEmitter.emit(EVENT$1.CHECKOUT_ERROR, data);
+        _this.eventEmitter.emit(EVENT.CHECKOUT_ERROR, data);
       });
       if (this.autoResize) this.useAutoResize(true);
     }
@@ -22497,7 +22769,7 @@ var ClickToPaySRC = /*#__PURE__*/function () {
       if (iframeElement) {
         iframeElement.onload = function () {
           _this2.isIframeLoaded = true;
-          _this2.eventEmitter.emit(EVENT$1.IFRAME_LOADED, {});
+          _this2.eventEmitter.emit(EVENT.IFRAME_LOADED, {});
           if (_this2.injectedCustomerData) {
             _this2.injectCustomerData(_this2.injectedCustomerData);
             _this2.injectedCustomerData = null;
@@ -22984,7 +23256,7 @@ var VaultDisplayWidget = /*#__PURE__*/function () {
   }]);
 }();
 
-var EVENT;
+exports.WALLET_BUTTONS_EXPRESS_EVENT = void 0;
 (function (EVENT) {
   EVENT["UNAVAILABLE"] = "unavailable";
   EVENT["ERROR"] = "error";
@@ -22995,12 +23267,13 @@ var EVENT;
   EVENT["ON_CHECKOUT_CLOSE"] = "onCheckoutClose";
   EVENT["ON_SHIPPING_ADDRESS_CHANGE"] = "onShippingAddressChange";
   EVENT["ON_SHIPPING_OPTIONS_CHANGE"] = "onShippingOptionsChange";
-})(EVENT || (EVENT = {}));
+})(exports.WALLET_BUTTONS_EXPRESS_EVENT || (exports.WALLET_BUTTONS_EXPRESS_EVENT = {}));
 
 var BaseWalletButton = /*#__PURE__*/function () {
   function BaseWalletButton(selector, publicKeyOrAccessToken, gatewayId, meta, requiredMetaFields) {
     _classCallCheck(this, BaseWalletButton);
     this.env = DEFAULT_ENV;
+    this.isDisabled = false;
     this.onShippingOptionsChangeHandlerRegistered = false;
     this.eventEmitter = new EventEmitter();
     this.container = new Container(selector);
@@ -23033,6 +23306,30 @@ var BaseWalletButton = /*#__PURE__*/function () {
       this.env = env;
       this.api.setEnv(env, alias);
     }
+    /**
+     * Enables the wallet button, restoring interactivity and visual appearance.
+     *
+     * @example
+     * button.enable();
+     */
+  }, {
+    key: "enable",
+    value: function enable() {
+      this.isDisabled = false;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Disables the wallet button, preventing clicks and applying a visual disabled state.
+     *
+     * @example
+     * button.disable();
+     */
+  }, {
+    key: "disable",
+    value: function disable() {
+      this.isDisabled = true;
+      this.applyDisabledStyles();
+    }
     /**
      * Callback for onClick method.
      *
@@ -23060,7 +23357,7 @@ var BaseWalletButton = /*#__PURE__*/function () {
     key: "onClick",
     value: function onClick(handler) {
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.ON_CLICK, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CLICK, handler);
       }
       this.handleOnError(new Error('onClick event handler is required to return the wallet token string.'));
     }
@@ -23089,10 +23386,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onPaymentSuccessful(handler) {
       var _this = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.PAYMENT_SUCCESSFUL, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_SUCCESSFUL, handler);
       }
       return new Promise(function (resolve) {
-        return _this.eventEmitter.subscribe(EVENT.PAYMENT_SUCCESSFUL, function (data) {
+        return _this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_SUCCESSFUL, function (data) {
           return resolve(data);
         });
       });
@@ -23122,10 +23419,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onPaymentInReview(handler) {
       var _this2 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.PAYMENT_IN_REVIEW, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_IN_REVIEW, handler);
       }
       return new Promise(function (resolve) {
-        return _this2.eventEmitter.subscribe(EVENT.PAYMENT_IN_REVIEW, function (data) {
+        return _this2.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_IN_REVIEW, function (data) {
           return resolve(data);
         });
       });
@@ -23155,10 +23452,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onPaymentError(handler) {
       var _this3 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.PAYMENT_ERROR, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR, handler);
       }
       return new Promise(function (resolve) {
-        return _this3.eventEmitter.subscribe(EVENT.PAYMENT_ERROR, function (err) {
+        return _this3.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR, function (err) {
           return resolve(err);
         });
       });
@@ -23184,10 +23481,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onCheckoutClose(handler) {
       var _this4 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.ON_CHECKOUT_CLOSE, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CHECKOUT_CLOSE, handler);
       }
       return new Promise(function (resolve) {
-        return _this4.eventEmitter.subscribe(EVENT.ON_CHECKOUT_CLOSE, function (err) {
+        return _this4.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CHECKOUT_CLOSE, function (err) {
           return resolve(err);
         });
       });
@@ -23218,7 +23515,7 @@ var BaseWalletButton = /*#__PURE__*/function () {
     key: "onShippingAddressChange",
     value: function onShippingAddressChange(handler) {
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.ON_SHIPPING_ADDRESS_CHANGE, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_ADDRESS_CHANGE, handler);
       }
       this.handleOnError(new Error('onShippingAddressChange event handler is required to return the wallet token string or reject.'));
     }
@@ -23249,7 +23546,7 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onShippingOptionsChange(handler) {
       if (typeof handler === 'function') {
         this.onShippingOptionsChangeHandlerRegistered = true;
-        return this.eventEmitter.subscribe(EVENT.ON_SHIPPING_OPTIONS_CHANGE, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_OPTIONS_CHANGE, handler);
       }
       this.handleOnError(new Error('onShippingOptionsChange event handler is required to return the wallet token string or reject.'));
     }
@@ -23274,10 +23571,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onUnavailable(handler) {
       var _this5 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.UNAVAILABLE, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.UNAVAILABLE, handler);
       }
       return new Promise(function (resolve) {
-        return _this5.eventEmitter.subscribe(EVENT.UNAVAILABLE, function (err) {
+        return _this5.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.UNAVAILABLE, function (err) {
           return resolve(err);
         });
       });
@@ -23304,10 +23601,10 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function onError(handler) {
       var _this6 = this;
       if (typeof handler === 'function') {
-        return this.eventEmitter.subscribe(EVENT.ERROR, handler);
+        return this.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ERROR, handler);
       }
       return new Promise(function (resolve) {
-        return _this6.eventEmitter.subscribe(EVENT.ERROR, function (err) {
+        return _this6.eventEmitter.subscribe(exports.WALLET_BUTTONS_EXPRESS_EVENT.ERROR, function (err) {
           return resolve(err);
         });
       });
@@ -23344,8 +23641,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
       var _this8 = this;
       return this.api.charge().walletCallback(data)["catch"](function (err) {
         var _a;
-        _this8.eventEmitter.emit(EVENT.PAYMENT_ERROR, {
-          event: EVENT.PAYMENT_ERROR,
+        _this8.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR, {
+          event: exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR,
           chargeId: (_a = _this8.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
           data: _this8.eventDataFromApiError(err)
         });
@@ -23359,7 +23656,7 @@ var BaseWalletButton = /*#__PURE__*/function () {
       var _this9 = this;
       return this.api.charge().walletCapture(data).then(function (captureResult) {
         var _a;
-        var event = captureResult.status === 'inreview' ? EVENT.PAYMENT_IN_REVIEW : EVENT.PAYMENT_SUCCESSFUL;
+        var event = captureResult.status === 'inreview' ? exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_IN_REVIEW : exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_SUCCESSFUL;
         _this9.eventEmitter.emit(event, {
           event: event,
           chargeId: (_a = _this9.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
@@ -23368,8 +23665,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
         return captureResult;
       })["catch"](function (err) {
         var _a;
-        _this9.eventEmitter.emit(EVENT.PAYMENT_ERROR, {
-          event: EVENT.PAYMENT_ERROR,
+        _this9.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR, {
+          event: exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR,
           chargeId: (_a = _this9.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
           data: _this9.eventDataFromApiError(err)
         });
@@ -23380,8 +23677,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
     key: "handleMerchantOnExpressButtonClickEvent",
     value: function handleMerchantOnExpressButtonClickEvent() {
       var _this0 = this;
-      return this.eventEmitter.emitWithResult(EVENT.ON_CLICK, {
-        event: EVENT.ON_CLICK
+      return this.eventEmitter.emitWithResult(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CLICK, {
+        event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CLICK
       }).then(function (result) {
         var _a;
         if (!result || result.length === 0) {
@@ -23458,8 +23755,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
     value: function handleCheckoutClose() {
       var _a;
       var chargeId = (_a = this.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id;
-      this.eventEmitter.emit(EVENT.ON_CHECKOUT_CLOSE, _extends({
-        event: EVENT.ON_CHECKOUT_CLOSE
+      this.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CHECKOUT_CLOSE, _extends({
+        event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_CHECKOUT_CLOSE
       }, chargeId && {
         chargeId: chargeId
       }));
@@ -23467,8 +23764,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
   }, {
     key: "handleOnUnavailable",
     value: function handleOnUnavailable() {
-      this.eventEmitter.emit(EVENT.UNAVAILABLE, {
-        event: EVENT.UNAVAILABLE
+      this.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.UNAVAILABLE, {
+        event: exports.WALLET_BUTTONS_EXPRESS_EVENT.UNAVAILABLE
       });
     }
   }, {
@@ -23479,8 +23776,8 @@ var BaseWalletButton = /*#__PURE__*/function () {
         console.error(error);
       }
       var chargeId = (_a = this.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id;
-      this.eventEmitter.emit(EVENT.ERROR, _extends(_extends({
-        event: EVENT.ERROR
+      this.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.ERROR, _extends(_extends({
+        event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ERROR
       }, chargeId && {
         chargeId: chargeId
       }), {
@@ -23497,6 +23794,23 @@ var BaseWalletButton = /*#__PURE__*/function () {
         code: ((_c = err === null || err === void 0 ? void 0 : err.error) === null || _c === void 0 ? void 0 : _c.code) || (err === null || err === void 0 ? void 0 : err.code) || ((_d = err === null || err === void 0 ? void 0 : err.error_summary) === null || _d === void 0 ? void 0 : _d.code)
       };
     }
+  }, {
+    key: "applyDisabledStyles",
+    value: function applyDisabledStyles() {
+      var element = this.container.getElement();
+      if (!element) {
+        return;
+      }
+      if (this.isDisabled) {
+        element.style.pointerEvents = 'none';
+        element.style.opacity = '0.5';
+        element.setAttribute('aria-disabled', 'true');
+      } else {
+        element.style.pointerEvents = '';
+        element.style.opacity = '';
+        element.removeAttribute('aria-disabled');
+      }
+    }
   }, {
     key: "validateRequiredMetaFields",
     value: function validateRequiredMetaFields(requiredMetaFields) {
@@ -23539,11 +23853,11 @@ var generateApplePayButtonStyles = function generateApplePayButtonStyles() {
   return "\n        apple-pay-button {\n            display: inline-block;\n            --apple-pay-button-width: 100%;\n            --apple-pay-button-height: 40px;\n            --apple-pay-button-border-radius: 5px;\n            --apple-pay-button-padding: 5px 0px;\n        }\n    ";
 };
 
-var ContactShippingEditingMode;
+exports.ContactShippingEditingMode = void 0;
 (function (ContactShippingEditingMode) {
   ContactShippingEditingMode["AVAILABLE"] = "available";
   ContactShippingEditingMode["STORE_PICKUP"] = "store_pickup";
-})(ContactShippingEditingMode || (ContactShippingEditingMode = {}));
+})(exports.ContactShippingEditingMode || (exports.ContactShippingEditingMode = {}));
 
 var DEFAULT_APPLE_PAY_CAPABILITIES = ['paymentCredentialsAvailable'];
 /**
@@ -23568,7 +23882,14 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
     _classCallCheck(this, ApplePayWalletButtonExpress);
     _this = _callSuper(this, ApplePayWalletButtonExpress, [selector, publicKeyOrAccessToken, gatewayId, meta, ['amount_label', 'country']]);
     _this.onApplePayButtonClicked = function () {
-      var applePayApiVersion = 14;
+      if (_this.isDisabled) {
+        return;
+      }
+      var applePayApiVersion = getSupportedApplePayVersion();
+      if (applePayApiVersion === 0) {
+        _this.handleOnUnavailable();
+        return;
+      }
       _this.paymentSession = new ApplePaySession(applePayApiVersion, _this.createRequest());
       _this.paymentSession.onvalidatemerchant = _this.onValidateMerchant;
       _this.paymentSession.onpaymentauthorized = _this.onPaymentAuthorized;
@@ -23662,8 +23983,8 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
       } catch (error) {
         // this ensures thatwe always call completePayment and emit error callback even if there's an uncaught exception
         _this.paymentSession.completePayment(ApplePaySession.STATUS_FAILURE);
-        _this.eventEmitter.emit(EVENT.PAYMENT_ERROR, {
-          event: EVENT.PAYMENT_ERROR,
+        _this.eventEmitter.emit(exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR, {
+          event: exports.WALLET_BUTTONS_EXPRESS_EVENT.PAYMENT_ERROR,
           chargeId: (_k = _this.chargeWalletTokenMeta) === null || _k === void 0 ? void 0 : _k.charge.id,
           data: {
             message: error instanceof Error ? error.message : 'Payment processing failed',
@@ -23683,7 +24004,7 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
           while (1) switch (_context.n) {
             case 0:
               return _context.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT.ON_SHIPPING_ADDRESS_CHANGE,
+                event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_ADDRESS_CHANGE,
                 chargeId: (_a = this.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
                 data: this.parseShippingContactUpdateEvent(data)
               }).then(function (response) {
@@ -23718,7 +24039,7 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
           while (1) switch (_context2.n) {
             case 0:
               return _context2.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT.ON_SHIPPING_OPTIONS_CHANGE,
+                event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_OPTIONS_CHANGE,
                 chargeId: (_b = this.chargeWalletTokenMeta) === null || _b === void 0 ? void 0 : _b.charge.id,
                 data: this.parseShippingMethodUpdateEvent(data)
               }).then(function (_response) {
@@ -23846,6 +24167,7 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
         return;
       }
       applePayButton.addEventListener('click', this.onApplePayButtonClicked.bind(this));
+      this.applyDisabledStyles();
     }
   }, {
     key: "createRequest",
@@ -23854,7 +24176,7 @@ var ApplePayWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
       // https://developer.apple.com/documentation/apple_pay_on_the_web/applepaypaymentrequest
       var shippingContactEditingMode;
       if (this.meta.shipping_editing_mode) {
-        shippingContactEditingMode = this.meta.shipping_editing_mode === ContactShippingEditingMode.AVAILABLE ? 'available' : 'storePickup';
+        shippingContactEditingMode = this.meta.shipping_editing_mode === exports.ContactShippingEditingMode.AVAILABLE ? 'available' : 'storePickup';
       }
       return _extends(_extends({
         countryCode: this.meta.country,
@@ -24038,13 +24360,20 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
     key: "load",
     value: function load() {
       var _this2 = this;
-      if (!window.Promise) return this.handleOnUnavailable();
+      if (!window.Promise) {
+        return this.handleOnUnavailable();
+      }
       this.getGatewayWalletConfig().then(function (config) {
-        if (!config || config.type !== 'Paypal' || !config.credentials || !config.credentials.client_auth) throw new Error('Invalid configuration');
+        if (!config || config.type !== 'Paypal' || !config.credentials || !config.credentials.client_auth) {
+          throw new Error('Invalid configuration');
+        }
         _this2.config = config;
         _this2.renderPaypalButton();
+        _this2.applyDisabledStyles();
       })["catch"](function (err) {
-        if (err) _this2.handleOnError(err);
+        if (err) {
+          _this2.handleOnError(err);
+        }
         _this2.handleOnUnavailable();
       });
     }
@@ -24061,6 +24390,7 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
     value: function setMeta(meta) {
       this.meta = meta;
       this.renderPaypalButton();
+      this.applyDisabledStyles();
     }
   }, {
     key: "renderPaypalButton",
@@ -24077,7 +24407,7 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
       var _this3 = this;
       var _a, _b;
       var buttonId = ((_a = this.container.getElement()) === null || _a === void 0 ? void 0 : _a.id) || '';
-      var paypalScript = document.createElement("script");
+      var paypalScript = document.createElement('script');
       paypalScript.src = "https://www.paypal.com/sdk/js?client-id=".concat((_b = this.config.credentials) === null || _b === void 0 ? void 0 : _b.client_auth, "&currency=").concat(this.meta.currency).concat(this.meta.pay_later === true ? '&enable-funding=paylater&disable-funding=card' : '&disable-funding=credit,card').concat(!this.meta.capture ? '&intent=authorize' : '');
       paypalScript.async = true;
       paypalScript.onload = function () {
@@ -24096,7 +24426,7 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
       var _this4 = this;
       var _a, _b, _c;
       var buttonId = ((_a = this.container.getElement()) === null || _a === void 0 ? void 0 : _a.id) || '';
-      var paypalScript = document.createElement("script");
+      var paypalScript = document.createElement('script');
       // buyer-country is only used in Sandbox. It shouldn't be used in production. Based on buyer's geolocation this parameter determine which funding sources are eligible for a given buyer. Refer the link https://developer.paypal.com/sdk/js/configuration/#link-buyercountry
       paypalScript.src = "https://www.paypal.com/sdk/js?client-id=".concat((_b = this.config.credentials) === null || _b === void 0 ? void 0 : _b.client_auth, "&currency=").concat(this.meta.currency, "&components=buttons,funding-eligibility,messages&enable-funding=paylater").concat(!this.meta.capture ? '&intent=authorize' : '').concat(((_c = this.config) === null || _c === void 0 ? void 0 : _c.mode) === 'live' ? '' : '&buyer-country=AU');
       paypalScript.async = true;
@@ -24137,6 +24467,9 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
         style: this.meta.style
       }), {
         onClick: function onClick(_data, actions) {
+          if (_this5.isDisabled) {
+            return actions.reject();
+          }
           return _this5.handleMerchantOnExpressButtonClickEvent().then(function () {
             return actions.resolve();
           })["catch"](function () {
@@ -24147,7 +24480,9 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
         createOrder: function createOrder() {
           return new Promise(function (resolve, reject) {
             var _a, _b;
-            if (!_this5.api.auth) return reject(new Error('Wallet Token not injected. Please handle onClick correctly.'));
+            if (!_this5.api.auth) {
+              return reject(new Error('Wallet Token not injected. Please handle onClick correctly.'));
+            }
             var shipping = (_b = (_a = _this5.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge) === null || _b === void 0 ? void 0 : _b.shipping;
             if (shipping) {
               var hasCompleteShippingAddress = ['address_line1', 'address_city', 'address_country', 'address_state', 'address_postcode'].every(function (key) {
@@ -24166,7 +24501,9 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
           });
         },
         onApprove: function onApprove(data) {
-          if (_this5.pendingApprovalPromise) return _this5.pendingApprovalPromise;
+          if (_this5.pendingApprovalPromise) {
+            return _this5.pendingApprovalPromise;
+          }
           _this5.pendingApprovalPromise = _this5.executeWalletCapture({
             payment_method_id: data.orderID,
             customer: {
@@ -24210,7 +24547,7 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
               return _context.a(2);
             case 1:
               return _context.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT.ON_SHIPPING_ADDRESS_CHANGE,
+                event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_ADDRESS_CHANGE,
                 chargeId: (_a = this.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
                 data: {
                   address_city: data.shippingAddress.city,
@@ -24245,7 +24582,7 @@ var PaypalWalletButtonExpress = /*#__PURE__*/function (_BaseWalletButton) {
           while (1) switch (_context2.n) {
             case 0:
               return _context2.a(2, this.handleMerchantOnShippingChangedEvent({
-                event: EVENT.ON_SHIPPING_OPTIONS_CHANGE,
+                event: exports.WALLET_BUTTONS_EXPRESS_EVENT.ON_SHIPPING_OPTIONS_CHANGE,
                 chargeId: (_a = this.chargeWalletTokenMeta) === null || _a === void 0 ? void 0 : _a.charge.id,
                 data: {
                   shipping_option_id: data.selectedShippingOption.id,
@@ -44349,13 +44686,16 @@ exports.AfterpayOnSiteMessaging = AfterpayOnSiteMessaging;
 exports.Api = Api;
 exports.ApplePayOpenWalletButton = ApplePayOpenWalletButton;
 exports.ApplePayWalletButtonExpress = ApplePayWalletButtonExpress;
+exports.CANVAS_3DS_EVENT = CANVAS_3DS_EVENT;
 exports.CHECKOUT_BUTTON_EVENT = CHECKOUT_BUTTON_EVENT;
+exports.CHECKOUT_EVENT = EVENT$2;
 exports.Canvas3ds = Canvas3ds;
+exports.Canvas3dsTokenFormat = Canvas3dsTokenFormat;
 exports.Checkout = Checkout;
 exports.ClickToPay = ClickToPay;
 exports.Configuration = Configuration;
 exports.ELEMENT = ELEMENT;
-exports.EVENT = EVENT$5;
+exports.EVENT = EVENT$4;
 exports.ExternalCheckoutBuilder = Builder$1;
 exports.ExternalCheckoutChecker = Checker;
 exports.FORM_FIELD = FORM_FIELD$1;
@@ -44367,7 +44707,9 @@ exports.HtmlPaymentSourceWidget = HtmlPaymentSourceWidget;
 exports.HtmlWidget = HtmlWidget;
 exports.InstructionDebugger = InstructionDebugger;
 exports.MultiWidget = MultiWidget;
-exports.OpenWalletButtons = OpenWalletButtons;
+exports.PAYMENT_EXPIRED = PAYMENT_EXPIRED;
+exports.PAYMENT_FAILURE = PAYMENT_FAILURE;
+exports.PAYMENT_SUCCESSFUL = PAYMENT_SUCCESSFUL;
 exports.PAYMENT_TYPE = PAYMENT_TYPE;
 exports.PayPalDataCollector = PayPalDataCollector;
 exports.PayPalSavePaymentSourceWidget = PayPalSavePaymentSourceWidget;