@paydock/client-sdk 1.143.0-beta → 1.144.0-beta

package/bundles/widget.umd.js

@@ -1198,7 +1198,7 @@
     version: 'x-sdk-version',
     type: 'x-sdk-type'
   });
-  SDK._version = 'v1.143.0-beta';
+  SDK._version = 'v1.144.0-beta';
 
   function isFunction(value) {
       return typeof value === 'function';
@@ -4808,127 +4808,162 @@
     }]);
   }(ApiBase);
 
-  var Url = /*#__PURE__*/function () {
-    function Url() {
-      _classCallCheck(this, Url);
+  var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
+  var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
+  var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
+  var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
+  var ApiChargeInternal = /*#__PURE__*/function () {
+    function ApiChargeInternal(api) {
+      _classCallCheck(this, ApiChargeInternal);
+      this.api = api;
     }
-    return _createClass(Url, null, [{
-      key: "extendSearchParams",
-      value: function extendSearchParams(uri, key, val) {
-        return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
+    return _createClass(ApiChargeInternal, [{
+      key: "walletCapture",
+      value: function walletCapture(payload) {
+        return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
       }
     }, {
-      key: "serialize",
-      value: function serialize(params) {
-        return Object.keys(params).map(function (key) {
-          return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
-        }).join('&');
+      key: "walletCallback",
+      value: function walletCallback(payload) {
+        return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
+      }
+    }, {
+      key: "standalone3dsProcess",
+      value: function standalone3dsProcess(payload) {
+        return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+      }
+    }, {
+      key: "standalone3dsHandle",
+      value: function standalone3dsHandle() {
+        return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
       }
     }]);
   }();
 
-  var Uuid = /*#__PURE__*/function () {
-    function Uuid() {
-      _classCallCheck(this, Uuid);
+  var CALLBACK_LINK = '/v1/checkouts/callback';
+  var INSTRUCTION_LINK = '/v1/checkouts/instruction';
+  var STATUS_LINK = '/v1/checkouts';
+  var ApiCheckoutInternal = /*#__PURE__*/function () {
+    function ApiCheckoutInternal(api) {
+      _classCallCheck(this, ApiCheckoutInternal);
+      this.api = api;
+      this.getInstructionLink = function () {
+        return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
+      };
     }
-    return _createClass(Uuid, null, [{
-      key: "generate",
-      value: function generate() {
-        if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
-          var buf = new Uint16Array(8);
-          window.crypto.getRandomValues(buf);
-          return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
-        } else {
-          return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
-        }
+    return _createClass(ApiCheckoutInternal, [{
+      key: "instructions",
+      value: function instructions() {
+        return this.api.requestObservable('GET', this.getInstructionLink(), {});
       }
     }, {
-      key: "hash",
-      value: function hash(number) {
-        var hash = number.toString(16);
-        while (hash.length < 4) {
-          hash = "0" + hash;
-        }
-        return hash;
+      key: "callback",
+      value: function callback(payload) {
+        return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
       }
     }, {
-      key: "random",
-      value: function random() {
-        return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
+      key: "status",
+      value: function status(id) {
+        return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
       }
     }]);
   }();
 
-  var WIDGET_LINK = '/remote-action';
-  var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
-  var PAYMENT_SOURCE_LINK = '/payment-sources';
-  var SECURE_3D = '/3ds/webhook';
-  var FLYPAY_LINK = '/wallet/flypay';
-  var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
-  var MESSAGE_WIDGET_LINK = '/message-widget';
-  var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
-  var Link = /*#__PURE__*/function () {
-    function Link(linkResource) {
-      _classCallCheck(this, Link);
-      this.params = {};
-      this.widgetId = Uuid.generate();
-      this.linkResource = linkResource;
-      this.env = new Env(WIDGET_URL);
-      this.setParams({
-        widget_id: this.widgetId
-      });
+  var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
+  var ApiGatewayInternal = /*#__PURE__*/function () {
+    function ApiGatewayInternal(api) {
+      _classCallCheck(this, ApiGatewayInternal);
+      this.api = api;
     }
-    return _createClass(Link, [{
-      key: "getNetUrl",
-      value: function getNetUrl() {
-        return this.env.getConf().url + this.linkResource;
+    return _createClass(ApiGatewayInternal, [{
+      key: "getWalletConfig",
+      value: function getWalletConfig(gateway_id) {
+        var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
+        return this.api.getClientPromise('GET', url).send(undefined);
       }
-    }, {
-      key: "getUrl",
-      value: function getUrl() {
-        var url = this.getNetUrl();
-        var params = this.getParams();
-        for (var key in params) {
-          if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
-        }
-        return url;
+    }]);
+  }();
+
+  var CREATE_OTT = '/v1/payment_sources/tokens';
+  var CREATE_SESSION = '/v1/payment_sources/payment-session';
+  var ApiPaymentSourceInternal = /*#__PURE__*/function () {
+    function ApiPaymentSourceInternal(api) {
+      _classCallCheck(this, ApiPaymentSourceInternal);
+      this.api = api;
+    }
+    return _createClass(ApiPaymentSourceInternal, [{
+      key: "createOTT",
+      value: function createOTT(payload) {
+        return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
       }
     }, {
-      key: "setParams",
-      value: function setParams(params) {
-        this.params = _extends({}, this.params, params);
+      key: "createSession",
+      value: function createSession(payload) {
+        return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
       }
-    }, {
-      key: "concatParams",
-      value: function concatParams(params) {
-        for (var key in params) {
-          if (!params.hasOwnProperty(key) || !params[key].length) continue;
-          if (typeof this.params[key] !== 'string') this.params[key] = '';
-          if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
-        }
+    }]);
+  }();
+
+  var GET_CONFIG = '/v1/services/:service_id/config';
+  var ApiServiceInternal = /*#__PURE__*/function () {
+    function ApiServiceInternal(api) {
+      _classCallCheck(this, ApiServiceInternal);
+      this.api = api;
+    }
+    return _createClass(ApiServiceInternal, [{
+      key: "getConfig",
+      value: function getConfig(service_id) {
+        var url = GET_CONFIG.replace(':service_id', service_id);
+        return this.api.getClientPromise('GET', url).send(undefined);
+      }
+    }]);
+  }();
+  var SERVICE_TYPES;
+  (function (SERVICE_TYPES) {
+    SERVICE_TYPES["ACCERTIFY"] = "Accertify";
+    SERVICE_TYPES["BOOKING"] = "Booking";
+    SERVICE_TYPES["GPAYMENTS"] = "GPayments";
+    SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
+    SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
+    SERVICE_TYPES["VISA_NT"] = "VisaVTS";
+    SERVICE_TYPES["FORTER"] = "Forter";
+    SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
+    SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
+  })(SERVICE_TYPES || (SERVICE_TYPES = {}));
+
+  var ApiInternal = /*#__PURE__*/function (_ApiBase) {
+    function ApiInternal() {
+      _classCallCheck(this, ApiInternal);
+      return _callSuper(this, ApiInternal, arguments);
+    }
+    _inherits(ApiInternal, _ApiBase);
+    return _createClass(ApiInternal, [{
+      key: "charge",
+      value: function charge() {
+        return new ApiChargeInternal(this);
       }
     }, {
-      key: "getParams",
-      value: function getParams() {
-        return this.params;
+      key: "service",
+      value: function service() {
+        return new ApiServiceInternal(this);
       }
     }, {
-      key: "setEnv",
-      value: function setEnv(env, alias) {
-        this.env.setEnv(env, alias);
+      key: "checkout",
+      value: function checkout() {
+        return new ApiCheckoutInternal(this);
       }
     }, {
-      key: "getEnv",
-      value: function getEnv() {
-        return this.env.getEnv();
+      key: "gateway",
+      value: function gateway() {
+        return new ApiGatewayInternal(this);
       }
     }, {
-      key: "getBaseUrl",
-      value: function getBaseUrl() {
-        return this.env.getConf().url;
+      key: "paymentSource",
+      value: function paymentSource() {
+        return new ApiPaymentSourceInternal(this);
       }
     }]);
-  }();
+  }(ApiBase);
 
   var IFrame = /*#__PURE__*/function () {
     function IFrame(container) {
@@ -5125,10 +5160,10 @@
   }();
 
   var hiddenStyle = {
-    visibility: "hidden",
-    border: "0",
-    width: "0",
-    height: "0"
+    visibility: 'hidden',
+    border: '0',
+    width: '0',
+    height: '0'
   };
   var PROCESS_STANDALONE_3DS_STATUS;
   (function (PROCESS_STANDALONE_3DS_STATUS) {
@@ -5150,14 +5185,30 @@
     IFRAME_STATUS["TIMEOUT"] = "AuthTimedOut";
     IFRAME_STATUS["INVALID"] = "invalid_event";
   })(IFRAME_STATUS || (IFRAME_STATUS = {}));
+  /**
+   * Event name constants emitted during the Standalone 3DS (GPayments) flow.
+   * Used internally by `GPaymentsService` and re-exported publicly as `CANVAS_3DS_EVENT`.
+   */
   var GPAYMENTS_EVENT = {
+    /** Authentication succeeded. Payload: `Canvas3dsAuthPayload`. */
     AUTH_SUCCESS: 'chargeAuthSuccess',
+    /** Authentication failed — covers issuer rejection, iframe timeout (`AuthTimedOut`), and invalid-event outcomes. Payload: `Canvas3dsAuthPayload`. */
     AUTH_ERROR: 'chargeAuthReject',
+    /** Decoupled authentication — issuer will authenticate out-of-band. Payload: `Canvas3dsAuthPayload`. */
     DECOUPLED: 'chargeAuthDecoupled',
+    /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     CHALLENGE: 'chargeAuthChallenge',
+    /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     INFO: 'chargeAuthInfo',
+    /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
     ERROR: 'error'
   };
+  /**
+   * Public alias for GPAYMENTS_EVENT. Same object reference — no behavioral change.
+   * Prefer `CANVAS_3DS_EVENT` in public-facing code; `GPAYMENTS_EVENT` remains for
+   * backwards-compatible internal usage.
+   */
+  var CANVAS_3DS_EVENT = GPAYMENTS_EVENT;
   var GPaymentsService = /*#__PURE__*/function () {
     function GPaymentsService(container, api, eventEmitter) {
       _classCallCheck(this, GPaymentsService);
@@ -5185,20 +5236,22 @@
       value: function initializeIFrames(initializationUrl, secondaryUrl, title) {
         var hideAuthorization = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
         var container = this.container.getElement();
-        if (!container) return;
-        var divAuthorization = document.createElement("div");
-        divAuthorization.setAttribute("id", "paydock_authorization_iframe");
+        if (!container) {
+          return;
+        }
+        var divAuthorization = document.createElement('div');
+        divAuthorization.setAttribute('id', 'paydock_authorization_iframe');
         container.appendChild(divAuthorization);
-        this.browserAndChallengeContainer = new Container("#paydock_authorization_iframe");
+        this.browserAndChallengeContainer = new Container('#paydock_authorization_iframe');
         this.iFrameAuthorization = new IFrame(this.browserAndChallengeContainer);
         this.iFrameAuthorization.load(initializationUrl, {
           title: title
         });
         if (secondaryUrl) {
-          var divSecondaryURL = document.createElement("div");
-          divSecondaryURL.setAttribute("id", "paydock_secondary_iframe");
+          var divSecondaryURL = document.createElement('div');
+          divSecondaryURL.setAttribute('id', 'paydock_secondary_iframe');
           container.appendChild(divSecondaryURL);
-          this.monitoringContainer = new Container("#paydock_secondary_iframe");
+          this.monitoringContainer = new Container('#paydock_secondary_iframe');
           this.iFrameSecondaryUrl = new IFrame(this.monitoringContainer);
           this.iFrameSecondaryUrl.load(secondaryUrl, {
             title: title
@@ -5214,8 +5267,12 @@
         var hideAuthorization = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
         var _a;
         for (var prop in hiddenStyle) {
-          if (!hiddenStyle.hasOwnProperty(prop)) continue;
-          if (hideAuthorization) this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+          if (!Object.hasOwn(hiddenStyle, prop)) {
+            continue;
+          }
+          if (hideAuthorization) {
+            this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+          }
           (_a = this.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.setStyle(prop, hiddenStyle[prop]);
         }
       }
@@ -5225,13 +5282,17 @@
         var _this = this;
         this.iFrameEvent.on(EVENT$4.CHARGE_AUTH, widgetId, function (data) {
           if (data.status === IFRAME_STATUS.SKIPPED || data.status === IFRAME_STATUS.FINISHED) {
-            if (data.info) _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
-              info: data.info
-            });
+            if (data.info) {
+              _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
+                info: data.info
+              });
+            }
             _this.performAuthentication(data);
-          } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
-            status: data.status
-          }, data.charge_3ds_id));
+          } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) {
+            _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
+              status: data.status
+            }, data.charge_3ds_id));
+          }
         });
         this.iFrameEvent.on(EVENT$4.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
           _this.processResult(data.charge_3ds_id);
@@ -5271,13 +5332,19 @@
       key: "processResult",
       value: function processResult(charge3dsId) {
         var _this2 = this;
-        if (this.resultRead) return;
+        if (this.resultRead) {
+          return;
+        }
         this.resultRead = true;
         this.api.charge().standalone3dsHandle().then(function (result) {
           var _a;
           _this2.iFrameAuthorization.remove();
           (_a = _this2.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.remove();
-          if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));else _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+          if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) {
+            _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));
+          } else {
+            _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+          }
         }, function (err) {
           _this2.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this2.parseError(err, charge3dsId));
         });
@@ -5302,10 +5369,16 @@
       key: "doPolling",
       value: function doPolling(url, charge3dsId) {
         var _this3 = this;
-        this.externalAPI("GET", url).then(function (data) {
-          if (!data.event || data.event === "AuthResultNotReady") setTimeout(function () {
-            _this3.doPolling(url, charge3dsId);
-          }, 2000);else if (data.event === 'AuthResultReady') _this3.processResult(charge3dsId);else throw new Error("Event not supported");
+        this.externalAPI('GET', url).then(function (data) {
+          if (!data.event || data.event === 'AuthResultNotReady') {
+            setTimeout(function () {
+              _this3.doPolling(url, charge3dsId);
+            }, 2000);
+          } else if (data.event === 'AuthResultReady') {
+            _this3.processResult(charge3dsId);
+          } else {
+            throw new Error('Event not supported');
+          }
         })["catch"](function (err) {
           return _this3.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this3.parseError(err, charge3dsId));
         });
@@ -5322,16 +5395,24 @@
           charge_3ds_id: charge_3ds_id
         }).then(function (authenticationResult) {
           var _a, _b;
-          if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
+          if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) {
+            _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          } else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
             if ((_a = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _a === void 0 ? void 0 : _a.challenge) {
               _this4.eventEmitter.emit(GPAYMENTS_EVENT.CHALLENGE, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
               _this4.initializeIFrames(authenticationResult.result.challenge_url, undefined, 'Authentication Challenge', false);
-              if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              if (authenticationResult.result.secondary_url) {
+                _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              }
             } else if ((_b = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _b === void 0 ? void 0 : _b.decoupled_challenge) {
               _this4.eventEmitter.emit(GPAYMENTS_EVENT.DECOUPLED, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
-              if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              if (authenticationResult.result.secondary_url) {
+                _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              }
             }
-          } else return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          } else {
+            return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          }
         }, function (err) {
           _this4.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this4.parseError(err, charge_3ds_id));
         });
@@ -5339,192 +5420,159 @@
     }]);
   }();
 
-  var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
-  var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
-  var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
-  var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
-  var ApiChargeInternal = /*#__PURE__*/function () {
-    function ApiChargeInternal(api) {
-      _classCallCheck(this, ApiChargeInternal);
-      this.api = api;
+  var STANDALONE_3DS_GATEWAYS = {
+    GPAYMENTS: 'GPayments'
+  };
+  var Standalone3dsService = /*#__PURE__*/function () {
+    function Standalone3dsService(container, eventEmitter) {
+      _classCallCheck(this, Standalone3dsService);
+      this.env = DEFAULT_ENV;
+      this.container = container;
+      this.eventEmitter = eventEmitter;
     }
-    return _createClass(ApiChargeInternal, [{
-      key: "walletCapture",
-      value: function walletCapture(payload) {
-        return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
-      }
-    }, {
-      key: "walletCallback",
-      value: function walletCallback(payload) {
-        return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
-      }
-    }, {
-      key: "standalone3dsProcess",
-      value: function standalone3dsProcess(payload) {
-        return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+    return _createClass(Standalone3dsService, [{
+      key: "load",
+      value: function load(token, options) {
+        var parsedToken = AccessToken.validateJWT(token);
+        if (!parsedToken) {
+          throw new Error('Invalid charge token');
+        }
+        var tokenData = AccessToken.extractData(parsedToken.body);
+        var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
+        api.setEnv(this.env, this.alias);
+        switch (tokenData.service_type) {
+          case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
+            new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
+            break;
+        }
       }
     }, {
-      key: "standalone3dsHandle",
-      value: function standalone3dsHandle() {
-        return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
+      key: "setEnv",
+      value: function setEnv(env, alias) {
+        this.env = env;
+        this.alias = alias;
       }
     }]);
   }();
 
-  var CALLBACK_LINK = '/v1/checkouts/callback';
-  var INSTRUCTION_LINK = '/v1/checkouts/instruction';
-  var STATUS_LINK = '/v1/checkouts';
-  var ApiCheckoutInternal = /*#__PURE__*/function () {
-    function ApiCheckoutInternal(api) {
-      _classCallCheck(this, ApiCheckoutInternal);
-      this.api = api;
-      this.getInstructionLink = function () {
-        return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
-      };
+  var Url = /*#__PURE__*/function () {
+    function Url() {
+      _classCallCheck(this, Url);
     }
-    return _createClass(ApiCheckoutInternal, [{
-      key: "instructions",
-      value: function instructions() {
-        return this.api.requestObservable('GET', this.getInstructionLink(), {});
-      }
-    }, {
-      key: "callback",
-      value: function callback(payload) {
-        return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
+    return _createClass(Url, null, [{
+      key: "extendSearchParams",
+      value: function extendSearchParams(uri, key, val) {
+        return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
       }
     }, {
-      key: "status",
-      value: function status(id) {
-        return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
-      }
-    }]);
-  }();
-
-  var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
-  var ApiGatewayInternal = /*#__PURE__*/function () {
-    function ApiGatewayInternal(api) {
-      _classCallCheck(this, ApiGatewayInternal);
-      this.api = api;
-    }
-    return _createClass(ApiGatewayInternal, [{
-      key: "getWalletConfig",
-      value: function getWalletConfig(gateway_id) {
-        var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
-        return this.api.getClientPromise('GET', url).send(undefined);
+      key: "serialize",
+      value: function serialize(params) {
+        return Object.keys(params).map(function (key) {
+          return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
+        }).join('&');
       }
     }]);
   }();
 
-  var CREATE_OTT = '/v1/payment_sources/tokens';
-  var CREATE_SESSION = '/v1/payment_sources/payment-session';
-  var ApiPaymentSourceInternal = /*#__PURE__*/function () {
-    function ApiPaymentSourceInternal(api) {
-      _classCallCheck(this, ApiPaymentSourceInternal);
-      this.api = api;
+  var Uuid = /*#__PURE__*/function () {
+    function Uuid() {
+      _classCallCheck(this, Uuid);
     }
-    return _createClass(ApiPaymentSourceInternal, [{
-      key: "createOTT",
-      value: function createOTT(payload) {
-        return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
+    return _createClass(Uuid, null, [{
+      key: "generate",
+      value: function generate() {
+        if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
+          var buf = new Uint16Array(8);
+          window.crypto.getRandomValues(buf);
+          return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
+        } else {
+          return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
+        }
       }
     }, {
-      key: "createSession",
-      value: function createSession(payload) {
-        return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
+      key: "hash",
+      value: function hash(number) {
+        var hash = number.toString(16);
+        while (hash.length < 4) {
+          hash = "0" + hash;
+        }
+        return hash;
       }
-    }]);
-  }();
-
-  var GET_CONFIG = '/v1/services/:service_id/config';
-  var ApiServiceInternal = /*#__PURE__*/function () {
-    function ApiServiceInternal(api) {
-      _classCallCheck(this, ApiServiceInternal);
-      this.api = api;
-    }
-    return _createClass(ApiServiceInternal, [{
-      key: "getConfig",
-      value: function getConfig(service_id) {
-        var url = GET_CONFIG.replace(':service_id', service_id);
-        return this.api.getClientPromise('GET', url).send(undefined);
+    }, {
+      key: "random",
+      value: function random() {
+        return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
       }
     }]);
   }();
-  var SERVICE_TYPES;
-  (function (SERVICE_TYPES) {
-    SERVICE_TYPES["ACCERTIFY"] = "Accertify";
-    SERVICE_TYPES["BOOKING"] = "Booking";
-    SERVICE_TYPES["GPAYMENTS"] = "GPayments";
-    SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
-    SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
-    SERVICE_TYPES["VISA_NT"] = "VisaVTS";
-    SERVICE_TYPES["FORTER"] = "Forter";
-    SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
-    SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
-  })(SERVICE_TYPES || (SERVICE_TYPES = {}));
 
-  var ApiInternal = /*#__PURE__*/function (_ApiBase) {
-    function ApiInternal() {
-      _classCallCheck(this, ApiInternal);
-      return _callSuper(this, ApiInternal, arguments);
+  var WIDGET_LINK = '/remote-action';
+  var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
+  var PAYMENT_SOURCE_LINK = '/payment-sources';
+  var SECURE_3D = '/3ds/webhook';
+  var FLYPAY_LINK = '/wallet/flypay';
+  var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
+  var MESSAGE_WIDGET_LINK = '/message-widget';
+  var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
+  var Link = /*#__PURE__*/function () {
+    function Link(linkResource) {
+      _classCallCheck(this, Link);
+      this.params = {};
+      this.widgetId = Uuid.generate();
+      this.linkResource = linkResource;
+      this.env = new Env(WIDGET_URL);
+      this.setParams({
+        widget_id: this.widgetId
+      });
     }
-    _inherits(ApiInternal, _ApiBase);
-    return _createClass(ApiInternal, [{
-      key: "charge",
-      value: function charge() {
-        return new ApiChargeInternal(this);
+    return _createClass(Link, [{
+      key: "getNetUrl",
+      value: function getNetUrl() {
+        return this.env.getConf().url + this.linkResource;
       }
     }, {
-      key: "service",
-      value: function service() {
-        return new ApiServiceInternal(this);
+      key: "getUrl",
+      value: function getUrl() {
+        var url = this.getNetUrl();
+        var params = this.getParams();
+        for (var key in params) {
+          if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
+        }
+        return url;
       }
     }, {
-      key: "checkout",
-      value: function checkout() {
-        return new ApiCheckoutInternal(this);
+      key: "setParams",
+      value: function setParams(params) {
+        this.params = _extends({}, this.params, params);
       }
     }, {
-      key: "gateway",
-      value: function gateway() {
-        return new ApiGatewayInternal(this);
+      key: "concatParams",
+      value: function concatParams(params) {
+        for (var key in params) {
+          if (!params.hasOwnProperty(key) || !params[key].length) continue;
+          if (typeof this.params[key] !== 'string') this.params[key] = '';
+          if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
+        }
       }
     }, {
-      key: "paymentSource",
-      value: function paymentSource() {
-        return new ApiPaymentSourceInternal(this);
-      }
-    }]);
-  }(ApiBase);
-
-  var STANDALONE_3DS_GATEWAYS = {
-    GPAYMENTS: "GPayments"
-  };
-  var Standalone3dsService = /*#__PURE__*/function () {
-    function Standalone3dsService(container, eventEmitter) {
-      _classCallCheck(this, Standalone3dsService);
-      this.env = DEFAULT_ENV;
-      this.container = container;
-      this.eventEmitter = eventEmitter;
-    }
-    return _createClass(Standalone3dsService, [{
-      key: "load",
-      value: function load(token, options) {
-        var parsedToken = AccessToken.validateJWT(token);
-        if (!parsedToken) throw new Error("Invalid charge token");
-        var tokenData = AccessToken.extractData(parsedToken.body);
-        var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
-        api.setEnv(this.env, this.alias);
-        switch (tokenData.service_type) {
-          case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
-            new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
-            break;
-        }
+      key: "getParams",
+      value: function getParams() {
+        return this.params;
       }
     }, {
       key: "setEnv",
       value: function setEnv(env, alias) {
-        this.env = env;
-        this.alias = alias;
+        this.env.setEnv(env, alias);
+      }
+    }, {
+      key: "getEnv",
+      value: function getEnv() {
+        return this.env.getEnv();
+      }
+    }, {
+      key: "getBaseUrl",
+      value: function getBaseUrl() {
+        return this.env.getConf().url;
       }
     }]);
   }();
@@ -5564,7 +5612,7 @@
    * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
    * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
    * @param {string} ERROR=error
-  */
+   */
   /**
    * Class Canvas3ds include method for working on html
    * @constructor
@@ -5600,13 +5648,21 @@
        *
        */
       function load() {
-        if (this.token.format === TOKEN_FORMAT$2.HTML) this.iFrame.loadFromHtml(this.token.content, {
-          title: '3d secure authentication'
-        }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.URL) this.iFrame.load(this.token.content, {
-          title: '3d secure authentication'
-        }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) this.standalone3dsService.load(this.token.content, {
-          title: '3d secure authentication'
-        });else console.error('Token contain unsupported payload');
+        if (this.token.format === TOKEN_FORMAT$2.HTML) {
+          this.iFrame.loadFromHtml(this.token.content, {
+            title: '3d secure authentication'
+          }, 'threeDSecure-iframe');
+        } else if (this.token.format === TOKEN_FORMAT$2.URL) {
+          this.iFrame.load(this.token.content, {
+            title: '3d secure authentication'
+          }, 'threeDSecure-iframe');
+        } else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
+          this.standalone3dsService.load(this.token.content, {
+            title: '3d secure authentication'
+          });
+        } else {
+          console.error('Token contain unsupported payload');
+        }
       }
       /**
        * Current method can change environment. By default environment = sandbox.
@@ -5623,7 +5679,9 @@
         this.link.setEnv(env, alias);
         this.standalone3dsService.setEnv(env, alias);
         for (var index in this.configs) {
-          if (!this.configs.hasOwnProperty(index)) continue;
+          if (!Object.hasOwn(this.configs, index)) {
+            continue;
+          }
           this.configs[index].setEnv(env, alias);
         }
       }
@@ -5633,34 +5691,45 @@
         return this.link.getEnv();
       }
       /**
-       * Listen to events of widget
+       * Listen to events of widget.
        *
-       * @example
+       * Available event names are defined in {@link Canvas3dsEventMap} (typed) and
+       * {@link CANVAS_3DS_EVENT} (string constants). Using a literal event name
+       * narrows the callback payload via the typed overloads.
        *
-       * widget.on('chargeAuthReject', function (data) {
-       *      console.log(data);
+       * @example
+       * // Callback form — payload is narrowed by the event name
+       * widget.on('chargeAuthReject', (data) => {
+       *   console.log(data); // data is Canvas3dsAuthPayload | Canvas3dsChargeAuthEventPayload
        * });
-       * // or
-       * widget.on('chargeAuthReject').then(function (data) {
-       *      console.log(data);
+       *
+       * // Promise form
+       * widget.on('chargeAuthReject').then((data) => {
+       *   console.log(data);
        * });
-       * @param {string} eventName - Available event names [EVENT]{@link EVENT} [STANDALONE_3DS_EVENT]{@link STANDALONE_3DS_EVENT}
-       * @param {listener} [cb]
-       * @return {Promise<IEventData> | void}
+       *
+       * @param eventName - Event name from {@link Canvas3dsEventMap} or any string for dynamic events.
+       * @param cb - Optional listener callback. If omitted, returns a Promise that resolves on the next emission.
+       * @returns `void` when a callback is provided; otherwise a Promise that resolves with the event payload.
        */
+      // biome-ignore lint/suspicious/noExplicitAny: implementation signature must accept any payload shape to satisfy all overloads above
     }, {
       key: "on",
       value: function on(eventName, cb) {
         var _this = this;
         if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
-          if (typeof cb === 'function') return this.eventEmitter.subscribe(eventName, cb);
+          if (typeof cb === 'function') {
+            return this.eventEmitter.subscribe(eventName, cb);
+          }
           return new Promise(function (resolve) {
             return _this.eventEmitter.subscribe(eventName, function (res) {
               return resolve(res);
             });
           });
         } else {
-          if (typeof cb === 'function') return this.event.on(eventName, this.link.getParams().ref_id, cb);
+          if (typeof cb === 'function') {
+            return this.event.on(eventName, this.link.getParams().ref_id, cb);
+          }
           return new Promise(function (resolve) {
             return _this.event.on(eventName, _this.link.getParams().ref_id, function (res) {
               return resolve(res);
@@ -5704,6 +5773,19 @@
     }]);
   }();
 
+  /**
+   * Public, tree-shakeable alias for the internal `TOKEN_FORMAT` enum in canvas-3ds.ts.
+   * Mirrors the string values of that enum without exposing the private enum itself.
+   */
+  var Canvas3dsTokenFormat = {
+    /** Token whose `content` is a complete HTML page. The SDK renders it inside an iframe. */
+    HTML: 'html',
+    /** Token whose `content` is a URL. The SDK loads it inside an iframe. */
+    URL: 'url',
+    /** Token whose `content` describes a standalone 3DS service (e.g. GPayments). The SDK delegates to that service's flow. */
+    STANDALONE_3DS: 'standalone_3ds'
+  };
+
   var Spinner = /*#__PURE__*/function () {
     function Spinner() {
       _classCallCheck(this, Spinner);
@@ -12789,28 +12871,59 @@
     }
   }
 
+  /**
+   * Top-level classification of an error. Used by the SDK to route errors to the
+   * right category in instrumentation and to give consumers a coarse-grained
+   * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+   * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+   */
   var ERROR_CATEGORY = {
+    /** SDK was misconfigured (missing keys, invalid options, etc.). */
     CONFIGURATION: 'configuration',
+    /** Authentication or authorization failure. */
     IDENTITY: 'identity_access_management',
+    /** SDK internal failure or upstream service problem. */
     INTERNAL: 'internal',
+    /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
     PROCESS: 'process',
+    /** Resource lookup failed or was rate-limited. */
     RESOURCE: 'resource',
+    /** Invalid input or business-rule validation failure. */
     VALIDATION: 'validation'
   };
+  /**
+   * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+   * useful for deciding programmatic responses (e.g. show a retry button only
+   * when `cause` is `'service_unreachable'` or `'server_busy'`).
+   */
   var ERROR_CAUSE = {
+    /** Operation was aborted programmatically. */
     ABORTED: 'aborted',
+    /** Caller has insufficient permissions for the operation. */
     ACCESS_FORBIDDEN: 'access_forbidden',
+    /** Resource already exists when create was expected. */
     ALREADY_EXISTS: 'already_exists',
+    /** User cancelled the flow (e.g. closed the wallet sheet). */
     CANCELED: 'canceled',
+    /** SDK was instantiated or invoked with invalid configuration. */
     INVALID_CONFIGURATION: 'invalid_configuration',
+    /** Input failed structural or business-rule validation. */
     INVALID_INPUT: 'invalid_input',
+    /** Resource was not found by the backend. */
     NOT_FOUND: 'not_found',
+    /** Operation is not supported in the current context or version. */
     NOT_IMPLEMENTED: 'not_implemented',
+    /** Caller exceeded the allowed request rate. */
     RATE_LIMITED: 'rate_limited',
+    /** Backend is healthy but currently overloaded — typically retryable. */
     SERVER_BUSY: 'server_busy',
+    /** Backend or third-party service could not be reached — typically retryable. */
     SERVICE_UNREACHABLE: 'service_unreachable',
+    /** Caller is not authenticated. */
     UNAUTHORIZED: 'unauthorized',
+    /** Catch-all when no other cause applies. */
     UNKNOWN: 'unknown_error',
+    /** Request was syntactically valid but semantically rejected. */
     UNPROCESSABLE_ENTITY: 'unprocessable_entity'
   };
   var EventError = /*#__PURE__*/function (_Error) {
@@ -14870,7 +14983,6 @@
         });
         canvas.on('chargeAuthReject', function () {
           var _a;
-          // **TODO add interface for chargeAuthReject event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
@@ -14887,13 +14999,13 @@
         });
         canvas.on('error', function (event) {
           var _a;
-          // **TODO add interface for error event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+          var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
             payload: {
               status: 'error',
-              message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+              message: message
             }
           }).then(function () {
             return console.info('callback.child_widget.status: - errorEvent');
@@ -17261,7 +17373,6 @@
         });
         canvas.on('chargeAuthReject', function () {
           var _a;
-          // **TODO add interface for chargeAuthReject event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
@@ -17278,13 +17389,13 @@
         });
         canvas.on('error', function (event) {
           var _a;
-          // **TODO add interface for error event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+          var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
             payload: {
               status: 'error',
-              message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+              message: message
             }
           }).then(function () {
             return console.info('callback.child_widget.status: - errorEvent');
@@ -18651,10 +18762,16 @@
     }
   }
 
+  /** Event name emitted when a checkout payment completes successfully. */
+  var PAYMENT_SUCCESSFUL = 'paymentSuccessful';
+  /** Event name emitted when a checkout payment fails. */
+  var PAYMENT_FAILURE = 'paymentFailure';
+  /** Event name emitted when a checkout session expires. */
+  var PAYMENT_EXPIRED = 'paymentExpired';
   var EVENT$2 = {
-    PAYMENT_SUCCESSFUL: 'paymentSuccessful',
-    PAYMENT_FAILURE: 'paymentFailure',
-    PAYMENT_EXPIRED: 'paymentExpired'
+    PAYMENT_SUCCESSFUL: PAYMENT_SUCCESSFUL,
+    PAYMENT_FAILURE: PAYMENT_FAILURE,
+    PAYMENT_EXPIRED: PAYMENT_EXPIRED
   };
   /**
    * Class CheckoutButton transform usual button into checkout
@@ -18679,7 +18796,7 @@
       this.checkoutFinished = false;
       try {
         this.eventEmitter = new EventEmitter();
-        this.intentTokenPayload = this.extractIntentTokenPayload(intentToken);
+        this.intentTokenPayload = this.extractCheckoutIntentTokenPayload(intentToken);
         this.checkoutVersionHandler = getCheckoutVersionHandler(this.intentTokenPayload.version);
         this.instructions = this.initContractVersion();
         this.api = new ApiInternal(this.intentToken, API_AUTH_TYPE.TOKEN);
@@ -18740,8 +18857,8 @@
         }, 14 * 60 * 1000 + 45 * 1000);
       }
     }, {
-      key: "extractIntentTokenPayload",
-      value: function extractIntentTokenPayload(intentToken) {
+      key: "extractCheckoutIntentTokenPayload",
+      value: function extractCheckoutIntentTokenPayload(intentToken) {
         var tokenContent = AccessToken.validateJWT(intentToken);
         if (!tokenContent) {
           throw new Error('Intent token is broken or expired. Please, issue new one.');
@@ -18769,7 +18886,7 @@
       value: function ready() {
         var _this3 = this;
         this.changeLoadingSpinnerVisibility(true);
-        // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+        // biome-ignore lint/suspicious/noExplicitAny: checkoutApi.status returns a dynamic shape whose fields are narrowed at the call-sites below
         this.checkoutApi.status(this.intentTokenPayload.intent_id).then(function (response) {
           if (!(response === null || response === void 0 ? void 0 : response.status)) {
             throw new Error('Checkout Intent Status structure inconsistent');
@@ -18878,8 +18995,8 @@
        * Important: Do not perform thread blocking operations in callback such as window.alert() calls.
        *
        * @example
-       * widget.onPaymentInReview((data) => {
-       *      console.log('Payment in fraud review');
+       * widget.onPaymentExpired((data) => {
+       *      console.log('Payment session expired');
        * });
        */
     }, {
@@ -19000,6 +19117,7 @@
     function OpenWalletButtons(selector, publicKeyOrAccessToken, serviceId, meta) {
       _classCallCheck(this, OpenWalletButtons);
       this.env = DEFAULT_ENV;
+      this.isDisabled = false;
       this.onShippingOptionsChangeHandlerRegistered = false;
       // Runtime guard: TypeScript's `abstract` keyword exists only at compile time.
       // Without this check, instantiating the base class directly silently fails
@@ -19144,6 +19262,68 @@
           _this.handleOnError(error instanceof Error ? error : new Error(String(error)), exports.ERROR_OPERATION.CONFIGURATION);
         });
       }
+      /**
+       * Enables the wallet button, restoring interactivity and visual appearance.
+       * If the button was previously disabled via `disable()`, calling this method
+       * re-enables clicks and removes the disabled visual state.
+       *
+       * Idempotent — calling on an already-enabled button has no effect.
+       *
+       * @example
+       * button.enable();
+       */
+    }, {
+      key: "enable",
+      value: function enable() {
+        this.isDisabled = false;
+        this.applyDisabledStyles();
+      }
+      /**
+       * Disables the wallet button, preventing clicks and applying a visual disabled state.
+       * When disabled, the button appears grayed out (`opacity: 0.5`) and does not
+       * respond to user interaction (`pointer-events: none`). For accessibility, the
+       * `aria-disabled="true"` attribute is also set on the container.
+       *
+       * Programmatic clicks (e.g. invoked by the wallet provider's SDK) are blocked
+       * by an explicit guard inside the click handler — the button's wallet service
+       * checks the disabled state before processing.
+       *
+       * Idempotent — calling on an already-disabled button has no effect.
+       * Safe to call before `load()` (no-throw); the styles are applied once the
+       * container element exists.
+       *
+       * @example
+       * button.disable();
+       */
+    }, {
+      key: "disable",
+      value: function disable() {
+        this.isDisabled = true;
+        this.applyDisabledStyles();
+      }
+      /**
+       * Applies the disabled / enabled visual state to the container element.
+       * Reads `this.isDisabled` and toggles the corresponding CSS + ARIA attributes.
+       *
+       * @private
+       */
+    }, {
+      key: "applyDisabledStyles",
+      value: function applyDisabledStyles() {
+        var element = this.container.getElement();
+        if (!element) {
+          return;
+        }
+        if (this.isDisabled) {
+          element.style.pointerEvents = 'none';
+          element.style.opacity = '0.5';
+          element.setAttribute('aria-disabled', 'true');
+        } else {
+          element.style.pointerEvents = '';
+          element.style.opacity = '';
+          element.removeAttribute('aria-disabled');
+        }
+      }
       /**
        * Current method can change environment. By default environment = sandbox.
        * Also we can change domain alias for this environment. By default domain_alias = paydock.com
@@ -19633,7 +19813,9 @@
    * Returns `undefined` if the resulting object has no remaining properties.
    */
   function stripEmpty(obj) {
-    if (!obj || _typeof$1(obj) !== 'object') return undefined;
+    if (!obj || _typeof$1(obj) !== 'object') {
+      return undefined;
+    }
     var result = {};
     for (var _i = 0, _Object$entries = Object.entries(obj); _i < _Object$entries.length; _i++) {
       var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
@@ -19682,13 +19864,30 @@
       this.serviceGroup = SERVICE_GROUP.WALLET;
     }
     /**
-     * Creates a One-Time Token (OTT) by sending the payment data to the API.
-     * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+     * Returns whether the wallet button is currently disabled.
+     * Reads the `aria-disabled` attribute from the container element — set by the
+     * button class via {@link OpenWalletButtons.disable} / {@link OpenWalletButtons.enable}.
      *
-     * @param data - The payment data including amount, shipping, billing, card info, and ref token.
-     * @returns A promise resolving to the OTT response.
+     * Used to short-circuit click handlers in concrete wallet services for clicks
+     * that bypass the DOM `pointer-events: none` guard (e.g. invoked by the wallet
+     * provider's SDK callback).
+     *
+     * @returns `true` if the container is marked as disabled, `false` otherwise.
      */
     return _createClass(OpenWalletService, [{
+      key: "isButtonDisabled",
+      value: function isButtonDisabled() {
+        var element = this.container.getElement();
+        return (element === null || element === void 0 ? void 0 : element.getAttribute('aria-disabled')) === 'true';
+      }
+      /**
+       * Creates a One-Time Token (OTT) by sending the payment data to the API.
+       * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+       *
+       * @param data - The payment data including amount, shipping, billing, card info, and ref token.
+       * @returns A promise resolving to the OTT response.
+       */
+    }, {
       key: "createOTT",
       value: function createOTT(data) {
         var _this = this;
@@ -20209,6 +20408,9 @@
       key: "onApplePayButtonClicked",
       value: function onApplePayButtonClicked() {
         var _this7 = this;
+        if (this.isButtonDisabled()) {
+          return;
+        }
         var applePayApiVersion = getSupportedApplePayVersion();
         if (applePayApiVersion === 0) {
           this.handleOnUnavailable('Apple Pay version not supported');
@@ -20959,6 +21161,9 @@
       key: "onGooglePayButtonClicked",
       value: function onGooglePayButtonClicked() {
         var _this5 = this;
+        if (this.isButtonDisabled()) {
+          return;
+        }
         if (this.processingButtonClick) {
           console.warn('Google Pay button clicked while processing.');
           return;
@@ -44485,8 +44690,11 @@
   exports.Api = Api;
   exports.ApplePayOpenWalletButton = ApplePayOpenWalletButton;
   exports.ApplePayWalletButtonExpress = ApplePayWalletButtonExpress;
+  exports.CANVAS_3DS_EVENT = CANVAS_3DS_EVENT;
   exports.CHECKOUT_BUTTON_EVENT = CHECKOUT_BUTTON_EVENT;
+  exports.CHECKOUT_EVENT = EVENT$2;
   exports.Canvas3ds = Canvas3ds;
+  exports.Canvas3dsTokenFormat = Canvas3dsTokenFormat;
   exports.Checkout = Checkout;
   exports.ClickToPay = ClickToPay;
   exports.Configuration = Configuration;
@@ -44503,6 +44711,9 @@
   exports.HtmlWidget = HtmlWidget;
   exports.InstructionDebugger = InstructionDebugger;
   exports.MultiWidget = MultiWidget;
+  exports.PAYMENT_EXPIRED = PAYMENT_EXPIRED;
+  exports.PAYMENT_FAILURE = PAYMENT_FAILURE;
+  exports.PAYMENT_SUCCESSFUL = PAYMENT_SUCCESSFUL;
   exports.PAYMENT_TYPE = PAYMENT_TYPE;
   exports.PayPalDataCollector = PayPalDataCollector;
   exports.PayPalSavePaymentSourceWidget = PayPalSavePaymentSourceWidget;