@paydock/client-sdk 1.143.0-beta → 1.144.0-beta

package/bundles/index.mjs

@@ -1192,7 +1192,7 @@ SDK.headerKeys = Object.freeze({
   version: 'x-sdk-version',
   type: 'x-sdk-type'
 });
-SDK._version = 'v1.143.0-beta';
+SDK._version = 'v1.144.0-beta';
 
 function isFunction(value) {
     return typeof value === 'function';
@@ -4802,127 +4802,162 @@ var Api = /*#__PURE__*/function (_ApiBase) {
   }]);
 }(ApiBase);
 
-var Url = /*#__PURE__*/function () {
-  function Url() {
-    _classCallCheck(this, Url);
+var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
+var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
+var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
+var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
+var ApiChargeInternal = /*#__PURE__*/function () {
+  function ApiChargeInternal(api) {
+    _classCallCheck(this, ApiChargeInternal);
+    this.api = api;
   }
-  return _createClass(Url, null, [{
-    key: "extendSearchParams",
-    value: function extendSearchParams(uri, key, val) {
-      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
+  return _createClass(ApiChargeInternal, [{
+    key: "walletCapture",
+    value: function walletCapture(payload) {
+      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
     }
   }, {
-    key: "serialize",
-    value: function serialize(params) {
-      return Object.keys(params).map(function (key) {
-        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
-      }).join('&');
+    key: "walletCallback",
+    value: function walletCallback(payload) {
+      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsProcess",
+    value: function standalone3dsProcess(payload) {
+      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsHandle",
+    value: function standalone3dsHandle() {
+      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
     }
   }]);
 }();
 
-var Uuid = /*#__PURE__*/function () {
-  function Uuid() {
-    _classCallCheck(this, Uuid);
+var CALLBACK_LINK = '/v1/checkouts/callback';
+var INSTRUCTION_LINK = '/v1/checkouts/instruction';
+var STATUS_LINK = '/v1/checkouts';
+var ApiCheckoutInternal = /*#__PURE__*/function () {
+  function ApiCheckoutInternal(api) {
+    _classCallCheck(this, ApiCheckoutInternal);
+    this.api = api;
+    this.getInstructionLink = function () {
+      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
+    };
   }
-  return _createClass(Uuid, null, [{
-    key: "generate",
-    value: function generate() {
-      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
-        var buf = new Uint16Array(8);
-        window.crypto.getRandomValues(buf);
-        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
-      } else {
-        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
-      }
+  return _createClass(ApiCheckoutInternal, [{
+    key: "instructions",
+    value: function instructions() {
+      return this.api.requestObservable('GET', this.getInstructionLink(), {});
     }
   }, {
-    key: "hash",
-    value: function hash(number) {
-      var hash = number.toString(16);
-      while (hash.length < 4) {
-        hash = "0" + hash;
-      }
-      return hash;
+    key: "callback",
+    value: function callback(payload) {
+      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
     }
   }, {
-    key: "random",
-    value: function random() {
-      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
+    key: "status",
+    value: function status(id) {
+      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
     }
   }]);
 }();
 
-var WIDGET_LINK = '/remote-action';
-var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
-var PAYMENT_SOURCE_LINK = '/payment-sources';
-var SECURE_3D = '/3ds/webhook';
-var FLYPAY_LINK = '/wallet/flypay';
-var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
-var MESSAGE_WIDGET_LINK = '/message-widget';
-var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
-var Link = /*#__PURE__*/function () {
-  function Link(linkResource) {
-    _classCallCheck(this, Link);
-    this.params = {};
-    this.widgetId = Uuid.generate();
-    this.linkResource = linkResource;
-    this.env = new Env(WIDGET_URL);
-    this.setParams({
-      widget_id: this.widgetId
-    });
+var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
+var ApiGatewayInternal = /*#__PURE__*/function () {
+  function ApiGatewayInternal(api) {
+    _classCallCheck(this, ApiGatewayInternal);
+    this.api = api;
   }
-  return _createClass(Link, [{
-    key: "getNetUrl",
-    value: function getNetUrl() {
-      return this.env.getConf().url + this.linkResource;
+  return _createClass(ApiGatewayInternal, [{
+    key: "getWalletConfig",
+    value: function getWalletConfig(gateway_id) {
+      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
     }
-  }, {
-    key: "getUrl",
-    value: function getUrl() {
-      var url = this.getNetUrl();
-      var params = this.getParams();
-      for (var key in params) {
-        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
-      }
-      return url;
+  }]);
+}();
+
+var CREATE_OTT = '/v1/payment_sources/tokens';
+var CREATE_SESSION = '/v1/payment_sources/payment-session';
+var ApiPaymentSourceInternal = /*#__PURE__*/function () {
+  function ApiPaymentSourceInternal(api) {
+    _classCallCheck(this, ApiPaymentSourceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiPaymentSourceInternal, [{
+    key: "createOTT",
+    value: function createOTT(payload) {
+      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
     }
   }, {
-    key: "setParams",
-    value: function setParams(params) {
-      this.params = _extends({}, this.params, params);
+    key: "createSession",
+    value: function createSession(payload) {
+      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
     }
-  }, {
-    key: "concatParams",
-    value: function concatParams(params) {
-      for (var key in params) {
-        if (!params.hasOwnProperty(key) || !params[key].length) continue;
-        if (typeof this.params[key] !== 'string') this.params[key] = '';
-        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
-      }
+  }]);
+}();
+
+var GET_CONFIG = '/v1/services/:service_id/config';
+var ApiServiceInternal = /*#__PURE__*/function () {
+  function ApiServiceInternal(api) {
+    _classCallCheck(this, ApiServiceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiServiceInternal, [{
+    key: "getConfig",
+    value: function getConfig(service_id) {
+      var url = GET_CONFIG.replace(':service_id', service_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
+    }
+  }]);
+}();
+var SERVICE_TYPES;
+(function (SERVICE_TYPES) {
+  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
+  SERVICE_TYPES["BOOKING"] = "Booking";
+  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
+  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
+  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
+  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
+  SERVICE_TYPES["FORTER"] = "Forter";
+  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
+  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
+})(SERVICE_TYPES || (SERVICE_TYPES = {}));
+
+var ApiInternal = /*#__PURE__*/function (_ApiBase) {
+  function ApiInternal() {
+    _classCallCheck(this, ApiInternal);
+    return _callSuper(this, ApiInternal, arguments);
+  }
+  _inherits(ApiInternal, _ApiBase);
+  return _createClass(ApiInternal, [{
+    key: "charge",
+    value: function charge() {
+      return new ApiChargeInternal(this);
     }
   }, {
-    key: "getParams",
-    value: function getParams() {
-      return this.params;
+    key: "service",
+    value: function service() {
+      return new ApiServiceInternal(this);
     }
   }, {
-    key: "setEnv",
-    value: function setEnv(env, alias) {
-      this.env.setEnv(env, alias);
+    key: "checkout",
+    value: function checkout() {
+      return new ApiCheckoutInternal(this);
     }
   }, {
-    key: "getEnv",
-    value: function getEnv() {
-      return this.env.getEnv();
+    key: "gateway",
+    value: function gateway() {
+      return new ApiGatewayInternal(this);
     }
   }, {
-    key: "getBaseUrl",
-    value: function getBaseUrl() {
-      return this.env.getConf().url;
+    key: "paymentSource",
+    value: function paymentSource() {
+      return new ApiPaymentSourceInternal(this);
     }
   }]);
-}();
+}(ApiBase);
 
 var IFrame = /*#__PURE__*/function () {
   function IFrame(container) {
@@ -5119,10 +5154,10 @@ var IFrameEvent = /*#__PURE__*/function () {
 }();
 
 var hiddenStyle = {
-  visibility: "hidden",
-  border: "0",
-  width: "0",
-  height: "0"
+  visibility: 'hidden',
+  border: '0',
+  width: '0',
+  height: '0'
 };
 var PROCESS_STANDALONE_3DS_STATUS;
 (function (PROCESS_STANDALONE_3DS_STATUS) {
@@ -5144,14 +5179,30 @@ var IFRAME_STATUS;
   IFRAME_STATUS["TIMEOUT"] = "AuthTimedOut";
   IFRAME_STATUS["INVALID"] = "invalid_event";
 })(IFRAME_STATUS || (IFRAME_STATUS = {}));
+/**
+ * Event name constants emitted during the Standalone 3DS (GPayments) flow.
+ * Used internally by `GPaymentsService` and re-exported publicly as `CANVAS_3DS_EVENT`.
+ */
 var GPAYMENTS_EVENT = {
+  /** Authentication succeeded. Payload: `Canvas3dsAuthPayload`. */
   AUTH_SUCCESS: 'chargeAuthSuccess',
+  /** Authentication failed — covers issuer rejection, iframe timeout (`AuthTimedOut`), and invalid-event outcomes. Payload: `Canvas3dsAuthPayload`. */
   AUTH_ERROR: 'chargeAuthReject',
+  /** Decoupled authentication — issuer will authenticate out-of-band. Payload: `Canvas3dsAuthPayload`. */
   DECOUPLED: 'chargeAuthDecoupled',
+  /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
   CHALLENGE: 'chargeAuthChallenge',
+  /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
   INFO: 'chargeAuthInfo',
+  /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
   ERROR: 'error'
 };
+/**
+ * Public alias for GPAYMENTS_EVENT. Same object reference — no behavioral change.
+ * Prefer `CANVAS_3DS_EVENT` in public-facing code; `GPAYMENTS_EVENT` remains for
+ * backwards-compatible internal usage.
+ */
+var CANVAS_3DS_EVENT = GPAYMENTS_EVENT;
 var GPaymentsService = /*#__PURE__*/function () {
   function GPaymentsService(container, api, eventEmitter) {
     _classCallCheck(this, GPaymentsService);
@@ -5179,20 +5230,22 @@ var GPaymentsService = /*#__PURE__*/function () {
     value: function initializeIFrames(initializationUrl, secondaryUrl, title) {
       var hideAuthorization = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
       var container = this.container.getElement();
-      if (!container) return;
-      var divAuthorization = document.createElement("div");
-      divAuthorization.setAttribute("id", "paydock_authorization_iframe");
+      if (!container) {
+        return;
+      }
+      var divAuthorization = document.createElement('div');
+      divAuthorization.setAttribute('id', 'paydock_authorization_iframe');
       container.appendChild(divAuthorization);
-      this.browserAndChallengeContainer = new Container("#paydock_authorization_iframe");
+      this.browserAndChallengeContainer = new Container('#paydock_authorization_iframe');
       this.iFrameAuthorization = new IFrame(this.browserAndChallengeContainer);
       this.iFrameAuthorization.load(initializationUrl, {
         title: title
       });
       if (secondaryUrl) {
-        var divSecondaryURL = document.createElement("div");
-        divSecondaryURL.setAttribute("id", "paydock_secondary_iframe");
+        var divSecondaryURL = document.createElement('div');
+        divSecondaryURL.setAttribute('id', 'paydock_secondary_iframe');
         container.appendChild(divSecondaryURL);
-        this.monitoringContainer = new Container("#paydock_secondary_iframe");
+        this.monitoringContainer = new Container('#paydock_secondary_iframe');
         this.iFrameSecondaryUrl = new IFrame(this.monitoringContainer);
         this.iFrameSecondaryUrl.load(secondaryUrl, {
           title: title
@@ -5208,8 +5261,12 @@ var GPaymentsService = /*#__PURE__*/function () {
       var hideAuthorization = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
       var _a;
       for (var prop in hiddenStyle) {
-        if (!hiddenStyle.hasOwnProperty(prop)) continue;
-        if (hideAuthorization) this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        if (!Object.hasOwn(hiddenStyle, prop)) {
+          continue;
+        }
+        if (hideAuthorization) {
+          this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        }
         (_a = this.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.setStyle(prop, hiddenStyle[prop]);
       }
     }
@@ -5219,13 +5276,17 @@ var GPaymentsService = /*#__PURE__*/function () {
       var _this = this;
       this.iFrameEvent.on(EVENT$5.CHARGE_AUTH, widgetId, function (data) {
         if (data.status === IFRAME_STATUS.SKIPPED || data.status === IFRAME_STATUS.FINISHED) {
-          if (data.info) _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
-            info: data.info
-          });
+          if (data.info) {
+            _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
+              info: data.info
+            });
+          }
           _this.performAuthentication(data);
-        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
-          status: data.status
-        }, data.charge_3ds_id));
+        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) {
+          _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
+            status: data.status
+          }, data.charge_3ds_id));
+        }
       });
       this.iFrameEvent.on(EVENT$5.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
         _this.processResult(data.charge_3ds_id);
@@ -5265,13 +5326,19 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "processResult",
     value: function processResult(charge3dsId) {
       var _this2 = this;
-      if (this.resultRead) return;
+      if (this.resultRead) {
+        return;
+      }
       this.resultRead = true;
       this.api.charge().standalone3dsHandle().then(function (result) {
         var _a;
         _this2.iFrameAuthorization.remove();
         (_a = _this2.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.remove();
-        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));else _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));
+        } else {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        }
       }, function (err) {
         _this2.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this2.parseError(err, charge3dsId));
       });
@@ -5296,10 +5363,16 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "doPolling",
     value: function doPolling(url, charge3dsId) {
       var _this3 = this;
-      this.externalAPI("GET", url).then(function (data) {
-        if (!data.event || data.event === "AuthResultNotReady") setTimeout(function () {
-          _this3.doPolling(url, charge3dsId);
-        }, 2000);else if (data.event === 'AuthResultReady') _this3.processResult(charge3dsId);else throw new Error("Event not supported");
+      this.externalAPI('GET', url).then(function (data) {
+        if (!data.event || data.event === 'AuthResultNotReady') {
+          setTimeout(function () {
+            _this3.doPolling(url, charge3dsId);
+          }, 2000);
+        } else if (data.event === 'AuthResultReady') {
+          _this3.processResult(charge3dsId);
+        } else {
+          throw new Error('Event not supported');
+        }
       })["catch"](function (err) {
         return _this3.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this3.parseError(err, charge3dsId));
       });
@@ -5316,16 +5389,24 @@ var GPaymentsService = /*#__PURE__*/function () {
         charge_3ds_id: charge_3ds_id
       }).then(function (authenticationResult) {
         var _a, _b;
-        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
+        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) {
+          _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
           if ((_a = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _a === void 0 ? void 0 : _a.challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.CHALLENGE, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
             _this4.initializeIFrames(authenticationResult.result.challenge_url, undefined, 'Authentication Challenge', false);
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           } else if ((_b = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _b === void 0 ? void 0 : _b.decoupled_challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.DECOUPLED, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           }
-        } else return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else {
+          return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        }
       }, function (err) {
         _this4.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this4.parseError(err, charge_3ds_id));
       });
@@ -5333,192 +5414,159 @@ var GPaymentsService = /*#__PURE__*/function () {
   }]);
 }();
 
-var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
-var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
-var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
-var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
-var ApiChargeInternal = /*#__PURE__*/function () {
-  function ApiChargeInternal(api) {
-    _classCallCheck(this, ApiChargeInternal);
-    this.api = api;
+var STANDALONE_3DS_GATEWAYS = {
+  GPAYMENTS: 'GPayments'
+};
+var Standalone3dsService = /*#__PURE__*/function () {
+  function Standalone3dsService(container, eventEmitter) {
+    _classCallCheck(this, Standalone3dsService);
+    this.env = DEFAULT_ENV;
+    this.container = container;
+    this.eventEmitter = eventEmitter;
   }
-  return _createClass(ApiChargeInternal, [{
-    key: "walletCapture",
-    value: function walletCapture(payload) {
-      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
-    }
-  }, {
-    key: "walletCallback",
-    value: function walletCallback(payload) {
-      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
-    }
-  }, {
-    key: "standalone3dsProcess",
-    value: function standalone3dsProcess(payload) {
-      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+  return _createClass(Standalone3dsService, [{
+    key: "load",
+    value: function load(token, options) {
+      var parsedToken = AccessToken.validateJWT(token);
+      if (!parsedToken) {
+        throw new Error('Invalid charge token');
+      }
+      var tokenData = AccessToken.extractData(parsedToken.body);
+      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
+      api.setEnv(this.env, this.alias);
+      switch (tokenData.service_type) {
+        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
+          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
+          break;
+      }
     }
   }, {
-    key: "standalone3dsHandle",
-    value: function standalone3dsHandle() {
-      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
+    key: "setEnv",
+    value: function setEnv(env, alias) {
+      this.env = env;
+      this.alias = alias;
     }
   }]);
 }();
 
-var CALLBACK_LINK = '/v1/checkouts/callback';
-var INSTRUCTION_LINK = '/v1/checkouts/instruction';
-var STATUS_LINK = '/v1/checkouts';
-var ApiCheckoutInternal = /*#__PURE__*/function () {
-  function ApiCheckoutInternal(api) {
-    _classCallCheck(this, ApiCheckoutInternal);
-    this.api = api;
-    this.getInstructionLink = function () {
-      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
-    };
+var Url = /*#__PURE__*/function () {
+  function Url() {
+    _classCallCheck(this, Url);
   }
-  return _createClass(ApiCheckoutInternal, [{
-    key: "instructions",
-    value: function instructions() {
-      return this.api.requestObservable('GET', this.getInstructionLink(), {});
-    }
-  }, {
-    key: "callback",
-    value: function callback(payload) {
-      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
+  return _createClass(Url, null, [{
+    key: "extendSearchParams",
+    value: function extendSearchParams(uri, key, val) {
+      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
     }
   }, {
-    key: "status",
-    value: function status(id) {
-      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
-    }
-  }]);
-}();
-
-var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
-var ApiGatewayInternal = /*#__PURE__*/function () {
-  function ApiGatewayInternal(api) {
-    _classCallCheck(this, ApiGatewayInternal);
-    this.api = api;
-  }
-  return _createClass(ApiGatewayInternal, [{
-    key: "getWalletConfig",
-    value: function getWalletConfig(gateway_id) {
-      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+    key: "serialize",
+    value: function serialize(params) {
+      return Object.keys(params).map(function (key) {
+        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
+      }).join('&');
     }
   }]);
 }();
 
-var CREATE_OTT = '/v1/payment_sources/tokens';
-var CREATE_SESSION = '/v1/payment_sources/payment-session';
-var ApiPaymentSourceInternal = /*#__PURE__*/function () {
-  function ApiPaymentSourceInternal(api) {
-    _classCallCheck(this, ApiPaymentSourceInternal);
-    this.api = api;
+var Uuid = /*#__PURE__*/function () {
+  function Uuid() {
+    _classCallCheck(this, Uuid);
   }
-  return _createClass(ApiPaymentSourceInternal, [{
-    key: "createOTT",
-    value: function createOTT(payload) {
-      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
+  return _createClass(Uuid, null, [{
+    key: "generate",
+    value: function generate() {
+      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
+        var buf = new Uint16Array(8);
+        window.crypto.getRandomValues(buf);
+        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
+      } else {
+        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
+      }
     }
   }, {
-    key: "createSession",
-    value: function createSession(payload) {
-      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
+    key: "hash",
+    value: function hash(number) {
+      var hash = number.toString(16);
+      while (hash.length < 4) {
+        hash = "0" + hash;
+      }
+      return hash;
     }
-  }]);
-}();
-
-var GET_CONFIG = '/v1/services/:service_id/config';
-var ApiServiceInternal = /*#__PURE__*/function () {
-  function ApiServiceInternal(api) {
-    _classCallCheck(this, ApiServiceInternal);
-    this.api = api;
-  }
-  return _createClass(ApiServiceInternal, [{
-    key: "getConfig",
-    value: function getConfig(service_id) {
-      var url = GET_CONFIG.replace(':service_id', service_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+  }, {
+    key: "random",
+    value: function random() {
+      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
     }
   }]);
 }();
-var SERVICE_TYPES;
-(function (SERVICE_TYPES) {
-  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
-  SERVICE_TYPES["BOOKING"] = "Booking";
-  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
-  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
-  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
-  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
-  SERVICE_TYPES["FORTER"] = "Forter";
-  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
-  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
-})(SERVICE_TYPES || (SERVICE_TYPES = {}));
 
-var ApiInternal = /*#__PURE__*/function (_ApiBase) {
-  function ApiInternal() {
-    _classCallCheck(this, ApiInternal);
-    return _callSuper(this, ApiInternal, arguments);
+var WIDGET_LINK = '/remote-action';
+var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
+var PAYMENT_SOURCE_LINK = '/payment-sources';
+var SECURE_3D = '/3ds/webhook';
+var FLYPAY_LINK = '/wallet/flypay';
+var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
+var MESSAGE_WIDGET_LINK = '/message-widget';
+var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
+var Link = /*#__PURE__*/function () {
+  function Link(linkResource) {
+    _classCallCheck(this, Link);
+    this.params = {};
+    this.widgetId = Uuid.generate();
+    this.linkResource = linkResource;
+    this.env = new Env(WIDGET_URL);
+    this.setParams({
+      widget_id: this.widgetId
+    });
   }
-  _inherits(ApiInternal, _ApiBase);
-  return _createClass(ApiInternal, [{
-    key: "charge",
-    value: function charge() {
-      return new ApiChargeInternal(this);
+  return _createClass(Link, [{
+    key: "getNetUrl",
+    value: function getNetUrl() {
+      return this.env.getConf().url + this.linkResource;
     }
   }, {
-    key: "service",
-    value: function service() {
-      return new ApiServiceInternal(this);
+    key: "getUrl",
+    value: function getUrl() {
+      var url = this.getNetUrl();
+      var params = this.getParams();
+      for (var key in params) {
+        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
+      }
+      return url;
     }
   }, {
-    key: "checkout",
-    value: function checkout() {
-      return new ApiCheckoutInternal(this);
+    key: "setParams",
+    value: function setParams(params) {
+      this.params = _extends({}, this.params, params);
     }
   }, {
-    key: "gateway",
-    value: function gateway() {
-      return new ApiGatewayInternal(this);
+    key: "concatParams",
+    value: function concatParams(params) {
+      for (var key in params) {
+        if (!params.hasOwnProperty(key) || !params[key].length) continue;
+        if (typeof this.params[key] !== 'string') this.params[key] = '';
+        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
+      }
     }
   }, {
-    key: "paymentSource",
-    value: function paymentSource() {
-      return new ApiPaymentSourceInternal(this);
-    }
-  }]);
-}(ApiBase);
-
-var STANDALONE_3DS_GATEWAYS = {
-  GPAYMENTS: "GPayments"
-};
-var Standalone3dsService = /*#__PURE__*/function () {
-  function Standalone3dsService(container, eventEmitter) {
-    _classCallCheck(this, Standalone3dsService);
-    this.env = DEFAULT_ENV;
-    this.container = container;
-    this.eventEmitter = eventEmitter;
-  }
-  return _createClass(Standalone3dsService, [{
-    key: "load",
-    value: function load(token, options) {
-      var parsedToken = AccessToken.validateJWT(token);
-      if (!parsedToken) throw new Error("Invalid charge token");
-      var tokenData = AccessToken.extractData(parsedToken.body);
-      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
-      api.setEnv(this.env, this.alias);
-      switch (tokenData.service_type) {
-        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
-          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
-          break;
-      }
+    key: "getParams",
+    value: function getParams() {
+      return this.params;
     }
   }, {
     key: "setEnv",
     value: function setEnv(env, alias) {
-      this.env = env;
-      this.alias = alias;
+      this.env.setEnv(env, alias);
+    }
+  }, {
+    key: "getEnv",
+    value: function getEnv() {
+      return this.env.getEnv();
+    }
+  }, {
+    key: "getBaseUrl",
+    value: function getBaseUrl() {
+      return this.env.getConf().url;
     }
   }]);
 }();
@@ -5558,7 +5606,7 @@ var TOKEN_FORMAT$2;
  * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
  * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
  * @param {string} ERROR=error
-*/
+ */
 /**
  * Class Canvas3ds include method for working on html
  * @constructor
@@ -5594,13 +5642,21 @@ var Canvas3ds = /*#__PURE__*/function () {
      *
      */
     function load() {
-      if (this.token.format === TOKEN_FORMAT$2.HTML) this.iFrame.loadFromHtml(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.URL) this.iFrame.load(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) this.standalone3dsService.load(this.token.content, {
-        title: '3d secure authentication'
-      });else console.error('Token contain unsupported payload');
+      if (this.token.format === TOKEN_FORMAT$2.HTML) {
+        this.iFrame.loadFromHtml(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.URL) {
+        this.iFrame.load(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
+        this.standalone3dsService.load(this.token.content, {
+          title: '3d secure authentication'
+        });
+      } else {
+        console.error('Token contain unsupported payload');
+      }
     }
     /**
      * Current method can change environment. By default environment = sandbox.
@@ -5617,7 +5673,9 @@ var Canvas3ds = /*#__PURE__*/function () {
       this.link.setEnv(env, alias);
       this.standalone3dsService.setEnv(env, alias);
       for (var index in this.configs) {
-        if (!this.configs.hasOwnProperty(index)) continue;
+        if (!Object.hasOwn(this.configs, index)) {
+          continue;
+        }
         this.configs[index].setEnv(env, alias);
       }
     }
@@ -5627,34 +5685,45 @@ var Canvas3ds = /*#__PURE__*/function () {
       return this.link.getEnv();
     }
     /**
-     * Listen to events of widget
+     * Listen to events of widget.
      *
-     * @example
+     * Available event names are defined in {@link Canvas3dsEventMap} (typed) and
+     * {@link CANVAS_3DS_EVENT} (string constants). Using a literal event name
+     * narrows the callback payload via the typed overloads.
      *
-     * widget.on('chargeAuthReject', function (data) {
-     *      console.log(data);
+     * @example
+     * // Callback form — payload is narrowed by the event name
+     * widget.on('chargeAuthReject', (data) => {
+     *   console.log(data); // data is Canvas3dsAuthPayload | Canvas3dsChargeAuthEventPayload
      * });
-     * // or
-     * widget.on('chargeAuthReject').then(function (data) {
-     *      console.log(data);
+     *
+     * // Promise form
+     * widget.on('chargeAuthReject').then((data) => {
+     *   console.log(data);
      * });
-     * @param {string} eventName - Available event names [EVENT]{@link EVENT} [STANDALONE_3DS_EVENT]{@link STANDALONE_3DS_EVENT}
-     * @param {listener} [cb]
-     * @return {Promise<IEventData> | void}
+     *
+     * @param eventName - Event name from {@link Canvas3dsEventMap} or any string for dynamic events.
+     * @param cb - Optional listener callback. If omitted, returns a Promise that resolves on the next emission.
+     * @returns `void` when a callback is provided; otherwise a Promise that resolves with the event payload.
      */
+    // biome-ignore lint/suspicious/noExplicitAny: implementation signature must accept any payload shape to satisfy all overloads above
   }, {
     key: "on",
     value: function on(eventName, cb) {
       var _this = this;
       if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
-        if (typeof cb === 'function') return this.eventEmitter.subscribe(eventName, cb);
+        if (typeof cb === 'function') {
+          return this.eventEmitter.subscribe(eventName, cb);
+        }
         return new Promise(function (resolve) {
           return _this.eventEmitter.subscribe(eventName, function (res) {
             return resolve(res);
           });
         });
       } else {
-        if (typeof cb === 'function') return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        if (typeof cb === 'function') {
+          return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        }
         return new Promise(function (resolve) {
           return _this.event.on(eventName, _this.link.getParams().ref_id, function (res) {
             return resolve(res);
@@ -5698,6 +5767,19 @@ var Canvas3ds = /*#__PURE__*/function () {
   }]);
 }();
 
+/**
+ * Public, tree-shakeable alias for the internal `TOKEN_FORMAT` enum in canvas-3ds.ts.
+ * Mirrors the string values of that enum without exposing the private enum itself.
+ */
+var Canvas3dsTokenFormat = {
+  /** Token whose `content` is a complete HTML page. The SDK renders it inside an iframe. */
+  HTML: 'html',
+  /** Token whose `content` is a URL. The SDK loads it inside an iframe. */
+  URL: 'url',
+  /** Token whose `content` describes a standalone 3DS service (e.g. GPayments). The SDK delegates to that service's flow. */
+  STANDALONE_3DS: 'standalone_3ds'
+};
+
 var Spinner = /*#__PURE__*/function () {
   function Spinner() {
     _classCallCheck(this, Spinner);
@@ -12783,28 +12865,59 @@ function getHandleCvv(configuration) {
   }
 }
 
+/**
+ * Top-level classification of an error. Used by the SDK to route errors to the
+ * right category in instrumentation and to give consumers a coarse-grained
+ * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+ * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+ */
 var ERROR_CATEGORY = {
+  /** SDK was misconfigured (missing keys, invalid options, etc.). */
   CONFIGURATION: 'configuration',
+  /** Authentication or authorization failure. */
   IDENTITY: 'identity_access_management',
+  /** SDK internal failure or upstream service problem. */
   INTERNAL: 'internal',
+  /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
   PROCESS: 'process',
+  /** Resource lookup failed or was rate-limited. */
   RESOURCE: 'resource',
+  /** Invalid input or business-rule validation failure. */
   VALIDATION: 'validation'
 };
+/**
+ * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+ * useful for deciding programmatic responses (e.g. show a retry button only
+ * when `cause` is `'service_unreachable'` or `'server_busy'`).
+ */
 var ERROR_CAUSE = {
+  /** Operation was aborted programmatically. */
   ABORTED: 'aborted',
+  /** Caller has insufficient permissions for the operation. */
   ACCESS_FORBIDDEN: 'access_forbidden',
+  /** Resource already exists when create was expected. */
   ALREADY_EXISTS: 'already_exists',
+  /** User cancelled the flow (e.g. closed the wallet sheet). */
   CANCELED: 'canceled',
+  /** SDK was instantiated or invoked with invalid configuration. */
   INVALID_CONFIGURATION: 'invalid_configuration',
+  /** Input failed structural or business-rule validation. */
   INVALID_INPUT: 'invalid_input',
+  /** Resource was not found by the backend. */
   NOT_FOUND: 'not_found',
+  /** Operation is not supported in the current context or version. */
   NOT_IMPLEMENTED: 'not_implemented',
+  /** Caller exceeded the allowed request rate. */
   RATE_LIMITED: 'rate_limited',
+  /** Backend is healthy but currently overloaded — typically retryable. */
   SERVER_BUSY: 'server_busy',
+  /** Backend or third-party service could not be reached — typically retryable. */
   SERVICE_UNREACHABLE: 'service_unreachable',
+  /** Caller is not authenticated. */
   UNAUTHORIZED: 'unauthorized',
+  /** Catch-all when no other cause applies. */
   UNKNOWN: 'unknown_error',
+  /** Request was syntactically valid but semantically rejected. */
   UNPROCESSABLE_ENTITY: 'unprocessable_entity'
 };
 var EventError = /*#__PURE__*/function (_Error) {
@@ -14864,7 +14977,6 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -14881,13 +14993,13 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -17255,7 +17367,6 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -17272,13 +17383,13 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -18645,10 +18756,16 @@ function getCheckoutVersionHandler(version) {
   }
 }
 
+/** Event name emitted when a checkout payment completes successfully. */
+var PAYMENT_SUCCESSFUL = 'paymentSuccessful';
+/** Event name emitted when a checkout payment fails. */
+var PAYMENT_FAILURE = 'paymentFailure';
+/** Event name emitted when a checkout session expires. */
+var PAYMENT_EXPIRED = 'paymentExpired';
 var EVENT$3 = {
-  PAYMENT_SUCCESSFUL: 'paymentSuccessful',
-  PAYMENT_FAILURE: 'paymentFailure',
-  PAYMENT_EXPIRED: 'paymentExpired'
+  PAYMENT_SUCCESSFUL: PAYMENT_SUCCESSFUL,
+  PAYMENT_FAILURE: PAYMENT_FAILURE,
+  PAYMENT_EXPIRED: PAYMENT_EXPIRED
 };
 /**
  * Class CheckoutButton transform usual button into checkout
@@ -18673,7 +18790,7 @@ var Checkout = /*#__PURE__*/function () {
     this.checkoutFinished = false;
     try {
       this.eventEmitter = new EventEmitter();
-      this.intentTokenPayload = this.extractIntentTokenPayload(intentToken);
+      this.intentTokenPayload = this.extractCheckoutIntentTokenPayload(intentToken);
       this.checkoutVersionHandler = getCheckoutVersionHandler(this.intentTokenPayload.version);
       this.instructions = this.initContractVersion();
       this.api = new ApiInternal(this.intentToken, API_AUTH_TYPE.TOKEN);
@@ -18734,8 +18851,8 @@ var Checkout = /*#__PURE__*/function () {
       }, 14 * 60 * 1000 + 45 * 1000);
     }
   }, {
-    key: "extractIntentTokenPayload",
-    value: function extractIntentTokenPayload(intentToken) {
+    key: "extractCheckoutIntentTokenPayload",
+    value: function extractCheckoutIntentTokenPayload(intentToken) {
       var tokenContent = AccessToken.validateJWT(intentToken);
       if (!tokenContent) {
         throw new Error('Intent token is broken or expired. Please, issue new one.');
@@ -18763,7 +18880,7 @@ var Checkout = /*#__PURE__*/function () {
     value: function ready() {
       var _this3 = this;
       this.changeLoadingSpinnerVisibility(true);
-      // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+      // biome-ignore lint/suspicious/noExplicitAny: checkoutApi.status returns a dynamic shape whose fields are narrowed at the call-sites below
       this.checkoutApi.status(this.intentTokenPayload.intent_id).then(function (response) {
         if (!(response === null || response === void 0 ? void 0 : response.status)) {
           throw new Error('Checkout Intent Status structure inconsistent');
@@ -18872,8 +18989,8 @@ var Checkout = /*#__PURE__*/function () {
      * Important: Do not perform thread blocking operations in callback such as window.alert() calls.
      *
      * @example
-     * widget.onPaymentInReview((data) => {
-     *      console.log('Payment in fraud review');
+     * widget.onPaymentExpired((data) => {
+     *      console.log('Payment session expired');
      * });
      */
   }, {
@@ -18994,6 +19111,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
   function OpenWalletButtons(selector, publicKeyOrAccessToken, serviceId, meta) {
     _classCallCheck(this, OpenWalletButtons);
     this.env = DEFAULT_ENV;
+    this.isDisabled = false;
     this.onShippingOptionsChangeHandlerRegistered = false;
     // Runtime guard: TypeScript's `abstract` keyword exists only at compile time.
     // Without this check, instantiating the base class directly silently fails
@@ -19138,6 +19256,68 @@ var OpenWalletButtons = /*#__PURE__*/function () {
         _this.handleOnError(error instanceof Error ? error : new Error(String(error)), ERROR_OPERATION.CONFIGURATION);
       });
     }
+    /**
+     * Enables the wallet button, restoring interactivity and visual appearance.
+     * If the button was previously disabled via `disable()`, calling this method
+     * re-enables clicks and removes the disabled visual state.
+     *
+     * Idempotent — calling on an already-enabled button has no effect.
+     *
+     * @example
+     * button.enable();
+     */
+  }, {
+    key: "enable",
+    value: function enable() {
+      this.isDisabled = false;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Disables the wallet button, preventing clicks and applying a visual disabled state.
+     * When disabled, the button appears grayed out (`opacity: 0.5`) and does not
+     * respond to user interaction (`pointer-events: none`). For accessibility, the
+     * `aria-disabled="true"` attribute is also set on the container.
+     *
+     * Programmatic clicks (e.g. invoked by the wallet provider's SDK) are blocked
+     * by an explicit guard inside the click handler — the button's wallet service
+     * checks the disabled state before processing.
+     *
+     * Idempotent — calling on an already-disabled button has no effect.
+     * Safe to call before `load()` (no-throw); the styles are applied once the
+     * container element exists.
+     *
+     * @example
+     * button.disable();
+     */
+  }, {
+    key: "disable",
+    value: function disable() {
+      this.isDisabled = true;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Applies the disabled / enabled visual state to the container element.
+     * Reads `this.isDisabled` and toggles the corresponding CSS + ARIA attributes.
+     *
+     * @private
+     */
+  }, {
+    key: "applyDisabledStyles",
+    value: function applyDisabledStyles() {
+      var element = this.container.getElement();
+      if (!element) {
+        return;
+      }
+      if (this.isDisabled) {
+        element.style.pointerEvents = 'none';
+        element.style.opacity = '0.5';
+        element.setAttribute('aria-disabled', 'true');
+      } else {
+        element.style.pointerEvents = '';
+        element.style.opacity = '';
+        element.removeAttribute('aria-disabled');
+      }
+    }
     /**
      * Current method can change environment. By default environment = sandbox.
      * Also we can change domain alias for this environment. By default domain_alias = paydock.com
@@ -19627,7 +19807,9 @@ var SERVICE_GROUP;
  * Returns `undefined` if the resulting object has no remaining properties.
  */
 function stripEmpty(obj) {
-  if (!obj || _typeof$1(obj) !== 'object') return undefined;
+  if (!obj || _typeof$1(obj) !== 'object') {
+    return undefined;
+  }
   var result = {};
   for (var _i = 0, _Object$entries = Object.entries(obj); _i < _Object$entries.length; _i++) {
     var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
@@ -19676,13 +19858,30 @@ var OpenWalletService = /*#__PURE__*/function () {
     this.serviceGroup = SERVICE_GROUP.WALLET;
   }
   /**
-   * Creates a One-Time Token (OTT) by sending the payment data to the API.
-   * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+   * Returns whether the wallet button is currently disabled.
+   * Reads the `aria-disabled` attribute from the container element — set by the
+   * button class via {@link OpenWalletButtons.disable} / {@link OpenWalletButtons.enable}.
    *
-   * @param data - The payment data including amount, shipping, billing, card info, and ref token.
-   * @returns A promise resolving to the OTT response.
+   * Used to short-circuit click handlers in concrete wallet services for clicks
+   * that bypass the DOM `pointer-events: none` guard (e.g. invoked by the wallet
+   * provider's SDK callback).
+   *
+   * @returns `true` if the container is marked as disabled, `false` otherwise.
    */
   return _createClass(OpenWalletService, [{
+    key: "isButtonDisabled",
+    value: function isButtonDisabled() {
+      var element = this.container.getElement();
+      return (element === null || element === void 0 ? void 0 : element.getAttribute('aria-disabled')) === 'true';
+    }
+    /**
+     * Creates a One-Time Token (OTT) by sending the payment data to the API.
+     * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+     *
+     * @param data - The payment data including amount, shipping, billing, card info, and ref token.
+     * @returns A promise resolving to the OTT response.
+     */
+  }, {
     key: "createOTT",
     value: function createOTT(data) {
       var _this = this;
@@ -20203,6 +20402,9 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
     key: "onApplePayButtonClicked",
     value: function onApplePayButtonClicked() {
       var _this7 = this;
+      if (this.isButtonDisabled()) {
+        return;
+      }
       var applePayApiVersion = getSupportedApplePayVersion();
       if (applePayApiVersion === 0) {
         this.handleOnUnavailable('Apple Pay version not supported');
@@ -20953,6 +21155,9 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
     key: "onGooglePayButtonClicked",
     value: function onGooglePayButtonClicked() {
       var _this5 = this;
+      if (this.isButtonDisabled()) {
+        return;
+      }
       if (this.processingButtonClick) {
         console.warn('Google Pay button clicked while processing.');
         return;
@@ -44474,4 +44679,4 @@ var browser = /*#__PURE__*/Object.freeze({
   zlibSync: zlibSync
 });
 
-export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CHECKOUT_BUTTON_EVENT, Canvas3ds, Checkout, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$5 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
+export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CHECKOUT_BUTTON_EVENT, EVENT$3 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$5 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };