@paydock/client-sdk 1.143.0 → 1.144.1-beta

package/bundles/widget.umd.js

@@ -960,246 +960,6 @@
     }]);
   }();
 
-  var ENV = {
-    SANDBOX: 'sandbox',
-    SANDBOX_KOVENA: 'sandbox-kovena',
-    SANDBOX_DEMO: 'sandbox-demo',
-    SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
-    PROD: 'production',
-    STAGING: 'staging',
-    STAGING_1: 'staging_1',
-    STAGING_2: 'staging_2',
-    STAGING_3: 'staging_3',
-    STAGING_4: 'staging_4',
-    STAGING_5: 'staging_5',
-    STAGING_6: 'staging_6',
-    STAGING_7: 'staging_7',
-    STAGING_8: 'staging_8',
-    STAGING_9: 'staging_9',
-    STAGING_10: 'staging_10',
-    STAGING_11: 'staging_11',
-    STAGING_12: 'staging_12',
-    STAGING_13: 'staging_13',
-    STAGING_14: 'staging_14',
-    STAGING_15: 'staging_15'
-  };
-  var WIDGET_URL = [{
-    env: ENV.SANDBOX,
-    url: 'https://widget-sandbox.'
-  }, {
-    env: ENV.SANDBOX_KOVENA,
-    url: 'https://widget-sandbox.'
-  }, {
-    env: ENV.SANDBOX_DEMO,
-    url: 'https://widget-sandbox-demo.'
-  }, {
-    env: ENV.SANDBOX_DEMO_KOVENA,
-    url: 'https://widget-sandbox-demo.'
-  }, {
-    env: ENV.PROD,
-    url: 'https://widget.'
-  }, {
-    env: ENV.STAGING,
-    url: 'https://widsta.'
-  }, {
-    env: ENV.STAGING_1,
-    url: 'https://widsta-1.'
-  }, {
-    env: ENV.STAGING_2,
-    url: 'https://widsta-2.'
-  }, {
-    env: ENV.STAGING_3,
-    url: 'https://widsta-3.'
-  }, {
-    env: ENV.STAGING_4,
-    url: 'https://widsta-4.'
-  }, {
-    env: ENV.STAGING_5,
-    url: 'https://widsta-5.'
-  }, {
-    env: ENV.STAGING_6,
-    url: 'https://widsta-6.'
-  }, {
-    env: ENV.STAGING_7,
-    url: 'https://widsta-7.'
-  }, {
-    env: ENV.STAGING_8,
-    url: 'https://widsta-8.'
-  }, {
-    env: ENV.STAGING_9,
-    url: 'https://widsta-9.'
-  }, {
-    env: ENV.STAGING_10,
-    url: 'https://widsta-10.'
-  }, {
-    env: ENV.STAGING_11,
-    url: 'https://widsta-11.'
-  }, {
-    env: ENV.STAGING_12,
-    url: 'https://widsta-12.'
-  }, {
-    env: ENV.STAGING_13,
-    url: 'https://widsta-13.'
-  }, {
-    env: ENV.STAGING_14,
-    url: 'https://widsta-14.'
-  }, {
-    env: ENV.STAGING_15,
-    url: 'https://widsta-15.'
-  }];
-  var API_URL = [{
-    env: ENV.SANDBOX,
-    url: 'https://api-sandbox.'
-  }, {
-    env: ENV.PROD,
-    url: 'https://api.'
-  }, {
-    env: ENV.STAGING,
-    url: 'https://apista.'
-  }, {
-    env: ENV.STAGING_1,
-    url: 'https://apista-1.'
-  }, {
-    env: ENV.STAGING_2,
-    url: 'https://apista-2.'
-  }, {
-    env: ENV.STAGING_3,
-    url: 'https://apista-3.'
-  }, {
-    env: ENV.STAGING_4,
-    url: 'https://apista-4.'
-  }, {
-    env: ENV.STAGING_5,
-    url: 'https://apista-5.'
-  }, {
-    env: ENV.STAGING_6,
-    url: 'https://apista-6.'
-  }, {
-    env: ENV.STAGING_7,
-    url: 'https://apista-7.'
-  }, {
-    env: ENV.STAGING_8,
-    url: 'https://apista-8.'
-  }, {
-    env: ENV.STAGING_9,
-    url: 'https://apista-9.'
-  }, {
-    env: ENV.STAGING_10,
-    url: 'https://apista-10.'
-  }, {
-    env: ENV.STAGING_11,
-    url: 'https://apista-11.'
-  }, {
-    env: ENV.STAGING_12,
-    url: 'https://apista-12.'
-  }, {
-    env: ENV.STAGING_13,
-    url: 'https://apista-13.'
-  }, {
-    env: ENV.STAGING_14,
-    url: 'https://apista-14.'
-  }, {
-    env: ENV.STAGING_15,
-    url: 'https://apista-15.'
-  }];
-  var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
-  var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
-  var DEFAULT_ENV = ENV.SANDBOX;
-  var DEFAULT_ALIAS = {
-    PAYDOCK: 'paydock.com',
-    KOVENA: 'kovena.com'
-  };
-  // TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
-  // TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
-  var Env = /*#__PURE__*/function () {
-    function Env(configs) {
-      var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
-      _classCallCheck(this, Env);
-      this.environmentConfigurations = configs;
-      this.setEnv(defaultEnv);
-    }
-    return _createClass(Env, [{
-      key: "setEnv",
-      value: function setEnv(environmentId, alias) {
-        this.validateAlias(alias);
-        this.validateEnvironmentId(environmentId);
-        this.environmentId = environmentId;
-        if (alias) {
-          this.alias = alias;
-        } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
-          this.alias = DEFAULT_ALIAS.KOVENA;
-        } else {
-          this.alias = DEFAULT_ALIAS.PAYDOCK;
-        }
-      }
-    }, {
-      key: "getEnv",
-      value: function getEnv() {
-        return this.environmentId;
-      }
-    }, {
-      key: "getConf",
-      value: function getConf() {
-        for (var index in this.environmentConfigurations) {
-          if (!Object.hasOwn(this.environmentConfigurations, index)) {
-            continue;
-          }
-          if (this.environmentConfigurations[index].env === this.getEnv()) {
-            return {
-              url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
-              env: this.environmentConfigurations[index].env
-            };
-          }
-        }
-        throw new Error('Env could not obtain configuration. Unknown environmentId.');
-      }
-    }, {
-      key: "validateAlias",
-      value: function validateAlias(alias) {
-        if (typeof alias === 'undefined') {
-          return;
-        }
-        if (typeof alias !== 'string') {
-          throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
-        }
-        if (!alias.match(REGEX_ALIAS)) {
-          throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
-        }
-      }
-    }, {
-      key: "validateEnvironmentId",
-      value: function validateEnvironmentId(environmentId) {
-        for (var index in this.environmentConfigurations) {
-          if (!Object.hasOwn(this.environmentConfigurations, index)) {
-            continue;
-          }
-          if (this.environmentConfigurations[index].env === environmentId) {
-            return;
-          }
-        }
-        throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
-      }
-    }]);
-  }();
-
-  var SDK = /*#__PURE__*/function () {
-    function SDK() {
-      _classCallCheck(this, SDK);
-    }
-    return _createClass(SDK, null, [{
-      key: "version",
-      get: function get() {
-        return SDK._version.trim() || null;
-      }
-    }]);
-  }();
-  SDK.type = 'client';
-  SDK.headerKeys = Object.freeze({
-    version: 'x-sdk-version',
-    type: 'x-sdk-type'
-  });
-  SDK._version = 'v1.143.0';
-
   function isFunction(value) {
       return typeof value === 'function';
   }
@@ -1857,6 +1617,246 @@
       return BehaviorSubject;
   }(Subject));
 
+  var ENV = {
+    SANDBOX: 'sandbox',
+    SANDBOX_KOVENA: 'sandbox-kovena',
+    SANDBOX_DEMO: 'sandbox-demo',
+    SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
+    PROD: 'production',
+    STAGING: 'staging',
+    STAGING_1: 'staging_1',
+    STAGING_2: 'staging_2',
+    STAGING_3: 'staging_3',
+    STAGING_4: 'staging_4',
+    STAGING_5: 'staging_5',
+    STAGING_6: 'staging_6',
+    STAGING_7: 'staging_7',
+    STAGING_8: 'staging_8',
+    STAGING_9: 'staging_9',
+    STAGING_10: 'staging_10',
+    STAGING_11: 'staging_11',
+    STAGING_12: 'staging_12',
+    STAGING_13: 'staging_13',
+    STAGING_14: 'staging_14',
+    STAGING_15: 'staging_15'
+  };
+  var WIDGET_URL = [{
+    env: ENV.SANDBOX,
+    url: 'https://widget-sandbox.'
+  }, {
+    env: ENV.SANDBOX_KOVENA,
+    url: 'https://widget-sandbox.'
+  }, {
+    env: ENV.SANDBOX_DEMO,
+    url: 'https://widget-sandbox-demo.'
+  }, {
+    env: ENV.SANDBOX_DEMO_KOVENA,
+    url: 'https://widget-sandbox-demo.'
+  }, {
+    env: ENV.PROD,
+    url: 'https://widget.'
+  }, {
+    env: ENV.STAGING,
+    url: 'https://widsta.'
+  }, {
+    env: ENV.STAGING_1,
+    url: 'https://widsta-1.'
+  }, {
+    env: ENV.STAGING_2,
+    url: 'https://widsta-2.'
+  }, {
+    env: ENV.STAGING_3,
+    url: 'https://widsta-3.'
+  }, {
+    env: ENV.STAGING_4,
+    url: 'https://widsta-4.'
+  }, {
+    env: ENV.STAGING_5,
+    url: 'https://widsta-5.'
+  }, {
+    env: ENV.STAGING_6,
+    url: 'https://widsta-6.'
+  }, {
+    env: ENV.STAGING_7,
+    url: 'https://widsta-7.'
+  }, {
+    env: ENV.STAGING_8,
+    url: 'https://widsta-8.'
+  }, {
+    env: ENV.STAGING_9,
+    url: 'https://widsta-9.'
+  }, {
+    env: ENV.STAGING_10,
+    url: 'https://widsta-10.'
+  }, {
+    env: ENV.STAGING_11,
+    url: 'https://widsta-11.'
+  }, {
+    env: ENV.STAGING_12,
+    url: 'https://widsta-12.'
+  }, {
+    env: ENV.STAGING_13,
+    url: 'https://widsta-13.'
+  }, {
+    env: ENV.STAGING_14,
+    url: 'https://widsta-14.'
+  }, {
+    env: ENV.STAGING_15,
+    url: 'https://widsta-15.'
+  }];
+  var API_URL = [{
+    env: ENV.SANDBOX,
+    url: 'https://api-sandbox.'
+  }, {
+    env: ENV.PROD,
+    url: 'https://api.'
+  }, {
+    env: ENV.STAGING,
+    url: 'https://apista.'
+  }, {
+    env: ENV.STAGING_1,
+    url: 'https://apista-1.'
+  }, {
+    env: ENV.STAGING_2,
+    url: 'https://apista-2.'
+  }, {
+    env: ENV.STAGING_3,
+    url: 'https://apista-3.'
+  }, {
+    env: ENV.STAGING_4,
+    url: 'https://apista-4.'
+  }, {
+    env: ENV.STAGING_5,
+    url: 'https://apista-5.'
+  }, {
+    env: ENV.STAGING_6,
+    url: 'https://apista-6.'
+  }, {
+    env: ENV.STAGING_7,
+    url: 'https://apista-7.'
+  }, {
+    env: ENV.STAGING_8,
+    url: 'https://apista-8.'
+  }, {
+    env: ENV.STAGING_9,
+    url: 'https://apista-9.'
+  }, {
+    env: ENV.STAGING_10,
+    url: 'https://apista-10.'
+  }, {
+    env: ENV.STAGING_11,
+    url: 'https://apista-11.'
+  }, {
+    env: ENV.STAGING_12,
+    url: 'https://apista-12.'
+  }, {
+    env: ENV.STAGING_13,
+    url: 'https://apista-13.'
+  }, {
+    env: ENV.STAGING_14,
+    url: 'https://apista-14.'
+  }, {
+    env: ENV.STAGING_15,
+    url: 'https://apista-15.'
+  }];
+  var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
+  var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
+  var DEFAULT_ENV = ENV.SANDBOX;
+  var DEFAULT_ALIAS = {
+    PAYDOCK: 'paydock.com',
+    KOVENA: 'kovena.com'
+  };
+  // TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+  // TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
+  var Env = /*#__PURE__*/function () {
+    function Env(configs) {
+      var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
+      _classCallCheck(this, Env);
+      this.environmentConfigurations = configs;
+      this.setEnv(defaultEnv);
+    }
+    return _createClass(Env, [{
+      key: "setEnv",
+      value: function setEnv(environmentId, alias) {
+        this.validateAlias(alias);
+        this.validateEnvironmentId(environmentId);
+        this.environmentId = environmentId;
+        if (alias) {
+          this.alias = alias;
+        } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+          this.alias = DEFAULT_ALIAS.KOVENA;
+        } else {
+          this.alias = DEFAULT_ALIAS.PAYDOCK;
+        }
+      }
+    }, {
+      key: "getEnv",
+      value: function getEnv() {
+        return this.environmentId;
+      }
+    }, {
+      key: "getConf",
+      value: function getConf() {
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === this.getEnv()) {
+            return {
+              url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+              env: this.environmentConfigurations[index].env
+            };
+          }
+        }
+        throw new Error('Env could not obtain configuration. Unknown environmentId.');
+      }
+    }, {
+      key: "validateAlias",
+      value: function validateAlias(alias) {
+        if (typeof alias === 'undefined') {
+          return;
+        }
+        if (typeof alias !== 'string') {
+          throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+        }
+        if (!alias.match(REGEX_ALIAS)) {
+          throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
+        }
+      }
+    }, {
+      key: "validateEnvironmentId",
+      value: function validateEnvironmentId(environmentId) {
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === environmentId) {
+            return;
+          }
+        }
+        throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
+      }
+    }]);
+  }();
+
+  var SDK = /*#__PURE__*/function () {
+    function SDK() {
+      _classCallCheck(this, SDK);
+    }
+    return _createClass(SDK, null, [{
+      key: "version",
+      get: function get() {
+        return SDK._version.trim() || null;
+      }
+    }]);
+  }();
+  SDK.type = 'client';
+  SDK.headerKeys = Object.freeze({
+    version: 'x-sdk-version',
+    type: 'x-sdk-type'
+  });
+  SDK._version = 'v1.144.1-beta';
+
   var ACCESS_HEADER_NAME = {
     accessToken: 'x-access-token',
     publicKey: 'x-user-public-key'
@@ -1947,6 +1947,139 @@
     }]);
   }();
 
+  /**
+   * Top-level classification of an error. Used by the SDK to route errors to the
+   * right category in instrumentation and to give consumers a coarse-grained
+   * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+   * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+   */
+  var ERROR_CATEGORY = {
+    /** SDK was misconfigured (missing keys, invalid options, etc.). */
+    CONFIGURATION: 'configuration',
+    /** Authentication or authorization failure. */
+    IDENTITY: 'identity_access_management',
+    /** SDK internal failure or upstream service problem. */
+    INTERNAL: 'internal',
+    /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
+    PROCESS: 'process',
+    /** Resource lookup failed or was rate-limited. */
+    RESOURCE: 'resource',
+    /** Invalid input or business-rule validation failure. */
+    VALIDATION: 'validation'
+  };
+  /**
+   * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+   * useful for deciding programmatic responses (e.g. show a retry button only
+   * when `cause` is `'service_unreachable'` or `'server_busy'`).
+   */
+  var ERROR_CAUSE = {
+    /** Operation was aborted programmatically. */
+    ABORTED: 'aborted',
+    /** Caller has insufficient permissions for the operation. */
+    ACCESS_FORBIDDEN: 'access_forbidden',
+    /** Resource already exists when create was expected. */
+    ALREADY_EXISTS: 'already_exists',
+    /** User cancelled the flow (e.g. closed the wallet sheet). */
+    CANCELED: 'canceled',
+    /** SDK was instantiated or invoked with invalid configuration. */
+    INVALID_CONFIGURATION: 'invalid_configuration',
+    /** Input failed structural or business-rule validation. */
+    INVALID_INPUT: 'invalid_input',
+    /** Resource was not found by the backend. */
+    NOT_FOUND: 'not_found',
+    /** Operation is not supported in the current context or version. */
+    NOT_IMPLEMENTED: 'not_implemented',
+    /** Caller exceeded the allowed request rate. */
+    RATE_LIMITED: 'rate_limited',
+    /** Backend is healthy but currently overloaded — typically retryable. */
+    SERVER_BUSY: 'server_busy',
+    /** Backend or third-party service could not be reached — typically retryable. */
+    SERVICE_UNREACHABLE: 'service_unreachable',
+    /** Caller is not authenticated. */
+    UNAUTHORIZED: 'unauthorized',
+    /** Catch-all when no other cause applies. */
+    UNKNOWN: 'unknown_error',
+    /** Request was syntactically valid but semantically rejected. */
+    UNPROCESSABLE_ENTITY: 'unprocessable_entity'
+  };
+  var EventError = /*#__PURE__*/function (_Error) {
+    function EventError(cause, category, retryable, details) {
+      var _this;
+      _classCallCheck(this, EventError);
+      _this = _callSuper(this, EventError, [details.message]);
+      _this.cause = cause;
+      _this.category = category;
+      _this.retryable = retryable;
+      _this.details = details;
+      Object.setPrototypeOf(_this, EventError.prototype);
+      _this.name = EventError.name;
+      return _this;
+    }
+    _inherits(EventError, _Error);
+    return _createClass(EventError, [{
+      key: "toJSON",
+      value: function toJSON() {
+        return {
+          error: {
+            category: this.category,
+            cause: this.cause,
+            details: this.details,
+            retryable: this.retryable
+          }
+        };
+      }
+    }, {
+      key: "setContextId",
+      value: function setContextId(contextId) {
+        this.details.contextId = contextId;
+      }
+    }, {
+      key: "setPurpose",
+      value: function setPurpose(purpose) {
+        this.purpose = purpose;
+      }
+    }], [{
+      key: "create",
+      value: function create(cause, message) {
+        var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
+        var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+        var details = {
+          cause: cause,
+          contextId: contextId,
+          message: message,
+          timestamp: new Date().toISOString()
+        };
+        var category = getErrorCategory(cause);
+        return new EventError(cause, category, retryable, details);
+      }
+    }]);
+  }(/*#__PURE__*/_wrapNativeSuper(Error));
+  function getErrorCategory(cause) {
+    switch (cause) {
+      case ERROR_CAUSE.INVALID_CONFIGURATION:
+        return ERROR_CATEGORY.CONFIGURATION;
+      case ERROR_CAUSE.ACCESS_FORBIDDEN:
+      case ERROR_CAUSE.UNAUTHORIZED:
+        return ERROR_CATEGORY.IDENTITY;
+      case ERROR_CAUSE.SERVICE_UNREACHABLE:
+      case ERROR_CAUSE.NOT_IMPLEMENTED:
+      case ERROR_CAUSE.SERVER_BUSY:
+        return ERROR_CATEGORY.INTERNAL;
+      case ERROR_CAUSE.ABORTED:
+      case ERROR_CAUSE.CANCELED:
+        return ERROR_CATEGORY.PROCESS;
+      case ERROR_CAUSE.NOT_FOUND:
+      case ERROR_CAUSE.RATE_LIMITED:
+        return ERROR_CATEGORY.RESOURCE;
+      case ERROR_CAUSE.ALREADY_EXISTS:
+      case ERROR_CAUSE.INVALID_INPUT:
+      case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
+        return ERROR_CATEGORY.VALIDATION;
+      default:
+        return ERROR_CATEGORY.INTERNAL;
+    }
+  }
+
   var HttpRequest = /*#__PURE__*/function () {
     function HttpRequest(request) {
       _classCallCheck(this, HttpRequest);
@@ -4641,18 +4774,23 @@
             var errorCb = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : function (data) {
               return undefined;
             };
+            var onError = function onError(err) {
+              _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
+                classMethod: 'getClient',
+                description: 'Send unsuccessful.'
+              }));
+              errorCb(err);
+            };
             request.onload = function () {
               return _this4.parser({
                 text: request.responseText,
                 status: request.status
-              }, cb, function (err) {
-                _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
-                  classMethod: 'getClient',
-                  description: 'Send unsuccessful.'
-                }));
-                errorCb(err);
-              });
+              }, cb, onError);
             };
+            // Transport-level failures (dropped connection, failed CORS
+            // preflight, HTTP/2 protocol error, timeout) never fire `onload`,
+            // so without these handlers the request would fail silently.
+            _this4.attachFailureHandlers(request, onError);
             request.send(JSON.stringify(body));
           }
         };
@@ -4665,13 +4803,18 @@
         return {
           config: request,
           send: function send(body) {
-            return new Promise(function (resolve, _reject) {
+            return new Promise(function (resolve, reject) {
               request.onload = function () {
                 return resolve({
                   text: request.responseText,
                   status: request.status
                 });
               };
+              // Transport-level failures (dropped connection, failed CORS
+              // preflight, HTTP/2 protocol error, timeout) never fire
+              // `onload`, so without these handlers the promise would never
+              // settle and the caller would hang silently.
+              _this5.attachFailureHandlers(request, reject);
               request.send(JSON.stringify(body));
             }).then(function (value) {
               return _this5.parserPromise(value);
@@ -4723,6 +4866,36 @@
           return Promise.reject(err);
         }
       }
+      /**
+       * Wires the XHR failure events that `onload` does not cover. `onload` only
+       * fires when an HTTP response is received (any status, including 4xx/5xx);
+       * transport-level failures — a dropped connection, a failed CORS preflight,
+       * an HTTP/2 protocol error, or a timeout — fire `onerror`/`ontimeout`/
+       * `onabort` instead. Without these the request never settles and fails
+       * silently (e.g. `onUnavailable` is never invoked for wallet callbacks).
+       */
+    }, {
+      key: "attachFailureHandlers",
+      value: function attachFailureHandlers(request, onFailure) {
+        request.onerror = function () {
+          return onFailure({
+            message: 'Network request failed: the service could not be reached.',
+            code: ERROR_CAUSE.SERVICE_UNREACHABLE
+          });
+        };
+        request.ontimeout = function () {
+          return onFailure({
+            message: 'Network request timed out: the service could not be reached.',
+            code: ERROR_CAUSE.SERVICE_UNREACHABLE
+          });
+        };
+        request.onabort = function () {
+          return onFailure({
+            message: 'Network request was aborted.',
+            code: ERROR_CAUSE.ABORTED
+          });
+        };
+      }
     }, {
       key: "newApiRequest",
       value: function newApiRequest(method, link) {
@@ -4808,127 +4981,162 @@
     }]);
   }(ApiBase);
 
-  var Url = /*#__PURE__*/function () {
-    function Url() {
-      _classCallCheck(this, Url);
+  var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
+  var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
+  var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
+  var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
+  var ApiChargeInternal = /*#__PURE__*/function () {
+    function ApiChargeInternal(api) {
+      _classCallCheck(this, ApiChargeInternal);
+      this.api = api;
     }
-    return _createClass(Url, null, [{
-      key: "extendSearchParams",
-      value: function extendSearchParams(uri, key, val) {
-        return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
+    return _createClass(ApiChargeInternal, [{
+      key: "walletCapture",
+      value: function walletCapture(payload) {
+        return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
       }
     }, {
-      key: "serialize",
-      value: function serialize(params) {
-        return Object.keys(params).map(function (key) {
-          return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
-        }).join('&');
+      key: "walletCallback",
+      value: function walletCallback(payload) {
+        return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
+      }
+    }, {
+      key: "standalone3dsProcess",
+      value: function standalone3dsProcess(payload) {
+        return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+      }
+    }, {
+      key: "standalone3dsHandle",
+      value: function standalone3dsHandle() {
+        return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
       }
     }]);
   }();
 
-  var Uuid = /*#__PURE__*/function () {
-    function Uuid() {
-      _classCallCheck(this, Uuid);
+  var CALLBACK_LINK = '/v1/checkouts/callback';
+  var INSTRUCTION_LINK = '/v1/checkouts/instruction';
+  var STATUS_LINK = '/v1/checkouts';
+  var ApiCheckoutInternal = /*#__PURE__*/function () {
+    function ApiCheckoutInternal(api) {
+      _classCallCheck(this, ApiCheckoutInternal);
+      this.api = api;
+      this.getInstructionLink = function () {
+        return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
+      };
     }
-    return _createClass(Uuid, null, [{
-      key: "generate",
-      value: function generate() {
-        if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
-          var buf = new Uint16Array(8);
-          window.crypto.getRandomValues(buf);
-          return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
-        } else {
-          return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
-        }
+    return _createClass(ApiCheckoutInternal, [{
+      key: "instructions",
+      value: function instructions() {
+        return this.api.requestObservable('GET', this.getInstructionLink(), {});
       }
     }, {
-      key: "hash",
-      value: function hash(number) {
-        var hash = number.toString(16);
-        while (hash.length < 4) {
-          hash = "0" + hash;
-        }
-        return hash;
+      key: "callback",
+      value: function callback(payload) {
+        return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
       }
     }, {
-      key: "random",
-      value: function random() {
-        return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
+      key: "status",
+      value: function status(id) {
+        return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
       }
     }]);
   }();
 
-  var WIDGET_LINK = '/remote-action';
-  var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
-  var PAYMENT_SOURCE_LINK = '/payment-sources';
-  var SECURE_3D = '/3ds/webhook';
-  var FLYPAY_LINK = '/wallet/flypay';
-  var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
-  var MESSAGE_WIDGET_LINK = '/message-widget';
-  var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
-  var Link = /*#__PURE__*/function () {
-    function Link(linkResource) {
-      _classCallCheck(this, Link);
-      this.params = {};
-      this.widgetId = Uuid.generate();
-      this.linkResource = linkResource;
-      this.env = new Env(WIDGET_URL);
-      this.setParams({
-        widget_id: this.widgetId
-      });
+  var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
+  var ApiGatewayInternal = /*#__PURE__*/function () {
+    function ApiGatewayInternal(api) {
+      _classCallCheck(this, ApiGatewayInternal);
+      this.api = api;
     }
-    return _createClass(Link, [{
-      key: "getNetUrl",
-      value: function getNetUrl() {
-        return this.env.getConf().url + this.linkResource;
+    return _createClass(ApiGatewayInternal, [{
+      key: "getWalletConfig",
+      value: function getWalletConfig(gateway_id) {
+        var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
+        return this.api.getClientPromise('GET', url).send(undefined);
       }
-    }, {
-      key: "getUrl",
-      value: function getUrl() {
-        var url = this.getNetUrl();
-        var params = this.getParams();
-        for (var key in params) {
-          if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
-        }
-        return url;
+    }]);
+  }();
+
+  var CREATE_OTT = '/v1/payment_sources/tokens';
+  var CREATE_SESSION = '/v1/payment_sources/payment-session';
+  var ApiPaymentSourceInternal = /*#__PURE__*/function () {
+    function ApiPaymentSourceInternal(api) {
+      _classCallCheck(this, ApiPaymentSourceInternal);
+      this.api = api;
+    }
+    return _createClass(ApiPaymentSourceInternal, [{
+      key: "createOTT",
+      value: function createOTT(payload) {
+        return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
       }
     }, {
-      key: "setParams",
-      value: function setParams(params) {
-        this.params = _extends({}, this.params, params);
+      key: "createSession",
+      value: function createSession(payload) {
+        return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
       }
-    }, {
-      key: "concatParams",
-      value: function concatParams(params) {
-        for (var key in params) {
-          if (!params.hasOwnProperty(key) || !params[key].length) continue;
-          if (typeof this.params[key] !== 'string') this.params[key] = '';
-          if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
-        }
+    }]);
+  }();
+
+  var GET_CONFIG = '/v1/services/:service_id/config';
+  var ApiServiceInternal = /*#__PURE__*/function () {
+    function ApiServiceInternal(api) {
+      _classCallCheck(this, ApiServiceInternal);
+      this.api = api;
+    }
+    return _createClass(ApiServiceInternal, [{
+      key: "getConfig",
+      value: function getConfig(service_id) {
+        var url = GET_CONFIG.replace(':service_id', service_id);
+        return this.api.getClientPromise('GET', url).send(undefined);
+      }
+    }]);
+  }();
+  var SERVICE_TYPES;
+  (function (SERVICE_TYPES) {
+    SERVICE_TYPES["ACCERTIFY"] = "Accertify";
+    SERVICE_TYPES["BOOKING"] = "Booking";
+    SERVICE_TYPES["GPAYMENTS"] = "GPayments";
+    SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
+    SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
+    SERVICE_TYPES["VISA_NT"] = "VisaVTS";
+    SERVICE_TYPES["FORTER"] = "Forter";
+    SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
+    SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
+  })(SERVICE_TYPES || (SERVICE_TYPES = {}));
+
+  var ApiInternal = /*#__PURE__*/function (_ApiBase) {
+    function ApiInternal() {
+      _classCallCheck(this, ApiInternal);
+      return _callSuper(this, ApiInternal, arguments);
+    }
+    _inherits(ApiInternal, _ApiBase);
+    return _createClass(ApiInternal, [{
+      key: "charge",
+      value: function charge() {
+        return new ApiChargeInternal(this);
       }
     }, {
-      key: "getParams",
-      value: function getParams() {
-        return this.params;
+      key: "service",
+      value: function service() {
+        return new ApiServiceInternal(this);
       }
     }, {
-      key: "setEnv",
-      value: function setEnv(env, alias) {
-        this.env.setEnv(env, alias);
+      key: "checkout",
+      value: function checkout() {
+        return new ApiCheckoutInternal(this);
       }
     }, {
-      key: "getEnv",
-      value: function getEnv() {
-        return this.env.getEnv();
+      key: "gateway",
+      value: function gateway() {
+        return new ApiGatewayInternal(this);
       }
     }, {
-      key: "getBaseUrl",
-      value: function getBaseUrl() {
-        return this.env.getConf().url;
+      key: "paymentSource",
+      value: function paymentSource() {
+        return new ApiPaymentSourceInternal(this);
       }
     }]);
-  }();
+  }(ApiBase);
 
   var IFrame = /*#__PURE__*/function () {
     function IFrame(container) {
@@ -5125,10 +5333,10 @@
   }();
 
   var hiddenStyle = {
-    visibility: "hidden",
-    border: "0",
-    width: "0",
-    height: "0"
+    visibility: 'hidden',
+    border: '0',
+    width: '0',
+    height: '0'
   };
   var PROCESS_STANDALONE_3DS_STATUS;
   (function (PROCESS_STANDALONE_3DS_STATUS) {
@@ -5150,14 +5358,30 @@
     IFRAME_STATUS["TIMEOUT"] = "AuthTimedOut";
     IFRAME_STATUS["INVALID"] = "invalid_event";
   })(IFRAME_STATUS || (IFRAME_STATUS = {}));
+  /**
+   * Event name constants emitted during the Standalone 3DS (GPayments) flow.
+   * Used internally by `GPaymentsService` and re-exported publicly as `CANVAS_3DS_EVENT`.
+   */
   var GPAYMENTS_EVENT = {
+    /** Authentication succeeded. Payload: `Canvas3dsAuthPayload`. */
     AUTH_SUCCESS: 'chargeAuthSuccess',
+    /** Authentication failed — covers issuer rejection, iframe timeout (`AuthTimedOut`), and invalid-event outcomes. Payload: `Canvas3dsAuthPayload`. */
     AUTH_ERROR: 'chargeAuthReject',
+    /** Decoupled authentication — issuer will authenticate out-of-band. Payload: `Canvas3dsAuthPayload`. */
     DECOUPLED: 'chargeAuthDecoupled',
+    /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     CHALLENGE: 'chargeAuthChallenge',
+    /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     INFO: 'chargeAuthInfo',
+    /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
     ERROR: 'error'
   };
+  /**
+   * Public alias for GPAYMENTS_EVENT. Same object reference — no behavioral change.
+   * Prefer `CANVAS_3DS_EVENT` in public-facing code; `GPAYMENTS_EVENT` remains for
+   * backwards-compatible internal usage.
+   */
+  var CANVAS_3DS_EVENT = GPAYMENTS_EVENT;
   var GPaymentsService = /*#__PURE__*/function () {
     function GPaymentsService(container, api, eventEmitter) {
       _classCallCheck(this, GPaymentsService);
@@ -5185,20 +5409,22 @@
       value: function initializeIFrames(initializationUrl, secondaryUrl, title) {
         var hideAuthorization = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
         var container = this.container.getElement();
-        if (!container) return;
-        var divAuthorization = document.createElement("div");
-        divAuthorization.setAttribute("id", "paydock_authorization_iframe");
+        if (!container) {
+          return;
+        }
+        var divAuthorization = document.createElement('div');
+        divAuthorization.setAttribute('id', 'paydock_authorization_iframe');
         container.appendChild(divAuthorization);
-        this.browserAndChallengeContainer = new Container("#paydock_authorization_iframe");
+        this.browserAndChallengeContainer = new Container('#paydock_authorization_iframe');
         this.iFrameAuthorization = new IFrame(this.browserAndChallengeContainer);
         this.iFrameAuthorization.load(initializationUrl, {
           title: title
         });
         if (secondaryUrl) {
-          var divSecondaryURL = document.createElement("div");
-          divSecondaryURL.setAttribute("id", "paydock_secondary_iframe");
+          var divSecondaryURL = document.createElement('div');
+          divSecondaryURL.setAttribute('id', 'paydock_secondary_iframe');
           container.appendChild(divSecondaryURL);
-          this.monitoringContainer = new Container("#paydock_secondary_iframe");
+          this.monitoringContainer = new Container('#paydock_secondary_iframe');
           this.iFrameSecondaryUrl = new IFrame(this.monitoringContainer);
           this.iFrameSecondaryUrl.load(secondaryUrl, {
             title: title
@@ -5214,8 +5440,12 @@
         var hideAuthorization = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
         var _a;
         for (var prop in hiddenStyle) {
-          if (!hiddenStyle.hasOwnProperty(prop)) continue;
-          if (hideAuthorization) this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+          if (!Object.hasOwn(hiddenStyle, prop)) {
+            continue;
+          }
+          if (hideAuthorization) {
+            this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+          }
           (_a = this.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.setStyle(prop, hiddenStyle[prop]);
         }
       }
@@ -5225,13 +5455,17 @@
         var _this = this;
         this.iFrameEvent.on(EVENT$4.CHARGE_AUTH, widgetId, function (data) {
           if (data.status === IFRAME_STATUS.SKIPPED || data.status === IFRAME_STATUS.FINISHED) {
-            if (data.info) _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
-              info: data.info
-            });
+            if (data.info) {
+              _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
+                info: data.info
+              });
+            }
             _this.performAuthentication(data);
-          } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
-            status: data.status
-          }, data.charge_3ds_id));
+          } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) {
+            _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
+              status: data.status
+            }, data.charge_3ds_id));
+          }
         });
         this.iFrameEvent.on(EVENT$4.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
           _this.processResult(data.charge_3ds_id);
@@ -5271,13 +5505,19 @@
       key: "processResult",
       value: function processResult(charge3dsId) {
         var _this2 = this;
-        if (this.resultRead) return;
+        if (this.resultRead) {
+          return;
+        }
         this.resultRead = true;
         this.api.charge().standalone3dsHandle().then(function (result) {
           var _a;
           _this2.iFrameAuthorization.remove();
           (_a = _this2.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.remove();
-          if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));else _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+          if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) {
+            _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));
+          } else {
+            _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+          }
         }, function (err) {
           _this2.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this2.parseError(err, charge3dsId));
         });
@@ -5302,10 +5542,16 @@
       key: "doPolling",
       value: function doPolling(url, charge3dsId) {
         var _this3 = this;
-        this.externalAPI("GET", url).then(function (data) {
-          if (!data.event || data.event === "AuthResultNotReady") setTimeout(function () {
-            _this3.doPolling(url, charge3dsId);
-          }, 2000);else if (data.event === 'AuthResultReady') _this3.processResult(charge3dsId);else throw new Error("Event not supported");
+        this.externalAPI('GET', url).then(function (data) {
+          if (!data.event || data.event === 'AuthResultNotReady') {
+            setTimeout(function () {
+              _this3.doPolling(url, charge3dsId);
+            }, 2000);
+          } else if (data.event === 'AuthResultReady') {
+            _this3.processResult(charge3dsId);
+          } else {
+            throw new Error('Event not supported');
+          }
         })["catch"](function (err) {
           return _this3.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this3.parseError(err, charge3dsId));
         });
@@ -5322,16 +5568,24 @@
           charge_3ds_id: charge_3ds_id
         }).then(function (authenticationResult) {
           var _a, _b;
-          if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
+          if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) {
+            _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          } else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
             if ((_a = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _a === void 0 ? void 0 : _a.challenge) {
               _this4.eventEmitter.emit(GPAYMENTS_EVENT.CHALLENGE, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
               _this4.initializeIFrames(authenticationResult.result.challenge_url, undefined, 'Authentication Challenge', false);
-              if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              if (authenticationResult.result.secondary_url) {
+                _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              }
             } else if ((_b = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _b === void 0 ? void 0 : _b.decoupled_challenge) {
               _this4.eventEmitter.emit(GPAYMENTS_EVENT.DECOUPLED, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
-              if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              if (authenticationResult.result.secondary_url) {
+                _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+              }
             }
-          } else return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          } else {
+            return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+          }
         }, function (err) {
           _this4.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this4.parseError(err, charge_3ds_id));
         });
@@ -5339,192 +5593,159 @@
     }]);
   }();
 
-  var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
-  var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
-  var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
-  var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
-  var ApiChargeInternal = /*#__PURE__*/function () {
-    function ApiChargeInternal(api) {
-      _classCallCheck(this, ApiChargeInternal);
-      this.api = api;
+  var STANDALONE_3DS_GATEWAYS = {
+    GPAYMENTS: 'GPayments'
+  };
+  var Standalone3dsService = /*#__PURE__*/function () {
+    function Standalone3dsService(container, eventEmitter) {
+      _classCallCheck(this, Standalone3dsService);
+      this.env = DEFAULT_ENV;
+      this.container = container;
+      this.eventEmitter = eventEmitter;
     }
-    return _createClass(ApiChargeInternal, [{
-      key: "walletCapture",
-      value: function walletCapture(payload) {
-        return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
-      }
-    }, {
-      key: "walletCallback",
-      value: function walletCallback(payload) {
-        return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
-      }
-    }, {
-      key: "standalone3dsProcess",
-      value: function standalone3dsProcess(payload) {
-        return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+    return _createClass(Standalone3dsService, [{
+      key: "load",
+      value: function load(token, options) {
+        var parsedToken = AccessToken.validateJWT(token);
+        if (!parsedToken) {
+          throw new Error('Invalid charge token');
+        }
+        var tokenData = AccessToken.extractData(parsedToken.body);
+        var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
+        api.setEnv(this.env, this.alias);
+        switch (tokenData.service_type) {
+          case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
+            new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
+            break;
+        }
       }
     }, {
-      key: "standalone3dsHandle",
-      value: function standalone3dsHandle() {
-        return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
+      key: "setEnv",
+      value: function setEnv(env, alias) {
+        this.env = env;
+        this.alias = alias;
       }
     }]);
   }();
 
-  var CALLBACK_LINK = '/v1/checkouts/callback';
-  var INSTRUCTION_LINK = '/v1/checkouts/instruction';
-  var STATUS_LINK = '/v1/checkouts';
-  var ApiCheckoutInternal = /*#__PURE__*/function () {
-    function ApiCheckoutInternal(api) {
-      _classCallCheck(this, ApiCheckoutInternal);
-      this.api = api;
-      this.getInstructionLink = function () {
-        return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
-      };
+  var Url = /*#__PURE__*/function () {
+    function Url() {
+      _classCallCheck(this, Url);
     }
-    return _createClass(ApiCheckoutInternal, [{
-      key: "instructions",
-      value: function instructions() {
-        return this.api.requestObservable('GET', this.getInstructionLink(), {});
-      }
-    }, {
-      key: "callback",
-      value: function callback(payload) {
-        return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
+    return _createClass(Url, null, [{
+      key: "extendSearchParams",
+      value: function extendSearchParams(uri, key, val) {
+        return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
       }
     }, {
-      key: "status",
-      value: function status(id) {
-        return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
-      }
-    }]);
-  }();
-
-  var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
-  var ApiGatewayInternal = /*#__PURE__*/function () {
-    function ApiGatewayInternal(api) {
-      _classCallCheck(this, ApiGatewayInternal);
-      this.api = api;
-    }
-    return _createClass(ApiGatewayInternal, [{
-      key: "getWalletConfig",
-      value: function getWalletConfig(gateway_id) {
-        var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
-        return this.api.getClientPromise('GET', url).send(undefined);
+      key: "serialize",
+      value: function serialize(params) {
+        return Object.keys(params).map(function (key) {
+          return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
+        }).join('&');
       }
     }]);
   }();
 
-  var CREATE_OTT = '/v1/payment_sources/tokens';
-  var CREATE_SESSION = '/v1/payment_sources/payment-session';
-  var ApiPaymentSourceInternal = /*#__PURE__*/function () {
-    function ApiPaymentSourceInternal(api) {
-      _classCallCheck(this, ApiPaymentSourceInternal);
-      this.api = api;
+  var Uuid = /*#__PURE__*/function () {
+    function Uuid() {
+      _classCallCheck(this, Uuid);
     }
-    return _createClass(ApiPaymentSourceInternal, [{
-      key: "createOTT",
-      value: function createOTT(payload) {
-        return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
+    return _createClass(Uuid, null, [{
+      key: "generate",
+      value: function generate() {
+        if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
+          var buf = new Uint16Array(8);
+          window.crypto.getRandomValues(buf);
+          return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
+        } else {
+          return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
+        }
       }
     }, {
-      key: "createSession",
-      value: function createSession(payload) {
-        return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
+      key: "hash",
+      value: function hash(number) {
+        var hash = number.toString(16);
+        while (hash.length < 4) {
+          hash = "0" + hash;
+        }
+        return hash;
       }
-    }]);
-  }();
-
-  var GET_CONFIG = '/v1/services/:service_id/config';
-  var ApiServiceInternal = /*#__PURE__*/function () {
-    function ApiServiceInternal(api) {
-      _classCallCheck(this, ApiServiceInternal);
-      this.api = api;
-    }
-    return _createClass(ApiServiceInternal, [{
-      key: "getConfig",
-      value: function getConfig(service_id) {
-        var url = GET_CONFIG.replace(':service_id', service_id);
-        return this.api.getClientPromise('GET', url).send(undefined);
+    }, {
+      key: "random",
+      value: function random() {
+        return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
       }
     }]);
   }();
-  var SERVICE_TYPES;
-  (function (SERVICE_TYPES) {
-    SERVICE_TYPES["ACCERTIFY"] = "Accertify";
-    SERVICE_TYPES["BOOKING"] = "Booking";
-    SERVICE_TYPES["GPAYMENTS"] = "GPayments";
-    SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
-    SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
-    SERVICE_TYPES["VISA_NT"] = "VisaVTS";
-    SERVICE_TYPES["FORTER"] = "Forter";
-    SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
-    SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
-  })(SERVICE_TYPES || (SERVICE_TYPES = {}));
 
-  var ApiInternal = /*#__PURE__*/function (_ApiBase) {
-    function ApiInternal() {
-      _classCallCheck(this, ApiInternal);
-      return _callSuper(this, ApiInternal, arguments);
+  var WIDGET_LINK = '/remote-action';
+  var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
+  var PAYMENT_SOURCE_LINK = '/payment-sources';
+  var SECURE_3D = '/3ds/webhook';
+  var FLYPAY_LINK = '/wallet/flypay';
+  var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
+  var MESSAGE_WIDGET_LINK = '/message-widget';
+  var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
+  var Link = /*#__PURE__*/function () {
+    function Link(linkResource) {
+      _classCallCheck(this, Link);
+      this.params = {};
+      this.widgetId = Uuid.generate();
+      this.linkResource = linkResource;
+      this.env = new Env(WIDGET_URL);
+      this.setParams({
+        widget_id: this.widgetId
+      });
     }
-    _inherits(ApiInternal, _ApiBase);
-    return _createClass(ApiInternal, [{
-      key: "charge",
-      value: function charge() {
-        return new ApiChargeInternal(this);
+    return _createClass(Link, [{
+      key: "getNetUrl",
+      value: function getNetUrl() {
+        return this.env.getConf().url + this.linkResource;
       }
     }, {
-      key: "service",
-      value: function service() {
-        return new ApiServiceInternal(this);
+      key: "getUrl",
+      value: function getUrl() {
+        var url = this.getNetUrl();
+        var params = this.getParams();
+        for (var key in params) {
+          if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
+        }
+        return url;
       }
     }, {
-      key: "checkout",
-      value: function checkout() {
-        return new ApiCheckoutInternal(this);
+      key: "setParams",
+      value: function setParams(params) {
+        this.params = _extends({}, this.params, params);
       }
     }, {
-      key: "gateway",
-      value: function gateway() {
-        return new ApiGatewayInternal(this);
+      key: "concatParams",
+      value: function concatParams(params) {
+        for (var key in params) {
+          if (!params.hasOwnProperty(key) || !params[key].length) continue;
+          if (typeof this.params[key] !== 'string') this.params[key] = '';
+          if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
+        }
       }
     }, {
-      key: "paymentSource",
-      value: function paymentSource() {
-        return new ApiPaymentSourceInternal(this);
-      }
-    }]);
-  }(ApiBase);
-
-  var STANDALONE_3DS_GATEWAYS = {
-    GPAYMENTS: "GPayments"
-  };
-  var Standalone3dsService = /*#__PURE__*/function () {
-    function Standalone3dsService(container, eventEmitter) {
-      _classCallCheck(this, Standalone3dsService);
-      this.env = DEFAULT_ENV;
-      this.container = container;
-      this.eventEmitter = eventEmitter;
-    }
-    return _createClass(Standalone3dsService, [{
-      key: "load",
-      value: function load(token, options) {
-        var parsedToken = AccessToken.validateJWT(token);
-        if (!parsedToken) throw new Error("Invalid charge token");
-        var tokenData = AccessToken.extractData(parsedToken.body);
-        var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
-        api.setEnv(this.env, this.alias);
-        switch (tokenData.service_type) {
-          case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
-            new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
-            break;
-        }
+      key: "getParams",
+      value: function getParams() {
+        return this.params;
       }
     }, {
       key: "setEnv",
       value: function setEnv(env, alias) {
-        this.env = env;
-        this.alias = alias;
+        this.env.setEnv(env, alias);
+      }
+    }, {
+      key: "getEnv",
+      value: function getEnv() {
+        return this.env.getEnv();
+      }
+    }, {
+      key: "getBaseUrl",
+      value: function getBaseUrl() {
+        return this.env.getConf().url;
       }
     }]);
   }();
@@ -5564,7 +5785,7 @@
    * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
    * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
    * @param {string} ERROR=error
-  */
+   */
   /**
    * Class Canvas3ds include method for working on html
    * @constructor
@@ -5600,13 +5821,21 @@
        *
        */
       function load() {
-        if (this.token.format === TOKEN_FORMAT$2.HTML) this.iFrame.loadFromHtml(this.token.content, {
-          title: '3d secure authentication'
-        }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.URL) this.iFrame.load(this.token.content, {
-          title: '3d secure authentication'
-        }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) this.standalone3dsService.load(this.token.content, {
-          title: '3d secure authentication'
-        });else console.error('Token contain unsupported payload');
+        if (this.token.format === TOKEN_FORMAT$2.HTML) {
+          this.iFrame.loadFromHtml(this.token.content, {
+            title: '3d secure authentication'
+          }, 'threeDSecure-iframe');
+        } else if (this.token.format === TOKEN_FORMAT$2.URL) {
+          this.iFrame.load(this.token.content, {
+            title: '3d secure authentication'
+          }, 'threeDSecure-iframe');
+        } else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
+          this.standalone3dsService.load(this.token.content, {
+            title: '3d secure authentication'
+          });
+        } else {
+          console.error('Token contain unsupported payload');
+        }
       }
       /**
        * Current method can change environment. By default environment = sandbox.
@@ -5623,7 +5852,9 @@
         this.link.setEnv(env, alias);
         this.standalone3dsService.setEnv(env, alias);
         for (var index in this.configs) {
-          if (!this.configs.hasOwnProperty(index)) continue;
+          if (!Object.hasOwn(this.configs, index)) {
+            continue;
+          }
           this.configs[index].setEnv(env, alias);
         }
       }
@@ -5633,34 +5864,45 @@
         return this.link.getEnv();
       }
       /**
-       * Listen to events of widget
+       * Listen to events of widget.
        *
-       * @example
+       * Available event names are defined in {@link Canvas3dsEventMap} (typed) and
+       * {@link CANVAS_3DS_EVENT} (string constants). Using a literal event name
+       * narrows the callback payload via the typed overloads.
        *
-       * widget.on('chargeAuthReject', function (data) {
-       *      console.log(data);
+       * @example
+       * // Callback form — payload is narrowed by the event name
+       * widget.on('chargeAuthReject', (data) => {
+       *   console.log(data); // data is Canvas3dsAuthPayload | Canvas3dsChargeAuthEventPayload
        * });
-       * // or
-       * widget.on('chargeAuthReject').then(function (data) {
-       *      console.log(data);
+       *
+       * // Promise form
+       * widget.on('chargeAuthReject').then((data) => {
+       *   console.log(data);
        * });
-       * @param {string} eventName - Available event names [EVENT]{@link EVENT} [STANDALONE_3DS_EVENT]{@link STANDALONE_3DS_EVENT}
-       * @param {listener} [cb]
-       * @return {Promise<IEventData> | void}
+       *
+       * @param eventName - Event name from {@link Canvas3dsEventMap} or any string for dynamic events.
+       * @param cb - Optional listener callback. If omitted, returns a Promise that resolves on the next emission.
+       * @returns `void` when a callback is provided; otherwise a Promise that resolves with the event payload.
        */
+      // biome-ignore lint/suspicious/noExplicitAny: implementation signature must accept any payload shape to satisfy all overloads above
     }, {
       key: "on",
       value: function on(eventName, cb) {
         var _this = this;
         if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
-          if (typeof cb === 'function') return this.eventEmitter.subscribe(eventName, cb);
+          if (typeof cb === 'function') {
+            return this.eventEmitter.subscribe(eventName, cb);
+          }
           return new Promise(function (resolve) {
             return _this.eventEmitter.subscribe(eventName, function (res) {
               return resolve(res);
             });
           });
         } else {
-          if (typeof cb === 'function') return this.event.on(eventName, this.link.getParams().ref_id, cb);
+          if (typeof cb === 'function') {
+            return this.event.on(eventName, this.link.getParams().ref_id, cb);
+          }
           return new Promise(function (resolve) {
             return _this.event.on(eventName, _this.link.getParams().ref_id, function (res) {
               return resolve(res);
@@ -5704,6 +5946,19 @@
     }]);
   }();
 
+  /**
+   * Public, tree-shakeable alias for the internal `TOKEN_FORMAT` enum in canvas-3ds.ts.
+   * Mirrors the string values of that enum without exposing the private enum itself.
+   */
+  var Canvas3dsTokenFormat = {
+    /** Token whose `content` is a complete HTML page. The SDK renders it inside an iframe. */
+    HTML: 'html',
+    /** Token whose `content` is a URL. The SDK loads it inside an iframe. */
+    URL: 'url',
+    /** Token whose `content` describes a standalone 3DS service (e.g. GPayments). The SDK delegates to that service's flow. */
+    STANDALONE_3DS: 'standalone_3ds'
+  };
+
   var Spinner = /*#__PURE__*/function () {
     function Spinner() {
       _classCallCheck(this, Spinner);
@@ -12789,108 +13044,6 @@
     }
   }
 
-  var ERROR_CATEGORY = {
-    CONFIGURATION: 'configuration',
-    IDENTITY: 'identity_access_management',
-    INTERNAL: 'internal',
-    PROCESS: 'process',
-    RESOURCE: 'resource',
-    VALIDATION: 'validation'
-  };
-  var ERROR_CAUSE = {
-    ABORTED: 'aborted',
-    ACCESS_FORBIDDEN: 'access_forbidden',
-    ALREADY_EXISTS: 'already_exists',
-    CANCELED: 'canceled',
-    INVALID_CONFIGURATION: 'invalid_configuration',
-    INVALID_INPUT: 'invalid_input',
-    NOT_FOUND: 'not_found',
-    NOT_IMPLEMENTED: 'not_implemented',
-    RATE_LIMITED: 'rate_limited',
-    SERVER_BUSY: 'server_busy',
-    SERVICE_UNREACHABLE: 'service_unreachable',
-    UNAUTHORIZED: 'unauthorized',
-    UNKNOWN: 'unknown_error',
-    UNPROCESSABLE_ENTITY: 'unprocessable_entity'
-  };
-  var EventError = /*#__PURE__*/function (_Error) {
-    function EventError(cause, category, retryable, details) {
-      var _this;
-      _classCallCheck(this, EventError);
-      _this = _callSuper(this, EventError, [details.message]);
-      _this.cause = cause;
-      _this.category = category;
-      _this.retryable = retryable;
-      _this.details = details;
-      Object.setPrototypeOf(_this, EventError.prototype);
-      _this.name = EventError.name;
-      return _this;
-    }
-    _inherits(EventError, _Error);
-    return _createClass(EventError, [{
-      key: "toJSON",
-      value: function toJSON() {
-        return {
-          error: {
-            category: this.category,
-            cause: this.cause,
-            details: this.details,
-            retryable: this.retryable
-          }
-        };
-      }
-    }, {
-      key: "setContextId",
-      value: function setContextId(contextId) {
-        this.details.contextId = contextId;
-      }
-    }, {
-      key: "setPurpose",
-      value: function setPurpose(purpose) {
-        this.purpose = purpose;
-      }
-    }], [{
-      key: "create",
-      value: function create(cause, message) {
-        var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
-        var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-        var details = {
-          cause: cause,
-          contextId: contextId,
-          message: message,
-          timestamp: new Date().toISOString()
-        };
-        var category = getErrorCategory(cause);
-        return new EventError(cause, category, retryable, details);
-      }
-    }]);
-  }(/*#__PURE__*/_wrapNativeSuper(Error));
-  function getErrorCategory(cause) {
-    switch (cause) {
-      case ERROR_CAUSE.INVALID_CONFIGURATION:
-        return ERROR_CATEGORY.CONFIGURATION;
-      case ERROR_CAUSE.ACCESS_FORBIDDEN:
-      case ERROR_CAUSE.UNAUTHORIZED:
-        return ERROR_CATEGORY.IDENTITY;
-      case ERROR_CAUSE.SERVICE_UNREACHABLE:
-      case ERROR_CAUSE.NOT_IMPLEMENTED:
-      case ERROR_CAUSE.SERVER_BUSY:
-        return ERROR_CATEGORY.INTERNAL;
-      case ERROR_CAUSE.ABORTED:
-      case ERROR_CAUSE.CANCELED:
-        return ERROR_CATEGORY.PROCESS;
-      case ERROR_CAUSE.NOT_FOUND:
-      case ERROR_CAUSE.RATE_LIMITED:
-        return ERROR_CATEGORY.RESOURCE;
-      case ERROR_CAUSE.ALREADY_EXISTS:
-      case ERROR_CAUSE.INVALID_INPUT:
-      case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
-        return ERROR_CATEGORY.VALIDATION;
-      default:
-        return ERROR_CATEGORY.INTERNAL;
-    }
-  }
-
   function processEventError(err) {
     var cause;
     var message;
@@ -14870,7 +15023,6 @@
         });
         canvas.on('chargeAuthReject', function () {
           var _a;
-          // **TODO add interface for chargeAuthReject event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
@@ -14887,13 +15039,13 @@
         });
         canvas.on('error', function (event) {
           var _a;
-          // **TODO add interface for error event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+          var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
             payload: {
               status: 'error',
-              message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+              message: message
             }
           }).then(function () {
             return console.info('callback.child_widget.status: - errorEvent');
@@ -17261,7 +17413,6 @@
         });
         canvas.on('chargeAuthReject', function () {
           var _a;
-          // **TODO add interface for chargeAuthReject event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
@@ -17278,13 +17429,13 @@
         });
         canvas.on('error', function (event) {
           var _a;
-          // **TODO add interface for error event **//
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+          var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
           _this.api.checkout().callback({
             event: 'callback.child_widget.status',
             payload: {
               status: 'error',
-              message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+              message: message
             }
           }).then(function () {
             return console.info('callback.child_widget.status: - errorEvent');
@@ -18651,10 +18802,16 @@
     }
   }
 
+  /** Event name emitted when a checkout payment completes successfully. */
+  var PAYMENT_SUCCESSFUL = 'paymentSuccessful';
+  /** Event name emitted when a checkout payment fails. */
+  var PAYMENT_FAILURE = 'paymentFailure';
+  /** Event name emitted when a checkout session expires. */
+  var PAYMENT_EXPIRED = 'paymentExpired';
   var EVENT$2 = {
-    PAYMENT_SUCCESSFUL: 'paymentSuccessful',
-    PAYMENT_FAILURE: 'paymentFailure',
-    PAYMENT_EXPIRED: 'paymentExpired'
+    PAYMENT_SUCCESSFUL: PAYMENT_SUCCESSFUL,
+    PAYMENT_FAILURE: PAYMENT_FAILURE,
+    PAYMENT_EXPIRED: PAYMENT_EXPIRED
   };
   /**
    * Class CheckoutButton transform usual button into checkout
@@ -18679,7 +18836,7 @@
       this.checkoutFinished = false;
       try {
         this.eventEmitter = new EventEmitter();
-        this.intentTokenPayload = this.extractIntentTokenPayload(intentToken);
+        this.intentTokenPayload = this.extractCheckoutIntentTokenPayload(intentToken);
         this.checkoutVersionHandler = getCheckoutVersionHandler(this.intentTokenPayload.version);
         this.instructions = this.initContractVersion();
         this.api = new ApiInternal(this.intentToken, API_AUTH_TYPE.TOKEN);
@@ -18740,8 +18897,8 @@
         }, 14 * 60 * 1000 + 45 * 1000);
       }
     }, {
-      key: "extractIntentTokenPayload",
-      value: function extractIntentTokenPayload(intentToken) {
+      key: "extractCheckoutIntentTokenPayload",
+      value: function extractCheckoutIntentTokenPayload(intentToken) {
         var tokenContent = AccessToken.validateJWT(intentToken);
         if (!tokenContent) {
           throw new Error('Intent token is broken or expired. Please, issue new one.');
@@ -18769,7 +18926,7 @@
       value: function ready() {
         var _this3 = this;
         this.changeLoadingSpinnerVisibility(true);
-        // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+        // biome-ignore lint/suspicious/noExplicitAny: checkoutApi.status returns a dynamic shape whose fields are narrowed at the call-sites below
         this.checkoutApi.status(this.intentTokenPayload.intent_id).then(function (response) {
           if (!(response === null || response === void 0 ? void 0 : response.status)) {
             throw new Error('Checkout Intent Status structure inconsistent');
@@ -18878,8 +19035,8 @@
        * Important: Do not perform thread blocking operations in callback such as window.alert() calls.
        *
        * @example
-       * widget.onPaymentInReview((data) => {
-       *      console.log('Payment in fraud review');
+       * widget.onPaymentExpired((data) => {
+       *      console.log('Payment session expired');
        * });
        */
     }, {
@@ -19000,6 +19157,7 @@
     function OpenWalletButtons(selector, publicKeyOrAccessToken, serviceId, meta) {
       _classCallCheck(this, OpenWalletButtons);
       this.env = DEFAULT_ENV;
+      this.isDisabled = false;
       this.onShippingOptionsChangeHandlerRegistered = false;
       // Runtime guard: TypeScript's `abstract` keyword exists only at compile time.
       // Without this check, instantiating the base class directly silently fails
@@ -19144,6 +19302,68 @@
           _this.handleOnError(error instanceof Error ? error : new Error(String(error)), exports.ERROR_OPERATION.CONFIGURATION);
         });
       }
+      /**
+       * Enables the wallet button, restoring interactivity and visual appearance.
+       * If the button was previously disabled via `disable()`, calling this method
+       * re-enables clicks and removes the disabled visual state.
+       *
+       * Idempotent — calling on an already-enabled button has no effect.
+       *
+       * @example
+       * button.enable();
+       */
+    }, {
+      key: "enable",
+      value: function enable() {
+        this.isDisabled = false;
+        this.applyDisabledStyles();
+      }
+      /**
+       * Disables the wallet button, preventing clicks and applying a visual disabled state.
+       * When disabled, the button appears grayed out (`opacity: 0.5`) and does not
+       * respond to user interaction (`pointer-events: none`). For accessibility, the
+       * `aria-disabled="true"` attribute is also set on the container.
+       *
+       * Programmatic clicks (e.g. invoked by the wallet provider's SDK) are blocked
+       * by an explicit guard inside the click handler — the button's wallet service
+       * checks the disabled state before processing.
+       *
+       * Idempotent — calling on an already-disabled button has no effect.
+       * Safe to call before `load()` (no-throw); the styles are applied once the
+       * container element exists.
+       *
+       * @example
+       * button.disable();
+       */
+    }, {
+      key: "disable",
+      value: function disable() {
+        this.isDisabled = true;
+        this.applyDisabledStyles();
+      }
+      /**
+       * Applies the disabled / enabled visual state to the container element.
+       * Reads `this.isDisabled` and toggles the corresponding CSS + ARIA attributes.
+       *
+       * @private
+       */
+    }, {
+      key: "applyDisabledStyles",
+      value: function applyDisabledStyles() {
+        var element = this.container.getElement();
+        if (!element) {
+          return;
+        }
+        if (this.isDisabled) {
+          element.style.pointerEvents = 'none';
+          element.style.opacity = '0.5';
+          element.setAttribute('aria-disabled', 'true');
+        } else {
+          element.style.pointerEvents = '';
+          element.style.opacity = '';
+          element.removeAttribute('aria-disabled');
+        }
+      }
       /**
        * Current method can change environment. By default environment = sandbox.
        * Also we can change domain alias for this environment. By default domain_alias = paydock.com
@@ -19633,7 +19853,9 @@
    * Returns `undefined` if the resulting object has no remaining properties.
    */
   function stripEmpty(obj) {
-    if (!obj || _typeof$1(obj) !== 'object') return undefined;
+    if (!obj || _typeof$1(obj) !== 'object') {
+      return undefined;
+    }
     var result = {};
     for (var _i = 0, _Object$entries = Object.entries(obj); _i < _Object$entries.length; _i++) {
       var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
@@ -19682,13 +19904,30 @@
       this.serviceGroup = SERVICE_GROUP.WALLET;
     }
     /**
-     * Creates a One-Time Token (OTT) by sending the payment data to the API.
-     * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+     * Returns whether the wallet button is currently disabled.
+     * Reads the `aria-disabled` attribute from the container element — set by the
+     * button class via {@link OpenWalletButtons.disable} / {@link OpenWalletButtons.enable}.
      *
-     * @param data - The payment data including amount, shipping, billing, card info, and ref token.
-     * @returns A promise resolving to the OTT response.
+     * Used to short-circuit click handlers in concrete wallet services for clicks
+     * that bypass the DOM `pointer-events: none` guard (e.g. invoked by the wallet
+     * provider's SDK callback).
+     *
+     * @returns `true` if the container is marked as disabled, `false` otherwise.
      */
     return _createClass(OpenWalletService, [{
+      key: "isButtonDisabled",
+      value: function isButtonDisabled() {
+        var element = this.container.getElement();
+        return (element === null || element === void 0 ? void 0 : element.getAttribute('aria-disabled')) === 'true';
+      }
+      /**
+       * Creates a One-Time Token (OTT) by sending the payment data to the API.
+       * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+       *
+       * @param data - The payment data including amount, shipping, billing, card info, and ref token.
+       * @returns A promise resolving to the OTT response.
+       */
+    }, {
       key: "createOTT",
       value: function createOTT(data) {
         var _this = this;
@@ -20209,6 +20448,9 @@
       key: "onApplePayButtonClicked",
       value: function onApplePayButtonClicked() {
         var _this7 = this;
+        if (this.isButtonDisabled()) {
+          return;
+        }
         var applePayApiVersion = getSupportedApplePayVersion();
         if (applePayApiVersion === 0) {
           this.handleOnUnavailable('Apple Pay version not supported');
@@ -20959,6 +21201,9 @@
       key: "onGooglePayButtonClicked",
       value: function onGooglePayButtonClicked() {
         var _this5 = this;
+        if (this.isButtonDisabled()) {
+          return;
+        }
         if (this.processingButtonClick) {
           console.warn('Google Pay button clicked while processing.');
           return;
@@ -22696,6 +22941,14 @@
           if (_this.provider) {
             _this.provider.load();
           }
+        })["catch"](function (error) {
+          var _a;
+          // Surface config-load failures (including transport-level ones now
+          // rejected by ApiBase) instead of leaving the widget hung silently.
+          _this.eventEmitter.emit(EVENT.CHECKOUT_ERROR, {
+            type: EVENT_DATA_TYPE.CRITICAL_ERROR,
+            data: (_a = error === null || error === void 0 ? void 0 : error.message) !== null && _a !== void 0 ? _a : 'Failed to load Click to Pay configuration.'
+          });
         });
       }
       /**
@@ -44485,8 +44738,11 @@
   exports.Api = Api;
   exports.ApplePayOpenWalletButton = ApplePayOpenWalletButton;
   exports.ApplePayWalletButtonExpress = ApplePayWalletButtonExpress;
+  exports.CANVAS_3DS_EVENT = CANVAS_3DS_EVENT;
   exports.CHECKOUT_BUTTON_EVENT = CHECKOUT_BUTTON_EVENT;
+  exports.CHECKOUT_EVENT = EVENT$2;
   exports.Canvas3ds = Canvas3ds;
+  exports.Canvas3dsTokenFormat = Canvas3dsTokenFormat;
   exports.Checkout = Checkout;
   exports.ClickToPay = ClickToPay;
   exports.Configuration = Configuration;
@@ -44503,6 +44759,9 @@
   exports.HtmlWidget = HtmlWidget;
   exports.InstructionDebugger = InstructionDebugger;
   exports.MultiWidget = MultiWidget;
+  exports.PAYMENT_EXPIRED = PAYMENT_EXPIRED;
+  exports.PAYMENT_FAILURE = PAYMENT_FAILURE;
+  exports.PAYMENT_SUCCESSFUL = PAYMENT_SUCCESSFUL;
   exports.PAYMENT_TYPE = PAYMENT_TYPE;
   exports.PayPalDataCollector = PayPalDataCollector;
   exports.PayPalSavePaymentSourceWidget = PayPalSavePaymentSourceWidget;