@paydock/client-sdk 1.143.0 → 1.144.1-beta

package/bundles/index.mjs

@@ -954,246 +954,6 @@ var ApiCharge = /*#__PURE__*/function () {
   }]);
 }();
 
-var ENV = {
-  SANDBOX: 'sandbox',
-  SANDBOX_KOVENA: 'sandbox-kovena',
-  SANDBOX_DEMO: 'sandbox-demo',
-  SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
-  PROD: 'production',
-  STAGING: 'staging',
-  STAGING_1: 'staging_1',
-  STAGING_2: 'staging_2',
-  STAGING_3: 'staging_3',
-  STAGING_4: 'staging_4',
-  STAGING_5: 'staging_5',
-  STAGING_6: 'staging_6',
-  STAGING_7: 'staging_7',
-  STAGING_8: 'staging_8',
-  STAGING_9: 'staging_9',
-  STAGING_10: 'staging_10',
-  STAGING_11: 'staging_11',
-  STAGING_12: 'staging_12',
-  STAGING_13: 'staging_13',
-  STAGING_14: 'staging_14',
-  STAGING_15: 'staging_15'
-};
-var WIDGET_URL = [{
-  env: ENV.SANDBOX,
-  url: 'https://widget-sandbox.'
-}, {
-  env: ENV.SANDBOX_KOVENA,
-  url: 'https://widget-sandbox.'
-}, {
-  env: ENV.SANDBOX_DEMO,
-  url: 'https://widget-sandbox-demo.'
-}, {
-  env: ENV.SANDBOX_DEMO_KOVENA,
-  url: 'https://widget-sandbox-demo.'
-}, {
-  env: ENV.PROD,
-  url: 'https://widget.'
-}, {
-  env: ENV.STAGING,
-  url: 'https://widsta.'
-}, {
-  env: ENV.STAGING_1,
-  url: 'https://widsta-1.'
-}, {
-  env: ENV.STAGING_2,
-  url: 'https://widsta-2.'
-}, {
-  env: ENV.STAGING_3,
-  url: 'https://widsta-3.'
-}, {
-  env: ENV.STAGING_4,
-  url: 'https://widsta-4.'
-}, {
-  env: ENV.STAGING_5,
-  url: 'https://widsta-5.'
-}, {
-  env: ENV.STAGING_6,
-  url: 'https://widsta-6.'
-}, {
-  env: ENV.STAGING_7,
-  url: 'https://widsta-7.'
-}, {
-  env: ENV.STAGING_8,
-  url: 'https://widsta-8.'
-}, {
-  env: ENV.STAGING_9,
-  url: 'https://widsta-9.'
-}, {
-  env: ENV.STAGING_10,
-  url: 'https://widsta-10.'
-}, {
-  env: ENV.STAGING_11,
-  url: 'https://widsta-11.'
-}, {
-  env: ENV.STAGING_12,
-  url: 'https://widsta-12.'
-}, {
-  env: ENV.STAGING_13,
-  url: 'https://widsta-13.'
-}, {
-  env: ENV.STAGING_14,
-  url: 'https://widsta-14.'
-}, {
-  env: ENV.STAGING_15,
-  url: 'https://widsta-15.'
-}];
-var API_URL = [{
-  env: ENV.SANDBOX,
-  url: 'https://api-sandbox.'
-}, {
-  env: ENV.PROD,
-  url: 'https://api.'
-}, {
-  env: ENV.STAGING,
-  url: 'https://apista.'
-}, {
-  env: ENV.STAGING_1,
-  url: 'https://apista-1.'
-}, {
-  env: ENV.STAGING_2,
-  url: 'https://apista-2.'
-}, {
-  env: ENV.STAGING_3,
-  url: 'https://apista-3.'
-}, {
-  env: ENV.STAGING_4,
-  url: 'https://apista-4.'
-}, {
-  env: ENV.STAGING_5,
-  url: 'https://apista-5.'
-}, {
-  env: ENV.STAGING_6,
-  url: 'https://apista-6.'
-}, {
-  env: ENV.STAGING_7,
-  url: 'https://apista-7.'
-}, {
-  env: ENV.STAGING_8,
-  url: 'https://apista-8.'
-}, {
-  env: ENV.STAGING_9,
-  url: 'https://apista-9.'
-}, {
-  env: ENV.STAGING_10,
-  url: 'https://apista-10.'
-}, {
-  env: ENV.STAGING_11,
-  url: 'https://apista-11.'
-}, {
-  env: ENV.STAGING_12,
-  url: 'https://apista-12.'
-}, {
-  env: ENV.STAGING_13,
-  url: 'https://apista-13.'
-}, {
-  env: ENV.STAGING_14,
-  url: 'https://apista-14.'
-}, {
-  env: ENV.STAGING_15,
-  url: 'https://apista-15.'
-}];
-var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
-var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
-var DEFAULT_ENV = ENV.SANDBOX;
-var DEFAULT_ALIAS = {
-  PAYDOCK: 'paydock.com',
-  KOVENA: 'kovena.com'
-};
-// TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
-// TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
-var Env = /*#__PURE__*/function () {
-  function Env(configs) {
-    var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
-    _classCallCheck(this, Env);
-    this.environmentConfigurations = configs;
-    this.setEnv(defaultEnv);
-  }
-  return _createClass(Env, [{
-    key: "setEnv",
-    value: function setEnv(environmentId, alias) {
-      this.validateAlias(alias);
-      this.validateEnvironmentId(environmentId);
-      this.environmentId = environmentId;
-      if (alias) {
-        this.alias = alias;
-      } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
-        this.alias = DEFAULT_ALIAS.KOVENA;
-      } else {
-        this.alias = DEFAULT_ALIAS.PAYDOCK;
-      }
-    }
-  }, {
-    key: "getEnv",
-    value: function getEnv() {
-      return this.environmentId;
-    }
-  }, {
-    key: "getConf",
-    value: function getConf() {
-      for (var index in this.environmentConfigurations) {
-        if (!Object.hasOwn(this.environmentConfigurations, index)) {
-          continue;
-        }
-        if (this.environmentConfigurations[index].env === this.getEnv()) {
-          return {
-            url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
-            env: this.environmentConfigurations[index].env
-          };
-        }
-      }
-      throw new Error('Env could not obtain configuration. Unknown environmentId.');
-    }
-  }, {
-    key: "validateAlias",
-    value: function validateAlias(alias) {
-      if (typeof alias === 'undefined') {
-        return;
-      }
-      if (typeof alias !== 'string') {
-        throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
-      }
-      if (!alias.match(REGEX_ALIAS)) {
-        throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
-      }
-    }
-  }, {
-    key: "validateEnvironmentId",
-    value: function validateEnvironmentId(environmentId) {
-      for (var index in this.environmentConfigurations) {
-        if (!Object.hasOwn(this.environmentConfigurations, index)) {
-          continue;
-        }
-        if (this.environmentConfigurations[index].env === environmentId) {
-          return;
-        }
-      }
-      throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
-    }
-  }]);
-}();
-
-var SDK = /*#__PURE__*/function () {
-  function SDK() {
-    _classCallCheck(this, SDK);
-  }
-  return _createClass(SDK, null, [{
-    key: "version",
-    get: function get() {
-      return SDK._version.trim() || null;
-    }
-  }]);
-}();
-SDK.type = 'client';
-SDK.headerKeys = Object.freeze({
-  version: 'x-sdk-version',
-  type: 'x-sdk-type'
-});
-SDK._version = 'v1.143.0';
-
 function isFunction(value) {
     return typeof value === 'function';
 }
@@ -1851,6 +1611,246 @@ var BehaviorSubject = (function (_super) {
     return BehaviorSubject;
 }(Subject));
 
+var ENV = {
+  SANDBOX: 'sandbox',
+  SANDBOX_KOVENA: 'sandbox-kovena',
+  SANDBOX_DEMO: 'sandbox-demo',
+  SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
+  PROD: 'production',
+  STAGING: 'staging',
+  STAGING_1: 'staging_1',
+  STAGING_2: 'staging_2',
+  STAGING_3: 'staging_3',
+  STAGING_4: 'staging_4',
+  STAGING_5: 'staging_5',
+  STAGING_6: 'staging_6',
+  STAGING_7: 'staging_7',
+  STAGING_8: 'staging_8',
+  STAGING_9: 'staging_9',
+  STAGING_10: 'staging_10',
+  STAGING_11: 'staging_11',
+  STAGING_12: 'staging_12',
+  STAGING_13: 'staging_13',
+  STAGING_14: 'staging_14',
+  STAGING_15: 'staging_15'
+};
+var WIDGET_URL = [{
+  env: ENV.SANDBOX,
+  url: 'https://widget-sandbox.'
+}, {
+  env: ENV.SANDBOX_KOVENA,
+  url: 'https://widget-sandbox.'
+}, {
+  env: ENV.SANDBOX_DEMO,
+  url: 'https://widget-sandbox-demo.'
+}, {
+  env: ENV.SANDBOX_DEMO_KOVENA,
+  url: 'https://widget-sandbox-demo.'
+}, {
+  env: ENV.PROD,
+  url: 'https://widget.'
+}, {
+  env: ENV.STAGING,
+  url: 'https://widsta.'
+}, {
+  env: ENV.STAGING_1,
+  url: 'https://widsta-1.'
+}, {
+  env: ENV.STAGING_2,
+  url: 'https://widsta-2.'
+}, {
+  env: ENV.STAGING_3,
+  url: 'https://widsta-3.'
+}, {
+  env: ENV.STAGING_4,
+  url: 'https://widsta-4.'
+}, {
+  env: ENV.STAGING_5,
+  url: 'https://widsta-5.'
+}, {
+  env: ENV.STAGING_6,
+  url: 'https://widsta-6.'
+}, {
+  env: ENV.STAGING_7,
+  url: 'https://widsta-7.'
+}, {
+  env: ENV.STAGING_8,
+  url: 'https://widsta-8.'
+}, {
+  env: ENV.STAGING_9,
+  url: 'https://widsta-9.'
+}, {
+  env: ENV.STAGING_10,
+  url: 'https://widsta-10.'
+}, {
+  env: ENV.STAGING_11,
+  url: 'https://widsta-11.'
+}, {
+  env: ENV.STAGING_12,
+  url: 'https://widsta-12.'
+}, {
+  env: ENV.STAGING_13,
+  url: 'https://widsta-13.'
+}, {
+  env: ENV.STAGING_14,
+  url: 'https://widsta-14.'
+}, {
+  env: ENV.STAGING_15,
+  url: 'https://widsta-15.'
+}];
+var API_URL = [{
+  env: ENV.SANDBOX,
+  url: 'https://api-sandbox.'
+}, {
+  env: ENV.PROD,
+  url: 'https://api.'
+}, {
+  env: ENV.STAGING,
+  url: 'https://apista.'
+}, {
+  env: ENV.STAGING_1,
+  url: 'https://apista-1.'
+}, {
+  env: ENV.STAGING_2,
+  url: 'https://apista-2.'
+}, {
+  env: ENV.STAGING_3,
+  url: 'https://apista-3.'
+}, {
+  env: ENV.STAGING_4,
+  url: 'https://apista-4.'
+}, {
+  env: ENV.STAGING_5,
+  url: 'https://apista-5.'
+}, {
+  env: ENV.STAGING_6,
+  url: 'https://apista-6.'
+}, {
+  env: ENV.STAGING_7,
+  url: 'https://apista-7.'
+}, {
+  env: ENV.STAGING_8,
+  url: 'https://apista-8.'
+}, {
+  env: ENV.STAGING_9,
+  url: 'https://apista-9.'
+}, {
+  env: ENV.STAGING_10,
+  url: 'https://apista-10.'
+}, {
+  env: ENV.STAGING_11,
+  url: 'https://apista-11.'
+}, {
+  env: ENV.STAGING_12,
+  url: 'https://apista-12.'
+}, {
+  env: ENV.STAGING_13,
+  url: 'https://apista-13.'
+}, {
+  env: ENV.STAGING_14,
+  url: 'https://apista-14.'
+}, {
+  env: ENV.STAGING_15,
+  url: 'https://apista-15.'
+}];
+var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
+var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
+var DEFAULT_ENV = ENV.SANDBOX;
+var DEFAULT_ALIAS = {
+  PAYDOCK: 'paydock.com',
+  KOVENA: 'kovena.com'
+};
+// TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+// TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
+var Env = /*#__PURE__*/function () {
+  function Env(configs) {
+    var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
+    _classCallCheck(this, Env);
+    this.environmentConfigurations = configs;
+    this.setEnv(defaultEnv);
+  }
+  return _createClass(Env, [{
+    key: "setEnv",
+    value: function setEnv(environmentId, alias) {
+      this.validateAlias(alias);
+      this.validateEnvironmentId(environmentId);
+      this.environmentId = environmentId;
+      if (alias) {
+        this.alias = alias;
+      } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+        this.alias = DEFAULT_ALIAS.KOVENA;
+      } else {
+        this.alias = DEFAULT_ALIAS.PAYDOCK;
+      }
+    }
+  }, {
+    key: "getEnv",
+    value: function getEnv() {
+      return this.environmentId;
+    }
+  }, {
+    key: "getConf",
+    value: function getConf() {
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === this.getEnv()) {
+          return {
+            url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+            env: this.environmentConfigurations[index].env
+          };
+        }
+      }
+      throw new Error('Env could not obtain configuration. Unknown environmentId.');
+    }
+  }, {
+    key: "validateAlias",
+    value: function validateAlias(alias) {
+      if (typeof alias === 'undefined') {
+        return;
+      }
+      if (typeof alias !== 'string') {
+        throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+      }
+      if (!alias.match(REGEX_ALIAS)) {
+        throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
+      }
+    }
+  }, {
+    key: "validateEnvironmentId",
+    value: function validateEnvironmentId(environmentId) {
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === environmentId) {
+          return;
+        }
+      }
+      throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
+    }
+  }]);
+}();
+
+var SDK = /*#__PURE__*/function () {
+  function SDK() {
+    _classCallCheck(this, SDK);
+  }
+  return _createClass(SDK, null, [{
+    key: "version",
+    get: function get() {
+      return SDK._version.trim() || null;
+    }
+  }]);
+}();
+SDK.type = 'client';
+SDK.headerKeys = Object.freeze({
+  version: 'x-sdk-version',
+  type: 'x-sdk-type'
+});
+SDK._version = 'v1.144.1-beta';
+
 var ACCESS_HEADER_NAME = {
   accessToken: 'x-access-token',
   publicKey: 'x-user-public-key'
@@ -1941,6 +1941,139 @@ var AccessToken = /*#__PURE__*/function () {
   }]);
 }();
 
+/**
+ * Top-level classification of an error. Used by the SDK to route errors to the
+ * right category in instrumentation and to give consumers a coarse-grained
+ * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+ * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+ */
+var ERROR_CATEGORY = {
+  /** SDK was misconfigured (missing keys, invalid options, etc.). */
+  CONFIGURATION: 'configuration',
+  /** Authentication or authorization failure. */
+  IDENTITY: 'identity_access_management',
+  /** SDK internal failure or upstream service problem. */
+  INTERNAL: 'internal',
+  /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
+  PROCESS: 'process',
+  /** Resource lookup failed or was rate-limited. */
+  RESOURCE: 'resource',
+  /** Invalid input or business-rule validation failure. */
+  VALIDATION: 'validation'
+};
+/**
+ * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+ * useful for deciding programmatic responses (e.g. show a retry button only
+ * when `cause` is `'service_unreachable'` or `'server_busy'`).
+ */
+var ERROR_CAUSE = {
+  /** Operation was aborted programmatically. */
+  ABORTED: 'aborted',
+  /** Caller has insufficient permissions for the operation. */
+  ACCESS_FORBIDDEN: 'access_forbidden',
+  /** Resource already exists when create was expected. */
+  ALREADY_EXISTS: 'already_exists',
+  /** User cancelled the flow (e.g. closed the wallet sheet). */
+  CANCELED: 'canceled',
+  /** SDK was instantiated or invoked with invalid configuration. */
+  INVALID_CONFIGURATION: 'invalid_configuration',
+  /** Input failed structural or business-rule validation. */
+  INVALID_INPUT: 'invalid_input',
+  /** Resource was not found by the backend. */
+  NOT_FOUND: 'not_found',
+  /** Operation is not supported in the current context or version. */
+  NOT_IMPLEMENTED: 'not_implemented',
+  /** Caller exceeded the allowed request rate. */
+  RATE_LIMITED: 'rate_limited',
+  /** Backend is healthy but currently overloaded — typically retryable. */
+  SERVER_BUSY: 'server_busy',
+  /** Backend or third-party service could not be reached — typically retryable. */
+  SERVICE_UNREACHABLE: 'service_unreachable',
+  /** Caller is not authenticated. */
+  UNAUTHORIZED: 'unauthorized',
+  /** Catch-all when no other cause applies. */
+  UNKNOWN: 'unknown_error',
+  /** Request was syntactically valid but semantically rejected. */
+  UNPROCESSABLE_ENTITY: 'unprocessable_entity'
+};
+var EventError = /*#__PURE__*/function (_Error) {
+  function EventError(cause, category, retryable, details) {
+    var _this;
+    _classCallCheck(this, EventError);
+    _this = _callSuper(this, EventError, [details.message]);
+    _this.cause = cause;
+    _this.category = category;
+    _this.retryable = retryable;
+    _this.details = details;
+    Object.setPrototypeOf(_this, EventError.prototype);
+    _this.name = EventError.name;
+    return _this;
+  }
+  _inherits(EventError, _Error);
+  return _createClass(EventError, [{
+    key: "toJSON",
+    value: function toJSON() {
+      return {
+        error: {
+          category: this.category,
+          cause: this.cause,
+          details: this.details,
+          retryable: this.retryable
+        }
+      };
+    }
+  }, {
+    key: "setContextId",
+    value: function setContextId(contextId) {
+      this.details.contextId = contextId;
+    }
+  }, {
+    key: "setPurpose",
+    value: function setPurpose(purpose) {
+      this.purpose = purpose;
+    }
+  }], [{
+    key: "create",
+    value: function create(cause, message) {
+      var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
+      var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+      var details = {
+        cause: cause,
+        contextId: contextId,
+        message: message,
+        timestamp: new Date().toISOString()
+      };
+      var category = getErrorCategory(cause);
+      return new EventError(cause, category, retryable, details);
+    }
+  }]);
+}(/*#__PURE__*/_wrapNativeSuper(Error));
+function getErrorCategory(cause) {
+  switch (cause) {
+    case ERROR_CAUSE.INVALID_CONFIGURATION:
+      return ERROR_CATEGORY.CONFIGURATION;
+    case ERROR_CAUSE.ACCESS_FORBIDDEN:
+    case ERROR_CAUSE.UNAUTHORIZED:
+      return ERROR_CATEGORY.IDENTITY;
+    case ERROR_CAUSE.SERVICE_UNREACHABLE:
+    case ERROR_CAUSE.NOT_IMPLEMENTED:
+    case ERROR_CAUSE.SERVER_BUSY:
+      return ERROR_CATEGORY.INTERNAL;
+    case ERROR_CAUSE.ABORTED:
+    case ERROR_CAUSE.CANCELED:
+      return ERROR_CATEGORY.PROCESS;
+    case ERROR_CAUSE.NOT_FOUND:
+    case ERROR_CAUSE.RATE_LIMITED:
+      return ERROR_CATEGORY.RESOURCE;
+    case ERROR_CAUSE.ALREADY_EXISTS:
+    case ERROR_CAUSE.INVALID_INPUT:
+    case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
+      return ERROR_CATEGORY.VALIDATION;
+    default:
+      return ERROR_CATEGORY.INTERNAL;
+  }
+}
+
 var HttpRequest = /*#__PURE__*/function () {
   function HttpRequest(request) {
     _classCallCheck(this, HttpRequest);
@@ -4635,18 +4768,23 @@ var ApiBase = /*#__PURE__*/function () {
           var errorCb = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : function (data) {
             return undefined;
           };
+          var onError = function onError(err) {
+            _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
+              classMethod: 'getClient',
+              description: 'Send unsuccessful.'
+            }));
+            errorCb(err);
+          };
           request.onload = function () {
             return _this4.parser({
               text: request.responseText,
               status: request.status
-            }, cb, function (err) {
-              _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
-                classMethod: 'getClient',
-                description: 'Send unsuccessful.'
-              }));
-              errorCb(err);
-            });
+            }, cb, onError);
           };
+          // Transport-level failures (dropped connection, failed CORS
+          // preflight, HTTP/2 protocol error, timeout) never fire `onload`,
+          // so without these handlers the request would fail silently.
+          _this4.attachFailureHandlers(request, onError);
           request.send(JSON.stringify(body));
         }
       };
@@ -4659,13 +4797,18 @@ var ApiBase = /*#__PURE__*/function () {
       return {
         config: request,
         send: function send(body) {
-          return new Promise(function (resolve, _reject) {
+          return new Promise(function (resolve, reject) {
             request.onload = function () {
               return resolve({
                 text: request.responseText,
                 status: request.status
               });
             };
+            // Transport-level failures (dropped connection, failed CORS
+            // preflight, HTTP/2 protocol error, timeout) never fire
+            // `onload`, so without these handlers the promise would never
+            // settle and the caller would hang silently.
+            _this5.attachFailureHandlers(request, reject);
             request.send(JSON.stringify(body));
           }).then(function (value) {
             return _this5.parserPromise(value);
@@ -4717,6 +4860,36 @@ var ApiBase = /*#__PURE__*/function () {
         return Promise.reject(err);
       }
     }
+    /**
+     * Wires the XHR failure events that `onload` does not cover. `onload` only
+     * fires when an HTTP response is received (any status, including 4xx/5xx);
+     * transport-level failures — a dropped connection, a failed CORS preflight,
+     * an HTTP/2 protocol error, or a timeout — fire `onerror`/`ontimeout`/
+     * `onabort` instead. Without these the request never settles and fails
+     * silently (e.g. `onUnavailable` is never invoked for wallet callbacks).
+     */
+  }, {
+    key: "attachFailureHandlers",
+    value: function attachFailureHandlers(request, onFailure) {
+      request.onerror = function () {
+        return onFailure({
+          message: 'Network request failed: the service could not be reached.',
+          code: ERROR_CAUSE.SERVICE_UNREACHABLE
+        });
+      };
+      request.ontimeout = function () {
+        return onFailure({
+          message: 'Network request timed out: the service could not be reached.',
+          code: ERROR_CAUSE.SERVICE_UNREACHABLE
+        });
+      };
+      request.onabort = function () {
+        return onFailure({
+          message: 'Network request was aborted.',
+          code: ERROR_CAUSE.ABORTED
+        });
+      };
+    }
   }, {
     key: "newApiRequest",
     value: function newApiRequest(method, link) {
@@ -4802,127 +4975,162 @@ var Api = /*#__PURE__*/function (_ApiBase) {
   }]);
 }(ApiBase);
 
-var Url = /*#__PURE__*/function () {
-  function Url() {
-    _classCallCheck(this, Url);
+var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
+var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
+var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
+var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
+var ApiChargeInternal = /*#__PURE__*/function () {
+  function ApiChargeInternal(api) {
+    _classCallCheck(this, ApiChargeInternal);
+    this.api = api;
   }
-  return _createClass(Url, null, [{
-    key: "extendSearchParams",
-    value: function extendSearchParams(uri, key, val) {
-      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
+  return _createClass(ApiChargeInternal, [{
+    key: "walletCapture",
+    value: function walletCapture(payload) {
+      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
     }
   }, {
-    key: "serialize",
-    value: function serialize(params) {
-      return Object.keys(params).map(function (key) {
-        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
-      }).join('&');
+    key: "walletCallback",
+    value: function walletCallback(payload) {
+      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsProcess",
+    value: function standalone3dsProcess(payload) {
+      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+    }
+  }, {
+    key: "standalone3dsHandle",
+    value: function standalone3dsHandle() {
+      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
     }
   }]);
 }();
 
-var Uuid = /*#__PURE__*/function () {
-  function Uuid() {
-    _classCallCheck(this, Uuid);
+var CALLBACK_LINK = '/v1/checkouts/callback';
+var INSTRUCTION_LINK = '/v1/checkouts/instruction';
+var STATUS_LINK = '/v1/checkouts';
+var ApiCheckoutInternal = /*#__PURE__*/function () {
+  function ApiCheckoutInternal(api) {
+    _classCallCheck(this, ApiCheckoutInternal);
+    this.api = api;
+    this.getInstructionLink = function () {
+      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
+    };
   }
-  return _createClass(Uuid, null, [{
-    key: "generate",
-    value: function generate() {
-      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
-        var buf = new Uint16Array(8);
-        window.crypto.getRandomValues(buf);
-        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
-      } else {
-        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
-      }
+  return _createClass(ApiCheckoutInternal, [{
+    key: "instructions",
+    value: function instructions() {
+      return this.api.requestObservable('GET', this.getInstructionLink(), {});
     }
   }, {
-    key: "hash",
-    value: function hash(number) {
-      var hash = number.toString(16);
-      while (hash.length < 4) {
-        hash = "0" + hash;
-      }
-      return hash;
+    key: "callback",
+    value: function callback(payload) {
+      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
     }
   }, {
-    key: "random",
-    value: function random() {
-      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
+    key: "status",
+    value: function status(id) {
+      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
     }
   }]);
 }();
 
-var WIDGET_LINK = '/remote-action';
-var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
-var PAYMENT_SOURCE_LINK = '/payment-sources';
-var SECURE_3D = '/3ds/webhook';
-var FLYPAY_LINK = '/wallet/flypay';
-var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
-var MESSAGE_WIDGET_LINK = '/message-widget';
-var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
-var Link = /*#__PURE__*/function () {
-  function Link(linkResource) {
-    _classCallCheck(this, Link);
-    this.params = {};
-    this.widgetId = Uuid.generate();
-    this.linkResource = linkResource;
-    this.env = new Env(WIDGET_URL);
-    this.setParams({
-      widget_id: this.widgetId
-    });
+var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
+var ApiGatewayInternal = /*#__PURE__*/function () {
+  function ApiGatewayInternal(api) {
+    _classCallCheck(this, ApiGatewayInternal);
+    this.api = api;
   }
-  return _createClass(Link, [{
-    key: "getNetUrl",
-    value: function getNetUrl() {
-      return this.env.getConf().url + this.linkResource;
+  return _createClass(ApiGatewayInternal, [{
+    key: "getWalletConfig",
+    value: function getWalletConfig(gateway_id) {
+      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
     }
-  }, {
-    key: "getUrl",
-    value: function getUrl() {
-      var url = this.getNetUrl();
-      var params = this.getParams();
-      for (var key in params) {
-        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
-      }
-      return url;
+  }]);
+}();
+
+var CREATE_OTT = '/v1/payment_sources/tokens';
+var CREATE_SESSION = '/v1/payment_sources/payment-session';
+var ApiPaymentSourceInternal = /*#__PURE__*/function () {
+  function ApiPaymentSourceInternal(api) {
+    _classCallCheck(this, ApiPaymentSourceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiPaymentSourceInternal, [{
+    key: "createOTT",
+    value: function createOTT(payload) {
+      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
     }
   }, {
-    key: "setParams",
-    value: function setParams(params) {
-      this.params = _extends({}, this.params, params);
+    key: "createSession",
+    value: function createSession(payload) {
+      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
     }
-  }, {
-    key: "concatParams",
-    value: function concatParams(params) {
-      for (var key in params) {
-        if (!params.hasOwnProperty(key) || !params[key].length) continue;
-        if (typeof this.params[key] !== 'string') this.params[key] = '';
-        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
-      }
+  }]);
+}();
+
+var GET_CONFIG = '/v1/services/:service_id/config';
+var ApiServiceInternal = /*#__PURE__*/function () {
+  function ApiServiceInternal(api) {
+    _classCallCheck(this, ApiServiceInternal);
+    this.api = api;
+  }
+  return _createClass(ApiServiceInternal, [{
+    key: "getConfig",
+    value: function getConfig(service_id) {
+      var url = GET_CONFIG.replace(':service_id', service_id);
+      return this.api.getClientPromise('GET', url).send(undefined);
+    }
+  }]);
+}();
+var SERVICE_TYPES;
+(function (SERVICE_TYPES) {
+  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
+  SERVICE_TYPES["BOOKING"] = "Booking";
+  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
+  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
+  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
+  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
+  SERVICE_TYPES["FORTER"] = "Forter";
+  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
+  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
+})(SERVICE_TYPES || (SERVICE_TYPES = {}));
+
+var ApiInternal = /*#__PURE__*/function (_ApiBase) {
+  function ApiInternal() {
+    _classCallCheck(this, ApiInternal);
+    return _callSuper(this, ApiInternal, arguments);
+  }
+  _inherits(ApiInternal, _ApiBase);
+  return _createClass(ApiInternal, [{
+    key: "charge",
+    value: function charge() {
+      return new ApiChargeInternal(this);
     }
   }, {
-    key: "getParams",
-    value: function getParams() {
-      return this.params;
+    key: "service",
+    value: function service() {
+      return new ApiServiceInternal(this);
     }
   }, {
-    key: "setEnv",
-    value: function setEnv(env, alias) {
-      this.env.setEnv(env, alias);
+    key: "checkout",
+    value: function checkout() {
+      return new ApiCheckoutInternal(this);
     }
   }, {
-    key: "getEnv",
-    value: function getEnv() {
-      return this.env.getEnv();
+    key: "gateway",
+    value: function gateway() {
+      return new ApiGatewayInternal(this);
     }
   }, {
-    key: "getBaseUrl",
-    value: function getBaseUrl() {
-      return this.env.getConf().url;
+    key: "paymentSource",
+    value: function paymentSource() {
+      return new ApiPaymentSourceInternal(this);
     }
   }]);
-}();
+}(ApiBase);
 
 var IFrame = /*#__PURE__*/function () {
   function IFrame(container) {
@@ -5119,10 +5327,10 @@ var IFrameEvent = /*#__PURE__*/function () {
 }();
 
 var hiddenStyle = {
-  visibility: "hidden",
-  border: "0",
-  width: "0",
-  height: "0"
+  visibility: 'hidden',
+  border: '0',
+  width: '0',
+  height: '0'
 };
 var PROCESS_STANDALONE_3DS_STATUS;
 (function (PROCESS_STANDALONE_3DS_STATUS) {
@@ -5144,14 +5352,30 @@ var IFRAME_STATUS;
   IFRAME_STATUS["TIMEOUT"] = "AuthTimedOut";
   IFRAME_STATUS["INVALID"] = "invalid_event";
 })(IFRAME_STATUS || (IFRAME_STATUS = {}));
+/**
+ * Event name constants emitted during the Standalone 3DS (GPayments) flow.
+ * Used internally by `GPaymentsService` and re-exported publicly as `CANVAS_3DS_EVENT`.
+ */
 var GPAYMENTS_EVENT = {
+  /** Authentication succeeded. Payload: `Canvas3dsAuthPayload`. */
   AUTH_SUCCESS: 'chargeAuthSuccess',
+  /** Authentication failed — covers issuer rejection, iframe timeout (`AuthTimedOut`), and invalid-event outcomes. Payload: `Canvas3dsAuthPayload`. */
   AUTH_ERROR: 'chargeAuthReject',
+  /** Decoupled authentication — issuer will authenticate out-of-band. Payload: `Canvas3dsAuthPayload`. */
   DECOUPLED: 'chargeAuthDecoupled',
+  /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
   CHALLENGE: 'chargeAuthChallenge',
+  /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
   INFO: 'chargeAuthInfo',
+  /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
   ERROR: 'error'
 };
+/**
+ * Public alias for GPAYMENTS_EVENT. Same object reference — no behavioral change.
+ * Prefer `CANVAS_3DS_EVENT` in public-facing code; `GPAYMENTS_EVENT` remains for
+ * backwards-compatible internal usage.
+ */
+var CANVAS_3DS_EVENT = GPAYMENTS_EVENT;
 var GPaymentsService = /*#__PURE__*/function () {
   function GPaymentsService(container, api, eventEmitter) {
     _classCallCheck(this, GPaymentsService);
@@ -5179,20 +5403,22 @@ var GPaymentsService = /*#__PURE__*/function () {
     value: function initializeIFrames(initializationUrl, secondaryUrl, title) {
       var hideAuthorization = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
       var container = this.container.getElement();
-      if (!container) return;
-      var divAuthorization = document.createElement("div");
-      divAuthorization.setAttribute("id", "paydock_authorization_iframe");
+      if (!container) {
+        return;
+      }
+      var divAuthorization = document.createElement('div');
+      divAuthorization.setAttribute('id', 'paydock_authorization_iframe');
       container.appendChild(divAuthorization);
-      this.browserAndChallengeContainer = new Container("#paydock_authorization_iframe");
+      this.browserAndChallengeContainer = new Container('#paydock_authorization_iframe');
       this.iFrameAuthorization = new IFrame(this.browserAndChallengeContainer);
       this.iFrameAuthorization.load(initializationUrl, {
         title: title
       });
       if (secondaryUrl) {
-        var divSecondaryURL = document.createElement("div");
-        divSecondaryURL.setAttribute("id", "paydock_secondary_iframe");
+        var divSecondaryURL = document.createElement('div');
+        divSecondaryURL.setAttribute('id', 'paydock_secondary_iframe');
         container.appendChild(divSecondaryURL);
-        this.monitoringContainer = new Container("#paydock_secondary_iframe");
+        this.monitoringContainer = new Container('#paydock_secondary_iframe');
         this.iFrameSecondaryUrl = new IFrame(this.monitoringContainer);
         this.iFrameSecondaryUrl.load(secondaryUrl, {
           title: title
@@ -5208,8 +5434,12 @@ var GPaymentsService = /*#__PURE__*/function () {
       var hideAuthorization = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
       var _a;
       for (var prop in hiddenStyle) {
-        if (!hiddenStyle.hasOwnProperty(prop)) continue;
-        if (hideAuthorization) this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        if (!Object.hasOwn(hiddenStyle, prop)) {
+          continue;
+        }
+        if (hideAuthorization) {
+          this.iFrameAuthorization.setStyle(prop, hiddenStyle[prop]);
+        }
         (_a = this.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.setStyle(prop, hiddenStyle[prop]);
       }
     }
@@ -5219,13 +5449,17 @@ var GPaymentsService = /*#__PURE__*/function () {
       var _this = this;
       this.iFrameEvent.on(EVENT$5.CHARGE_AUTH, widgetId, function (data) {
         if (data.status === IFRAME_STATUS.SKIPPED || data.status === IFRAME_STATUS.FINISHED) {
-          if (data.info) _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
-            info: data.info
-          });
+          if (data.info) {
+            _this.eventEmitter.emit(GPAYMENTS_EVENT.INFO, {
+              info: data.info
+            });
+          }
           _this.performAuthentication(data);
-        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
-          status: data.status
-        }, data.charge_3ds_id));
+        } else if (data.status === IFRAME_STATUS.TIMEOUT || data.status === IFRAME_STATUS.INVALID) {
+          _this.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this.parseHandleResponse({
+            status: data.status
+          }, data.charge_3ds_id));
+        }
       });
       this.iFrameEvent.on(EVENT$5.CHARGE_AUTH_SUCCESS, widgetId, function (data) {
         _this.processResult(data.charge_3ds_id);
@@ -5265,13 +5499,19 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "processResult",
     value: function processResult(charge3dsId) {
       var _this2 = this;
-      if (this.resultRead) return;
+      if (this.resultRead) {
+        return;
+      }
       this.resultRead = true;
       this.api.charge().standalone3dsHandle().then(function (result) {
         var _a;
         _this2.iFrameAuthorization.remove();
         (_a = _this2.iFrameSecondaryUrl) === null || _a === void 0 ? void 0 : _a.remove();
-        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));else _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        if (result.status === PROCESS_STANDALONE_3DS_STATUS.SUCCESS) {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this2.parseResultData(result, charge3dsId));
+        } else {
+          _this2.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this2.parseResultData(result, charge3dsId));
+        }
       }, function (err) {
         _this2.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this2.parseError(err, charge3dsId));
       });
@@ -5296,10 +5536,16 @@ var GPaymentsService = /*#__PURE__*/function () {
     key: "doPolling",
     value: function doPolling(url, charge3dsId) {
       var _this3 = this;
-      this.externalAPI("GET", url).then(function (data) {
-        if (!data.event || data.event === "AuthResultNotReady") setTimeout(function () {
-          _this3.doPolling(url, charge3dsId);
-        }, 2000);else if (data.event === 'AuthResultReady') _this3.processResult(charge3dsId);else throw new Error("Event not supported");
+      this.externalAPI('GET', url).then(function (data) {
+        if (!data.event || data.event === 'AuthResultNotReady') {
+          setTimeout(function () {
+            _this3.doPolling(url, charge3dsId);
+          }, 2000);
+        } else if (data.event === 'AuthResultReady') {
+          _this3.processResult(charge3dsId);
+        } else {
+          throw new Error('Event not supported');
+        }
       })["catch"](function (err) {
         return _this3.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this3.parseError(err, charge3dsId));
       });
@@ -5316,16 +5562,24 @@ var GPaymentsService = /*#__PURE__*/function () {
         charge_3ds_id: charge_3ds_id
       }).then(function (authenticationResult) {
         var _a, _b;
-        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
+        if (authenticationResult.status === AUTHENTICATION_STATUS.SUCCESS) {
+          _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_SUCCESS, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else if (authenticationResult.status === AUTHENTICATION_STATUS.PENDING) {
           if ((_a = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _a === void 0 ? void 0 : _a.challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.CHALLENGE, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
             _this4.initializeIFrames(authenticationResult.result.challenge_url, undefined, 'Authentication Challenge', false);
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           } else if ((_b = authenticationResult === null || authenticationResult === void 0 ? void 0 : authenticationResult.result) === null || _b === void 0 ? void 0 : _b.decoupled_challenge) {
             _this4.eventEmitter.emit(GPAYMENTS_EVENT.DECOUPLED, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
-            if (authenticationResult.result.secondary_url) _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            if (authenticationResult.result.secondary_url) {
+              _this4.doPolling(authenticationResult.result.secondary_url, charge_3ds_id);
+            }
           }
-        } else return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        } else {
+          return _this4.eventEmitter.emit(GPAYMENTS_EVENT.AUTH_ERROR, _this4.parseHandleResponse(authenticationResult, charge_3ds_id));
+        }
       }, function (err) {
         _this4.eventEmitter.emit(GPAYMENTS_EVENT.ERROR, _this4.parseError(err, charge_3ds_id));
       });
@@ -5333,192 +5587,159 @@ var GPaymentsService = /*#__PURE__*/function () {
   }]);
 }();
 
-var WALLET_CAPTURE_LINK = '/v1/charges/wallet/capture';
-var WALLET_CALLBACK_LINK = '/v1/charges/wallet/callback';
-var STANDALONE_3DS_PROCESS_LINK = '/v1/charges/standalone-3ds/process';
-var STANDALONE_3DS_HANDLE_LINK = '/v1/charges/standalone-3ds/handle';
-var ApiChargeInternal = /*#__PURE__*/function () {
-  function ApiChargeInternal(api) {
-    _classCallCheck(this, ApiChargeInternal);
-    this.api = api;
+var STANDALONE_3DS_GATEWAYS = {
+  GPAYMENTS: 'GPayments'
+};
+var Standalone3dsService = /*#__PURE__*/function () {
+  function Standalone3dsService(container, eventEmitter) {
+    _classCallCheck(this, Standalone3dsService);
+    this.env = DEFAULT_ENV;
+    this.container = container;
+    this.eventEmitter = eventEmitter;
   }
-  return _createClass(ApiChargeInternal, [{
-    key: "walletCapture",
-    value: function walletCapture(payload) {
-      return this.api.getClientPromise('POST', WALLET_CAPTURE_LINK).send(payload);
-    }
-  }, {
-    key: "walletCallback",
-    value: function walletCallback(payload) {
-      return this.api.getClientPromise('POST', WALLET_CALLBACK_LINK).send(payload);
-    }
-  }, {
-    key: "standalone3dsProcess",
-    value: function standalone3dsProcess(payload) {
-      return this.api.getClientPromise('POST', STANDALONE_3DS_PROCESS_LINK).send(payload);
+  return _createClass(Standalone3dsService, [{
+    key: "load",
+    value: function load(token, options) {
+      var parsedToken = AccessToken.validateJWT(token);
+      if (!parsedToken) {
+        throw new Error('Invalid charge token');
+      }
+      var tokenData = AccessToken.extractData(parsedToken.body);
+      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
+      api.setEnv(this.env, this.alias);
+      switch (tokenData.service_type) {
+        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
+          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
+          break;
+      }
     }
   }, {
-    key: "standalone3dsHandle",
-    value: function standalone3dsHandle() {
-      return this.api.getClientPromise('GET', STANDALONE_3DS_HANDLE_LINK).send(undefined);
+    key: "setEnv",
+    value: function setEnv(env, alias) {
+      this.env = env;
+      this.alias = alias;
     }
   }]);
 }();
 
-var CALLBACK_LINK = '/v1/checkouts/callback';
-var INSTRUCTION_LINK = '/v1/checkouts/instruction';
-var STATUS_LINK = '/v1/checkouts';
-var ApiCheckoutInternal = /*#__PURE__*/function () {
-  function ApiCheckoutInternal(api) {
-    _classCallCheck(this, ApiCheckoutInternal);
-    this.api = api;
-    this.getInstructionLink = function () {
-      return "".concat(INSTRUCTION_LINK, "?time=").concat(Date.now());
-    };
+var Url = /*#__PURE__*/function () {
+  function Url() {
+    _classCallCheck(this, Url);
   }
-  return _createClass(ApiCheckoutInternal, [{
-    key: "instructions",
-    value: function instructions() {
-      return this.api.requestObservable('GET', this.getInstructionLink(), {});
-    }
-  }, {
-    key: "callback",
-    value: function callback(payload) {
-      return this.api.getClientPromise('POST', CALLBACK_LINK).send(payload);
+  return _createClass(Url, null, [{
+    key: "extendSearchParams",
+    value: function extendSearchParams(uri, key, val) {
+      return uri.replace(new RegExp("([?&]" + key + "(?=[=&#]|$)[^#&]*|(?=#|$))"), "&" + key + "=" + encodeURIComponent(val)).replace(/^([^?&]+)&/, "$1?");
     }
   }, {
-    key: "status",
-    value: function status(id) {
-      return this.api.getClientPromise('GET', "".concat(STATUS_LINK, "/").concat(id)).send('');
-    }
-  }]);
-}();
-
-var GET_WALLET_CONFIG = '/v1/gateways/:gateway_id/wallet-config';
-var ApiGatewayInternal = /*#__PURE__*/function () {
-  function ApiGatewayInternal(api) {
-    _classCallCheck(this, ApiGatewayInternal);
-    this.api = api;
-  }
-  return _createClass(ApiGatewayInternal, [{
-    key: "getWalletConfig",
-    value: function getWalletConfig(gateway_id) {
-      var url = GET_WALLET_CONFIG.replace(':gateway_id', gateway_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+    key: "serialize",
+    value: function serialize(params) {
+      return Object.keys(params).map(function (key) {
+        return encodeURIComponent(key) + '=' + encodeURIComponent(params[key]);
+      }).join('&');
     }
   }]);
 }();
 
-var CREATE_OTT = '/v1/payment_sources/tokens';
-var CREATE_SESSION = '/v1/payment_sources/payment-session';
-var ApiPaymentSourceInternal = /*#__PURE__*/function () {
-  function ApiPaymentSourceInternal(api) {
-    _classCallCheck(this, ApiPaymentSourceInternal);
-    this.api = api;
+var Uuid = /*#__PURE__*/function () {
+  function Uuid() {
+    _classCallCheck(this, Uuid);
   }
-  return _createClass(ApiPaymentSourceInternal, [{
-    key: "createOTT",
-    value: function createOTT(payload) {
-      return this.api.getClientPromise('POST', CREATE_OTT).send(payload);
+  return _createClass(Uuid, null, [{
+    key: "generate",
+    value: function generate() {
+      if (typeof window !== "undefined" && typeof window.crypto !== "undefined" && typeof window.crypto.getRandomValues !== "undefined") {
+        var buf = new Uint16Array(8);
+        window.crypto.getRandomValues(buf);
+        return this.hash(buf[0]) + this.hash(buf[1]) + "-" + this.hash(buf[2]) + "-" + this.hash(buf[3]) + "-" + this.hash(buf[4]) + "-" + this.hash(buf[5]) + this.hash(buf[6]) + this.hash(buf[7]);
+      } else {
+        return this.random() + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + "-" + this.random() + this.random() + this.random();
+      }
     }
   }, {
-    key: "createSession",
-    value: function createSession(payload) {
-      return this.api.getClientPromise('POST', CREATE_SESSION).send(payload);
+    key: "hash",
+    value: function hash(number) {
+      var hash = number.toString(16);
+      while (hash.length < 4) {
+        hash = "0" + hash;
+      }
+      return hash;
     }
-  }]);
-}();
-
-var GET_CONFIG = '/v1/services/:service_id/config';
-var ApiServiceInternal = /*#__PURE__*/function () {
-  function ApiServiceInternal(api) {
-    _classCallCheck(this, ApiServiceInternal);
-    this.api = api;
-  }
-  return _createClass(ApiServiceInternal, [{
-    key: "getConfig",
-    value: function getConfig(service_id) {
-      var url = GET_CONFIG.replace(':service_id', service_id);
-      return this.api.getClientPromise('GET', url).send(undefined);
+  }, {
+    key: "random",
+    value: function random() {
+      return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1);
     }
   }]);
 }();
-var SERVICE_TYPES;
-(function (SERVICE_TYPES) {
-  SERVICE_TYPES["ACCERTIFY"] = "Accertify";
-  SERVICE_TYPES["BOOKING"] = "Booking";
-  SERVICE_TYPES["GPAYMENTS"] = "GPayments";
-  SERVICE_TYPES["CLICK_TO_PAY"] = "ClickToPay";
-  SERVICE_TYPES["MASTERCARD_NT"] = "MastercardSCOF";
-  SERVICE_TYPES["VISA_NT"] = "VisaVTS";
-  SERVICE_TYPES["FORTER"] = "Forter";
-  SERVICE_TYPES["APPLE_PAY"] = "ApplePay";
-  SERVICE_TYPES["GOOGLE_PAY"] = "GooglePay";
-})(SERVICE_TYPES || (SERVICE_TYPES = {}));
 
-var ApiInternal = /*#__PURE__*/function (_ApiBase) {
-  function ApiInternal() {
-    _classCallCheck(this, ApiInternal);
-    return _callSuper(this, ApiInternal, arguments);
+var WIDGET_LINK = '/remote-action';
+var VAULT_DISPLAY_WIDGET_LINK = '/vault-display';
+var PAYMENT_SOURCE_LINK = '/payment-sources';
+var SECURE_3D = '/3ds/webhook';
+var FLYPAY_LINK = '/wallet/flypay';
+var FLYPAY_LOGO_LINK = '/images/coles-pay-logo.png';
+var MESSAGE_WIDGET_LINK = '/message-widget';
+var MASTERCARD_SRC = '/secure-remote-commerce/mastercard';
+var Link = /*#__PURE__*/function () {
+  function Link(linkResource) {
+    _classCallCheck(this, Link);
+    this.params = {};
+    this.widgetId = Uuid.generate();
+    this.linkResource = linkResource;
+    this.env = new Env(WIDGET_URL);
+    this.setParams({
+      widget_id: this.widgetId
+    });
   }
-  _inherits(ApiInternal, _ApiBase);
-  return _createClass(ApiInternal, [{
-    key: "charge",
-    value: function charge() {
-      return new ApiChargeInternal(this);
+  return _createClass(Link, [{
+    key: "getNetUrl",
+    value: function getNetUrl() {
+      return this.env.getConf().url + this.linkResource;
     }
   }, {
-    key: "service",
-    value: function service() {
-      return new ApiServiceInternal(this);
+    key: "getUrl",
+    value: function getUrl() {
+      var url = this.getNetUrl();
+      var params = this.getParams();
+      for (var key in params) {
+        if (params.hasOwnProperty(key)) url = Url.extendSearchParams(url, key, params[key]);
+      }
+      return url;
     }
   }, {
-    key: "checkout",
-    value: function checkout() {
-      return new ApiCheckoutInternal(this);
+    key: "setParams",
+    value: function setParams(params) {
+      this.params = _extends({}, this.params, params);
     }
   }, {
-    key: "gateway",
-    value: function gateway() {
-      return new ApiGatewayInternal(this);
+    key: "concatParams",
+    value: function concatParams(params) {
+      for (var key in params) {
+        if (!params.hasOwnProperty(key) || !params[key].length) continue;
+        if (typeof this.params[key] !== 'string') this.params[key] = '';
+        if (this.params[key].length) this.params[key] += ',' + params[key];else this.params[key] += params[key];
+      }
     }
   }, {
-    key: "paymentSource",
-    value: function paymentSource() {
-      return new ApiPaymentSourceInternal(this);
-    }
-  }]);
-}(ApiBase);
-
-var STANDALONE_3DS_GATEWAYS = {
-  GPAYMENTS: "GPayments"
-};
-var Standalone3dsService = /*#__PURE__*/function () {
-  function Standalone3dsService(container, eventEmitter) {
-    _classCallCheck(this, Standalone3dsService);
-    this.env = DEFAULT_ENV;
-    this.container = container;
-    this.eventEmitter = eventEmitter;
-  }
-  return _createClass(Standalone3dsService, [{
-    key: "load",
-    value: function load(token, options) {
-      var parsedToken = AccessToken.validateJWT(token);
-      if (!parsedToken) throw new Error("Invalid charge token");
-      var tokenData = AccessToken.extractData(parsedToken.body);
-      var api = new ApiInternal(token, API_AUTH_TYPE.TOKEN);
-      api.setEnv(this.env, this.alias);
-      switch (tokenData.service_type) {
-        case STANDALONE_3DS_GATEWAYS.GPAYMENTS:
-          new GPaymentsService(this.container, api, this.eventEmitter).load(tokenData, options.title);
-          break;
-      }
+    key: "getParams",
+    value: function getParams() {
+      return this.params;
     }
   }, {
     key: "setEnv",
     value: function setEnv(env, alias) {
-      this.env = env;
-      this.alias = alias;
+      this.env.setEnv(env, alias);
+    }
+  }, {
+    key: "getEnv",
+    value: function getEnv() {
+      return this.env.getEnv();
+    }
+  }, {
+    key: "getBaseUrl",
+    value: function getBaseUrl() {
+      return this.env.getConf().url;
     }
   }]);
 }();
@@ -5558,7 +5779,7 @@ var TOKEN_FORMAT$2;
  * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
  * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
  * @param {string} ERROR=error
-*/
+ */
 /**
  * Class Canvas3ds include method for working on html
  * @constructor
@@ -5594,13 +5815,21 @@ var Canvas3ds = /*#__PURE__*/function () {
      *
      */
     function load() {
-      if (this.token.format === TOKEN_FORMAT$2.HTML) this.iFrame.loadFromHtml(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.URL) this.iFrame.load(this.token.content, {
-        title: '3d secure authentication'
-      }, 'threeDSecure-iframe');else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) this.standalone3dsService.load(this.token.content, {
-        title: '3d secure authentication'
-      });else console.error('Token contain unsupported payload');
+      if (this.token.format === TOKEN_FORMAT$2.HTML) {
+        this.iFrame.loadFromHtml(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.URL) {
+        this.iFrame.load(this.token.content, {
+          title: '3d secure authentication'
+        }, 'threeDSecure-iframe');
+      } else if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
+        this.standalone3dsService.load(this.token.content, {
+          title: '3d secure authentication'
+        });
+      } else {
+        console.error('Token contain unsupported payload');
+      }
     }
     /**
      * Current method can change environment. By default environment = sandbox.
@@ -5617,7 +5846,9 @@ var Canvas3ds = /*#__PURE__*/function () {
       this.link.setEnv(env, alias);
       this.standalone3dsService.setEnv(env, alias);
       for (var index in this.configs) {
-        if (!this.configs.hasOwnProperty(index)) continue;
+        if (!Object.hasOwn(this.configs, index)) {
+          continue;
+        }
         this.configs[index].setEnv(env, alias);
       }
     }
@@ -5627,34 +5858,45 @@ var Canvas3ds = /*#__PURE__*/function () {
       return this.link.getEnv();
     }
     /**
-     * Listen to events of widget
+     * Listen to events of widget.
      *
-     * @example
+     * Available event names are defined in {@link Canvas3dsEventMap} (typed) and
+     * {@link CANVAS_3DS_EVENT} (string constants). Using a literal event name
+     * narrows the callback payload via the typed overloads.
      *
-     * widget.on('chargeAuthReject', function (data) {
-     *      console.log(data);
+     * @example
+     * // Callback form — payload is narrowed by the event name
+     * widget.on('chargeAuthReject', (data) => {
+     *   console.log(data); // data is Canvas3dsAuthPayload | Canvas3dsChargeAuthEventPayload
      * });
-     * // or
-     * widget.on('chargeAuthReject').then(function (data) {
-     *      console.log(data);
+     *
+     * // Promise form
+     * widget.on('chargeAuthReject').then((data) => {
+     *   console.log(data);
      * });
-     * @param {string} eventName - Available event names [EVENT]{@link EVENT} [STANDALONE_3DS_EVENT]{@link STANDALONE_3DS_EVENT}
-     * @param {listener} [cb]
-     * @return {Promise<IEventData> | void}
+     *
+     * @param eventName - Event name from {@link Canvas3dsEventMap} or any string for dynamic events.
+     * @param cb - Optional listener callback. If omitted, returns a Promise that resolves on the next emission.
+     * @returns `void` when a callback is provided; otherwise a Promise that resolves with the event payload.
      */
+    // biome-ignore lint/suspicious/noExplicitAny: implementation signature must accept any payload shape to satisfy all overloads above
   }, {
     key: "on",
     value: function on(eventName, cb) {
       var _this = this;
       if (this.token.format === TOKEN_FORMAT$2.STANDALONE_3DS) {
-        if (typeof cb === 'function') return this.eventEmitter.subscribe(eventName, cb);
+        if (typeof cb === 'function') {
+          return this.eventEmitter.subscribe(eventName, cb);
+        }
         return new Promise(function (resolve) {
           return _this.eventEmitter.subscribe(eventName, function (res) {
             return resolve(res);
           });
         });
       } else {
-        if (typeof cb === 'function') return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        if (typeof cb === 'function') {
+          return this.event.on(eventName, this.link.getParams().ref_id, cb);
+        }
         return new Promise(function (resolve) {
           return _this.event.on(eventName, _this.link.getParams().ref_id, function (res) {
             return resolve(res);
@@ -5698,6 +5940,19 @@ var Canvas3ds = /*#__PURE__*/function () {
   }]);
 }();
 
+/**
+ * Public, tree-shakeable alias for the internal `TOKEN_FORMAT` enum in canvas-3ds.ts.
+ * Mirrors the string values of that enum without exposing the private enum itself.
+ */
+var Canvas3dsTokenFormat = {
+  /** Token whose `content` is a complete HTML page. The SDK renders it inside an iframe. */
+  HTML: 'html',
+  /** Token whose `content` is a URL. The SDK loads it inside an iframe. */
+  URL: 'url',
+  /** Token whose `content` describes a standalone 3DS service (e.g. GPayments). The SDK delegates to that service's flow. */
+  STANDALONE_3DS: 'standalone_3ds'
+};
+
 var Spinner = /*#__PURE__*/function () {
   function Spinner() {
     _classCallCheck(this, Spinner);
@@ -12783,108 +13038,6 @@ function getHandleCvv(configuration) {
   }
 }
 
-var ERROR_CATEGORY = {
-  CONFIGURATION: 'configuration',
-  IDENTITY: 'identity_access_management',
-  INTERNAL: 'internal',
-  PROCESS: 'process',
-  RESOURCE: 'resource',
-  VALIDATION: 'validation'
-};
-var ERROR_CAUSE = {
-  ABORTED: 'aborted',
-  ACCESS_FORBIDDEN: 'access_forbidden',
-  ALREADY_EXISTS: 'already_exists',
-  CANCELED: 'canceled',
-  INVALID_CONFIGURATION: 'invalid_configuration',
-  INVALID_INPUT: 'invalid_input',
-  NOT_FOUND: 'not_found',
-  NOT_IMPLEMENTED: 'not_implemented',
-  RATE_LIMITED: 'rate_limited',
-  SERVER_BUSY: 'server_busy',
-  SERVICE_UNREACHABLE: 'service_unreachable',
-  UNAUTHORIZED: 'unauthorized',
-  UNKNOWN: 'unknown_error',
-  UNPROCESSABLE_ENTITY: 'unprocessable_entity'
-};
-var EventError = /*#__PURE__*/function (_Error) {
-  function EventError(cause, category, retryable, details) {
-    var _this;
-    _classCallCheck(this, EventError);
-    _this = _callSuper(this, EventError, [details.message]);
-    _this.cause = cause;
-    _this.category = category;
-    _this.retryable = retryable;
-    _this.details = details;
-    Object.setPrototypeOf(_this, EventError.prototype);
-    _this.name = EventError.name;
-    return _this;
-  }
-  _inherits(EventError, _Error);
-  return _createClass(EventError, [{
-    key: "toJSON",
-    value: function toJSON() {
-      return {
-        error: {
-          category: this.category,
-          cause: this.cause,
-          details: this.details,
-          retryable: this.retryable
-        }
-      };
-    }
-  }, {
-    key: "setContextId",
-    value: function setContextId(contextId) {
-      this.details.contextId = contextId;
-    }
-  }, {
-    key: "setPurpose",
-    value: function setPurpose(purpose) {
-      this.purpose = purpose;
-    }
-  }], [{
-    key: "create",
-    value: function create(cause, message) {
-      var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
-      var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-      var details = {
-        cause: cause,
-        contextId: contextId,
-        message: message,
-        timestamp: new Date().toISOString()
-      };
-      var category = getErrorCategory(cause);
-      return new EventError(cause, category, retryable, details);
-    }
-  }]);
-}(/*#__PURE__*/_wrapNativeSuper(Error));
-function getErrorCategory(cause) {
-  switch (cause) {
-    case ERROR_CAUSE.INVALID_CONFIGURATION:
-      return ERROR_CATEGORY.CONFIGURATION;
-    case ERROR_CAUSE.ACCESS_FORBIDDEN:
-    case ERROR_CAUSE.UNAUTHORIZED:
-      return ERROR_CATEGORY.IDENTITY;
-    case ERROR_CAUSE.SERVICE_UNREACHABLE:
-    case ERROR_CAUSE.NOT_IMPLEMENTED:
-    case ERROR_CAUSE.SERVER_BUSY:
-      return ERROR_CATEGORY.INTERNAL;
-    case ERROR_CAUSE.ABORTED:
-    case ERROR_CAUSE.CANCELED:
-      return ERROR_CATEGORY.PROCESS;
-    case ERROR_CAUSE.NOT_FOUND:
-    case ERROR_CAUSE.RATE_LIMITED:
-      return ERROR_CATEGORY.RESOURCE;
-    case ERROR_CAUSE.ALREADY_EXISTS:
-    case ERROR_CAUSE.INVALID_INPUT:
-    case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
-      return ERROR_CATEGORY.VALIDATION;
-    default:
-      return ERROR_CATEGORY.INTERNAL;
-  }
-}
-
 function processEventError(err) {
   var cause;
   var message;
@@ -14864,7 +15017,6 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -14881,13 +15033,13 @@ var InstructionCanvas3dsShow$1 = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -17255,7 +17407,6 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('chargeAuthReject', function () {
         var _a;
-        // **TODO add interface for chargeAuthReject event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
@@ -17272,13 +17423,13 @@ var InstructionCanvas3dsShow = /*#__PURE__*/function (_InstructionHandler) {
       });
       canvas.on('error', function (event) {
         var _a;
-        // **TODO add interface for error event **//
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        var message = (event && _typeof$1(event) === 'object' && 'event' in event ? event.event : null) || 'error in 3ds widget';
         _this.api.checkout().callback({
           event: 'callback.child_widget.status',
           payload: {
             status: 'error',
-            message: (event === null || event === void 0 ? void 0 : event.event) || 'error in 3ds widget'
+            message: message
           }
         }).then(function () {
           return console.info('callback.child_widget.status: - errorEvent');
@@ -18645,10 +18796,16 @@ function getCheckoutVersionHandler(version) {
   }
 }
 
+/** Event name emitted when a checkout payment completes successfully. */
+var PAYMENT_SUCCESSFUL = 'paymentSuccessful';
+/** Event name emitted when a checkout payment fails. */
+var PAYMENT_FAILURE = 'paymentFailure';
+/** Event name emitted when a checkout session expires. */
+var PAYMENT_EXPIRED = 'paymentExpired';
 var EVENT$3 = {
-  PAYMENT_SUCCESSFUL: 'paymentSuccessful',
-  PAYMENT_FAILURE: 'paymentFailure',
-  PAYMENT_EXPIRED: 'paymentExpired'
+  PAYMENT_SUCCESSFUL: PAYMENT_SUCCESSFUL,
+  PAYMENT_FAILURE: PAYMENT_FAILURE,
+  PAYMENT_EXPIRED: PAYMENT_EXPIRED
 };
 /**
  * Class CheckoutButton transform usual button into checkout
@@ -18673,7 +18830,7 @@ var Checkout = /*#__PURE__*/function () {
     this.checkoutFinished = false;
     try {
       this.eventEmitter = new EventEmitter();
-      this.intentTokenPayload = this.extractIntentTokenPayload(intentToken);
+      this.intentTokenPayload = this.extractCheckoutIntentTokenPayload(intentToken);
       this.checkoutVersionHandler = getCheckoutVersionHandler(this.intentTokenPayload.version);
       this.instructions = this.initContractVersion();
       this.api = new ApiInternal(this.intentToken, API_AUTH_TYPE.TOKEN);
@@ -18734,8 +18891,8 @@ var Checkout = /*#__PURE__*/function () {
       }, 14 * 60 * 1000 + 45 * 1000);
     }
   }, {
-    key: "extractIntentTokenPayload",
-    value: function extractIntentTokenPayload(intentToken) {
+    key: "extractCheckoutIntentTokenPayload",
+    value: function extractCheckoutIntentTokenPayload(intentToken) {
       var tokenContent = AccessToken.validateJWT(intentToken);
       if (!tokenContent) {
         throw new Error('Intent token is broken or expired. Please, issue new one.');
@@ -18763,7 +18920,7 @@ var Checkout = /*#__PURE__*/function () {
     value: function ready() {
       var _this3 = this;
       this.changeLoadingSpinnerVisibility(true);
-      // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+      // biome-ignore lint/suspicious/noExplicitAny: checkoutApi.status returns a dynamic shape whose fields are narrowed at the call-sites below
       this.checkoutApi.status(this.intentTokenPayload.intent_id).then(function (response) {
         if (!(response === null || response === void 0 ? void 0 : response.status)) {
           throw new Error('Checkout Intent Status structure inconsistent');
@@ -18872,8 +19029,8 @@ var Checkout = /*#__PURE__*/function () {
      * Important: Do not perform thread blocking operations in callback such as window.alert() calls.
      *
      * @example
-     * widget.onPaymentInReview((data) => {
-     *      console.log('Payment in fraud review');
+     * widget.onPaymentExpired((data) => {
+     *      console.log('Payment session expired');
      * });
      */
   }, {
@@ -18994,6 +19151,7 @@ var OpenWalletButtons = /*#__PURE__*/function () {
   function OpenWalletButtons(selector, publicKeyOrAccessToken, serviceId, meta) {
     _classCallCheck(this, OpenWalletButtons);
     this.env = DEFAULT_ENV;
+    this.isDisabled = false;
     this.onShippingOptionsChangeHandlerRegistered = false;
     // Runtime guard: TypeScript's `abstract` keyword exists only at compile time.
     // Without this check, instantiating the base class directly silently fails
@@ -19138,6 +19296,68 @@ var OpenWalletButtons = /*#__PURE__*/function () {
         _this.handleOnError(error instanceof Error ? error : new Error(String(error)), ERROR_OPERATION.CONFIGURATION);
       });
     }
+    /**
+     * Enables the wallet button, restoring interactivity and visual appearance.
+     * If the button was previously disabled via `disable()`, calling this method
+     * re-enables clicks and removes the disabled visual state.
+     *
+     * Idempotent — calling on an already-enabled button has no effect.
+     *
+     * @example
+     * button.enable();
+     */
+  }, {
+    key: "enable",
+    value: function enable() {
+      this.isDisabled = false;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Disables the wallet button, preventing clicks and applying a visual disabled state.
+     * When disabled, the button appears grayed out (`opacity: 0.5`) and does not
+     * respond to user interaction (`pointer-events: none`). For accessibility, the
+     * `aria-disabled="true"` attribute is also set on the container.
+     *
+     * Programmatic clicks (e.g. invoked by the wallet provider's SDK) are blocked
+     * by an explicit guard inside the click handler — the button's wallet service
+     * checks the disabled state before processing.
+     *
+     * Idempotent — calling on an already-disabled button has no effect.
+     * Safe to call before `load()` (no-throw); the styles are applied once the
+     * container element exists.
+     *
+     * @example
+     * button.disable();
+     */
+  }, {
+    key: "disable",
+    value: function disable() {
+      this.isDisabled = true;
+      this.applyDisabledStyles();
+    }
+    /**
+     * Applies the disabled / enabled visual state to the container element.
+     * Reads `this.isDisabled` and toggles the corresponding CSS + ARIA attributes.
+     *
+     * @private
+     */
+  }, {
+    key: "applyDisabledStyles",
+    value: function applyDisabledStyles() {
+      var element = this.container.getElement();
+      if (!element) {
+        return;
+      }
+      if (this.isDisabled) {
+        element.style.pointerEvents = 'none';
+        element.style.opacity = '0.5';
+        element.setAttribute('aria-disabled', 'true');
+      } else {
+        element.style.pointerEvents = '';
+        element.style.opacity = '';
+        element.removeAttribute('aria-disabled');
+      }
+    }
     /**
      * Current method can change environment. By default environment = sandbox.
      * Also we can change domain alias for this environment. By default domain_alias = paydock.com
@@ -19627,7 +19847,9 @@ var SERVICE_GROUP;
  * Returns `undefined` if the resulting object has no remaining properties.
  */
 function stripEmpty(obj) {
-  if (!obj || _typeof$1(obj) !== 'object') return undefined;
+  if (!obj || _typeof$1(obj) !== 'object') {
+    return undefined;
+  }
   var result = {};
   for (var _i = 0, _Object$entries = Object.entries(obj); _i < _Object$entries.length; _i++) {
     var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
@@ -19676,13 +19898,30 @@ var OpenWalletService = /*#__PURE__*/function () {
     this.serviceGroup = SERVICE_GROUP.WALLET;
   }
   /**
-   * Creates a One-Time Token (OTT) by sending the payment data to the API.
-   * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+   * Returns whether the wallet button is currently disabled.
+   * Reads the `aria-disabled` attribute from the container element — set by the
+   * button class via {@link OpenWalletButtons.disable} / {@link OpenWalletButtons.enable}.
    *
-   * @param data - The payment data including amount, shipping, billing, card info, and ref token.
-   * @returns A promise resolving to the OTT response.
+   * Used to short-circuit click handlers in concrete wallet services for clicks
+   * that bypass the DOM `pointer-events: none` guard (e.g. invoked by the wallet
+   * provider's SDK callback).
+   *
+   * @returns `true` if the container is marked as disabled, `false` otherwise.
    */
   return _createClass(OpenWalletService, [{
+    key: "isButtonDisabled",
+    value: function isButtonDisabled() {
+      var element = this.container.getElement();
+      return (element === null || element === void 0 ? void 0 : element.getAttribute('aria-disabled')) === 'true';
+    }
+    /**
+     * Creates a One-Time Token (OTT) by sending the payment data to the API.
+     * Emits {@link EVENT.SUCCESS} on success or {@link EVENT.ERROR} on failure.
+     *
+     * @param data - The payment data including amount, shipping, billing, card info, and ref token.
+     * @returns A promise resolving to the OTT response.
+     */
+  }, {
     key: "createOTT",
     value: function createOTT(data) {
       var _this = this;
@@ -20203,6 +20442,9 @@ var ApplePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
     key: "onApplePayButtonClicked",
     value: function onApplePayButtonClicked() {
       var _this7 = this;
+      if (this.isButtonDisabled()) {
+        return;
+      }
       var applePayApiVersion = getSupportedApplePayVersion();
       if (applePayApiVersion === 0) {
         this.handleOnUnavailable('Apple Pay version not supported');
@@ -20953,6 +21195,9 @@ var GooglePayOpenWalletService = /*#__PURE__*/function (_OpenWalletService) {
     key: "onGooglePayButtonClicked",
     value: function onGooglePayButtonClicked() {
       var _this5 = this;
+      if (this.isButtonDisabled()) {
+        return;
+      }
       if (this.processingButtonClick) {
         console.warn('Google Pay button clicked while processing.');
         return;
@@ -22690,6 +22935,14 @@ var SRC = /*#__PURE__*/function () {
         if (_this.provider) {
           _this.provider.load();
         }
+      })["catch"](function (error) {
+        var _a;
+        // Surface config-load failures (including transport-level ones now
+        // rejected by ApiBase) instead of leaving the widget hung silently.
+        _this.eventEmitter.emit(EVENT$1.CHECKOUT_ERROR, {
+          type: EVENT_DATA_TYPE.CRITICAL_ERROR,
+          data: (_a = error === null || error === void 0 ? void 0 : error.message) !== null && _a !== void 0 ? _a : 'Failed to load Click to Pay configuration.'
+        });
       });
     }
     /**
@@ -44474,4 +44727,4 @@ var browser = /*#__PURE__*/Object.freeze({
   zlibSync: zlibSync
 });
 
-export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CHECKOUT_BUTTON_EVENT, Canvas3ds, Checkout, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$5 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
+export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CHECKOUT_BUTTON_EVENT, EVENT$3 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$5 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };