@paydock/client-sdk 1.144.0-beta → 1.144.1-beta

package/bundles/index.mjs

@@ -954,246 +954,6 @@ var ApiCharge = /*#__PURE__*/function () {
   }]);
 }();
 
-var ENV = {
-  SANDBOX: 'sandbox',
-  SANDBOX_KOVENA: 'sandbox-kovena',
-  SANDBOX_DEMO: 'sandbox-demo',
-  SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
-  PROD: 'production',
-  STAGING: 'staging',
-  STAGING_1: 'staging_1',
-  STAGING_2: 'staging_2',
-  STAGING_3: 'staging_3',
-  STAGING_4: 'staging_4',
-  STAGING_5: 'staging_5',
-  STAGING_6: 'staging_6',
-  STAGING_7: 'staging_7',
-  STAGING_8: 'staging_8',
-  STAGING_9: 'staging_9',
-  STAGING_10: 'staging_10',
-  STAGING_11: 'staging_11',
-  STAGING_12: 'staging_12',
-  STAGING_13: 'staging_13',
-  STAGING_14: 'staging_14',
-  STAGING_15: 'staging_15'
-};
-var WIDGET_URL = [{
-  env: ENV.SANDBOX,
-  url: 'https://widget-sandbox.'
-}, {
-  env: ENV.SANDBOX_KOVENA,
-  url: 'https://widget-sandbox.'
-}, {
-  env: ENV.SANDBOX_DEMO,
-  url: 'https://widget-sandbox-demo.'
-}, {
-  env: ENV.SANDBOX_DEMO_KOVENA,
-  url: 'https://widget-sandbox-demo.'
-}, {
-  env: ENV.PROD,
-  url: 'https://widget.'
-}, {
-  env: ENV.STAGING,
-  url: 'https://widsta.'
-}, {
-  env: ENV.STAGING_1,
-  url: 'https://widsta-1.'
-}, {
-  env: ENV.STAGING_2,
-  url: 'https://widsta-2.'
-}, {
-  env: ENV.STAGING_3,
-  url: 'https://widsta-3.'
-}, {
-  env: ENV.STAGING_4,
-  url: 'https://widsta-4.'
-}, {
-  env: ENV.STAGING_5,
-  url: 'https://widsta-5.'
-}, {
-  env: ENV.STAGING_6,
-  url: 'https://widsta-6.'
-}, {
-  env: ENV.STAGING_7,
-  url: 'https://widsta-7.'
-}, {
-  env: ENV.STAGING_8,
-  url: 'https://widsta-8.'
-}, {
-  env: ENV.STAGING_9,
-  url: 'https://widsta-9.'
-}, {
-  env: ENV.STAGING_10,
-  url: 'https://widsta-10.'
-}, {
-  env: ENV.STAGING_11,
-  url: 'https://widsta-11.'
-}, {
-  env: ENV.STAGING_12,
-  url: 'https://widsta-12.'
-}, {
-  env: ENV.STAGING_13,
-  url: 'https://widsta-13.'
-}, {
-  env: ENV.STAGING_14,
-  url: 'https://widsta-14.'
-}, {
-  env: ENV.STAGING_15,
-  url: 'https://widsta-15.'
-}];
-var API_URL = [{
-  env: ENV.SANDBOX,
-  url: 'https://api-sandbox.'
-}, {
-  env: ENV.PROD,
-  url: 'https://api.'
-}, {
-  env: ENV.STAGING,
-  url: 'https://apista.'
-}, {
-  env: ENV.STAGING_1,
-  url: 'https://apista-1.'
-}, {
-  env: ENV.STAGING_2,
-  url: 'https://apista-2.'
-}, {
-  env: ENV.STAGING_3,
-  url: 'https://apista-3.'
-}, {
-  env: ENV.STAGING_4,
-  url: 'https://apista-4.'
-}, {
-  env: ENV.STAGING_5,
-  url: 'https://apista-5.'
-}, {
-  env: ENV.STAGING_6,
-  url: 'https://apista-6.'
-}, {
-  env: ENV.STAGING_7,
-  url: 'https://apista-7.'
-}, {
-  env: ENV.STAGING_8,
-  url: 'https://apista-8.'
-}, {
-  env: ENV.STAGING_9,
-  url: 'https://apista-9.'
-}, {
-  env: ENV.STAGING_10,
-  url: 'https://apista-10.'
-}, {
-  env: ENV.STAGING_11,
-  url: 'https://apista-11.'
-}, {
-  env: ENV.STAGING_12,
-  url: 'https://apista-12.'
-}, {
-  env: ENV.STAGING_13,
-  url: 'https://apista-13.'
-}, {
-  env: ENV.STAGING_14,
-  url: 'https://apista-14.'
-}, {
-  env: ENV.STAGING_15,
-  url: 'https://apista-15.'
-}];
-var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
-var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
-var DEFAULT_ENV = ENV.SANDBOX;
-var DEFAULT_ALIAS = {
-  PAYDOCK: 'paydock.com',
-  KOVENA: 'kovena.com'
-};
-// TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
-// TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
-var Env = /*#__PURE__*/function () {
-  function Env(configs) {
-    var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
-    _classCallCheck(this, Env);
-    this.environmentConfigurations = configs;
-    this.setEnv(defaultEnv);
-  }
-  return _createClass(Env, [{
-    key: "setEnv",
-    value: function setEnv(environmentId, alias) {
-      this.validateAlias(alias);
-      this.validateEnvironmentId(environmentId);
-      this.environmentId = environmentId;
-      if (alias) {
-        this.alias = alias;
-      } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
-        this.alias = DEFAULT_ALIAS.KOVENA;
-      } else {
-        this.alias = DEFAULT_ALIAS.PAYDOCK;
-      }
-    }
-  }, {
-    key: "getEnv",
-    value: function getEnv() {
-      return this.environmentId;
-    }
-  }, {
-    key: "getConf",
-    value: function getConf() {
-      for (var index in this.environmentConfigurations) {
-        if (!Object.hasOwn(this.environmentConfigurations, index)) {
-          continue;
-        }
-        if (this.environmentConfigurations[index].env === this.getEnv()) {
-          return {
-            url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
-            env: this.environmentConfigurations[index].env
-          };
-        }
-      }
-      throw new Error('Env could not obtain configuration. Unknown environmentId.');
-    }
-  }, {
-    key: "validateAlias",
-    value: function validateAlias(alias) {
-      if (typeof alias === 'undefined') {
-        return;
-      }
-      if (typeof alias !== 'string') {
-        throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
-      }
-      if (!alias.match(REGEX_ALIAS)) {
-        throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
-      }
-    }
-  }, {
-    key: "validateEnvironmentId",
-    value: function validateEnvironmentId(environmentId) {
-      for (var index in this.environmentConfigurations) {
-        if (!Object.hasOwn(this.environmentConfigurations, index)) {
-          continue;
-        }
-        if (this.environmentConfigurations[index].env === environmentId) {
-          return;
-        }
-      }
-      throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
-    }
-  }]);
-}();
-
-var SDK = /*#__PURE__*/function () {
-  function SDK() {
-    _classCallCheck(this, SDK);
-  }
-  return _createClass(SDK, null, [{
-    key: "version",
-    get: function get() {
-      return SDK._version.trim() || null;
-    }
-  }]);
-}();
-SDK.type = 'client';
-SDK.headerKeys = Object.freeze({
-  version: 'x-sdk-version',
-  type: 'x-sdk-type'
-});
-SDK._version = 'v1.144.0-beta';
-
 function isFunction(value) {
     return typeof value === 'function';
 }
@@ -1851,23 +1611,263 @@ var BehaviorSubject = (function (_super) {
     return BehaviorSubject;
 }(Subject));
 
-var ACCESS_HEADER_NAME = {
-  accessToken: 'x-access-token',
-  publicKey: 'x-user-public-key'
-};
-var AccessToken = /*#__PURE__*/function () {
-  function AccessToken() {
-    _classCallCheck(this, AccessToken);
-  }
-  return _createClass(AccessToken, null, [{
-    key: "validateJWT",
-    value: function validateJWT(jwt) {
-      if (!jwt) return null;
-      var _jwt$split = jwt.split("."),
-        _jwt$split2 = _slicedToArray(_jwt$split, 3),
-        rawHead = _jwt$split2[0],
-        rawBody = _jwt$split2[1],
-        signature = _jwt$split2[2];
+var ENV = {
+  SANDBOX: 'sandbox',
+  SANDBOX_KOVENA: 'sandbox-kovena',
+  SANDBOX_DEMO: 'sandbox-demo',
+  SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
+  PROD: 'production',
+  STAGING: 'staging',
+  STAGING_1: 'staging_1',
+  STAGING_2: 'staging_2',
+  STAGING_3: 'staging_3',
+  STAGING_4: 'staging_4',
+  STAGING_5: 'staging_5',
+  STAGING_6: 'staging_6',
+  STAGING_7: 'staging_7',
+  STAGING_8: 'staging_8',
+  STAGING_9: 'staging_9',
+  STAGING_10: 'staging_10',
+  STAGING_11: 'staging_11',
+  STAGING_12: 'staging_12',
+  STAGING_13: 'staging_13',
+  STAGING_14: 'staging_14',
+  STAGING_15: 'staging_15'
+};
+var WIDGET_URL = [{
+  env: ENV.SANDBOX,
+  url: 'https://widget-sandbox.'
+}, {
+  env: ENV.SANDBOX_KOVENA,
+  url: 'https://widget-sandbox.'
+}, {
+  env: ENV.SANDBOX_DEMO,
+  url: 'https://widget-sandbox-demo.'
+}, {
+  env: ENV.SANDBOX_DEMO_KOVENA,
+  url: 'https://widget-sandbox-demo.'
+}, {
+  env: ENV.PROD,
+  url: 'https://widget.'
+}, {
+  env: ENV.STAGING,
+  url: 'https://widsta.'
+}, {
+  env: ENV.STAGING_1,
+  url: 'https://widsta-1.'
+}, {
+  env: ENV.STAGING_2,
+  url: 'https://widsta-2.'
+}, {
+  env: ENV.STAGING_3,
+  url: 'https://widsta-3.'
+}, {
+  env: ENV.STAGING_4,
+  url: 'https://widsta-4.'
+}, {
+  env: ENV.STAGING_5,
+  url: 'https://widsta-5.'
+}, {
+  env: ENV.STAGING_6,
+  url: 'https://widsta-6.'
+}, {
+  env: ENV.STAGING_7,
+  url: 'https://widsta-7.'
+}, {
+  env: ENV.STAGING_8,
+  url: 'https://widsta-8.'
+}, {
+  env: ENV.STAGING_9,
+  url: 'https://widsta-9.'
+}, {
+  env: ENV.STAGING_10,
+  url: 'https://widsta-10.'
+}, {
+  env: ENV.STAGING_11,
+  url: 'https://widsta-11.'
+}, {
+  env: ENV.STAGING_12,
+  url: 'https://widsta-12.'
+}, {
+  env: ENV.STAGING_13,
+  url: 'https://widsta-13.'
+}, {
+  env: ENV.STAGING_14,
+  url: 'https://widsta-14.'
+}, {
+  env: ENV.STAGING_15,
+  url: 'https://widsta-15.'
+}];
+var API_URL = [{
+  env: ENV.SANDBOX,
+  url: 'https://api-sandbox.'
+}, {
+  env: ENV.PROD,
+  url: 'https://api.'
+}, {
+  env: ENV.STAGING,
+  url: 'https://apista.'
+}, {
+  env: ENV.STAGING_1,
+  url: 'https://apista-1.'
+}, {
+  env: ENV.STAGING_2,
+  url: 'https://apista-2.'
+}, {
+  env: ENV.STAGING_3,
+  url: 'https://apista-3.'
+}, {
+  env: ENV.STAGING_4,
+  url: 'https://apista-4.'
+}, {
+  env: ENV.STAGING_5,
+  url: 'https://apista-5.'
+}, {
+  env: ENV.STAGING_6,
+  url: 'https://apista-6.'
+}, {
+  env: ENV.STAGING_7,
+  url: 'https://apista-7.'
+}, {
+  env: ENV.STAGING_8,
+  url: 'https://apista-8.'
+}, {
+  env: ENV.STAGING_9,
+  url: 'https://apista-9.'
+}, {
+  env: ENV.STAGING_10,
+  url: 'https://apista-10.'
+}, {
+  env: ENV.STAGING_11,
+  url: 'https://apista-11.'
+}, {
+  env: ENV.STAGING_12,
+  url: 'https://apista-12.'
+}, {
+  env: ENV.STAGING_13,
+  url: 'https://apista-13.'
+}, {
+  env: ENV.STAGING_14,
+  url: 'https://apista-14.'
+}, {
+  env: ENV.STAGING_15,
+  url: 'https://apista-15.'
+}];
+var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
+var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
+var DEFAULT_ENV = ENV.SANDBOX;
+var DEFAULT_ALIAS = {
+  PAYDOCK: 'paydock.com',
+  KOVENA: 'kovena.com'
+};
+// TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+// TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
+var Env = /*#__PURE__*/function () {
+  function Env(configs) {
+    var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
+    _classCallCheck(this, Env);
+    this.environmentConfigurations = configs;
+    this.setEnv(defaultEnv);
+  }
+  return _createClass(Env, [{
+    key: "setEnv",
+    value: function setEnv(environmentId, alias) {
+      this.validateAlias(alias);
+      this.validateEnvironmentId(environmentId);
+      this.environmentId = environmentId;
+      if (alias) {
+        this.alias = alias;
+      } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+        this.alias = DEFAULT_ALIAS.KOVENA;
+      } else {
+        this.alias = DEFAULT_ALIAS.PAYDOCK;
+      }
+    }
+  }, {
+    key: "getEnv",
+    value: function getEnv() {
+      return this.environmentId;
+    }
+  }, {
+    key: "getConf",
+    value: function getConf() {
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === this.getEnv()) {
+          return {
+            url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+            env: this.environmentConfigurations[index].env
+          };
+        }
+      }
+      throw new Error('Env could not obtain configuration. Unknown environmentId.');
+    }
+  }, {
+    key: "validateAlias",
+    value: function validateAlias(alias) {
+      if (typeof alias === 'undefined') {
+        return;
+      }
+      if (typeof alias !== 'string') {
+        throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+      }
+      if (!alias.match(REGEX_ALIAS)) {
+        throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
+      }
+    }
+  }, {
+    key: "validateEnvironmentId",
+    value: function validateEnvironmentId(environmentId) {
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === environmentId) {
+          return;
+        }
+      }
+      throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
+    }
+  }]);
+}();
+
+var SDK = /*#__PURE__*/function () {
+  function SDK() {
+    _classCallCheck(this, SDK);
+  }
+  return _createClass(SDK, null, [{
+    key: "version",
+    get: function get() {
+      return SDK._version.trim() || null;
+    }
+  }]);
+}();
+SDK.type = 'client';
+SDK.headerKeys = Object.freeze({
+  version: 'x-sdk-version',
+  type: 'x-sdk-type'
+});
+SDK._version = 'v1.144.1-beta';
+
+var ACCESS_HEADER_NAME = {
+  accessToken: 'x-access-token',
+  publicKey: 'x-user-public-key'
+};
+var AccessToken = /*#__PURE__*/function () {
+  function AccessToken() {
+    _classCallCheck(this, AccessToken);
+  }
+  return _createClass(AccessToken, null, [{
+    key: "validateJWT",
+    value: function validateJWT(jwt) {
+      if (!jwt) return null;
+      var _jwt$split = jwt.split("."),
+        _jwt$split2 = _slicedToArray(_jwt$split, 3),
+        rawHead = _jwt$split2[0],
+        rawBody = _jwt$split2[1],
+        signature = _jwt$split2[2];
       if (!rawHead || !rawBody || !signature) return null;
       if (2 + rawHead.length + rawBody.length + signature.length !== jwt.length) return null;
       try {
@@ -1914,32 +1914,165 @@ var AccessToken = /*#__PURE__*/function () {
       }
     }
   }, {
-    key: "validateJWTWhitelistedDomains",
-    value: function validateJWTWhitelistedDomains(body) {
-      var _a;
-      try {
-        if (!body.meta) return true;
-        var meta = this.extractData(body);
-        if (!meta) return true;
-        if (!((_a = meta.whitelist_domains) === null || _a === void 0 ? void 0 : _a.length)) return true;
-        return meta.whitelist_domains.includes(window.location.hostname);
-      } catch (err) {
-        return true;
-      }
+    key: "validateJWTWhitelistedDomains",
+    value: function validateJWTWhitelistedDomains(body) {
+      var _a;
+      try {
+        if (!body.meta) return true;
+        var meta = this.extractData(body);
+        if (!meta) return true;
+        if (!((_a = meta.whitelist_domains) === null || _a === void 0 ? void 0 : _a.length)) return true;
+        return meta.whitelist_domains.includes(window.location.hostname);
+      } catch (err) {
+        return true;
+      }
+    }
+  }, {
+    key: "getAccessHeaderNameByToken",
+    value: function getAccessHeaderNameByToken(token) {
+      return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
+    }
+  }, {
+    key: "isJwt",
+    value: function isJwt(value) {
+      var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
+      return jwtPattern.test(value);
+    }
+  }]);
+}();
+
+/**
+ * Top-level classification of an error. Used by the SDK to route errors to the
+ * right category in instrumentation and to give consumers a coarse-grained
+ * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+ * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+ */
+var ERROR_CATEGORY = {
+  /** SDK was misconfigured (missing keys, invalid options, etc.). */
+  CONFIGURATION: 'configuration',
+  /** Authentication or authorization failure. */
+  IDENTITY: 'identity_access_management',
+  /** SDK internal failure or upstream service problem. */
+  INTERNAL: 'internal',
+  /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
+  PROCESS: 'process',
+  /** Resource lookup failed or was rate-limited. */
+  RESOURCE: 'resource',
+  /** Invalid input or business-rule validation failure. */
+  VALIDATION: 'validation'
+};
+/**
+ * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+ * useful for deciding programmatic responses (e.g. show a retry button only
+ * when `cause` is `'service_unreachable'` or `'server_busy'`).
+ */
+var ERROR_CAUSE = {
+  /** Operation was aborted programmatically. */
+  ABORTED: 'aborted',
+  /** Caller has insufficient permissions for the operation. */
+  ACCESS_FORBIDDEN: 'access_forbidden',
+  /** Resource already exists when create was expected. */
+  ALREADY_EXISTS: 'already_exists',
+  /** User cancelled the flow (e.g. closed the wallet sheet). */
+  CANCELED: 'canceled',
+  /** SDK was instantiated or invoked with invalid configuration. */
+  INVALID_CONFIGURATION: 'invalid_configuration',
+  /** Input failed structural or business-rule validation. */
+  INVALID_INPUT: 'invalid_input',
+  /** Resource was not found by the backend. */
+  NOT_FOUND: 'not_found',
+  /** Operation is not supported in the current context or version. */
+  NOT_IMPLEMENTED: 'not_implemented',
+  /** Caller exceeded the allowed request rate. */
+  RATE_LIMITED: 'rate_limited',
+  /** Backend is healthy but currently overloaded — typically retryable. */
+  SERVER_BUSY: 'server_busy',
+  /** Backend or third-party service could not be reached — typically retryable. */
+  SERVICE_UNREACHABLE: 'service_unreachable',
+  /** Caller is not authenticated. */
+  UNAUTHORIZED: 'unauthorized',
+  /** Catch-all when no other cause applies. */
+  UNKNOWN: 'unknown_error',
+  /** Request was syntactically valid but semantically rejected. */
+  UNPROCESSABLE_ENTITY: 'unprocessable_entity'
+};
+var EventError = /*#__PURE__*/function (_Error) {
+  function EventError(cause, category, retryable, details) {
+    var _this;
+    _classCallCheck(this, EventError);
+    _this = _callSuper(this, EventError, [details.message]);
+    _this.cause = cause;
+    _this.category = category;
+    _this.retryable = retryable;
+    _this.details = details;
+    Object.setPrototypeOf(_this, EventError.prototype);
+    _this.name = EventError.name;
+    return _this;
+  }
+  _inherits(EventError, _Error);
+  return _createClass(EventError, [{
+    key: "toJSON",
+    value: function toJSON() {
+      return {
+        error: {
+          category: this.category,
+          cause: this.cause,
+          details: this.details,
+          retryable: this.retryable
+        }
+      };
+    }
+  }, {
+    key: "setContextId",
+    value: function setContextId(contextId) {
+      this.details.contextId = contextId;
     }
   }, {
-    key: "getAccessHeaderNameByToken",
-    value: function getAccessHeaderNameByToken(token) {
-      return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
+    key: "setPurpose",
+    value: function setPurpose(purpose) {
+      this.purpose = purpose;
     }
-  }, {
-    key: "isJwt",
-    value: function isJwt(value) {
-      var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
-      return jwtPattern.test(value);
+  }], [{
+    key: "create",
+    value: function create(cause, message) {
+      var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
+      var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+      var details = {
+        cause: cause,
+        contextId: contextId,
+        message: message,
+        timestamp: new Date().toISOString()
+      };
+      var category = getErrorCategory(cause);
+      return new EventError(cause, category, retryable, details);
     }
   }]);
-}();
+}(/*#__PURE__*/_wrapNativeSuper(Error));
+function getErrorCategory(cause) {
+  switch (cause) {
+    case ERROR_CAUSE.INVALID_CONFIGURATION:
+      return ERROR_CATEGORY.CONFIGURATION;
+    case ERROR_CAUSE.ACCESS_FORBIDDEN:
+    case ERROR_CAUSE.UNAUTHORIZED:
+      return ERROR_CATEGORY.IDENTITY;
+    case ERROR_CAUSE.SERVICE_UNREACHABLE:
+    case ERROR_CAUSE.NOT_IMPLEMENTED:
+    case ERROR_CAUSE.SERVER_BUSY:
+      return ERROR_CATEGORY.INTERNAL;
+    case ERROR_CAUSE.ABORTED:
+    case ERROR_CAUSE.CANCELED:
+      return ERROR_CATEGORY.PROCESS;
+    case ERROR_CAUSE.NOT_FOUND:
+    case ERROR_CAUSE.RATE_LIMITED:
+      return ERROR_CATEGORY.RESOURCE;
+    case ERROR_CAUSE.ALREADY_EXISTS:
+    case ERROR_CAUSE.INVALID_INPUT:
+    case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
+      return ERROR_CATEGORY.VALIDATION;
+    default:
+      return ERROR_CATEGORY.INTERNAL;
+  }
+}
 
 var HttpRequest = /*#__PURE__*/function () {
   function HttpRequest(request) {
@@ -4635,18 +4768,23 @@ var ApiBase = /*#__PURE__*/function () {
           var errorCb = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : function (data) {
             return undefined;
           };
+          var onError = function onError(err) {
+            _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
+              classMethod: 'getClient',
+              description: 'Send unsuccessful.'
+            }));
+            errorCb(err);
+          };
           request.onload = function () {
             return _this4.parser({
               text: request.responseText,
               status: request.status
-            }, cb, function (err) {
-              _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
-                classMethod: 'getClient',
-                description: 'Send unsuccessful.'
-              }));
-              errorCb(err);
-            });
+            }, cb, onError);
           };
+          // Transport-level failures (dropped connection, failed CORS
+          // preflight, HTTP/2 protocol error, timeout) never fire `onload`,
+          // so without these handlers the request would fail silently.
+          _this4.attachFailureHandlers(request, onError);
           request.send(JSON.stringify(body));
         }
       };
@@ -4659,13 +4797,18 @@ var ApiBase = /*#__PURE__*/function () {
       return {
         config: request,
         send: function send(body) {
-          return new Promise(function (resolve, _reject) {
+          return new Promise(function (resolve, reject) {
             request.onload = function () {
               return resolve({
                 text: request.responseText,
                 status: request.status
               });
             };
+            // Transport-level failures (dropped connection, failed CORS
+            // preflight, HTTP/2 protocol error, timeout) never fire
+            // `onload`, so without these handlers the promise would never
+            // settle and the caller would hang silently.
+            _this5.attachFailureHandlers(request, reject);
             request.send(JSON.stringify(body));
           }).then(function (value) {
             return _this5.parserPromise(value);
@@ -4717,6 +4860,36 @@ var ApiBase = /*#__PURE__*/function () {
         return Promise.reject(err);
       }
     }
+    /**
+     * Wires the XHR failure events that `onload` does not cover. `onload` only
+     * fires when an HTTP response is received (any status, including 4xx/5xx);
+     * transport-level failures — a dropped connection, a failed CORS preflight,
+     * an HTTP/2 protocol error, or a timeout — fire `onerror`/`ontimeout`/
+     * `onabort` instead. Without these the request never settles and fails
+     * silently (e.g. `onUnavailable` is never invoked for wallet callbacks).
+     */
+  }, {
+    key: "attachFailureHandlers",
+    value: function attachFailureHandlers(request, onFailure) {
+      request.onerror = function () {
+        return onFailure({
+          message: 'Network request failed: the service could not be reached.',
+          code: ERROR_CAUSE.SERVICE_UNREACHABLE
+        });
+      };
+      request.ontimeout = function () {
+        return onFailure({
+          message: 'Network request timed out: the service could not be reached.',
+          code: ERROR_CAUSE.SERVICE_UNREACHABLE
+        });
+      };
+      request.onabort = function () {
+        return onFailure({
+          message: 'Network request was aborted.',
+          code: ERROR_CAUSE.ABORTED
+        });
+      };
+    }
   }, {
     key: "newApiRequest",
     value: function newApiRequest(method, link) {
@@ -12865,139 +13038,6 @@ function getHandleCvv(configuration) {
   }
 }
 
-/**
- * Top-level classification of an error. Used by the SDK to route errors to the
- * right category in instrumentation and to give consumers a coarse-grained
- * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
- * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
- */
-var ERROR_CATEGORY = {
-  /** SDK was misconfigured (missing keys, invalid options, etc.). */
-  CONFIGURATION: 'configuration',
-  /** Authentication or authorization failure. */
-  IDENTITY: 'identity_access_management',
-  /** SDK internal failure or upstream service problem. */
-  INTERNAL: 'internal',
-  /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
-  PROCESS: 'process',
-  /** Resource lookup failed or was rate-limited. */
-  RESOURCE: 'resource',
-  /** Invalid input or business-rule validation failure. */
-  VALIDATION: 'validation'
-};
-/**
- * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
- * useful for deciding programmatic responses (e.g. show a retry button only
- * when `cause` is `'service_unreachable'` or `'server_busy'`).
- */
-var ERROR_CAUSE = {
-  /** Operation was aborted programmatically. */
-  ABORTED: 'aborted',
-  /** Caller has insufficient permissions for the operation. */
-  ACCESS_FORBIDDEN: 'access_forbidden',
-  /** Resource already exists when create was expected. */
-  ALREADY_EXISTS: 'already_exists',
-  /** User cancelled the flow (e.g. closed the wallet sheet). */
-  CANCELED: 'canceled',
-  /** SDK was instantiated or invoked with invalid configuration. */
-  INVALID_CONFIGURATION: 'invalid_configuration',
-  /** Input failed structural or business-rule validation. */
-  INVALID_INPUT: 'invalid_input',
-  /** Resource was not found by the backend. */
-  NOT_FOUND: 'not_found',
-  /** Operation is not supported in the current context or version. */
-  NOT_IMPLEMENTED: 'not_implemented',
-  /** Caller exceeded the allowed request rate. */
-  RATE_LIMITED: 'rate_limited',
-  /** Backend is healthy but currently overloaded — typically retryable. */
-  SERVER_BUSY: 'server_busy',
-  /** Backend or third-party service could not be reached — typically retryable. */
-  SERVICE_UNREACHABLE: 'service_unreachable',
-  /** Caller is not authenticated. */
-  UNAUTHORIZED: 'unauthorized',
-  /** Catch-all when no other cause applies. */
-  UNKNOWN: 'unknown_error',
-  /** Request was syntactically valid but semantically rejected. */
-  UNPROCESSABLE_ENTITY: 'unprocessable_entity'
-};
-var EventError = /*#__PURE__*/function (_Error) {
-  function EventError(cause, category, retryable, details) {
-    var _this;
-    _classCallCheck(this, EventError);
-    _this = _callSuper(this, EventError, [details.message]);
-    _this.cause = cause;
-    _this.category = category;
-    _this.retryable = retryable;
-    _this.details = details;
-    Object.setPrototypeOf(_this, EventError.prototype);
-    _this.name = EventError.name;
-    return _this;
-  }
-  _inherits(EventError, _Error);
-  return _createClass(EventError, [{
-    key: "toJSON",
-    value: function toJSON() {
-      return {
-        error: {
-          category: this.category,
-          cause: this.cause,
-          details: this.details,
-          retryable: this.retryable
-        }
-      };
-    }
-  }, {
-    key: "setContextId",
-    value: function setContextId(contextId) {
-      this.details.contextId = contextId;
-    }
-  }, {
-    key: "setPurpose",
-    value: function setPurpose(purpose) {
-      this.purpose = purpose;
-    }
-  }], [{
-    key: "create",
-    value: function create(cause, message) {
-      var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
-      var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-      var details = {
-        cause: cause,
-        contextId: contextId,
-        message: message,
-        timestamp: new Date().toISOString()
-      };
-      var category = getErrorCategory(cause);
-      return new EventError(cause, category, retryable, details);
-    }
-  }]);
-}(/*#__PURE__*/_wrapNativeSuper(Error));
-function getErrorCategory(cause) {
-  switch (cause) {
-    case ERROR_CAUSE.INVALID_CONFIGURATION:
-      return ERROR_CATEGORY.CONFIGURATION;
-    case ERROR_CAUSE.ACCESS_FORBIDDEN:
-    case ERROR_CAUSE.UNAUTHORIZED:
-      return ERROR_CATEGORY.IDENTITY;
-    case ERROR_CAUSE.SERVICE_UNREACHABLE:
-    case ERROR_CAUSE.NOT_IMPLEMENTED:
-    case ERROR_CAUSE.SERVER_BUSY:
-      return ERROR_CATEGORY.INTERNAL;
-    case ERROR_CAUSE.ABORTED:
-    case ERROR_CAUSE.CANCELED:
-      return ERROR_CATEGORY.PROCESS;
-    case ERROR_CAUSE.NOT_FOUND:
-    case ERROR_CAUSE.RATE_LIMITED:
-      return ERROR_CATEGORY.RESOURCE;
-    case ERROR_CAUSE.ALREADY_EXISTS:
-    case ERROR_CAUSE.INVALID_INPUT:
-    case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
-      return ERROR_CATEGORY.VALIDATION;
-    default:
-      return ERROR_CATEGORY.INTERNAL;
-  }
-}
-
 function processEventError(err) {
   var cause;
   var message;
@@ -22895,6 +22935,14 @@ var SRC = /*#__PURE__*/function () {
         if (_this.provider) {
           _this.provider.load();
         }
+      })["catch"](function (error) {
+        var _a;
+        // Surface config-load failures (including transport-level ones now
+        // rejected by ApiBase) instead of leaving the widget hung silently.
+        _this.eventEmitter.emit(EVENT$1.CHECKOUT_ERROR, {
+          type: EVENT_DATA_TYPE.CRITICAL_ERROR,
+          data: (_a = error === null || error === void 0 ? void 0 : error.message) !== null && _a !== void 0 ? _a : 'Failed to load Click to Pay configuration.'
+        });
       });
     }
     /**