@paydock/client-sdk 1.144.0-beta → 1.144.1-beta

package/bundles/widget.umd.js

@@ -960,246 +960,6 @@
     }]);
   }();
 
-  var ENV = {
-    SANDBOX: 'sandbox',
-    SANDBOX_KOVENA: 'sandbox-kovena',
-    SANDBOX_DEMO: 'sandbox-demo',
-    SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
-    PROD: 'production',
-    STAGING: 'staging',
-    STAGING_1: 'staging_1',
-    STAGING_2: 'staging_2',
-    STAGING_3: 'staging_3',
-    STAGING_4: 'staging_4',
-    STAGING_5: 'staging_5',
-    STAGING_6: 'staging_6',
-    STAGING_7: 'staging_7',
-    STAGING_8: 'staging_8',
-    STAGING_9: 'staging_9',
-    STAGING_10: 'staging_10',
-    STAGING_11: 'staging_11',
-    STAGING_12: 'staging_12',
-    STAGING_13: 'staging_13',
-    STAGING_14: 'staging_14',
-    STAGING_15: 'staging_15'
-  };
-  var WIDGET_URL = [{
-    env: ENV.SANDBOX,
-    url: 'https://widget-sandbox.'
-  }, {
-    env: ENV.SANDBOX_KOVENA,
-    url: 'https://widget-sandbox.'
-  }, {
-    env: ENV.SANDBOX_DEMO,
-    url: 'https://widget-sandbox-demo.'
-  }, {
-    env: ENV.SANDBOX_DEMO_KOVENA,
-    url: 'https://widget-sandbox-demo.'
-  }, {
-    env: ENV.PROD,
-    url: 'https://widget.'
-  }, {
-    env: ENV.STAGING,
-    url: 'https://widsta.'
-  }, {
-    env: ENV.STAGING_1,
-    url: 'https://widsta-1.'
-  }, {
-    env: ENV.STAGING_2,
-    url: 'https://widsta-2.'
-  }, {
-    env: ENV.STAGING_3,
-    url: 'https://widsta-3.'
-  }, {
-    env: ENV.STAGING_4,
-    url: 'https://widsta-4.'
-  }, {
-    env: ENV.STAGING_5,
-    url: 'https://widsta-5.'
-  }, {
-    env: ENV.STAGING_6,
-    url: 'https://widsta-6.'
-  }, {
-    env: ENV.STAGING_7,
-    url: 'https://widsta-7.'
-  }, {
-    env: ENV.STAGING_8,
-    url: 'https://widsta-8.'
-  }, {
-    env: ENV.STAGING_9,
-    url: 'https://widsta-9.'
-  }, {
-    env: ENV.STAGING_10,
-    url: 'https://widsta-10.'
-  }, {
-    env: ENV.STAGING_11,
-    url: 'https://widsta-11.'
-  }, {
-    env: ENV.STAGING_12,
-    url: 'https://widsta-12.'
-  }, {
-    env: ENV.STAGING_13,
-    url: 'https://widsta-13.'
-  }, {
-    env: ENV.STAGING_14,
-    url: 'https://widsta-14.'
-  }, {
-    env: ENV.STAGING_15,
-    url: 'https://widsta-15.'
-  }];
-  var API_URL = [{
-    env: ENV.SANDBOX,
-    url: 'https://api-sandbox.'
-  }, {
-    env: ENV.PROD,
-    url: 'https://api.'
-  }, {
-    env: ENV.STAGING,
-    url: 'https://apista.'
-  }, {
-    env: ENV.STAGING_1,
-    url: 'https://apista-1.'
-  }, {
-    env: ENV.STAGING_2,
-    url: 'https://apista-2.'
-  }, {
-    env: ENV.STAGING_3,
-    url: 'https://apista-3.'
-  }, {
-    env: ENV.STAGING_4,
-    url: 'https://apista-4.'
-  }, {
-    env: ENV.STAGING_5,
-    url: 'https://apista-5.'
-  }, {
-    env: ENV.STAGING_6,
-    url: 'https://apista-6.'
-  }, {
-    env: ENV.STAGING_7,
-    url: 'https://apista-7.'
-  }, {
-    env: ENV.STAGING_8,
-    url: 'https://apista-8.'
-  }, {
-    env: ENV.STAGING_9,
-    url: 'https://apista-9.'
-  }, {
-    env: ENV.STAGING_10,
-    url: 'https://apista-10.'
-  }, {
-    env: ENV.STAGING_11,
-    url: 'https://apista-11.'
-  }, {
-    env: ENV.STAGING_12,
-    url: 'https://apista-12.'
-  }, {
-    env: ENV.STAGING_13,
-    url: 'https://apista-13.'
-  }, {
-    env: ENV.STAGING_14,
-    url: 'https://apista-14.'
-  }, {
-    env: ENV.STAGING_15,
-    url: 'https://apista-15.'
-  }];
-  var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
-  var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
-  var DEFAULT_ENV = ENV.SANDBOX;
-  var DEFAULT_ALIAS = {
-    PAYDOCK: 'paydock.com',
-    KOVENA: 'kovena.com'
-  };
-  // TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
-  // TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
-  var Env = /*#__PURE__*/function () {
-    function Env(configs) {
-      var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
-      _classCallCheck(this, Env);
-      this.environmentConfigurations = configs;
-      this.setEnv(defaultEnv);
-    }
-    return _createClass(Env, [{
-      key: "setEnv",
-      value: function setEnv(environmentId, alias) {
-        this.validateAlias(alias);
-        this.validateEnvironmentId(environmentId);
-        this.environmentId = environmentId;
-        if (alias) {
-          this.alias = alias;
-        } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
-          this.alias = DEFAULT_ALIAS.KOVENA;
-        } else {
-          this.alias = DEFAULT_ALIAS.PAYDOCK;
-        }
-      }
-    }, {
-      key: "getEnv",
-      value: function getEnv() {
-        return this.environmentId;
-      }
-    }, {
-      key: "getConf",
-      value: function getConf() {
-        for (var index in this.environmentConfigurations) {
-          if (!Object.hasOwn(this.environmentConfigurations, index)) {
-            continue;
-          }
-          if (this.environmentConfigurations[index].env === this.getEnv()) {
-            return {
-              url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
-              env: this.environmentConfigurations[index].env
-            };
-          }
-        }
-        throw new Error('Env could not obtain configuration. Unknown environmentId.');
-      }
-    }, {
-      key: "validateAlias",
-      value: function validateAlias(alias) {
-        if (typeof alias === 'undefined') {
-          return;
-        }
-        if (typeof alias !== 'string') {
-          throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
-        }
-        if (!alias.match(REGEX_ALIAS)) {
-          throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
-        }
-      }
-    }, {
-      key: "validateEnvironmentId",
-      value: function validateEnvironmentId(environmentId) {
-        for (var index in this.environmentConfigurations) {
-          if (!Object.hasOwn(this.environmentConfigurations, index)) {
-            continue;
-          }
-          if (this.environmentConfigurations[index].env === environmentId) {
-            return;
-          }
-        }
-        throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
-      }
-    }]);
-  }();
-
-  var SDK = /*#__PURE__*/function () {
-    function SDK() {
-      _classCallCheck(this, SDK);
-    }
-    return _createClass(SDK, null, [{
-      key: "version",
-      get: function get() {
-        return SDK._version.trim() || null;
-      }
-    }]);
-  }();
-  SDK.type = 'client';
-  SDK.headerKeys = Object.freeze({
-    version: 'x-sdk-version',
-    type: 'x-sdk-type'
-  });
-  SDK._version = 'v1.144.0-beta';
-
   function isFunction(value) {
       return typeof value === 'function';
   }
@@ -1857,23 +1617,263 @@
       return BehaviorSubject;
   }(Subject));
 
-  var ACCESS_HEADER_NAME = {
-    accessToken: 'x-access-token',
-    publicKey: 'x-user-public-key'
-  };
-  var AccessToken = /*#__PURE__*/function () {
-    function AccessToken() {
-      _classCallCheck(this, AccessToken);
-    }
-    return _createClass(AccessToken, null, [{
-      key: "validateJWT",
-      value: function validateJWT(jwt) {
-        if (!jwt) return null;
-        var _jwt$split = jwt.split("."),
-          _jwt$split2 = _slicedToArray(_jwt$split, 3),
-          rawHead = _jwt$split2[0],
-          rawBody = _jwt$split2[1],
-          signature = _jwt$split2[2];
+  var ENV = {
+    SANDBOX: 'sandbox',
+    SANDBOX_KOVENA: 'sandbox-kovena',
+    SANDBOX_DEMO: 'sandbox-demo',
+    SANDBOX_DEMO_KOVENA: 'sandbox-demo-kovena',
+    PROD: 'production',
+    STAGING: 'staging',
+    STAGING_1: 'staging_1',
+    STAGING_2: 'staging_2',
+    STAGING_3: 'staging_3',
+    STAGING_4: 'staging_4',
+    STAGING_5: 'staging_5',
+    STAGING_6: 'staging_6',
+    STAGING_7: 'staging_7',
+    STAGING_8: 'staging_8',
+    STAGING_9: 'staging_9',
+    STAGING_10: 'staging_10',
+    STAGING_11: 'staging_11',
+    STAGING_12: 'staging_12',
+    STAGING_13: 'staging_13',
+    STAGING_14: 'staging_14',
+    STAGING_15: 'staging_15'
+  };
+  var WIDGET_URL = [{
+    env: ENV.SANDBOX,
+    url: 'https://widget-sandbox.'
+  }, {
+    env: ENV.SANDBOX_KOVENA,
+    url: 'https://widget-sandbox.'
+  }, {
+    env: ENV.SANDBOX_DEMO,
+    url: 'https://widget-sandbox-demo.'
+  }, {
+    env: ENV.SANDBOX_DEMO_KOVENA,
+    url: 'https://widget-sandbox-demo.'
+  }, {
+    env: ENV.PROD,
+    url: 'https://widget.'
+  }, {
+    env: ENV.STAGING,
+    url: 'https://widsta.'
+  }, {
+    env: ENV.STAGING_1,
+    url: 'https://widsta-1.'
+  }, {
+    env: ENV.STAGING_2,
+    url: 'https://widsta-2.'
+  }, {
+    env: ENV.STAGING_3,
+    url: 'https://widsta-3.'
+  }, {
+    env: ENV.STAGING_4,
+    url: 'https://widsta-4.'
+  }, {
+    env: ENV.STAGING_5,
+    url: 'https://widsta-5.'
+  }, {
+    env: ENV.STAGING_6,
+    url: 'https://widsta-6.'
+  }, {
+    env: ENV.STAGING_7,
+    url: 'https://widsta-7.'
+  }, {
+    env: ENV.STAGING_8,
+    url: 'https://widsta-8.'
+  }, {
+    env: ENV.STAGING_9,
+    url: 'https://widsta-9.'
+  }, {
+    env: ENV.STAGING_10,
+    url: 'https://widsta-10.'
+  }, {
+    env: ENV.STAGING_11,
+    url: 'https://widsta-11.'
+  }, {
+    env: ENV.STAGING_12,
+    url: 'https://widsta-12.'
+  }, {
+    env: ENV.STAGING_13,
+    url: 'https://widsta-13.'
+  }, {
+    env: ENV.STAGING_14,
+    url: 'https://widsta-14.'
+  }, {
+    env: ENV.STAGING_15,
+    url: 'https://widsta-15.'
+  }];
+  var API_URL = [{
+    env: ENV.SANDBOX,
+    url: 'https://api-sandbox.'
+  }, {
+    env: ENV.PROD,
+    url: 'https://api.'
+  }, {
+    env: ENV.STAGING,
+    url: 'https://apista.'
+  }, {
+    env: ENV.STAGING_1,
+    url: 'https://apista-1.'
+  }, {
+    env: ENV.STAGING_2,
+    url: 'https://apista-2.'
+  }, {
+    env: ENV.STAGING_3,
+    url: 'https://apista-3.'
+  }, {
+    env: ENV.STAGING_4,
+    url: 'https://apista-4.'
+  }, {
+    env: ENV.STAGING_5,
+    url: 'https://apista-5.'
+  }, {
+    env: ENV.STAGING_6,
+    url: 'https://apista-6.'
+  }, {
+    env: ENV.STAGING_7,
+    url: 'https://apista-7.'
+  }, {
+    env: ENV.STAGING_8,
+    url: 'https://apista-8.'
+  }, {
+    env: ENV.STAGING_9,
+    url: 'https://apista-9.'
+  }, {
+    env: ENV.STAGING_10,
+    url: 'https://apista-10.'
+  }, {
+    env: ENV.STAGING_11,
+    url: 'https://apista-11.'
+  }, {
+    env: ENV.STAGING_12,
+    url: 'https://apista-12.'
+  }, {
+    env: ENV.STAGING_13,
+    url: 'https://apista-13.'
+  }, {
+    env: ENV.STAGING_14,
+    url: 'https://apista-14.'
+  }, {
+    env: ENV.STAGING_15,
+    url: 'https://apista-15.'
+  }];
+  var ADDITIONAL_ENV = [ENV.SANDBOX_KOVENA, ENV.SANDBOX_DEMO_KOVENA];
+  var REGEX_ALIAS = '^([a-zA-Z0-9](?:(?:[a-zA-Z0-9-.]*(?!-)\\.(?![-.]))*[a-zA-Z0-9]+)?)$';
+  var DEFAULT_ENV = ENV.SANDBOX;
+  var DEFAULT_ALIAS = {
+    PAYDOCK: 'paydock.com',
+    KOVENA: 'kovena.com'
+  };
+  // TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+  // TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
+  var Env = /*#__PURE__*/function () {
+    function Env(configs) {
+      var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
+      _classCallCheck(this, Env);
+      this.environmentConfigurations = configs;
+      this.setEnv(defaultEnv);
+    }
+    return _createClass(Env, [{
+      key: "setEnv",
+      value: function setEnv(environmentId, alias) {
+        this.validateAlias(alias);
+        this.validateEnvironmentId(environmentId);
+        this.environmentId = environmentId;
+        if (alias) {
+          this.alias = alias;
+        } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+          this.alias = DEFAULT_ALIAS.KOVENA;
+        } else {
+          this.alias = DEFAULT_ALIAS.PAYDOCK;
+        }
+      }
+    }, {
+      key: "getEnv",
+      value: function getEnv() {
+        return this.environmentId;
+      }
+    }, {
+      key: "getConf",
+      value: function getConf() {
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === this.getEnv()) {
+            return {
+              url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+              env: this.environmentConfigurations[index].env
+            };
+          }
+        }
+        throw new Error('Env could not obtain configuration. Unknown environmentId.');
+      }
+    }, {
+      key: "validateAlias",
+      value: function validateAlias(alias) {
+        if (typeof alias === 'undefined') {
+          return;
+        }
+        if (typeof alias !== 'string') {
+          throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+        }
+        if (!alias.match(REGEX_ALIAS)) {
+          throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
+        }
+      }
+    }, {
+      key: "validateEnvironmentId",
+      value: function validateEnvironmentId(environmentId) {
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === environmentId) {
+            return;
+          }
+        }
+        throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
+      }
+    }]);
+  }();
+
+  var SDK = /*#__PURE__*/function () {
+    function SDK() {
+      _classCallCheck(this, SDK);
+    }
+    return _createClass(SDK, null, [{
+      key: "version",
+      get: function get() {
+        return SDK._version.trim() || null;
+      }
+    }]);
+  }();
+  SDK.type = 'client';
+  SDK.headerKeys = Object.freeze({
+    version: 'x-sdk-version',
+    type: 'x-sdk-type'
+  });
+  SDK._version = 'v1.144.1-beta';
+
+  var ACCESS_HEADER_NAME = {
+    accessToken: 'x-access-token',
+    publicKey: 'x-user-public-key'
+  };
+  var AccessToken = /*#__PURE__*/function () {
+    function AccessToken() {
+      _classCallCheck(this, AccessToken);
+    }
+    return _createClass(AccessToken, null, [{
+      key: "validateJWT",
+      value: function validateJWT(jwt) {
+        if (!jwt) return null;
+        var _jwt$split = jwt.split("."),
+          _jwt$split2 = _slicedToArray(_jwt$split, 3),
+          rawHead = _jwt$split2[0],
+          rawBody = _jwt$split2[1],
+          signature = _jwt$split2[2];
         if (!rawHead || !rawBody || !signature) return null;
         if (2 + rawHead.length + rawBody.length + signature.length !== jwt.length) return null;
         try {
@@ -1920,32 +1920,165 @@
         }
       }
     }, {
-      key: "validateJWTWhitelistedDomains",
-      value: function validateJWTWhitelistedDomains(body) {
-        var _a;
-        try {
-          if (!body.meta) return true;
-          var meta = this.extractData(body);
-          if (!meta) return true;
-          if (!((_a = meta.whitelist_domains) === null || _a === void 0 ? void 0 : _a.length)) return true;
-          return meta.whitelist_domains.includes(window.location.hostname);
-        } catch (err) {
-          return true;
-        }
+      key: "validateJWTWhitelistedDomains",
+      value: function validateJWTWhitelistedDomains(body) {
+        var _a;
+        try {
+          if (!body.meta) return true;
+          var meta = this.extractData(body);
+          if (!meta) return true;
+          if (!((_a = meta.whitelist_domains) === null || _a === void 0 ? void 0 : _a.length)) return true;
+          return meta.whitelist_domains.includes(window.location.hostname);
+        } catch (err) {
+          return true;
+        }
+      }
+    }, {
+      key: "getAccessHeaderNameByToken",
+      value: function getAccessHeaderNameByToken(token) {
+        return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
+      }
+    }, {
+      key: "isJwt",
+      value: function isJwt(value) {
+        var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
+        return jwtPattern.test(value);
+      }
+    }]);
+  }();
+
+  /**
+   * Top-level classification of an error. Used by the SDK to route errors to the
+   * right category in instrumentation and to give consumers a coarse-grained
+   * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
+   * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
+   */
+  var ERROR_CATEGORY = {
+    /** SDK was misconfigured (missing keys, invalid options, etc.). */
+    CONFIGURATION: 'configuration',
+    /** Authentication or authorization failure. */
+    IDENTITY: 'identity_access_management',
+    /** SDK internal failure or upstream service problem. */
+    INTERNAL: 'internal',
+    /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
+    PROCESS: 'process',
+    /** Resource lookup failed or was rate-limited. */
+    RESOURCE: 'resource',
+    /** Invalid input or business-rule validation failure. */
+    VALIDATION: 'validation'
+  };
+  /**
+   * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
+   * useful for deciding programmatic responses (e.g. show a retry button only
+   * when `cause` is `'service_unreachable'` or `'server_busy'`).
+   */
+  var ERROR_CAUSE = {
+    /** Operation was aborted programmatically. */
+    ABORTED: 'aborted',
+    /** Caller has insufficient permissions for the operation. */
+    ACCESS_FORBIDDEN: 'access_forbidden',
+    /** Resource already exists when create was expected. */
+    ALREADY_EXISTS: 'already_exists',
+    /** User cancelled the flow (e.g. closed the wallet sheet). */
+    CANCELED: 'canceled',
+    /** SDK was instantiated or invoked with invalid configuration. */
+    INVALID_CONFIGURATION: 'invalid_configuration',
+    /** Input failed structural or business-rule validation. */
+    INVALID_INPUT: 'invalid_input',
+    /** Resource was not found by the backend. */
+    NOT_FOUND: 'not_found',
+    /** Operation is not supported in the current context or version. */
+    NOT_IMPLEMENTED: 'not_implemented',
+    /** Caller exceeded the allowed request rate. */
+    RATE_LIMITED: 'rate_limited',
+    /** Backend is healthy but currently overloaded — typically retryable. */
+    SERVER_BUSY: 'server_busy',
+    /** Backend or third-party service could not be reached — typically retryable. */
+    SERVICE_UNREACHABLE: 'service_unreachable',
+    /** Caller is not authenticated. */
+    UNAUTHORIZED: 'unauthorized',
+    /** Catch-all when no other cause applies. */
+    UNKNOWN: 'unknown_error',
+    /** Request was syntactically valid but semantically rejected. */
+    UNPROCESSABLE_ENTITY: 'unprocessable_entity'
+  };
+  var EventError = /*#__PURE__*/function (_Error) {
+    function EventError(cause, category, retryable, details) {
+      var _this;
+      _classCallCheck(this, EventError);
+      _this = _callSuper(this, EventError, [details.message]);
+      _this.cause = cause;
+      _this.category = category;
+      _this.retryable = retryable;
+      _this.details = details;
+      Object.setPrototypeOf(_this, EventError.prototype);
+      _this.name = EventError.name;
+      return _this;
+    }
+    _inherits(EventError, _Error);
+    return _createClass(EventError, [{
+      key: "toJSON",
+      value: function toJSON() {
+        return {
+          error: {
+            category: this.category,
+            cause: this.cause,
+            details: this.details,
+            retryable: this.retryable
+          }
+        };
+      }
+    }, {
+      key: "setContextId",
+      value: function setContextId(contextId) {
+        this.details.contextId = contextId;
       }
     }, {
-      key: "getAccessHeaderNameByToken",
-      value: function getAccessHeaderNameByToken(token) {
-        return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
+      key: "setPurpose",
+      value: function setPurpose(purpose) {
+        this.purpose = purpose;
       }
-    }, {
-      key: "isJwt",
-      value: function isJwt(value) {
-        var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
-        return jwtPattern.test(value);
+    }], [{
+      key: "create",
+      value: function create(cause, message) {
+        var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
+        var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+        var details = {
+          cause: cause,
+          contextId: contextId,
+          message: message,
+          timestamp: new Date().toISOString()
+        };
+        var category = getErrorCategory(cause);
+        return new EventError(cause, category, retryable, details);
       }
     }]);
-  }();
+  }(/*#__PURE__*/_wrapNativeSuper(Error));
+  function getErrorCategory(cause) {
+    switch (cause) {
+      case ERROR_CAUSE.INVALID_CONFIGURATION:
+        return ERROR_CATEGORY.CONFIGURATION;
+      case ERROR_CAUSE.ACCESS_FORBIDDEN:
+      case ERROR_CAUSE.UNAUTHORIZED:
+        return ERROR_CATEGORY.IDENTITY;
+      case ERROR_CAUSE.SERVICE_UNREACHABLE:
+      case ERROR_CAUSE.NOT_IMPLEMENTED:
+      case ERROR_CAUSE.SERVER_BUSY:
+        return ERROR_CATEGORY.INTERNAL;
+      case ERROR_CAUSE.ABORTED:
+      case ERROR_CAUSE.CANCELED:
+        return ERROR_CATEGORY.PROCESS;
+      case ERROR_CAUSE.NOT_FOUND:
+      case ERROR_CAUSE.RATE_LIMITED:
+        return ERROR_CATEGORY.RESOURCE;
+      case ERROR_CAUSE.ALREADY_EXISTS:
+      case ERROR_CAUSE.INVALID_INPUT:
+      case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
+        return ERROR_CATEGORY.VALIDATION;
+      default:
+        return ERROR_CATEGORY.INTERNAL;
+    }
+  }
 
   var HttpRequest = /*#__PURE__*/function () {
     function HttpRequest(request) {
@@ -4641,18 +4774,23 @@
             var errorCb = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : function (data) {
               return undefined;
             };
+            var onError = function onError(err) {
+              _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
+                classMethod: 'getClient',
+                description: 'Send unsuccessful.'
+              }));
+              errorCb(err);
+            };
             request.onload = function () {
               return _this4.parser({
                 text: request.responseText,
                 status: request.status
-              }, cb, function (err) {
-                _this4.reportError(errorRepository, err, _extends(_extends({}, _this4.ctx), {
-                  classMethod: 'getClient',
-                  description: 'Send unsuccessful.'
-                }));
-                errorCb(err);
-              });
+              }, cb, onError);
             };
+            // Transport-level failures (dropped connection, failed CORS
+            // preflight, HTTP/2 protocol error, timeout) never fire `onload`,
+            // so without these handlers the request would fail silently.
+            _this4.attachFailureHandlers(request, onError);
             request.send(JSON.stringify(body));
           }
         };
@@ -4665,13 +4803,18 @@
         return {
           config: request,
           send: function send(body) {
-            return new Promise(function (resolve, _reject) {
+            return new Promise(function (resolve, reject) {
               request.onload = function () {
                 return resolve({
                   text: request.responseText,
                   status: request.status
                 });
               };
+              // Transport-level failures (dropped connection, failed CORS
+              // preflight, HTTP/2 protocol error, timeout) never fire
+              // `onload`, so without these handlers the promise would never
+              // settle and the caller would hang silently.
+              _this5.attachFailureHandlers(request, reject);
               request.send(JSON.stringify(body));
             }).then(function (value) {
               return _this5.parserPromise(value);
@@ -4723,6 +4866,36 @@
           return Promise.reject(err);
         }
       }
+      /**
+       * Wires the XHR failure events that `onload` does not cover. `onload` only
+       * fires when an HTTP response is received (any status, including 4xx/5xx);
+       * transport-level failures — a dropped connection, a failed CORS preflight,
+       * an HTTP/2 protocol error, or a timeout — fire `onerror`/`ontimeout`/
+       * `onabort` instead. Without these the request never settles and fails
+       * silently (e.g. `onUnavailable` is never invoked for wallet callbacks).
+       */
+    }, {
+      key: "attachFailureHandlers",
+      value: function attachFailureHandlers(request, onFailure) {
+        request.onerror = function () {
+          return onFailure({
+            message: 'Network request failed: the service could not be reached.',
+            code: ERROR_CAUSE.SERVICE_UNREACHABLE
+          });
+        };
+        request.ontimeout = function () {
+          return onFailure({
+            message: 'Network request timed out: the service could not be reached.',
+            code: ERROR_CAUSE.SERVICE_UNREACHABLE
+          });
+        };
+        request.onabort = function () {
+          return onFailure({
+            message: 'Network request was aborted.',
+            code: ERROR_CAUSE.ABORTED
+          });
+        };
+      }
     }, {
       key: "newApiRequest",
       value: function newApiRequest(method, link) {
@@ -12871,139 +13044,6 @@
     }
   }
 
-  /**
-   * Top-level classification of an error. Used by the SDK to route errors to the
-   * right category in instrumentation and to give consumers a coarse-grained
-   * tag for grouping/filtering. See {@link getErrorCategory} for the mapping
-   * between {@link ERROR_CAUSE} and {@link ERROR_CATEGORY}.
-   */
-  var ERROR_CATEGORY = {
-    /** SDK was misconfigured (missing keys, invalid options, etc.). */
-    CONFIGURATION: 'configuration',
-    /** Authentication or authorization failure. */
-    IDENTITY: 'identity_access_management',
-    /** SDK internal failure or upstream service problem. */
-    INTERNAL: 'internal',
-    /** Flow lifecycle event (user cancelled, aborted, etc.) — not a real fault. */
-    PROCESS: 'process',
-    /** Resource lookup failed or was rate-limited. */
-    RESOURCE: 'resource',
-    /** Invalid input or business-rule validation failure. */
-    VALIDATION: 'validation'
-  };
-  /**
-   * Concrete cause of an error. More specific than {@link ERROR_CATEGORY} —
-   * useful for deciding programmatic responses (e.g. show a retry button only
-   * when `cause` is `'service_unreachable'` or `'server_busy'`).
-   */
-  var ERROR_CAUSE = {
-    /** Operation was aborted programmatically. */
-    ABORTED: 'aborted',
-    /** Caller has insufficient permissions for the operation. */
-    ACCESS_FORBIDDEN: 'access_forbidden',
-    /** Resource already exists when create was expected. */
-    ALREADY_EXISTS: 'already_exists',
-    /** User cancelled the flow (e.g. closed the wallet sheet). */
-    CANCELED: 'canceled',
-    /** SDK was instantiated or invoked with invalid configuration. */
-    INVALID_CONFIGURATION: 'invalid_configuration',
-    /** Input failed structural or business-rule validation. */
-    INVALID_INPUT: 'invalid_input',
-    /** Resource was not found by the backend. */
-    NOT_FOUND: 'not_found',
-    /** Operation is not supported in the current context or version. */
-    NOT_IMPLEMENTED: 'not_implemented',
-    /** Caller exceeded the allowed request rate. */
-    RATE_LIMITED: 'rate_limited',
-    /** Backend is healthy but currently overloaded — typically retryable. */
-    SERVER_BUSY: 'server_busy',
-    /** Backend or third-party service could not be reached — typically retryable. */
-    SERVICE_UNREACHABLE: 'service_unreachable',
-    /** Caller is not authenticated. */
-    UNAUTHORIZED: 'unauthorized',
-    /** Catch-all when no other cause applies. */
-    UNKNOWN: 'unknown_error',
-    /** Request was syntactically valid but semantically rejected. */
-    UNPROCESSABLE_ENTITY: 'unprocessable_entity'
-  };
-  var EventError = /*#__PURE__*/function (_Error) {
-    function EventError(cause, category, retryable, details) {
-      var _this;
-      _classCallCheck(this, EventError);
-      _this = _callSuper(this, EventError, [details.message]);
-      _this.cause = cause;
-      _this.category = category;
-      _this.retryable = retryable;
-      _this.details = details;
-      Object.setPrototypeOf(_this, EventError.prototype);
-      _this.name = EventError.name;
-      return _this;
-    }
-    _inherits(EventError, _Error);
-    return _createClass(EventError, [{
-      key: "toJSON",
-      value: function toJSON() {
-        return {
-          error: {
-            category: this.category,
-            cause: this.cause,
-            details: this.details,
-            retryable: this.retryable
-          }
-        };
-      }
-    }, {
-      key: "setContextId",
-      value: function setContextId(contextId) {
-        this.details.contextId = contextId;
-      }
-    }, {
-      key: "setPurpose",
-      value: function setPurpose(purpose) {
-        this.purpose = purpose;
-      }
-    }], [{
-      key: "create",
-      value: function create(cause, message) {
-        var contextId = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : '';
-        var retryable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-        var details = {
-          cause: cause,
-          contextId: contextId,
-          message: message,
-          timestamp: new Date().toISOString()
-        };
-        var category = getErrorCategory(cause);
-        return new EventError(cause, category, retryable, details);
-      }
-    }]);
-  }(/*#__PURE__*/_wrapNativeSuper(Error));
-  function getErrorCategory(cause) {
-    switch (cause) {
-      case ERROR_CAUSE.INVALID_CONFIGURATION:
-        return ERROR_CATEGORY.CONFIGURATION;
-      case ERROR_CAUSE.ACCESS_FORBIDDEN:
-      case ERROR_CAUSE.UNAUTHORIZED:
-        return ERROR_CATEGORY.IDENTITY;
-      case ERROR_CAUSE.SERVICE_UNREACHABLE:
-      case ERROR_CAUSE.NOT_IMPLEMENTED:
-      case ERROR_CAUSE.SERVER_BUSY:
-        return ERROR_CATEGORY.INTERNAL;
-      case ERROR_CAUSE.ABORTED:
-      case ERROR_CAUSE.CANCELED:
-        return ERROR_CATEGORY.PROCESS;
-      case ERROR_CAUSE.NOT_FOUND:
-      case ERROR_CAUSE.RATE_LIMITED:
-        return ERROR_CATEGORY.RESOURCE;
-      case ERROR_CAUSE.ALREADY_EXISTS:
-      case ERROR_CAUSE.INVALID_INPUT:
-      case ERROR_CAUSE.UNPROCESSABLE_ENTITY:
-        return ERROR_CATEGORY.VALIDATION;
-      default:
-        return ERROR_CATEGORY.INTERNAL;
-    }
-  }
-
   function processEventError(err) {
     var cause;
     var message;
@@ -22901,6 +22941,14 @@
           if (_this.provider) {
             _this.provider.load();
           }
+        })["catch"](function (error) {
+          var _a;
+          // Surface config-load failures (including transport-level ones now
+          // rejected by ApiBase) instead of leaving the widget hung silently.
+          _this.eventEmitter.emit(EVENT.CHECKOUT_ERROR, {
+            type: EVENT_DATA_TYPE.CRITICAL_ERROR,
+            data: (_a = error === null || error === void 0 ? void 0 : error.message) !== null && _a !== void 0 ? _a : 'Failed to load Click to Pay configuration.'
+          });
         });
       }
       /**