@paydock/client-sdk 1.144.1-beta → 1.147.0

package/bundles/index.mjs.d.ts

@@ -259,6 +259,24 @@ declare const SUPPORTED_CARD_TYPES: {
     EFTPOS_WHITE: string;
     UNIONPAY: string;
 };
+/**
+ * Card schemes the widget is able to resolve from a card number, and therefore the only values
+ * `setAllowedCardSchemes` accepts. This is a separate vocabulary from SUPPORTED_CARD_TYPES, which drives the
+ * card icons: it omits the icon-only variants `visa_white` / `eftpos_white`, and the `laser` / `maestro`
+ * identifiers the widget can never resolve — allowing those would be configuration that can never match.
+ */
+declare const CARD_SCHEME: {
+    AMEX: string;
+    AUSBC: string;
+    DINERS: string;
+    DISCOVER: string;
+    EFTPOS: string;
+    JAPCB: string;
+    MASTERCARD: string;
+    SOLO: string;
+    UNIONPAY: string;
+    VISA: string;
+};
 interface IIcons {
     paypal_checkout_button?: string;
     afterpay_checkout_button?: string;
@@ -362,6 +380,7 @@ interface IParams extends IStyles$1, ITexts, ICommonParams {
     ref_id?: string;
     supported_card_types?: string;
     validate_card_types?: boolean;
+    allowed_card_schemes?: string;
     fields_validation?: boolean;
     hidden_elements?: string;
     icons?: string;
@@ -767,10 +786,15 @@ declare class Configuration {
 declare class IFrame {
     protected container: Container;
     constructor(container: Container);
+    /**
+     * @param options.onLoad Called on every `load` of the iframe (initial document and each
+     *        subsequent navigation). Attached before `src` is set so a fast load is never missed.
+     */
     load(link: string, options?: {
         title?: string;
         attributes?: Record<string, string>;
         styles?: Record<string, string>;
+        onLoad?: (event: Event) => void;
     }, iframeClass?: string): void;
     loadFromHtml(content: string, options?: {
         title?: string;
@@ -842,15 +866,16 @@ declare const EVENT$3: {
 type EventTypes = typeof EVENT$3[keyof typeof EVENT$3];
 interface Listener {
     event: string;
-    listener: (event: any) => void;
+    /** `origin` is the `MessageEvent.origin` of the postMessage that carried the data (undefined for direct `emit`). */
+    listener: (event: any, origin?: string) => void;
     widget_id: string;
 }
 declare type Listeners = Listener[];
 declare class IFrameEvent {
     protected listeners: Listeners;
     constructor(subject: Window | null);
-    emit(data: IEventData$1): void;
-    on<T>(eventName: string, widgetId: string, cb: (data: T) => void): void;
+    emit(data: IEventData$1, origin?: string): void;
+    on<T>(eventName: string, widgetId: string, cb: (data: T, origin?: string) => void): void;
     clear(): void;
     private subscribe;
 }
@@ -1206,6 +1231,25 @@ declare class MultiWidget {
      * @param {boolean} validateCardNumberInput - [validateCardNumberInput=false] - using this param you allow validation for card number input on supported card types
      */
     setSupportedCardIcons(elements: string[], validateCardNumberInput?: boolean): void;
+    /**
+     * Current method restricts which card schemes the card number input accepts, without changing which card
+     * icons the widget displays. Scheme identifiers are matched case-insensitively and ignoring surrounding
+     * whitespace; unsupported identifiers are ignored with a warning, so a list in which every identifier is
+     * unsupported applies no restriction at all.
+     *
+     * Takes precedence over setSupportedCardIcons: when a non-empty list is supplied here, it is the only list
+     * used for validation and the validateCardNumberInput flag of setSupportedCardIcons no longer affects it.
+     * Calling this method more than once replaces the previous list rather than merging with it.
+     *
+     * Must be called before load().
+     *
+     * @example
+     *
+     * widget.setAllowedCardSchemes(['visa', 'mastercard']);
+     *
+     * @param {string[]} schemes - [CARD_SCHEME]{@link CARD_SCHEME}
+     */
+    setAllowedCardSchemes(schemes: string[]): void;
     /**
      * Current method can hide prevent the widget from showing the error messages
      *
@@ -2171,6 +2215,12 @@ declare class ApiBase {
      * @param {string} [alias] - Own domain alias
      */
     setEnv(env: string, alias?: string): ApiBase;
+    /**
+     * Origin (`scheme://host[:port]`) of the API this client talks to, for the current env/alias.
+     * Used to validate the `origin` of postMessages the API itself sends to the page.
+     */
+    getApiOrigin(): string;
+    static toOrigin(url: string): string;
     requestObservable<Req extends object, Res>(method: 'GET' | 'POST', url: string, requestBody: Req): Observable<Res>;
     private makeRequest;
     private onRequestLoad;
@@ -2301,6 +2351,11 @@ declare class Standalone3dsService {
     load(token: string, options: {
         title: string;
     }): void;
+    /**
+     * Origins allowed to deliver a processed 3DS outcome to the page via postMessage: the Paydock API
+     * (inline callback page) and the Paydock widget (remote-app landing page), for the current env/alias.
+     */
+    protected getTrustedMessageOrigins(api: ApiBase): string[];
     setEnv(env: string, alias?: string): void;
 }
 
@@ -2319,6 +2374,38 @@ interface Canvas3dsAuthPayload {
         description?: string;
     };
 }
+/**
+ * Payload of `chargeAuthChallengeLoaded` (Standalone 3DS, challenge flow only).
+ * Emitted exactly once per challenge, after `chargeAuthChallenge`.
+ */
+interface Canvas3dsChallengeLoadedPayload {
+    /** The Paydock 3DS charge identifier the challenge belongs to. */
+    charge_3ds_id: string;
+    /**
+     * `'load'` — the challenge iframe fired its first `load`: the ACS page has painted.
+     * `'timeout'` — no `load` arrived within the SDK's 2.5 s safety fallback; the event is emitted anyway so a
+     * loader is never held forever (the page may still be loading and will paint on its own). Useful for
+     * analytics (how often the fallback fires) — you do not need to handle the two differently.
+     */
+    reason: 'load' | 'timeout';
+}
+/**
+ * Payload of `chargeAuthChallengeCompleted` (Standalone 3DS, challenge and decoupled flows).
+ * Emitted at most once per authentication, after the shopper finished the challenge (or approved a decoupled
+ * authentication) and always before the terminal event.
+ */
+interface Canvas3dsChallengeCompletedPayload {
+    /** The Paydock 3DS charge identifier the authentication belongs to. */
+    charge_3ds_id: string;
+    /**
+     * How the SDK learned that the issuer delivered the result:
+     * `'poll'` — the 3DS Server's result monitor reported it (the usual case: it flips as soon as the issuer's
+     * result reaches the 3DS Server, before the challenge iframe has even left the bank's page);
+     * `'callback'` — the callback message carrying the outcome arrived first (the terminal event follows
+     * immediately). Informational only — handle both the same way.
+     */
+    source: 'poll' | 'callback';
+}
 /**
  * Payload emitted by the Standalone 3DS flow for error events.
  * `error` is intentionally `unknown` — upstream emitters do not guarantee a shape.
@@ -2371,6 +2458,24 @@ interface Canvas3dsEventMap {
     error: Canvas3dsErrorPayload | Canvas3dsErrorEventPayload;
     /** Challenge required — issuer demands user interaction (OTP, biometric, etc.). Standalone-only. */
     chargeAuthChallenge: Canvas3dsAuthPayload;
+    /**
+     * The challenge iframe has painted (first `load`), or the 2.5 s fallback elapsed — see `reason`. Standalone-only,
+     * challenge flow only (never emitted for decoupled challenges). Fires once, after `chargeAuthChallenge`.
+     *
+     * Recommended loader pattern: show a loader before the charge POST, keep it through `chargeAuthChallenge`,
+     * reveal the challenge on this event, cover it with "Completing verification" on `chargeAuthChallengeCompleted`,
+     * and finish on `chargeAuthSuccess` / `chargeAuthReject` / `error`.
+     */
+    chargeAuthChallengeLoaded: Canvas3dsChallengeLoadedPayload;
+    /**
+     * The shopper finished the challenge (or approved a decoupled authentication): the issuer delivered the final
+     * result to the 3DS Server and the SDK is obtaining the outcome. Cover the challenge iframe with your own
+     * "Completing verification" state — whatever the bank or the 3DS Server render from here on is plumbing, not
+     * UX. Standalone-only. Fires at most once per authentication, always before `chargeAuthSuccess` /
+     * `chargeAuthReject` / `error`, and never after them. A wrong OTP or a further interactive step does NOT fire
+     * it (no result has been delivered yet), so no grace timer or reveal fallback is needed on your side.
+     */
+    chargeAuthChallengeCompleted: Canvas3dsChallengeCompletedPayload;
     /** Decoupled authentication — issuer will authenticate out-of-band and notify later. Standalone-only. */
     chargeAuthDecoupled: Canvas3dsAuthPayload;
     /** Iframe-path authentication event. Extends `IEventData` with optional 3DS correlation fields (`charge_3ds_id`, `status`). */
@@ -2426,11 +2531,13 @@ declare enum TOKEN_FORMAT {
  * @const STANDALONE_3DS_EVENT
  *
  * @type {object}
- * @param {string} CHARGE_AUTH_SUCCESS=chargeAuthSuccess
- * @param {string} CHARGE_AUTH_REJECT=chargeAuthReject
- * @param {string} CHARGE_AUTH_DECOUPLED=chargeAuthDecoupled
- * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
- * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
+ * @param {string} AUTH_SUCCESS=chargeAuthSuccess
+ * @param {string} AUTH_ERROR=chargeAuthReject
+ * @param {string} DECOUPLED=chargeAuthDecoupled
+ * @param {string} CHALLENGE=chargeAuthChallenge
+ * @param {string} CHALLENGE_LOADED=chargeAuthChallengeLoaded - challenge iframe painted (first `load`, or 2.5 s fallback); reveal your challenge UI here
+ * @param {string} CHALLENGE_COMPLETED=chargeAuthChallengeCompleted - the shopper finished the challenge (issuer result delivered to the 3DS Server); cover the challenge iframe with your own loader until the terminal event
+ * @param {string} INFO=chargeAuthInfo
  * @param {string} ERROR=error
  */
 /**
@@ -2559,7 +2666,6 @@ declare class ApiChargeInternal {
     constructor(api: ApiInternal);
     walletCapture(payload: WalletCaptureBody): Promise<WalletCaptureResponse>;
     walletCallback(payload: WalletCallbackBody): Promise<WalletCallbackResponse>;
-    standalone3dsProcess(payload: Standalone3dsProcessBody): Promise<ProcessAuthenticationResponse>;
     standalone3dsHandle(): Promise<HandleResponseInterface>;
 }
 interface WalletCaptureResponse {
@@ -2600,9 +2706,6 @@ interface WalletCallbackResponse {
     callback_rel: string;
     callback_url: string;
 }
-interface Standalone3dsProcessBody {
-    charge_3ds_id: string;
-}
 
 declare class ApiCheckoutInternal {
     protected api: ApiInternal;
@@ -2885,6 +2988,20 @@ declare const CANVAS_3DS_EVENT: {
     readonly DECOUPLED: "chargeAuthDecoupled";
     /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     readonly CHALLENGE: "chargeAuthChallenge";
+    /**
+     * The challenge iframe fired its FIRST `load` after `chargeAuthChallenge` (the ACS page has painted),
+     * or the `CHALLENGE_LOADED_FALLBACK_MS` safety fallback elapsed without one. Emitted exactly once per
+     * challenge; never emitted for a decoupled challenge (no challenge iframe). Payload: `Canvas3dsChallengeLoadedPayload`.
+     */
+    readonly CHALLENGE_LOADED: "chargeAuthChallengeLoaded";
+    /**
+     * The issuer delivered the final authentication result to the 3DS Server (the shopper finished the
+     * challenge, or approved a decoupled authentication) and the SDK is now obtaining the outcome. Emitted at
+     * most once per authentication, always before the terminal event. Detected through the `secondary_url`
+     * result monitor (`source: 'poll'`) or, when the callback message arrives first, right before the outcome
+     * it carries (`source: 'callback'`). Payload: `Canvas3dsChallengeCompletedPayload`.
+     */
+    readonly CHALLENGE_COMPLETED: "chargeAuthChallengeCompleted";
     /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     readonly INFO: "chargeAuthInfo";
     /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
@@ -3782,6 +3899,77 @@ declare enum ERROR_OPERATION {
     SHIPPING_UPDATE = "shipping_update"
 }
 
+/**
+ * Base options shared by every wallet's static availability check
+ * (e.g. `ApplePayOpenWalletButton.checkAvailability`). Wallet-specific option
+ * interfaces extend this with their own fields.
+ */
+interface OpenWalletAvailabilityOptions {
+    /** Public key or access token used to fetch the service config when needed. */
+    public_key_or_access_token?: string;
+    /** Service ID — used with `public_key_or_access_token` to resolve the wallet configuration. */
+    service_id?: string;
+    /** Environment for the config fetch (e.g. `'sandbox'`). Defaults to the SDK default. */
+    env?: string;
+    /**
+     * When `true`, performs only the cheap, network-free synchronous check and resolves
+     * immediately — no config fetch, SDK load, or remote capability query.
+     */
+    sync?: boolean;
+}
+/**
+ * Base result shared by every wallet's static availability check. Wallet-specific
+ * result interfaces extend this with their own fields.
+ */
+interface OpenWalletAvailabilityResult {
+    /** Convenience verdict: the wallet is usable for a payment in the current context. */
+    available: boolean;
+    /** Whether the wallet is supported here at all (may be available via a fallback flow). */
+    supported: boolean;
+    /** Machine-readable reason when not available. */
+    reason?: string;
+}
+
+/**
+ * Friendly capability tokens accepted as **input** — the same values used in
+ * `ApplePayOpenWalletMeta.apple_pay_capabilities`. They declare which device
+ * credential statuses should be treated as "available".
+ */
+type ApplePayCapabilityToken = 'credentials_available' | 'credentials_status_unknown' | 'credentials_unavailable';
+/**
+ * Device-reported credential status — the **output** of
+ * `ApplePaySession.applePayCapabilities()`.
+ */
+type ApplePayCredentialStatus = 'paymentCredentialsAvailable' | 'paymentCredentialStatusUnknown' | 'paymentCredentialsUnavailable' | 'applePayUnsupported';
+/**
+ * Options for `ApplePayOpenWalletButton.checkAvailability`. Provide `merchant_id`
+ * directly to skip the network call, **or** provide `public_key_or_access_token` +
+ * `service_id` to have the SDK resolve the merchant identifier from the service config.
+ */
+interface ApplePayAvailabilityOptions extends OpenWalletAvailabilityOptions {
+    /** Apple merchant identifier. Provide this OR (`public_key_or_access_token` + `service_id`). */
+    merchant_id?: string;
+    /**
+     * Device credential statuses that count as available. Defaults to
+     * `['credentials_available', 'credentials_status_unknown']` — `credentials_status_unknown`
+     * is what third-party / cross-device (QR) browsers report, so the default keeps Apple Pay
+     * visible outside Safari.
+     */
+    apple_pay_capabilities?: ApplePayCapabilityToken[];
+}
+/** Result of `ApplePayOpenWalletButton.checkAvailability`. */
+interface ApplePayAvailabilityResult extends OpenWalletAvailabilityResult {
+    /**
+     * Whether a **native, same-device** Apple Pay session is present right now
+     * (`ApplePaySession` exists and `canMakePayments()` is `true`). Apple does not expose
+     * the transport directly, so use this to infer it: `available && has_native_session` ⇒
+     * native sheet likely; `available && !has_native_session` ⇒ cross-device / QR handoff likely.
+     */
+    has_native_session: boolean;
+    /** The raw device-reported credential status. Undefined when unsupported or not queried. */
+    payment_credential_status?: ApplePayCredentialStatus;
+}
+
 /**
  * Events emitted during the OpenWallet payment lifecycle.
  */
@@ -3933,6 +4121,30 @@ interface OnCancelEventData extends OpenWalletBaseEvent {
     event: EVENT$1.CHECKOUT_CLOSE;
 }
 
+/**
+ * Options for `GooglePayOpenWalletButton.checkAvailability`. Extends
+ * {@link OpenWalletAvailabilityOptions}. All fields are optional — Google Pay's
+ * `isReadyToPay` check does not require a merchant identifier. Provide
+ * `public_key_or_access_token` + `service_id` to validate that the service is a Google Pay
+ * service (and resolve the merchant id), or `merchant_id` directly.
+ */
+interface GooglePayAvailabilityOptions extends OpenWalletAvailabilityOptions {
+    /**
+     * Google Pay gateway merchant identifier. Optional — `isReadyToPay` does not require it;
+     * when omitted the readiness check still runs.
+     */
+    merchant_id?: string;
+}
+/** Result of `GooglePayOpenWalletButton.checkAvailability`. */
+interface GooglePayAvailabilityResult extends OpenWalletAvailabilityResult {
+    /**
+     * Google's `isReadyToPay` `paymentMethodPresent` — whether the buyer already has a
+     * payment method usable with Google Pay. `undefined` when not reported (e.g. the
+     * synchronous check, or browsers where it is not surfaced).
+     */
+    payment_method_present?: boolean;
+}
+
 /**
  * Base metadata required to configure an OpenWallet button.
  */
@@ -4201,6 +4413,16 @@ declare abstract class OpenWalletButtons<TMeta extends OpenWalletMeta = OpenWall
     abstract readonly walletType: WalletType;
     /** @private */
     constructor(selector: string, publicKeyOrAccessToken: string, serviceId: string, meta: TMeta);
+    /**
+     * Invalidates the cached service configuration whenever an error or unavailable
+     * event fires, so the next `load()` re-fetches a fresh config. The cache is keyed
+     * on the service ID with a 1-day TTL; clearing it on failure means a config that
+     * changed server-side (and caused the failure) is not reused until the TTL expires.
+     * Registered once per button, independently of any merchant-registered handlers.
+     *
+     * @private
+     */
+    private registerCacheInvalidationOnError;
     /**
      * Creates the wallet-specific service instance for this button.
      * Each concrete subclass implements this to instantiate its specific wallet service.
@@ -5062,11 +5284,6 @@ type ApplePayButtonStyle$1 = 'black' | 'white' | 'white-outline';
 
 type ApplePayButtonType$1 = 'add-money' | 'book' | 'buy' | 'check-out' | 'continue' | 'contribute' | 'donate' | 'order' | 'pay' | 'plain' | 'reload' | 'rent' | 'set-up' | 'subscribe' | 'support' | 'tip' | 'top-up';
 
-declare global {
-    interface Window {
-        ApplePaySession: ApplePaySession;
-    }
-}
 /** Styling configuration for the Apple Pay button. */
 interface ApplePayOpenWalletMetaStyles extends OpenWalletMetaStyles {
     /** Variant displayed on the button (e.g. `'buy'`, `'donate'`, `'plain'`, `'check-out'`). */
@@ -5127,12 +5344,24 @@ interface ApplePayOpenWalletMeta extends OpenWalletMeta, Omit<ApplePayPaymentReq
     /** Visual styling for the Apple Pay button. */
     style?: ApplePayOpenWalletMetaStyles;
     /**
-     * Device capabilities allowed for the wallet button to be considered available.
-     * Used as a relaxation knob for testing — defaults to `['paymentCredentialsAvailable']` only.
+     * Device credential statuses that make the button render. Defaults to
+     * `['credentials_available', 'credentials_status_unknown']`:
+     * - `credentials_available` — the device has a confirmed Apple Pay card ready to use.
+     * - `credentials_status_unknown` — a local card can't be confirmed, but Apple Pay can
+     *   still proceed (e.g. the cross-device flow where the buyer completes payment on their
+     *   iPhone via QR, used by Chrome, Edge and Firefox).
+     * The button renders when the device's reported status is in this list. Narrow to
+     * `['credentials_available']` to require a confirmed local card.
      */
     apple_pay_capabilities?: Array<'credentials_available' | 'credentials_status_unknown' | 'credentials_unavailable'>;
 }
 
+declare global {
+    interface Window {
+        ApplePaySession: ApplePaySession;
+    }
+}
+
 /**
  * @classdesc Apple Pay wallet button that creates One-Time Tokens (OTT) via Apple Pay.
  *
@@ -5171,6 +5400,46 @@ interface ApplePayOpenWalletMeta extends OpenWalletMeta, Omit<ApplePayPaymentReq
 declare class ApplePayOpenWalletButton extends OpenWalletButtons<ApplePayOpenWalletMeta> {
     /** @private */
     readonly walletType: WalletType;
+    /**
+     * Checks Apple Pay availability **without instantiating the button** — the single,
+     * authoritative, cross-browser-aware availability entry point.
+     *
+     * Resolves the merchant identifier (either supplied directly or fetched from the
+     * service configuration), loads Apple's web SDK if needed, then queries
+     * `ApplePaySession.applePayCapabilities()`. Returns a convenience `available` verdict
+     * (computed against `apple_pay_capabilities`), the raw device-reported
+     * `payment_credential_status`, and `has_native_session` so callers can infer the transport:
+     * `available && has_native_session` ⇒ native sheet likely; `available && !has_native_session`
+     * ⇒ cross-device / QR handoff likely.
+     *
+     * Pass `{ sync: true }` for a cheap, network-free native same-device pre-check that
+     * resolves immediately (see {@link ApplePayAvailabilityOptions.sync}).
+     *
+     * @param {ApplePayAvailabilityOptions} [options] - Merchant context, allowed capabilities, and mode.
+     * @returns {Promise<ApplePayAvailabilityResult>} The availability result.
+     *
+     * @example
+     * // Lightest path — no network, when you already know the merchant identifier:
+     * const result = await ApplePayOpenWalletButton.checkAvailability({ merchant_id });
+     *
+     * @example
+     * // Resolve the merchant identifier from the service configuration:
+     * const result = await ApplePayOpenWalletButton.checkAvailability({
+     *   public_key_or_access_token,
+     *   service_id,
+     *   env: 'sandbox',
+     * });
+     * if (result.available) {
+     *   // Render the Apple Pay button (native sheet or cross-device QR, per has_native_session).
+     * } else {
+     *   console.log('Unavailable:', result.reason, result.payment_credential_status);
+     * }
+     *
+     * @example
+     * // Synchronous native-only fast check (no network / SDK load):
+     * const { has_native_session } = await ApplePayOpenWalletButton.checkAvailability({ sync: true });
+     */
+    static checkAvailability(options?: ApplePayAvailabilityOptions): Promise<ApplePayAvailabilityResult>;
     /**
      * Validates Apple Pay-specific required metadata fields.
      * Apple Pay requires `amount_label` and `store_name` to be present and strings.
@@ -5342,6 +5611,38 @@ interface GooglePayCardConfig {
 declare class GooglePayOpenWalletButton extends OpenWalletButtons<GooglePayOpenWalletMeta> {
     /** @private */
     readonly walletType: WalletType;
+    /**
+     * Checks Google Pay availability **without instantiating the button** — the static
+     * availability entry point.
+     *
+     * Loads the Google Pay JS SDK if needed, then runs `PaymentsClient.isReadyToPay()` using
+     * the **default** card configuration (a button instance with a custom `card_config` may
+     * produce a different result). All options are optional — unlike Apple Pay, Google Pay's
+     * readiness check does not require a merchant identifier; supplying `service_id` +
+     * `public_key_or_access_token` additionally validates that the service is a Google Pay service.
+     *
+     * Pass `{ sync: true }` for a cheap, network-free check that only reports whether the
+     * Google Pay JS API is already present (see {@link GooglePayAvailabilityOptions.sync}).
+     *
+     * @param {GooglePayAvailabilityOptions} [options] - Optional merchant context and mode.
+     * @returns {Promise<GooglePayAvailabilityResult>} The availability result.
+     *
+     * @example
+     * // Simplest form — no merchant context needed:
+     * const result = await GooglePayOpenWalletButton.checkAvailability();
+     * if (result.available) {
+     *   // Render the Google Pay button.
+     * }
+     *
+     * @example
+     * // Validate the service is a Google Pay service while checking:
+     * const result = await GooglePayOpenWalletButton.checkAvailability({
+     *   public_key_or_access_token,
+     *   service_id,
+     *   env: 'sandbox',
+     * });
+     */
+    static checkAvailability(options?: GooglePayAvailabilityOptions): Promise<GooglePayAvailabilityResult>;
     /**
      * Validates Google Pay-specific required metadata fields.
      * Google Pay has no additional required fields beyond the base (amount, currency, country).
@@ -7255,5 +7556,5 @@ declare global {
     }
 }
 
-export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CHECKOUT_BUTTON_EVENT, EVENT$2 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, CheckoutActionCode, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$3 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, OpenWalletButtons, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
-export type { ApplePayButtonStyle, ApplePayButtonType, ApplePayOpenWalletMeta, ApplePayWalletMeta, AppleShippingType, BaseWalletMeta, Billing, Canvas3dsAuthPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, CheckoutIntentTokenPayload, CheckoutPaymentExpiredPayload, CheckoutPaymentFailurePayload, CheckoutPaymentSuccessPayload, CheckoutResponse, CreateOTTData, CreateOTTRequest, CreateOTTResponse, CreateSessionRequest, CreateSessionResponse, EventTypes, FraudPreventionEvent, FraudPreventionEventType, FraudPreventionProvider, GooglePayCardConfig, GooglePayOpenWalletMeta, GooglePayOpenWalletMetaStyles, HandleResponseInterface, IApplePayShippingOption, ICheckout, IClickToPayMeta, IDetails, IElementStyleInput, IEventAfterLoadData, IEventCheckoutFinishData, IEventData$1 as IEventData, IEventError, IEventFinishData, IEventMetaData, IEventSizeData, IFormValidation, IOpenWalletProvider, IPayPalMeta, IStyles$1 as IStyles, ITexts, ITokenStandalone3DS, IWalletMeta, IWalletOnClickEvent, IWalletPaymentSuccessfulEvent, IWalletUnavailableEvent, IWalletUpdateData, IWalletUpdateEvent, OTTResponse, OnCancelEventData, OnClickEventData$1 as OnClickEventData, OnCreateOTTErrorEventData, OnCreateOTTErrorPayload, OnCreateOTTSuccessPayload, OnCreateOTTSuccessfulEventData, OnErrorEventData$1 as OnErrorEventData, OnErrorPayload, OnLoadedEventData, OnUnavailableDetails, OnUnavailableEventData$1 as OnUnavailableEventData, OnUnavailablePayload, OpenWalletBaseEvent, OpenWalletDataEvent, OpenWalletEventType, OpenWalletMeta, PaypalWalletMeta, ProcessAuthenticationResponse, Shipping, VaultDisplayStyle, OnClickEventData as WalletExpressOnClickEventData, OnCloseEventData as WalletExpressOnCloseEventData, OnErrorEventData as WalletExpressOnErrorEventData, OnPaymentErrorEventData as WalletExpressOnPaymentErrorEventData, OnPaymentInReviewEventData as WalletExpressOnPaymentInReviewEventData, OnPaymentSuccessfulEventData as WalletExpressOnPaymentSuccessfulEventData, OnShippingAddressChangeEventData as WalletExpressOnShippingAddressChangeEventData, OnShippingAddressChangeEventResponse as WalletExpressOnShippingAddressChangeEventResponse, OnShippingOptionChangeEventData as WalletExpressOnShippingOptionChangeEventData, OnShippingOptionChangeEventResponse as WalletExpressOnShippingOptionChangeEventResponse, OnUnavailableEventData as WalletExpressOnUnavailableEventData, WalletType, WidgetEventMap, WidgetEventName };
+export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CARD_SCHEME, CHECKOUT_BUTTON_EVENT, EVENT$2 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, CheckoutActionCode, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$3 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, OpenWalletButtons, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
+export type { ApplePayAvailabilityOptions, ApplePayAvailabilityResult, ApplePayButtonStyle, ApplePayButtonType, ApplePayCapabilityToken, ApplePayCredentialStatus, ApplePayOpenWalletMeta, ApplePayWalletMeta, AppleShippingType, BaseWalletMeta, Billing, Canvas3dsAuthPayload, Canvas3dsChallengeCompletedPayload, Canvas3dsChallengeLoadedPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, CheckoutIntentTokenPayload, CheckoutPaymentExpiredPayload, CheckoutPaymentFailurePayload, CheckoutPaymentSuccessPayload, CheckoutResponse, CreateOTTData, CreateOTTRequest, CreateOTTResponse, CreateSessionRequest, CreateSessionResponse, EventTypes, FraudPreventionEvent, FraudPreventionEventType, FraudPreventionProvider, GooglePayAvailabilityOptions, GooglePayAvailabilityResult, GooglePayCardConfig, GooglePayOpenWalletMeta, GooglePayOpenWalletMetaStyles, HandleResponseInterface, IApplePayShippingOption, ICheckout, IClickToPayMeta, IDetails, IElementStyleInput, IEventAfterLoadData, IEventCheckoutFinishData, IEventData$1 as IEventData, IEventError, IEventFinishData, IEventMetaData, IEventSizeData, IFormValidation, IOpenWalletProvider, IPayPalMeta, IStyles$1 as IStyles, ITexts, ITokenStandalone3DS, IWalletMeta, IWalletOnClickEvent, IWalletPaymentSuccessfulEvent, IWalletUnavailableEvent, IWalletUpdateData, IWalletUpdateEvent, OTTResponse, OnCancelEventData, OnClickEventData$1 as OnClickEventData, OnCreateOTTErrorEventData, OnCreateOTTErrorPayload, OnCreateOTTSuccessPayload, OnCreateOTTSuccessfulEventData, OnErrorEventData$1 as OnErrorEventData, OnErrorPayload, OnLoadedEventData, OnUnavailableDetails, OnUnavailableEventData$1 as OnUnavailableEventData, OnUnavailablePayload, OpenWalletAvailabilityOptions, OpenWalletAvailabilityResult, OpenWalletBaseEvent, OpenWalletDataEvent, OpenWalletEventType, OpenWalletMeta, PaypalWalletMeta, ProcessAuthenticationResponse, Shipping, VaultDisplayStyle, OnClickEventData as WalletExpressOnClickEventData, OnCloseEventData as WalletExpressOnCloseEventData, OnErrorEventData as WalletExpressOnErrorEventData, OnPaymentErrorEventData as WalletExpressOnPaymentErrorEventData, OnPaymentInReviewEventData as WalletExpressOnPaymentInReviewEventData, OnPaymentSuccessfulEventData as WalletExpressOnPaymentSuccessfulEventData, OnShippingAddressChangeEventData as WalletExpressOnShippingAddressChangeEventData, OnShippingAddressChangeEventResponse as WalletExpressOnShippingAddressChangeEventResponse, OnShippingOptionChangeEventData as WalletExpressOnShippingOptionChangeEventData, OnShippingOptionChangeEventResponse as WalletExpressOnShippingOptionChangeEventResponse, OnUnavailableEventData as WalletExpressOnUnavailableEventData, WalletType, WidgetEventMap, WidgetEventName };

package/bundles/types/api/api-base.d.ts

@@ -22,6 +22,12 @@ export declare class ApiBase {
      * @param {string} [alias] - Own domain alias
      */
     setEnv(env: string, alias?: string): ApiBase;
+    /**
+     * Origin (`scheme://host[:port]`) of the API this client talks to, for the current env/alias.
+     * Used to validate the `origin` of postMessages the API itself sends to the page.
+     */
+    getApiOrigin(): string;
+    static toOrigin(url: string): string;
     requestObservable<Req extends object, Res>(method: 'GET' | 'POST', url: string, requestBody: Req): Observable<Res>;
     private makeRequest;
     private onRequestLoad;

package/bundles/types/api/api-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-base.d.ts","sourceRoot":"","sources":["../../src/api/api-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAmB,MAAM,MAAM,CAAC;AACnD,OAAO,EAAW,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,iDAAiD,CAAC;AAEzD,oBAAY,aAAa;IACvB,UAAU,IAAI;IACd,KAAK,IAAI;CACV;AAED,qBAAa,OAAO;IAClB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;gBAEZ,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa;IAMlD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAM5C,iBAAiB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAC9C,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,GAAG,GACf,UAAU,CAAC,GAAG,CAAC;IAYlB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAsBtB,WAAW;IAQX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM;;+BAKpD,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG;;IA6B1D,gBAAgB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM,GACX;QACD,MAAM,EAAE,cAAc,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACnC;IAkCD,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,KAAA,EAAE,OAAO,KAAA;IAkBtE,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBpF;;;;;;;OAOG;IACH,SAAS,CAAC,qBAAqB,CAC7B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,KAAK,IAAI;IAmBnE,WAAW,EAAE,aAAa,CAExB;IAEF,WAAW,EAAE,aAAa,CAExB;IAEF,SAAS,CAAC,aAAa,CACrB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM;IAoBd,IAAW,GAAG;;;;MAMb;CACF"}
+{"version":3,"file":"api-base.d.ts","sourceRoot":"","sources":["../../src/api/api-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAmB,MAAM,MAAM,CAAC;AACnD,OAAO,EAAW,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,iDAAiD,CAAC;AAEzD,oBAAY,aAAa;IACvB,UAAU,IAAI;IACd,KAAK,IAAI;CACV;AAED,qBAAa,OAAO;IAClB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;gBAEZ,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa;IAMlD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAMnD;;;OAGG;IACI,YAAY,IAAI,MAAM;WAIf,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAapC,iBAAiB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAC9C,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,GAAG,GACf,UAAU,CAAC,GAAG,CAAC;IAYlB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAsBtB,WAAW;IAQX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM;;+BAKpD,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG;;IA6B1D,gBAAgB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM,GACX;QACD,MAAM,EAAE,cAAc,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACnC;IAkCD,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,KAAA,EAAE,OAAO,KAAA;IAkBtE,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBpF;;;;;;;OAOG;IACH,SAAS,CAAC,qBAAqB,CAC7B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,KAAK,IAAI;IAmBnE,WAAW,EAAE,aAAa,CAExB;IAEF,WAAW,EAAE,aAAa,CAExB;IAEF,SAAS,CAAC,aAAa,CACrB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM;IAoBd,IAAW,GAAG;;;;MAMb;CACF"}

package/bundles/types/api/api-charge-internal.d.ts

@@ -1,12 +1,11 @@
 import type { ApiInternal } from './api-internal';
-import type { HandleResponseInterface, ProcessAuthenticationResponse } from './api-shared-types';
+import type { HandleResponseInterface } from './api-shared-types';
 export type { HandleResponseInterface, ProcessAuthenticationResponse, } from './api-shared-types';
 export declare class ApiChargeInternal {
     protected api: ApiInternal;
     constructor(api: ApiInternal);
     walletCapture(payload: WalletCaptureBody): Promise<WalletCaptureResponse>;
     walletCallback(payload: WalletCallbackBody): Promise<WalletCallbackResponse>;
-    standalone3dsProcess(payload: Standalone3dsProcessBody): Promise<ProcessAuthenticationResponse>;
     standalone3dsHandle(): Promise<HandleResponseInterface>;
 }
 interface WalletCaptureResponse {
@@ -47,7 +46,4 @@ interface WalletCallbackResponse {
     callback_rel: string;
     callback_url: string;
 }
-interface Standalone3dsProcessBody {
-    charge_3ds_id: string;
-}
 //# sourceMappingURL=api-charge-internal.d.ts.map

package/bundles/types/api/api-charge-internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-charge-internal.d.ts","sourceRoot":"","sources":["../../src/api/api-charge-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAO5B,qBAAa,iBAAiB;IAChB,SAAS,CAAC,GAAG,EAAE,WAAW;gBAAhB,GAAG,EAAE,WAAW;IAEtC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASzE,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAS5E,oBAAoB,CAClB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,6BAA6B,CAAC;IASzC,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAQxD;AAED,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iBAAiB;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE;QACT,cAAc,CAAC,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,UAAU,kBAAkB;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,wBAAwB;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"api-charge-internal.d.ts","sourceRoot":"","sources":["../../src/api/api-charge-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAM5B,qBAAa,iBAAiB;IAChB,SAAS,CAAC,GAAG,EAAE,WAAW;gBAAhB,GAAG,EAAE,WAAW;IAEtC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASzE,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAS5E,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAQxD;AAED,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iBAAiB;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE;QACT,cAAc,CAAC,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,UAAU,kBAAkB;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/bundles/types/canvas-3ds/canvas-3ds-event-map.d.ts

@@ -14,6 +14,38 @@ export interface Canvas3dsAuthPayload {
         description?: string;
     };
 }
+/**
+ * Payload of `chargeAuthChallengeLoaded` (Standalone 3DS, challenge flow only).
+ * Emitted exactly once per challenge, after `chargeAuthChallenge`.
+ */
+export interface Canvas3dsChallengeLoadedPayload {
+    /** The Paydock 3DS charge identifier the challenge belongs to. */
+    charge_3ds_id: string;
+    /**
+     * `'load'` — the challenge iframe fired its first `load`: the ACS page has painted.
+     * `'timeout'` — no `load` arrived within the SDK's 2.5 s safety fallback; the event is emitted anyway so a
+     * loader is never held forever (the page may still be loading and will paint on its own). Useful for
+     * analytics (how often the fallback fires) — you do not need to handle the two differently.
+     */
+    reason: 'load' | 'timeout';
+}
+/**
+ * Payload of `chargeAuthChallengeCompleted` (Standalone 3DS, challenge and decoupled flows).
+ * Emitted at most once per authentication, after the shopper finished the challenge (or approved a decoupled
+ * authentication) and always before the terminal event.
+ */
+export interface Canvas3dsChallengeCompletedPayload {
+    /** The Paydock 3DS charge identifier the authentication belongs to. */
+    charge_3ds_id: string;
+    /**
+     * How the SDK learned that the issuer delivered the result:
+     * `'poll'` — the 3DS Server's result monitor reported it (the usual case: it flips as soon as the issuer's
+     * result reaches the 3DS Server, before the challenge iframe has even left the bank's page);
+     * `'callback'` — the callback message carrying the outcome arrived first (the terminal event follows
+     * immediately). Informational only — handle both the same way.
+     */
+    source: 'poll' | 'callback';
+}
 /**
  * Payload emitted by the Standalone 3DS flow for error events.
  * `error` is intentionally `unknown` — upstream emitters do not guarantee a shape.
@@ -66,6 +98,24 @@ export interface Canvas3dsEventMap {
     error: Canvas3dsErrorPayload | Canvas3dsErrorEventPayload;
     /** Challenge required — issuer demands user interaction (OTP, biometric, etc.). Standalone-only. */
     chargeAuthChallenge: Canvas3dsAuthPayload;
+    /**
+     * The challenge iframe has painted (first `load`), or the 2.5 s fallback elapsed — see `reason`. Standalone-only,
+     * challenge flow only (never emitted for decoupled challenges). Fires once, after `chargeAuthChallenge`.
+     *
+     * Recommended loader pattern: show a loader before the charge POST, keep it through `chargeAuthChallenge`,
+     * reveal the challenge on this event, cover it with "Completing verification" on `chargeAuthChallengeCompleted`,
+     * and finish on `chargeAuthSuccess` / `chargeAuthReject` / `error`.
+     */
+    chargeAuthChallengeLoaded: Canvas3dsChallengeLoadedPayload;
+    /**
+     * The shopper finished the challenge (or approved a decoupled authentication): the issuer delivered the final
+     * result to the 3DS Server and the SDK is obtaining the outcome. Cover the challenge iframe with your own
+     * "Completing verification" state — whatever the bank or the 3DS Server render from here on is plumbing, not
+     * UX. Standalone-only. Fires at most once per authentication, always before `chargeAuthSuccess` /
+     * `chargeAuthReject` / `error`, and never after them. A wrong OTP or a further interactive step does NOT fire
+     * it (no result has been delivered yet), so no grace timer or reveal fallback is needed on your side.
+     */
+    chargeAuthChallengeCompleted: Canvas3dsChallengeCompletedPayload;
     /** Decoupled authentication — issuer will authenticate out-of-band and notify later. Standalone-only. */
     chargeAuthDecoupled: Canvas3dsAuthPayload;
     /** Iframe-path authentication event. Extends `IEventData` with optional 3DS correlation fields (`charge_3ds_id`, `status`). */

package/bundles/types/canvas-3ds/canvas-3ds-event-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canvas-3ds-event-map.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds-event-map.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mIAAmI;IACnI,aAAa,EAAE,MAAM,CAAC;IACtB,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAAgC,SAAQ,UAAU;IACjE,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,UAAU;IAC5D,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,4LAA4L;IAC5L,iBAAiB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IAC1E,8EAA8E;IAC9E,gBAAgB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IACzE,yIAAyI;IACzI,KAAK,EAAE,qBAAqB,GAAG,0BAA0B,CAAC;IAC1D,oGAAoG;IACpG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,yGAAyG;IACzG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,+HAA+H;IAC/H,UAAU,EAAE,+BAA+B,CAAC;IAC5C,6EAA6E;IAC7E,mBAAmB,EAAE,UAAU,CAAC;IAChC,2EAA2E;IAC3E,4BAA4B,EAAE,UAAU,CAAC;IACzC,iEAAiE;IACjE,2BAA2B,EAAE,UAAU,CAAC;CACzC;AAED,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B,0FAA0F;;IAE1F,yEAAyE;;IAEzE,2HAA2H;;CAEnH,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"canvas-3ds-event-map.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds-event-map.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mIAAmI;IACnI,aAAa,EAAE,MAAM,CAAC;IACtB,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAAgC,SAAQ,UAAU;IACjE,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,UAAU;IAC5D,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,4LAA4L;IAC5L,iBAAiB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IAC1E,8EAA8E;IAC9E,gBAAgB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IACzE,yIAAyI;IACzI,KAAK,EAAE,qBAAqB,GAAG,0BAA0B,CAAC;IAC1D,oGAAoG;IACpG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C;;;;;;;OAOG;IACH,yBAAyB,EAAE,+BAA+B,CAAC;IAC3D;;;;;;;OAOG;IACH,4BAA4B,EAAE,kCAAkC,CAAC;IACjE,yGAAyG;IACzG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,+HAA+H;IAC/H,UAAU,EAAE,+BAA+B,CAAC;IAC5C,6EAA6E;IAC7E,mBAAmB,EAAE,UAAU,CAAC;IAChC,2EAA2E;IAC3E,4BAA4B,EAAE,UAAU,CAAC;IACzC,iEAAiE;IACjE,2BAA2B,EAAE,UAAU,CAAC;CACzC;AAED,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B,0FAA0F;;IAE1F,yEAAyE;;IAEzE,2HAA2H;;CAEnH,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC"}