@paydock/client-sdk 1.145.0-beta → 1.147.0

package/bundles/index.mjs.d.ts

@@ -259,6 +259,24 @@ declare const SUPPORTED_CARD_TYPES: {
     EFTPOS_WHITE: string;
     UNIONPAY: string;
 };
+/**
+ * Card schemes the widget is able to resolve from a card number, and therefore the only values
+ * `setAllowedCardSchemes` accepts. This is a separate vocabulary from SUPPORTED_CARD_TYPES, which drives the
+ * card icons: it omits the icon-only variants `visa_white` / `eftpos_white`, and the `laser` / `maestro`
+ * identifiers the widget can never resolve — allowing those would be configuration that can never match.
+ */
+declare const CARD_SCHEME: {
+    AMEX: string;
+    AUSBC: string;
+    DINERS: string;
+    DISCOVER: string;
+    EFTPOS: string;
+    JAPCB: string;
+    MASTERCARD: string;
+    SOLO: string;
+    UNIONPAY: string;
+    VISA: string;
+};
 interface IIcons {
     paypal_checkout_button?: string;
     afterpay_checkout_button?: string;
@@ -362,6 +380,7 @@ interface IParams extends IStyles$1, ITexts, ICommonParams {
     ref_id?: string;
     supported_card_types?: string;
     validate_card_types?: boolean;
+    allowed_card_schemes?: string;
     fields_validation?: boolean;
     hidden_elements?: string;
     icons?: string;
@@ -767,10 +786,15 @@ declare class Configuration {
 declare class IFrame {
     protected container: Container;
     constructor(container: Container);
+    /**
+     * @param options.onLoad Called on every `load` of the iframe (initial document and each
+     *        subsequent navigation). Attached before `src` is set so a fast load is never missed.
+     */
     load(link: string, options?: {
         title?: string;
         attributes?: Record<string, string>;
         styles?: Record<string, string>;
+        onLoad?: (event: Event) => void;
     }, iframeClass?: string): void;
     loadFromHtml(content: string, options?: {
         title?: string;
@@ -842,15 +866,16 @@ declare const EVENT$3: {
 type EventTypes = typeof EVENT$3[keyof typeof EVENT$3];
 interface Listener {
     event: string;
-    listener: (event: any) => void;
+    /** `origin` is the `MessageEvent.origin` of the postMessage that carried the data (undefined for direct `emit`). */
+    listener: (event: any, origin?: string) => void;
     widget_id: string;
 }
 declare type Listeners = Listener[];
 declare class IFrameEvent {
     protected listeners: Listeners;
     constructor(subject: Window | null);
-    emit(data: IEventData$1): void;
-    on<T>(eventName: string, widgetId: string, cb: (data: T) => void): void;
+    emit(data: IEventData$1, origin?: string): void;
+    on<T>(eventName: string, widgetId: string, cb: (data: T, origin?: string) => void): void;
     clear(): void;
     private subscribe;
 }
@@ -1206,6 +1231,25 @@ declare class MultiWidget {
      * @param {boolean} validateCardNumberInput - [validateCardNumberInput=false] - using this param you allow validation for card number input on supported card types
      */
     setSupportedCardIcons(elements: string[], validateCardNumberInput?: boolean): void;
+    /**
+     * Current method restricts which card schemes the card number input accepts, without changing which card
+     * icons the widget displays. Scheme identifiers are matched case-insensitively and ignoring surrounding
+     * whitespace; unsupported identifiers are ignored with a warning, so a list in which every identifier is
+     * unsupported applies no restriction at all.
+     *
+     * Takes precedence over setSupportedCardIcons: when a non-empty list is supplied here, it is the only list
+     * used for validation and the validateCardNumberInput flag of setSupportedCardIcons no longer affects it.
+     * Calling this method more than once replaces the previous list rather than merging with it.
+     *
+     * Must be called before load().
+     *
+     * @example
+     *
+     * widget.setAllowedCardSchemes(['visa', 'mastercard']);
+     *
+     * @param {string[]} schemes - [CARD_SCHEME]{@link CARD_SCHEME}
+     */
+    setAllowedCardSchemes(schemes: string[]): void;
     /**
      * Current method can hide prevent the widget from showing the error messages
      *
@@ -2171,6 +2215,12 @@ declare class ApiBase {
      * @param {string} [alias] - Own domain alias
      */
     setEnv(env: string, alias?: string): ApiBase;
+    /**
+     * Origin (`scheme://host[:port]`) of the API this client talks to, for the current env/alias.
+     * Used to validate the `origin` of postMessages the API itself sends to the page.
+     */
+    getApiOrigin(): string;
+    static toOrigin(url: string): string;
     requestObservable<Req extends object, Res>(method: 'GET' | 'POST', url: string, requestBody: Req): Observable<Res>;
     private makeRequest;
     private onRequestLoad;
@@ -2301,6 +2351,11 @@ declare class Standalone3dsService {
     load(token: string, options: {
         title: string;
     }): void;
+    /**
+     * Origins allowed to deliver a processed 3DS outcome to the page via postMessage: the Paydock API
+     * (inline callback page) and the Paydock widget (remote-app landing page), for the current env/alias.
+     */
+    protected getTrustedMessageOrigins(api: ApiBase): string[];
     setEnv(env: string, alias?: string): void;
 }
 
@@ -2319,6 +2374,38 @@ interface Canvas3dsAuthPayload {
         description?: string;
     };
 }
+/**
+ * Payload of `chargeAuthChallengeLoaded` (Standalone 3DS, challenge flow only).
+ * Emitted exactly once per challenge, after `chargeAuthChallenge`.
+ */
+interface Canvas3dsChallengeLoadedPayload {
+    /** The Paydock 3DS charge identifier the challenge belongs to. */
+    charge_3ds_id: string;
+    /**
+     * `'load'` — the challenge iframe fired its first `load`: the ACS page has painted.
+     * `'timeout'` — no `load` arrived within the SDK's 2.5 s safety fallback; the event is emitted anyway so a
+     * loader is never held forever (the page may still be loading and will paint on its own). Useful for
+     * analytics (how often the fallback fires) — you do not need to handle the two differently.
+     */
+    reason: 'load' | 'timeout';
+}
+/**
+ * Payload of `chargeAuthChallengeCompleted` (Standalone 3DS, challenge and decoupled flows).
+ * Emitted at most once per authentication, after the shopper finished the challenge (or approved a decoupled
+ * authentication) and always before the terminal event.
+ */
+interface Canvas3dsChallengeCompletedPayload {
+    /** The Paydock 3DS charge identifier the authentication belongs to. */
+    charge_3ds_id: string;
+    /**
+     * How the SDK learned that the issuer delivered the result:
+     * `'poll'` — the 3DS Server's result monitor reported it (the usual case: it flips as soon as the issuer's
+     * result reaches the 3DS Server, before the challenge iframe has even left the bank's page);
+     * `'callback'` — the callback message carrying the outcome arrived first (the terminal event follows
+     * immediately). Informational only — handle both the same way.
+     */
+    source: 'poll' | 'callback';
+}
 /**
  * Payload emitted by the Standalone 3DS flow for error events.
  * `error` is intentionally `unknown` — upstream emitters do not guarantee a shape.
@@ -2371,6 +2458,24 @@ interface Canvas3dsEventMap {
     error: Canvas3dsErrorPayload | Canvas3dsErrorEventPayload;
     /** Challenge required — issuer demands user interaction (OTP, biometric, etc.). Standalone-only. */
     chargeAuthChallenge: Canvas3dsAuthPayload;
+    /**
+     * The challenge iframe has painted (first `load`), or the 2.5 s fallback elapsed — see `reason`. Standalone-only,
+     * challenge flow only (never emitted for decoupled challenges). Fires once, after `chargeAuthChallenge`.
+     *
+     * Recommended loader pattern: show a loader before the charge POST, keep it through `chargeAuthChallenge`,
+     * reveal the challenge on this event, cover it with "Completing verification" on `chargeAuthChallengeCompleted`,
+     * and finish on `chargeAuthSuccess` / `chargeAuthReject` / `error`.
+     */
+    chargeAuthChallengeLoaded: Canvas3dsChallengeLoadedPayload;
+    /**
+     * The shopper finished the challenge (or approved a decoupled authentication): the issuer delivered the final
+     * result to the 3DS Server and the SDK is obtaining the outcome. Cover the challenge iframe with your own
+     * "Completing verification" state — whatever the bank or the 3DS Server render from here on is plumbing, not
+     * UX. Standalone-only. Fires at most once per authentication, always before `chargeAuthSuccess` /
+     * `chargeAuthReject` / `error`, and never after them. A wrong OTP or a further interactive step does NOT fire
+     * it (no result has been delivered yet), so no grace timer or reveal fallback is needed on your side.
+     */
+    chargeAuthChallengeCompleted: Canvas3dsChallengeCompletedPayload;
     /** Decoupled authentication — issuer will authenticate out-of-band and notify later. Standalone-only. */
     chargeAuthDecoupled: Canvas3dsAuthPayload;
     /** Iframe-path authentication event. Extends `IEventData` with optional 3DS correlation fields (`charge_3ds_id`, `status`). */
@@ -2426,11 +2531,13 @@ declare enum TOKEN_FORMAT {
  * @const STANDALONE_3DS_EVENT
  *
  * @type {object}
- * @param {string} CHARGE_AUTH_SUCCESS=chargeAuthSuccess
- * @param {string} CHARGE_AUTH_REJECT=chargeAuthReject
- * @param {string} CHARGE_AUTH_DECOUPLED=chargeAuthDecoupled
- * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
- * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
+ * @param {string} AUTH_SUCCESS=chargeAuthSuccess
+ * @param {string} AUTH_ERROR=chargeAuthReject
+ * @param {string} DECOUPLED=chargeAuthDecoupled
+ * @param {string} CHALLENGE=chargeAuthChallenge
+ * @param {string} CHALLENGE_LOADED=chargeAuthChallengeLoaded - challenge iframe painted (first `load`, or 2.5 s fallback); reveal your challenge UI here
+ * @param {string} CHALLENGE_COMPLETED=chargeAuthChallengeCompleted - the shopper finished the challenge (issuer result delivered to the 3DS Server); cover the challenge iframe with your own loader until the terminal event
+ * @param {string} INFO=chargeAuthInfo
  * @param {string} ERROR=error
  */
 /**
@@ -2559,7 +2666,6 @@ declare class ApiChargeInternal {
     constructor(api: ApiInternal);
     walletCapture(payload: WalletCaptureBody): Promise<WalletCaptureResponse>;
     walletCallback(payload: WalletCallbackBody): Promise<WalletCallbackResponse>;
-    standalone3dsProcess(payload: Standalone3dsProcessBody): Promise<ProcessAuthenticationResponse>;
     standalone3dsHandle(): Promise<HandleResponseInterface>;
 }
 interface WalletCaptureResponse {
@@ -2600,9 +2706,6 @@ interface WalletCallbackResponse {
     callback_rel: string;
     callback_url: string;
 }
-interface Standalone3dsProcessBody {
-    charge_3ds_id: string;
-}
 
 declare class ApiCheckoutInternal {
     protected api: ApiInternal;
@@ -2885,6 +2988,20 @@ declare const CANVAS_3DS_EVENT: {
     readonly DECOUPLED: "chargeAuthDecoupled";
     /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     readonly CHALLENGE: "chargeAuthChallenge";
+    /**
+     * The challenge iframe fired its FIRST `load` after `chargeAuthChallenge` (the ACS page has painted),
+     * or the `CHALLENGE_LOADED_FALLBACK_MS` safety fallback elapsed without one. Emitted exactly once per
+     * challenge; never emitted for a decoupled challenge (no challenge iframe). Payload: `Canvas3dsChallengeLoadedPayload`.
+     */
+    readonly CHALLENGE_LOADED: "chargeAuthChallengeLoaded";
+    /**
+     * The issuer delivered the final authentication result to the 3DS Server (the shopper finished the
+     * challenge, or approved a decoupled authentication) and the SDK is now obtaining the outcome. Emitted at
+     * most once per authentication, always before the terminal event. Detected through the `secondary_url`
+     * result monitor (`source: 'poll'`) or, when the callback message arrives first, right before the outcome
+     * it carries (`source: 'callback'`). Payload: `Canvas3dsChallengeCompletedPayload`.
+     */
+    readonly CHALLENGE_COMPLETED: "chargeAuthChallengeCompleted";
     /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     readonly INFO: "chargeAuthInfo";
     /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
@@ -7439,5 +7556,5 @@ declare global {
     }
 }
 
-export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CHECKOUT_BUTTON_EVENT, EVENT$2 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, CheckoutActionCode, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$3 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, OpenWalletButtons, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
-export type { ApplePayAvailabilityOptions, ApplePayAvailabilityResult, ApplePayButtonStyle, ApplePayButtonType, ApplePayCapabilityToken, ApplePayCredentialStatus, ApplePayOpenWalletMeta, ApplePayWalletMeta, AppleShippingType, BaseWalletMeta, Billing, Canvas3dsAuthPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, CheckoutIntentTokenPayload, CheckoutPaymentExpiredPayload, CheckoutPaymentFailurePayload, CheckoutPaymentSuccessPayload, CheckoutResponse, CreateOTTData, CreateOTTRequest, CreateOTTResponse, CreateSessionRequest, CreateSessionResponse, EventTypes, FraudPreventionEvent, FraudPreventionEventType, FraudPreventionProvider, GooglePayAvailabilityOptions, GooglePayAvailabilityResult, GooglePayCardConfig, GooglePayOpenWalletMeta, GooglePayOpenWalletMetaStyles, HandleResponseInterface, IApplePayShippingOption, ICheckout, IClickToPayMeta, IDetails, IElementStyleInput, IEventAfterLoadData, IEventCheckoutFinishData, IEventData$1 as IEventData, IEventError, IEventFinishData, IEventMetaData, IEventSizeData, IFormValidation, IOpenWalletProvider, IPayPalMeta, IStyles$1 as IStyles, ITexts, ITokenStandalone3DS, IWalletMeta, IWalletOnClickEvent, IWalletPaymentSuccessfulEvent, IWalletUnavailableEvent, IWalletUpdateData, IWalletUpdateEvent, OTTResponse, OnCancelEventData, OnClickEventData$1 as OnClickEventData, OnCreateOTTErrorEventData, OnCreateOTTErrorPayload, OnCreateOTTSuccessPayload, OnCreateOTTSuccessfulEventData, OnErrorEventData$1 as OnErrorEventData, OnErrorPayload, OnLoadedEventData, OnUnavailableDetails, OnUnavailableEventData$1 as OnUnavailableEventData, OnUnavailablePayload, OpenWalletAvailabilityOptions, OpenWalletAvailabilityResult, OpenWalletBaseEvent, OpenWalletDataEvent, OpenWalletEventType, OpenWalletMeta, PaypalWalletMeta, ProcessAuthenticationResponse, Shipping, VaultDisplayStyle, OnClickEventData as WalletExpressOnClickEventData, OnCloseEventData as WalletExpressOnCloseEventData, OnErrorEventData as WalletExpressOnErrorEventData, OnPaymentErrorEventData as WalletExpressOnPaymentErrorEventData, OnPaymentInReviewEventData as WalletExpressOnPaymentInReviewEventData, OnPaymentSuccessfulEventData as WalletExpressOnPaymentSuccessfulEventData, OnShippingAddressChangeEventData as WalletExpressOnShippingAddressChangeEventData, OnShippingAddressChangeEventResponse as WalletExpressOnShippingAddressChangeEventResponse, OnShippingOptionChangeEventData as WalletExpressOnShippingOptionChangeEventData, OnShippingOptionChangeEventResponse as WalletExpressOnShippingOptionChangeEventResponse, OnUnavailableEventData as WalletExpressOnUnavailableEventData, WalletType, WidgetEventMap, WidgetEventName };
+export { AfterpayCheckoutButton, AfterpayOnSiteMessaging, Api, ApplePayOpenWalletButton, ApplePayWalletButtonExpress, CANVAS_3DS_EVENT, CARD_SCHEME, CHECKOUT_BUTTON_EVENT, EVENT$2 as CHECKOUT_EVENT, Canvas3ds, Canvas3dsTokenFormat, Checkout, CheckoutActionCode, ClickToPay, Configuration, ContactShippingEditingMode, ELEMENT, ERROR_OPERATION, EVENT$3 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, GooglePayOpenWalletButton, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, OpenWalletButtons, PAYMENT_EXPIRED, PAYMENT_FAILURE, PAYMENT_SUCCESSFUL, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE, SUPPORTED_CARD_TYPES, TEXT, TOKEN_TYPE, TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, EVENT as WALLET_BUTTONS_EXPRESS_EVENT, WALLET_TYPES, WalletButtons, ZipmoneyCheckoutButton };
+export type { ApplePayAvailabilityOptions, ApplePayAvailabilityResult, ApplePayButtonStyle, ApplePayButtonType, ApplePayCapabilityToken, ApplePayCredentialStatus, ApplePayOpenWalletMeta, ApplePayWalletMeta, AppleShippingType, BaseWalletMeta, Billing, Canvas3dsAuthPayload, Canvas3dsChallengeCompletedPayload, Canvas3dsChallengeLoadedPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, CheckoutIntentTokenPayload, CheckoutPaymentExpiredPayload, CheckoutPaymentFailurePayload, CheckoutPaymentSuccessPayload, CheckoutResponse, CreateOTTData, CreateOTTRequest, CreateOTTResponse, CreateSessionRequest, CreateSessionResponse, EventTypes, FraudPreventionEvent, FraudPreventionEventType, FraudPreventionProvider, GooglePayAvailabilityOptions, GooglePayAvailabilityResult, GooglePayCardConfig, GooglePayOpenWalletMeta, GooglePayOpenWalletMetaStyles, HandleResponseInterface, IApplePayShippingOption, ICheckout, IClickToPayMeta, IDetails, IElementStyleInput, IEventAfterLoadData, IEventCheckoutFinishData, IEventData$1 as IEventData, IEventError, IEventFinishData, IEventMetaData, IEventSizeData, IFormValidation, IOpenWalletProvider, IPayPalMeta, IStyles$1 as IStyles, ITexts, ITokenStandalone3DS, IWalletMeta, IWalletOnClickEvent, IWalletPaymentSuccessfulEvent, IWalletUnavailableEvent, IWalletUpdateData, IWalletUpdateEvent, OTTResponse, OnCancelEventData, OnClickEventData$1 as OnClickEventData, OnCreateOTTErrorEventData, OnCreateOTTErrorPayload, OnCreateOTTSuccessPayload, OnCreateOTTSuccessfulEventData, OnErrorEventData$1 as OnErrorEventData, OnErrorPayload, OnLoadedEventData, OnUnavailableDetails, OnUnavailableEventData$1 as OnUnavailableEventData, OnUnavailablePayload, OpenWalletAvailabilityOptions, OpenWalletAvailabilityResult, OpenWalletBaseEvent, OpenWalletDataEvent, OpenWalletEventType, OpenWalletMeta, PaypalWalletMeta, ProcessAuthenticationResponse, Shipping, VaultDisplayStyle, OnClickEventData as WalletExpressOnClickEventData, OnCloseEventData as WalletExpressOnCloseEventData, OnErrorEventData as WalletExpressOnErrorEventData, OnPaymentErrorEventData as WalletExpressOnPaymentErrorEventData, OnPaymentInReviewEventData as WalletExpressOnPaymentInReviewEventData, OnPaymentSuccessfulEventData as WalletExpressOnPaymentSuccessfulEventData, OnShippingAddressChangeEventData as WalletExpressOnShippingAddressChangeEventData, OnShippingAddressChangeEventResponse as WalletExpressOnShippingAddressChangeEventResponse, OnShippingOptionChangeEventData as WalletExpressOnShippingOptionChangeEventData, OnShippingOptionChangeEventResponse as WalletExpressOnShippingOptionChangeEventResponse, OnUnavailableEventData as WalletExpressOnUnavailableEventData, WalletType, WidgetEventMap, WidgetEventName };

package/bundles/types/api/api-base.d.ts

@@ -22,6 +22,12 @@ export declare class ApiBase {
      * @param {string} [alias] - Own domain alias
      */
     setEnv(env: string, alias?: string): ApiBase;
+    /**
+     * Origin (`scheme://host[:port]`) of the API this client talks to, for the current env/alias.
+     * Used to validate the `origin` of postMessages the API itself sends to the page.
+     */
+    getApiOrigin(): string;
+    static toOrigin(url: string): string;
     requestObservable<Req extends object, Res>(method: 'GET' | 'POST', url: string, requestBody: Req): Observable<Res>;
     private makeRequest;
     private onRequestLoad;

package/bundles/types/api/api-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-base.d.ts","sourceRoot":"","sources":["../../src/api/api-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAmB,MAAM,MAAM,CAAC;AACnD,OAAO,EAAW,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,iDAAiD,CAAC;AAEzD,oBAAY,aAAa;IACvB,UAAU,IAAI;IACd,KAAK,IAAI;CACV;AAED,qBAAa,OAAO;IAClB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;gBAEZ,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa;IAMlD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAM5C,iBAAiB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAC9C,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,GAAG,GACf,UAAU,CAAC,GAAG,CAAC;IAYlB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAsBtB,WAAW;IAQX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM;;+BAKpD,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG;;IA6B1D,gBAAgB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM,GACX;QACD,MAAM,EAAE,cAAc,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACnC;IAkCD,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,KAAA,EAAE,OAAO,KAAA;IAkBtE,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBpF;;;;;;;OAOG;IACH,SAAS,CAAC,qBAAqB,CAC7B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,KAAK,IAAI;IAmBnE,WAAW,EAAE,aAAa,CAExB;IAEF,WAAW,EAAE,aAAa,CAExB;IAEF,SAAS,CAAC,aAAa,CACrB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM;IAoBd,IAAW,GAAG;;;;MAMb;CACF"}
+{"version":3,"file":"api-base.d.ts","sourceRoot":"","sources":["../../src/api/api-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAmB,MAAM,MAAM,CAAC;AACnD,OAAO,EAAW,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,iDAAiD,CAAC;AAEzD,oBAAY,aAAa;IACvB,UAAU,IAAI;IACd,KAAK,IAAI;CACV;AAED,qBAAa,OAAO;IAClB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;gBAEZ,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa;IAMlD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAMnD;;;OAGG;IACI,YAAY,IAAI,MAAM;WAIf,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAapC,iBAAiB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAC9C,MAAM,EAAE,KAAK,GAAG,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,GAAG,GACf,UAAU,CAAC,GAAG,CAAC;IAYlB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAsBtB,WAAW;IAQX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM;;+BAKpD,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG;;IA6B1D,gBAAgB,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM,GACX;QACD,MAAM,EAAE,cAAc,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACnC;IAkCD,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,KAAA,EAAE,OAAO,KAAA;IAkBtE,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAkBpF;;;;;;;OAOG;IACH,SAAS,CAAC,qBAAqB,CAC7B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,KAAK,IAAI;IAmBnE,WAAW,EAAE,aAAa,CAExB;IAEF,WAAW,EAAE,aAAa,CAExB;IAEF,SAAS,CAAC,aAAa,CACrB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,GAAG,MAAM,CAAC,EAClD,IAAI,EAAE,MAAM;IAoBd,IAAW,GAAG;;;;MAMb;CACF"}

package/bundles/types/api/api-charge-internal.d.ts

@@ -1,12 +1,11 @@
 import type { ApiInternal } from './api-internal';
-import type { HandleResponseInterface, ProcessAuthenticationResponse } from './api-shared-types';
+import type { HandleResponseInterface } from './api-shared-types';
 export type { HandleResponseInterface, ProcessAuthenticationResponse, } from './api-shared-types';
 export declare class ApiChargeInternal {
     protected api: ApiInternal;
     constructor(api: ApiInternal);
     walletCapture(payload: WalletCaptureBody): Promise<WalletCaptureResponse>;
     walletCallback(payload: WalletCallbackBody): Promise<WalletCallbackResponse>;
-    standalone3dsProcess(payload: Standalone3dsProcessBody): Promise<ProcessAuthenticationResponse>;
     standalone3dsHandle(): Promise<HandleResponseInterface>;
 }
 interface WalletCaptureResponse {
@@ -47,7 +46,4 @@ interface WalletCallbackResponse {
     callback_rel: string;
     callback_url: string;
 }
-interface Standalone3dsProcessBody {
-    charge_3ds_id: string;
-}
 //# sourceMappingURL=api-charge-internal.d.ts.map

package/bundles/types/api/api-charge-internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-charge-internal.d.ts","sourceRoot":"","sources":["../../src/api/api-charge-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAO5B,qBAAa,iBAAiB;IAChB,SAAS,CAAC,GAAG,EAAE,WAAW;gBAAhB,GAAG,EAAE,WAAW;IAEtC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASzE,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAS5E,oBAAoB,CAClB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,6BAA6B,CAAC;IASzC,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAQxD;AAED,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iBAAiB;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE;QACT,cAAc,CAAC,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,UAAU,kBAAkB;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,wBAAwB;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"api-charge-internal.d.ts","sourceRoot":"","sources":["../../src/api/api-charge-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAM5B,qBAAa,iBAAiB;IAChB,SAAS,CAAC,GAAG,EAAE,WAAW;gBAAhB,GAAG,EAAE,WAAW;IAEtC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASzE,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAS5E,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAQxD;AAED,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iBAAiB;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE;QACT,cAAc,CAAC,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,UAAU,kBAAkB;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/bundles/types/canvas-3ds/canvas-3ds-event-map.d.ts

@@ -14,6 +14,38 @@ export interface Canvas3dsAuthPayload {
         description?: string;
     };
 }
+/**
+ * Payload of `chargeAuthChallengeLoaded` (Standalone 3DS, challenge flow only).
+ * Emitted exactly once per challenge, after `chargeAuthChallenge`.
+ */
+export interface Canvas3dsChallengeLoadedPayload {
+    /** The Paydock 3DS charge identifier the challenge belongs to. */
+    charge_3ds_id: string;
+    /**
+     * `'load'` — the challenge iframe fired its first `load`: the ACS page has painted.
+     * `'timeout'` — no `load` arrived within the SDK's 2.5 s safety fallback; the event is emitted anyway so a
+     * loader is never held forever (the page may still be loading and will paint on its own). Useful for
+     * analytics (how often the fallback fires) — you do not need to handle the two differently.
+     */
+    reason: 'load' | 'timeout';
+}
+/**
+ * Payload of `chargeAuthChallengeCompleted` (Standalone 3DS, challenge and decoupled flows).
+ * Emitted at most once per authentication, after the shopper finished the challenge (or approved a decoupled
+ * authentication) and always before the terminal event.
+ */
+export interface Canvas3dsChallengeCompletedPayload {
+    /** The Paydock 3DS charge identifier the authentication belongs to. */
+    charge_3ds_id: string;
+    /**
+     * How the SDK learned that the issuer delivered the result:
+     * `'poll'` — the 3DS Server's result monitor reported it (the usual case: it flips as soon as the issuer's
+     * result reaches the 3DS Server, before the challenge iframe has even left the bank's page);
+     * `'callback'` — the callback message carrying the outcome arrived first (the terminal event follows
+     * immediately). Informational only — handle both the same way.
+     */
+    source: 'poll' | 'callback';
+}
 /**
  * Payload emitted by the Standalone 3DS flow for error events.
  * `error` is intentionally `unknown` — upstream emitters do not guarantee a shape.
@@ -66,6 +98,24 @@ export interface Canvas3dsEventMap {
     error: Canvas3dsErrorPayload | Canvas3dsErrorEventPayload;
     /** Challenge required — issuer demands user interaction (OTP, biometric, etc.). Standalone-only. */
     chargeAuthChallenge: Canvas3dsAuthPayload;
+    /**
+     * The challenge iframe has painted (first `load`), or the 2.5 s fallback elapsed — see `reason`. Standalone-only,
+     * challenge flow only (never emitted for decoupled challenges). Fires once, after `chargeAuthChallenge`.
+     *
+     * Recommended loader pattern: show a loader before the charge POST, keep it through `chargeAuthChallenge`,
+     * reveal the challenge on this event, cover it with "Completing verification" on `chargeAuthChallengeCompleted`,
+     * and finish on `chargeAuthSuccess` / `chargeAuthReject` / `error`.
+     */
+    chargeAuthChallengeLoaded: Canvas3dsChallengeLoadedPayload;
+    /**
+     * The shopper finished the challenge (or approved a decoupled authentication): the issuer delivered the final
+     * result to the 3DS Server and the SDK is obtaining the outcome. Cover the challenge iframe with your own
+     * "Completing verification" state — whatever the bank or the 3DS Server render from here on is plumbing, not
+     * UX. Standalone-only. Fires at most once per authentication, always before `chargeAuthSuccess` /
+     * `chargeAuthReject` / `error`, and never after them. A wrong OTP or a further interactive step does NOT fire
+     * it (no result has been delivered yet), so no grace timer or reveal fallback is needed on your side.
+     */
+    chargeAuthChallengeCompleted: Canvas3dsChallengeCompletedPayload;
     /** Decoupled authentication — issuer will authenticate out-of-band and notify later. Standalone-only. */
     chargeAuthDecoupled: Canvas3dsAuthPayload;
     /** Iframe-path authentication event. Extends `IEventData` with optional 3DS correlation fields (`charge_3ds_id`, `status`). */

package/bundles/types/canvas-3ds/canvas-3ds-event-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canvas-3ds-event-map.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds-event-map.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mIAAmI;IACnI,aAAa,EAAE,MAAM,CAAC;IACtB,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAAgC,SAAQ,UAAU;IACjE,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,UAAU;IAC5D,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,4LAA4L;IAC5L,iBAAiB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IAC1E,8EAA8E;IAC9E,gBAAgB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IACzE,yIAAyI;IACzI,KAAK,EAAE,qBAAqB,GAAG,0BAA0B,CAAC;IAC1D,oGAAoG;IACpG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,yGAAyG;IACzG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,+HAA+H;IAC/H,UAAU,EAAE,+BAA+B,CAAC;IAC5C,6EAA6E;IAC7E,mBAAmB,EAAE,UAAU,CAAC;IAChC,2EAA2E;IAC3E,4BAA4B,EAAE,UAAU,CAAC;IACzC,iEAAiE;IACjE,2BAA2B,EAAE,UAAU,CAAC;CACzC;AAED,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B,0FAA0F;;IAE1F,yEAAyE;;IAEzE,2HAA2H;;CAEnH,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"canvas-3ds-event-map.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds-event-map.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mIAAmI;IACnI,aAAa,EAAE,MAAM,CAAC;IACtB,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAAgC,SAAQ,UAAU;IACjE,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE;QACP,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,UAAU;IAC5D,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,4LAA4L;IAC5L,iBAAiB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IAC1E,8EAA8E;IAC9E,gBAAgB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC;IACzE,yIAAyI;IACzI,KAAK,EAAE,qBAAqB,GAAG,0BAA0B,CAAC;IAC1D,oGAAoG;IACpG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C;;;;;;;OAOG;IACH,yBAAyB,EAAE,+BAA+B,CAAC;IAC3D;;;;;;;OAOG;IACH,4BAA4B,EAAE,kCAAkC,CAAC;IACjE,yGAAyG;IACzG,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,+HAA+H;IAC/H,UAAU,EAAE,+BAA+B,CAAC;IAC5C,6EAA6E;IAC7E,mBAAmB,EAAE,UAAU,CAAC;IAChC,2EAA2E;IAC3E,4BAA4B,EAAE,UAAU,CAAC;IACzC,iEAAiE;IACjE,2BAA2B,EAAE,UAAU,CAAC;CACzC;AAED,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B,0FAA0F;;IAE1F,yEAAyE;;IAEzE,2HAA2H;;CAEnH,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC"}

package/bundles/types/canvas-3ds/canvas-3ds.d.ts

@@ -34,11 +34,13 @@ declare enum TOKEN_FORMAT {
  * @const STANDALONE_3DS_EVENT
  *
  * @type {object}
- * @param {string} CHARGE_AUTH_SUCCESS=chargeAuthSuccess
- * @param {string} CHARGE_AUTH_REJECT=chargeAuthReject
- * @param {string} CHARGE_AUTH_DECOUPLED=chargeAuthDecoupled
- * @param {string} CHARGE_AUTH_CHALLENGE=chargeAuthChallenge
- * @param {string} CHARGE_AUTH_INFO=chargeAuthInfo
+ * @param {string} AUTH_SUCCESS=chargeAuthSuccess
+ * @param {string} AUTH_ERROR=chargeAuthReject
+ * @param {string} DECOUPLED=chargeAuthDecoupled
+ * @param {string} CHALLENGE=chargeAuthChallenge
+ * @param {string} CHALLENGE_LOADED=chargeAuthChallengeLoaded - challenge iframe painted (first `load`, or 2.5 s fallback); reveal your challenge UI here
+ * @param {string} CHALLENGE_COMPLETED=chargeAuthChallengeCompleted - the shopper finished the challenge (issuer result delivered to the 3DS Server); cover the challenge iframe with your own loader until the terminal event
+ * @param {string} INFO=chargeAuthInfo
  * @param {string} ERROR=error
  */
 /**

package/bundles/types/canvas-3ds/canvas-3ds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canvas-3ds.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAa,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;;;GAMG;AACH,aAAK,YAAY;IACf,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,cAAc,mBAAmB;CAClC;AAED;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;GAUG;AACH,cAAM,SAAS;IACb,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;IACrB,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,CAAM;IACxC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAElF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC;IAC7B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAErC,kBAAkB,aACN,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAgB3C,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;QAC5C,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,YAAY,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB;IAID;;;OAGG;IACI,IAAI,IAAI,IAAI;IAsBnB;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAYzC,MAAM,IAAI,MAAM;IAMhB,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACzC,SAAS,EAAE,CAAC,EACZ,EAAE,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI,GACvC,IAAI;IACA,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACzC,SAAS,EAAE,CAAC,GACX,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAEzB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI;IAC3D,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA4CjD;;;OAGG;IACI,IAAI,CAAC,QAAQ,EAAE,OAAO;IAI7B;;;OAGG;IACI,IAAI;IAIX;;;OAGG;IACI,MAAM;CAId;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"canvas-3ds.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/canvas-3ds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAa,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;;;GAMG;AACH,aAAK,YAAY;IACf,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,cAAc,mBAAmB;CAClC;AAED;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;GAUG;AACH,cAAM,SAAS;IACb,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;IACrB,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,CAAM;IACxC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAElF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC;IAC7B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAErC,kBAAkB,aACN,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAgB3C,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;QAC5C,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,YAAY,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB;IAID;;;OAGG;IACI,IAAI,IAAI,IAAI;IAsBnB;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAYzC,MAAM,IAAI,MAAM;IAMhB,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACzC,SAAS,EAAE,CAAC,EACZ,EAAE,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI,GACvC,IAAI;IACA,EAAE,CAAC,CAAC,SAAS,MAAM,iBAAiB,EACzC,SAAS,EAAE,CAAC,GACX,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAEzB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI;IAC3D,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA4CjD;;;OAGG;IACI,IAAI,CAAC,QAAQ,EAAE,OAAO;IAI7B;;;OAGG;IACI,IAAI;IAIX;;;OAGG;IACI,MAAM;CAId;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/bundles/types/canvas-3ds/index.d.ts

@@ -1,5 +1,5 @@
 export { Canvas3ds } from './canvas-3ds';
-export type { Canvas3dsAuthPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, } from './canvas-3ds-event-map';
+export type { Canvas3dsAuthPayload, Canvas3dsChallengeCompletedPayload, Canvas3dsChallengeLoadedPayload, Canvas3dsChargeAuthEventPayload, Canvas3dsErrorEventPayload, Canvas3dsErrorPayload, Canvas3dsEventMap, Canvas3dsEventName, } from './canvas-3ds-event-map';
 export { Canvas3dsTokenFormat } from './canvas-3ds-event-map';
 export { CANVAS_3DS_EVENT } from './services/gpayments-service';
 export type { ITokenStandalone3DS } from './services/standalone3ds-service';

package/bundles/types/canvas-3ds/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canvas-3ds/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EACV,oBAAoB,EACpB,kCAAkC,EAClC,+BAA+B,EAC/B,+BAA+B,EAC/B,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC"}

package/bundles/types/canvas-3ds/services/gpayments-service.d.ts

@@ -22,6 +22,20 @@ export declare const GPAYMENTS_EVENT: {
     readonly DECOUPLED: "chargeAuthDecoupled";
     /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     readonly CHALLENGE: "chargeAuthChallenge";
+    /**
+     * The challenge iframe fired its FIRST `load` after `chargeAuthChallenge` (the ACS page has painted),
+     * or the `CHALLENGE_LOADED_FALLBACK_MS` safety fallback elapsed without one. Emitted exactly once per
+     * challenge; never emitted for a decoupled challenge (no challenge iframe). Payload: `Canvas3dsChallengeLoadedPayload`.
+     */
+    readonly CHALLENGE_LOADED: "chargeAuthChallengeLoaded";
+    /**
+     * The issuer delivered the final authentication result to the 3DS Server (the shopper finished the
+     * challenge, or approved a decoupled authentication) and the SDK is now obtaining the outcome. Emitted at
+     * most once per authentication, always before the terminal event. Detected through the `secondary_url`
+     * result monitor (`source: 'poll'`) or, when the callback message arrives first, right before the outcome
+     * it carries (`source: 'callback'`). Payload: `Canvas3dsChallengeCompletedPayload`.
+     */
+    readonly CHALLENGE_COMPLETED: "chargeAuthChallengeCompleted";
     /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     readonly INFO: "chargeAuthInfo";
     /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
@@ -41,32 +55,133 @@ export declare const CANVAS_3DS_EVENT: {
     readonly DECOUPLED: "chargeAuthDecoupled";
     /** Challenge required — issuer demands user interaction. Payload: `Canvas3dsAuthPayload`. */
     readonly CHALLENGE: "chargeAuthChallenge";
+    /**
+     * The challenge iframe fired its FIRST `load` after `chargeAuthChallenge` (the ACS page has painted),
+     * or the `CHALLENGE_LOADED_FALLBACK_MS` safety fallback elapsed without one. Emitted exactly once per
+     * challenge; never emitted for a decoupled challenge (no challenge iframe). Payload: `Canvas3dsChallengeLoadedPayload`.
+     */
+    readonly CHALLENGE_LOADED: "chargeAuthChallengeLoaded";
+    /**
+     * The issuer delivered the final authentication result to the 3DS Server (the shopper finished the
+     * challenge, or approved a decoupled authentication) and the SDK is now obtaining the outcome. Emitted at
+     * most once per authentication, always before the terminal event. Detected through the `secondary_url`
+     * result monitor (`source: 'poll'`) or, when the callback message arrives first, right before the outcome
+     * it carries (`source: 'callback'`). Payload: `Canvas3dsChallengeCompletedPayload`.
+     */
+    readonly CHALLENGE_COMPLETED: "chargeAuthChallengeCompleted";
     /** Informational signal emitted by the GPayments flow. Internal — not part of the public typed surface. */
     readonly INFO: "chargeAuthInfo";
     /** Error during the flow (network, parsing, etc.). Payload: `Canvas3dsErrorPayload`. */
     readonly ERROR: "error";
 };
+/**
+ * Upper bound on how long `chargeAuthChallengeLoaded` waits for the challenge iframe's first `load`.
+ * When it elapses the event is emitted with `reason: 'timeout'` so a merchant loader is never held
+ * forever; the real `load` arriving afterwards is the paint and is simply ignored.
+ */
+export declare const CHALLENGE_LOADED_FALLBACK_MS = 2500;
+/**
+ * Interval of the `secondary_url` (GPayments `resultMonUrl`) poll while an ACS challenge is on screen.
+ * The monitor flips to `AuthResultReady` when the issuer's RReq reaches the 3DS Server — before the ACS has
+ * even returned its final page to the browser — so this poll is what makes `chargeAuthChallengeCompleted`
+ * land before the shopper sees any post-submit page. GPayments recommends 2 s and leaves the interval to the
+ * requestor; 1 s matches the cadence of GPayments' own monitoring frame.
+ */
+export declare const CHALLENGE_RESULT_POLL_INTERVAL_MS = 1000;
+/**
+ * Interval of the `secondary_url` poll for a decoupled challenge (shopper approves out-of-band, possibly
+ * minutes later; nothing to cover on screen) — the GPayments-recommended 2 s.
+ */
+export declare const DECOUPLED_RESULT_POLL_INTERVAL_MS = 2000;
 export declare class GPaymentsService {
     protected container: Container;
     protected api: ApiInternal;
     protected eventEmitter: EventEmitter;
+    /** Origins allowed to deliver a processed outcome (`process_status`) via postMessage. */
+    protected trustedOrigins: string[];
     protected browserAndChallengeContainer: Container;
     protected iFrameAuthorization: IFrame;
     protected monitoringContainer: Container;
     protected iFrameSecondaryUrl?: IFrame;
     protected iFrameEvent: IFrameEvent;
     protected resultRead: boolean;
-    constructor(container: Container, api: ApiInternal, eventEmitter: EventEmitter);
+    /** `chargeAuthChallengeLoaded` already emitted for the current challenge (by `load` or by the fallback). */
+    protected challengeLoadedEmitted: boolean;
+    /** `chargeAuthChallengeCompleted` already emitted for the current authentication (poll or callback). */
+    protected challengeCompletedEmitted: boolean;
+    /** Set once a terminal event was emitted: no lifecycle event may follow (reset when a new challenge starts). */
+    protected challengeLifecycleClosed: boolean;
+    protected challengeLoadedTimer: ReturnType<typeof setTimeout> | null;
+    protected resultPollTimer: ReturnType<typeof setTimeout> | null;
+    /** One-shot guard for the `chargeAuth` leg — the callback message may be delivered more than once. */
+    protected authHandled: boolean;
+    constructor(container: Container, api: ApiInternal, eventEmitter: EventEmitter, 
+    /** Origins allowed to deliver a processed outcome (`process_status`) via postMessage. */
+    trustedOrigins?: string[]);
     load({ initialization_url, secondary_url, charge_3ds_id }: ITokenStandalone3DS, title: string): void;
     private initializeIFrames;
     private hideIframes;
     private setupIFrameEvents;
+    /**
+     * A message carries a processed outcome only when it has `process_status` AND comes from a trusted
+     * origin. Used by the result leg: an untrusted `process_status` is never acted upon — the SDK falls
+     * back to `GET /handle` (still needed for decoupled challenges / polling). The authentication leg
+     * ignores untrusted senders outright, before this check.
+     */
+    private hasChainedOutcome;
+    private isTrustedOrigin;
+    private removeIframes;
+    private clearChallengeLoadedTimer;
+    /**
+     * Challenge iframe lifecycle (`chargeAuthChallengeLoaded`).
+     *
+     * The challenge iframe is cross-origin, but its `load` event still fires when the ACS page finishes loading:
+     * the first one means the page painted (merchants can drop their loader). A fallback timer
+     * (`armChallengeLoadedFallback`) guarantees `chargeAuthChallengeLoaded` within `CHALLENGE_LOADED_FALLBACK_MS`
+     * even if no `load` ever fires; a late paint after that is simply ignored. Later `load`s are NOT a usable
+     * signal for "the shopper submitted": the post-submit hops are HTTP redirects and self-submitting pages whose
+     * loads abort, and the final callback page posts its message before its own `load` — so the post-submit
+     * moment is `chargeAuthChallengeCompleted`, driven by the `secondary_url` result monitor instead.
+     *
+     * Nothing is emitted once the flow reached a terminal outcome (`finishChallengeLifecycle`), and a
+     * decoupled challenge (no challenge iframe) never emits `chargeAuthChallengeLoaded`.
+     *
+     * Resets the per-challenge state and returns the `load` handler to attach to the challenge iframe.
+     */
+    private startChallengeLifecycle;
+    /**
+     * Arms the `chargeAuthChallengeLoaded` fallback — only when a challenge iframe actually exists (the
+     * container may be gone, or `IFrame.load` may have no-op'd on an already-present iframe).
+     */
+    private armChallengeLoadedFallback;
+    private emitChallengeLoaded;
+    /**
+     * `chargeAuthChallengeCompleted` — once per authentication, never after a terminal event. Idempotent so the
+     * poll and the callback message can both call it: the first transport to notice the issuer's result wins.
+     */
+    private emitChallengeCompleted;
+    /** Call before emitting any terminal event: no lifecycle event may follow it, and the result poll stops. */
+    private finishChallengeLifecycle;
+    private stopResultPolling;
     private parseResultData;
     private parseHandleResponse;
     private parseError;
     private processResult;
+    /** Final (post-challenge) outcome delivered by the API through the callback message. */
+    private handleResultOutcome;
     private externalAPI;
+    /**
+     * Polls the GPayments result monitor (`secondary_url`) until `AuthResultReady`. It is the primary source of
+     * `chargeAuthChallengeCompleted` (the monitor flips as soon as the issuer's RReq reaches the 3DS Server) and
+     * the fallback transport for the outcome itself (`GET /handle`) when the callback message never arrives —
+     * the only transport for decoupled challenges. Stops once an outcome was obtained or the lifecycle closed.
+     * Transport failures are retried on the same cadence; an unparsable body or an unknown event is fatal.
+     */
     private doPolling;
-    private performAuthentication;
+    /**
+     * Branches on the authentication outcome delivered by the API through the callback message
+     * (`process_status` → `status`; same shape as the `/process` response body).
+     */
+    private handleAuthenticationOutcome;
 }
 //# sourceMappingURL=gpayments-service.d.ts.map

package/bundles/types/canvas-3ds/services/gpayments-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gpayments-service.d.ts","sourceRoot":"","sources":["../../../src/canvas-3ds/services/gpayments-service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAS,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAM/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AASnE,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AA6BD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,iEAAiE;;IAEjE,qJAAqJ;;IAErJ,wGAAwG;;IAExG,6FAA6F;;IAE7F,2GAA2G;;IAE3G,wFAAwF;;CAEhF,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;IAnB3B,iEAAiE;;IAEjE,qJAAqJ;;IAErJ,wGAAwG;;IAExG,6FAA6F;;IAE7F,2GAA2G;;IAE3G,wFAAwF;;CAS3C,CAAC;AAMhD,qBAAa,gBAAgB;IASzB,SAAS,CAAC,SAAS,EAAE,SAAS;IAC9B,SAAS,CAAC,GAAG,EAAE,WAAW;IAC1B,SAAS,CAAC,YAAY,EAAE,YAAY;IAVtC,SAAS,CAAC,4BAA4B,EAAE,SAAS,CAAC;IAClD,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC;IACzC,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;IACnC,SAAS,CAAC,UAAU,UAAS;gBAGjB,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,WAAW,EAChB,YAAY,EAAE,YAAY;IAK/B,IAAI,CACT,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,mBAAmB,EACzE,KAAK,EAAE,MAAM;IAaf,OAAO,CAAC,iBAAiB;IAgCzB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,iBAAiB;IA0BzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAkCrB,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,SAAS;IAqBjB,OAAO,CAAC,qBAAqB;CA0D9B"}
+{"version":3,"file":"gpayments-service.d.ts","sourceRoot":"","sources":["../../../src/canvas-3ds/services/gpayments-service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAS,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAM/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AASnE,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AA+CD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B,iEAAiE;;IAEjE,qJAAqJ;;IAErJ,wGAAwG;;IAExG,6FAA6F;;IAE7F;;;;OAIG;;IAEH;;;;;;OAMG;;IAEH,2GAA2G;;IAE3G,wFAAwF;;CAEhF,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;IAjC3B,iEAAiE;;IAEjE,qJAAqJ;;IAErJ,wGAAwG;;IAExG,6FAA6F;;IAE7F;;;;OAIG;;IAEH;;;;;;OAMG;;IAEH,2GAA2G;;IAE3G,wFAAwF;;CAS3C,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAUtD,qBAAa,gBAAgB;IAmBzB,SAAS,CAAC,SAAS,EAAE,SAAS;IAC9B,SAAS,CAAC,GAAG,EAAE,WAAW;IAC1B,SAAS,CAAC,YAAY,EAAE,YAAY;IACpC,yFAAyF;IACzF,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE;IAtBpC,SAAS,CAAC,4BAA4B,EAAE,SAAS,CAAC;IAClD,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC;IACzC,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;IACnC,SAAS,CAAC,UAAU,UAAS;IAC7B,4GAA4G;IAC5G,SAAS,CAAC,sBAAsB,UAAS;IACzC,wGAAwG;IACxG,SAAS,CAAC,yBAAyB,UAAS;IAC5C,gHAAgH;IAChH,SAAS,CAAC,wBAAwB,UAAS;IAC3C,SAAS,CAAC,oBAAoB,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAQ;IAC5E,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAQ;IACvE,sGAAsG;IACtG,SAAS,CAAC,WAAW,UAAS;gBAGlB,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,WAAW,EAChB,YAAY,EAAE,YAAY;IACpC,yFAAyF;IAC/E,cAAc,GAAE,MAAM,EAAO;IAKlC,IAAI,CACT,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,mBAAmB,EACzE,KAAK,EAAE,MAAM;IAaf,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,iBAAiB;IAsFzB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,yBAAyB;IAOjC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,uBAAuB;IAmB/B;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAalC,OAAO,CAAC,mBAAmB;IAQ3B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAW9B,4GAA4G;IAC5G,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAmCrB,wFAAwF;IACxF,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,WAAW;IAsBnB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAyCjB;;;OAGG;IACH,OAAO,CAAC,2BAA2B;CA8EpC"}

package/bundles/types/canvas-3ds/services/standalone3ds-service.d.ts

@@ -1,3 +1,4 @@
+import { ApiBase } from '../../api/api-base';
 import type { Container } from '../../components/container';
 import type { EventEmitter } from '../../helper/event-emitter';
 /**
@@ -35,6 +36,11 @@ export declare class Standalone3dsService {
     load(token: string, options: {
         title: string;
     }): void;
+    /**
+     * Origins allowed to deliver a processed 3DS outcome to the page via postMessage: the Paydock API
+     * (inline callback page) and the Paydock widget (remote-app landing page), for the current env/alias.
+     */
+    protected getTrustedMessageOrigins(api: ApiBase): string[];
     setEnv(env: string, alias?: string): void;
 }
 //# sourceMappingURL=standalone3ds-service.d.ts.map

package/bundles/types/canvas-3ds/services/standalone3ds-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standalone3ds-service.d.ts","sourceRoot":"","sources":["../../../src/canvas-3ds/services/standalone3ds-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAO/D;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iIAAiI;IACjI,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2HAA2H;IAC3H,aAAa,EAAE,MAAM,CAAC;IACtB,oIAAoI;IACpI,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,oBAAoB;IAC/B,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IACrC,SAAS,CAAC,GAAG,SAAe;IAC5B,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEZ,SAAS,EAAE,SAAS,EAAE,YAAY,KAAA;IAKvC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAkB9C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAI1C"}
+{"version":3,"file":"standalone3ds-service.d.ts","sourceRoot":"","sources":["../../../src/canvas-3ds/services/standalone3ds-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAO/D;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iIAAiI;IACjI,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2HAA2H;IAC3H,aAAa,EAAE,MAAM,CAAC;IACtB,oIAAoI;IACpI,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,oBAAoB;IAC/B,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IACrC,SAAS,CAAC,GAAG,SAAe;IAC5B,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEZ,SAAS,EAAE,SAAS,EAAE,YAAY,KAAA;IAKvC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAoBrD;;;OAGG;IACH,SAAS,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE;IAcnD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAI1C"}