@schibsted/account-sdk-browser 6.0.0-alpha.12 → 6.0.0-alpha.14

package/README.md

@@ -31,6 +31,10 @@ If this is a new site and you do not have a `sessionDomain` yet, contact
 
 ## Development
 
+Dependencies are installed from [Schibsted Artifactory](https://artifactory.schibsted.io) (see [`.npmrc`](./.npmrc)),
+so npm must be authenticated to it before `npm install`. The private `@schibsted/consent-url-utils` package is
+bundled into `dist/` by Vite during `npm run build`, so SDK consumers do not need access to it.
+
 Install dependencies and run the standard checks:
 
 ```sh

package/dist/account.d.ts

@@ -1,4 +1,5 @@
-import { AccountConfig, AccountEventListener, AccountEventName, ResolvedAccountConfig } from './types/account.js';
+import { AccountConfig, AccountEventListener, AccountEventName } from './types/account.js';
+import { AccountEnvironment } from './types/common.js';
 import { LoginOptions, SimplifiedLoginData, SimplifiedLoginWidgetLoginOptions, SimplifiedLoginWidgetOptions } from './types/login.js';
 import { HasAccessResult } from './types/monetization.js';
 import { ConnectedSessionResponse, SessionResponse, SessionUserId } from './types/session.js';
@@ -14,13 +15,18 @@ import { ConnectedSessionResponse, SessionResponse, SessionUserId } from './type
 export declare class Account {
     #private;
     constructor(config: AccountConfig);
+    /** The client id this instance was configured with. */
+    get clientId(): string;
+    /** The Schibsted Account environment this instance was configured with. Defaults to PRE. */
+    get env(): AccountEnvironment;
+    /** The redirect uri this instance was configured with. */
+    get redirectUri(): string;
     /**
-     * The configuration passed when this instance was created.
+     * The product or feature ids `hasAccess()` uses when no ids are passed, if configured.
      *
-     * The returned object and its `defaultProductIds` and `varnish` values are frozen copies;
-     * changing them does not reconfigure the SDK.
+     * The returned array is a frozen copy; it cannot be mutated.
      */
-    get config(): ResolvedAccountConfig;
+    get defaultProductIds(): readonly string[] | undefined;
     /**
      * Queries Session Service and returns the current browser session state.
      *

package/dist/compatibility/types.d.ts

@@ -9,11 +9,11 @@ export type LegacyIdentity = LegacyIdentityMethods & {
     loginUrl(options: LoginOptions): string;
     /** @deprecated Pass an options object to `account.loginUrl()`. Removed in v7. */
     loginUrl(state: string, acrValues?: string, scope?: string, redirectUri?: string, loginHint?: string, tag?: string, teaser?: string, maxAge?: number | string): string;
-    /** @deprecated Use `account.config.clientId`. Removed in v7. */
+    /** @deprecated Use `account.clientId`. Removed in v7. */
     readonly clientId: string;
-    /** @deprecated Use `account.config.env`. Removed in v7. */
+    /** @deprecated Use `account.env`. Removed in v7. */
     readonly env: AccountEnvironment;
-    /** @deprecated Use `account.config.redirectUri`. Removed in v7. */
+    /** @deprecated Use `account.redirectUri`. Removed in v7. */
     readonly redirectUri: string;
     /** @deprecated Use the Account session methods and events. Removed in v7. */
     readonly _session: SessionObjectResponse;

package/dist/compatibility.js

@@ -19,13 +19,13 @@ var r = "[Account SDK compatibility]", i = !1, a = () => {
 		}, this.#e.on("logoutRequested", () => this.#a());
 	}
 	get clientId() {
-		return o("schIdentity.clientId", "account.config.clientId"), this.#e.config.clientId;
+		return o("schIdentity.clientId", "account.clientId"), this.#e.clientId;
 	}
 	get env() {
-		return o("schIdentity.env", "account.config.env"), this.#e.config.env;
+		return o("schIdentity.env", "account.env"), this.#e.env;
 	}
 	get redirectUri() {
-		return o("schIdentity.redirectUri", "account.config.redirectUri"), this.#e.config.redirectUri;
+		return o("schIdentity.redirectUri", "account.redirectUri"), this.#e.redirectUri;
 	}
 	get _session() {
 		return o("schIdentity._session", "account.hasSession()"), this.#t.getSession();

package/dist/compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"compatibility.js","names":["#account","#sessionState","#emitLegacyLogout","#warn","#assertLogoutEvent","#logoutListeners","#account"],"sources":["../src/compatibility/warnings.ts","../src/compatibility/legacy-identity.ts","../src/compatibility/legacy-monetization.ts","../src/compatibility/install-legacy-compatibility.ts"],"sourcesContent":["/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nconst PREFIX = '[Account SDK compatibility]';\nlet compatibilityWarningEmitted = false;\n\nexport const warnCompatibilityEnabled = (): void => {\n    if (compatibilityWarningEmitted) {\n        return;\n    }\n    compatibilityWarningEmitted = true;\n    console.warn(\n        `${PREFIX} The legacy compatibility layer is enabled. Migrate application code to the Account API. This compatibility layer will be removed in v7.`,\n    );\n};\n\nexport const warnLegacyUsage = (legacyApi: string, replacement: string): void => {\n    console.warn(\n        `${PREFIX} ${legacyApi} is deprecated. Use ${replacement} instead. It will be removed in v7.`,\n    );\n};\n\nexport const warnIgnoredHasAccessUserId = (): void => {\n    console.warn(\n        `${PREFIX} schMonetization.hasAccess() ignores the legacy userId argument. Account.hasAccess() resolves the logged-in user automatically. It will be removed in v7.`,\n    );\n};\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport SDKError from '../sdk-error.js';\nimport { type SessionState, sessionStates } from '../session-state.js';\nimport type { AccountEnvironment } from '../types/common.js';\nimport type { LoginOptions } from '../types/login.js';\nimport type { SessionObjectResponse } from '../types/session.js';\nimport type { LegacyIdentity, LegacyLogoutListener } from './types.js';\nimport { warnLegacyUsage } from './warnings.js';\n\nexport class LegacyIdentityAdapter implements LegacyIdentity {\n    readonly #account: Account;\n    readonly #sessionState: SessionState;\n    #logoutListeners: { listener: LegacyLogoutListener; context?: unknown }[] = [];\n\n    constructor(account: Account) {\n        this.#account = account;\n\n        const sessionState = sessionStates.get(account);\n        if (!sessionState) {\n            throw new SDKError('Legacy compatibility requires an Account from the same SDK build');\n        }\n        this.#sessionState = sessionState;\n        // v5 notified logout listeners before replacing _session, on every session result.\n        sessionState.beforeUpdate = (previous, current) => {\n            if (\n                'userId' in previous &&\n                previous.userId &&\n                !('userId' in current && current.userId)\n            ) {\n                this.#emitLegacyLogout(current);\n            }\n        };\n        this.#account.on('logoutRequested', () => this.#emitLegacyLogout());\n    }\n\n    get clientId(): string {\n        warnLegacyUsage('schIdentity.clientId', 'account.config.clientId');\n        return this.#account.config.clientId;\n    }\n\n    get env(): AccountEnvironment {\n        warnLegacyUsage('schIdentity.env', 'account.config.env');\n        return this.#account.config.env;\n    }\n\n    get redirectUri(): string {\n        warnLegacyUsage('schIdentity.redirectUri', 'account.config.redirectUri');\n        return this.#account.config.redirectUri;\n    }\n\n    get _session(): LegacyIdentity['_session'] {\n        warnLegacyUsage('schIdentity._session', 'account.hasSession()');\n        return this.#sessionState.getSession();\n    }\n\n    hasSession(): ReturnType<Account['hasSession']> {\n        this.#warn('hasSession');\n        return this.#account.hasSession();\n    }\n\n    isLoggedIn(): ReturnType<Account['isLoggedIn']> {\n        this.#warn('isLoggedIn');\n        return this.#account.isLoggedIn();\n    }\n\n    isConnected(): ReturnType<Account['isConnected']> {\n        this.#warn('isConnected');\n        return this.#account.isConnected();\n    }\n\n    getUser(): ReturnType<Account['getUser']> {\n        this.#warn('getUser');\n        return this.#account.getUser();\n    }\n\n    getUserId(): ReturnType<Account['getUserId']> {\n        this.#warn('getUserId');\n        return this.#account.getUserId();\n    }\n\n    getExternalId(\n        ...args: Parameters<Account['getExternalId']>\n    ): ReturnType<Account['getExternalId']> {\n        this.#warn('getExternalId');\n        return this.#account.getExternalId(...args);\n    }\n\n    getUserUuid(): ReturnType<Account['getUserUuid']> {\n        this.#warn('getUserUuid');\n        return this.#account.getUserUuid();\n    }\n\n    getUserSDRN(): ReturnType<Account['getUserSDRN']> {\n        this.#warn('getUserSDRN');\n        return this.#account.getUserSDRN();\n    }\n\n    getUserContextData(): ReturnType<Account['getUserContextData']> {\n        this.#warn('getUserContextData');\n        return this.#account.getUserContextData();\n    }\n\n    getSpId(): ReturnType<Account['getSpId']> {\n        this.#warn('getSpId');\n        return this.#account.getSpId();\n    }\n\n    login(...args: Parameters<Account['login']>): ReturnType<Account['login']> {\n        this.#warn('login');\n        return this.#account.login(...args);\n    }\n\n    logout(...args: Parameters<Account['logout']>): ReturnType<Account['logout']> {\n        this.#warn('logout');\n        return this.#account.logout(...args);\n    }\n\n    loginUrl(options: LoginOptions): string;\n    loginUrl(\n        state: string,\n        acrValues?: string,\n        scope?: string,\n        redirectUri?: string,\n        loginHint?: string,\n        tag?: string,\n        teaser?: string,\n        maxAge?: number | string,\n    ): string;\n    loginUrl(\n        options: LoginOptions | string,\n        acrValues?: string,\n        scope?: string,\n        redirectUri?: string,\n        loginHint?: string,\n        tag?: string,\n        teaser?: string,\n        maxAge?: number | string,\n    ): string {\n        this.#warn('loginUrl');\n        if (typeof options !== 'string') {\n            return this.#account.loginUrl(options);\n        }\n\n        // v5 treated empty positional values as omitted, except for numeric maxAge (including 0).\n        return this.#account.loginUrl({\n            state: options,\n            acrValues,\n            scope: scope || undefined,\n            redirectUri: redirectUri || undefined,\n            loginHint: loginHint || undefined,\n            tag: tag || undefined,\n            teaser: teaser || undefined,\n            maxAge: Number.isNaN(Number(maxAge)) ? undefined : maxAge,\n        });\n    }\n\n    logoutUrl(...args: Parameters<Account['logoutUrl']>): ReturnType<Account['logoutUrl']> {\n        this.#warn('logoutUrl');\n        return this.#account.logoutUrl(...args);\n    }\n\n    accountUrl(...args: Parameters<Account['accountUrl']>): ReturnType<Account['accountUrl']> {\n        this.#warn('accountUrl');\n        return this.#account.accountUrl(...args);\n    }\n\n    showSimplifiedLoginWidget(\n        ...args: Parameters<Account['showSimplifiedLoginWidget']>\n    ): ReturnType<Account['showSimplifiedLoginWidget']> {\n        this.#warn('showSimplifiedLoginWidget');\n        return this.#account.showSimplifiedLoginWidget(...args);\n    }\n\n    clearCachedUserSession(): ReturnType<Account['clearCachedUserSession']> {\n        this.#warn('clearCachedUserSession');\n        return this.#account.clearCachedUserSession();\n    }\n\n    on(event: 'logout', listener: LegacyLogoutListener, context?: unknown): this {\n        warnLegacyUsage(\n            \"schIdentity.on('logout')\",\n            \"account.on('logoutRequested') and account.on('sessionUpdated')\",\n        );\n        this.#assertLogoutEvent(event);\n\n        this.#logoutListeners.push({ listener, context });\n        return this;\n    }\n\n    off(event: 'logout', listener?: LegacyLogoutListener): this {\n        warnLegacyUsage(\n            \"schIdentity.off('logout')\",\n            \"account.off('logoutRequested') and account.off('sessionUpdated')\",\n        );\n        this.#assertLogoutEvent(event);\n\n        this.#logoutListeners = listener\n            ? this.#logoutListeners.filter((registered) => registered.listener !== listener)\n            : [];\n        return this;\n    }\n\n    #warn(method: keyof LegacyIdentity): void {\n        warnLegacyUsage(`schIdentity.${method}()`, `account.${method}()`);\n    }\n\n    #assertLogoutEvent(event: string): void {\n        if (event !== 'logout') {\n            throw new SDKError(\n                `Account SDK legacy compatibility does not support the Identity \"${event}\" event`,\n            );\n        }\n    }\n\n    #emitLegacyLogout(...args: [] | [SessionObjectResponse]): void {\n        for (const { listener, context } of [...this.#logoutListeners]) {\n            try {\n                listener.apply(context, args);\n            } catch (error) {\n                // A legacy consumer must not prevent Account from updating its session.\n                console.error('[Account SDK compatibility] Legacy logout listener failed', error);\n            }\n        }\n    }\n}\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport type { SessionUserId } from '../types/session.js';\nimport type { LegacyMonetization } from './types.js';\nimport { warnIgnoredHasAccessUserId, warnLegacyUsage } from './warnings.js';\n\nexport class LegacyMonetizationAdapter implements LegacyMonetization {\n    readonly #account: Account;\n\n    constructor(account: Account) {\n        this.#account = account;\n    }\n\n    hasAccess(productIds: string[], _userId: SessionUserId): ReturnType<Account['hasAccess']> {\n        warnLegacyUsage('schMonetization.hasAccess()', 'account.hasAccess()');\n        warnIgnoredHasAccessUserId();\n        return this.#account.hasAccess(productIds);\n    }\n\n    clearCachedAccessResult(productIds: string[], userId: SessionUserId): void {\n        warnLegacyUsage(\n            'schMonetization.clearCachedAccessResult()',\n            'account.clearCachedAccessResult()',\n        );\n        this.#account.clearCachedAccessResult(productIds, userId);\n    }\n}\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport { resolveBrowserWindow } from '../resolve-browser-window.js';\nimport SDKError from '../sdk-error.js';\nimport { LegacyIdentityAdapter } from './legacy-identity.js';\nimport { LegacyMonetizationAdapter } from './legacy-monetization.js';\nimport type { LegacyCompatibilityOptions } from './types.js';\nimport { warnCompatibilityEnabled, warnLegacyUsage } from './warnings.js';\n\nconst ACCOUNT_READY_EVENT = 'schAccount:ready';\nconst IDENTITY_READY_EVENT = 'schIdentity:ready';\nconst MONETIZATION_READY_EVENT = 'schMonetization:ready';\n\nconst enabledWindows = new WeakSet<Window>();\n\nconst createUnavailableError = (): SDKError =>\n    new SDKError('Account SDK legacy compatibility is not available in this browser context');\n\nconst createMissingAccountError = (): SDKError =>\n    new SDKError(\n        `Account SDK legacy compatibility received ${ACCOUNT_READY_EVENT} without window.schAccount`,\n    );\n\nconst createGlobalConflictError = (globalName: string): SDKError =>\n    new SDKError(\n        `Account SDK legacy compatibility cannot define window.${globalName} because it already exists`,\n    );\n\nconst assertLegacyGlobalsAvailable = (browserWindow: Window): void => {\n    for (const globalName of ['schIdentity', 'Identity', 'schMonetization']) {\n        const descriptor = Object.getOwnPropertyDescriptor(browserWindow, globalName);\n        const emptyPlaceholder =\n            descriptor?.configurable && 'value' in descriptor && descriptor.value == null;\n        if (descriptor && !emptyPlaceholder) {\n            throw createGlobalConflictError(globalName);\n        }\n    }\n};\n\nconst legacyGlobalDescriptor = <Instance>(\n    globalName: string,\n    getter: () => Instance,\n    instance: Instance,\n): PropertyDescriptor => ({\n    configurable: true,\n    enumerable: true,\n    get: getter,\n    set: (value: Instance) => {\n        // Some hosts still assign window.Identity = window.schIdentity after initialization.\n        if (value !== instance) {\n            throw createGlobalConflictError(globalName);\n        }\n        warnLegacyUsage(`window.${globalName}`, 'window.schAccount');\n    },\n});\n\nconst dispatchReadyEvent = <Instance>(\n    browserWindow: Window,\n    eventName: string,\n    instance: Instance,\n): void => {\n    browserWindow.dispatchEvent(new CustomEvent(eventName, { detail: { instance } }));\n};\n\nconst installLegacyGlobals = (browserWindow: Window, account: Account): void => {\n    assertLegacyGlobalsAvailable(browserWindow);\n\n    const identityShim = new LegacyIdentityAdapter(account);\n    const monetizationShim = new LegacyMonetizationAdapter(account);\n    const identityGetter = () => {\n        warnLegacyUsage('window.schIdentity', 'window.schAccount');\n        return identityShim;\n    };\n    const monetizationGetter = () => {\n        warnLegacyUsage('window.schMonetization', 'window.schAccount');\n        return monetizationShim;\n    };\n    const legacyIdentityGetter = () => {\n        warnLegacyUsage('window.Identity', 'window.schAccount');\n        return identityShim;\n    };\n\n    Object.defineProperties(browserWindow, {\n        schIdentity: legacyGlobalDescriptor('schIdentity', identityGetter, identityShim),\n        Identity: legacyGlobalDescriptor('Identity', legacyIdentityGetter, identityShim),\n        schMonetization: legacyGlobalDescriptor(\n            'schMonetization',\n            monetizationGetter,\n            monetizationShim,\n        ),\n    });\n\n    dispatchReadyEvent(browserWindow, IDENTITY_READY_EVENT, identityShim);\n    dispatchReadyEvent(browserWindow, MONETIZATION_READY_EVENT, monetizationShim);\n};\n\n/**\n * Enables the temporary v5 global and ready-event compatibility layer for Account SDK v6.\n *\n * Call this before `createAccountSdk()` when a dependency still expects v5 globals. If Account\n * already exists, the legacy shims are installed immediately.\n *\n * @deprecated Migrate dependencies to the Account API. This entrypoint will be removed in v7.\n */\nexport function enableLegacyCompatibility(options: LegacyCompatibilityOptions = {}): void {\n    const browserWindow = resolveBrowserWindow(options.window);\n    if (!browserWindow) {\n        throw createUnavailableError();\n    }\n\n    warnCompatibilityEnabled();\n\n    if (enabledWindows.has(browserWindow)) {\n        return;\n    }\n\n    assertLegacyGlobalsAvailable(browserWindow);\n\n    enabledWindows.add(browserWindow);\n\n    if (browserWindow.schAccount) {\n        installLegacyGlobals(browserWindow, browserWindow.schAccount);\n        return;\n    }\n\n    browserWindow.addEventListener(\n        ACCOUNT_READY_EVENT,\n        () => {\n            if (!browserWindow.schAccount) {\n                throw createMissingAccountError();\n            }\n            installLegacyGlobals(browserWindow, browserWindow.schAccount);\n        },\n        { once: true },\n    );\n}\n"],"mappings":";;AAIA,IAAM,IAAS,+BACX,IAA8B,IAErB,UAAuC;CAC5C,MAGJ,IAA8B,IAC9B,QAAQ,KACJ,GAAG,EAAO,yIACd;AACJ,GAEa,KAAmB,GAAmB,MAA8B;CAC7E,QAAQ,KACJ,GAAG,EAAO,GAAG,EAAU,sBAAsB,EAAY,oCAC7D;AACJ,GAEa,UAAyC;CAClD,QAAQ,KACJ,GAAG,EAAO,0JACd;AACJ,GCda,IAAb,MAA6D;CACzD;CACA;CACA,KAA4E,CAAC;CAE7E,YAAY,GAAkB;EAC1B,KAAKA,KAAW;EAEhB,IAAM,IAAe,EAAc,IAAI,CAAO;EAC9C,IAAI,CAAC,GACD,MAAM,IAAI,EAAS,kEAAkE;EAazF,AAXA,KAAKC,KAAgB,GAErB,EAAa,gBAAgB,GAAU,MAAY;GAC/C,AACI,YAAY,KACZ,EAAS,UACT,EAAE,YAAY,KAAW,EAAQ,WAEjC,KAAKC,GAAkB,CAAO;EAEtC,GACA,KAAKF,GAAS,GAAG,yBAAyB,KAAKE,GAAkB,CAAC;CACtE;CAEA,IAAI,WAAmB;EAEnB,OADA,EAAgB,wBAAwB,yBAAyB,GAC1D,KAAKF,GAAS,OAAO;CAChC;CAEA,IAAI,MAA0B;EAE1B,OADA,EAAgB,mBAAmB,oBAAoB,GAChD,KAAKA,GAAS,OAAO;CAChC;CAEA,IAAI,cAAsB;EAEtB,OADA,EAAgB,2BAA2B,4BAA4B,GAChE,KAAKA,GAAS,OAAO;CAChC;CAEA,IAAI,WAAuC;EAEvC,OADA,EAAgB,wBAAwB,sBAAsB,GACvD,KAAKC,GAAc,WAAW;CACzC;CAEA,aAAgD;EAE5C,OADA,KAAKE,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW;CACpC;CAEA,aAAgD;EAE5C,OADA,KAAKG,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW;CACpC;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,UAA0C;EAEtC,OADA,KAAKG,GAAM,SAAS,GACb,KAAKH,GAAS,QAAQ;CACjC;CAEA,YAA8C;EAE1C,OADA,KAAKG,GAAM,WAAW,GACf,KAAKH,GAAS,UAAU;CACnC;CAEA,cACI,GAAG,GACiC;EAEpC,OADA,KAAKG,GAAM,eAAe,GACnB,KAAKH,GAAS,cAAc,GAAG,CAAI;CAC9C;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,qBAAgE;EAE5D,OADA,KAAKG,GAAM,oBAAoB,GACxB,KAAKH,GAAS,mBAAmB;CAC5C;CAEA,UAA0C;EAEtC,OADA,KAAKG,GAAM,SAAS,GACb,KAAKH,GAAS,QAAQ;CACjC;CAEA,MAAM,GAAG,GAAkE;EAEvE,OADA,KAAKG,GAAM,OAAO,GACX,KAAKH,GAAS,MAAM,GAAG,CAAI;CACtC;CAEA,OAAO,GAAG,GAAoE;EAE1E,OADA,KAAKG,GAAM,QAAQ,GACZ,KAAKH,GAAS,OAAO,GAAG,CAAI;CACvC;CAaA,SACI,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACM;EAON,OANA,KAAKG,GAAM,UAAU,GACjB,OAAO,KAAY,WAKhB,KAAKH,GAAS,SAAS;GAC1B,OAAO;GACP;GACA,OAAO,KAAS,KAAA;GAChB,aAAa,KAAe,KAAA;GAC5B,WAAW,KAAa,KAAA;GACxB,KAAK,KAAO,KAAA;GACZ,QAAQ,KAAU,KAAA;GAClB,QAAQ,OAAO,MAAM,OAAO,CAAM,CAAC,IAAI,KAAA,IAAY;EACvD,CAAC,IAbU,KAAKA,GAAS,SAAS,CAAO;CAc7C;CAEA,UAAU,GAAG,GAA0E;EAEnF,OADA,KAAKG,GAAM,WAAW,GACf,KAAKH,GAAS,UAAU,GAAG,CAAI;CAC1C;CAEA,WAAW,GAAG,GAA4E;EAEtF,OADA,KAAKG,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW,GAAG,CAAI;CAC3C;CAEA,0BACI,GAAG,GAC6C;EAEhD,OADA,KAAKG,GAAM,2BAA2B,GAC/B,KAAKH,GAAS,0BAA0B,GAAG,CAAI;CAC1D;CAEA,yBAAwE;EAEpE,OADA,KAAKG,GAAM,wBAAwB,GAC5B,KAAKH,GAAS,uBAAuB;CAChD;CAEA,GAAG,GAAiB,GAAgC,GAAyB;EAQzE,OAPA,EACI,4BACA,gEACJ,GACA,KAAKI,GAAmB,CAAK,GAE7B,KAAKC,GAAiB,KAAK;GAAE;GAAU;EAAQ,CAAC,GACzC;CACX;CAEA,IAAI,GAAiB,GAAuC;EAUxD,OATA,EACI,6BACA,kEACJ,GACA,KAAKD,GAAmB,CAAK,GAE7B,KAAKC,KAAmB,IAClB,KAAKA,GAAiB,QAAQ,MAAe,EAAW,aAAa,CAAQ,IAC7E,CAAC,GACA;CACX;CAEA,GAAM,GAAoC;EACtC,EAAgB,eAAe,EAAO,KAAK,WAAW,EAAO,GAAG;CACpE;CAEA,GAAmB,GAAqB;EACpC,IAAI,MAAU,UACV,MAAM,IAAI,EACN,mEAAmE,EAAM,QAC7E;CAER;CAEA,GAAkB,GAAG,GAA0C;EAC3D,KAAK,IAAM,EAAE,aAAU,gBAAa,CAAC,GAAG,KAAKA,EAAgB,GACzD,IAAI;GACA,EAAS,MAAM,GAAS,CAAI;EAChC,SAAS,GAAO;GAEZ,QAAQ,MAAM,6DAA6D,CAAK;EACpF;CAER;AACJ,GC3Na,IAAb,MAAqE;CACjE;CAEA,YAAY,GAAkB;EAC1B,KAAKC,KAAW;CACpB;CAEA,UAAU,GAAsB,GAA0D;EAGtF,OAFA,EAAgB,+BAA+B,qBAAqB,GACpE,EAA2B,GACpB,KAAKA,GAAS,UAAU,CAAU;CAC7C;CAEA,wBAAwB,GAAsB,GAA6B;EAKvE,AAJA,EACI,6CACA,mCACJ,GACA,KAAKA,GAAS,wBAAwB,GAAY,CAAM;CAC5D;AACJ,GCjBM,IAAsB,oBACtB,IAAuB,qBACvB,IAA2B,yBAE3B,oBAAiB,IAAI,QAAgB,GAErC,UACF,IAAI,EAAS,2EAA2E,GAEtF,UACF,IAAI,EACA,6CAA6C,EAAoB,2BACrE,GAEE,KAA6B,MAC/B,IAAI,EACA,yDAAyD,EAAW,2BACxE,GAEE,KAAgC,MAAgC;CAClE,KAAK,IAAM,KAAc;EAAC;EAAe;EAAY;CAAiB,GAAG;EACrE,IAAM,IAAa,OAAO,yBAAyB,GAAe,CAAU,GACtE,IACF,GAAY,gBAAgB,WAAW,KAAc,EAAW,SAAS;EAC7E,IAAI,KAAc,CAAC,GACf,MAAM,EAA0B,CAAU;CAElD;AACJ,GAEM,KACF,GACA,GACA,OACsB;CACtB,cAAc;CACd,YAAY;CACZ,KAAK;CACL,MAAM,MAAoB;EAEtB,IAAI,MAAU,GACV,MAAM,EAA0B,CAAU;EAE9C,EAAgB,UAAU,KAAc,mBAAmB;CAC/D;AACJ,IAEM,KACF,GACA,GACA,MACO;CACP,EAAc,cAAc,IAAI,YAAY,GAAW,EAAE,QAAQ,EAAE,YAAS,EAAE,CAAC,CAAC;AACpF,GAEM,KAAwB,GAAuB,MAA2B;CAC5E,EAA6B,CAAa;CAE1C,IAAM,IAAe,IAAI,EAAsB,CAAO,GAChD,IAAmB,IAAI,EAA0B,CAAO;CAyB9D,AAXA,OAAO,iBAAiB,GAAe;EACnC,aAAa,EAAuB,sBAbpC,EAAgB,sBAAsB,mBAAmB,GAClD,IAY4D,CAAY;EAC/E,UAAU,EAAuB,mBANjC,EAAgB,mBAAmB,mBAAmB,GAC/C,IAK4D,CAAY;EAC/E,iBAAiB,EACb,0BAZJ,EAAgB,0BAA0B,mBAAmB,GACtD,IAaH,CACJ;CACJ,CAAC,GAED,EAAmB,GAAe,GAAsB,CAAY,GACpE,EAAmB,GAAe,GAA0B,CAAgB;AAChF;AAUA,SAAgB,EAA0B,IAAsC,CAAC,GAAS;CACtF,IAAM,IAAgB,EAAqB,EAAQ,MAAM;CACzD,IAAI,CAAC,GACD,MAAM,EAAuB;CAGjC,MAAyB,GAErB,GAAe,IAAI,CAAa,GAQpC;MAJA,EAA6B,CAAa,GAE1C,EAAe,IAAI,CAAa,GAE5B,EAAc,YAAY;GAC1B,EAAqB,GAAe,EAAc,UAAU;GAC5D;EACJ;EAEA,EAAc,iBACV,SACM;GACF,IAAI,CAAC,EAAc,YACf,MAAM,EAA0B;GAEpC,EAAqB,GAAe,EAAc,UAAU;EAChE,GACA,EAAE,MAAM,GAAK,CACjB;CAXA;AAYJ"}
+{"version":3,"file":"compatibility.js","names":["#account","#sessionState","#emitLegacyLogout","#warn","#assertLogoutEvent","#logoutListeners","#account"],"sources":["../src/compatibility/warnings.ts","../src/compatibility/legacy-identity.ts","../src/compatibility/legacy-monetization.ts","../src/compatibility/install-legacy-compatibility.ts"],"sourcesContent":["/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nconst PREFIX = '[Account SDK compatibility]';\nlet compatibilityWarningEmitted = false;\n\nexport const warnCompatibilityEnabled = (): void => {\n    if (compatibilityWarningEmitted) {\n        return;\n    }\n    compatibilityWarningEmitted = true;\n    console.warn(\n        `${PREFIX} The legacy compatibility layer is enabled. Migrate application code to the Account API. This compatibility layer will be removed in v7.`,\n    );\n};\n\nexport const warnLegacyUsage = (legacyApi: string, replacement: string): void => {\n    console.warn(\n        `${PREFIX} ${legacyApi} is deprecated. Use ${replacement} instead. It will be removed in v7.`,\n    );\n};\n\nexport const warnIgnoredHasAccessUserId = (): void => {\n    console.warn(\n        `${PREFIX} schMonetization.hasAccess() ignores the legacy userId argument. Account.hasAccess() resolves the logged-in user automatically. It will be removed in v7.`,\n    );\n};\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport SDKError from '../sdk-error.js';\nimport { type SessionState, sessionStates } from '../session-state.js';\nimport type { AccountEnvironment } from '../types/common.js';\nimport type { LoginOptions } from '../types/login.js';\nimport type { SessionObjectResponse } from '../types/session.js';\nimport type { LegacyIdentity, LegacyLogoutListener } from './types.js';\nimport { warnLegacyUsage } from './warnings.js';\n\nexport class LegacyIdentityAdapter implements LegacyIdentity {\n    readonly #account: Account;\n    readonly #sessionState: SessionState;\n    #logoutListeners: { listener: LegacyLogoutListener; context?: unknown }[] = [];\n\n    constructor(account: Account) {\n        this.#account = account;\n\n        const sessionState = sessionStates.get(account);\n        if (!sessionState) {\n            throw new SDKError('Legacy compatibility requires an Account from the same SDK build');\n        }\n        this.#sessionState = sessionState;\n        // v5 notified logout listeners before replacing _session, on every session result.\n        sessionState.beforeUpdate = (previous, current) => {\n            if (\n                'userId' in previous &&\n                previous.userId &&\n                !('userId' in current && current.userId)\n            ) {\n                this.#emitLegacyLogout(current);\n            }\n        };\n        this.#account.on('logoutRequested', () => this.#emitLegacyLogout());\n    }\n\n    get clientId(): string {\n        warnLegacyUsage('schIdentity.clientId', 'account.clientId');\n        return this.#account.clientId;\n    }\n\n    get env(): AccountEnvironment {\n        warnLegacyUsage('schIdentity.env', 'account.env');\n        return this.#account.env;\n    }\n\n    get redirectUri(): string {\n        warnLegacyUsage('schIdentity.redirectUri', 'account.redirectUri');\n        return this.#account.redirectUri;\n    }\n\n    get _session(): LegacyIdentity['_session'] {\n        warnLegacyUsage('schIdentity._session', 'account.hasSession()');\n        return this.#sessionState.getSession();\n    }\n\n    hasSession(): ReturnType<Account['hasSession']> {\n        this.#warn('hasSession');\n        return this.#account.hasSession();\n    }\n\n    isLoggedIn(): ReturnType<Account['isLoggedIn']> {\n        this.#warn('isLoggedIn');\n        return this.#account.isLoggedIn();\n    }\n\n    isConnected(): ReturnType<Account['isConnected']> {\n        this.#warn('isConnected');\n        return this.#account.isConnected();\n    }\n\n    getUser(): ReturnType<Account['getUser']> {\n        this.#warn('getUser');\n        return this.#account.getUser();\n    }\n\n    getUserId(): ReturnType<Account['getUserId']> {\n        this.#warn('getUserId');\n        return this.#account.getUserId();\n    }\n\n    getExternalId(\n        ...args: Parameters<Account['getExternalId']>\n    ): ReturnType<Account['getExternalId']> {\n        this.#warn('getExternalId');\n        return this.#account.getExternalId(...args);\n    }\n\n    getUserUuid(): ReturnType<Account['getUserUuid']> {\n        this.#warn('getUserUuid');\n        return this.#account.getUserUuid();\n    }\n\n    getUserSDRN(): ReturnType<Account['getUserSDRN']> {\n        this.#warn('getUserSDRN');\n        return this.#account.getUserSDRN();\n    }\n\n    getUserContextData(): ReturnType<Account['getUserContextData']> {\n        this.#warn('getUserContextData');\n        return this.#account.getUserContextData();\n    }\n\n    getSpId(): ReturnType<Account['getSpId']> {\n        this.#warn('getSpId');\n        return this.#account.getSpId();\n    }\n\n    login(...args: Parameters<Account['login']>): ReturnType<Account['login']> {\n        this.#warn('login');\n        return this.#account.login(...args);\n    }\n\n    logout(...args: Parameters<Account['logout']>): ReturnType<Account['logout']> {\n        this.#warn('logout');\n        return this.#account.logout(...args);\n    }\n\n    loginUrl(options: LoginOptions): string;\n    loginUrl(\n        state: string,\n        acrValues?: string,\n        scope?: string,\n        redirectUri?: string,\n        loginHint?: string,\n        tag?: string,\n        teaser?: string,\n        maxAge?: number | string,\n    ): string;\n    loginUrl(\n        options: LoginOptions | string,\n        acrValues?: string,\n        scope?: string,\n        redirectUri?: string,\n        loginHint?: string,\n        tag?: string,\n        teaser?: string,\n        maxAge?: number | string,\n    ): string {\n        this.#warn('loginUrl');\n        if (typeof options !== 'string') {\n            return this.#account.loginUrl(options);\n        }\n\n        // v5 treated empty positional values as omitted, except for numeric maxAge (including 0).\n        return this.#account.loginUrl({\n            state: options,\n            acrValues,\n            scope: scope || undefined,\n            redirectUri: redirectUri || undefined,\n            loginHint: loginHint || undefined,\n            tag: tag || undefined,\n            teaser: teaser || undefined,\n            maxAge: Number.isNaN(Number(maxAge)) ? undefined : maxAge,\n        });\n    }\n\n    logoutUrl(...args: Parameters<Account['logoutUrl']>): ReturnType<Account['logoutUrl']> {\n        this.#warn('logoutUrl');\n        return this.#account.logoutUrl(...args);\n    }\n\n    accountUrl(...args: Parameters<Account['accountUrl']>): ReturnType<Account['accountUrl']> {\n        this.#warn('accountUrl');\n        return this.#account.accountUrl(...args);\n    }\n\n    showSimplifiedLoginWidget(\n        ...args: Parameters<Account['showSimplifiedLoginWidget']>\n    ): ReturnType<Account['showSimplifiedLoginWidget']> {\n        this.#warn('showSimplifiedLoginWidget');\n        return this.#account.showSimplifiedLoginWidget(...args);\n    }\n\n    clearCachedUserSession(): ReturnType<Account['clearCachedUserSession']> {\n        this.#warn('clearCachedUserSession');\n        return this.#account.clearCachedUserSession();\n    }\n\n    on(event: 'logout', listener: LegacyLogoutListener, context?: unknown): this {\n        warnLegacyUsage(\n            \"schIdentity.on('logout')\",\n            \"account.on('logoutRequested') and account.on('sessionUpdated')\",\n        );\n        this.#assertLogoutEvent(event);\n\n        this.#logoutListeners.push({ listener, context });\n        return this;\n    }\n\n    off(event: 'logout', listener?: LegacyLogoutListener): this {\n        warnLegacyUsage(\n            \"schIdentity.off('logout')\",\n            \"account.off('logoutRequested') and account.off('sessionUpdated')\",\n        );\n        this.#assertLogoutEvent(event);\n\n        this.#logoutListeners = listener\n            ? this.#logoutListeners.filter((registered) => registered.listener !== listener)\n            : [];\n        return this;\n    }\n\n    #warn(method: keyof LegacyIdentity): void {\n        warnLegacyUsage(`schIdentity.${method}()`, `account.${method}()`);\n    }\n\n    #assertLogoutEvent(event: string): void {\n        if (event !== 'logout') {\n            throw new SDKError(\n                `Account SDK legacy compatibility does not support the Identity \"${event}\" event`,\n            );\n        }\n    }\n\n    #emitLegacyLogout(...args: [] | [SessionObjectResponse]): void {\n        for (const { listener, context } of [...this.#logoutListeners]) {\n            try {\n                listener.apply(context, args);\n            } catch (error) {\n                // A legacy consumer must not prevent Account from updating its session.\n                console.error('[Account SDK compatibility] Legacy logout listener failed', error);\n            }\n        }\n    }\n}\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport type { SessionUserId } from '../types/session.js';\nimport type { LegacyMonetization } from './types.js';\nimport { warnIgnoredHasAccessUserId, warnLegacyUsage } from './warnings.js';\n\nexport class LegacyMonetizationAdapter implements LegacyMonetization {\n    readonly #account: Account;\n\n    constructor(account: Account) {\n        this.#account = account;\n    }\n\n    hasAccess(productIds: string[], _userId: SessionUserId): ReturnType<Account['hasAccess']> {\n        warnLegacyUsage('schMonetization.hasAccess()', 'account.hasAccess()');\n        warnIgnoredHasAccessUserId();\n        return this.#account.hasAccess(productIds);\n    }\n\n    clearCachedAccessResult(productIds: string[], userId: SessionUserId): void {\n        warnLegacyUsage(\n            'schMonetization.clearCachedAccessResult()',\n            'account.clearCachedAccessResult()',\n        );\n        this.#account.clearCachedAccessResult(productIds, userId);\n    }\n}\n","/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.\n * See LICENSE.md in the project root.\n */\n\nimport type { Account } from '../account.js';\nimport { resolveBrowserWindow } from '../resolve-browser-window.js';\nimport SDKError from '../sdk-error.js';\nimport { LegacyIdentityAdapter } from './legacy-identity.js';\nimport { LegacyMonetizationAdapter } from './legacy-monetization.js';\nimport type { LegacyCompatibilityOptions } from './types.js';\nimport { warnCompatibilityEnabled, warnLegacyUsage } from './warnings.js';\n\nconst ACCOUNT_READY_EVENT = 'schAccount:ready';\nconst IDENTITY_READY_EVENT = 'schIdentity:ready';\nconst MONETIZATION_READY_EVENT = 'schMonetization:ready';\n\nconst enabledWindows = new WeakSet<Window>();\n\nconst createUnavailableError = (): SDKError =>\n    new SDKError('Account SDK legacy compatibility is not available in this browser context');\n\nconst createMissingAccountError = (): SDKError =>\n    new SDKError(\n        `Account SDK legacy compatibility received ${ACCOUNT_READY_EVENT} without window.schAccount`,\n    );\n\nconst createGlobalConflictError = (globalName: string): SDKError =>\n    new SDKError(\n        `Account SDK legacy compatibility cannot define window.${globalName} because it already exists`,\n    );\n\nconst assertLegacyGlobalsAvailable = (browserWindow: Window): void => {\n    for (const globalName of ['schIdentity', 'Identity', 'schMonetization']) {\n        const descriptor = Object.getOwnPropertyDescriptor(browserWindow, globalName);\n        const emptyPlaceholder =\n            descriptor?.configurable && 'value' in descriptor && descriptor.value == null;\n        if (descriptor && !emptyPlaceholder) {\n            throw createGlobalConflictError(globalName);\n        }\n    }\n};\n\nconst legacyGlobalDescriptor = <Instance>(\n    globalName: string,\n    getter: () => Instance,\n    instance: Instance,\n): PropertyDescriptor => ({\n    configurable: true,\n    enumerable: true,\n    get: getter,\n    set: (value: Instance) => {\n        // Some hosts still assign window.Identity = window.schIdentity after initialization.\n        if (value !== instance) {\n            throw createGlobalConflictError(globalName);\n        }\n        warnLegacyUsage(`window.${globalName}`, 'window.schAccount');\n    },\n});\n\nconst dispatchReadyEvent = <Instance>(\n    browserWindow: Window,\n    eventName: string,\n    instance: Instance,\n): void => {\n    browserWindow.dispatchEvent(new CustomEvent(eventName, { detail: { instance } }));\n};\n\nconst installLegacyGlobals = (browserWindow: Window, account: Account): void => {\n    assertLegacyGlobalsAvailable(browserWindow);\n\n    const identityShim = new LegacyIdentityAdapter(account);\n    const monetizationShim = new LegacyMonetizationAdapter(account);\n    const identityGetter = () => {\n        warnLegacyUsage('window.schIdentity', 'window.schAccount');\n        return identityShim;\n    };\n    const monetizationGetter = () => {\n        warnLegacyUsage('window.schMonetization', 'window.schAccount');\n        return monetizationShim;\n    };\n    const legacyIdentityGetter = () => {\n        warnLegacyUsage('window.Identity', 'window.schAccount');\n        return identityShim;\n    };\n\n    Object.defineProperties(browserWindow, {\n        schIdentity: legacyGlobalDescriptor('schIdentity', identityGetter, identityShim),\n        Identity: legacyGlobalDescriptor('Identity', legacyIdentityGetter, identityShim),\n        schMonetization: legacyGlobalDescriptor(\n            'schMonetization',\n            monetizationGetter,\n            monetizationShim,\n        ),\n    });\n\n    dispatchReadyEvent(browserWindow, IDENTITY_READY_EVENT, identityShim);\n    dispatchReadyEvent(browserWindow, MONETIZATION_READY_EVENT, monetizationShim);\n};\n\n/**\n * Enables the temporary v5 global and ready-event compatibility layer for Account SDK v6.\n *\n * Call this before `createAccountSdk()` when a dependency still expects v5 globals. If Account\n * already exists, the legacy shims are installed immediately.\n *\n * @deprecated Migrate dependencies to the Account API. This entrypoint will be removed in v7.\n */\nexport function enableLegacyCompatibility(options: LegacyCompatibilityOptions = {}): void {\n    const browserWindow = resolveBrowserWindow(options.window);\n    if (!browserWindow) {\n        throw createUnavailableError();\n    }\n\n    warnCompatibilityEnabled();\n\n    if (enabledWindows.has(browserWindow)) {\n        return;\n    }\n\n    assertLegacyGlobalsAvailable(browserWindow);\n\n    enabledWindows.add(browserWindow);\n\n    if (browserWindow.schAccount) {\n        installLegacyGlobals(browserWindow, browserWindow.schAccount);\n        return;\n    }\n\n    browserWindow.addEventListener(\n        ACCOUNT_READY_EVENT,\n        () => {\n            if (!browserWindow.schAccount) {\n                throw createMissingAccountError();\n            }\n            installLegacyGlobals(browserWindow, browserWindow.schAccount);\n        },\n        { once: true },\n    );\n}\n"],"mappings":";;AAIA,IAAM,IAAS,+BACX,IAA8B,IAErB,UAAuC;CAC5C,MAGJ,IAA8B,IAC9B,QAAQ,KACJ,GAAG,EAAO,yIACd;AACJ,GAEa,KAAmB,GAAmB,MAA8B;CAC7E,QAAQ,KACJ,GAAG,EAAO,GAAG,EAAU,sBAAsB,EAAY,oCAC7D;AACJ,GAEa,UAAyC;CAClD,QAAQ,KACJ,GAAG,EAAO,0JACd;AACJ,GCda,IAAb,MAA6D;CACzD;CACA;CACA,KAA4E,CAAC;CAE7E,YAAY,GAAkB;EAC1B,KAAKA,KAAW;EAEhB,IAAM,IAAe,EAAc,IAAI,CAAO;EAC9C,IAAI,CAAC,GACD,MAAM,IAAI,EAAS,kEAAkE;EAazF,AAXA,KAAKC,KAAgB,GAErB,EAAa,gBAAgB,GAAU,MAAY;GAC/C,AACI,YAAY,KACZ,EAAS,UACT,EAAE,YAAY,KAAW,EAAQ,WAEjC,KAAKC,GAAkB,CAAO;EAEtC,GACA,KAAKF,GAAS,GAAG,yBAAyB,KAAKE,GAAkB,CAAC;CACtE;CAEA,IAAI,WAAmB;EAEnB,OADA,EAAgB,wBAAwB,kBAAkB,GACnD,KAAKF,GAAS;CACzB;CAEA,IAAI,MAA0B;EAE1B,OADA,EAAgB,mBAAmB,aAAa,GACzC,KAAKA,GAAS;CACzB;CAEA,IAAI,cAAsB;EAEtB,OADA,EAAgB,2BAA2B,qBAAqB,GACzD,KAAKA,GAAS;CACzB;CAEA,IAAI,WAAuC;EAEvC,OADA,EAAgB,wBAAwB,sBAAsB,GACvD,KAAKC,GAAc,WAAW;CACzC;CAEA,aAAgD;EAE5C,OADA,KAAKE,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW;CACpC;CAEA,aAAgD;EAE5C,OADA,KAAKG,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW;CACpC;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,UAA0C;EAEtC,OADA,KAAKG,GAAM,SAAS,GACb,KAAKH,GAAS,QAAQ;CACjC;CAEA,YAA8C;EAE1C,OADA,KAAKG,GAAM,WAAW,GACf,KAAKH,GAAS,UAAU;CACnC;CAEA,cACI,GAAG,GACiC;EAEpC,OADA,KAAKG,GAAM,eAAe,GACnB,KAAKH,GAAS,cAAc,GAAG,CAAI;CAC9C;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,cAAkD;EAE9C,OADA,KAAKG,GAAM,aAAa,GACjB,KAAKH,GAAS,YAAY;CACrC;CAEA,qBAAgE;EAE5D,OADA,KAAKG,GAAM,oBAAoB,GACxB,KAAKH,GAAS,mBAAmB;CAC5C;CAEA,UAA0C;EAEtC,OADA,KAAKG,GAAM,SAAS,GACb,KAAKH,GAAS,QAAQ;CACjC;CAEA,MAAM,GAAG,GAAkE;EAEvE,OADA,KAAKG,GAAM,OAAO,GACX,KAAKH,GAAS,MAAM,GAAG,CAAI;CACtC;CAEA,OAAO,GAAG,GAAoE;EAE1E,OADA,KAAKG,GAAM,QAAQ,GACZ,KAAKH,GAAS,OAAO,GAAG,CAAI;CACvC;CAaA,SACI,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACM;EAON,OANA,KAAKG,GAAM,UAAU,GACjB,OAAO,KAAY,WAKhB,KAAKH,GAAS,SAAS;GAC1B,OAAO;GACP;GACA,OAAO,KAAS,KAAA;GAChB,aAAa,KAAe,KAAA;GAC5B,WAAW,KAAa,KAAA;GACxB,KAAK,KAAO,KAAA;GACZ,QAAQ,KAAU,KAAA;GAClB,QAAQ,OAAO,MAAM,OAAO,CAAM,CAAC,IAAI,KAAA,IAAY;EACvD,CAAC,IAbU,KAAKA,GAAS,SAAS,CAAO;CAc7C;CAEA,UAAU,GAAG,GAA0E;EAEnF,OADA,KAAKG,GAAM,WAAW,GACf,KAAKH,GAAS,UAAU,GAAG,CAAI;CAC1C;CAEA,WAAW,GAAG,GAA4E;EAEtF,OADA,KAAKG,GAAM,YAAY,GAChB,KAAKH,GAAS,WAAW,GAAG,CAAI;CAC3C;CAEA,0BACI,GAAG,GAC6C;EAEhD,OADA,KAAKG,GAAM,2BAA2B,GAC/B,KAAKH,GAAS,0BAA0B,GAAG,CAAI;CAC1D;CAEA,yBAAwE;EAEpE,OADA,KAAKG,GAAM,wBAAwB,GAC5B,KAAKH,GAAS,uBAAuB;CAChD;CAEA,GAAG,GAAiB,GAAgC,GAAyB;EAQzE,OAPA,EACI,4BACA,gEACJ,GACA,KAAKI,GAAmB,CAAK,GAE7B,KAAKC,GAAiB,KAAK;GAAE;GAAU;EAAQ,CAAC,GACzC;CACX;CAEA,IAAI,GAAiB,GAAuC;EAUxD,OATA,EACI,6BACA,kEACJ,GACA,KAAKD,GAAmB,CAAK,GAE7B,KAAKC,KAAmB,IAClB,KAAKA,GAAiB,QAAQ,MAAe,EAAW,aAAa,CAAQ,IAC7E,CAAC,GACA;CACX;CAEA,GAAM,GAAoC;EACtC,EAAgB,eAAe,EAAO,KAAK,WAAW,EAAO,GAAG;CACpE;CAEA,GAAmB,GAAqB;EACpC,IAAI,MAAU,UACV,MAAM,IAAI,EACN,mEAAmE,EAAM,QAC7E;CAER;CAEA,GAAkB,GAAG,GAA0C;EAC3D,KAAK,IAAM,EAAE,aAAU,gBAAa,CAAC,GAAG,KAAKA,EAAgB,GACzD,IAAI;GACA,EAAS,MAAM,GAAS,CAAI;EAChC,SAAS,GAAO;GAEZ,QAAQ,MAAM,6DAA6D,CAAK;EACpF;CAER;AACJ,GC3Na,IAAb,MAAqE;CACjE;CAEA,YAAY,GAAkB;EAC1B,KAAKC,KAAW;CACpB;CAEA,UAAU,GAAsB,GAA0D;EAGtF,OAFA,EAAgB,+BAA+B,qBAAqB,GACpE,EAA2B,GACpB,KAAKA,GAAS,UAAU,CAAU;CAC7C;CAEA,wBAAwB,GAAsB,GAA6B;EAKvE,AAJA,EACI,6CACA,mCACJ,GACA,KAAKA,GAAS,wBAAwB,GAAY,CAAM;CAC5D;AACJ,GCjBM,IAAsB,oBACtB,IAAuB,qBACvB,IAA2B,yBAE3B,oBAAiB,IAAI,QAAgB,GAErC,UACF,IAAI,EAAS,2EAA2E,GAEtF,UACF,IAAI,EACA,6CAA6C,EAAoB,2BACrE,GAEE,KAA6B,MAC/B,IAAI,EACA,yDAAyD,EAAW,2BACxE,GAEE,KAAgC,MAAgC;CAClE,KAAK,IAAM,KAAc;EAAC;EAAe;EAAY;CAAiB,GAAG;EACrE,IAAM,IAAa,OAAO,yBAAyB,GAAe,CAAU,GACtE,IACF,GAAY,gBAAgB,WAAW,KAAc,EAAW,SAAS;EAC7E,IAAI,KAAc,CAAC,GACf,MAAM,EAA0B,CAAU;CAElD;AACJ,GAEM,KACF,GACA,GACA,OACsB;CACtB,cAAc;CACd,YAAY;CACZ,KAAK;CACL,MAAM,MAAoB;EAEtB,IAAI,MAAU,GACV,MAAM,EAA0B,CAAU;EAE9C,EAAgB,UAAU,KAAc,mBAAmB;CAC/D;AACJ,IAEM,KACF,GACA,GACA,MACO;CACP,EAAc,cAAc,IAAI,YAAY,GAAW,EAAE,QAAQ,EAAE,YAAS,EAAE,CAAC,CAAC;AACpF,GAEM,KAAwB,GAAuB,MAA2B;CAC5E,EAA6B,CAAa;CAE1C,IAAM,IAAe,IAAI,EAAsB,CAAO,GAChD,IAAmB,IAAI,EAA0B,CAAO;CAyB9D,AAXA,OAAO,iBAAiB,GAAe;EACnC,aAAa,EAAuB,sBAbpC,EAAgB,sBAAsB,mBAAmB,GAClD,IAY4D,CAAY;EAC/E,UAAU,EAAuB,mBANjC,EAAgB,mBAAmB,mBAAmB,GAC/C,IAK4D,CAAY;EAC/E,iBAAiB,EACb,0BAZJ,EAAgB,0BAA0B,mBAAmB,GACtD,IAaH,CACJ;CACJ,CAAC,GAED,EAAmB,GAAe,GAAsB,CAAY,GACpE,EAAmB,GAAe,GAA0B,CAAgB;AAChF;AAUA,SAAgB,EAA0B,IAAsC,CAAC,GAAS;CACtF,IAAM,IAAgB,EAAqB,EAAQ,MAAM;CACzD,IAAI,CAAC,GACD,MAAM,EAAuB;CAGjC,MAAyB,GAErB,GAAe,IAAI,CAAa,GAQpC;MAJA,EAA6B,CAAa,GAE1C,EAAe,IAAI,CAAa,GAE5B,EAAc,YAAY;GAC1B,EAAqB,GAAe,EAAc,UAAU;GAC5D;EACJ;EAEA,EAAc,iBACV,SACM;GACF,IAAI,CAAC,EAAc,YACf,MAAM,EAA0B;GAEpC,EAAqB,GAAe,EAAc,UAAU;EAChE,GACA,EAAE,MAAM,GAAK,CACjB;CAXA;AAYJ"}

package/dist/consents.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Reads consents from the Schibsted Sourcepoint integration, the default consent reader.
+ * Pages without the integration have no consents to forward, so they are skipped before
+ * `getConsentsSync` would warn about the missing consent manager on every login URL.
+ * @private
+ */
+export declare function readSourcepointConsents(window: Window): URLSearchParams | null;
+/**
+ * Sets the given parameters on a URL, replacing previous values of the same parameters.
+ * @private
+ * @param href
+ * @param consentParams
+ * @return - The URL with the parameters replaced
+ */
+export declare function replaceConsentParams(href: string, consentParams: URLSearchParams): string;
+/**
+ * Refreshes consents of already rendered login links right before the browser follows them.
+ * Links are often generated before the user answers the consent dialog, so their consents are stale.
+ * The listener runs in the capture phase, before page handlers read the link.
+ * @private
+ * @param document
+ * @param options
+ * @param options.isLoginUrl - Tells whether a URL is a login URL to refresh
+ * @param options.getConsentParams - Current consent parameters
+ */
+export declare function refreshLoginLinksOnActivation(document: Document, { isLoginUrl, getConsentParams, }: {
+    isLoginUrl: (href: string) => boolean;
+    getConsentParams: () => URLSearchParams;
+}): void;

package/dist/identity.d.ts

@@ -18,6 +18,7 @@ export declare class Identity {
     private readonly env;
     private readonly log?;
     private readonly callbackBeforeRedirect;
+    private readonly getConsents;
     private readonly sessionStorageCache;
     private readonly localStorageCache;
     private enableSessionCaching;
@@ -43,13 +44,17 @@ export declare class Identity {
      * @param options.sessionDomain - Example: "https://id.site.com"
      * @param options.redirectUri - Example: "https://site.com"
      * @param options.env - Schibsted account environment: `PRE` (default), `PRO`, `PRO_NO`, `PRO_FI` or `PRO_DK`
-     * @param options.log - A function that receives debug log information. If not set,
-     * no logging will be done
+     * @param options.log - Receives debug logs and consent reader errors.
+     * Without it, consent reader errors are reported through console.warn.
      * @param options.window - window object
      * @param options.callbackBeforeRedirect - callback triggered before session refresh redirect happen
+     * @param options.getConsents - reads consents forwarded in login URLs.
+     * Defaults to the Schibsted Sourcepoint integration
      * @throws {SDKError} - If any of options are invalid
      */
-    constructor({ clientId, redirectUri, sessionDomain, env, log, window, callbackBeforeRedirect, }: IdentityOptions);
+    constructor({ clientId, redirectUri, sessionDomain, env, log, window, callbackBeforeRedirect, getConsents, }: IdentityOptions);
+    /** @internal */
+    enableLoginLinkRefresh(): void;
     addEventListener(type: AccountEventName, listener: EventListener): void;
     removeEventListener(type: AccountEventName, listener: EventListener): void;
     /**
@@ -273,6 +278,19 @@ export declare class Identity {
      * @return - The url
      */
     loginUrl({ state, acrValues, scope, redirectUri, loginHint, tag, teaser, maxAge, locale, oneStepLogin, prompt, xDomainId, xEnvironmentId, originCampaign, }: LoginOptions): string;
+    /**
+     * Reads the current consent parameters. A failing consent reader must not prevent a login,
+     * so the failure is logged and the login continues without consents.
+     * @private
+     * @return - Consent query parameters; empty when unavailable
+     */
+    private getConsentParams;
+    /**
+     * Tells whether a URL is a login URL generated by this instance
+     * @private
+     * @param href
+     */
+    private isLoginUrl;
     /**
      * The url for logging the user out
      * @param redirectUri

package/dist/index.d.ts

@@ -4,8 +4,9 @@ export * from './globals.js';
 export { default as SDKError } from './sdk-error.js';
 /** session response type guards */
 export { isConnectedSessionResponse, isConnectedSessionWithUserIdResponse, isSessionFailureResponse, isSessionSuccessResponse, } from './session-response.js';
-export type { AccountConfig, AccountEventListener, AccountEventMap, AccountEventName, LoginRequestedEventDetail, LogoutRequestedEventDetail, ResolvedAccountConfig, } from './types/account.js';
+export type { AccountConfig, AccountEventListener, AccountEventMap, AccountEventName, LoginRequestedEventDetail, LogoutRequestedEventDetail, } from './types/account.js';
 export type { AccountEnvironment, LogFunction } from './types/common.js';
+export type { ConsentReader } from './types/identity.js';
 export type { LoginOptions, SimplifiedLoginData, SimplifiedLoginWidgetLoginOptions, SimplifiedLoginWidgetOptions, } from './types/login.js';
 export type { HasAccessResult } from './types/monetization.js';
 export type { ConnectedSessionResponse, ConnectedSessionWithUserIdResponse, RedirectSessionResponse, SessionFailureResponse, SessionResponse, SessionSuccessResponse, SessionUserId, } from './types/session.js';