@triplinkintl/embedded-card 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 TripLink
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,77 @@
+# TripLink Embedded Card
+
+![NPM Version](https://img.shields.io/npm/v/@triplinkintl/embedded-card?style=flat-square)
+
+[TripLink](https://www.triplinkintl.com/) Embedded Card lets you show virtual card details in your own product, without taking on PCI scope. [TripLink](https://www.triplinkintl.com/) remains the regulated issuer and PCI payment provider — issuing, funding, and protecting card data on your behalf. A few lines of JavaScript is enough to embed a TripLink-hosted card into any page.
+
+## Install
+
+```bash
+npm install @triplinkintl/embedded-card
+```
+
+## Usage
+
+```ts
+import TripLink from '@triplinkintl/embedded-card';
+
+const { destroy } = TripLink.renderCard({
+  container: 'card-root',
+  ephemeralKey: auth.ephemeralKey,
+  cardLid: auth.cardLogId,
+  customerId: auth.customerId,
+  source: 'blink',
+  locale: 'zh-HK',
+  env: 'FAT',
+  styles: {
+    root: { backgroundColor: '#0b1f3a' },
+  },
+  onSuccess: ({ requestId }) => {
+    console.log('card rendered', requestId);
+  },
+  onError: ({ resultCode, message, requestId }) => {
+    console.error(resultCode, message, requestId);
+  },
+});
+
+// later
+destroy();
+```
+
+```html
+<div id="card-root" style="width: 360px; height: 220px;"></div>
+```
+
+Named export `renderCard` is equivalent to `TripLink.renderCard`.
+
+## Options
+
+
+| Field          | Type                                           | Required | Default | Description                                 |
+| -------------- | ---------------------------------------------- | -------- | ------- | ------------------------------------------- |
+| `container`    | `string`                                       | yes      | —       | DOM container id                            |
+| `ephemeralKey` | `string`                                       | yes      | —       | Ephemeral key from TripLink                 |
+| `cardLid`      | `string`                                       | yes      | —       | Card id (`cardLogId`) from TripLink         |
+| `customerId`   | `string`                                       | yes      | —       | Customer id from TripLink                   |
+| `source`       | `string`                                       | yes      | —       | Partner source. Apply to TripLink first.    |
+| `locale`       | `string`                                       | no       | `en-US` | BCP 47 language tag, e.g. `en-HK`, `zh-HK`  |
+| `env`          | `FAT` / `PROD`                                 | no       | `PROD`  | Environment. `FAT` or `PROD`.               |
+| `styles`       | `{ root? }`                                    | no       | —       | Card styles sent to the iframe via CardInit |
+| `onSuccess`    | `({ requestId }) => void`                      | no       | —       | Fired when the iframe reports init success  |
+| `onError`      | `({ resultCode, message, requestId }) => void` | no       | —       | Fired on validation / load / init errors    |
+
+
+
+
+## Result codes
+
+
+| `resultCode`          | When                                      |
+| --------------------- | ----------------------------------------- |
+| `BROWSER_VERSION_LOW` | Browser is too old                        |
+| `INVALID_PARAMS`      | Missing or invalid SDK arguments          |
+| `CONTAINER_NOT_FOUND` | No DOM node with the given `container` id |
+| `IFRAME_LOAD_FAILED`  | Iframe failed to load                     |
+| `CARD_INIT_FAILED`    | Iframe reported card init failure         |
+
+

package/dist/index.cjs

@@ -0,0 +1,174 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: !0 });
+}, __copyProps = (to, from, except, desc) => {
+  if (from && typeof from == "object" || typeof from == "function")
+    for (let key of __getOwnPropNames(from))
+      !__hasOwnProp.call(to, key) && key !== except && __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: !0 }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  DEFAULT_ENV: () => DEFAULT_ENV,
+  DEFAULT_LOCALE: () => DEFAULT_LOCALE,
+  IFRAME_BASE_URLS: () => IFRAME_BASE_URLS,
+  ResultCode: () => ResultCode,
+  TripLink: () => TripLink,
+  default: () => index_default,
+  renderCard: () => renderCard
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/renderCard.ts
+var import_uuid = require("uuid");
+
+// src/constants.ts
+var DEFAULT_LOCALE = "en-US", DEFAULT_ENV = "PROD", IFRAME_BASE_URLS = {
+  FAT: "https://vcc-hosting.fat.ctripqa.com/embedded-card/cardInfo",
+  PROD: "https://vcc-hosting.fat.ctripqa.com/embedded-card/cardInfo"
+};
+
+// src/enums/resultCode.ts
+var ResultCode = /* @__PURE__ */ ((ResultCode2) => (ResultCode2.INVALID_PARAMS = "INVALID_PARAMS", ResultCode2.CONTAINER_NOT_FOUND = "CONTAINER_NOT_FOUND", ResultCode2.IFRAME_LOAD_FAILED = "IFRAME_LOAD_FAILED", ResultCode2.CARD_INIT_FAILED = "CARD_INIT_FAILED", ResultCode2.BROWSER_VERSION_LOW = "BROWSER_VERSION_LOW", ResultCode2))(ResultCode || {});
+
+// src/utils/validators.ts
+var REQUIRED_STRING_KEYS = ["container", "ephemeralKey", "cardLid", "customerId", "source"];
+function isNonEmptyString(value) {
+  return typeof value == "string" && value.trim().length > 0;
+}
+function isSupported() {
+  return [
+    "postMessage",
+    // Portal/SDK 需要支持 postMessage
+    "TextEncoder",
+    // Portal 需要支持 TextEncoder
+    "Uint8Array",
+    // Portal 需要支持 Uint8Array
+    "atob"
+    // Portal 需要支持 atob
+  ].every((key) => {
+    let isSupported3 = typeof window[key] == "function";
+    return isSupported3 || console.warn(`[TripLink SDK] ${key} is not supported`), isSupported3;
+  });
+}
+function validateOptions(options) {
+  if (!options || typeof options != "object")
+    return { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: "options is required" };
+  for (let key of REQUIRED_STRING_KEYS)
+    if (!isNonEmptyString(options[key]))
+      return { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: `${key} is required` };
+  return options.env != null && options.env !== "FAT" && options.env !== "PROD" ? { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: "env must be FAT or PROD" } : { ok: !0 };
+}
+
+// src/utils/url.ts
+function appendQuery(base, params) {
+  let pairs = [];
+  for (let key in params) {
+    if (!Object.prototype.hasOwnProperty.call(params, key))
+      continue;
+    let value = params[key];
+    value && pairs.push(key + "=" + encodeURIComponent(value));
+  }
+  if (!pairs.length)
+    return base;
+  let hashIndex = base.indexOf("#"), hash = hashIndex >= 0 ? base.slice(hashIndex) : "", withoutHash = hashIndex >= 0 ? base.slice(0, hashIndex) : base, lastChar = withoutHash.charAt(withoutHash.length - 1), separator = "&";
+  return withoutHash.indexOf("?") === -1 ? separator = "?" : (lastChar === "?" || lastChar === "&") && (separator = ""), withoutHash + separator + pairs.join("&") + hash;
+}
+function getOrigin(url) {
+  let match = url.match(/^(https?:\/\/[^/?#]+)/i);
+  return match ? match[1] : "";
+}
+function buildIframeUrl(options) {
+  return appendQuery(IFRAME_BASE_URLS[options.env || DEFAULT_ENV], {
+    locale: options.locale,
+    source: options.source,
+    oid: options.oid
+  });
+}
+
+// src/renderCard.ts
+function applyIframeStyle(iframe) {
+  iframe.setAttribute("title", "TripLink Card"), iframe.setAttribute("allow", "clipboard-write");
+}
+function renderCard(options) {
+  let noop = { destroy() {
+  } }, requestId = (0, import_uuid.v4)(), reportError = (code, message) => {
+    console.error(`[Triplink-embedded-card SDK] ${code}: ${message}`), options?.onError?.({ resultCode: code, message, requestId });
+  };
+  if (!isSupported())
+    return reportError("BROWSER_VERSION_LOW" /* BROWSER_VERSION_LOW */, "Browser version is too low"), noop;
+  let validated = validateOptions(options);
+  if (!validated.ok)
+    return reportError(validated.code, validated.message), noop;
+  let container = document.getElementById(options.container);
+  if (!container)
+    return reportError("CONTAINER_NOT_FOUND" /* CONTAINER_NOT_FOUND */, `Mount node not found: ${options.container}`), noop;
+  let locale = (options.locale || DEFAULT_LOCALE).trim(), env = options.env || DEFAULT_ENV, iframeSrc = buildIframeUrl({
+    env,
+    locale,
+    source: options.source.trim(),
+    oid: requestId
+  }), iframeOrigin = getOrigin(iframeSrc), iframe = document.createElement("iframe");
+  applyIframeStyle(iframe);
+  let didInit = !1, destroyed = !1, onComplete = () => didInit || destroyed ? !1 : didInit = !0, onError = (code, message) => {
+    onComplete() && reportError(code, message);
+  }, onSuccess = () => {
+    onComplete() && options.onSuccess?.({ requestId });
+  }, postCardInitMessage = () => {
+    destroyed || didInit || iframe.contentWindow?.postMessage(
+      {
+        requestId,
+        type: "CARD_INIT" /* CardInit */,
+        payload: {
+          ephemeralKey: options.ephemeralKey.trim(),
+          cardLogId: options.cardLid.trim(),
+          customerId: options.customerId.trim(),
+          ...options.styles ? { styles: options.styles } : {}
+        }
+      },
+      iframeOrigin
+    );
+  }, onMessage = (event) => {
+    if (destroyed || didInit || iframe.contentWindow && event.source !== iframe.contentWindow || event.origin !== iframeOrigin)
+      return;
+    let { requestId: messageRequestId, type: messageType, payload: messagePayload } = event.data || {};
+    if (!(!messageRequestId || messageRequestId !== requestId))
+      switch (messageType) {
+        case "READY" /* Ready */:
+          postCardInitMessage();
+          break;
+        case "CARD_INIT_SUCCESS" /* InitSuccess */:
+          onSuccess();
+          break;
+        case "CARD_INIT_FAILED" /* InitFailed */:
+          let message = messagePayload?.message || "Failed to initialize card information";
+          onError("CARD_INIT_FAILED" /* CARD_INIT_FAILED */, message);
+          break;
+        default:
+          onError("CARD_INIT_FAILED" /* CARD_INIT_FAILED */, `Unknown message type '${messageType}'`);
+          break;
+      }
+  }, onIframeError = () => {
+    onError("IFRAME_LOAD_FAILED" /* IFRAME_LOAD_FAILED */, "Failed to load iframe page");
+  };
+  return window.addEventListener("message", onMessage), iframe.addEventListener("error", onIframeError), iframe.src = iframeSrc, container.replaceChildren(iframe), {
+    /** 移除 iframe，并停止 message 监听。 */
+    destroy() {
+      destroyed || (destroyed = !0, window.removeEventListener("message", onMessage), iframe.removeEventListener("error", onIframeError), iframe.remove());
+    }
+  };
+}
+
+// src/index.ts
+var TripLink = {
+  renderCard
+}, index_default = TripLink;
+//# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -0,0 +1,95 @@
+/** 传给 `onError({ resultCode, message, requestId })` 的错误码。 */
+declare enum ResultCode {
+    /** 无效的参数 */
+    INVALID_PARAMS = "INVALID_PARAMS",
+    /** 容器未找到 */
+    CONTAINER_NOT_FOUND = "CONTAINER_NOT_FOUND",
+    /** iframe 加载失败 */
+    IFRAME_LOAD_FAILED = "IFRAME_LOAD_FAILED",
+    /** 卡初始化失败 */
+    CARD_INIT_FAILED = "CARD_INIT_FAILED",
+    /** 浏览器版本低（不支持 postMessage） */
+    BROWSER_VERSION_LOW = "BROWSER_VERSION_LOW"
+}
+
+/** iframe 环境：FAT 或 PROD。 */
+type Env = 'FAT' | 'PROD';
+/** `ResultCode` 的字符串取值。 */
+type ResultCodeValue = ResultCode;
+/** `onError` 回调入参。 */
+type OnErrorPayload = {
+    /** 错误码 */
+    resultCode: ResultCode;
+    /** 错误描述 */
+    message: string;
+    /** 本次 `renderCard` 的请求 id */
+    requestId: string;
+};
+/** `onSuccess` 回调入参。 */
+type OnSuccessPayload = {
+    /** 本次 `renderCard` 的请求 id */
+    requestId: string;
+};
+type OnError = (payload: OnErrorPayload) => void;
+type OnSuccess = (payload: OnSuccessPayload) => void;
+/** 传给托管页的内联样式，使用驼峰 CSS 属性名，如 `backgroundColor`。 */
+type CSSStyleProperties = Record<string, string | number>;
+/** 卡片样式，通过 CardInit 下发给托管页。 */
+type CardStyles = {
+    /** 根节点样式 */
+    root?: CSSStyleProperties;
+};
+type RenderCardOptions = {
+    /** DOM 容器 id */
+    container: string;
+    /** TripLink 签发的短期凭证，通过 postMessage 传递，不得出现在 iframe URL 上 */
+    ephemeralKey: string;
+    /** 卡 id（cardLogId） */
+    cardLid: string;
+    /** 客户 id */
+    customerId: string;
+    /**
+     * 接入方标识，作为非敏感 query 拼到 iframe URL，
+     * 供托管页拉取对应的 origin 白名单。
+     */
+    source: string;
+    /** BCP 47 语言标签，默认 `en-US` */
+    locale?: string;
+    /** FAT 或 PROD，默认 `PROD` */
+    env?: Env;
+    /** 卡片样式，通过 CardInit postMessage 下发给托管页 */
+    styles?: CardStyles;
+    /** iframe 初始化成功时回调 */
+    onSuccess?: OnSuccess;
+    /** 参数校验、iframe 加载或卡初始化失败时回调 */
+    onError?: OnError;
+};
+type RenderCardInstance = {
+    /** 移除 iframe，并停止 message 监听。 */
+    destroy: () => void;
+};
+
+/**
+ * 在宿主容器中挂载 TripLink 卡信息 iframe，并通过 postMessage 完成初始化。
+ *
+ * 流程：校验入参 → 定位容器 → 拼接不含敏感信息的 iframe URL →
+ * 挂载 iframe → 加载完成后下发 `{ ephemeralKey, cardLid, customerId }` →
+ * 等待 iframe 回传（`onSuccess` / `onError`）。
+ *
+ * @returns `{ destroy }` 用于移除 iframe 并停止监听
+ */
+declare function renderCard(options: RenderCardOptions): RenderCardInstance;
+
+/** 默认语言 */
+declare const DEFAULT_LOCALE = "en-US";
+/** 默认环境 */
+declare const DEFAULT_ENV: Env;
+/** 托管卡页地址 TODO */
+declare const IFRAME_BASE_URLS: Record<Env, string>;
+
+/** 对外 SDK 命名空间：`TripLink.renderCard(...)`。 */
+declare const TripLink: {
+    renderCard: typeof renderCard;
+};
+
+export { type CSSStyleProperties, type CardStyles, DEFAULT_ENV, DEFAULT_LOCALE, type Env, IFRAME_BASE_URLS, type OnError, type OnErrorPayload, type OnSuccess, type OnSuccessPayload, type RenderCardInstance, type RenderCardOptions, ResultCode, type ResultCodeValue, TripLink, TripLink as default, renderCard };

package/dist/index.d.ts

@@ -0,0 +1,95 @@
+/** 传给 `onError({ resultCode, message, requestId })` 的错误码。 */
+declare enum ResultCode {
+    /** 无效的参数 */
+    INVALID_PARAMS = "INVALID_PARAMS",
+    /** 容器未找到 */
+    CONTAINER_NOT_FOUND = "CONTAINER_NOT_FOUND",
+    /** iframe 加载失败 */
+    IFRAME_LOAD_FAILED = "IFRAME_LOAD_FAILED",
+    /** 卡初始化失败 */
+    CARD_INIT_FAILED = "CARD_INIT_FAILED",
+    /** 浏览器版本低（不支持 postMessage） */
+    BROWSER_VERSION_LOW = "BROWSER_VERSION_LOW"
+}
+
+/** iframe 环境：FAT 或 PROD。 */
+type Env = 'FAT' | 'PROD';
+/** `ResultCode` 的字符串取值。 */
+type ResultCodeValue = ResultCode;
+/** `onError` 回调入参。 */
+type OnErrorPayload = {
+    /** 错误码 */
+    resultCode: ResultCode;
+    /** 错误描述 */
+    message: string;
+    /** 本次 `renderCard` 的请求 id */
+    requestId: string;
+};
+/** `onSuccess` 回调入参。 */
+type OnSuccessPayload = {
+    /** 本次 `renderCard` 的请求 id */
+    requestId: string;
+};
+type OnError = (payload: OnErrorPayload) => void;
+type OnSuccess = (payload: OnSuccessPayload) => void;
+/** 传给托管页的内联样式，使用驼峰 CSS 属性名，如 `backgroundColor`。 */
+type CSSStyleProperties = Record<string, string | number>;
+/** 卡片样式，通过 CardInit 下发给托管页。 */
+type CardStyles = {
+    /** 根节点样式 */
+    root?: CSSStyleProperties;
+};
+type RenderCardOptions = {
+    /** DOM 容器 id */
+    container: string;
+    /** TripLink 签发的短期凭证，通过 postMessage 传递，不得出现在 iframe URL 上 */
+    ephemeralKey: string;
+    /** 卡 id（cardLogId） */
+    cardLid: string;
+    /** 客户 id */
+    customerId: string;
+    /**
+     * 接入方标识，作为非敏感 query 拼到 iframe URL，
+     * 供托管页拉取对应的 origin 白名单。
+     */
+    source: string;
+    /** BCP 47 语言标签，默认 `en-US` */
+    locale?: string;
+    /** FAT 或 PROD，默认 `PROD` */
+    env?: Env;
+    /** 卡片样式，通过 CardInit postMessage 下发给托管页 */
+    styles?: CardStyles;
+    /** iframe 初始化成功时回调 */
+    onSuccess?: OnSuccess;
+    /** 参数校验、iframe 加载或卡初始化失败时回调 */
+    onError?: OnError;
+};
+type RenderCardInstance = {
+    /** 移除 iframe，并停止 message 监听。 */
+    destroy: () => void;
+};
+
+/**
+ * 在宿主容器中挂载 TripLink 卡信息 iframe，并通过 postMessage 完成初始化。
+ *
+ * 流程：校验入参 → 定位容器 → 拼接不含敏感信息的 iframe URL →
+ * 挂载 iframe → 加载完成后下发 `{ ephemeralKey, cardLid, customerId }` →
+ * 等待 iframe 回传（`onSuccess` / `onError`）。
+ *
+ * @returns `{ destroy }` 用于移除 iframe 并停止监听
+ */
+declare function renderCard(options: RenderCardOptions): RenderCardInstance;
+
+/** 默认语言 */
+declare const DEFAULT_LOCALE = "en-US";
+/** 默认环境 */
+declare const DEFAULT_ENV: Env;
+/** 托管卡页地址 TODO */
+declare const IFRAME_BASE_URLS: Record<Env, string>;
+
+/** 对外 SDK 命名空间：`TripLink.renderCard(...)`。 */
+declare const TripLink: {
+    renderCard: typeof renderCard;
+};
+
+export { type CSSStyleProperties, type CardStyles, DEFAULT_ENV, DEFAULT_LOCALE, type Env, IFRAME_BASE_URLS, type OnError, type OnErrorPayload, type OnSuccess, type OnSuccessPayload, type RenderCardInstance, type RenderCardOptions, ResultCode, type ResultCodeValue, TripLink, TripLink as default, renderCard };

package/dist/index.js

@@ -0,0 +1,154 @@
+// src/renderCard.ts
+import { v4 as uuidv4 } from "uuid";
+
+// src/constants.ts
+var DEFAULT_LOCALE = "en-US", DEFAULT_ENV = "PROD", IFRAME_BASE_URLS = {
+  FAT: "https://vcc-hosting.fat.ctripqa.com/embedded-card/cardInfo",
+  PROD: "https://vcc-hosting.fat.ctripqa.com/embedded-card/cardInfo"
+};
+
+// src/enums/resultCode.ts
+var ResultCode = /* @__PURE__ */ ((ResultCode2) => (ResultCode2.INVALID_PARAMS = "INVALID_PARAMS", ResultCode2.CONTAINER_NOT_FOUND = "CONTAINER_NOT_FOUND", ResultCode2.IFRAME_LOAD_FAILED = "IFRAME_LOAD_FAILED", ResultCode2.CARD_INIT_FAILED = "CARD_INIT_FAILED", ResultCode2.BROWSER_VERSION_LOW = "BROWSER_VERSION_LOW", ResultCode2))(ResultCode || {});
+
+// src/utils/validators.ts
+var REQUIRED_STRING_KEYS = ["container", "ephemeralKey", "cardLid", "customerId", "source"];
+function isNonEmptyString(value) {
+  return typeof value == "string" && value.trim().length > 0;
+}
+function isSupported() {
+  return [
+    "postMessage",
+    // Portal/SDK 需要支持 postMessage
+    "TextEncoder",
+    // Portal 需要支持 TextEncoder
+    "Uint8Array",
+    // Portal 需要支持 Uint8Array
+    "atob"
+    // Portal 需要支持 atob
+  ].every((key) => {
+    let isSupported3 = typeof window[key] == "function";
+    return isSupported3 || console.warn(`[TripLink SDK] ${key} is not supported`), isSupported3;
+  });
+}
+function validateOptions(options) {
+  if (!options || typeof options != "object")
+    return { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: "options is required" };
+  for (let key of REQUIRED_STRING_KEYS)
+    if (!isNonEmptyString(options[key]))
+      return { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: `${key} is required` };
+  return options.env != null && options.env !== "FAT" && options.env !== "PROD" ? { ok: !1, code: "INVALID_PARAMS" /* INVALID_PARAMS */, message: "env must be FAT or PROD" } : { ok: !0 };
+}
+
+// src/utils/url.ts
+function appendQuery(base, params) {
+  let pairs = [];
+  for (let key in params) {
+    if (!Object.prototype.hasOwnProperty.call(params, key))
+      continue;
+    let value = params[key];
+    value && pairs.push(key + "=" + encodeURIComponent(value));
+  }
+  if (!pairs.length)
+    return base;
+  let hashIndex = base.indexOf("#"), hash = hashIndex >= 0 ? base.slice(hashIndex) : "", withoutHash = hashIndex >= 0 ? base.slice(0, hashIndex) : base, lastChar = withoutHash.charAt(withoutHash.length - 1), separator = "&";
+  return withoutHash.indexOf("?") === -1 ? separator = "?" : (lastChar === "?" || lastChar === "&") && (separator = ""), withoutHash + separator + pairs.join("&") + hash;
+}
+function getOrigin(url) {
+  let match = url.match(/^(https?:\/\/[^/?#]+)/i);
+  return match ? match[1] : "";
+}
+function buildIframeUrl(options) {
+  return appendQuery(IFRAME_BASE_URLS[options.env || DEFAULT_ENV], {
+    locale: options.locale,
+    source: options.source,
+    oid: options.oid
+  });
+}
+
+// src/renderCard.ts
+function applyIframeStyle(iframe) {
+  iframe.setAttribute("title", "TripLink Card"), iframe.setAttribute("allow", "clipboard-write");
+}
+function renderCard(options) {
+  let noop = { destroy() {
+  } }, requestId = uuidv4(), reportError = (code, message) => {
+    console.error(`[Triplink-embedded-card SDK] ${code}: ${message}`), options?.onError?.({ resultCode: code, message, requestId });
+  };
+  if (!isSupported())
+    return reportError("BROWSER_VERSION_LOW" /* BROWSER_VERSION_LOW */, "Browser version is too low"), noop;
+  let validated = validateOptions(options);
+  if (!validated.ok)
+    return reportError(validated.code, validated.message), noop;
+  let container = document.getElementById(options.container);
+  if (!container)
+    return reportError("CONTAINER_NOT_FOUND" /* CONTAINER_NOT_FOUND */, `Mount node not found: ${options.container}`), noop;
+  let locale = (options.locale || DEFAULT_LOCALE).trim(), env = options.env || DEFAULT_ENV, iframeSrc = buildIframeUrl({
+    env,
+    locale,
+    source: options.source.trim(),
+    oid: requestId
+  }), iframeOrigin = getOrigin(iframeSrc), iframe = document.createElement("iframe");
+  applyIframeStyle(iframe);
+  let didInit = !1, destroyed = !1, onComplete = () => didInit || destroyed ? !1 : didInit = !0, onError = (code, message) => {
+    onComplete() && reportError(code, message);
+  }, onSuccess = () => {
+    onComplete() && options.onSuccess?.({ requestId });
+  }, postCardInitMessage = () => {
+    destroyed || didInit || iframe.contentWindow?.postMessage(
+      {
+        requestId,
+        type: "CARD_INIT" /* CardInit */,
+        payload: {
+          ephemeralKey: options.ephemeralKey.trim(),
+          cardLogId: options.cardLid.trim(),
+          customerId: options.customerId.trim(),
+          ...options.styles ? { styles: options.styles } : {}
+        }
+      },
+      iframeOrigin
+    );
+  }, onMessage = (event) => {
+    if (destroyed || didInit || iframe.contentWindow && event.source !== iframe.contentWindow || event.origin !== iframeOrigin)
+      return;
+    let { requestId: messageRequestId, type: messageType, payload: messagePayload } = event.data || {};
+    if (!(!messageRequestId || messageRequestId !== requestId))
+      switch (messageType) {
+        case "READY" /* Ready */:
+          postCardInitMessage();
+          break;
+        case "CARD_INIT_SUCCESS" /* InitSuccess */:
+          onSuccess();
+          break;
+        case "CARD_INIT_FAILED" /* InitFailed */:
+          let message = messagePayload?.message || "Failed to initialize card information";
+          onError("CARD_INIT_FAILED" /* CARD_INIT_FAILED */, message);
+          break;
+        default:
+          onError("CARD_INIT_FAILED" /* CARD_INIT_FAILED */, `Unknown message type '${messageType}'`);
+          break;
+      }
+  }, onIframeError = () => {
+    onError("IFRAME_LOAD_FAILED" /* IFRAME_LOAD_FAILED */, "Failed to load iframe page");
+  };
+  return window.addEventListener("message", onMessage), iframe.addEventListener("error", onIframeError), iframe.src = iframeSrc, container.replaceChildren(iframe), {
+    /** 移除 iframe，并停止 message 监听。 */
+    destroy() {
+      destroyed || (destroyed = !0, window.removeEventListener("message", onMessage), iframe.removeEventListener("error", onIframeError), iframe.remove());
+    }
+  };
+}
+
+// src/index.ts
+var TripLink = {
+  renderCard
+}, index_default = TripLink;
+export {
+  DEFAULT_ENV,
+  DEFAULT_LOCALE,
+  IFRAME_BASE_URLS,
+  ResultCode,
+  TripLink,
+  index_default as default,
+  renderCard
+};
+//# sourceMappingURL=index.js.map

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@triplinkintl/embedded-card",
+  "version": "1.0.0",
+  "description": "TripLink Embedded Card lets you show virtual card details in your own product, without taking on PCI scope.",
+  "license": "MIT",
+  "author": "q_yao",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "keywords": [
+    "triplink",
+    "embedded-card",
+    "vcc",
+    "iframe",
+    "PCI"
+  ],
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/ares.2019",
+    "!dist/ares.2019/**",
+    "!dist/**/*.map",
+    "!dist/**/*.global.js",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "sideEffects": false,
+  "devDependencies": {
+    "jsdom": "^26.1.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  },
+  "dependencies": {
+    "uuid": "14.0.2"
+  }
+}