@wirexapp/card-sdk-core 0.1.0-beta.0

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# @wirexapp/card-sdk-core
+
+## 0.1.0-beta.0
+
+### Minor Changes
+
+- 1ff075a: Initial public beta of the Wirex PCI card SDK family: collect (top-up + OCT
+  destination), own-card reveal, 3DS step-up, React bindings, and the umbrella
+  package — all versioned in lockstep. Card data renders only inside
+  Wirex-served iframes; the packages are CHD-free loaders.

package/README.md

@@ -0,0 +1,14 @@
+# @wirexapp/card-sdk-core
+
+Shared foundation of the Wirex PCI card SDK: the postMessage protocol (single-source
+`protocolVersion.json`), the frame channel (iframe lifecycle + origin/channel-verified
+RPC), frame-URL building, and the collect machinery the profile packages wrap. CHD-free.
+
+**Not an integration surface** — install a capability package instead
+(`@wirexapp/card-topup-web`, `@wirexapp/card-oct-web`, `@wirexapp/card-reveal-web`,
+`@wirexapp/card-3ds-web`, `@wirexapp/card-react`) or the umbrella
+(`@wirexapp/card-sdk-web`); this package arrives as their dependency. All shared types
+are re-exported by every capability package.
+
+All packages in the family release in lockstep — your lockfile should always show one
+version across them.

package/dist/collectElement.d.ts

@@ -0,0 +1,58 @@
+import type { PciAppearance, PciCollectChangeState, PciCollectProfile, PciFrameStrings, PciTokenizeOctResult, PciTokenizeTopUpResult } from './protocol.js';
+export interface PciCollectAuth {
+    /** Called right before every backend hop so the frame always gets a fresh
+     *  access token. By design the frame authenticates with the caller's bearer —
+     *  the permanent model for both Wirex apps and B2B partners (a partner passes
+     *  its own user's bearer). There is no publishable-key layer. */
+    getBearerToken: () => Promise<string>;
+}
+export interface PciCollectElementConfig {
+    profile: PciCollectProfile;
+    auth: PciCollectAuth;
+    appearance?: PciAppearance;
+    strings?: PciFrameStrings;
+    onChange?: (state: PciCollectChangeState) => void;
+}
+export interface TokenizeTopUpParams {
+    billingDetails: {
+        line1: string;
+        line2?: string;
+        zipCode: string;
+        country: string;
+        city: string;
+        state?: string;
+    };
+    /** Saved-card nickname (debug-only input in web one). */
+    label?: string;
+}
+export interface TokenizeOctDestinationParams {
+    cardholderName: string;
+    cardLabel: string;
+    isSaved: boolean;
+    isThirdParty: boolean;
+    userId?: string;
+}
+/** The tokenize surface shared by the single-form element and the per-field
+ *  group, so host code can treat either interchangeably. */
+export interface PciCollectTokenizer {
+    tokenizeTopUp(params: TokenizeTopUpParams): Promise<PciTokenizeTopUpResult>;
+    tokenizeOctDestination(params: TokenizeOctDestinationParams): Promise<PciTokenizeOctResult>;
+}
+/**
+ * Card-entry element. Renders PAN/expiry/CVV/name (profile `topup`) or PAN
+ * only (profile `oct-destination`) inside a Wirex-served iframe and tokenizes
+ * straight from the frame to the card service. The host only ever receives
+ * the resulting token + out-of-PCI-scope metadata (brand, bin, last4, expiry).
+ */
+export declare class PciCollectElement implements PciCollectTokenizer {
+    private readonly config;
+    private readonly channel;
+    constructor(frameUrl: string, config: PciCollectElementConfig);
+    mount(container: HTMLElement): Promise<void>;
+    /** Profile `topup`: link a new external top-up card. */
+    tokenizeTopUp(params: TokenizeTopUpParams): Promise<PciTokenizeTopUpResult>;
+    /** Profile `oct-destination`: tokenize a payout destination card (no CVV). */
+    tokenizeOctDestination(params: TokenizeOctDestinationParams): Promise<PciTokenizeOctResult>;
+    destroy(): void;
+}
+//# sourceMappingURL=collectElement.d.ts.map

package/dist/collectElement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectElement.d.ts","sourceRoot":"","sources":["../src/collectElement.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EAEjB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B;;;qEAGiE;IACjE,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;4DAC4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5E,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC7F;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;gBAE9B,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB;IAQvD,KAAK,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlD,wDAAwD;IAClD,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAsBjF,8EAA8E;IACxE,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkBjG,OAAO,IAAI,IAAI;CAGhB"}

package/dist/collectElement.js

@@ -0,0 +1,77 @@
+import { PciFrameChannel } from './frameChannel.js';
+/**
+ * Card-entry element. Renders PAN/expiry/CVV/name (profile `topup`) or PAN
+ * only (profile `oct-destination`) inside a Wirex-served iframe and tokenizes
+ * straight from the frame to the card service. The host only ever receives
+ * the resulting token + out-of-PCI-scope metadata (brand, bin, last4, expiry).
+ */
+export class PciCollectElement {
+    constructor(frameUrl, config) {
+        this.config = config;
+        this.channel = new PciFrameChannel(frameUrl);
+        this.channel.onMessage(message => {
+            if (message.type === 'change')
+                config.onChange?.(message.state);
+        });
+    }
+    async mount(container) {
+        await this.channel.mount(container);
+        const auth = {
+            bearerToken: await this.config.auth.getBearerToken(),
+        };
+        await this.channel.request({
+            type: 'init',
+            config: {
+                mode: 'collect',
+                profile: this.config.profile,
+                auth,
+                appearance: this.config.appearance,
+                strings: this.config.strings,
+            },
+        });
+    }
+    /** Profile `topup`: link a new external top-up card. */
+    async tokenizeTopUp(params) {
+        if (this.config.profile !== 'topup') {
+            throw new Error(`tokenizeTopUp is not available for profile "${this.config.profile}"`);
+        }
+        return this.channel.request({
+            type: 'tokenize',
+            payload: {
+                kind: 'topup',
+                bearerToken: await this.config.auth.getBearerToken(),
+                billingDetails: {
+                    address_line1: params.billingDetails.line1,
+                    address_line2: params.billingDetails.line2,
+                    postal_code: params.billingDetails.zipCode,
+                    country: params.billingDetails.country,
+                    city: params.billingDetails.city,
+                    state: params.billingDetails.state,
+                },
+                cardholderLabel: params.label,
+            },
+        });
+    }
+    /** Profile `oct-destination`: tokenize a payout destination card (no CVV). */
+    async tokenizeOctDestination(params) {
+        if (this.config.profile !== 'oct-destination') {
+            throw new Error(`tokenizeOctDestination is not available for profile "${this.config.profile}"`);
+        }
+        return this.channel.request({
+            type: 'tokenize',
+            payload: {
+                kind: 'oct-destination',
+                bearerToken: await this.config.auth.getBearerToken(),
+                cardholderName: params.cardholderName,
+                cardLabel: params.cardLabel,
+                isSaved: params.isSaved,
+                isThirdParty: params.isThirdParty,
+                userId: params.userId,
+            },
+        });
+    }
+    destroy() {
+        this.channel.destroy();
+    }
+}
+//# sourceMappingURL=collectElement.js.map

package/dist/collectElement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectElement.js","sourceRoot":"","sources":["../src/collectElement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAuDpD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAI5B,YAAY,QAAgB,EAAE,MAA+B;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;YAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAsB;QAChC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,GAAiB;YACzB,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;SACrD,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBAClC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;aAC7B;SACF,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAyB;YAClD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACpD,cAAc,EAAE;oBACd,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;oBAC1C,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;oBAC1C,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO;oBAC1C,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO;oBACtC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI;oBAChC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;iBACnC;gBACD,eAAe,EAAE,MAAM,CAAC,KAAK;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,sBAAsB,CAAC,MAAoC;QAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAuB;YAChD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACpD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/collectGroup.d.ts

@@ -0,0 +1,39 @@
+import type { PciCollectAuth, PciCollectTokenizer, TokenizeOctDestinationParams, TokenizeTopUpParams } from './collectElement.js';
+import type { PciAppearance, PciCollectChangeState, PciCollectFieldName, PciCollectProfile, PciFrameStrings, PciTokenizeOctResult, PciTokenizeTopUpResult } from './protocol.js';
+export interface PciCollectGroupConfig {
+    profile: PciCollectProfile;
+    auth: PciCollectAuth;
+    appearance?: PciAppearance;
+    strings?: PciFrameStrings;
+    /** Aggregated validity/brand across all mounted fields (never card values). */
+    onChange?: (state: PciCollectChangeState) => void;
+}
+/** Handle for one field's iframe. The host mounts it into its own container. */
+export interface PciCollectField {
+    mount(container: HTMLElement): Promise<void>;
+    destroy(): void;
+}
+/**
+ * Per-field (split) Collect: one iframe per card field, arranged by the host,
+ * combining their values over a same-origin BroadcastChannel at tokenize.
+ * Exposes the same `tokenizeTopUp` / `tokenizeOctDestination` surface as the
+ * single-form `PciCollectElement`, so callers are agnostic to which they use.
+ */
+export declare class PciCollectGroup implements PciCollectTokenizer {
+    private readonly frameUrl;
+    private readonly config;
+    private readonly groupId;
+    private readonly channels;
+    private readonly states;
+    private brand;
+    constructor(frameUrl: string, config: PciCollectGroupConfig);
+    /** Create a field element. Mount it into your own container for layout. */
+    field(name: PciCollectFieldName): PciCollectField;
+    private emitChange;
+    private aggregator;
+    private otherFields;
+    tokenizeTopUp(params: TokenizeTopUpParams): Promise<PciTokenizeTopUpResult>;
+    tokenizeOctDestination(params: TokenizeOctDestinationParams): Promise<PciTokenizeOctResult>;
+    destroy(): void;
+}
+//# sourceMappingURL=collectGroup.d.ts.map

package/dist/collectGroup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectGroup.d.ts","sourceRoot":"","sources":["../src/collectGroup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,aAAa,EAEb,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,eAAe,CAAC;AAUvB,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC;CACjB;AAOD;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,mBAAmB;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkF;IACzG,OAAO,CAAC,KAAK,CAA2B;gBAE5B,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB;IAK3D,2EAA2E;IAC3E,KAAK,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe;IAsCjD,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,WAAW;IAIb,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAuB3E,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmBjG,OAAO,IAAI,IAAI;CAIhB"}

package/dist/collectGroup.js

@@ -0,0 +1,131 @@
+import { PciFrameChannel } from './frameChannel.js';
+const FIELDS_BY_PROFILE = {
+    topup: ['number', 'expiry', 'cvv', 'name'],
+    'oct-destination': ['number'],
+};
+/** The aggregator field — the one that gathers siblings and POSTs. */
+const AGGREGATOR = 'number';
+const randomId = () => typeof crypto !== 'undefined' && 'randomUUID' in crypto
+    ? crypto.randomUUID()
+    : `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+/**
+ * Per-field (split) Collect: one iframe per card field, arranged by the host,
+ * combining their values over a same-origin BroadcastChannel at tokenize.
+ * Exposes the same `tokenizeTopUp` / `tokenizeOctDestination` surface as the
+ * single-form `PciCollectElement`, so callers are agnostic to which they use.
+ */
+export class PciCollectGroup {
+    constructor(frameUrl, config) {
+        this.groupId = randomId();
+        this.channels = new Map();
+        this.states = {};
+        this.brand = 'unknown';
+        this.frameUrl = frameUrl;
+        this.config = config;
+    }
+    /** Create a field element. Mount it into your own container for layout. */
+    field(name) {
+        if (!FIELDS_BY_PROFILE[this.config.profile].includes(name)) {
+            throw new Error(`Field "${name}" is not part of the "${this.config.profile}" profile`);
+        }
+        if (this.channels.has(name)) {
+            throw new Error(`Field "${name}" already created for this group`);
+        }
+        const channel = new PciFrameChannel(this.frameUrl, { group: this.groupId });
+        this.channels.set(name, channel);
+        channel.onMessage(message => {
+            if (message.type !== 'change')
+                return;
+            Object.assign(this.states, message.state.fields);
+            if (name === AGGREGATOR)
+                this.brand = message.state.brand;
+            this.emitChange();
+        });
+        return {
+            mount: async (container) => {
+                await channel.mount(container);
+                await channel.request({
+                    type: 'init',
+                    config: {
+                        mode: 'collect-field',
+                        field: name,
+                        groupId: this.groupId,
+                        appearance: this.config.appearance,
+                        strings: this.config.strings,
+                    },
+                });
+            },
+            destroy: () => {
+                channel.destroy();
+                this.channels.delete(name);
+            },
+        };
+    }
+    emitChange() {
+        const active = FIELDS_BY_PROFILE[this.config.profile];
+        const fields = {};
+        let complete = true;
+        for (const f of active) {
+            const s = this.states[f];
+            fields[f] = s ?? { valid: false, touched: false };
+            if (!s?.valid)
+                complete = false;
+        }
+        this.config.onChange?.({ complete, brand: this.brand, fields });
+    }
+    aggregator() {
+        const channel = this.channels.get(AGGREGATOR);
+        if (!channel)
+            throw new Error('The card-number field is not mounted');
+        return channel;
+    }
+    otherFields() {
+        return FIELDS_BY_PROFILE[this.config.profile].filter(f => f !== AGGREGATOR);
+    }
+    async tokenizeTopUp(params) {
+        if (this.config.profile !== 'topup') {
+            throw new Error(`tokenizeTopUp is not available for profile "${this.config.profile}"`);
+        }
+        return this.aggregator().request({
+            type: 'tokenize',
+            payload: {
+                kind: 'topup',
+                bearerToken: await this.config.auth.getBearerToken(),
+                expectedFields: this.otherFields(),
+                billingDetails: {
+                    address_line1: params.billingDetails.line1,
+                    address_line2: params.billingDetails.line2,
+                    postal_code: params.billingDetails.zipCode,
+                    country: params.billingDetails.country,
+                    city: params.billingDetails.city,
+                    state: params.billingDetails.state,
+                },
+                cardholderLabel: params.label,
+            },
+        });
+    }
+    async tokenizeOctDestination(params) {
+        if (this.config.profile !== 'oct-destination') {
+            throw new Error(`tokenizeOctDestination is not available for profile "${this.config.profile}"`);
+        }
+        return this.aggregator().request({
+            type: 'tokenize',
+            payload: {
+                kind: 'oct-destination',
+                bearerToken: await this.config.auth.getBearerToken(),
+                expectedFields: this.otherFields(),
+                cardholderName: params.cardholderName,
+                cardLabel: params.cardLabel,
+                isSaved: params.isSaved,
+                isThirdParty: params.isThirdParty,
+                userId: params.userId,
+            },
+        });
+    }
+    destroy() {
+        for (const channel of this.channels.values())
+            channel.destroy();
+        this.channels.clear();
+    }
+}
+//# sourceMappingURL=collectGroup.js.map

package/dist/collectGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectGroup.js","sourceRoot":"","sources":["../src/collectGroup.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAYpD,MAAM,iBAAiB,GAAqD;IAC1E,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC;IAC1C,iBAAiB,EAAE,CAAC,QAAQ,CAAC;CAC9B,CAAC;AAEF,sEAAsE;AACtE,MAAM,UAAU,GAAwB,QAAQ,CAAC;AAiBjD,MAAM,QAAQ,GAAG,GAAW,EAAE,CAC5B,OAAO,MAAM,KAAK,WAAW,IAAI,YAAY,IAAI,MAAM;IACrD,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE;IACrB,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAQ1B,YAAY,QAAgB,EAAE,MAA6B;QAL1C,YAAO,GAAG,QAAQ,EAAE,CAAC;QACrB,aAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;QAC3D,WAAM,GAA+E,EAAE,CAAC;QACjG,UAAK,GAAiB,SAAS,CAAC;QAGtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAyB;QAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,yBAAyB,IAAI,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,kCAAkC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEjC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;YAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,IAAI,KAAK,UAAU;gBAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,KAAK,EAAE,SAAsB,EAAE,EAAE;gBACtC,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,OAAO,CAAC,OAAO,CAAC;oBACpB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE;wBACN,IAAI,EAAE,eAAe;wBACrB,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;wBAClC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;qBAC7B;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,GAAG,EAAE;gBACZ,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,UAAU;QAChB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAoC,EAAE,CAAC;QACnD,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,CAAC,EAAE,KAAK;gBAAE,QAAQ,GAAG,KAAK,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,UAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW;QACjB,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAyB;YACvD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACpD,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE;gBAClC,cAAc,EAAE;oBACd,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;oBAC1C,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;oBAC1C,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO;oBAC1C,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO;oBACtC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI;oBAChC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;iBACnC;gBACD,eAAe,EAAE,MAAM,CAAC,KAAK;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAoC;QAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAuB;YACrD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACpD,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE;gBAClC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/frameChannel.d.ts

@@ -0,0 +1,46 @@
+import { type PciFrameError, type PciFrameToHostMessage, type PciHostToFrameMessage } from './protocol.js';
+export declare class PciFrameRequestError extends Error {
+    readonly status?: number;
+    constructor(error: PciFrameError);
+}
+/** `Omit` over a union collapses to the common members; this distributes. */
+type DistributiveOmit<T, K extends PropertyKey> = T extends unknown ? Omit<T, K> : never;
+export interface PciFrameChannelOptions {
+    /** Grant `allow="clipboard-write"` — only the reveal frame's in-frame copy
+     *  buttons need it; collect frames must not (least privilege). */
+    allowClipboard?: boolean;
+}
+/**
+ * Owns one PCI iframe: creates it, verifies every incoming message against
+ * (source window, origin, channel id), and correlates request/response pairs.
+ */
+export declare class PciFrameChannel {
+    private readonly channelId;
+    private readonly frameOrigin;
+    private readonly frameUrl;
+    private iframe;
+    private readyPromise;
+    private readonly pending;
+    private readonly listeners;
+    private readonly onWindowMessage;
+    private destroyed;
+    private readonly extraFragment;
+    private readonly allowClipboard;
+    private readyTimer;
+    private readyListener;
+    private readyReject;
+    constructor(frameUrl: string, extraFragment?: Record<string, string>, options?: PciFrameChannelOptions);
+    private removeReadyListener;
+    /** Subscribe to unsolicited frame events (change/resize/reveal-state). */
+    onMessage(listener: (message: PciFrameToHostMessage) => void): void;
+    /** Creates the iframe inside `container` and resolves once the frame script
+     *  announced itself with `ready`. */
+    mount(container: HTMLElement): Promise<void>;
+    /** Fire-and-await request with `requestId` correlation. */
+    request<T>(message: DistributiveOmit<PciHostToFrameMessage, 'v' | 'channel' | 'requestId'>): Promise<T>;
+    setHeight(height: number): void;
+    destroy(): void;
+    private handleMessage;
+}
+export {};
+//# sourceMappingURL=frameChannel.d.ts.map

package/dist/frameChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameChannel.d.ts","sourceRoot":"","sources":["../src/frameChannel.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAKvB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,KAAK,EAAE,aAAa;CAKjC;AAOD,6EAA6E;AAC7E,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAQzF,MAAM,WAAW,sBAAsB;IACrC;sEACkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuD;IACjF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsD;IACtF,OAAO,CAAC,SAAS,CAAS;IAE1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAGzC,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,aAAa,CAA2D;IAChF,OAAO,CAAC,WAAW,CAAyC;gBAG1D,QAAQ,EAAE,MAAM,EAChB,aAAa,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EAC1C,OAAO,GAAE,sBAA2B;IAQtC,OAAO,CAAC,mBAAmB;IAO3B,0EAA0E;IAC1E,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,GAAG,IAAI;IAInE;yCACqC;IACrC,KAAK,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAoD5C,2DAA2D;IAC3D,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,qBAAqB,EAAE,GAAG,GAAG,SAAS,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA2BvG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,OAAO,IAAI,IAAI;IAoBf,OAAO,CAAC,aAAa;CA2BtB"}

package/dist/frameChannel.js

@@ -0,0 +1,180 @@
+import { PCI_PROTOCOL_VERSION, } from './protocol.js';
+const READY_TIMEOUT_MS = 10000;
+const REQUEST_TIMEOUT_MS = 30000;
+export class PciFrameRequestError extends Error {
+    constructor(error) {
+        super(error.message);
+        this.name = 'PciFrameRequestError';
+        this.status = error.status;
+    }
+}
+const randomId = () => typeof crypto !== 'undefined' && 'randomUUID' in crypto
+    ? crypto.randomUUID()
+    : `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+/**
+ * Owns one PCI iframe: creates it, verifies every incoming message against
+ * (source window, origin, channel id), and correlates request/response pairs.
+ */
+export class PciFrameChannel {
+    constructor(frameUrl, extraFragment = {}, options = {}) {
+        this.channelId = randomId();
+        this.iframe = null;
+        this.readyPromise = null;
+        this.pending = new Map();
+        this.listeners = [];
+        this.onWindowMessage = (event) => this.handleMessage(event);
+        this.destroyed = false;
+        // Ready-handshake bookkeeping, so destroy() can clean them up.
+        this.readyTimer = null;
+        this.readyListener = null;
+        this.readyReject = null;
+        this.frameOrigin = new URL(frameUrl, window.location.href).origin;
+        this.frameUrl = frameUrl;
+        this.extraFragment = extraFragment;
+        this.allowClipboard = options.allowClipboard ?? false;
+    }
+    removeReadyListener() {
+        if (!this.readyListener)
+            return;
+        const i = this.listeners.indexOf(this.readyListener);
+        if (i >= 0)
+            this.listeners.splice(i, 1);
+        this.readyListener = null;
+    }
+    /** Subscribe to unsolicited frame events (change/resize/reveal-state). */
+    onMessage(listener) {
+        this.listeners.push(listener);
+    }
+    /** Creates the iframe inside `container` and resolves once the frame script
+     *  announced itself with `ready`. */
+    mount(container) {
+        if (this.iframe)
+            return this.readyPromise ?? Promise.resolve();
+        window.addEventListener('message', this.onWindowMessage);
+        const iframe = document.createElement('iframe');
+        // Channel id + expected parent origin travel in the fragment: not sent to
+        // the server, not logged in access logs, readable by the frame script.
+        // The frame targets all its postMessages at `parent` and rejects `init`
+        // from any other origin.
+        const extra = Object.entries(this.extraFragment)
+            .map(([k, v]) => `&${k}=${encodeURIComponent(v)}`)
+            .join('');
+        iframe.src = `${this.frameUrl}#channel=${this.channelId}&parent=${encodeURIComponent(window.location.origin)}${extra}`;
+        iframe.title = 'Wirex secure card frame';
+        // Clipboard permission for in-frame copy buttons — reveal only (collect
+        // frames never write the clipboard).
+        if (this.allowClipboard)
+            iframe.allow = 'clipboard-write';
+        iframe.style.border = '0';
+        iframe.style.display = 'block';
+        iframe.style.width = '100%';
+        iframe.style.height = '0px';
+        // Let the host's (dark) background show through the frame; without this
+        // Chrome paints an opaque white iframe backdrop.
+        iframe.style.background = 'transparent';
+        iframe.style.colorScheme = 'normal';
+        this.iframe = iframe;
+        this.readyPromise = new Promise((resolve, reject) => {
+            this.readyReject = reject;
+            this.readyTimer = setTimeout(() => {
+                this.removeReadyListener();
+                reject(new Error('PCI frame did not become ready in time'));
+            }, READY_TIMEOUT_MS);
+            const listener = (message) => {
+                if (message.type === 'ready') {
+                    if (this.readyTimer)
+                        clearTimeout(this.readyTimer);
+                    this.removeReadyListener();
+                    this.readyReject = null;
+                    resolve();
+                }
+            };
+            this.readyListener = listener;
+            this.listeners.push(listener);
+        });
+        container.appendChild(iframe);
+        return this.readyPromise;
+    }
+    /** Fire-and-await request with `requestId` correlation. */
+    request(message) {
+        const contentWindow = this.iframe?.contentWindow;
+        if (!contentWindow)
+            return Promise.reject(new Error('PCI frame is not mounted'));
+        const requestId = randomId();
+        const promise = new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(requestId);
+                reject(new Error('PCI frame request timed out'));
+            }, REQUEST_TIMEOUT_MS);
+            this.pending.set(requestId, {
+                resolve: resolve,
+                reject,
+                timer,
+            });
+        });
+        const envelope = {
+            ...message,
+            requestId,
+            v: PCI_PROTOCOL_VERSION,
+            channel: this.channelId,
+        };
+        contentWindow.postMessage(envelope, this.frameOrigin);
+        return promise;
+    }
+    setHeight(height) {
+        if (this.iframe)
+            this.iframe.style.height = `${Math.max(0, Math.ceil(height))}px`;
+    }
+    destroy() {
+        if (this.destroyed)
+            return;
+        this.destroyed = true;
+        window.removeEventListener('message', this.onWindowMessage);
+        // Settle the ready handshake so a destroyed frame's timeout can't fire and
+        // clobber a freshly-mounted frame's state.
+        if (this.readyTimer)
+            clearTimeout(this.readyTimer);
+        this.removeReadyListener();
+        this.readyReject?.(new Error('PCI frame destroyed'));
+        this.readyReject = null;
+        for (const [, pendingRequest] of this.pending) {
+            clearTimeout(pendingRequest.timer);
+            pendingRequest.reject(new Error('PCI frame destroyed'));
+        }
+        this.pending.clear();
+        this.listeners.length = 0;
+        this.iframe?.remove();
+        this.iframe = null;
+    }
+    handleMessage(event) {
+        // Provenance checks: owned window + expected origin + our channel id.
+        if (!this.iframe || event.source !== this.iframe.contentWindow)
+            return;
+        if (event.origin !== this.frameOrigin)
+            return;
+        const message = event.data;
+        if (!message || message.v !== PCI_PROTOCOL_VERSION || message.channel !== this.channelId)
+            return;
+        if (message.type === 'resize') {
+            this.setHeight(message.height);
+            return;
+        }
+        if (message.type === 'result') {
+            const pendingRequest = this.pending.get(message.requestId);
+            if (!pendingRequest)
+                return;
+            this.pending.delete(message.requestId);
+            clearTimeout(pendingRequest.timer);
+            if (message.ok) {
+                pendingRequest.resolve(message.data);
+            }
+            else {
+                pendingRequest.reject(new PciFrameRequestError(message.error));
+            }
+            return;
+        }
+        for (const listener of this.listeners)
+            listener(message);
+    }
+}
+//# sourceMappingURL=frameChannel.js.map

package/dist/frameChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameChannel.js","sourceRoot":"","sources":["../src/frameChannel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAIrB,MAAM,eAAe,CAAC;AAEvB,MAAM,gBAAgB,GAAG,KAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAElC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG7C,YAAY,KAAoB;QAC9B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,GAAW,EAAE,CAC5B,OAAO,MAAM,KAAK,WAAW,IAAI,YAAY,IAAI,MAAM;IACrD,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE;IACrB,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAiB7D;;;GAGG;AACH,MAAM,OAAO,eAAe;IAmB1B,YACE,QAAgB,EAChB,gBAAwC,EAAE,EAC1C,UAAkC,EAAE;QArBrB,cAAS,GAAG,QAAQ,EAAE,CAAC;QAGhC,WAAM,GAA6B,IAAI,CAAC;QACxC,iBAAY,GAAyB,IAAI,CAAC;QACjC,YAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC5C,cAAS,GAAoD,EAAE,CAAC;QAChE,oBAAe,GAAG,CAAC,KAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9E,cAAS,GAAG,KAAK,CAAC;QAK1B,+DAA+D;QACvD,eAAU,GAAyC,IAAI,CAAC;QACxD,kBAAa,GAAsD,IAAI,CAAC;QACxE,gBAAW,GAAoC,IAAI,CAAC;QAO1D,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACxD,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,SAAS,CAAC,QAAkD;QAC1D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;yCACqC;IACrC,KAAK,CAAC,SAAsB;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAE/D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;aAC7C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,YAAY,IAAI,CAAC,SAAS,WAAW,kBAAkB,CAClF,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,GAAG,KAAK,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,GAAG,yBAAyB,CAAC;QACzC,wEAAwE;QACxE,qCAAqC;QACrC,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,CAAC,KAAK,GAAG,iBAAiB,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QAC5B,wEAAwE;QACxE,iDAAiD;QACjD,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,aAAa,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,CAAC,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;YAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACrB,MAAM,QAAQ,GAAG,CAAC,OAA8B,EAAE,EAAE;gBAClD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,IAAI,IAAI,CAAC,UAAU;wBAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACnD,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAI,OAA+E;QACxF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;QACjD,IAAI,CAAC,aAAa;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAEjF,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACnD,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC1B,OAAO,EAAE,OAAkC;gBAC3C,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG;YACf,GAAG,OAAO;YACV,SAAS;YACT,CAAC,EAAE,oBAAoB;YACvB,OAAO,EAAE,IAAI,CAAC,SAAS;SACC,CAAC;QAC3B,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IACpF,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5D,2EAA2E;QAC3E,2CAA2C;QAC3C,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,KAAK,MAAM,CAAC,EAAE,cAAc,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnC,cAAc,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAEO,aAAa,CAAC,KAAmB;QACvC,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAyC,CAAC;QAChE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,KAAK,oBAAoB,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO;QAEjG,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,cAAc;gBAAE,OAAO;YAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/frameUrl.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Frame-URL building shared by every capability package (topup / oct / reveal)
+ * and the umbrella `createPciSdk` factory.
+ */
+export interface PciSdkConfig {
+    /**
+     * Origin serving the PCI frames — the dedicated PCI SDK service
+     * (`sdk-service/`, prod `https://card-js.wirexapp.tech`). **Required**,
+     * and it MUST be a different origin than the host app: that cross-origin
+     * boundary is the entire Same-Origin-Policy isolation the SDK relies on. There
+     * is deliberately no same-origin fallback — a same-origin frame would let
+     * host-page XSS read cardholder data, nullifying the SDK.
+     * TODO(pci-sdk): prod split — loader on `js.<domain>`, cookieless frames on
+     * `frames.<domain>` (docs/DESIGN.md §5.5.1).
+     */
+    frameOrigin: string;
+    /** Path prefix of the frame documents on `frameOrigin` (the service serves
+     *  them at the root, so this is empty by default). */
+    framePath?: string;
+    /**
+     * Client identifier, added to the frame URL as `?client=<id>`. The frame host
+     * resolves it to that client's registered parent origins and emits a
+     * per-client `frame-ancestors` — so each partner embeds the frame under its
+     * own domain without any other partner's origins being exposed. NON-SECRET
+     * and NOT auth: it only selects which (closed) allowlist the browser enforces,
+     * so spoofing another client's id cannot authorise a new embedding origin.
+     * Omit for Wirex's own apps (they resolve to the Wirex first-party domains).
+     */
+    clientId?: string;
+}
+export type PciFrameDocument = 'collect' | 'collect-field' | 'reveal';
+export declare const assertFrameOrigin: (config: PciSdkConfig) => void;
+/** Build the URL of one frame document. `client` MUST be a query param, not the
+ *  URL fragment: the frame host reads it server-side to emit the per-client
+ *  `frame-ancestors` header, and the fragment is never sent to the server. The
+ *  channel/parent fragment is appended afterwards by `PciFrameChannel`. */
+export declare const buildFrameUrl: (config: PciSdkConfig, document: PciFrameDocument) => string;
+//# sourceMappingURL=frameUrl.d.ts.map

package/dist/frameUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameUrl.d.ts","sourceRoot":"","sources":["../src/frameUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;OASG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;0DACsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,eAAe,GAAG,QAAQ,CAAC;AAEtE,eAAO,MAAM,iBAAiB,GAAI,QAAQ,YAAY,KAAG,IAOxD,CAAC;AAEF;;;2EAG2E;AAC3E,eAAO,MAAM,aAAa,GAAI,QAAQ,YAAY,EAAE,UAAU,gBAAgB,KAAG,MAKhF,CAAC"}

package/dist/frameUrl.js

@@ -0,0 +1,21 @@
+/**
+ * Frame-URL building shared by every capability package (topup / oct / reveal)
+ * and the umbrella `createPciSdk` factory.
+ */
+export const assertFrameOrigin = (config) => {
+    if (!config.frameOrigin) {
+        throw new Error('PCI SDK: `frameOrigin` is required and must be a dedicated origin, different from the host app. ' +
+            'The Same-Origin-Policy isolation depends on it; a same-origin frame would expose cardholder data to host-page XSS.');
+    }
+};
+/** Build the URL of one frame document. `client` MUST be a query param, not the
+ *  URL fragment: the frame host reads it server-side to emit the per-client
+ *  `frame-ancestors` header, and the fragment is never sent to the server. The
+ *  channel/parent fragment is appended afterwards by `PciFrameChannel`. */
+export const buildFrameUrl = (config, document) => {
+    assertFrameOrigin(config);
+    const framePath = config.framePath ?? '';
+    const query = config.clientId ? `?client=${encodeURIComponent(config.clientId)}` : '';
+    return `${config.frameOrigin}${framePath}/${document}.html${query}`;
+};
+//# sourceMappingURL=frameUrl.js.map

package/dist/frameUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameUrl.js","sourceRoot":"","sources":["../src/frameUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+BH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAoB,EAAQ,EAAE;IAC9D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,kGAAkG;YAChG,oHAAoH,CACvH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;2EAG2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAoB,EAAE,QAA0B,EAAU,EAAE;IACxF,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,OAAO,GAAG,MAAM,CAAC,WAAW,GAAG,SAAS,IAAI,QAAQ,QAAQ,KAAK,EAAE,CAAC;AACtE,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@wirexapp/card-sdk-core` — shared foundation of the Wirex PCI card SDK:
+ * the postMessage protocol (single source of the protocol version), the frame
+ * channel (iframe lifecycle + origin/channel-verified RPC), frame-URL building,
+ * and the collect machinery both profile packages wrap.
+ *
+ * Partners install the capability packages (`@wirexapp/card-topup-web`,
+ * `@wirexapp/card-oct-web`, `@wirexapp/card-reveal-web`) or the umbrella
+ * (`@wirexapp/card-sdk-web`) — this package is their common dependency, not an
+ * integration surface of its own.
+ */
+export type { PciCollectAuth, PciCollectElementConfig, PciCollectTokenizer, TokenizeOctDestinationParams, TokenizeTopUpParams, } from './collectElement.js';
+export { PciCollectElement } from './collectElement.js';
+export type { PciCollectField, PciCollectGroupConfig } from './collectGroup.js';
+export { PciCollectGroup } from './collectGroup.js';
+export { PciFrameChannel, PciFrameRequestError } from './frameChannel.js';
+export type { PciFrameDocument, PciSdkConfig } from './frameUrl.js';
+export { assertFrameOrigin, buildFrameUrl } from './frameUrl.js';
+export type { PciAppearance, PciAppearanceVariables, PciBrandBadgeAppearance, PciCardBrand, PciCollectChangeState, PciCollectFieldInitConfig, PciCollectFieldName, PciCollectInitConfig, PciCollectProfile, PciFrameAuth, PciFrameError, PciFrameStrings, PciFrameToHostMessage, PciHostToFrameMessage, PciInitConfig, PciRevealField, PciRevealInitConfig, PciRevealState, PciRevealStatus, PciTokenizeOctRequest, PciTokenizeOctResult, PciTokenizeRequest, PciTokenizeTopUpRequest, PciTokenizeTopUpResult, } from './protocol.js';
+export { PCI_PROTOCOL_VERSION } from './protocol.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,YAAY,EACV,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACjE,YAAY,EACV,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+/**
+ * `@wirexapp/card-sdk-core` — shared foundation of the Wirex PCI card SDK:
+ * the postMessage protocol (single source of the protocol version), the frame
+ * channel (iframe lifecycle + origin/channel-verified RPC), frame-URL building,
+ * and the collect machinery both profile packages wrap.
+ *
+ * Partners install the capability packages (`@wirexapp/card-topup-web`,
+ * `@wirexapp/card-oct-web`, `@wirexapp/card-reveal-web`) or the umbrella
+ * (`@wirexapp/card-sdk-web`) — this package is their common dependency, not an
+ * integration surface of its own.
+ */
+export { PciCollectElement } from './collectElement.js';
+export { PciCollectGroup } from './collectGroup.js';
+export { PciFrameChannel, PciFrameRequestError } from './frameChannel.js';
+export { assertFrameOrigin, buildFrameUrl } from './frameUrl.js';
+export { PCI_PROTOCOL_VERSION } from './protocol.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA2BjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,298 @@
+/**
+ * postMessage protocol between the host-side SDK and the PCI frames.
+ *
+ * The frames live in `apps/web/sdk-service/frames-src/src/*` (TypeScript) and
+ * `import type` these same definitions, so the message SHAPES cannot drift. The
+ * `PCI_PROTOCOL_VERSION` value is injected into the frame bundle by esbuild from
+ * `protocolVersion.json` (a single source); frames reject mismatched versions.
+ * Note: esbuild does not type-check, so the shape guarantee is only enforced by
+ * the frame service's separate `tsc` (see apps/web/sdk-service/tsconfig.json).
+ *
+ * Security model: every message carries the per-mount `channel` id the host
+ * generated; the host additionally verifies `event.source` is the owned iframe's
+ * contentWindow and `event.origin` is the configured frame origin. The frame
+ * binds itself to the first `init` sender and its origin. The frames are served
+ * cross-origin by the PCI SDK service (`apps/web/sdk-service`), so this is a real
+ * origin boundary — host-page scripts cannot read the frame contents.
+ */
+/** Single source of truth for the protocol version, shared with the frame
+ *  build in `apps/web/sdk-service` (esbuild reads the same JSON and injects it),
+ *  so the host SDK and the vanilla frames can never drift. */
+export declare const PCI_PROTOCOL_VERSION: number;
+/** Collect profiles — which card fields the frame renders. */
+export type PciCollectProfile = 'topup' | 'oct-destination';
+/** Individual card field, for the per-field (split) Collect frames. */
+export type PciCollectFieldName = 'number' | 'expiry' | 'cvv' | 'name';
+export type PciCardBrand = 'Visa' | 'MasterCard' | 'unknown';
+/** Non-sensitive field state reported to the host while the user types. */
+export interface PciCollectChangeState {
+    /** All rendered fields pass validation. */
+    complete: boolean;
+    brand: PciCardBrand;
+    /** Per-field validity; keys depend on the profile. */
+    fields: Record<string, {
+        valid: boolean;
+        touched: boolean;
+    }>;
+}
+export type PciRevealStatus = 'loading' | 'ready' | 'error';
+export interface PciRevealState {
+    status: PciRevealStatus;
+    /** Present when status === 'error'; safe (non-sensitive) message. */
+    errorMessage?: string;
+}
+/** Translated UI strings passed into the frame (labels are not sensitive).
+ *  Built host-side with Lingui — the frame has no i18n runtime.
+ *  TODO(pci-sdk): replace with locale packs shipped with the frame bundle. */
+export type PciFrameStrings = Record<string, string>;
+/**
+ * Whitelisted appearance tokens — the ONLY styling input the frames accept.
+ *
+ * Modeled on Stripe's Elements `appearance.variables` / Marqeta's style
+ * objects: named tokens with per-type validation, never raw CSS. Arbitrary
+ * CSS inside a PCI frame is an exfiltration channel (attribute-selector +
+ * `url()` beacons can leak field values character by character, custom fonts
+ * leak via ligature/unicode-range side channels), so:
+ *  - no selectors, no stylesheets, no `url()`-capable values;
+ *  - every token is validated INSIDE the frame against its value type
+ *    (color / length / font stack) — the host SDK types are convenience only,
+ *    a compromised host page must not be able to smuggle CSS through;
+ *  - values are applied via CSSOM custom properties, never string-built
+ *    `<style>` text, so there is no injection breakout.
+ * `fontFamily` resolves against fonts available inside the frame (system /
+ * web-safe). TODO(pci-sdk): custom brand fonts need a Stripe-style `fonts`
+ * option where the FRAME fetches an allowlisted `@font-face` stylesheet —
+ * never host-supplied CSS.
+ */
+export interface PciAppearanceVariables {
+    colorText?: string;
+    colorLabel?: string;
+    colorPlaceholder?: string;
+    colorError?: string;
+    /** Focus ring / accent (input border on focus, copy buttons). */
+    colorFocus?: string;
+    /** Input (field pill) background. */
+    colorBackground?: string;
+    colorBorder?: string;
+    /** The frame document's own background. Defaults to `transparent` so the
+     *  host surface (e.g. a gradient panel) shows through; set an opaque colour
+     *  to render a solid card behind the fields. */
+    surfaceColor?: string;
+    /** Comma-separated font stack; each family name is validated. When `fontUrl`
+     *  is set, the FIRST family here is the custom face's name. */
+    fontFamily?: string;
+    /** Optional custom brand font: an `https://` URL to a font FILE
+     *  (woff2/woff/otf/ttf) on a CDN. The frame builds a single `@font-face` from
+     *  it (never a host-supplied stylesheet), names it after `fontFamily`'s first
+     *  family, and loads it — subject to the frame host's `font-src` allowlist for
+     *  that client. NOT raw CSS: only a validated file URL is accepted. */
+    fontUrl?: string;
+    /** Multiple weight/style faces of the brand font — real weights instead of
+     *  faux-bolding a single file. Each `url` is an https font FILE; `weight` /
+     *  `style` become the `@font-face` descriptors. All faces share the first
+     *  `fontFamily` family name. Takes precedence over `fontUrl`. */
+    fontFaces?: Array<{
+        url: string;
+        weight?: string;
+        style?: 'normal' | 'italic';
+    }>;
+    fontSizeBase?: string;
+    fontSizeLabel?: string;
+    /** Line height for value / input text (e.g. `24px`). */
+    lineHeightBase?: string;
+    /** Line height for labels (e.g. `16px`). */
+    lineHeightLabel?: string;
+    /** Font weight for value / input text (`100`–`900`, `normal`, `bold`; e.g. `600`). */
+    fontWeightBase?: string;
+    /** Font weight for labels (e.g. `400`). */
+    fontWeightLabel?: string;
+    borderRadius?: string;
+    borderWidth?: string;
+    /** Vertical gap between fields/rows. */
+    spacingUnit?: string;
+    /** Min height of an input control (the field "pill"). */
+    controlMinHeight?: string;
+}
+/**
+ * Card-brand indicator (Visa/Mastercard) shown inside the card-number field.
+ * Same trust model as `PciAppearanceVariables`: every value is re-validated
+ * inside the frame (color / length grammars), the logo artwork itself is
+ * bundled with the frame — the host can only pick among fixed presentations,
+ * never inject markup.
+ */
+export interface PciBrandBadgeAppearance {
+    /** Render the brand indicator at all. Default `true`. */
+    show?: boolean;
+    /** `logo` — the brand mark (SVG bundled in the frame); `text` — the brand
+     *  name as plain text (the pre-logo presentation). Default `logo`. */
+    style?: 'logo' | 'text';
+    /** `color` — original brand colours; `mono` — single-colour mark drawn in
+     *  the label colour (`colorLabel`). Logo style only. Default `color`. */
+    tone?: 'color' | 'mono';
+    /** Badge plate colour behind the mark. Default `transparent` (no plate);
+     *  set e.g. `#FFFFFF` for a white chip like the host app's saved-card rows. */
+    background?: string;
+    /** Corner radius of the plate — a length or percentage. `50%` (default)
+     *  gives a circle, `4px` a rounded square. */
+    borderRadius?: string;
+    /** Plate size (width = height). Default `24px`. */
+    size?: string;
+    /** Fine-tune position from the default (vertically centered, 16px from the
+     *  field's right edge). Signed lengths; positive `offsetX` moves right,
+     *  positive `offsetY` moves down. Default `0px`. */
+    offsetX?: string;
+    offsetY?: string;
+}
+export interface PciAppearance {
+    theme?: 'light' | 'dark';
+    variables?: PciAppearanceVariables;
+    /** Brand indicator in the card-number field; see `PciBrandBadgeAppearance`. */
+    brandBadge?: PciBrandBadgeAppearance;
+}
+/** Auth material the frame needs to reach the backend directly. By design the
+ *  frame uses the caller's access token (bearer); reveal adds the existing
+ *  `action_token`. This is the model for Wirex apps and B2B partners alike (the
+ *  partner supplies its own user's bearer) — no publishable-key / session JWT. */
+/**
+ * Per-user auth material passed from the host into a frame. Note there are NO
+ * API URLs here: the frame service owns its own endpoints (injected as
+ * `window.__WX_ENDPOINTS__`), so the host can never point card-data requests at
+ * another origin. Only the user's session credentials — which a cross-origin
+ * frame cannot obtain itself — flow in.
+ */
+export interface PciFrameAuth {
+    bearerToken: string;
+    userEmail?: string;
+    userWallet?: string;
+}
+export interface PciCollectInitConfig {
+    mode: 'collect';
+    profile: PciCollectProfile;
+    auth: PciFrameAuth;
+    appearance?: PciAppearance;
+    strings?: PciFrameStrings;
+}
+/**
+ * Per-field (split) Collect frame — one iframe renders a single card field,
+ * the host arranges them in its own layout (Stripe split-Elements / VGS /
+ * Braintree model). Fields in the same `groupId` combine their values for
+ * tokenization over a same-origin BroadcastChannel — the value never reaches
+ * the host page. Only the aggregator field (`number`) POSTs; the target URL is
+ * the frame service's own `window.__WX_ENDPOINTS__`, not host-supplied. It
+ * receives the fresh bearer with the `tokenize` message.
+ */
+export interface PciCollectFieldInitConfig {
+    mode: 'collect-field';
+    field: PciCollectFieldName;
+    /** Shared BroadcastChannel group id; siblings aggregate values under it. */
+    groupId: string;
+    appearance?: PciAppearance;
+    strings?: PciFrameStrings;
+}
+/** A reveal row. Used to render one field per iframe (`fields`). */
+export type PciRevealField = 'cardholder' | 'number' | 'expiry' | 'cvv' | 'pin';
+export interface PciRevealInitConfig {
+    mode: 'reveal';
+    auth: PciFrameAuth;
+    cardId: string;
+    /** One-shot step-up token minted by the host (wallet signature); sent with
+     *  the bearer to the reveal endpoints. This is the intended auth, not a stopgap. */
+    actionToken: string;
+    fetchDetails: boolean;
+    fetchCvv: boolean;
+    /** Exact rows to render, in order. When set, drives which values are fetched
+     *  (number/expiry → `/details`, cvv → `/cvv`, cardholder → none) and overrides
+     *  `fetchDetails`/`fetchCvv`. Used to put ONE field per iframe. */
+    fields?: PciRevealField[];
+    /** Shown as a plain row; comes from the (non-sensitive) cards list. */
+    cardholderName?: string;
+    appearance?: PciAppearance;
+    strings?: PciFrameStrings;
+}
+export type PciInitConfig = PciCollectInitConfig | PciCollectFieldInitConfig | PciRevealInitConfig;
+/** Extra non-sensitive data merged into the tokenize call by the frame. */
+export interface PciTokenizeTopUpRequest {
+    kind: 'topup';
+    /** snake_case fragment of the card-service DTO (non-CHD fields only). */
+    billingDetails: {
+        address_line1: string;
+        address_line2?: string;
+        postal_code: string;
+        country: string;
+        city: string;
+        state?: string;
+    };
+    cardholderLabel?: string;
+}
+export interface PciTokenizeOctRequest {
+    kind: 'oct-destination';
+    cardholderName: string;
+    cardLabel: string;
+    isSaved: boolean;
+    isThirdParty: boolean;
+    userId?: string;
+}
+export type PciTokenizeRequest = (PciTokenizeTopUpRequest | PciTokenizeOctRequest) & {
+    /** Fresh bearer, re-fetched at tokenize time (init's copy may be stale). */
+    bearerToken: string;
+    /** Per-field mode only: the sibling fields the aggregator must gather over
+     *  the BroadcastChannel before it POSTs (empty for single-form frames and
+     *  for the OCT profile, where only `number` exists). */
+    expectedFields?: PciCollectFieldName[];
+};
+/** What the frame returns to the host — token + out-of-PCI-scope metadata only. */
+export interface PciTokenizeTopUpResult {
+    cardId: string;
+    brand: PciCardBrand;
+    bin: string;
+    last4: string;
+    expiryMonth: number;
+    expiryYear: number;
+}
+export interface PciTokenizeOctResult {
+    externalCardId: string;
+    brand: PciCardBrand;
+    bin: string;
+    last4: string;
+}
+export interface PciFrameError {
+    message: string;
+    status?: number;
+}
+interface Envelope {
+    v: typeof PCI_PROTOCOL_VERSION;
+    channel: string;
+}
+export type PciHostToFrameMessage = Envelope & ({
+    type: 'init';
+    requestId: string;
+    config: PciInitConfig;
+} | {
+    type: 'tokenize';
+    requestId: string;
+    payload: PciTokenizeRequest;
+});
+export type PciFrameToHostMessage = Envelope & ({
+    type: 'ready';
+} | {
+    type: 'change';
+    state: PciCollectChangeState;
+} | {
+    type: 'resize';
+    height: number;
+} | {
+    type: 'reveal-state';
+    state: PciRevealState;
+} | {
+    type: 'result';
+    requestId: string;
+    ok: true;
+    data: unknown;
+} | {
+    type: 'result';
+    requestId: string;
+    ok: false;
+    error: PciFrameError;
+});
+export {};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH;;8DAE8D;AAC9D,eAAO,MAAM,oBAAoB,EAAE,MAAwB,CAAC;AAE5D,8DAA8D;AAC9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAE5D,uEAAuE;AACvE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,2CAA2C;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;IACxB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;8EAE8E;AAC9E,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAErD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;oDAEgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;mEAC+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;2EAIuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;qEAGiE;IACjE,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;KAAE,CAAC,CAAC;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;0EACsE;IACtE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;6EACyE;IACzE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB;mFAC+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;kDAC8C;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;wDAEoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,uBAAuB,CAAC;CACtC;AAED;;;kFAGkF;AAClF;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,oEAAoE;AACpE,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC;AAEhF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf;wFACoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB;;uEAEmE;IACnE,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1B,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,aAAa,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAEnG,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,yEAAyE;IACzE,cAAc,EAAE;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,uBAAuB,GAAG,qBAAqB,CAAC,GAAG;IACnF,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB;;4DAEwD;IACxD,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACxC,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,QAAQ;IAChB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAC1C,CACI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CACvE,CAAC;AAEJ,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAC1C,CACI;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CACzE,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,23 @@
+/**
+ * postMessage protocol between the host-side SDK and the PCI frames.
+ *
+ * The frames live in `apps/web/sdk-service/frames-src/src/*` (TypeScript) and
+ * `import type` these same definitions, so the message SHAPES cannot drift. The
+ * `PCI_PROTOCOL_VERSION` value is injected into the frame bundle by esbuild from
+ * `protocolVersion.json` (a single source); frames reject mismatched versions.
+ * Note: esbuild does not type-check, so the shape guarantee is only enforced by
+ * the frame service's separate `tsc` (see apps/web/sdk-service/tsconfig.json).
+ *
+ * Security model: every message carries the per-mount `channel` id the host
+ * generated; the host additionally verifies `event.source` is the owned iframe's
+ * contentWindow and `event.origin` is the configured frame origin. The frame
+ * binds itself to the first `init` sender and its origin. The frames are served
+ * cross-origin by the PCI SDK service (`apps/web/sdk-service`), so this is a real
+ * origin boundary — host-page scripts cannot read the frame contents.
+ */
+import { version as protocolVersion } from './protocolVersion.js';
+/** Single source of truth for the protocol version, shared with the frame
+ *  build in `apps/web/sdk-service` (esbuild reads the same JSON and injects it),
+ *  so the host SDK and the vanilla frames can never drift. */
+export const PCI_PROTOCOL_VERSION = protocolVersion;
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAElE;;8DAE8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAW,eAAe,CAAC"}

package/dist/protocolVersion.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Single source of the postMessage protocol version, shared by the loader
+ * packages (imported here) and the frame bundles (the frame build in
+ * `sdk-service/scripts/build-frames.mjs` reads this file and injects the
+ * value as `__PCI_PROTOCOL_VERSION__`). Bump on breaking protocol changes.
+ *
+ * A plain TS module (not JSON) so the published ESM needs no JSON import
+ * attributes — plain-Node consumers resolve it like any other module.
+ */
+export declare const version = 1;
+//# sourceMappingURL=protocolVersion.d.ts.map

package/dist/protocolVersion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocolVersion.d.ts","sourceRoot":"","sources":["../src/protocolVersion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,IAAI,CAAC"}

package/dist/protocolVersion.js

@@ -0,0 +1,11 @@
+/**
+ * Single source of the postMessage protocol version, shared by the loader
+ * packages (imported here) and the frame bundles (the frame build in
+ * `sdk-service/scripts/build-frames.mjs` reads this file and injects the
+ * value as `__PCI_PROTOCOL_VERSION__`). Bump on breaking protocol changes.
+ *
+ * A plain TS module (not JSON) so the published ESM needs no JSON import
+ * attributes — plain-Node consumers resolve it like any other module.
+ */
+export const version = 1;
+//# sourceMappingURL=protocolVersion.js.map

package/dist/protocolVersion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocolVersion.js","sourceRoot":"","sources":["../src/protocolVersion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@wirexapp/card-sdk-core",
+  "version": "0.1.0-beta.0",
+  "type": "module",
+  "description": "Shared foundation of the Wirex PCI card SDK: postMessage protocol, frame channel, frame-URL building, collect machinery. CHD-free.",
+  "license": "UNLICENSED",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public",
+    "main": "./dist/index.js",
+    "module": "./dist/index.js",
+    "types": "./dist/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "yarn run -T tsc --noEmit",
+    "prepublishOnly": "yarn clean && yarn build"
+  }
+}