Your backend                         TagadaPay                         Your frontend
────────────                         ─────────                         ─────────────
1. createSession(…)           ───►   session + embed URL
2. return url to client       ───────────────────────────────►   3. mount <iframe src=url>
                                                                  4. merchant completes KYB
                              ◄── postMessage: complete / exit ── 5. listen + unmount
6. provision / poll TPA       ◄── webhooks (optional)

const partner = new Tagada(process.env.TAGADA_PARTNER_KEY!);

const session = await partner.partners.processing.onboarding.createSession({
  // Link to a CRM merchant you already created (recommended)
  accountId: 'acc_xxx',
  // Or let Tagada create/reuse a TPA from your external id
  externalRef: 'merchant_42_eu',
  legalName: 'Acme SAS',
  country: 'FR',
  currency: 'EUR',
  // Optional: pin acquirer when you are a processing partner
  // acquirer: 'adyen',
  // Domains allowed to frame the embed (CSP frame-ancestors)
  allowedOrigins: ['https://app.yourproduct.com'],
  // Optional deep-link back into your UI after complete (also signaled via postMessage)
  returnUrl: 'https://app.yourproduct.com/merchants/42/processing',
});

// →
// {
//   object: 'onboarding_session',
//   id: 'ons_…',                    // short-lived iframe ticket
//   url: 'https://dashboard.tagadapay.io/embed/onboarding/ons_…?token=…',
//   expiresAt: '2026-07-25T16:00:00.000Z',
//   tpaId: 'tpa_xxx',
//   accountId: 'acc_xxx',
//   entityId: 'ent_…',              // durable resume key — store this
// }

// Prefer entity id when you already have it (abandoned email / prior createSession)
const resumed = await partner.partners.processing.onboarding.createSession({
  entityId: 'ent_…',
  allowedOrigins: ['https://app.yourproduct.com'],
});

// Or same externalRef as the first create — finds the partner_embed draft
const resumedByRef = await partner.partners.processing.onboarding.createSession({
  externalRef: 'merchant_42_eu',
  legalName: 'Acme SAS',
  allowedOrigins: ['https://app.yourproduct.com'],
});

<div id="tagada-onboarding"></div>
<script src="https://api.tagadapay.io/onboarding.js"></script>
<script>
  const { unmount } = TagadaOnboarding.mount('#tagada-onboarding', {
    url: sessionUrlFromYourBackend,
    onEvent(event) {
      // event.type: 'ready' | 'height' | 'complete' | 'exit' | 'error'
      if (event.type === 'height') {
        // optional: grow the iframe with event.height
      }
      if (event.type === 'complete') {
        // event.tpaId, event.accountId — continue in your app
        unmount();
      }
      if (event.type === 'exit') {
        unmount();
      }
    },
  });
</script>

<iframe
  id="tagada-onboarding"
  src="https://dashboard.tagadapay.io/embed/onboarding/ons_…?token=…"
  title="Business onboarding"
  allow="camera; microphone; clipboard-read; clipboard-write"
  style="width:100%; min-height:720px; border:0;"
></iframe>
<script>
  window.addEventListener('message', (e) => {
    if (e.origin !== 'https://dashboard.tagadapay.io') return;
    const msg = e.data;
    if (!msg || msg.source !== 'tagada.onboarding') return;
    // msg.type: ready | height | complete | exit | error
  });
</script>