@asteby/storefront-react 0.8.0 → 0.10.0

package/dist/payments-server.d.ts

@@ -0,0 +1,145 @@
+import { StorefrontClient, CheckoutResult, Cart, PaymentAttemptResult } from '@asteby/storefront';
+import { P as PayChoice } from './choices-DEPE9KRq.js';
+export { B as BuildPayChoicesOptions, a as PayChoices, b as PayErrorBody, c as PaymentCspMode, d as PaymentCspOptions, V as VoucherRowLabels, e as buildPayChoices, f as cashProviderData, g as checkoutToAttempt, h as choiceValue, p as parseChoice, i as payErrorResponse, j as paymentCsp, k as paymentCspHeaderName, l as paymentCspHeaders, m as paymentCspMode, n as paymentNonce, o as paymentNonceFromHeaders, v as voucherRows } from './choices-DEPE9KRq.js';
+
+/**
+ * Server side of the embedded payment (`@asteby/storefront-react/payments/server`): the two JSON resource routes the
+ * browser talks to (charge the card, re-read the payment) and the cash voucher of the page form. No React, no router:
+ * Web `Request`/`Response` only, so any framework mounts it.
+ *
+ * The browser NEVER calls OPS. These handlers translate to `carts.checkout` + `checkouts.pay` with the shop's `sk_` token.
+ *
+ * Money: no amount is computed here. `expected_total` is the total the server showed the buyer (echoed back by the SDK);
+ * OPS compares it with the order and answers `422 price_mismatch` when it changed.
+ *
+ * Everything shop-specific (cookies, receipt shape, which fields the form requires, how contact/delivery are saved)
+ * arrives through `EmbeddedPayConfig` callbacks.
+ */
+
+type RateLimiter = {
+    hit(key: string, now?: number): {
+        allowed: boolean;
+        retryAfterSec: number;
+    };
+};
+/** In-memory sliding window per key. Protects this process; OPS puts its own cap per checkout on top. */
+declare function createRateLimiter({ limit, windowMs }: {
+    limit: number;
+    windowMs: number;
+}): RateLimiter;
+/** Buyer IP as forwarded by a trusted proxy/CDN; without `trustProxy` a single shared key. */
+declare function clientKey(request: Request, trustProxy?: boolean): string;
+/**
+ * A request from another site cannot pay with the buyer's cookie. Only the HOST is compared (no scheme or port): behind
+ * the proxy the request scheme can be http while the browser sent https.
+ */
+declare function sameOrigin(request: Request, site: string): boolean;
+/** Device fingerprint (anti-fraud): OPTIONAL, so it never breaks a payment. Anything over 200 chars or odd is dropped. */
+declare const DEVICE_SESSION_ID_MAX = 200;
+declare function deviceSessionId(v: unknown): string | undefined;
+/** What the shop keeps between the checkout creation and the end of the payment (usually in a cookie). */
+type PaySession<TDraft extends {
+    checkout_id?: string;
+}> = {
+    cart_id: string;
+    draft: TDraft;
+};
+type EmbeddedPayMessages = {
+    /** Required form fields missing. */
+    fillFields: string;
+    /** The cart cookie is gone or the checkout expired. */
+    expiredCart: string;
+    /** The chosen row is not payable in the page (the server decides, not the browser). */
+    methodUnavailable: string;
+    tooManyRequests: string;
+    cashChoosePoint: string;
+};
+type EmbeddedPayConfig<TDraft extends {
+    checkout_id?: string;
+}> = {
+    /** The store client with the `sk_` token for this request. */
+    client: (request: Request) => Promise<StorefrontClient>;
+    /** Public origin of the shop (`https://tienda.com`). Used for `return_url` and the origin check. */
+    site: (request: Request) => string;
+    /** Path of the thank-you page, appended to `site`. */
+    returnPath: string;
+    /** Locale for the outcome texts and voucher dates. Default `es-MX`. */
+    locale?: string;
+    readCartId: (request: Request) => Promise<string | null>;
+    readSession: (request: Request) => Promise<PaySession<TDraft> | null>;
+    /** `Set-Cookie` value that keeps the session so a retry reuses the already created checkout. */
+    serializeSession: (session: PaySession<TDraft>) => Promise<string>;
+    /** `null` when the form is complete; otherwise the message to show (HTTP 400). The shop knows its required fields. */
+    validateFields: (fields: Record<string, string>) => string | null;
+    /** Saves contact, address and delivery on the server cart (the cart becomes an order at checkout, so do it before). */
+    prepareCart: (args: {
+        sf: StorefrontClient;
+        cartId: string;
+        fields: Record<string, string>;
+    }) => Promise<void>;
+    /** First draft of the receipt from the created checkout and the cart as it was before. */
+    createDraft: (args: {
+        created: CheckoutResult;
+        before: Cart | null;
+        fields: Record<string, string>;
+    }) => TDraft;
+    /**
+     * Called after every attempt. When the order is closed (approved, under review, voucher) append the receipt cookie and
+     * clear the cart/session cookies to `headers` and return `true`; otherwise return `false` (the session is kept).
+     */
+    settle: (args: {
+        draft: TDraft;
+        result: PaymentAttemptResult;
+        headers: Headers;
+    }) => Promise<boolean>;
+    /** Method keys the shop never offers (the server also checks them: a forged `payment_choice` is refused). */
+    hide?: Iterable<string>;
+    messages?: Partial<EmbeddedPayMessages>;
+    /** Per-IP limit on charges. Default 10 per 10 minutes; `false` disables (OPS still caps attempts per checkout). */
+    rateLimit?: RateLimiter | {
+        limit?: number;
+        windowMs?: number;
+    } | false;
+    /** Trust `cf-connecting-ip` / `x-forwarded-for` for the limiter key. */
+    trustProxy?: boolean;
+    /** Cache header of every response. Default `private, no-store`. */
+    cacheControl?: string;
+    /** Diagnostic log of an OPS rejection (no bodies, no buyer data). Default: one JSON line with `console.warn`. */
+    log?: (entry: {
+        level: 'warn';
+        msg: string;
+        status: number;
+        code: string | null;
+        field: string | null;
+        message: string;
+    }) => void;
+};
+type CashOutcome = {
+    kind: 'done';
+    headers: Headers;
+} | {
+    kind: 'error';
+    status: number;
+    message: string;
+    fields: string[];
+};
+type EmbeddedPayHandlers = {
+    /** POST JSON from the card form: creates the checkout (idempotent per cart) and charges the attempt. */
+    pay: (request: Request) => Promise<Response>;
+    /** POST: re-reads the checkout (3DS challenge, "under review") in the shape of an attempt. */
+    status: (request: Request) => Promise<Response>;
+    /** Cash from the page form (with or without JavaScript): creates the `embedded/cash` checkout and asks for the voucher. */
+    cash: (args: {
+        sf: StorefrontClient;
+        request: Request;
+        cartId: string;
+        fields: Record<string, string>;
+        choice: PayChoice;
+        before: Cart | null;
+    }) => Promise<CashOutcome>;
+};
+declare function createEmbeddedPayHandlers<TDraft extends {
+    checkout_id?: string;
+}>(config: EmbeddedPayConfig<TDraft>): EmbeddedPayHandlers;
+
+export { type CashOutcome, DEVICE_SESSION_ID_MAX, type EmbeddedPayConfig, type EmbeddedPayHandlers, type EmbeddedPayMessages, PayChoice, type PaySession, type RateLimiter, clientKey, createEmbeddedPayHandlers, createRateLimiter, deviceSessionId, sameOrigin };

package/dist/payments-server.js

@@ -0,0 +1,191 @@
+import { parseChoice, buildPayChoices, payErrorResponse, checkoutToAttempt, cashProviderData } from './chunk-ISEOCKIR.js';
+export { buildPayChoices, cashProviderData, checkoutToAttempt, choiceValue, parseChoice, payErrorResponse, paymentCsp, paymentCspHeaderName, paymentCspHeaders, paymentCspMode, paymentNonce, paymentNonceFromHeaders, voucherRows } from './chunk-ISEOCKIR.js';
+import { paymentIdempotencyKey, isStorefrontError, paymentOutcome, safeHttpsUrl } from '@asteby/storefront';
+
+function createRateLimiter({ limit, windowMs }) {
+  const hits = /* @__PURE__ */ new Map();
+  return {
+    hit(key, now = Date.now()) {
+      const recent = (hits.get(key) ?? []).filter((t) => now - t < windowMs);
+      if (recent.length >= limit) {
+        hits.set(key, recent);
+        return { allowed: false, retryAfterSec: Math.max(1, Math.ceil((recent[0] + windowMs - now) / 1e3)) };
+      }
+      recent.push(now);
+      hits.set(key, recent);
+      if (hits.size > 5e3) {
+        for (const [k, v] of hits) if (v.every((t) => now - t >= windowMs)) hits.delete(k);
+      }
+      return { allowed: true, retryAfterSec: 0 };
+    }
+  };
+}
+function clientKey(request, trustProxy = false) {
+  if (!trustProxy) return "direct";
+  const cf = request.headers.get("cf-connecting-ip");
+  if (cf) return cf.trim();
+  return request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || "direct";
+}
+function sameOrigin(request, site) {
+  const origin = request.headers.get("origin");
+  if (!origin) return true;
+  try {
+    const host = new URL(origin).hostname;
+    return host === new URL(site).hostname || host === new URL(request.url).hostname;
+  } catch {
+    return false;
+  }
+}
+var DEVICE_SESSION_ID_MAX = 200;
+function deviceSessionId(v) {
+  if (typeof v !== "string") return void 0;
+  const id = v.trim();
+  return id.length > 0 && id.length <= DEVICE_SESSION_ID_MAX && /^[\w.:-]+$/.test(id) ? id : void 0;
+}
+var ATTEMPT = /^[A-Za-z0-9_-]{8,100}$/;
+var asMoney = (v) => {
+  const m = v;
+  return m && typeof m.amount === "string" && /^\d+(\.\d+)?$/.test(m.amount) && typeof m.currency_code === "string" && m.currency_code.length === 3 ? { amount: m.amount, currency_code: m.currency_code } : null;
+};
+var DEFAULT_MESSAGES = {
+  fillFields: "Completa los campos marcados.",
+  expiredCart: "Tu carrito venci\xF3. Vuelve a armarlo para pagar.",
+  methodUnavailable: "Esta forma de pago no est\xE1 disponible por ahora.",
+  tooManyRequests: "Demasiados intentos. Espera unos minutos e int\xE9ntalo de nuevo.",
+  cashChoosePoint: "Elige d\xF3nde pagar en efectivo."
+};
+function createEmbeddedPayHandlers(config) {
+  const msg = { ...DEFAULT_MESSAGES, ...config.messages };
+  const locale = config.locale ?? "es-MX";
+  const cache = config.cacheControl ?? "private, no-store";
+  const makeLimiter = () => {
+    const r = config.rateLimit;
+    if (r === false) return null;
+    if (r && "hit" in r) return r;
+    return createRateLimiter({ limit: Math.max(1, r?.limit ?? 10), windowMs: r?.windowMs ?? 10 * 6e4 });
+  };
+  const limiter = makeLimiter();
+  const log = config.log ?? ((entry) => {
+    console.warn(JSON.stringify(entry));
+  });
+  const json = (body, init = {}) => {
+    const headers = new Headers(init.headers);
+    headers.set("Cache-Control", cache);
+    headers.set("Content-Type", "application/json");
+    return new Response(JSON.stringify(body), { status: init.status ?? 200, headers });
+  };
+  const fail = (status2, code, message, extra = {}) => json({ error: { code, message } }, { status: status2, headers: extra });
+  async function pay(request) {
+    const site = config.site(request);
+    if (!sameOrigin(request, site)) return fail(403, "forbidden", "origin");
+    if (limiter) {
+      const gate = limiter.hit(clientKey(request, config.trustProxy));
+      if (!gate.allowed) return fail(429, "too_many_attempts", msg.tooManyRequests, { "Retry-After": String(gate.retryAfterSec) });
+    }
+    const cartId = await config.readCartId(request);
+    if (!cartId) return fail(409, "expired", msg.expiredCart);
+    let body;
+    try {
+      body = await request.json();
+    } catch {
+      return fail(400, "validation", msg.fillFields);
+    }
+    const attempt = typeof body.attempt === "string" && ATTEMPT.test(body.attempt) ? body.attempt : null;
+    const expected = asMoney(body.expected_total);
+    const data = body.provider_data;
+    if (body.option !== "card" || !attempt || !expected || !data || typeof data !== "object" || Array.isArray(data)) {
+      return fail(400, "validation", msg.fillFields);
+    }
+    const { transaction_amount: _ignored, ...providerData } = data;
+    const fields = {};
+    for (const [k, v] of Object.entries(body.fields ?? {})) if (typeof v === "string") fields[k] = v.trim();
+    const invalid = config.validateFields(fields);
+    if (invalid) return fail(400, "validation", invalid);
+    const sf = await config.client(request);
+    const choice = parseChoice(fields.payment_choice);
+    let session;
+    try {
+      const methods = await sf.carts.paymentMethods(cartId);
+      const card = buildPayChoices(methods.methods, config.hide ? { hide: config.hide } : {}).choices.find((c) => c.mode === "card" && c.value === fields.payment_choice);
+      if (!choice || !card) return fail(422, "invalid_state", msg.methodUnavailable);
+      const previous = await config.readSession(request);
+      const reusedId = previous && previous.cart_id === cartId ? previous.draft.checkout_id : void 0;
+      let checkoutId;
+      if (previous && reusedId) {
+        session = previous;
+        checkoutId = reusedId;
+      } else {
+        await config.prepareCart({ sf, cartId, fields });
+        const before = await sf.carts.get(cartId).catch(() => null);
+        const created = await sf.carts.checkout(
+          cartId,
+          { payment_method: card.methodKey, payment_flow: "embedded", payment_option: "card", expected_total: expected, return_url: `${site}${config.returnPath}` },
+          { idempotencyKey: `chk-${cartId}` }
+        );
+        checkoutId = created.checkout.id;
+        session = { cart_id: cartId, draft: config.createDraft({ created, before, fields }) };
+      }
+      const device = deviceSessionId(body.device_session_id);
+      const result = await sf.checkouts.pay(
+        checkoutId,
+        { method: "card", provider_data: providerData, ...device ? { device_session_id: device } : {}, expected_total: expected },
+        { idempotencyKey: paymentIdempotencyKey(checkoutId, attempt) }
+      );
+      const headers = new Headers();
+      const closed = await config.settle({ draft: session.draft, result, headers });
+      if (!closed) headers.append("Set-Cookie", await config.serializeSession(session));
+      return json(result, { headers });
+    } catch (err) {
+      if (isStorefrontError(err)) {
+        const { status: status2, body: errBody } = payErrorResponse(err);
+        log({ level: "warn", msg: "cobro rechazado por OPS", status: err.status, code: err.code ?? null, field: err.field ?? null, message: String(err.message).slice(0, 300) });
+        const headers = new Headers();
+        if (session) headers.append("Set-Cookie", await config.serializeSession(session));
+        return json(errBody, { status: status2, headers });
+      }
+      throw err;
+    }
+  }
+  async function status(request) {
+    if (!sameOrigin(request, config.site(request))) return fail(403, "forbidden", "origin");
+    const session = await config.readSession(request);
+    const id = session?.draft.checkout_id;
+    if (!session || !id) return fail(404, "not_found", msg.expiredCart);
+    try {
+      const sf = await config.client(request);
+      const found = await sf.checkouts.get(id);
+      if (!found) return fail(404, "not_found", msg.expiredCart);
+      const attempt = checkoutToAttempt(found);
+      const headers = new Headers();
+      await config.settle({ draft: session.draft, result: attempt, headers });
+      return json(attempt, { headers });
+    } catch (err) {
+      if (isStorefrontError(err)) {
+        const { status: code, body } = payErrorResponse(err);
+        return json(body, { status: code });
+      }
+      throw err;
+    }
+  }
+  async function cash(args) {
+    const { sf, request, cartId, fields, choice, before } = args;
+    const providerData = cashProviderData(choice.points, fields.cash_point);
+    if (!providerData) return { kind: "error", status: 422, message: msg.cashChoosePoint, fields: ["cash_point"] };
+    const created = await sf.carts.checkout(
+      cartId,
+      { payment_method: choice.methodKey, payment_flow: "embedded", payment_option: "cash", return_url: `${config.site(request)}${config.returnPath}` },
+      { idempotencyKey: `chk-${cartId}-cash` }
+    );
+    const draft = config.createDraft({ created, before, fields });
+    const result = await sf.checkouts.pay(created.checkout.id, { method: "cash", provider_data: providerData }, { idempotencyKey: paymentIdempotencyKey(created.checkout.id, "cash") });
+    const headers = new Headers();
+    if (await config.settle({ draft, result, headers })) return { kind: "done", headers };
+    const outcome = paymentOutcome(result, locale);
+    return { kind: "error", status: safeHttpsUrl(outcome.redirect_url) ? 409 : 422, message: outcome.message, fields: [] };
+  }
+  return { pay, status, cash };
+}
+
+export { DEVICE_SESSION_ID_MAX, clientKey, createEmbeddedPayHandlers, createRateLimiter, deviceSessionId, sameOrigin };
+//# sourceMappingURL=payments-server.js.map
+//# sourceMappingURL=payments-server.js.map

package/dist/payments-server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/payments/server.ts"],"names":["status"],"mappings":";;;;AAiCO,SAAS,iBAAA,CAAkB,EAAE,KAAA,EAAO,QAAA,EAAS,EAAqD;AACvG,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAsB;AACvC,EAAA,OAAO;AAAA,IACL,GAAA,CAAI,GAAA,EAAK,GAAA,GAAM,IAAA,CAAK,KAAI,EAAG;AACzB,MAAA,MAAM,MAAA,GAAA,CAAU,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,IAAK,EAAC,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,GAAA,GAAM,CAAA,GAAI,QAAQ,CAAA;AACrE,MAAA,IAAI,MAAA,CAAO,UAAU,KAAA,EAAO;AAC1B,QAAA,IAAA,CAAK,GAAA,CAAI,KAAK,MAAM,CAAA;AACpB,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,aAAA,EAAe,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAA,CAAM,MAAA,CAAO,CAAC,CAAA,GAAK,QAAA,GAAW,GAAA,IAAO,GAAI,CAAC,CAAA,EAAE;AAAA,MACvG;AACA,MAAA,MAAA,CAAO,KAAK,GAAG,CAAA;AACf,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,MAAM,CAAA;AACpB,MAAA,IAAI,KAAK,IAAA,GAAO,GAAA,EAAA;AAAM,QAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,IAAA,MAAU,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,KAAM,MAAM,CAAA,IAAK,QAAQ,CAAA,EAAG,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,MAAA;AACvG,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,CAAA,EAAE;AAAA,IAC3C;AAAA,GACF;AACF;AAGO,SAAS,SAAA,CAAU,OAAA,EAAkB,UAAA,GAAa,KAAA,EAAe;AACtE,EAAA,IAAI,CAAC,YAAY,OAAO,QAAA;AACxB,EAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AACjD,EAAA,IAAI,EAAA,EAAI,OAAO,EAAA,CAAG,IAAA,EAAK;AACvB,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,EAAK,IAAK,QAAA;AAC1E;AAMO,SAAS,UAAA,CAAW,SAAkB,IAAA,EAAuB;AAClE,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAC3C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAC7B,IAAA,OAAO,IAAA,KAAS,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA,IAAY,IAAA,KAAS,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAA;AAAA,EAC1E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,IAAM,qBAAA,GAAwB;AAC9B,SAAS,gBAAgB,CAAA,EAAgC;AAC9D,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,MAAA;AAClC,EAAA,MAAM,EAAA,GAAK,EAAE,IAAA,EAAK;AAClB,EAAA,OAAO,EAAA,CAAG,MAAA,GAAS,CAAA,IAAK,EAAA,CAAG,MAAA,IAAU,yBAAyB,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA,GAAI,EAAA,GAAK,MAAA;AAC7F;AAEA,IAAM,OAAA,GAAU,wBAAA;AAEhB,IAAM,OAAA,GAAU,CAAC,CAAA,KAA6B;AAC5C,EAAA,MAAM,CAAA,GAAI,CAAA;AACV,EAAA,OAAO,CAAA,IAAK,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,gBAAgB,IAAA,CAAK,CAAA,CAAE,MAAM,CAAA,IAAK,OAAO,CAAA,CAAE,kBAAkB,QAAA,IAAY,CAAA,CAAE,aAAA,CAAc,MAAA,KAAW,CAAA,GAC5I,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAQ,aAAA,EAAe,CAAA,CAAE,aAAA,EAAc,GACnD,IAAA;AACN,CAAA;AAgBA,IAAM,gBAAA,GAAwC;AAAA,EAC5C,UAAA,EAAY,+BAAA;AAAA,EACZ,WAAA,EAAa,oDAAA;AAAA,EACb,iBAAA,EAAmB,qDAAA;AAAA,EACnB,eAAA,EAAiB,mEAAA;AAAA,EACjB,eAAA,EAAiB;AACnB,CAAA;AAkDO,SAAS,0BAAmE,MAAA,EAAwD;AACzI,EAAA,MAAM,MAAM,EAAE,GAAG,gBAAA,EAAkB,GAAG,OAAO,QAAA,EAAS;AACtD,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,OAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,IAAgB,mBAAA;AACrC,EAAA,MAAM,cAAc,MAA0B;AAC5C,IAAA,MAAM,IAAI,MAAA,CAAO,SAAA;AACjB,IAAA,IAAI,CAAA,KAAM,OAAO,OAAO,IAAA;AACxB,IAAA,IAAI,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG,OAAO,CAAA;AAC5B,IAAA,OAAO,iBAAA,CAAkB,EAAE,KAAA,EAAO,IAAA,CAAK,IAAI,CAAA,EAAG,CAAA,EAAG,KAAA,IAAS,EAAE,GAAG,QAAA,EAAU,CAAA,EAAG,QAAA,IAAY,EAAA,GAAK,KAAQ,CAAA;AAAA,EACvG,CAAA;AACA,EAAA,MAAM,UAAU,WAAA,EAAY;AAC5B,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,GAAA,KACN,CAAC,KAAA,KAAU;AACV,IAAA,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAAA,EACpC,CAAA,CAAA;AAEF,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAe,IAAA,GAAwE,EAAC,KAAM;AAC1G,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,IAAA,CAAK,OAAO,CAAA;AACxC,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,KAAK,CAAA;AAClC,IAAA,OAAA,CAAQ,GAAA,CAAI,gBAAgB,kBAAkB,CAAA;AAC9C,IAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,IAAU,GAAA,EAAK,OAAA,EAAS,CAAA;AAAA,EACnF,CAAA;AACA,EAAA,MAAM,IAAA,GAAO,CAACA,OAAAA,EAAgB,IAAA,EAAc,SAAiB,KAAA,GAA0C,OAAO,IAAA,CAAK,EAAE,OAAO,EAAE,IAAA,EAAM,SAAQ,EAAE,EAAG,EAAE,MAAA,EAAAA,OAAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,CAAA;AAE3K,EAAA,eAAe,IAAI,OAAA,EAAqC;AACtD,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAChC,IAAA,IAAI,CAAC,WAAW,OAAA,EAAS,IAAI,GAAG,OAAO,IAAA,CAAK,GAAA,EAAK,WAAA,EAAa,QAAQ,CAAA;AACtE,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,OAAO,OAAA,CAAQ,GAAA,CAAI,UAAU,OAAA,EAAS,MAAA,CAAO,UAAU,CAAC,CAAA;AAC9D,MAAA,IAAI,CAAC,IAAA,CAAK,OAAA,EAAS,OAAO,KAAK,GAAA,EAAK,mBAAA,EAAqB,GAAA,CAAI,eAAA,EAAiB,EAAE,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,aAAa,GAAG,CAAA;AAAA,IAC7H;AACA,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,KAAK,GAAA,EAAK,SAAA,EAAW,IAAI,WAAW,CAAA;AAExD,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAQ,MAAM,QAAQ,IAAA,EAAK;AAAA,IAC7B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,YAAA,EAAc,GAAA,CAAI,UAAU,CAAA;AAAA,IAC/C;AACA,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA,GAAI,IAAA,CAAK,OAAA,GAAU,IAAA;AAChG,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,IAAA,CAAK,cAAc,CAAA;AAC5C,IAAA,MAAM,OAAO,IAAA,CAAK,aAAA;AAClB,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,IAAU,CAAC,WAAW,CAAC,QAAA,IAAY,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC/G,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,YAAA,EAAc,GAAA,CAAI,UAAU,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,EAAE,kBAAA,EAAoB,QAAA,EAAU,GAAG,cAAa,GAAI,IAAA;AAC1D,IAAA,MAAM,SAAiC,EAAC;AACxC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAS,KAAK,MAAA,IAAU,EAA8B,CAAA,EAAG,IAAI,OAAO,CAAA,KAAM,QAAA,SAAiB,CAAC,CAAA,GAAI,EAAE,IAAA,EAAK;AACnI,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,cAAA,CAAe,MAAM,CAAA;AAC5C,IAAA,IAAI,OAAA,EAAS,OAAO,IAAA,CAAK,GAAA,EAAK,cAAc,OAAO,CAAA;AAEnD,IAAA,MAAM,EAAA,GAAK,MAAM,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACtC,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,MAAA,CAAO,cAAc,CAAA;AAChD,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AAEF,MAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA,CAAM,eAAe,MAAM,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,OAAA,CAAQ,OAAA,EAAS,MAAA,CAAO,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAK,GAAI,EAAE,CAAA,CAAE,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,MAAA,IAAU,CAAA,CAAE,KAAA,KAAU,MAAA,CAAO,cAAc,CAAA;AAClK,MAAA,IAAI,CAAC,UAAU,CAAC,IAAA,SAAa,IAAA,CAAK,GAAA,EAAK,eAAA,EAAiB,GAAA,CAAI,iBAAiB,CAAA;AAI7E,MAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA;AACjD,MAAA,MAAM,WAAW,QAAA,IAAY,QAAA,CAAS,YAAY,MAAA,GAAS,QAAA,CAAS,MAAM,WAAA,GAAc,KAAA,CAAA;AACxF,MAAA,IAAI,UAAA;AACJ,MAAA,IAAI,YAAY,QAAA,EAAU;AACxB,QAAA,OAAA,GAAU,QAAA;AACV,QAAA,UAAA,GAAa,QAAA;AAAA,MACf,CAAA,MAAO;AACL,QAAA,MAAM,OAAO,WAAA,CAAY,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AAC/C,QAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,KAAA,CAAM,IAAI,MAAM,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC1D,QAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA,CAAM,QAAA;AAAA,UAC7B,MAAA;AAAA,UACA,EAAE,cAAA,EAAgB,IAAA,CAAK,SAAA,EAAW,YAAA,EAAc,YAAY,cAAA,EAAgB,MAAA,EAAQ,cAAA,EAAgB,QAAA,EAAU,YAAY,CAAA,EAAG,IAAI,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,CAAA,EAAG;AAAA,UACxJ,EAAE,cAAA,EAAgB,CAAA,IAAA,EAAO,MAAM,CAAA,CAAA;AAAG,SACpC;AACA,QAAA,UAAA,GAAa,QAAQ,QAAA,CAAS,EAAA;AAC9B,QAAA,OAAA,GAAU,EAAE,OAAA,EAAS,MAAA,EAAQ,KAAA,EAAO,MAAA,CAAO,WAAA,CAAY,EAAE,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,CAAA,EAAE;AAAA,MACtF;AAEA,MAAA,MAAM,MAAA,GAAS,eAAA,CAAgB,IAAA,CAAK,iBAAiB,CAAA;AACrD,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,SAAA,CAAU,GAAA;AAAA,QAChC,UAAA;AAAA,QACA,EAAE,MAAA,EAAQ,MAAA,EAAQ,aAAA,EAAe,cAAc,GAAI,MAAA,GAAS,EAAE,iBAAA,EAAmB,MAAA,EAAO,GAAI,EAAC,EAAI,gBAAgB,QAAA,EAAS;AAAA,QAC1H,EAAE,cAAA,EAAgB,qBAAA,CAAsB,UAAA,EAAY,OAAO,CAAA;AAAE,OAC/D;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,EAAE,OAAO,OAAA,CAAQ,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC5E,MAAA,IAAI,CAAC,QAAQ,OAAA,CAAQ,MAAA,CAAO,cAAc,MAAM,MAAA,CAAO,gBAAA,CAAiB,OAAO,CAAC,CAAA;AAChF,MAAA,OAAO,IAAA,CAAK,MAAA,EAAQ,EAAE,OAAA,EAAS,CAAA;AAAA,IACjC,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG;AAC1B,QAAA,MAAM,EAAE,MAAA,EAAAA,OAAAA,EAAQ,MAAM,OAAA,EAAQ,GAAI,iBAAiB,GAAG,CAAA;AACtD,QAAA,GAAA,CAAI,EAAE,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,yBAAA,EAA2B,QAAQ,GAAA,CAAI,MAAA,EAAQ,IAAA,EAAM,GAAA,CAAI,IAAA,IAAQ,IAAA,EAAM,OAAO,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,EAAG,CAAA;AAGvK,QAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,QAAA,IAAI,OAAA,UAAiB,MAAA,CAAO,YAAA,EAAc,MAAM,MAAA,CAAO,gBAAA,CAAiB,OAAO,CAAC,CAAA;AAChF,QAAA,OAAO,KAAK,OAAA,EAAS,EAAE,MAAA,EAAAA,OAAAA,EAAQ,SAAS,CAAA;AAAA,MAC1C;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,eAAe,OAAO,OAAA,EAAqC;AACzD,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,EAAK,WAAA,EAAa,QAAQ,CAAA;AACtF,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA;AAChD,IAAA,MAAM,EAAA,GAAK,SAAS,KAAA,CAAM,WAAA;AAC1B,IAAA,IAAI,CAAC,WAAW,CAAC,EAAA,SAAW,IAAA,CAAK,GAAA,EAAK,WAAA,EAAa,GAAA,CAAI,WAAW,CAAA;AAClE,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACtC,MAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,CAAG,SAAA,CAAU,IAAI,EAAE,CAAA;AACvC,MAAA,IAAI,CAAC,KAAA,EAAO,OAAO,KAAK,GAAA,EAAK,WAAA,EAAa,IAAI,WAAW,CAAA;AACzD,MAAA,MAAM,OAAA,GAAU,kBAAkB,KAAK,CAAA;AACvC,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,MAAA,MAAM,MAAA,CAAO,OAAO,EAAE,KAAA,EAAO,QAAQ,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAS,OAAA,EAAS,CAAA;AACtE,MAAA,OAAO,IAAA,CAAK,OAAA,EAAS,EAAE,OAAA,EAAS,CAAA;AAAA,IAClC,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG;AAC1B,QAAA,MAAM,EAAE,MAAA,EAAQ,IAAA,EAAM,IAAA,EAAK,GAAI,iBAAiB,GAAG,CAAA;AACnD,QAAA,OAAO,IAAA,CAAK,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAM,CAAA;AAAA,MACpC;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,eAAe,KAAK,IAAA,EAAwE;AAC1F,IAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,QAAQ,MAAA,EAAQ,MAAA,EAAQ,QAAO,GAAI,IAAA;AACxD,IAAA,MAAM,YAAA,GAAe,gBAAA,CAAiB,MAAA,CAAO,MAAA,EAAQ,OAAO,UAAU,CAAA;AACtE,IAAA,IAAI,CAAC,YAAA,EAAc,OAAO,EAAE,MAAM,OAAA,EAAS,MAAA,EAAQ,GAAA,EAAK,OAAA,EAAS,GAAA,CAAI,eAAA,EAAiB,MAAA,EAAQ,CAAC,YAAY,CAAA,EAAE;AAC7G,IAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,KAAA,CAAM,QAAA;AAAA,MAC7B,MAAA;AAAA,MACA,EAAE,cAAA,EAAgB,MAAA,CAAO,SAAA,EAAW,YAAA,EAAc,YAAY,cAAA,EAAgB,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG,OAAO,IAAA,CAAK,OAAO,CAAC,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,CAAA,EAAG;AAAA,MAChJ,EAAE,cAAA,EAAgB,CAAA,IAAA,EAAO,MAAM,CAAA,KAAA,CAAA;AAAQ,KACzC;AACA,IAAA,MAAM,QAAQ,MAAA,CAAO,WAAA,CAAY,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAQ,CAAA;AAE5D,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,SAAA,CAAU,IAAI,OAAA,CAAQ,QAAA,CAAS,EAAA,EAAI,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,YAAA,EAAa,EAAG,EAAE,cAAA,EAAgB,qBAAA,CAAsB,QAAQ,QAAA,CAAS,EAAA,EAAI,MAAM,CAAA,EAAG,CAAA;AAClL,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,IAAA,IAAI,MAAM,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,MAAA,EAAQ,OAAA,EAAS,CAAA,EAAG,OAAO,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAQ;AACpF,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,MAAA,EAAQ,MAAM,CAAA;AAC7C,IAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,MAAA,EAAQ,aAAa,OAAA,CAAQ,YAAY,CAAA,GAAI,GAAA,GAAM,KAAK,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAS,MAAA,EAAQ,EAAC,EAAE;AAAA,EACvH;AAEA,EAAA,OAAO,EAAE,GAAA,EAAK,MAAA,EAAQ,IAAA,EAAK;AAC7B","file":"payments-server.js","sourcesContent":["/**\n * Server side of the embedded payment (`@asteby/storefront-react/payments/server`): the two JSON resource routes the\n * browser talks to (charge the card, re-read the payment) and the cash voucher of the page form. No React, no router:\n * Web `Request`/`Response` only, so any framework mounts it.\n *\n * The browser NEVER calls OPS. These handlers translate to `carts.checkout` + `checkouts.pay` with the shop's `sk_` token.\n *\n * Money: no amount is computed here. `expected_total` is the total the server showed the buyer (echoed back by the SDK);\n * OPS compares it with the order and answers `422 price_mismatch` when it changed.\n *\n * Everything shop-specific (cookies, receipt shape, which fields the form requires, how contact/delivery are saved)\n * arrives through `EmbeddedPayConfig` callbacks.\n */\nimport {\n  isStorefrontError,\n  paymentIdempotencyKey,\n  paymentOutcome,\n  safeHttpsUrl,\n  type Cart,\n  type CheckoutResult,\n  type Money,\n  type PaymentAttemptResult,\n  type StorefrontClient,\n} from '@asteby/storefront'\nimport { buildPayChoices, cashProviderData, checkoutToAttempt, parseChoice, payErrorResponse, type PayChoice } from './choices.js'\n\nexport * from './choices.js'\nexport { paymentCsp, paymentCspHeaderName, paymentCspHeaders, paymentCspMode, paymentNonce, paymentNonceFromHeaders } from './csp.js'\nexport type { PaymentCspMode, PaymentCspOptions } from './csp.js'\n\nexport type RateLimiter = { hit(key: string, now?: number): { allowed: boolean; retryAfterSec: number } }\n\n/** In-memory sliding window per key. Protects this process; OPS puts its own cap per checkout on top. */\nexport function createRateLimiter({ limit, windowMs }: { limit: number; windowMs: number }): RateLimiter {\n  const hits = new Map<string, number[]>()\n  return {\n    hit(key, now = Date.now()) {\n      const recent = (hits.get(key) ?? []).filter((t) => now - t < windowMs)\n      if (recent.length >= limit) {\n        hits.set(key, recent)\n        return { allowed: false, retryAfterSec: Math.max(1, Math.ceil((recent[0]! + windowMs - now) / 1000)) }\n      }\n      recent.push(now)\n      hits.set(key, recent)\n      if (hits.size > 5000) for (const [k, v] of hits) if (v.every((t) => now - t >= windowMs)) hits.delete(k)\n      return { allowed: true, retryAfterSec: 0 }\n    },\n  }\n}\n\n/** Buyer IP as forwarded by a trusted proxy/CDN; without `trustProxy` a single shared key. */\nexport function clientKey(request: Request, trustProxy = false): string {\n  if (!trustProxy) return 'direct'\n  const cf = request.headers.get('cf-connecting-ip')\n  if (cf) return cf.trim()\n  return request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() || 'direct'\n}\n\n/**\n * A request from another site cannot pay with the buyer's cookie. Only the HOST is compared (no scheme or port): behind\n * the proxy the request scheme can be http while the browser sent https.\n */\nexport function sameOrigin(request: Request, site: string): boolean {\n  const origin = request.headers.get('origin')\n  if (!origin) return true\n  try {\n    const host = new URL(origin).hostname\n    return host === new URL(site).hostname || host === new URL(request.url).hostname\n  } catch {\n    return false\n  }\n}\n\n/** Device fingerprint (anti-fraud): OPTIONAL, so it never breaks a payment. Anything over 200 chars or odd is dropped. */\nexport const DEVICE_SESSION_ID_MAX = 200\nexport function deviceSessionId(v: unknown): string | undefined {\n  if (typeof v !== 'string') return undefined\n  const id = v.trim()\n  return id.length > 0 && id.length <= DEVICE_SESSION_ID_MAX && /^[\\w.:-]+$/.test(id) ? id : undefined\n}\n\nconst ATTEMPT = /^[A-Za-z0-9_-]{8,100}$/\n\nconst asMoney = (v: unknown): Money | null => {\n  const m = v as Partial<Money> | null\n  return m && typeof m.amount === 'string' && /^\\d+(\\.\\d+)?$/.test(m.amount) && typeof m.currency_code === 'string' && m.currency_code.length === 3\n    ? { amount: m.amount, currency_code: m.currency_code }\n    : null\n}\n\n/** What the shop keeps between the checkout creation and the end of the payment (usually in a cookie). */\nexport type PaySession<TDraft extends { checkout_id?: string }> = { cart_id: string; draft: TDraft }\n\nexport type EmbeddedPayMessages = {\n  /** Required form fields missing. */\n  fillFields: string\n  /** The cart cookie is gone or the checkout expired. */\n  expiredCart: string\n  /** The chosen row is not payable in the page (the server decides, not the browser). */\n  methodUnavailable: string\n  tooManyRequests: string\n  cashChoosePoint: string\n}\n\nconst DEFAULT_MESSAGES: EmbeddedPayMessages = {\n  fillFields: 'Completa los campos marcados.',\n  expiredCart: 'Tu carrito venció. Vuelve a armarlo para pagar.',\n  methodUnavailable: 'Esta forma de pago no está disponible por ahora.',\n  tooManyRequests: 'Demasiados intentos. Espera unos minutos e inténtalo de nuevo.',\n  cashChoosePoint: 'Elige dónde pagar en efectivo.',\n}\n\nexport type EmbeddedPayConfig<TDraft extends { checkout_id?: string }> = {\n  /** The store client with the `sk_` token for this request. */\n  client: (request: Request) => Promise<StorefrontClient>\n  /** Public origin of the shop (`https://tienda.com`). Used for `return_url` and the origin check. */\n  site: (request: Request) => string\n  /** Path of the thank-you page, appended to `site`. */\n  returnPath: string\n  /** Locale for the outcome texts and voucher dates. Default `es-MX`. */\n  locale?: string\n  readCartId: (request: Request) => Promise<string | null>\n  readSession: (request: Request) => Promise<PaySession<TDraft> | null>\n  /** `Set-Cookie` value that keeps the session so a retry reuses the already created checkout. */\n  serializeSession: (session: PaySession<TDraft>) => Promise<string>\n  /** `null` when the form is complete; otherwise the message to show (HTTP 400). The shop knows its required fields. */\n  validateFields: (fields: Record<string, string>) => string | null\n  /** Saves contact, address and delivery on the server cart (the cart becomes an order at checkout, so do it before). */\n  prepareCart: (args: { sf: StorefrontClient; cartId: string; fields: Record<string, string> }) => Promise<void>\n  /** First draft of the receipt from the created checkout and the cart as it was before. */\n  createDraft: (args: { created: CheckoutResult; before: Cart | null; fields: Record<string, string> }) => TDraft\n  /**\n   * Called after every attempt. When the order is closed (approved, under review, voucher) append the receipt cookie and\n   * clear the cart/session cookies to `headers` and return `true`; otherwise return `false` (the session is kept).\n   */\n  settle: (args: { draft: TDraft; result: PaymentAttemptResult; headers: Headers }) => Promise<boolean>\n  /** Method keys the shop never offers (the server also checks them: a forged `payment_choice` is refused). */\n  hide?: Iterable<string>\n  messages?: Partial<EmbeddedPayMessages>\n  /** Per-IP limit on charges. Default 10 per 10 minutes; `false` disables (OPS still caps attempts per checkout). */\n  rateLimit?: RateLimiter | { limit?: number; windowMs?: number } | false\n  /** Trust `cf-connecting-ip` / `x-forwarded-for` for the limiter key. */\n  trustProxy?: boolean\n  /** Cache header of every response. Default `private, no-store`. */\n  cacheControl?: string\n  /** Diagnostic log of an OPS rejection (no bodies, no buyer data). Default: one JSON line with `console.warn`. */\n  log?: (entry: { level: 'warn'; msg: string; status: number; code: string | null; field: string | null; message: string }) => void\n}\n\nexport type CashOutcome = { kind: 'done'; headers: Headers } | { kind: 'error'; status: number; message: string; fields: string[] }\n\nexport type EmbeddedPayHandlers = {\n  /** POST JSON from the card form: creates the checkout (idempotent per cart) and charges the attempt. */\n  pay: (request: Request) => Promise<Response>\n  /** POST: re-reads the checkout (3DS challenge, \"under review\") in the shape of an attempt. */\n  status: (request: Request) => Promise<Response>\n  /** Cash from the page form (with or without JavaScript): creates the `embedded/cash` checkout and asks for the voucher. */\n  cash: (args: { sf: StorefrontClient; request: Request; cartId: string; fields: Record<string, string>; choice: PayChoice; before: Cart | null }) => Promise<CashOutcome>\n}\n\nexport function createEmbeddedPayHandlers<TDraft extends { checkout_id?: string }>(config: EmbeddedPayConfig<TDraft>): EmbeddedPayHandlers {\n  const msg = { ...DEFAULT_MESSAGES, ...config.messages }\n  const locale = config.locale ?? 'es-MX'\n  const cache = config.cacheControl ?? 'private, no-store'\n  const makeLimiter = (): RateLimiter | null => {\n    const r = config.rateLimit\n    if (r === false) return null\n    if (r && 'hit' in r) return r\n    return createRateLimiter({ limit: Math.max(1, r?.limit ?? 10), windowMs: r?.windowMs ?? 10 * 60_000 })\n  }\n  const limiter = makeLimiter()\n  const log =\n    config.log ??\n    ((entry) => {\n      console.warn(JSON.stringify(entry))\n    })\n\n  const json = (body: unknown, init: { status?: number; headers?: Headers | Record<string, string> } = {}) => {\n    const headers = new Headers(init.headers)\n    headers.set('Cache-Control', cache)\n    headers.set('Content-Type', 'application/json')\n    return new Response(JSON.stringify(body), { status: init.status ?? 200, headers })\n  }\n  const fail = (status: number, code: string, message: string, extra: Headers | Record<string, string> = {}) => json({ error: { code, message } }, { status, headers: extra })\n\n  async function pay(request: Request): Promise<Response> {\n    const site = config.site(request)\n    if (!sameOrigin(request, site)) return fail(403, 'forbidden', 'origin')\n    if (limiter) {\n      const gate = limiter.hit(clientKey(request, config.trustProxy))\n      if (!gate.allowed) return fail(429, 'too_many_attempts', msg.tooManyRequests, { 'Retry-After': String(gate.retryAfterSec) })\n    }\n    const cartId = await config.readCartId(request)\n    if (!cartId) return fail(409, 'expired', msg.expiredCart)\n\n    let body: { option?: unknown; attempt?: unknown; provider_data?: unknown; device_session_id?: unknown; expected_total?: unknown; fields?: unknown }\n    try {\n      body = (await request.json()) as typeof body\n    } catch {\n      return fail(400, 'validation', msg.fillFields)\n    }\n    const attempt = typeof body.attempt === 'string' && ATTEMPT.test(body.attempt) ? body.attempt : null\n    const expected = asMoney(body.expected_total)\n    const data = body.provider_data\n    if (body.option !== 'card' || !attempt || !expected || !data || typeof data !== 'object' || Array.isArray(data)) {\n      return fail(400, 'validation', msg.fillFields)\n    }\n    // The amount does not travel in `provider_data`: OPS sets it. Even if the browser (or a stray script) sends one, it is not forwarded.\n    const { transaction_amount: _ignored, ...providerData } = data as Record<string, unknown>\n    const fields: Record<string, string> = {}\n    for (const [k, v] of Object.entries((body.fields ?? {}) as Record<string, unknown>)) if (typeof v === 'string') fields[k] = v.trim()\n    const invalid = config.validateFields(fields)\n    if (invalid) return fail(400, 'validation', invalid)\n\n    const sf = await config.client(request)\n    const choice = parseChoice(fields.payment_choice)\n    let session: PaySession<TDraft> | undefined\n    try {\n      // The server decides what can be paid in the page: the browser only picks among what OPS published.\n      const methods = await sf.carts.paymentMethods(cartId)\n      const card = buildPayChoices(methods.methods, config.hide ? { hide: config.hide } : {}).choices.find((c) => c.mode === 'card' && c.value === fields.payment_choice)\n      if (!choice || !card) return fail(422, 'invalid_state', msg.methodUnavailable)\n\n      // A retry (the first charge failed or the network dropped) reuses the checkout already created: the cart is an\n      // order by now and cannot be edited again. Only the attempt (the payment key) changes.\n      const previous = await config.readSession(request)\n      const reusedId = previous && previous.cart_id === cartId ? previous.draft.checkout_id : undefined\n      let checkoutId: string\n      if (previous && reusedId) {\n        session = previous\n        checkoutId = reusedId\n      } else {\n        await config.prepareCart({ sf, cartId, fields })\n        const before = await sf.carts.get(cartId).catch(() => null)\n        const created = await sf.carts.checkout(\n          cartId,\n          { payment_method: card.methodKey, payment_flow: 'embedded', payment_option: 'card', expected_total: expected, return_url: `${site}${config.returnPath}` },\n          { idempotencyKey: `chk-${cartId}` },\n        )\n        checkoutId = created.checkout.id\n        session = { cart_id: cartId, draft: config.createDraft({ created, before, fields }) }\n      }\n\n      const device = deviceSessionId(body.device_session_id)\n      const result = await sf.checkouts.pay(\n        checkoutId,\n        { method: 'card', provider_data: providerData, ...(device ? { device_session_id: device } : {}), expected_total: expected },\n        { idempotencyKey: paymentIdempotencyKey(checkoutId, attempt) },\n      )\n\n      const headers = new Headers()\n      const closed = await config.settle({ draft: session.draft, result, headers })\n      if (!closed) headers.append('Set-Cookie', await config.serializeSession(session))\n      return json(result, { headers })\n    } catch (err) {\n      if (isStorefrontError(err)) {\n        const { status, body: errBody } = payErrorResponse(err)\n        log({ level: 'warn', msg: 'cobro rechazado por OPS', status: err.status, code: err.code ?? null, field: err.field ?? null, message: String(err.message).slice(0, 300) })\n        // 5xx, network or timeout: the charge may have happened; the browser retries with the SAME key.\n        // The checkout exists even when the charge fails: kept so the retry reuses it.\n        const headers = new Headers()\n        if (session) headers.append('Set-Cookie', await config.serializeSession(session))\n        return json(errBody, { status, headers })\n      }\n      throw err\n    }\n  }\n\n  async function status(request: Request): Promise<Response> {\n    if (!sameOrigin(request, config.site(request))) return fail(403, 'forbidden', 'origin')\n    const session = await config.readSession(request)\n    const id = session?.draft.checkout_id\n    if (!session || !id) return fail(404, 'not_found', msg.expiredCart)\n    try {\n      const sf = await config.client(request)\n      const found = await sf.checkouts.get(id)\n      if (!found) return fail(404, 'not_found', msg.expiredCart)\n      const attempt = checkoutToAttempt(found)\n      const headers = new Headers()\n      await config.settle({ draft: session.draft, result: attempt, headers })\n      return json(attempt, { headers })\n    } catch (err) {\n      if (isStorefrontError(err)) {\n        const { status: code, body } = payErrorResponse(err)\n        return json(body, { status: code })\n      }\n      throw err\n    }\n  }\n\n  async function cash(args: Parameters<EmbeddedPayHandlers['cash']>[0]): Promise<CashOutcome> {\n    const { sf, request, cartId, fields, choice, before } = args\n    const providerData = cashProviderData(choice.points, fields.cash_point)\n    if (!providerData) return { kind: 'error', status: 422, message: msg.cashChoosePoint, fields: ['cash_point'] }\n    const created = await sf.carts.checkout(\n      cartId,\n      { payment_method: choice.methodKey, payment_flow: 'embedded', payment_option: 'cash', return_url: `${config.site(request)}${config.returnPath}` },\n      { idempotencyKey: `chk-${cartId}-cash` },\n    )\n    const draft = config.createDraft({ created, before, fields })\n    // One fixed key per checkout: a double submit returns the SAME voucher.\n    const result = await sf.checkouts.pay(created.checkout.id, { method: 'cash', provider_data: providerData }, { idempotencyKey: paymentIdempotencyKey(created.checkout.id, 'cash') })\n    const headers = new Headers()\n    if (await config.settle({ draft, result, headers })) return { kind: 'done', headers }\n    const outcome = paymentOutcome(result, locale)\n    return { kind: 'error', status: safeHttpsUrl(outcome.redirect_url) ? 409 : 422, message: outcome.message, fields: [] }\n  }\n\n  return { pay, status, cash }\n}\n"]}