@delopay/sdk 0.164.0 → 0.166.0

package/dist/index.cjs

@@ -63,6 +63,7 @@ __export(index_exports, {
   DEFAULT_BADGES_DARK: () => DEFAULT_BADGES_DARK,
   DEFAULT_BRANDING: () => DEFAULT_BRANDING,
   DEFAULT_BRANDING_DARK: () => DEFAULT_BRANDING_DARK,
+  DEFAULT_NOTICES: () => DEFAULT_NOTICES,
   Delopay: () => Delopay,
   DelopayAuthenticationError: () => DelopayAuthenticationError,
   DelopayError: () => DelopayError,
@@ -84,6 +85,12 @@ __export(index_exports, {
   NATIVE_PANE_CATEGORY_KEYS: () => NATIVE_PANE_CATEGORY_KEYS,
   NATIVE_PANE_ICON_KEYS: () => NATIVE_PANE_ICON_KEYS,
   NOMUPAY_FORM_STYLES: () => NOMUPAY_FORM_STYLES,
+  NOTICES_PER_SECTION: () => NOTICES_PER_SECTION,
+  NOTICE_ICONS: () => NOTICE_ICONS,
+  NOTICE_ICON_FALLBACK: () => NOTICE_ICON_FALLBACK,
+  NOTICE_ICON_PATHS: () => NOTICE_ICON_PATHS,
+  NOTICE_LABEL_MAX_LENGTH: () => NOTICE_LABEL_MAX_LENGTH,
+  NOTICE_SECTIONS: () => NOTICE_SECTIONS,
   OperationLimits: () => OperationLimits,
   PANES_MAX: () => PANES_MAX,
   PANE_CATEGORY_KEYS: () => PANE_CATEGORY_KEYS,
@@ -141,6 +148,7 @@ __export(index_exports, {
   cloneBranding: () => cloneBranding,
   cloneCustomField: () => cloneCustomField,
   cloneNativePane: () => cloneNativePane,
+  cloneNotice: () => cloneNotice,
   clonePane: () => clonePane,
   compareSections: () => compareSections,
   contrastRatio: () => contrastRatio,
@@ -156,11 +164,13 @@ __export(index_exports, {
   decodeMethodSectionLabels: () => decodeMethodSectionLabels,
   decodeMethodSectionOrder: () => decodeMethodSectionOrder,
   decodeNativePanes: () => decodeNativePanes,
+  decodeNotices: () => decodeNotices,
   decodePanes: () => decodePanes,
   defaultBranding: () => defaultBranding,
   defaultCustomFieldVisibility: () => defaultCustomFieldVisibility,
   defaultMethodSectionOrder: () => defaultMethodSectionOrder,
   defaultNativePane: () => defaultNativePane,
+  defaultNotices: () => defaultNotices,
   defaultOperatorForSource: () => defaultOperatorForSource,
   defaultPane: () => defaultPane,
   emptyPaneCatalog: () => emptyPaneCatalog,
@@ -170,6 +180,7 @@ __export(index_exports, {
   encodeMethodSectionLabels: () => encodeMethodSectionLabels,
   encodeMethodSectionOrder: () => encodeMethodSectionOrder,
   encodeNativePanes: () => encodeNativePanes,
+  encodeNotices: () => encodeNotices,
   encodePanes: () => encodePanes,
   evaluateCustomFieldCondition: () => evaluateCustomFieldCondition,
   evaluateCustomFieldVisibility: () => evaluateCustomFieldVisibility,
@@ -180,13 +191,17 @@ __export(index_exports, {
   inputPadValue: () => inputPadValue,
   isCheckboxChecked: () => isCheckboxChecked,
   isDarkSurface: () => isDarkSurface,
+  isDefaultBadgeSet: () => isDefaultBadgeSet,
   isHexColor: () => isHexColor,
+  isNoticeIcon: () => isNoticeIcon,
   isSubscriptionDisputeWebhook: () => isSubscriptionDisputeWebhook,
   isSubscriptionLifecycleWebhook: () => isSubscriptionLifecycleWebhook,
   knownSectionLabelKey: () => knownSectionLabelKey,
   leaf: () => leaf,
   logoDimensions: () => logoDimensions,
   nativePaneMethodInfo: () => nativePaneMethodInfo,
+  noticeText: () => noticeText,
+  noticesIn: () => noticesIn,
   offerablePaneMethods: () => offerablePaneMethods,
   paneCatalogFor: () => paneCatalogFor,
   paneDisplayDefaults: () => paneDisplayDefaults,
@@ -195,6 +210,7 @@ __export(index_exports, {
   paneViewVisibility: () => paneViewVisibility,
   parseCustomFieldsLoose: () => parseCustomFieldsLoose,
   parseImportedBranding: () => parseImportedBranding,
+  parseNoticesLoose: () => parseNoticesLoose,
   programToTree: () => programToTree,
   radiusValue: () => radiusValue,
   readableInkOn: () => readableInkOn,
@@ -202,12 +218,14 @@ __export(index_exports, {
   resolveAirwallexLabelStyle: () => resolveAirwallexLabelStyle,
   resolveApplePayButtonStyle: () => resolveApplePayButtonStyle,
   resolveGooglePayButtonColor: () => resolveGooglePayButtonColor,
+  resolveNoticesAndBadges: () => resolveNoticesAndBadges,
   resolveStripeTheme: () => resolveStripeTheme,
   ruleMatchToTree: () => ruleMatchToTree,
   sanitizeCustomCss: () => sanitizeCustomCss,
   sectionLabel: () => sectionLabel,
   sectionOrderOf: () => sectionOrderOf,
   shadowFor: () => shadowFor,
+  shownNotices: () => shownNotices,
   stripeSpacingValues: () => stripeSpacingValues,
   surchargeFigurePlan: () => surchargeFigurePlan,
   surchargeShowsLabel: () => surchargeShowsLabel,
@@ -1161,6 +1179,289 @@ var Customers = class {
   }
 };
 
+// src/recordCounter.ts
+var LF = 10;
+var CR = 13;
+var QUOTE = 34;
+var BACKSLASH = 92;
+var OPEN_BRACE = 123;
+var CLOSE_BRACE = 125;
+var OPEN_BRACKET = 91;
+var CLOSE_BRACKET = 93;
+var CsvRecordCounter = class {
+  constructor() {
+    this.inQuotes = false;
+    this.newlines = 0;
+    /** Whether anything but a line break has arrived since the last newline. */
+    this.lineHasContent = false;
+  }
+  push(chunk) {
+    let inQuotes = this.inQuotes;
+    let newlines = this.newlines;
+    let lineHasContent = this.lineHasContent;
+    for (const byte of chunk) {
+      if (byte === QUOTE) {
+        inQuotes = !inQuotes;
+        lineHasContent = true;
+      } else if (inQuotes) {
+        lineHasContent = true;
+      } else if (byte === LF) {
+        newlines++;
+        lineHasContent = false;
+      } else if (byte !== CR) {
+        lineHasContent = true;
+      }
+    }
+    this.inQuotes = inQuotes;
+    this.newlines = newlines;
+    this.lineHasContent = lineHasContent;
+  }
+  get records() {
+    return Math.max(0, this.newlines - 1);
+  }
+  /**
+   * The export writer ends every line — the header and each record — with a
+   * newline, so a whole body ends on one, outside quotes. RFC 4180 lets a
+   * final line break be omitted, but these bodies never omit it, and without
+   * that rule a file cut part-way through its last unquoted field
+   * (`pay_1,12` of `pay_1,123`) would count as one more whole record and
+   * match the figure it was announced with.
+   */
+  get complete() {
+    return this.newlines >= 1 && !this.inQuotes && !this.lineHasContent;
+  }
+  /**
+   * The records that ended. An unterminated tail is not one of them — see
+   * {@link complete}.
+   */
+  finish() {
+    return this.records;
+  }
+};
+var SEEKING = 0;
+var COUNTING = 1;
+var CLOSED = 2;
+var JsonArrayRecordCounter = class {
+  constructor() {
+    this.depth = 0;
+    this.inString = false;
+    this.escaped = false;
+    this.topIsObject = false;
+    this.state = SEEKING;
+    this.count = 0;
+  }
+  push(chunk) {
+    if (this.state === CLOSED) return;
+    let { depth, inString, escaped, topIsObject, count } = this;
+    let state = this.state;
+    for (const byte of chunk) {
+      if (inString) {
+        if (escaped) escaped = false;
+        else if (byte === BACKSLASH) escaped = true;
+        else if (byte === QUOTE) inString = false;
+        continue;
+      }
+      if (byte === QUOTE) {
+        inString = true;
+      } else if (byte === OPEN_BRACE || byte === OPEN_BRACKET) {
+        if (depth === 0 && byte === OPEN_BRACE) topIsObject = true;
+        if (byte === OPEN_BRACKET && depth === 1 && topIsObject && state === SEEKING) {
+          state = COUNTING;
+        }
+        depth++;
+      } else if (byte === CLOSE_BRACE || byte === CLOSE_BRACKET) {
+        depth--;
+        if (state === COUNTING) {
+          if (depth === 2) count++;
+          else if (depth === 1) {
+            state = CLOSED;
+            break;
+          }
+        }
+      }
+    }
+    this.depth = depth;
+    this.inString = inString;
+    this.escaped = escaped;
+    this.topIsObject = topIsObject;
+    this.state = state;
+    this.count = count;
+  }
+  get records() {
+    return this.count;
+  }
+  /**
+   * Whether the rows array has closed. What follows it is checked by parsing
+   * the whole document, which a cut-off body fails.
+   */
+  get complete() {
+    return this.state === CLOSED;
+  }
+  finish() {
+    return this.count;
+  }
+};
+
+// src/exportDownload.ts
+var RECORD_COUNT_HEADER = "x-delopay-record-count";
+var LIST_ENVELOPE = { rows: "records", count: "record_count" };
+var WORKSPACE_ENVELOPE = { rows: "data", count: "total_count" };
+function parseRecordCount(header) {
+  if (header === null) return null;
+  const trimmed = header.trim();
+  if (!/^\d+$/.test(trimmed)) return null;
+  const value = Number(trimmed);
+  return Number.isSafeInteger(value) ? value : null;
+}
+function counterFor(format) {
+  if (format === "csv") return new CsvRecordCounter();
+  if (format === "json") return new JsonArrayRecordCounter();
+  return null;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function announced(expected) {
+  return expected === null ? "" : ` of the ${expected} announced`;
+}
+function incomplete(message, expected, received, requestId) {
+  return new DelopayError(message, {
+    status: 0,
+    code: "EXPORT_INCOMPLETE",
+    type: "export_incomplete",
+    ...requestId !== void 0 ? { requestId } : {},
+    data: { expected_records: expected, received_records: received }
+  });
+}
+async function downloadExport(request, call, options) {
+  const { format } = call;
+  const envelope = call.envelope ?? LIST_ENVELOPE;
+  const onProgress = options?.onProgress;
+  let latest = {
+    phase: "preparing",
+    receivedBytes: 0,
+    totalBytes: null,
+    receivedRecords: 0,
+    expectedRecords: null
+  };
+  const seen = { attempt: -1, counter: null, expected: null, requestId: void 0, listenerError: null };
+  const report = (progress) => {
+    latest = progress;
+    if (!onProgress) return;
+    try {
+      onProgress({ ...progress });
+    } catch (error) {
+      seen.listenerError = { error };
+      throw error;
+    }
+  };
+  report(latest);
+  const onDownloadProgress = (event) => {
+    if (event.attempt !== seen.attempt) {
+      seen.attempt = event.attempt;
+      seen.counter = counterFor(format);
+      seen.expected = format === "pdf" ? null : parseRecordCount(event.headers.get(RECORD_COUNT_HEADER));
+      seen.requestId = event.headers.get("x-request-id") ?? event.headers.get("x-trace-id") ?? void 0;
+    }
+    if (event.chunk.byteLength > 0) seen.counter?.push(event.chunk);
+    report({
+      phase: "receiving",
+      receivedBytes: event.loaded,
+      totalBytes: event.total,
+      receivedRecords: seen.counter?.records ?? 0,
+      expectedRecords: seen.expected
+    });
+  };
+  let result;
+  try {
+    result = await request(call.method, call.path, {
+      ...call.request,
+      ...options?.signal !== void 0 ? { signal: options.signal } : {},
+      ...options?.timeout !== void 0 ? { timeout: options.timeout } : {},
+      onDownloadProgress
+    });
+  } catch (err) {
+    if (seen.listenerError !== null && err === seen.listenerError.error) throw err;
+    if (format === "json" && seen.attempt >= 0 && err instanceof SyntaxError) {
+      const received2 = seen.counter?.records ?? 0;
+      throw incomplete(
+        seen.expected === null ? `Export incomplete: the body ended part-way through the JSON document, after ${received2} records` : `Export incomplete: the server announced ${seen.expected} records, and the body ended part-way through the JSON document after ${received2}`,
+        seen.expected,
+        received2,
+        seen.requestId
+      );
+    }
+    throw err;
+  }
+  const { expected, requestId } = seen;
+  let received = 0;
+  if (format === "json") {
+    const rows = isRecord(result) ? result[envelope.rows] : void 0;
+    if (!Array.isArray(rows)) {
+      throw incomplete(
+        `Export incomplete: the body is not an export envelope with a "${envelope.rows}" array, so it carries 0 records${announced(expected)}`,
+        expected,
+        0,
+        requestId
+      );
+    }
+    received = rows.length;
+    const declared = isRecord(result) ? result[envelope.count] : void 0;
+    if (typeof declared === "number" && declared !== rows.length) {
+      throw incomplete(
+        `Export incomplete: the file's ${envelope.count} is ${declared}, but it carries ${rows.length} records`,
+        declared,
+        rows.length,
+        requestId
+      );
+    }
+  } else if (format === "csv") {
+    const counter = seen.counter;
+    received = counter?.finish() ?? 0;
+    if (!counter?.complete) {
+      throw incomplete(
+        `Export incomplete: the CSV body ended part-way through a line, after ${received} complete records${announced(expected)}`,
+        expected,
+        received,
+        requestId
+      );
+    }
+  }
+  if (expected !== null && received !== expected) {
+    throw incomplete(
+      `Export incomplete: the server announced ${expected} records, and the body carried ${received}`,
+      expected,
+      received,
+      requestId
+    );
+  }
+  report({
+    phase: "done",
+    receivedBytes: latest.receivedBytes,
+    totalBytes: latest.totalBytes,
+    receivedRecords: received,
+    expectedRecords: expected
+  });
+  return result;
+}
+var ACCEPT = {
+  csv: "text/csv",
+  json: "application/json",
+  pdf: "application/pdf"
+};
+function negotiated(options, format) {
+  const headers = { ...options.headers, Accept: ACCEPT[format] };
+  return format === "json" ? { ...options, headers } : { ...options, headers, responseType: "blob" };
+}
+function runExport(request, method, path, base, options) {
+  const format = options?.format ?? "json";
+  return downloadExport(
+    request,
+    { method, path, request: negotiated(base, format), format },
+    options
+  );
+}
+
 // src/resources/disputes.ts
 function workspaceQuery(params) {
   if (!params) return void 0;
@@ -1189,9 +1490,28 @@ var Disputes = class {
   async workspaceAggregate(params) {
     return this.request("GET", "/disputes/workspace/aggregate", { query: workspaceQuery(params) });
   }
-  /** Export the complete filtered set, or throw on the server's explicit export-limit refusal. */
-  async workspaceExport(params) {
-    return this.request("GET", "/disputes/workspace/export", { query: workspaceQuery(params) });
+  /**
+   * Export the complete filtered set, or throw on the server's explicit
+   * export-limit refusal. `GET /disputes/workspace/export`
+   *
+   * The body is streamed, and held to the `X-Delopay-Record-Count` the server
+   * announces and to its own `total_count`: a set that arrives short rejects
+   * with `EXPORT_INCOMPLETE` rather than resolving. `options` reports the
+   * download's progress and takes a signal and an idle timeout — see
+   * {@link ExportTransferOptions}.
+   */
+  async workspaceExport(params, options) {
+    return downloadExport(
+      this.request,
+      {
+        method: "GET",
+        path: "/disputes/workspace/export",
+        request: { query: workspaceQuery(params) },
+        format: "json",
+        envelope: WORKSPACE_ENVELOPE
+      },
+      options
+    );
   }
   /**
    * Retrieve a dispute by its ID.
@@ -4348,77 +4668,68 @@ var Export = class {
     this.request = request;
   }
   async transactions(params, options) {
-    return this.request(
-      "POST",
-      "/export/transactions",
-      transactionBody(params, options)
-    );
+    return runExport(this.request, "POST", "/export/transactions", { body: params ?? {} }, options);
   }
   async transactionsForProfile(params, options) {
-    return this.request(
+    return runExport(
+      this.request,
       "POST",
       "/export/profile/transactions",
-      transactionBody(params, options)
+      { body: params ?? {} },
+      options
     );
   }
   async refunds(params, options) {
-    return this.request("POST", "/refunds/list/export", bodied(params ?? {}, options));
+    return runExport(this.request, "POST", "/refunds/list/export", { body: params ?? {} }, options);
   }
   async refundsForProfile(params, options) {
-    return this.request(
+    return runExport(
+      this.request,
       "POST",
       "/refunds/profile/list/export",
-      bodied(params ?? {}, options)
+      { body: params ?? {} },
+      options
     );
   }
   async disputes(params, options) {
-    return this.request("GET", "/disputes/list/export", queried(params, options));
+    return runExport(this.request, "GET", "/disputes/list/export", queried(params), options);
   }
   async disputesForProfile(params, options) {
-    return this.request(
+    return runExport(
+      this.request,
       "GET",
       "/disputes/profile/list/export",
-      queried(params, options)
+      queried(params),
+      options
     );
   }
   async payouts(params, options) {
-    return this.request("POST", "/payouts/list/export", bodied(params, options));
+    return runExport(this.request, "POST", "/payouts/list/export", { body: params }, options);
   }
   async payoutsForProfile(params, options) {
-    return this.request("POST", "/payouts/profile/list/export", bodied(params, options));
+    return runExport(
+      this.request,
+      "POST",
+      "/payouts/profile/list/export",
+      { body: params },
+      options
+    );
   }
   async subscriptions(profileId, params, options) {
-    return this.request(
+    return runExport(
+      this.request,
       "GET",
       "/subscriptions/list/export",
-      queried(params, options, { "X-Profile-Id": profileId })
+      queried(params, { "X-Profile-Id": profileId }),
+      options
     );
   }
   async auditLog(params, options) {
-    return this.request("GET", "/audit/export", queried(params, options));
+    return runExport(this.request, "GET", "/audit/export", queried(params), options);
   }
 };
-var ACCEPT = {
-  csv: "text/csv",
-  json: "application/json",
-  pdf: "application/pdf"
-};
-function negotiated(options, format) {
-  const headers = { ...options.headers, Accept: ACCEPT[format] };
-  return format === "json" ? { ...options, headers } : { ...options, headers, responseType: "blob" };
-}
-function transactionBody(params, options) {
-  const format = options?.format ?? "json";
-  return negotiated({ body: { ...params, format } }, format);
-}
-function bodied(body, options) {
-  return negotiated({ body }, options?.format ?? "json");
-}
-function queried(params, options, headers) {
-  return negotiated(
-    { query: params ?? {}, ...headers ? { headers } : {} },
-    options?.format ?? "json"
-  );
+function queried(params, headers) {
+  return { query: params ?? {}, ...headers ? { headers } : {} };
 }
 
 // src/resources/featureMatrix.ts
@@ -5791,6 +6102,112 @@ function findIdempotencyKey(headers) {
 }
 function noop() {
 }
+var ListenerFailure = class {
+  constructor(cause) {
+    this.cause = cause;
+  }
+};
+var BodyStreamFailure = class {
+  constructor(cause) {
+    this.cause = cause;
+  }
+};
+function abortError() {
+  const error = new Error("The operation was aborted");
+  error.name = "AbortError";
+  return error;
+}
+function parseContentLength(header) {
+  if (header === null || !/^\s*\d+\s*$/.test(header)) return null;
+  const value = Number(header);
+  return Number.isSafeInteger(value) ? value : null;
+}
+function readChunk(reader, signal) {
+  if (signal.aborted) return Promise.reject(abortError());
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(abortError());
+    signal.addEventListener("abort", onAbort, { once: true });
+    reader.read().then(
+      (result) => {
+        signal.removeEventListener("abort", onAbort);
+        resolve(result);
+      },
+      (cause) => {
+        signal.removeEventListener("abort", onAbort);
+        reject(signal.aborted ? abortError() : new BodyStreamFailure(cause));
+      }
+    );
+  });
+}
+function concatChunks(chunks, length) {
+  const out = new Uint8Array(length);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return out.buffer;
+}
+async function receiveWithProgress(response, responseType, listener, attempt, signal, onActivity) {
+  const headers = response.headers ?? new Headers();
+  const total = parseContentLength(headers.get("content-length"));
+  let loaded = 0;
+  const notify = (chunk) => {
+    try {
+      listener({ loaded, total, chunk: chunk.slice(), headers, attempt });
+    } catch (cause) {
+      throw new ListenerFailure(cause);
+    }
+  };
+  onActivity();
+  notify(new Uint8Array(0));
+  const body = response.body;
+  if (!body || typeof body.getReader !== "function") {
+    if (responseType === "blob") {
+      const blob = await response.blob();
+      const bytes3 = new Uint8Array(await blob.arrayBuffer());
+      loaded = bytes3.byteLength;
+      if (loaded > 0) notify(bytes3);
+      return blob;
+    }
+    if (responseType === "arraybuffer") {
+      const buffer = await response.arrayBuffer();
+      loaded = buffer.byteLength;
+      if (loaded > 0) notify(new Uint8Array(buffer));
+      return buffer;
+    }
+    const text2 = await response.text();
+    const bytes2 = new TextEncoder().encode(text2);
+    loaded = bytes2.byteLength;
+    if (loaded > 0) notify(bytes2);
+    return text2 ? JSON.parse(text2) : void 0;
+  }
+  const reader = body.getReader();
+  const chunks = [];
+  try {
+    for (; ; ) {
+      const { done, value } = await readChunk(reader, signal);
+      if (done) break;
+      if (!value || value.byteLength === 0) continue;
+      chunks.push(value);
+      loaded += value.byteLength;
+      onActivity();
+      notify(value);
+    }
+  } catch (err) {
+    reader.cancel().catch(noop);
+    throw err;
+  }
+  const bytes = concatChunks(chunks, loaded);
+  if (responseType === "blob") {
+    return new Blob([bytes], { type: headers.get("content-type") ?? "" });
+  }
+  if (responseType === "arraybuffer") {
+    return bytes;
+  }
+  const text = new TextDecoder().decode(bytes);
+  return text ? JSON.parse(text) : void 0;
+}
 function combineSignals(signals) {
   const controller = new AbortController();
   const listeners = [];
@@ -6072,7 +6489,12 @@ var Delopay = class {
         emit("retry", { attempt, maxRetries: this.maxRetries, method, path });
       }
       const timeoutCtrl = new AbortController();
-      const timeoutId = setTimeout(() => timeoutCtrl.abort(), timeoutMs);
+      let timeoutId = setTimeout(() => timeoutCtrl.abort(), timeoutMs);
+      const restartIdleTimer = () => {
+        if (timeoutCtrl.signal.aborted) return;
+        clearTimeout(timeoutId);
+        timeoutId = setTimeout(() => timeoutCtrl.abort(), timeoutMs);
+      };
       const combined = combineSignals(
         callerSignal ? [timeoutCtrl.signal, callerSignal] : [timeoutCtrl.signal]
       );
@@ -6130,6 +6552,16 @@ var Delopay = class {
           }
           throw error;
         }
+        if (options?.onDownloadProgress) {
+          return await receiveWithProgress(
+            response,
+            options.responseType,
+            options.onDownloadProgress,
+            attempt,
+            combined.signal,
+            restartIdleTimer
+          );
+        }
         if (options?.responseType === "blob") {
           return await response.blob();
         }
@@ -6142,6 +6574,20 @@ var Delopay = class {
         if (err instanceof DelopayError || err instanceof DelopayAuthenticationError) {
           throw err;
         }
+        if (err instanceof ListenerFailure) {
+          throw err.cause;
+        }
+        if (err instanceof BodyStreamFailure) {
+          const cause = err.cause;
+          const detail = cause instanceof Error ? cause.message : String(cause ?? "body stream failed");
+          lastError = new DelopayError(`Network error: ${detail}`, {
+            status: 0,
+            code: "NETWORK",
+            type: "network_error"
+          });
+          if (isRetryable && attempt < this.maxRetries) continue;
+          throw lastError;
+        }
         if (err instanceof Error && err.name === "AbortError") {
           if (callerSignal?.aborted) {
             throw new DelopayError("Request aborted", {
@@ -6719,6 +7165,66 @@ function surchargeWordFor(branding, isDiscount, locale) {
     locale
   );
 }
+var NOTICE_SECTIONS = ["summary", "payment"];
+var NOTICES_PER_SECTION = 3;
+var NOTICE_LABEL_MAX_LENGTH = 80;
+var NOTICE_ICONS = [
+  "lock",
+  "shield",
+  "check",
+  "truck",
+  "package",
+  "refresh",
+  "star",
+  "support",
+  "globe",
+  "tag",
+  "heart",
+  "leaf",
+  "clock",
+  "bank"
+];
+var NOTICE_ICON_FALLBACK = "check";
+var NOTICE_ICON_PATHS = {
+  lock: [
+    "M6 10h12a2 2 0 0 1 2 2v7a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2z",
+    "M8 10V7a4 4 0 0 1 8 0v3"
+  ],
+  shield: ["M12 3l7 3v6c0 4.2-2.9 7.6-7 9-4.1-1.4-7-4.8-7-9V6z", "M9 12l2.5 2.5 4-4.5"],
+  check: ["M21 12a9 9 0 1 1-18 0a9 9 0 1 1 18 0z", "M8 12.5l3 3 5-6"],
+  truck: [
+    "M3 7.5h10v9H3z",
+    "M13 11h4l3 3v2.5h-7z",
+    "M8.8 18a1.8 1.8 0 1 1-3.6 0a1.8 1.8 0 1 1 3.6 0z",
+    "M18.8 18a1.8 1.8 0 1 1-3.6 0a1.8 1.8 0 1 1 3.6 0z"
+  ],
+  package: [
+    "M11 21.73a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73z",
+    "M12 22V12",
+    "M3.29 7L12 12l8.71-5"
+  ],
+  refresh: ["M20 12a8 8 0 1 1-2.5-5.8", "M20 4v5h-5"],
+  star: ["m12 3.6 2.6 5.3 5.9.9-4.3 4.1 1 5.8-5.2-2.7-5.2 2.7 1-5.8-4.3-4.1 5.9-.9z"],
+  support: [
+    "M5 13v-1a7 7 0 0 1 14 0v1",
+    "M3.5 14.5a1.8 1.8 0 0 1 1.8-1.8H7v5H5.3a1.8 1.8 0 0 1-1.8-1.8z",
+    "M20.5 14.5a1.8 1.8 0 0 0-1.8-1.8H17v5h1.7a1.8 1.8 0 0 0 1.8-1.8z",
+    "M19 17.7v.8a2.5 2.5 0 0 1-2.5 2.5H13"
+  ],
+  globe: [
+    "M21 12a9 9 0 1 1-18 0a9 9 0 1 1 18 0z",
+    "M3 12h18",
+    "M12 3a14 14 0 0 1 0 18a14 14 0 0 1 0-18z"
+  ],
+  tag: ["M11 3H4v7l10 10 7-7z", "M9.1 7a1.3 1.3 0 1 1-2.6 0a1.3 1.3 0 1 1 2.6 0z"],
+  heart: ["M12 20s-7-4.4-7-9.3A3.9 3.9 0 0 1 12 8a3.9 3.9 0 0 1 7 2.7c0 4.9-7 9.3-7 9.3z"],
+  leaf: ["M20 4c0 9-5.4 13-9.5 13A4.5 4.5 0 0 1 6 12.5C6 7 12 4 20 4z", "M4 20c2-4.5 5-7.5 9-9.5"],
+  clock: ["M21 12a9 9 0 1 1-18 0a9 9 0 1 1 18 0z", "M12 7v5l3 2"],
+  bank: ["M3 9.5 12 4l9 5.5", "M5 10v8M9.5 10v8M14.5 10v8M19 10v8", "M3 20h18"]
+};
+function isNoticeIcon(value) {
+  return typeof value === "string" && NOTICE_ICONS.includes(value);
+}
 var FONT_STACKS = {
   inter: "'Inter Variable', 'Inter', system-ui, -apple-system, sans-serif",
   system: "system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', sans-serif",
@@ -6888,6 +7394,96 @@ var DEFAULT_BADGES_DARK = [
     borderColor: "#1e40af"
   }
 ];
+var DEFAULT_NOTICES = [
+  {
+    id: "secure",
+    section: "summary",
+    icon: "shield",
+    label: "Secure payment",
+    labelTranslations: {
+      de: "Sichere Zahlung",
+      fr: "Paiement s\xE9curis\xE9",
+      es: "Pago seguro",
+      it: "Pagamento sicuro",
+      nl: "Veilig betalen",
+      zh: "\u5B89\u5168\u652F\u4ED8",
+      "zh-Hant": "\u5B89\u5168\u4ED8\u6B3E",
+      hi: "\u0938\u0941\u0930\u0915\u094D\u0937\u093F\u0924 \u092D\u0941\u0917\u0924\u093E\u0928",
+      ar: "\u062F\u0641\u0639 \u0622\u0645\u0646"
+    }
+  },
+  {
+    id: "ssl",
+    section: "summary",
+    icon: "lock",
+    label: "Encrypted \xB7 256-bit SSL",
+    labelTranslations: {
+      de: "Verschl\xFCsselt \xB7 256-Bit-SSL",
+      fr: "Chiffr\xE9 \xB7 SSL 256 bits",
+      es: "Cifrado \xB7 SSL de 256 bits",
+      it: "Crittografato \xB7 SSL a 256 bit",
+      nl: "Versleuteld \xB7 256-bit SSL",
+      zh: "\u52A0\u5BC6 \xB7 256 \u4F4D SSL",
+      "zh-Hant": "\u52A0\u5BC6 \xB7 256 \u4F4D\u5143 SSL",
+      hi: "\u090F\u0928\u094D\u0915\u094D\u0930\u093F\u092A\u094D\u091F\u0947\u0921 \xB7 256-\u092C\u093F\u091F SSL",
+      ar: "\u0645\u0634\u0641\u0651\u0631 \xB7 SSL \u0628\u0637\u0648\u0644 256 \u0628\u062A"
+    }
+  }
+];
+function defaultNotices() {
+  return DEFAULT_NOTICES.map(cloneNotice);
+}
+function cloneNotice(notice) {
+  return { ...notice, labelTranslations: { ...notice.labelTranslations } };
+}
+function hexChannels(hex) {
+  const raw = /^#([0-9a-f]{6})$/i.exec(hex.trim())?.[1];
+  if (!raw) return null;
+  return [
+    parseInt(raw.slice(0, 2), 16),
+    parseInt(raw.slice(2, 4), 16),
+    parseInt(raw.slice(4, 6), 16)
+  ];
+}
+function isThemeTintedBadgeColouring(textColor, fill, border) {
+  const primary = hexChannels(textColor);
+  const bg = hexChannels(fill);
+  const line = hexChannels(border);
+  if (!primary || !bg || !line) return false;
+  const mixed = (surface, to, share) => Math.round(surface + (to - surface) * share);
+  return primary.every((p, i) => {
+    for (let surface = 0; surface <= 255; surface += 1) {
+      if (mixed(surface, p, 0.08) === bg[i] && mixed(surface, p, 0.3) === line[i]) return true;
+    }
+    return false;
+  });
+}
+function isDefaultBadgeSet(badges) {
+  if (badges.length !== DEFAULT_BADGES.length) return false;
+  const sameContent = badges.every(
+    (badge, i) => badge.id === DEFAULT_BADGES[i]?.id && badge.label === DEFAULT_BADGES[i]?.label
+  );
+  if (!sameContent) return false;
+  const colouring = (set) => set.map((b) => [b.textColor, b.backgroundColor, b.borderColor ?? ""].join("|").toLowerCase()).join("/");
+  const mine = colouring(badges);
+  if (mine === colouring(DEFAULT_BADGES) || mine === colouring(DEFAULT_BADGES_DARK)) return true;
+  const [first] = badges;
+  const border = first?.borderColor;
+  if (!first || !border) return false;
+  const same = (a, b) => (a ?? "").toLowerCase() === b.toLowerCase();
+  return badges.every(
+    (b) => same(b.textColor, first.textColor) && same(b.backgroundColor, first.backgroundColor) && same(b.borderColor, border)
+  ) && isThemeTintedBadgeColouring(first.textColor, first.backgroundColor, border);
+}
+function resolveNoticesAndBadges(savedBadges, savedNotices) {
+  if (savedNotices !== null) {
+    return { trustBadges: savedBadges ?? [], notices: savedNotices };
+  }
+  if (savedBadges === null || isDefaultBadgeSet(savedBadges)) {
+    return { trustBadges: [], notices: defaultNotices() };
+  }
+  return { trustBadges: savedBadges, notices: [] };
+}
 var METHOD_SECTION_ORDER_KEY = "methodSectionOrder";
 var METHOD_SECTION_LABELS_KEY = "methodSectionLabels";
 var MIN_SECTION_ORDER = 1;
@@ -7174,7 +7770,11 @@ var DEFAULT_BRANDING_BASE = {
 var DEFAULT_BRANDING = {
   ...DEFAULT_BRANDING_BASE,
   ...LIGHT_PALETTE,
-  trustBadges: DEFAULT_BADGES.map((b) => ({ ...b })),
+  // No badges by default since todos#218 — notices took their place.
+  // `DEFAULT_BADGES` stays exported because `isDefaultBadgeSet` still has to
+  // recognise the pair on shops saved before.
+  trustBadges: [],
+  notices: defaultNotices(),
   customFields: [],
   methodSectionOrder: defaultMethodSectionOrder(),
   methodSectionLabels: {}
@@ -7197,7 +7797,8 @@ var DEFAULT_BRANDING_DARK = {
   // end of the ramp — 10.69 and 9.29 against the dark surface, also pinned.
   surchargeColor: "#fbbf24",
   discountColor: "#34d399",
-  trustBadges: DEFAULT_BADGES_DARK.map((b) => ({ ...b })),
+  trustBadges: [],
+  notices: defaultNotices(),
   customFields: [],
   methodSectionOrder: defaultMethodSectionOrder(),
   methodSectionLabels: {}
@@ -7209,6 +7810,7 @@ function cloneBranding(b) {
   return {
     ...b,
     trustBadges: b.trustBadges.map((badge) => ({ ...badge })),
+    notices: b.notices.map(cloneNotice),
     customFields: b.customFields.map(cloneCustomField),
     methodSectionOrder: { ...b.methodSectionOrder },
     methodSectionLabels: Object.fromEntries(
@@ -7318,6 +7920,80 @@ function encodeBadges(badges) {
     }))
   );
 }
+var NOTICE_ID_MAX_LENGTH = 40;
+function capNoticeText(value) {
+  return Array.from(value).slice(0, NOTICE_LABEL_MAX_LENGTH).join("");
+}
+function normalizeNotices(list) {
+  const seen = /* @__PURE__ */ new Set();
+  const perSection = /* @__PURE__ */ new Map();
+  const out = [];
+  list.forEach((raw, index) => {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) return;
+    const src = raw;
+    const label = typeof src["label"] === "string" ? capNoticeText(src["label"]) : "";
+    const labelTranslations = {};
+    for (const [locale, text] of Object.entries(parseTranslations(src["labelTranslations"]))) {
+      labelTranslations[locale] = capNoticeText(text);
+    }
+    if (label.trim().length === 0 && Object.keys(labelTranslations).length === 0) return;
+    const section = pickEnum(src["section"], NOTICE_SECTIONS, "summary");
+    const used = perSection.get(section) ?? 0;
+    if (used >= NOTICES_PER_SECTION) return;
+    perSection.set(section, used + 1);
+    let id = typeof src["id"] === "string" ? src["id"].replace(/[^A-Za-z0-9_-]/g, "").slice(0, NOTICE_ID_MAX_LENGTH) : "";
+    if (!id || seen.has(id)) id = `notice-${index + 1}`;
+    while (seen.has(id)) id = `${id}x`;
+    seen.add(id);
+    out.push({
+      id,
+      section,
+      icon: isNoticeIcon(src["icon"]) ? src["icon"] : NOTICE_ICON_FALLBACK,
+      label,
+      labelTranslations
+    });
+  });
+  return out;
+}
+function decodeNotices(raw) {
+  if (raw === void 0) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  return Array.isArray(parsed) ? normalizeNotices(parsed) : null;
+}
+function parseNoticesLoose(raw) {
+  if (typeof raw === "string") return decodeNotices(raw);
+  return Array.isArray(raw) ? normalizeNotices(raw) : null;
+}
+function encodeNotices(notices) {
+  return JSON.stringify(
+    notices.map((n) => {
+      const translations = Object.entries(n.labelTranslations).filter(
+        ([, text]) => text.trim().length > 0
+      );
+      return {
+        id: n.id,
+        section: n.section,
+        icon: n.icon,
+        label: n.label,
+        ...translations.length > 0 ? { labelTranslations: Object.fromEntries(translations) } : {}
+      };
+    })
+  );
+}
+function noticeText(notice, locale) {
+  return translationFor(notice.labelTranslations, locale) ?? notice.label;
+}
+function noticesIn(notices, section) {
+  return notices.filter((n) => n.section === section).slice(0, NOTICES_PER_SECTION);
+}
+function shownNotices(notices, section, locale) {
+  return noticesIn(notices, section).map((notice) => ({ notice, text: noticeText(notice, locale).trim() })).filter((entry) => entry.text.length > 0);
+}
 var CUSTOM_FIELDS_MAX = 20;
 var CUSTOM_FIELD_KEY_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,39}$/;
 var ALL_CUSTOM_FIELD_TYPES = [
@@ -7661,7 +8337,10 @@ function customFieldOptionLabel(option, locale) {
 function decodeBranding(source) {
   if (!source) return cloneBranding(DEFAULT_BRANDING);
   const extras = source.sdk_ui_rules?.[BRANDING_GROUP_KEY] ?? {};
-  const decodedBadges = decodeBadges(extras["trustBadges"]);
+  const trustRow = resolveNoticesAndBadges(
+    decodeBadges(extras["trustBadges"]),
+    decodeNotices(extras["notices"])
+  );
   const decodedCustomFields = decodeCustomFields(extras["customFields"]);
   const displayName = s(source.merchant_name) || s(source.seller_name);
   const logoUrl = s(source.merchant_logo) || s(source.logo);
@@ -7840,7 +8519,8 @@ function decodeBranding(source) {
     totalLabel: s(extras["totalLabel"]) || DEFAULT_BRANDING.totalLabel,
     showCurrencyCode: parseBool(extras["showCurrencyCode"], DEFAULT_BRANDING.showCurrencyCode),
     showOrderItems: parseBool(extras["showOrderItems"], DEFAULT_BRANDING.showOrderItems),
-    trustBadges: decodedBadges ?? DEFAULT_BRANDING.trustBadges.map((b) => ({ ...b })),
+    trustBadges: trustRow.trustBadges,
+    notices: trustRow.notices,
     customFields: decodedCustomFields ?? [],
     methodSectionOrder: decodeMethodSectionOrder(extras[METHOD_SECTION_ORDER_KEY]),
     methodSectionLabels: decodeMethodSectionLabels(extras[METHOD_SECTION_LABELS_KEY]),
@@ -8124,9 +8804,14 @@ function encodeBranding(branding, base) {
     nomupayApplePayButtonType: branding.nomupayApplePayButtonType,
     nomupayGooglePayButtonColor: branding.nomupayGooglePayButtonColor,
     nomupayGooglePayButtonType: branding.nomupayGooglePayButtonType,
-    trustBadges: encodeBadges(branding.trustBadges),
+    // Always written, `[]` included — its presence is what stops a later
+    // decode from migrating the shop again (`resolveNoticesAndBadges`).
+    notices: encodeNotices(branding.notices),
     [METHOD_SECTION_ORDER_KEY]: encodeMethodSectionOrder(branding.methodSectionOrder)
   };
+  if (branding.trustBadges.length > 0) {
+    extras["trustBadges"] = encodeBadges(branding.trustBadges);
+  }
   const sectionLabels = encodeMethodSectionLabels(branding.methodSectionLabels);
   if (sectionLabels) extras[METHOD_SECTION_LABELS_KEY] = sectionLabels;
   if (branding.customFields.length > 0) {
@@ -8192,7 +8877,10 @@ function parseImportedBranding(raw) {
   const dflt = DEFAULT_BRANDING;
   const sStr = (v, fallback) => typeof v === "string" ? v : fallback;
   const sHex = (v, fallback) => typeof v === "string" && isHexColor(v) ? v : fallback;
-  const trustBadges = parseTrustBadgesLoose(root["trustBadges"]) ?? dflt.trustBadges.map((b) => ({ ...b }));
+  const { trustBadges, notices } = resolveNoticesAndBadges(
+    parseTrustBadgesLoose(root["trustBadges"]),
+    parseNoticesLoose(root["notices"])
+  );
   const customFields = parseCustomFieldsLoose(root["customFields"]) ?? [];
   const labelStyle = (() => {
     const v = root["labelStyle"];
@@ -8335,6 +9023,7 @@ function parseImportedBranding(raw) {
     showCurrencyCode: parseBool(root["showCurrencyCode"], dflt.showCurrencyCode),
     showOrderItems: parseBool(root["showOrderItems"], dflt.showOrderItems),
     trustBadges,
+    notices,
     customFields,
     // An export writes the decoded maps; a hand-written file may carry the
     // JSON strings the bag uses. Both are accepted, and neither is required.
@@ -9531,6 +10220,7 @@ var encodeNativePanes = encodePanes;
   DEFAULT_BADGES_DARK,
   DEFAULT_BRANDING,
   DEFAULT_BRANDING_DARK,
+  DEFAULT_NOTICES,
   Delopay,
   DelopayAuthenticationError,
   DelopayError,
@@ -9552,6 +10242,12 @@ var encodeNativePanes = encodePanes;
   NATIVE_PANE_CATEGORY_KEYS,
   NATIVE_PANE_ICON_KEYS,
   NOMUPAY_FORM_STYLES,
+  NOTICES_PER_SECTION,
+  NOTICE_ICONS,
+  NOTICE_ICON_FALLBACK,
+  NOTICE_ICON_PATHS,
+  NOTICE_LABEL_MAX_LENGTH,
+  NOTICE_SECTIONS,
   OperationLimits,
   PANES_MAX,
   PANE_CATEGORY_KEYS,
@@ -9609,6 +10305,7 @@ var encodeNativePanes = encodePanes;
   cloneBranding,
   cloneCustomField,
   cloneNativePane,
+  cloneNotice,
   clonePane,
   compareSections,
   contrastRatio,
@@ -9624,11 +10321,13 @@ var encodeNativePanes = encodePanes;
   decodeMethodSectionLabels,
   decodeMethodSectionOrder,
   decodeNativePanes,
+  decodeNotices,
   decodePanes,
   defaultBranding,
   defaultCustomFieldVisibility,
   defaultMethodSectionOrder,
   defaultNativePane,
+  defaultNotices,
   defaultOperatorForSource,
   defaultPane,
   emptyPaneCatalog,
@@ -9638,6 +10337,7 @@ var encodeNativePanes = encodePanes;
   encodeMethodSectionLabels,
   encodeMethodSectionOrder,
   encodeNativePanes,
+  encodeNotices,
   encodePanes,
   evaluateCustomFieldCondition,
   evaluateCustomFieldVisibility,
@@ -9648,13 +10348,17 @@ var encodeNativePanes = encodePanes;
   inputPadValue,
   isCheckboxChecked,
   isDarkSurface,
+  isDefaultBadgeSet,
   isHexColor,
+  isNoticeIcon,
   isSubscriptionDisputeWebhook,
   isSubscriptionLifecycleWebhook,
   knownSectionLabelKey,
   leaf,
   logoDimensions,
   nativePaneMethodInfo,
+  noticeText,
+  noticesIn,
   offerablePaneMethods,
   paneCatalogFor,
   paneDisplayDefaults,
@@ -9663,6 +10367,7 @@ var encodeNativePanes = encodePanes;
   paneViewVisibility,
   parseCustomFieldsLoose,
   parseImportedBranding,
+  parseNoticesLoose,
   programToTree,
   radiusValue,
   readableInkOn,
@@ -9670,12 +10375,14 @@ var encodeNativePanes = encodePanes;
   resolveAirwallexLabelStyle,
   resolveApplePayButtonStyle,
   resolveGooglePayButtonColor,
+  resolveNoticesAndBadges,
   resolveStripeTheme,
   ruleMatchToTree,
   sanitizeCustomCss,
   sectionLabel,
   sectionOrderOf,
   shadowFor,
+  shownNotices,
   stripeSpacingValues,
   surchargeFigurePlan,
   surchargeShowsLabel,