@flopay/js 1.9.20 → 1.9.22

package/dist/chunk-BXDCVA3N.mjs

@@ -0,0 +1 @@
+var Le="flopay_session_display:";var q=new Map;function F(s){return`${Le}${s}`}function H(){if(typeof window>"u")return null;try{return window.sessionStorage}catch{return null}}function j(s,e,t){if(!s)return;let r=t?.ttlMs??36e5,o={data:e,expiresAt:Date.now()+r},n=H();if(n)try{n.setItem(F(s),JSON.stringify(o));return}catch{}q.set(s,o)}function re(s){if(!s)return null;let e=H();if(e)try{let r=e.getItem(F(s));if(r){let o=JSON.parse(r);if(o&&typeof o.expiresAt=="number"&&o.expiresAt>Date.now())return o.data;e.removeItem(F(s))}}catch{}let t=q.get(s);if(t){if(t.expiresAt>Date.now())return t.data;q.delete(s)}return null}function se(s){if(!s)return;q.delete(s);let e=H();if(e)try{e.removeItem(F(s))}catch{}}import{ASYNC_AUTO_CHECKOUT_CAPABILITY as Ze,assertCaptureMethodEligible as le,buildProductPayload as X,classifyPaymentRejection as et,classifyTelemetryFailure as O,FLO_SDK_CAPABILITIES_HEADER as tt,FLO_SDK_VERSION_HEADER as L,FloPayError as f,foldIntoProducts as $,IDEMPOTENCY_IN_PROGRESS_CODE as rt,IDEMPOTENCY_KEY_HEADER as de,isCardHolderNamePlaceholder as _e,isDetachedSessionEligible as st,isUuidV4 as me,isValidEmail as pe,normalizeCheckoutFailureOutcome as he,PAYPAL_VAULTED_PAYMENT_METHOD_TYPE as G,randomUuidV4 as nt,resolveIdempotencyKey as ot,resolveSessionCurrency as Y,SDK_VERSION as A,STORED_PAYMENT_METHOD_UNSUPPORTED_CODE as ye,STORED_PAYMENT_METHOD_UNSUPPORTED_MESSAGE as ge,telemetryStatusClass as R}from"@flopay/shared";function ne(s){return typeof s=="string"&&s.trim()?s:void 0}function oe(s){if(typeof s=="string")return s.trim()?s:void 0;if(Array.isArray(s))return s.filter(t=>typeof t=="string"&&t.trim().length>0).join("; ")||void 0}function E(s=12e3){let e=Number.isFinite(s)&&s>=0?s:12e3,t=new AbortController,r=setTimeout(()=>t.abort(),e);return{signal:t.signal,clear:()=>clearTimeout(r)}}function Ne(){return Object.assign(new Error("The operation was aborted."),{name:"AbortError"})}function U(s,e){let t=150*2**s,r=Math.round(t*(.75+Math.random()*.5));return new Promise((o,n)=>{let i,a=()=>e.removeEventListener("abort",c),c=()=>{i!==void 0&&clearTimeout(i),a(),n(Ne())};if(e.aborted){c();return}i=setTimeout(()=>{a(),o()},r),e.addEventListener("abort",c,{once:!0})})}import{buildTelemetryErrorEvent as ie,buildTelemetryLogEvent as Ve,buildTelemetryPerformanceEvent as ze,buildTelemetryTerminalEvent as Be,serializeTelemetryBatch as He,TELEMETRY_MAX_BATCH_BYTES as je}from"@flopay/shared";var Ke="/v1/sdk-telemetry/events",K=16,$e=64,Ge=1500,ae=1e3,Ye=64,We="00000000-0000-4000-8000-000000000000",Je={technical_error:8,lifecycle:32,expected_outcome:32,performance:24};function w(){try{return globalThis.crypto.randomUUID()}catch{let s=new Uint8Array(16);try{globalThis.crypto.getRandomValues(s)}catch{for(let t=0;t<s.length;t+=1)s[t]=Math.floor(Math.random()*256)}s[6]=(s[6]??0)&15|64,s[8]=(s[8]??0)&63|128;let e=[...s].map(t=>t.toString(16).padStart(2,"0")).join("");return`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`}}function Qe(s){try{return new TextEncoder().encode(s).byteLength}catch{return s.length}}function Xe(s){return JSON.stringify([s.code,s.failureCategory,s.stage,s.provider,s.attempt,s.statusClass,s.requestCategory,s.paymentMethodCategory,s.walletType,s.operationOutcome,s.checkoutMode,s.layout,s.inAppBrowser,s.appFamily,s.popupCapability,s.presentationMode,s.terminalReason])}function _(){return globalThis.performance?.now()??0}var S=class{constructor(e){this.ingestionDisabled=!1;this.queue=[];this.sequence=0;this.flushTimer=null;this.flushInFlight=null;this.reportedFailures=new Map;this.checkoutContext={};this.checkoutStartedAt=null;this.destroyed=!1;this.observers=new Set;this.pageExitHandler=()=>{this.drainQueue()};this.visibilityHandler=()=>{document.visibilityState==="hidden"&&this.flush()};this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0};this.endpoint=`${e.billingApiUrl.replace(/\/+$/,"")}${Ke}`,this.sdkPackage=e.sdkPackage??"@flopay/js",this.sdkVersion=e.sdkVersion,this.correlationId=w(),this.merchantEnabled=e.enabled!==!1,this.clock=e.clock??_,this.browserTransportAvailable=typeof window<"u"&&typeof document<"u",this.browserTransportAvailable&&(window.addEventListener("pagehide",this.pageExitHandler),document.addEventListener("visibilitychange",this.visibilityHandler))}log(e){this.notify({...e,class:"lifecycle"}),this.canCollect()&&this.enqueue(Ve({...this.checkoutContext,...e,eventId:w(),sequence:this.sequence++}))}error(e){if(this.notify({...e,class:"technical_error"}),!this.canCollect())return;let t=ie({...this.checkoutContext,...e,eventId:We,sequence:0}),r=Xe(t),o=this.now();this.pruneReportedFailures(o);let n=this.reportedFailures.get(r);if(n!==void 0&&o>=n&&o-n<ae){this.log({name:"operation.deduplicated",stage:e.stage,provider:e.provider,paymentMethodCategory:e.paymentMethodCategory,attempt:e.attempt,inAppBrowser:e.inAppBrowser,appFamily:e.appFamily,popupCapability:e.popupCapability,presentationMode:e.presentationMode,terminalReason:e.terminalReason});return}this.rememberReportedFailure(r,o),this.enqueue(ie({...this.checkoutContext,...e,eventId:w(),sequence:this.sequence++}))}performance(e){this.canCollect()&&this.enqueue(ze({...this.checkoutContext,...e,eventId:w(),sequence:this.sequence++}))}terminal(e){if(this.canCollect()&&(this.enqueue(Be({...this.checkoutContext,...e,eventId:w(),sequence:this.sequence++})),e.outcome!=="action_required"&&this.checkoutStartedAt!==null)){let t=this.checkoutStartedAt;this.checkoutStartedAt=null,this.performance({...e,stage:"total_journey",durationMs:Math.max(0,this.now()-t),durationMode:"total"})}}now(){try{return this.clock()}catch{return _()}}subscribe(e){return this.destroyed?()=>{}:(this.observers.add(e),()=>this.observers.delete(e))}notify(e){if(!this.destroyed)for(let t of this.observers)try{t(e)}catch{}}pruneReportedFailures(e){for(let[t,r]of this.reportedFailures)(e<r||e-r>=ae)&&this.reportedFailures.delete(t)}rememberReportedFailure(e,t){for(;this.reportedFailures.size>=Ye;){let r=this.reportedFailures.keys().next();if(r.done)break;this.reportedFailures.delete(r.value)}this.reportedFailures.set(e,t)}setCheckoutContext(e){this.checkoutContext={checkoutMode:e.checkoutMode,layout:e.layout}}beginCheckout(e={}){return this.canCollect()?(this.drainQueue(),this.setCheckoutContext(e),this.sequence=0,this.reportedFailures.clear(),this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0},this.checkoutStartedAt=this.now(),this.checkoutStartedAt):0}enqueue(e){if(this.canCollect()&&!(this.queue.length>=$e||this.eventCounts[e.class]>=Je[e.class])){if(this.eventCounts[e.class]+=1,this.queue.push(e),this.queue.length>=K){this.flush();return}this.scheduleFlush()}}canCollect(){return this.browserTransportAvailable&&this.merchantEnabled&&!this.ingestionDisabled&&!this.destroyed}async flush(){if(this.flushInFlight!==null)return this.flushInFlight;if(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0)return;this.clearFlushTimer();let e=this.queue.splice(0,K);return this.flushInFlight=this.sendBatch(e).finally(()=>{this.flushInFlight=null,this.queue.length>0&&this.scheduleFlush()}),this.flushInFlight}destroy(){this.destroyed||(this.drainQueue(),this.destroyed=!0,this.clearFlushTimer(),this.browserTransportAvailable&&(window.removeEventListener("pagehide",this.pageExitHandler),document.removeEventListener("visibilitychange",this.visibilityHandler)),this.queue.splice(0),this.reportedFailures.clear(),this.observers.clear())}disable(){this.merchantEnabled=!1,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}drainQueue(){if(!(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0))for(this.clearFlushTimer();this.queue.length>0;){let e=this.queue.splice(0,K);this.sendBatch(e)}}async sendBatch(e){if(!this.browserTransportAvailable||this.ingestionDisabled)return;let t=He(e,{correlationId:this.correlationId,sdkPackage:this.sdkPackage,sdkVersion:this.sdkVersion,batchId:w()});if(Qe(t)>je)return;let r=typeof AbortController>"u"?null:new AbortController,o=null;try{let n=fetch(this.endpoint,{method:"POST",headers:{"content-type":"text/plain;charset=UTF-8"},body:t,credentials:"omit",keepalive:!0,referrerPolicy:"no-referrer",signal:r?.signal}).then(async c=>{if(c.status!==202)return null;let u=null;try{u=await c.json()}catch{}return u?.status==="disabled"?"disabled":null}).catch(()=>null),i=new Promise(c=>{o=setTimeout(()=>{r?.abort(),c(null)},Ge)});await Promise.race([n,i])==="disabled"&&this.disableFromIngestion()}catch{}finally{o&&clearTimeout(o)}}disableFromIngestion(){this.ingestionDisabled=!0,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}scheduleFlush(){this.flushTimer||this.destroyed||this.ingestionDisabled||(this.flushTimer=setTimeout(()=>{this.flushTimer=null,this.flush()},0))}clearFlushTimer(){this.flushTimer&&(clearTimeout(this.flushTimer),this.flushTimer=null)}},ce=Symbol.for("@flopay/js.telemetry.reporter-factory.v1"),ue=globalThis;ue[ce]===void 0&&Object.defineProperty(ue,ce,{configurable:!0,enumerable:!1,writable:!1,value:s=>new S(s)});var fe=0,Ce=500,W=15e3,it=3e3,at=1e4,ct=1e4;function Se(s){return typeof s=="object"&&s!==null}function I(s,e){return ne(s?.[e])}function ve(s,e){return oe(s?.[e])}function ut(s,e){let t=s?.[e];return typeof t=="number"&&Number.isFinite(t)?t:void 0}function J(s,e){return e?new Promise((t,r)=>{let o=()=>{clearTimeout(n),r(e.reason??Object.assign(new Error("The operation was aborted."),{name:"AbortError"}))},n=setTimeout(()=>{e.removeEventListener("abort",o),t()},s);e.aborted?o():e.addEventListener("abort",o,{once:!0})}):new Promise(t=>setTimeout(t,s))}function lt(s){return s instanceof Error&&s.name==="AbortError"}function T(){return new f("Checkout is still processing. Please try again shortly.","api_error",{code:"checkout_processing_timeout"})}async function k(s,e){let t=await s.json().catch(()=>null),r=Se(t?.error)?t.error:null,o=ve(t,"message")??ve(r,"message")??e,n=I(t,"code")??I(t,"gatewayErrorCode")??I(r,"code")??`http_${s.status}`;return new f(o,"api_error",{code:n,statusCode:s.status})}async function dt(s){let e=s.status===400?await s.clone().json().catch(()=>null):null;return et(s.status,e)}function Te(s){return s===400||s===422}var V=2;async function N(s,e,t=V,r,o){let n;for(let i=0;;i++)try{return o?.(i),await fetch(s,e)}catch(a){if(e?.signal?.aborted||a instanceof Error&&a.name==="AbortError")throw a;if(n=a,i>=t)throw n;try{r?.(i+1)}catch{}await J(150*2**i,e?.signal??void 0)}}var mt=Symbol.for("@flopay/js.session-create.telemetry.v1");function pt(s){return s[mt]}function ht(s){return"now"in s||"onFirstByte"in s||"onSessionCreateFailure"in s||"onRetry"in s}function ke(s){let e=_e(s.firstName,s.lastName);return{userId:s.userId,firstName:e?null:s.firstName??null,lastName:e?null:s.lastName??null,email:s.email,country:s.country??null,gender:s.gender??null,city:s.city??null,state:s.state??null,zip:s.zip??null,addressLine1:s.addressLine1??null,addressLine2:s.addressLine2??null}}function Re(s,e){e.checkoutMetadata!==void 0&&(s.checkoutMetadata=e.checkoutMetadata),e.tagsData&&(s.tagsData=e.tagsData),e.utmMetadata&&e.utmMetadata.length>0&&(s.utmMetadata=e.utmMetadata),e.avsCheck!==void 0&&(s.avsCheck=e.avsCheck),e.checkoutType&&(s.checkoutType=e.checkoutType),e.checkoutLayout&&(s.checkoutLayout=e.checkoutLayout),e.avsConfig&&(s.avsConfig=e.avsConfig)}function yt(s,e){let t={clientId:s.clientId,checkoutVersion:A,successUrl:s.successUrl,cancelUrl:s.cancelUrl,currency:e,checkoutMode:"full",deferDataAttachment:!0};return s.captureMethod==="manual"&&(t.captureMethod=s.captureMethod),s.account.country&&(t.accountData={country:s.account.country}),Re(t,s),t}function be(s,e,t){return{currency:e,products:t.map(r=>X(r,e)),couponCodes:s.couponCodes??[],accountData:ke(s.account)}}function gt(s,e,t){return{currency:e,products:t.map(r=>X(r,e)),couponCodes:s.couponCodes??[]}}function ft(s){let e={},t=_e(s.firstName,s.lastName);for(let[r,o]of Object.entries(s)){if(t&&r.endsWith("Name")||typeof o!="string")continue;let n=o.trim();n&&(e[r]=n)}return{accountData:e}}var M=class M{constructor(e,t={}){this.baseUrl=e.replace(/\/+$/,"");let r=ht(t);this.telemetryHooks=r?t:void 0,this.directTelemetry=r||t.telemetry===!1?void 0:new S({billingApiUrl:this.baseUrl,sdkVersion:A})}destroy(){this.directTelemetry?.destroy()}reportDirectFailure(e,t,r,o,n="unknown"){let i=O(e,t);this.directTelemetry?.error({...i,stage:r,requestCategory:o,paymentMethodCategory:n})}reportAccountSnapshotFailure(e,t){let r=O(e,"NETWORK_REQUEST_FAILED");if(t==="best_effort"&&r.errorCode==="REQUEST_TIMEOUT"){this.directTelemetry?.log({name:"operation.fallback",stage:"processing",requestCategory:"account_snapshot",statusClass:"timeout"});return}this.directTelemetry?.error({...r,stage:"processing",requestCategory:"account_snapshot",paymentMethodCategory:"unknown"})}telemetryTimestamp(){try{return this.telemetryHooks?.now?.()??this.directTelemetry?.now()??_()}catch{return _()}}beginDirectTelemetryCheckout(e){!this.directTelemetry||this.directTelemetryCheckoutId===e||(this.directTelemetryCheckoutId=e,this.directTelemetry.beginCheckout())}beginDirectTelemetryOperation(){this.directTelemetry&&(this.directTelemetryCheckoutId=void 0,this.directTelemetry.beginCheckout())}adoptDirectTelemetryCheckout(e){e&&(this.directTelemetryCheckoutId=e)}async getCheckoutSession(e,t){return this.fetchCheckoutSession(e,t)}async fetchCheckoutSession(e,t,r=!0,o){this.beginDirectTelemetryCheckout(e);let n=this.telemetryTimestamp(),i=n,a=0;this.directTelemetry?.log({name:"session.read.started",stage:"session_read",requestCategory:"session_read"});let c={[L]:A};t&&(c["x-checkout-session-token"]=t);try{let u=await N(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}`,{headers:c,signal:o},V,y=>{this.telemetryHooks?.onRetry?.("session_read",y),this.directTelemetry?.log({name:"operation.retry",stage:"session_read",requestCategory:"session_read",attempt:y})},y=>{a=y,i=this.telemetryTimestamp()}),l=Math.max(0,this.telemetryTimestamp()-i);try{this.telemetryHooks?.onFirstByte?.(l,a)}catch{}let m=`${Math.floor(u.status/100)}xx`;if(this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_read",statusClass:m,attempt:a}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:l,durationMode:"machine",requestCategory:"session_read",statusClass:m,attempt:a}),!u.ok)throw await k(u,"Failed to get checkout session");let d=await u.json();return this.directTelemetry?.log({name:"session.request.completed",stage:"session_complete",requestCategory:"session_read",statusClass:m}),this.directTelemetry?.performance({stage:"session_complete",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"session_read",statusClass:m}),{...d,data:this.mergeCachedDisplayData(d.data)}}catch(u){throw r&&this.directTelemetry?.error({...O(u,"NETWORK_REQUEST_FAILED"),stage:"session_read",requestCategory:"session_read"}),u}}cacheSessionDisplayData(e,t,r){j(e,t,r)}clearSessionDisplayData(e){se(e)}async getVaultCapture(e,t){let r=`${this.baseUrl}\0${e}\0${t??""}`,o=M.activeVaultCaptureRequests.get(r);if(o)return o;let n=this.requestVaultCapture(e,t);M.activeVaultCaptureRequests.set(r,n);try{return await n}finally{M.activeVaultCaptureRequests.get(r)===n&&M.activeVaultCaptureRequests.delete(r)}}async requestVaultCapture(e,t){let r=new AbortController,o=setTimeout(()=>r.abort(),ct);this.beginDirectTelemetryCheckout(e);let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"vault.capture.requested",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card"});let i={"Content-Type":"application/json"};t&&(i["x-checkout-session-token"]=t);try{let a=await N(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/vault/capture`,{method:"POST",headers:i,signal:r.signal},V,u=>{this.telemetryHooks?.onRetry?.("vault_capture",u),this.directTelemetry?.log({name:"operation.retry",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card",attempt:u})});if(!a.ok)throw await k(a,"Failed to load the secure card form");let c=await a.json();return this.directTelemetry?.performance({stage:"vault_request",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"vault_capture",paymentMethodCategory:"card",statusClass:"2xx"}),this.toVaultBlock(c)}catch(a){let c=r.signal.aborted?new f("Timed out while loading the secure card form. Please try again.","api_error",{code:"vault_capture_timeout"}):a;throw this.reportDirectFailure(c,"VAULT_LOAD_FAILED","vault_request","vault_capture","card"),c}finally{clearTimeout(o)}}async getUnifiedCheckoutSession(e,t){let r=await this.getCheckoutSession(e,t);return this.normalizeCheckoutSessionResponse(r)}async getUnifiedCheckoutSessionForRecovery(e,t,r){let o=await this.fetchCheckoutSession(e,t,!1,r);return this.normalizeCheckoutSessionResponse(o)}normalizeCheckoutSessionResponse(e){let t=this.normalizeRawSession(e.data),r=e.vault;return r&&t.data.session&&(t.data.session.vault=this.toVaultBlock(r)),t}async processPayment(e,t,r){this.beginDirectTelemetryCheckout(t.sessionId);let o=t.paymentMethodCategory??"unknown";if(!t.nonce)throw this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:o}),new f("processPayment requires `nonce` \u2014 pass the value returned from session creation.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.processing.started",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:o});let{nonce:i,paymentMethodCategory:a,...c}=t,u;try{u=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(t.sessionId)}/process`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":i},body:JSON.stringify(c)})}catch(l){if(lt(l))throw this.reportDirectFailure(l,"PAYMENT_PROCESSING_FAILED","processing","process_payment",o),l;u=await this.reconcileProcessPayment(t.sessionId,{...r,nonce:i,paymentMethodCategory:o})}if(!u.ok&&u.status!==202){let l=await dt(u);return l?this.directTelemetry?.terminal({outcome:l,stage:"processing",requestCategory:"process_payment",statusClass:"4xx",paymentMethodCategory:o}):this.directTelemetry?.error({errorCode:"PAYMENT_PROCESSING_FAILED",stage:"processing",requestCategory:"process_payment",statusClass:R(u.status),failureCategory:u.status>=500?"server_error":void 0,paymentMethodCategory:o}),u}try{let l=await this.resolveProcessResponse(u,t.sessionId,{...r,nonce:i,paymentMethodCategory:o});return this.directTelemetry?.log({name:"payment.processing.completed",stage:"processing",requestCategory:"process_payment",statusClass:R(l.status),paymentMethodCategory:o}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"process_payment",statusClass:R(l.status),paymentMethodCategory:o}),l}catch(l){throw l instanceof f&&l.code==="checkout_processing_timeout"||this.reportDirectFailure(l,"PAYMENT_PROCESSING_FAILED","processing","process_payment",o),l}}async patchAccountSnapshot(e,t,r,o){this.beginDirectTelemetryCheckout(e);let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.state_transition",stage:"processing",requestCategory:"account_snapshot"});let i=o?.timeoutMs??at,a=new AbortController,c=()=>a.abort();o?.signal&&(o.signal.aborted?a.abort():o.signal.addEventListener("abort",c,{once:!0}));let u=setTimeout(()=>a.abort(),i);try{let l;try{l=await N(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/account`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(r),signal:a.signal},V,m=>{this.telemetryHooks?.onRetry?.("account_snapshot",m),this.directTelemetry?.log({name:"operation.retry",stage:"processing",requestCategory:"account_snapshot",attempt:m})})}finally{clearTimeout(u),o?.signal?.removeEventListener("abort",c)}if(!l.ok)throw await k(l,"Failed to persist account snapshot");this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"account_snapshot",statusClass:"2xx"})}catch(l){throw this.reportAccountSnapshotFailure(l,o?.telemetryMode??"blocking"),l}}async createSessionIntent(e,t,r,o){if(!t)throw new f("createSessionIntent requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=r,i=n.paymentMethodType,a=typeof i=="string"&&i.trim().toLowerCase()==="card",c=typeof i=="string"&&i.length>0&&!a&&(typeof n.paymentMethodId=="string"||n.paymentMethodId===null),u=n.provider==="stripe"&&(n.paymentMethodCategory==="wallet"||n.paymentMethodCategory==="apm")&&(n.intentKind==="payment"||n.intentKind==="setup"),l=n.provider==="paypal"&&n.paymentMethodCategory==="wallet"&&n.paymentMethodId===null&&(n.paymentMethodType==="paypal"&&n.intentKind==="payment"||n.paymentMethodType===G&&(n.intentKind==="payment"||n.intentKind==="setup"));if(!c||!u&&!l)throw new f("Only wallet, APM, and PayPal session intents are supported.","validation_error",{code:"InvalidSessionIntentRequest"});let m=n.authorizationAttemptId;if(m!==void 0&&!me(m))throw new f("authorizationAttemptId must be a v4 UUID identifying one buyer authorization attempt.","validation_error",{code:"InvalidAuthorizationAttemptId",param:"authorizationAttemptId"});let d=me(m)?m:nt();this.beginDirectTelemetryCheckout(e);let y=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.intent.started",stage:"processing",requestCategory:"intent_create"});let p={"Content-Type":"application/json","x-checkout-session-token":t,[de]:o?.idempotencyKey||d},C=!1;try{let h=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents`,{method:"POST",headers:p,body:JSON.stringify({...r,authorizationAttemptId:d}),signal:o?.signal});if(!h.ok){C=!0;let B=await k(h,"Failed to create checkout intent"),Ue=O(B,"PAYMENT_PROCESSING_FAILED");throw Te(B.statusCode)?this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"intent_create",statusClass:"4xx"}):this.directTelemetry?.error({...Ue,stage:"processing",requestCategory:"intent_create"}),B}let v=(await h.json()).data;if(!v||typeof v!="object")throw new f("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});let g=v,te=g.paymentMethodType,Oe=(g.paymentMethodCategory==="wallet"||g.paymentMethodCategory==="apm")&&typeof te=="string"&&te.trim().toLowerCase()!=="card"&&(typeof g.paymentMethodId=="string"||g.paymentMethodId===null)&&typeof g.providerObjectId=="string",xe=g.provider==="stripe"&&(g.intentKind==="payment"||g.intentKind==="setup")&&typeof g.clientSecret=="string",qe=g.provider==="paypal"&&g.paymentMethodCategory==="wallet"&&g.paymentMethodId===null&&(g.paymentMethodType==="paypal"&&g.intentKind==="payment"&&(g.providerObjectType==="order"||g.providerObjectType==="subscription")||g.paymentMethodType===G&&g.intentKind==="payment"&&g.providerObjectType==="order"||g.paymentMethodType===G&&g.intentKind==="setup"&&g.providerObjectType==="setup_token")&&g.clientSecret===null,Fe=g.provider===r.provider&&g.paymentMethodCategory===r.paymentMethodCategory&&g.paymentMethodType===r.paymentMethodType&&g.paymentMethodId===r.paymentMethodId&&g.intentKind===r.intentKind;if(!Oe||!xe&&!qe||!Fe)throw new f("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});return this.directTelemetry?.log({name:"payment.intent.completed",stage:"processing",requestCategory:"intent_create",statusClass:R(h.status)}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-y),durationMode:"machine",requestCategory:"intent_create",statusClass:R(h.status)}),g}catch(h){throw C||this.reportDirectFailure(h,"PAYMENT_PROCESSING_FAILED","processing","intent_create"),h}}async reportSessionIntentDecline(e,t,r,o){if(!t)throw new f("reportSessionIntentDecline requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=r,i=n.providerDeclineReason,a=n.paymentMethodType,c=n.providerIntentId,u=typeof i=="string"&&/^[a-z0-9][a-z0-9_.:-]{0,63}$/i.test(i)&&!/^(?:pm|pi|seti|tok|src|cus|sess|sk|pk)_/i.test(i),l=typeof a=="string"&&a.length>0&&a.trim().toLowerCase()!=="card"&&u,m=n.provider==="stripe"&&(n.paymentMethodCategory==="wallet"||n.paymentMethodCategory==="apm")&&(c===void 0||typeof c=="string"&&/^pi_[a-z0-9_]{1,252}$/i.test(c)),d=n.provider==="paypal"&&n.paymentMethodCategory==="wallet"&&n.paymentMethodType==="paypal"&&c===void 0;if(!l||!m&&!d)throw new f("Invalid non-card decline classification.","validation_error",{code:"InvalidSessionIntentDeclineRequest"});let y=d?{provider:"paypal",paymentMethodCategory:"wallet",paymentMethodType:"paypal",providerDeclineReason:i}:{provider:"stripe",paymentMethodCategory:n.paymentMethodCategory,paymentMethodType:n.paymentMethodType,providerDeclineReason:i,...typeof c=="string"?{providerIntentId:c}:{}},p=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents/decline`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(y),signal:o?.signal});if(!p.ok)throw await k(p,"Failed to report checkout decline")}async getPaymentsByEmail(e,t){this.beginDirectTelemetryOperation();let r=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved"});let o=t?.page??1,n=t?.limit??1,i=new URLSearchParams({email:e,page:String(o),limit:String(n),sortField:"createdAt",sortDirection:"DESC"});try{let a=await fetch(`${this.baseUrl}/v1/payments?${i.toString()}`,{method:"GET",signal:t?.signal,keepalive:!0});if(!a.ok)throw new f("Failed to fetch payments","api_error",{statusCode:a.status});let c=await a.json();return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-r),durationMode:"machine",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),c}catch(a){throw this.reportDirectFailure(a,"RECOVERY_FAILED","recovery","other","saved"),a}}async createAndFetchSession(e){if(st(e)){let n=e.account.email?.trim();if(n&&!pe(n))throw new f("Buyer email must be valid when supplied.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"});return(await this.createDetachedSession(e)).claimed}this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),r=E(e.timeoutMs??12e3),o={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});try{let n=await this.createAndFetchSessionRequest(e,r.signal,o);return this.adoptDirectTelemetryCheckout(n.data.session?.id),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:o.statusClass}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:o.statusClass,attempt:o.attempt}),n}catch(n){throw this.reportSessionCreateFailure(n,t,o),n}finally{r.clear()}}async createAndFetchSessionRequest(e,t,r){let o=e.products??$(e.items,e.subscriptions);le({captureMethod:e.captureMethod,products:o});let n=Y(e.currency,e.items,e.subscriptions,o);if(!n)throw new f("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});let i={clientId:e.clientId,checkoutVersion:A,successUrl:e.successUrl,cancelUrl:e.cancelUrl,currency:n,checkoutMode:e.checkoutMode??"full",products:o.map(m=>X(m,n)),accountData:ke(e.account),couponCodes:e.couponCodes??[]};e.captureMethod==="manual"&&(i.captureMethod=e.captureMethod),e.tokenizedData&&(i.tokenizedData=e.tokenizedData),Re(i,e);let c=await(await this.postCheckoutSessionCreate(i,e,t,r)).json();if(c.data&&"gateways"in c.data){this.autoCacheDisplayData(c.data.uuid,e);let m=this.mergeCachedDisplayData(c.data),d=this.normalizeRawSession(m);return c.vault&&d.data.session&&(d.data.session.vault=this.toVaultBlock(c.vault)),{...d,autoProcessingError:c.autoProcessingError,autoProcessingAttempted:c.autoProcessingAttempted,autoProcessingPending:c.autoProcessingPending}}let u=c.data?.uuid;if(!u)throw new f("No session ID returned","api_error",{code:"InvalidCheckoutSessionResponse"});return this.autoCacheDisplayData(u,e),this.adoptDirectTelemetryCheckout(u),{...await this.getUnifiedCheckoutSession(u),autoProcessingError:c.autoProcessingError,autoProcessingAttempted:c.autoProcessingAttempted,autoProcessingPending:c.autoProcessingPending}}async postCheckoutSessionCreate(e,t,r,o){let n={"Content-Type":"application/json",[L]:A},i=ot(t.idempotencyKey);i&&(n[de]=i),t.checkoutMode==="auto"&&(n[tt]=Ze);let a,c=!1,u=pt(t),l=(d,y,p)=>{c||(c=!0,this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_create",statusClass:p,attempt:d}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:Math.max(0,this.telemetryTimestamp()-y),durationMode:"machine",requestCategory:"session_create",statusClass:p,attempt:d}))},m=d=>{try{this.telemetryHooks?.onRetry?.("session_create",d),this.directTelemetry?.log({name:"operation.retry",stage:"session_create",requestCategory:"session_create",attempt:d})}catch{}};for(let d=0;d<3;d++){o.attempt=d;let y=this.telemetryTimestamp();try{u?.onAttempt?.(d)}catch{}try{a=await fetch(`${this.baseUrl}/v1/checkouts/sessions?expand=true`,{method:"POST",headers:n,body:JSON.stringify(e),signal:r})}catch(h){if(o.statusClass=r.aborted||h instanceof Error&&h.name==="AbortError"?"timeout":"network_error",r.aborted||h instanceof Error&&h.name==="AbortError"||d>=2)throw h;let b=d+1;m(b),await U(d,r);continue}let p=R(a.status);if(o.statusClass=p,a.status===204)throw l(d,y,p),new f("Session auto-completed \u2014 payment method already on file","api_error",{code:"session_auto_completed"});if(a.ok){l(d,y,p);break}let C=await k(a,"Failed to create checkout session");if(C.code===rt&&d<2){m(d+1),await U(d,r);continue}throw l(d,y,p),C}if(!a)throw new TypeError("Checkout-session creation exhausted its retry budget.");return a}async createDetachedSession(e){this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),r=E(e.timeoutMs??12e3),o={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});let n=e.products??$(e.items,e.subscriptions);try{le({captureMethod:e.captureMethod,products:n})}catch(h){throw r.clear(),this.reportSessionCreateFailure(h,t,o),h}let i=Y(e.currency,e.items,e.subscriptions,n);if(!i)throw r.clear(),this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"}),new f("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});try{be(e,i,n)}catch(h){throw r.clear(),this.reportSessionCreateFailure(h,t,o),h}let a,c;try{if(c=await(await this.postCheckoutSessionCreate(yt(e,i),e,r.signal,o)).json(),!c.data||!("gateways"in c.data))throw new f("The billing API returned no session shell for a detached create. It must support `deferDataAttachment` (TeamFloPay/backend#1099).","api_error",{code:"InvalidCheckoutSessionResponse"});a=this.normalizeRawSession(this.mergeCachedDisplayData(c.data)),c.vault&&a.data.session&&(a.data.session.vault=this.toVaultBlock(c.vault))}catch(h){throw r.clear(),this.reportSessionCreateFailure(h,t,o),h}let u=a.data.session?.id??c.data.uuid??"",l=a.data.session?.clientSecret??c.data.nonce??"";if(!u||!l){r.clear();let h=new f("Checkout session shell was created without a session id or nonce.","api_error",{code:"InvalidCheckoutSessionResponse"});throw this.reportSessionCreateFailure(h,t,o),h}r.clear(),this.adoptDirectTelemetryCheckout(u),this.directTelemetry?.log({name:"session.shell.ready",stage:"session_shell",requestCategory:"session_create",statusClass:o.statusClass,paymentMethodCategory:"card"}),this.directTelemetry?.performance({stage:"session_shell",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:o.statusClass,attempt:o.attempt,paymentMethodCategory:"card"});let m=!e.account.email?.trim(),d=E(e.timeoutMs??12e3),y=this.claimCheckoutSession(u,l,m?gt(e,i,n):be(e,i,n),{params:e,startedAt:t,deadline:d,createAttempt:o.attempt}),p=m?void 0:y,C=(h={})=>{if(p)return p;let b={...e,account:{...e.account,...h,email:h.email?.trim()||e.account.email?.trim()}};return pe(b.account.email)?(p=y.then(()=>{let v=this.telemetryTimestamp();return this.claimCheckoutSession(u,l,ft(b.account),{params:b,startedAt:v,deadline:E(e.timeoutMs??12e3),createAttempt:0})}),p.catch(()=>{}),p):Promise.reject(new f("A valid buyer email is required before claiming checkout.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"}))};return y.catch(()=>{}),{shell:a,sessionId:u,nonce:l,claimed:y,claim:C}}async claimCheckoutSession(e,t,r,o){let n=o?.startedAt??this.telemetryTimestamp(),i=this.telemetryTimestamp(),a=o?.deadline??E(12e3),c=JSON.stringify(r),u="unknown",l=0;this.directTelemetry?.log({name:"session.claim.started",stage:"session_claim",requestCategory:"session_claim"});try{let m;for(l=0;l<3;l++){try{m=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/claim`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t,[L]:A},body:c,signal:a.signal})}catch(p){let C=a.signal.aborted||p instanceof Error&&p.name==="AbortError";if(u=C?"timeout":"network_error",C||l>=2)throw p;try{this.telemetryHooks?.onRetry?.("session_claim",l+1),this.directTelemetry?.log({name:"operation.retry",stage:"session_claim",requestCategory:"session_claim",attempt:l+1})}catch{}await U(l,a.signal);continue}if(u=R(m.status),m.ok)break;throw await k(m,"Failed to attach checkout session data")}if(!m)throw new TypeError("Checkout-session claim exhausted its retry budget.");let d=await m.json();if(!d.data?.gateways)throw new f("The billing API returned no checkout session with gateways after claiming it.","api_error",{code:"InvalidCheckoutSessionResponse"});o?.params&&this.autoCacheDisplayData(d.data.uuid??e,o.params);let y=this.normalizeRawSession(this.mergeCachedDisplayData(d.data));return d.vault&&y.data.session&&(y.data.session.vault=this.toVaultBlock(d.vault)),this.directTelemetry?.log({name:"session.claim.completed",stage:"session_claim",requestCategory:"session_claim",statusClass:u}),this.directTelemetry?.performance({stage:"session_claim",durationMs:Math.max(0,this.telemetryTimestamp()-i),durationMode:"machine",requestCategory:"session_claim",statusClass:u,attempt:l}),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:u}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"session_create",statusClass:u,attempt:o?.createAttempt??l}),y}catch(m){throw this.reportSessionCreateFailure(m,i,{attempt:l,statusClass:u},"session_claim"),m}finally{a.clear()}}reportSessionCreateFailure(e,t,r,o="session_create"){if(!(e instanceof f&&e.code==="session_auto_completed"))try{this.telemetryHooks?.onSessionCreateFailure?.(e)}catch{}let n=O(e,"CHECKOUT_SESSION_CREATE_FAILED");if(this.directTelemetry?.performance({stage:o,durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:o==="session_claim"?"session_claim":"session_create",statusClass:n.statusClass,attempt:r.attempt}),e instanceof f&&e.type==="validation_error"||e instanceof f&&Te(e.statusCode)){this.directTelemetry?.terminal({outcome:"validation_rejected",stage:o,requestCategory:o==="session_claim"?"session_claim":"session_create",...e.type==="validation_error"?{}:{statusClass:"4xx"}});return}e instanceof f&&e.code==="session_auto_completed"||this.directTelemetry?.error({...n,stage:o,requestCategory:o==="session_claim"?"session_claim":"session_create"})}async waitForCheckoutSessionCompletion(e,t){this.beginDirectTelemetryCheckout(e);let r=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"});let o=t?.timeoutMs??W,n=Date.now()+o,i=new AbortController,a=!1,c=setTimeout(()=>{a=!0,i.abort()},o),u=()=>i.abort(t?.signal?.reason);t?.signal?.aborted?u():t?.signal?.addEventListener("abort",u,{once:!0});let l=this.clampRetryAfterMs(t?.initialDelayMs??fe),m=0;try{if(t?.statusUrl){let d=await this.waitForCheckoutStatus(e,{initialDelayMs:l,timeoutMs:o,nonce:t.nonce,statusUrl:t.statusUrl,continueAfterActionRequired:t.continueAfterActionRequired,signal:i.signal});if(d)return await this.resolveCheckoutSessionStatus(e,d,t.nonce,i.signal)}for(;;){let d=n-Date.now();if(d<=0)throw T();if(l>0){try{m+=1,this.telemetryHooks?.onRetry?.("session_read",m),this.directTelemetry?.log({name:"operation.retry",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved",attempt:m})}catch{}if(await J(Math.min(l,d),i.signal),Date.now()>=n)throw T()}let y=await this.getUnifiedCheckoutSessionForRecovery(e,t?.nonce,i.signal),p=y.data.session?.status;if(p==="authorized"||p==="complete"||p==="expired")return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-r),durationMode:"machine",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),y;if(Date.now()>=n)throw T();l=this.clampRetryAfterMs(Math.max(l*2,Ce))}}catch(d){let y=a?T():d;throw this.reportDirectFailure(y,"RECOVERY_FAILED","recovery","session_read",t?.paymentMethodCategory??"saved"),y}finally{clearTimeout(c),t?.signal?.removeEventListener("abort",u)}}async resolveCheckoutSessionStatus(e,t,r,o){let n=t.latestTransactionAttempt;if(n?.result==="DECLINE"){let c=n.code===ye;throw new f(c?ge:"Payment was declined. Please choose another payment method.","api_error",{code:n.code??n.declineReason??"authorization_declined",statusCode:400})}if(n?.result==="ERROR"||t.status==="voided")throw new f("Payment could not be completed. Please try again.","api_error",{code:n?.code??"payment_processing_error",statusCode:500});let i=await this.getUnifiedCheckoutSessionForRecovery(e,r,o),a=i.data.session;return a&&n?.result==="SUCCESS"?{...i,data:{...i.data,session:{...a,status:"complete"}}}:a&&n?.result==="AUTHORIZED"?{...i,data:{...i.data,session:{...a,status:"authorized",paymentId:t.paymentId??void 0,authorizationExpiresAt:t.authorizationExpiresAt??void 0}}}:a&&t.status==="completed"?{...i,data:{...i.data,session:{...a,status:"complete"}}}:a&&t.status==="authorized"?{...i,data:{...i.data,session:{...a,status:"authorized",paymentId:t.paymentId??void 0,authorizationExpiresAt:t.authorizationExpiresAt??void 0}}}:a&&t.status==="expired"?{...i,data:{...i.data,session:{...a,status:"expired"}}}:n?.result!=="ACTION_REQUIRED"?i:n.gateway==="paypal"&&n.providerIntentId?{...i,autoProcessingError:{type:"paypal_direct_required",message:"PayPal authorization required",orderId:n.providerIntentId,checkoutMethod:"paypal"}}:n.nextActionRedirectUrl?{...i,autoProcessingError:{type:"3ds_required",message:"Additional authentication is required.",nextActionRedirectUrl:n.nextActionRedirectUrl}}:i}async waitForCheckoutStatus(e,t){let r=t.timeoutMs??W,o=Date.now()+r,n=this.clampRetryAfterMs(t.initialDelayMs);for(;;){let i=o-Date.now();if(i<=0||n>0&&(await J(Math.min(n,i),t.signal),Date.now()>=o))throw T();let a=o-Date.now();if(a<=0)throw T();let c=new AbortController,u,l=t.signal?new Promise((b,v)=>{u=v}):null,m=()=>{c.abort(t.signal?.reason),u?.(t.signal?.reason??Object.assign(new Error("The operation was aborted."),{name:"AbortError"}))};t.signal?.aborted?m():t.signal?.addEventListener("abort",m,{once:!0});let d,y=t.signal?null:new Promise((b,v)=>{d=setTimeout(()=>{v(T()),c.abort()},a)}),p;try{let b=this.fetchCheckoutStatus(e,t.nonce,t.statusUrl,c.signal);p=await Promise.race([b,y,l].filter(v=>v!==null))}finally{d!==void 0&&clearTimeout(d),t.signal?.removeEventListener("abort",m)}if(!p)return null;let C=p.latestTransactionAttempt?.result,h=t.continueAfterActionRequired===!0&&C==="ACTION_REQUIRED";if(p.status==="completed"||p.status==="authorized"||p.status==="expired"||p.status==="voided"||C!==void 0&&C!=="PENDING"&&!h)return p;n=this.clampRetryAfterMs(Math.max(n*2,Ce))}}async fetchCheckoutStatus(e,t,r,o){let n=`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/status`,i=n;if(r)try{let l=new URL(r,`${this.baseUrl}/`),m=new URL(n);l.origin===m.origin&&(i=l.toString())}catch{}let a={[L]:A};t&&(a["x-checkout-session-token"]=t);let c=await N(i,{headers:a,signal:o});if(c.status===404||c.status===405)return null;if(!c.ok)throw await k(c,"Failed to get checkout session status");let u=await c.json();return Se(u.data)&&"latestTransactionAttempt"in u.data?u.data:null}normalizeRawSession(e){let t=e.gateways??{},r=[],o={session:this.toCheckoutSession(e)},n=t.stripe;if(n?.publishableKey){r.push("stripe");let c=[e.stripeClientSecret,n.stripeClientSecret].find(u=>typeof u=="string"&&u.length>0);o.stripe={clientSecret:c??"",publishableKey:n.publishableKey??void 0,paypalPublishableKey:n.paypalPublishableKey??void 0,environment:n.environment,enabledPaymentMethods:Array.isArray(n.enabledPaymentMethods)?n.enabledPaymentMethods.filter(u=>typeof u=="string"):void 0}}let i=t.paypal;return i?.publishableKey&&(r.push("paypal"),o.paypal={publishableKey:i.publishableKey,environment:i.environment,providerObjectType:i.providerObjectType,approvalPresentation:i.approvalPresentation}),{providers:r,mode:"tokenize",...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},data:o,raw:{data:e}}}toCheckoutSession(e){let t=e.products??[],r=typeof e.totalAmount=="number"&&Number.isFinite(e.totalAmount),o=t.reduce((u,l)=>u+(l.overrideAmount??l.totalAmount??0),0),n=r?e.totalAmount:o,i=Math.round(n*100),a=e.currency??t[0]?.currency??"USD",c="payment";return e.checkoutMode==="setup"?c="setup":t.some(u=>u.type==="subscription")&&(c="subscription"),{id:e.uuid,clientSecret:e.nonce,mode:c,status:this.toCheckoutSessionStatus(e.status),amount:i,currency:a,captureMethod:e.captureMethod,paymentId:e.paymentId,authorizationExpiresAt:e.authorizationExpiresAt,failureOutcome:he(e.outcome)??he(e.failureReason)??(e.status==="expired"&&e.captureMethod==="manual"?"authorization_expired":void 0),customer:{id:e.accountData.userId??void 0,email:e.accountData.email??void 0,firstName:e.accountData.firstName??void 0,lastName:e.accountData.lastName??void 0,country:e.accountData.country??void 0,city:e.accountData.city??void 0,state:e.accountData.state??void 0,zip:e.accountData.zip??void 0,gender:e.accountData.gender??void 0,line1:e.accountData.addressLine1??void 0,line2:e.accountData.addressLine2??void 0},...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},metadata:{},checkoutMode:e.checkoutMode,buyerIdentified:e.buyerIdentified,providerPaymentMethodId:typeof e.providerPaymentMethodId=="string"?e.providerPaymentMethodId:null,products:t.map(u=>({...u,totalAmount:typeof u.totalAmount=="number"?u.totalAmount:void 0,overrideAmount:typeof u.overrideAmount=="number"?u.overrideAmount:null,currency:typeof u.currency=="string"?u.currency:void 0,metadata:u.metadata??null})),successUrl:e.successUrl,cancelUrl:e.cancelUrl,coupons:e.coupons,subtotalAmount:e.subtotalAmount,discountAmount:e.discountAmount,totalAmount:e.totalAmount,createdAt:e.createdAt,gateways:e.gateways,accountData:e.accountData,tagsData:e.tagsData}}toVaultBlock(e){return{html:typeof e.html=="string"?e.html:void 0,url:typeof e.url=="string"?e.url:void 0,messageToken:typeof e.messageToken=="string"?e.messageToken:void 0,expectedOrigin:typeof e.expectedOrigin=="string"?e.expectedOrigin:void 0}}toCheckoutSessionStatus(e){return e==="completed"?"complete":e==="authorized"?"authorized":e==="expired"?"expired":"open"}async resolveProcessResponse(e,t,r){if(e.status!==202)return e;let o=await e.json().catch(()=>null),n=this.toCheckoutProcessingPending(o,e,t);if(n.statusUrl){let a=await this.waitForCheckoutStatus(n.sessionId,{initialDelayMs:n.retryAfterMs,timeoutMs:r?.pollTimeoutMs,nonce:r?.nonce,statusUrl:n.statusUrl});if(a)return this.toProcessResponseFromStatus(a,t,r?.nonce)}let i=await this.waitForCheckoutSessionCompletion(n.sessionId,{initialDelayMs:n.retryAfterMs,timeoutMs:r?.pollTimeoutMs,nonce:r?.nonce,paymentMethodCategory:r?.paymentMethodCategory});return this.toProcessResponseFromSession(i,t)}async toProcessResponseFromStatus(e,t,r){let o=e.latestTransactionAttempt?.result;if(e.status==="completed"||o==="SUCCESS")return new Response(null,{status:204,statusText:"No Content"});if(e.status==="authorized"||o==="AUTHORIZED")return new Response(JSON.stringify({status:"authorized",paymentId:e.paymentId??void 0,sessionId:e.uuid||t,authorizationExpiresAt:e.authorizationExpiresAt??void 0}),{status:200,headers:{"Content-Type":"application/json"}});if(e.status==="expired"){let n=await this.resolveCheckoutSessionStatus(t,e,r);return this.toProcessResponseFromSession(n,t)}if(o==="DECLINE"){let n=e.latestTransactionAttempt,i=n?.code===ye;return new Response(JSON.stringify({type:n?.declineReason??"authorization_declined",message:i?ge:"Payment was declined. Please choose another payment method.",...n?.code?{code:n.code}:{}}),{status:400,headers:{"Content-Type":"application/json"}})}if(o==="ACTION_REQUIRED"&&e.latestTransactionAttempt?.gateway==="paypal"&&e.latestTransactionAttempt.providerIntentId)return new Response(JSON.stringify({type:"paypal_direct_required",message:"PayPal authorization required",orderId:e.latestTransactionAttempt.providerIntentId}),{status:400,headers:{"Content-Type":"application/json"}});if(o==="ACTION_REQUIRED"&&e.latestTransactionAttempt?.nextActionRedirectUrl)return new Response(JSON.stringify({type:"3ds_required",message:"Additional authentication is required.",nextActionRedirectUrl:e.latestTransactionAttempt.nextActionRedirectUrl}),{status:400,headers:{"Content-Type":"application/json"}});if(o==="ERROR"||e.status==="voided")return new Response(JSON.stringify({type:"unknown",code:e.latestTransactionAttempt?.code??"payment_processing_error",message:"Payment could not be completed. Please try again."}),{status:500,headers:{"Content-Type":"application/json"}});throw T()}async reconcileProcessPayment(e,t){let r=t?.pollTimeoutMs??W,o=Date.now()+r,n=null;try{n=await this.waitForCheckoutStatus(e,{initialDelayMs:0,timeoutMs:r,nonce:t?.nonce})}catch(c){if(this.reportDirectFailure(c,"RECOVERY_FAILED","recovery","session_read",t?.paymentMethodCategory??"saved"),c instanceof f&&c.code==="checkout_processing_timeout")throw c}if(n)return this.toProcessResponseFromStatus(n,e,t?.nonce);let i=o-Date.now();if(i<=0)throw T();let a=await this.waitForCheckoutSessionCompletion(e,{initialDelayMs:0,timeoutMs:i,nonce:t?.nonce,paymentMethodCategory:t?.paymentMethodCategory});return this.toProcessResponseFromSession(a,e)}toProcessResponseFromSession(e,t){if(e.data.session?.status==="complete")return new Response(null,{status:204,statusText:"No Content"});if(e.data.session?.status==="authorized"){let r=e.data.session;return new Response(JSON.stringify({status:"authorized",paymentId:r.paymentId,sessionId:r.id||t,authorizationExpiresAt:r.authorizationExpiresAt}),{status:200,headers:{"Content-Type":"application/json"}})}if(e.data.session?.status==="expired"){let r=e.data.session.failureOutcome==="authorization_expired"||e.data.session.captureMethod==="manual";throw new f(r?"Authorization has expired.":"Checkout session has expired.","api_error",{code:r?"authorization_expired":"checkout_session_expired"})}throw T()}toCheckoutProcessingPending(e,t,r){let o=t.headers.get("Retry-After"),n=o===null||o.trim()===""?void 0:Number(o),i=n!==void 0&&Number.isFinite(n)?n*1e3:void 0;return{type:"checkout_processing",sessionId:I(e,"sessionId")??r,retryAfterMs:this.clampRetryAfterMs(ut(e,"retryAfterMs")??i??fe),statusUrl:I(e,"statusUrl"),sessionUrl:I(e,"sessionUrl")}}clampRetryAfterMs(e){return Math.max(0,Math.min(e,it))}autoCacheDisplayData(e,t){if(!e)return;let r=t.products??$(t.items,t.subscriptions);if(r.length===0&&!t.currency)return;let o=t.products!==void 0,n=Y(t.currency,o?void 0:t.items,o?void 0:t.subscriptions,r);j(e,{currency:n??void 0,products:r.map(i=>({code:i.code??i.providerItemId??i.providerPlanId,type:i.type,name:i.name??i.itemName??i.providerItemName??i.subscriptionName??i.providerPlanName??null,totalAmount:i.totalAmount,overrideAmount:i.overrideAmount,currency:i.currency??n??void 0}))})}mergeCachedDisplayData(e){let t=re(e.uuid),r=new Map,o=i=>i?`code:${i}`:void 0;for(let i of t?.products??[]){let a=o(i.code);a&&r.set(a,i)}let n=(e.products??[]).map(i=>{let a=o(i.code),c=a?r.get(a):void 0;return{...i,name:i.name??c?.name??null,totalAmount:i.totalAmount??c?.totalAmount,overrideAmount:i.overrideAmount??c?.overrideAmount,currency:i.currency??c?.currency}});return{...e,currency:e.currency??t?.currency,products:n}}};M.activeVaultCaptureRequests=new Map;var Q=M;function Vt(s,e){let t=Q;return new t(s,e)}import{buildTelemetryErrorEvent as Ct,buildTelemetryLogEvent as vt,buildTelemetryTerminalEvent as we,FloPayError as Ae,resolveBillingApiUrl as Me,SDK_VERSION as Ee}from"@flopay/shared";var ee="flopay-vault",Tt=3e5,bt=3e4,_t=Tt+bt,St="Card authentication timed out.",Ie={ready:["vault.widget.ready","vault_ready"],submitting:["vault.submission.started","vault_submit"],blocked:["operation.state_transition","vault_submit"],action_required:["vault.action.required","three_ds_handoff"]};function kt(s){return s.class==="lifecycle"?s.name:s.class==="technical_error"?s.code:s.class==="expected_outcome"?s.outcome:"sdk.performance"}function x(s){let e={class:s.class,stage:s.stage};"code"in s&&(e.code=s.code),"provider"in s&&s.provider&&(e.provider=s.provider),"paymentMethodCategory"in s&&s.paymentMethodCategory&&(e.paymentMethodCategory=s.paymentMethodCategory),"outcome"in s&&(e.outcome=s.outcome),"durationMs"in s&&s.durationMs!==void 0&&(e.durationMs=s.durationMs),"durationMode"in s&&s.durationMode&&(e.durationMode=s.durationMode);try{globalThis.Sentry?.addBreadcrumb?.({category:"flopay.telemetry",level:s.class==="technical_error"?"error":"info",message:kt(s),data:e})}catch{}}function z(s,e){return vt({eventId:"11111111-1111-4111-8111-111111111111",name:s,stage:e,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}function Pe(s){return s?{errorCode:"VAULT_SUBMIT_FAILED",stage:"vault_submit",failureCategory:"provider_runtime"}:{errorCode:"VAULT_LOAD_FAILED",stage:"vault_mount",failureCategory:"provider_runtime"}}function De(s,e,t="checkout"){return t==="card_setup"?s.type==="decline"?"card_setup_declined":"card_setup_succeeded":s.type==="decline"?"payment_declined":s.outcome==="authorized"||e==="manual"?"payment_authorized":"payment_succeeded"}function Rt(s,e,t,r="checkout"){let{type:o}=s;if(o==="complete"||o==="decline")return we({eventId:"22222222-2222-4222-8222-222222222222",outcome:De(s,t,r),sequence:0,provider:"pcivault",paymentMethodCategory:"card"});if(o==="error"){let a=Pe(e);return Ct({eventId:"33333333-3333-4333-8333-333333333333",...a,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}let[n,i]=Ie[o];return z(n,i)}function At(s){if(typeof s!="object"||s===null)return!1;let e=s;return e.source===ee&&(e.type==="ready"||e.type==="submitting"||e.type==="blocked"||e.type==="complete"||e.type==="decline"||e.type==="error"||e.type==="action_required")}function Mt(s){if(typeof s!="object"||s===null)return;let e=s,t=e.status;if(!(typeof e.id!="string"||e.id.trim()===""||typeof e.brand!="string"||e.brand.trim()===""||typeof e.lastFour!="string"||!/^\d{4}$/.test(e.lastFour)||typeof e.expiryMonth!="number"||!Number.isInteger(e.expiryMonth)||e.expiryMonth<1||e.expiryMonth>12||typeof e.expiryYear!="number"||!Number.isInteger(e.expiryYear)||e.expiryYear<1970||e.expiryYear>9999||t!=="pending"&&t!=="active"&&t!=="deleted"))return{id:e.id,brand:e.brand,lastFour:e.lastFour,expiryMonth:e.expiryMonth,expiryYear:e.expiryYear,status:t}}function Et(s){if(typeof s!="object"||s===null)return!1;let e=s;return e.source===ee&&e.type==="validation"&&Array.isArray(e.messages)}function wt(s){if(typeof s!="object"||s===null)return!1;let e=s;return e.source===ee&&e.type==="resize"&&typeof e.height=="number"&&Number.isFinite(e.height)}var Z=class{constructor(e={},t){this.provider="pcivault";this.container=null;this.messageHandler=null;this.actionOverlay=null;this.threeDsReturnHandler=null;this.actionOverlayPreviousFocus=null;this.actionOverlayTimer=null;this.messageToken=null;this.expectedOrigin=null;this.theme=void 0;this.submitGateBlocked=!1;this.cardFieldOrder=null;this.cardAutoFocus=!0;this.submitLabel=void 0;this.mountStartedAt=0;this.vaultReadyReported=!1;this.submissionStarted=!1;this.submissionStartedAt=null;this.listeners=new Map;this.config=e,this.ownsTelemetryReporter=!t&&e.telemetry!==!1,this.telemetryReporter=t?.reporter??(this.ownsTelemetryReporter?new S({billingApiUrl:Me(e.billingApiUrl),sdkVersion:Ee}):void 0)}async mount(e,t){this.ownsTelemetryReporter&&!this.telemetryReporter&&(this.telemetryReporter=new S({billingApiUrl:Me(this.config.billingApiUrl),sdkVersion:Ee}));let r=this.telemetryReporter;if(this.config.operation==="card_setup"&&r&&this.setupTelemetryReporter!==r){this.setupTelemetryReporter=r;try{r.beginCheckout({checkoutMode:"setup"})}catch{}}if(this.mountStartedAt=this.telemetryReporter?.now?.()??_(),this.vaultReadyReported=!1,this.submissionStarted=!1,this.submissionStartedAt=null,typeof window>"u"||typeof document>"u")throw this.reportVaultLoadFailure(),new Ae("The vault card form is only available in the browser.","api_error",{code:"card_capture_no_window"});if(!t?.html?.trim())throw this.reportVaultLoadFailure(),new Ae("No vault capture widget HTML was provided to mount the secure card form.","api_error",{code:"card_capture_no_widget_html"});this.container=e,this.messageToken=t.messageToken??null,this.expectedOrigin=t.expectedOrigin??this.config.expectedOrigin??null,this.theme=t.theme,t.submitLabel!==void 0&&(this.submitLabel=t.submitLabel);try{this.attachMessageListener(),this.injectWidget(e,t.html)}catch(o){throw this.reportVaultLoadFailure(),o}this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel(),x(z("vault.widget.mounted","vault_mount")),this.telemetryReporter?.log({name:"vault.widget.mounted",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"}),this.telemetryReporter?.performance?.({stage:"vault_mount",durationMs:Math.max(0,(this.telemetryReporter.now?.()??_())-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),this.emit("ready",{sessionId:this.config.sessionId})}reportVaultLoadFailure(){this.telemetryReporter?.error({errorCode:"VAULT_LOAD_FAILED",failureCategory:"provider_runtime",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"})}on(e,t){let r=this.listeners.get(e);return r||(r=new Set,this.listeners.set(e,r)),r.add(t),()=>{this.listeners.get(e)?.delete(t)}}unmount(){this.hideActionRequiredOverlay(),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.container&&(this.container.replaceChildren(),this.container=null),this.messageToken=null,this.expectedOrigin=null,this.ownsTelemetryReporter&&(this.telemetryReporter?.destroy(),this.telemetryReporter=void 0)}injectWidget(e,t){e.innerHTML=t;let r=Array.from(e.querySelectorAll("script"));for(let o of r){let n=document.createElement("script");for(let i of Array.from(o.attributes))n.setAttribute(i.name,i.value);n.text=o.text,o.replaceWith(n)}}attachMessageListener(){if(this.messageHandler)return;let e=t=>{if(this.expectedOrigin&&t.origin!==this.expectedOrigin)return;let r=t.data;if(wt(r)){if(this.messageToken&&r.messageToken!==this.messageToken)return;this.applyHeight(r.height);return}if(Et(r)){if(this.messageToken&&r.messageToken!==this.messageToken)return;let c=r.messages.filter(u=>typeof u=="string"&&u.trim()).join(" ");this.emit("validation",{sessionId:this.config.sessionId,message:c||void 0});return}if(!At(r)||this.messageToken&&r.messageToken!==this.messageToken)return;let o=this.config.sessionId,n=typeof r.sessionId=="string"?r.sessionId:void 0;if(o&&n&&n!==o||(r.type==="complete"||r.type==="decline")&&o&&n!==o)return;let i=Mt(r.paymentMethod),a={...r.sessionId??this.config.sessionId?{sessionId:r.sessionId??this.config.sessionId}:{},...r.outcome?{outcome:r.outcome}:{},...r.paymentId?{paymentId:r.paymentId}:{},...r.authorizationExpiresAt?{authorizationExpiresAt:r.authorizationExpiresAt}:{},...r.failureOutcome?{failureOutcome:r.failureOutcome}:{},...r.intentId?{intentId:r.intentId}:{},...r.declineReason?{declineReason:r.declineReason}:{},...r.message?{message:r.message}:{},...i?{paymentMethod:i}:{}};r.type==="submitting"&&(this.submissionStarted=!0,this.submissionStartedAt=this.telemetryReporter?.now?.()??_()),x(Rt(r,this.submissionStarted,this.config.captureMethod,this.config.operation)),this.reportOutcome(r),r.type==="ready"&&(this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel()),r.type==="action_required"&&r.nextActionRedirectUrl&&this.showActionRequiredOverlay(r.nextActionRedirectUrl),(r.type==="complete"||r.type==="decline"||r.type==="error"||r.type==="submitting")&&this.hideActionRequiredOverlay(),r.type!=="action_required"&&this.emit(r.type,a)};this.messageHandler=e,window.addEventListener("message",e)}reportOutcome(e){let t=this.telemetryReporter;if(!t)return;let{type:r}=e;if(r==="ready"&&!this.vaultReadyReported&&(this.vaultReadyReported=!0,t.performance({stage:"vault_ready",durationMs:Math.max(0,t.now()-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card",requestCategory:"provider_sdk"})),r==="complete"||r==="decline"){t.log({name:"vault.terminal",stage:"completion",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:De(e,this.config.captureMethod,this.config.operation),provider:"pcivault",paymentMethodCategory:"card"});return}if(r==="error"){let i=Pe(this.submissionStarted);t.log({name:"vault.terminal",stage:i.stage,provider:"pcivault",paymentMethodCategory:"card"}),t.error({...i,provider:"pcivault",paymentMethodCategory:"card"});return}if(r==="action_required"){t.log({name:"vault.action.required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"}),t.log({name:"vault.three_ds.handoff",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});let i=this.submissionStartedAt;this.submissionStartedAt=null,i!==null&&t.performance({stage:"three_ds_handoff",durationMs:Math.max(0,t.now()-i),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:"action_required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});return}let[o,n]=Ie[r];t.log({name:o,stage:n,provider:"pcivault",paymentMethodCategory:"card"})}applyTheme(e){this.theme=e,this.postTheme()}postTheme(){this.theme!==void 0&&this.postToHostedWindow({source:"flopay-vault-host",type:"theme",theme:this.theme},this.directiveTargetOrigin())}setSubmitGate(e){this.submitGateBlocked=e,this.postSubmitGate()}postSubmitGate(){this.postToHostedWindow({source:"flopay-vault-host",type:"gate",blocked:this.submitGateBlocked},this.directiveTargetOrigin())}setCardFieldOrder(e,t){this.cardFieldOrder=e,this.cardAutoFocus=t,this.postCardFieldOrder()}postCardFieldOrder(){this.postToHostedWindow({source:"flopay-vault-host",type:"fieldOrder",order:this.cardFieldOrder,autoFocus:this.cardAutoFocus},this.directiveTargetOrigin())}setSubmitLabel(e){this.submitLabel=e,this.postSubmitLabel()}postSubmitLabel(){let e=this.submitLabel,t=this.config.sessionId,{messageToken:r,expectedOrigin:o}=this;e===void 0||!t||!r||!o||this.postToHostedWindow({source:"flopay-vault-host",type:"submitLabel",sessionId:t,messageToken:r,label:e},o)}hostedWindow(){return this.container?.querySelector("iframe")?.contentWindow??null}postToHostedWindow(e,t){let r=this.hostedWindow();if(r)try{r.postMessage(e,t)}catch{}}directiveTargetOrigin(){return this.expectedOrigin??"*"}emit(e,t){for(let r of this.listeners.get(e)??[])r(t)}showActionRequiredOverlay(e){if(typeof document>"u")return;if(this.actionOverlay){let i=this.actionOverlay.querySelector("iframe");i instanceof HTMLIFrameElement&&i.src!==e&&(i.src=e),this.armActionRequiredTimeout();return}this.actionOverlayPreviousFocus=document.activeElement instanceof HTMLElement?document.activeElement:null;let t=document.createElement("div");t.setAttribute("data-flopay-action-required","1"),t.setAttribute("role","dialog"),t.setAttribute("aria-modal","true"),t.setAttribute("aria-label","Card authentication"),t.style.cssText=["position:fixed","inset:0","z-index:2147483647","background:rgba(15,23,42,0.6)","display:flex","align-items:center","justify-content:center","padding:16px"].join(";");let r=document.createElement("iframe");r.setAttribute("title","Card authentication"),r.setAttribute("allow","payment"),r.tabIndex=0,r.style.cssText=["width:min(100%,460px)","height:min(100%,640px)","border:0","border-radius:12px","background:#fff","box-shadow:0 12px 30px rgba(0,0,0,0.35)"].join(";"),r.src=e,t.appendChild(r);let o=document.createElement("button");o.type="button",o.setAttribute("aria-label","Close card authentication"),o.textContent="\xD7",o.style.cssText=["position:fixed","top:20px","right:20px","width:40px","height:40px","border:0","border-radius:9999px","background:#fff","color:#0f172a","font-size:28px","line-height:40px","cursor:pointer","box-shadow:0 4px 14px rgba(0,0,0,0.25)"].join(";"),o.addEventListener("click",()=>this.abandonActionRequiredOverlay()),t.appendChild(o),t.addEventListener("click",i=>{i.target===t&&this.abandonActionRequiredOverlay()});let n=i=>{if(i.source!==r.contentWindow)return;let a=i.data;!a||typeof a!="object"||a.source!=="flopay-vault-3ds-return"||(x(z("vault.three_ds.returned","three_ds_return")),this.telemetryReporter?.log({name:"vault.three_ds.returned",stage:"three_ds_return",provider:"pcivault",paymentMethodCategory:"card"}),this.hideActionRequiredOverlay())};window.addEventListener("message",n),this.threeDsReturnHandler=n,document.body.appendChild(t),this.actionOverlay=t,r.focus(),this.armActionRequiredTimeout(),x(z("vault.three_ds.handoff","three_ds_handoff"))}armActionRequiredTimeout(){this.actionOverlayTimer&&clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=setTimeout(()=>{this.actionOverlayTimer=null,this.actionOverlay&&this.timeOutActionRequiredOverlay()},_t)}reportChallengeAbandoned(){x(we({eventId:"77777777-7777-4777-8777-777777777777",outcome:"customer_abandoned",stage:"three_ds_handoff",sequence:0,provider:"pcivault",paymentMethodCategory:"card"})),this.telemetryReporter?.terminal({outcome:"customer_abandoned",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"})}timeOutActionRequiredOverlay(){this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("error",{...this.config.sessionId?{sessionId:this.config.sessionId}:{},message:St})}abandonActionRequiredOverlay(){this.actionOverlay&&(this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("challenge_dismissed",{...this.config.sessionId?{sessionId:this.config.sessionId}:{}}))}hideActionRequiredOverlay(){if(this.actionOverlayTimer&&(clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=null),this.threeDsReturnHandler&&(window.removeEventListener("message",this.threeDsReturnHandler),this.threeDsReturnHandler=null),!this.actionOverlay)return;this.actionOverlay.parentNode?.removeChild(this.actionOverlay),this.actionOverlay=null;let e=this.actionOverlayPreviousFocus;this.actionOverlayPreviousFocus=null,e?.isConnected&&e.focus()}applyHeight(e){let t=this.container?.querySelector("iframe");if(!t)return;let r=Math.max(0,Math.min(Math.ceil(e),2e3));t.style.height=`${r}px`}};function jt(s,e){let t=Z;return new t(s,{reporter:e})}export{ne as a,oe as b,E as c,U as d,j as e,re as f,se as g,_ as h,S as i,mt as j,Q as k,Vt as l,Z as m,jt as n};

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";var he=Object.defineProperty;var it=Object.getOwnPropertyDescriptor;var at=Object.getOwnPropertyNames;var ct=Object.prototype.hasOwnProperty;var ut=(r,e)=>{for(var t in e)he(r,t,{get:e[t],enumerable:!0})},lt=(r,e,t,o)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of at(e))!ct.call(r,s)&&s!==t&&he(r,s,{get:()=>e[s],enumerable:!(o=it(e,s))||o.enumerable});return r};var dt=r=>lt(he({},"__esModule",{value:!0}),r);var Qt={};ut(Qt,{FloPay:()=>Q,PaymentAPI:()=>W,PciVaultCardCapture:()=>U,SESSION_CREATE_TELEMETRY:()=>Te,StripeAdapter:()=>K,cacheSessionDisplayData:()=>F,clearSessionDisplayData:()=>ie,createCheckoutSession:()=>Ie,createCheckoutSessionWithRetries:()=>Fe,dropThirdPartyOnlyError:()=>st.dropThirdPartyOnlyError,getSessionDisplayData:()=>ne,loadFloPay:()=>ot,toStripeAppearance:()=>tt,toStripeAppearanceTheme:()=>ke});module.exports=dt(Qt);var st=require("@flopay/shared");var g=require("@flopay/shared");function $(r){return typeof r=="string"&&r.trim()?r:void 0}function G(r){if(typeof r=="string")return r.trim()?r:void 0;if(Array.isArray(r))return r.filter(t=>typeof t=="string"&&t.trim().length>0).join("; ")||void 0}function R(r=12e3){let e=Number.isFinite(r)&&r>=0?r:12e3,t=new AbortController,o=setTimeout(()=>t.abort(),e);return{signal:t.signal,clear:()=>clearTimeout(o)}}function mt(){return Object.assign(new Error("The operation was aborted."),{name:"AbortError"})}function z(r,e){let t=150*2**r,o=Math.round(t*(.75+Math.random()*.5));return new Promise((s,n)=>{let i,c=()=>e.removeEventListener("abort",a),a=()=>{i!==void 0&&clearTimeout(i),c(),n(mt())};if(e.aborted){a();return}i=setTimeout(()=>{c(),s()},o),e.addEventListener("abort",a,{once:!0})})}var pt="flopay_session_display:";var oe=new Map;function se(r){return`${pt}${r}`}function ge(){if(typeof window>"u")return null;try{return window.sessionStorage}catch{return null}}function F(r,e,t){if(!r)return;let o=t?.ttlMs??36e5,s={data:e,expiresAt:Date.now()+o},n=ge();if(n)try{n.setItem(se(r),JSON.stringify(s));return}catch{}oe.set(r,s)}function ne(r){if(!r)return null;let e=ge();if(e)try{let o=e.getItem(se(r));if(o){let s=JSON.parse(o);if(s&&typeof s.expiresAt=="number"&&s.expiresAt>Date.now())return s.data;e.removeItem(se(r))}}catch{}let t=oe.get(r);if(t){if(t.expiresAt>Date.now())return t.data;oe.delete(r)}return null}function ie(r){if(!r)return;oe.delete(r);let e=ge();if(e)try{e.removeItem(se(r))}catch{}}var k=require("@flopay/shared"),yt="/v1/sdk-telemetry/events",fe=16,ht=64,gt=1500,we=1e3,ft=64,Ct="00000000-0000-4000-8000-000000000000",vt={technical_error:8,lifecycle:32,expected_outcome:32,performance:24};function B(){try{return globalThis.crypto.randomUUID()}catch{let r=new Uint8Array(16);try{globalThis.crypto.getRandomValues(r)}catch{for(let t=0;t<r.length;t+=1)r[t]=Math.floor(Math.random()*256)}r[6]=(r[6]??0)&15|64,r[8]=(r[8]??0)&63|128;let e=[...r].map(t=>t.toString(16).padStart(2,"0")).join("");return`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`}}function Tt(r){try{return new TextEncoder().encode(r).byteLength}catch{return r.length}}function bt(r){return JSON.stringify([r.code,r.failureCategory,r.stage,r.provider,r.attempt,r.statusClass,r.requestCategory,r.paymentMethodCategory,r.walletType,r.operationOutcome,r.checkoutMode,r.layout,r.inAppBrowser,r.appFamily,r.popupCapability,r.presentationMode,r.terminalReason])}function S(){return globalThis.performance?.now()??0}var b=class{constructor(e){this.ingestionDisabled=!1;this.queue=[];this.sequence=0;this.flushTimer=null;this.flushInFlight=null;this.reportedFailures=new Map;this.checkoutContext={};this.checkoutStartedAt=null;this.destroyed=!1;this.observers=new Set;this.pageExitHandler=()=>{this.drainQueue()};this.visibilityHandler=()=>{document.visibilityState==="hidden"&&this.flush()};this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0};this.endpoint=`${e.billingApiUrl.replace(/\/+$/,"")}${yt}`,this.sdkPackage=e.sdkPackage??"@flopay/js",this.sdkVersion=e.sdkVersion,this.correlationId=B(),this.merchantEnabled=e.enabled!==!1,this.clock=e.clock??S,this.browserTransportAvailable=typeof window<"u"&&typeof document<"u",this.browserTransportAvailable&&(window.addEventListener("pagehide",this.pageExitHandler),document.addEventListener("visibilitychange",this.visibilityHandler))}log(e){this.notify({...e,class:"lifecycle"}),this.canCollect()&&this.enqueue((0,k.buildTelemetryLogEvent)({...this.checkoutContext,...e,eventId:B(),sequence:this.sequence++}))}error(e){if(this.notify({...e,class:"technical_error"}),!this.canCollect())return;let t=(0,k.buildTelemetryErrorEvent)({...this.checkoutContext,...e,eventId:Ct,sequence:0}),o=bt(t),s=this.now();this.pruneReportedFailures(s);let n=this.reportedFailures.get(o);if(n!==void 0&&s>=n&&s-n<we){this.log({name:"operation.deduplicated",stage:e.stage,provider:e.provider,paymentMethodCategory:e.paymentMethodCategory,attempt:e.attempt,inAppBrowser:e.inAppBrowser,appFamily:e.appFamily,popupCapability:e.popupCapability,presentationMode:e.presentationMode,terminalReason:e.terminalReason});return}this.rememberReportedFailure(o,s),this.enqueue((0,k.buildTelemetryErrorEvent)({...this.checkoutContext,...e,eventId:B(),sequence:this.sequence++}))}performance(e){this.canCollect()&&this.enqueue((0,k.buildTelemetryPerformanceEvent)({...this.checkoutContext,...e,eventId:B(),sequence:this.sequence++}))}terminal(e){if(this.canCollect()&&(this.enqueue((0,k.buildTelemetryTerminalEvent)({...this.checkoutContext,...e,eventId:B(),sequence:this.sequence++})),e.outcome!=="action_required"&&this.checkoutStartedAt!==null)){let t=this.checkoutStartedAt;this.checkoutStartedAt=null,this.performance({...e,stage:"total_journey",durationMs:Math.max(0,this.now()-t),durationMode:"total"})}}now(){try{return this.clock()}catch{return S()}}subscribe(e){return this.destroyed?()=>{}:(this.observers.add(e),()=>this.observers.delete(e))}notify(e){if(!this.destroyed)for(let t of this.observers)try{t(e)}catch{}}pruneReportedFailures(e){for(let[t,o]of this.reportedFailures)(e<o||e-o>=we)&&this.reportedFailures.delete(t)}rememberReportedFailure(e,t){for(;this.reportedFailures.size>=ft;){let o=this.reportedFailures.keys().next();if(o.done)break;this.reportedFailures.delete(o.value)}this.reportedFailures.set(e,t)}setCheckoutContext(e){this.checkoutContext={checkoutMode:e.checkoutMode,layout:e.layout}}beginCheckout(e={}){return this.canCollect()?(this.drainQueue(),this.setCheckoutContext(e),this.sequence=0,this.reportedFailures.clear(),this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0},this.checkoutStartedAt=this.now(),this.checkoutStartedAt):0}enqueue(e){if(this.canCollect()&&!(this.queue.length>=ht||this.eventCounts[e.class]>=vt[e.class])){if(this.eventCounts[e.class]+=1,this.queue.push(e),this.queue.length>=fe){this.flush();return}this.scheduleFlush()}}canCollect(){return this.browserTransportAvailable&&this.merchantEnabled&&!this.ingestionDisabled&&!this.destroyed}async flush(){if(this.flushInFlight!==null)return this.flushInFlight;if(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0)return;this.clearFlushTimer();let e=this.queue.splice(0,fe);return this.flushInFlight=this.sendBatch(e).finally(()=>{this.flushInFlight=null,this.queue.length>0&&this.scheduleFlush()}),this.flushInFlight}destroy(){this.destroyed||(this.drainQueue(),this.destroyed=!0,this.clearFlushTimer(),this.browserTransportAvailable&&(window.removeEventListener("pagehide",this.pageExitHandler),document.removeEventListener("visibilitychange",this.visibilityHandler)),this.queue.splice(0),this.reportedFailures.clear(),this.observers.clear())}disable(){this.merchantEnabled=!1,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}drainQueue(){if(!(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0))for(this.clearFlushTimer();this.queue.length>0;){let e=this.queue.splice(0,fe);this.sendBatch(e)}}async sendBatch(e){if(!this.browserTransportAvailable||this.ingestionDisabled)return;let t=(0,k.serializeTelemetryBatch)(e,{correlationId:this.correlationId,sdkPackage:this.sdkPackage,sdkVersion:this.sdkVersion,batchId:B()});if(Tt(t)>k.TELEMETRY_MAX_BATCH_BYTES)return;let o=typeof AbortController>"u"?null:new AbortController,s=null;try{let n=fetch(this.endpoint,{method:"POST",headers:{"content-type":"text/plain;charset=UTF-8"},body:t,credentials:"omit",keepalive:!0,referrerPolicy:"no-referrer",signal:o?.signal}).then(async a=>{if(a.status!==202)return null;let u=null;try{u=await a.json()}catch{}return u?.status==="disabled"?"disabled":null}).catch(()=>null),i=new Promise(a=>{s=setTimeout(()=>{o?.abort(),a(null)},gt)});await Promise.race([n,i])==="disabled"&&this.disableFromIngestion()}catch{}finally{s&&clearTimeout(s)}}disableFromIngestion(){this.ingestionDisabled=!0,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}scheduleFlush(){this.flushTimer||this.destroyed||this.ingestionDisabled||(this.flushTimer=setTimeout(()=>{this.flushTimer=null,this.flush()},0))}clearFlushTimer(){this.flushTimer&&(clearTimeout(this.flushTimer),this.flushTimer=null)}},Re=Symbol.for("@flopay/js.telemetry.reporter-factory.v1"),Ae=globalThis;Ae[Re]===void 0&&Object.defineProperty(Ae,Re,{configurable:!0,enumerable:!1,writable:!1,value:r=>new b(r)});var Ce=5,Ee=new WeakSet;function _t(r){(typeof r=="object"&&r!==null||typeof r=="function")&&Ee.add(r)}function kt(r){return(typeof r=="object"&&r!==null||typeof r=="function")&&Ee.has(r)}function St(r,e){let t=e?.error,o=$(e?.code)??$(t?.code)??`http_${r}`,s=G(e?.message)??G(t?.message)??Mt(o,r);return new g.FloPayError(s,"api_error",{code:o,statusCode:r})}function Mt(r,e){switch(r){case"CouponLimitExceeded":return`Too many coupon codes \u2014 a checkout session accepts at most ${Ce}.`;case"CouponCurrencyUnsupported":return"One of the applied coupons has no price configured for the cart currency.";default:return`Failed to create checkout session (HTTP ${e}).`}}async function Pe(r,e,t){let{billingApiUrl:o,checkoutBaseUrl:s,items:n=[],subscriptions:i=[],products:c,account:a,successUrl:u,cancelUrl:d,checkoutMode:p="confirm",captureMethod:m,couponCodes:f=[],checkoutMetadata:C,tagsData:_,redirectParams:y={},setCookie:P=!0,clientId:x,currency:h,utmMetadata:N,idempotencyKey:me}=r,X=(0,g.resolveIdempotencyKey)(me);if(f.length>Ce)throw new g.FloPayError(`Too many coupon codes \u2014 a checkout session accepts at most ${Ce}.`,"validation_error",{code:"CouponLimitExceeded",param:"couponCodes"});let O=c??(0,g.foldIntoProducts)(n,i);(0,g.assertCaptureMethodEligible)({captureMethod:m,products:O});let I=(0,g.resolveSessionCurrency)(h,n,i,O);if(!I)throw new g.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});let w={clientId:x,checkoutVersion:g.SDK_VERSION,successUrl:u,cancelUrl:d,currency:I,checkoutMode:p,products:O.map(D=>(0,g.buildProductPayload)(D,I)),accountData:{userId:a.userId,firstName:a.firstName??null,lastName:a.lastName??null,email:a.email,country:a.country??null,gender:a.gender??null,city:a.city??null,state:a.state??null,zip:a.zip??null,addressLine1:a.addressLine1??null,addressLine2:a.addressLine2??null},couponCodes:f};m==="manual"&&(w.captureMethod=m),C!==void 0&&(w.checkoutMetadata=C),_&&(w.tagsData=_),N&&N.length>0&&(w.utmMetadata=N);let pe=`${o.replace(/\/+$/,"")}/v1/checkouts/sessions`,Me={"Content-Type":"application/json"};X&&(Me[g.IDEMPOTENCY_KEY_HEADER]=X);let V,Z,nt={method:"POST",headers:Me,body:JSON.stringify(w),signal:e},ee;try{t?.startAttempt(),ee=await fetch(pe,nt)}catch(D){throw _t(D),D}try{t?.record(ee.status)}catch{}V=ee.status;try{Z=await ee.json()}catch{}if(V>=400)throw St(V,Z);if(V===201){let D=Z?.data?.uuid,ye=Z?.data?.nonce;if(!D)throw new Error("Checkout session created but no UUID was returned by the billing API");if(!ye)throw new g.FloPayError("Checkout session created but no `nonce` was returned by the billing API. Upgrade the billing service to TeamFloPay/backend#640 or later.","api_error",{code:"MissingCheckoutSessionToken"});(O.length>0||I)&&F(D,{currency:I,products:O.map(v=>({code:v.code??v.providerItemId??v.providerPlanId,type:v.type,name:v.name??v.itemName??v.providerItemName??v.subscriptionName??v.providerPlanName??null,totalAmount:v.totalAmount,overrideAmount:v.overrideAmount,currency:v.currency??I}))});let te=new URL(`${s.replace(/\/+$/,"")}/secure`);te.searchParams.set("id",D);for(let[v,re]of Object.entries(y))te.searchParams.set(v,re);if(P&&typeof window<"u"&&typeof document<"u"){let v=JSON.stringify({origin_url:d}),re=window.location.hostname.split(".").slice(-2).join(".");document.cookie=`checkout_data=${encodeURIComponent(v)}; domain=.${re}; path=/; max-age=3600; SameSite=Lax; Secure;`,document.cookie=`flopay_checkout_token=${encodeURIComponent(ye)}; domain=.${re}; path=/; max-age=3600; SameSite=Lax; Secure;`}return typeof window<"u"&&(window.location.href=te.toString()),{status:201,redirectUrl:te.toString(),nonce:ye}}return V===204?(typeof window<"u"&&(window.location.href=u),{status:204}):{status:V}}async function Ie(r){let e=xe(r),t=De(e),o=R(r.timeoutMs);try{let s=await Pe(r,o.signal,t);return t.commit(),Oe(e,s),s}catch(s){throw t.commit(),ae(e,s),s}finally{o.clear(),j(e.reporter)}}function De(r){let e=!1,t=r.startedAt,o;return{startAttempt(){t=r.reporter.now()},record(s){o={status:s,durationMs:Math.max(0,r.reporter.now()-t),attempt:r.attempt}},commit(){if(e||!o)return;e=!0;let s=(0,g.telemetryStatusClass)(o.status);r.reporter.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_create",statusClass:s,attempt:o.attempt}),r.reporter.performance({stage:"session_first_byte",durationMs:o.durationMs,durationMode:"machine",requestCategory:"session_create",statusClass:s,attempt:o.attempt})}}}function xe(r){let e=new b({billingApiUrl:r.billingApiUrl,sdkVersion:g.SDK_VERSION,enabled:r.telemetry!==!1}),t=e.now();return e.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"}),{reporter:e,startedAt:t,attempt:0}}function Oe(r,e){let t=(0,g.telemetryStatusClass)(e.status);r.reporter.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:t}),r.reporter.performance({stage:"session_create",durationMs:r.reporter.now()-r.startedAt,durationMode:"machine",requestCategory:"session_create",statusClass:t,attempt:r.attempt})}function ae(r,e){let{reporter:t}=r,o=(0,g.classifyTelemetryFailure)(e,"CHECKOUT_SESSION_CREATE_FAILED");if(t.performance({stage:"session_create",durationMs:t.now()-r.startedAt,durationMode:"machine",requestCategory:"session_create",statusClass:o.statusClass,attempt:r.attempt}),e instanceof g.FloPayError&&e.type==="validation_error"){t.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"});return}if(o.statusClass==="4xx"){t.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create",statusClass:"4xx"});return}t.error({...o,stage:"session_create",requestCategory:"session_create"})}function j(r){r.flush().catch(()=>{}).finally(()=>r.destroy())}async function Fe(r){let{maxRetries:e=2,...t}=r,o=xe(r),s=De(o);if(!Number.isFinite(e)||!Number.isInteger(e)||e<0||e>=3)throw o.reporter.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"}),j(o.reporter),new Error(`Number of retries must be an integer between 0 and ${2}`);let n={...t,idempotencyKey:(0,g.resolveIdempotencyKey)(t.idempotencyKey)},i=R(t.timeoutMs),c;for(let a=0;a<=e;a++){o.attempt=a;try{let u=await Pe(n,i.signal,s);return s.commit(),Oe(o,u),i.clear(),j(o.reporter),u}catch(u){c=u;let d=u instanceof Error&&u.name==="AbortError",p=kt(u),m=u instanceof g.FloPayError&&u.code===g.IDEMPOTENCY_IN_PROGRESS_CODE;if((d||p||m)&&!i.signal.aborted&&a<e){o.reporter.log({name:"operation.retry",stage:"session_create",requestCategory:"session_create",attempt:a+1});try{await z(a,i.signal)}catch(f){throw s.commit(),ae(o,f),i.clear(),j(o.reporter),f}continue}throw s.commit(),ae(o,u),i.clear(),j(o.reporter),u}}throw s.commit(),ae(o,c),i.clear(),j(o.reporter),c??new Error("Unknown error during checkout session creation")}var M=require("@flopay/shared");var l=require("@flopay/shared");var qe=0,wt=500,Rt=15e3,At=3e3,Et=1e4,Pt=1e4;function It(r){return typeof r=="object"&&r!==null}function H(r,e){return $(r?.[e])}function Le(r,e){return G(r?.[e])}function Dt(r,e){let t=r?.[e];return typeof t=="number"&&Number.isFinite(t)?t:void 0}function Ve(r){return new Promise(e=>setTimeout(e,r))}function xt(r){return r instanceof Error&&r.name==="AbortError"}function ce(){return new l.FloPayError("Checkout is still processing. Please try again shortly.","api_error",{code:"checkout_processing_timeout"})}async function q(r,e){let t=await r.json().catch(()=>null),o=It(t?.error)?t.error:null,s=Le(t,"message")??Le(o,"message")??e,n=H(t,"code")??H(t,"gatewayErrorCode")??H(o,"code")??`http_${r.status}`;return new l.FloPayError(s,"api_error",{code:n,statusCode:r.status})}async function Ot(r){let e=r.status===400?await r.clone().json().catch(()=>null):null;return(0,l.classifyPaymentRejection)(r.status,e)}function Ue(r){return r===400||r===422}var ue=2;async function ve(r,e,t=ue,o,s){let n;for(let i=0;;i++)try{return s?.(i),await fetch(r,e)}catch(c){if(e?.signal?.aborted||c instanceof Error&&c.name==="AbortError")throw c;if(n=c,i>=t)throw n;try{o?.(i+1)}catch{}await Ve(150*2**i)}}var Te=Symbol.for("@flopay/js.session-create.telemetry.v1");function Ft(r){return r[Te]}function qt(r){return"now"in r||"onFirstByte"in r||"onSessionCreateFailure"in r||"onRetry"in r}function ze(r){let e=(0,l.isCardHolderNamePlaceholder)(r.firstName,r.lastName);return{userId:r.userId,firstName:e?null:r.firstName??null,lastName:e?null:r.lastName??null,email:r.email,country:r.country??null,gender:r.gender??null,city:r.city??null,state:r.state??null,zip:r.zip??null,addressLine1:r.addressLine1??null,addressLine2:r.addressLine2??null}}function Be(r,e){e.checkoutMetadata!==void 0&&(r.checkoutMetadata=e.checkoutMetadata),e.tagsData&&(r.tagsData=e.tagsData),e.utmMetadata&&e.utmMetadata.length>0&&(r.utmMetadata=e.utmMetadata),e.avsCheck!==void 0&&(r.avsCheck=e.avsCheck),e.checkoutType&&(r.checkoutType=e.checkoutType),e.checkoutLayout&&(r.checkoutLayout=e.checkoutLayout),e.avsConfig&&(r.avsConfig=e.avsConfig)}function Lt(r,e){let t={clientId:r.clientId,checkoutVersion:l.SDK_VERSION,successUrl:r.successUrl,cancelUrl:r.cancelUrl,currency:e,checkoutMode:"full",deferDataAttachment:!0};return r.captureMethod==="manual"&&(t.captureMethod=r.captureMethod),r.account.country&&(t.accountData={country:r.account.country}),Be(t,r),t}function Ne(r,e,t){return{currency:e,products:t.map(o=>(0,l.buildProductPayload)(o,e)),couponCodes:r.couponCodes??[],accountData:ze(r.account)}}function Ut(r,e,t){return{currency:e,products:t.map(o=>(0,l.buildProductPayload)(o,e)),couponCodes:r.couponCodes??[]}}function Nt(r){let e={},t=(0,l.isCardHolderNamePlaceholder)(r.firstName,r.lastName);for(let[o,s]of Object.entries(r)){if(t&&o.endsWith("Name")||typeof s!="string")continue;let n=s.trim();n&&(e[o]=n)}return{accountData:e}}var L=class L{constructor(e,t={}){this.baseUrl=e.replace(/\/+$/,"");let o=qt(t);this.telemetryHooks=o?t:void 0,this.directTelemetry=o||t.telemetry===!1?void 0:new b({billingApiUrl:this.baseUrl,sdkVersion:l.SDK_VERSION})}destroy(){this.directTelemetry?.destroy()}reportDirectFailure(e,t,o,s,n="unknown"){let i=(0,l.classifyTelemetryFailure)(e,t);this.directTelemetry?.error({...i,stage:o,requestCategory:s,paymentMethodCategory:n})}reportAccountSnapshotFailure(e,t){let o=(0,l.classifyTelemetryFailure)(e,"NETWORK_REQUEST_FAILED");if(t==="best_effort"&&o.errorCode==="REQUEST_TIMEOUT"){this.directTelemetry?.log({name:"operation.fallback",stage:"processing",requestCategory:"account_snapshot",statusClass:"timeout"});return}this.directTelemetry?.error({...o,stage:"processing",requestCategory:"account_snapshot",paymentMethodCategory:"unknown"})}telemetryTimestamp(){try{return this.telemetryHooks?.now?.()??this.directTelemetry?.now()??S()}catch{return S()}}beginDirectTelemetryCheckout(e){!this.directTelemetry||this.directTelemetryCheckoutId===e||(this.directTelemetryCheckoutId=e,this.directTelemetry.beginCheckout())}beginDirectTelemetryOperation(){this.directTelemetry&&(this.directTelemetryCheckoutId=void 0,this.directTelemetry.beginCheckout())}adoptDirectTelemetryCheckout(e){e&&(this.directTelemetryCheckoutId=e)}async getCheckoutSession(e,t){return this.fetchCheckoutSession(e,t)}async fetchCheckoutSession(e,t,o=!0){this.beginDirectTelemetryCheckout(e);let s=this.telemetryTimestamp(),n=s,i=0;this.directTelemetry?.log({name:"session.read.started",stage:"session_read",requestCategory:"session_read"});let c={[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION};t&&(c["x-checkout-session-token"]=t);try{let a=await ve(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}`,{headers:c},ue,m=>{this.telemetryHooks?.onRetry?.("session_read",m),this.directTelemetry?.log({name:"operation.retry",stage:"session_read",requestCategory:"session_read",attempt:m})},m=>{i=m,n=this.telemetryTimestamp()}),u=Math.max(0,this.telemetryTimestamp()-n);try{this.telemetryHooks?.onFirstByte?.(u,i)}catch{}let d=`${Math.floor(a.status/100)}xx`;if(this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_read",statusClass:d,attempt:i}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:u,durationMode:"machine",requestCategory:"session_read",statusClass:d,attempt:i}),!a.ok)throw await q(a,"Failed to get checkout session");let p=await a.json();return this.directTelemetry?.log({name:"session.request.completed",stage:"session_complete",requestCategory:"session_read",statusClass:d}),this.directTelemetry?.performance({stage:"session_complete",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"session_read",statusClass:d}),{...p,data:this.mergeCachedDisplayData(p.data)}}catch(a){throw o&&this.directTelemetry?.error({...(0,l.classifyTelemetryFailure)(a,"NETWORK_REQUEST_FAILED"),stage:"session_read",requestCategory:"session_read"}),a}}cacheSessionDisplayData(e,t,o){F(e,t,o)}clearSessionDisplayData(e){ie(e)}async getVaultCapture(e,t){let o=`${this.baseUrl}\0${e}\0${t??""}`,s=L.activeVaultCaptureRequests.get(o);if(s)return s;let n=this.requestVaultCapture(e,t);L.activeVaultCaptureRequests.set(o,n);try{return await n}finally{L.activeVaultCaptureRequests.get(o)===n&&L.activeVaultCaptureRequests.delete(o)}}async requestVaultCapture(e,t){let o=new AbortController,s=setTimeout(()=>o.abort(),Pt);this.beginDirectTelemetryCheckout(e);let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"vault.capture.requested",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card"});let i={"Content-Type":"application/json"};t&&(i["x-checkout-session-token"]=t);try{let c=await ve(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/vault/capture`,{method:"POST",headers:i,signal:o.signal},ue,u=>{this.telemetryHooks?.onRetry?.("vault_capture",u),this.directTelemetry?.log({name:"operation.retry",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card",attempt:u})});if(!c.ok)throw await q(c,"Failed to load the secure card form");let a=await c.json();return this.directTelemetry?.performance({stage:"vault_request",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"vault_capture",paymentMethodCategory:"card",statusClass:"2xx"}),this.toVaultBlock(a)}catch(c){let a=o.signal.aborted?new l.FloPayError("Timed out while loading the secure card form. Please try again.","api_error",{code:"vault_capture_timeout"}):c;throw this.reportDirectFailure(a,"VAULT_LOAD_FAILED","vault_request","vault_capture","card"),a}finally{clearTimeout(s)}}async getUnifiedCheckoutSession(e,t){let o=await this.getCheckoutSession(e,t);return this.normalizeCheckoutSessionResponse(o)}async getUnifiedCheckoutSessionForRecovery(e,t){let o=await this.fetchCheckoutSession(e,t,!1);return this.normalizeCheckoutSessionResponse(o)}normalizeCheckoutSessionResponse(e){let t=this.normalizeRawSession(e.data),o=e.vault;return o&&t.data.session&&(t.data.session.vault=this.toVaultBlock(o)),t}async processPayment(e,t,o){this.beginDirectTelemetryCheckout(t.sessionId);let s=t.paymentMethodCategory??"unknown";if(!t.nonce)throw this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:s}),new l.FloPayError("processPayment requires `nonce` \u2014 pass the value returned from session creation.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.processing.started",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:s});let{nonce:i,paymentMethodCategory:c,...a}=t,u;try{u=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(t.sessionId)}/process`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":i},body:JSON.stringify(a)})}catch(d){if(xt(d))throw this.reportDirectFailure(d,"PAYMENT_PROCESSING_FAILED","processing","process_payment",s),d;u=await this.reconcileProcessPayment(t.sessionId,{...o,nonce:i,paymentMethodCategory:s})}if(!u.ok&&u.status!==202){let d=await Ot(u);return d?this.directTelemetry?.terminal({outcome:d,stage:"processing",requestCategory:"process_payment",statusClass:"4xx",paymentMethodCategory:s}):this.directTelemetry?.error({errorCode:"PAYMENT_PROCESSING_FAILED",stage:"processing",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(u.status),failureCategory:u.status>=500?"server_error":void 0,paymentMethodCategory:s}),u}try{let d=await this.resolveProcessResponse(u,t.sessionId,{...o,nonce:i,paymentMethodCategory:s});return this.directTelemetry?.log({name:"payment.processing.completed",stage:"processing",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(d.status),paymentMethodCategory:s}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(d.status),paymentMethodCategory:s}),d}catch(d){throw d instanceof l.FloPayError&&d.code==="checkout_processing_timeout"||this.reportDirectFailure(d,"PAYMENT_PROCESSING_FAILED","processing","process_payment",s),d}}async patchAccountSnapshot(e,t,o,s){this.beginDirectTelemetryCheckout(e);let n=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.state_transition",stage:"processing",requestCategory:"account_snapshot"});let i=s?.timeoutMs??Et,c=new AbortController,a=()=>c.abort();s?.signal&&(s.signal.aborted?c.abort():s.signal.addEventListener("abort",a,{once:!0}));let u=setTimeout(()=>c.abort(),i);try{let d;try{d=await ve(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/account`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(o),signal:c.signal},ue,p=>{this.telemetryHooks?.onRetry?.("account_snapshot",p),this.directTelemetry?.log({name:"operation.retry",stage:"processing",requestCategory:"account_snapshot",attempt:p})})}finally{clearTimeout(u),s?.signal?.removeEventListener("abort",a)}if(!d.ok)throw await q(d,"Failed to persist account snapshot");this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"account_snapshot",statusClass:"2xx"})}catch(d){throw this.reportAccountSnapshotFailure(d,s?.telemetryMode??"blocking"),d}}async createSessionIntent(e,t,o,s){if(!t)throw new l.FloPayError("createSessionIntent requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=o,i=n.paymentMethodType,c=typeof i=="string"&&i.trim().toLowerCase()==="card",a=typeof i=="string"&&i.length>0&&!c&&(typeof n.paymentMethodId=="string"||n.paymentMethodId===null),u=n.provider==="stripe"&&(n.paymentMethodCategory==="wallet"||n.paymentMethodCategory==="apm")&&(n.intentKind==="payment"||n.intentKind==="setup"),d=n.provider==="paypal"&&n.paymentMethodCategory==="wallet"&&n.paymentMethodId===null&&(n.paymentMethodType==="paypal"&&n.intentKind==="payment"||n.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&(n.intentKind==="payment"||n.intentKind==="setup"));if(!a||!u&&!d)throw new l.FloPayError("Only wallet, APM, and PayPal session intents are supported.","validation_error",{code:"InvalidSessionIntentRequest"});let p=n.authorizationAttemptId;if(p!==void 0&&!(0,l.isUuidV4)(p))throw new l.FloPayError("authorizationAttemptId must be a v4 UUID identifying one buyer authorization attempt.","validation_error",{code:"InvalidAuthorizationAttemptId",param:"authorizationAttemptId"});let m=(0,l.isUuidV4)(p)?p:(0,l.randomUuidV4)();this.beginDirectTelemetryCheckout(e);let f=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.intent.started",stage:"processing",requestCategory:"intent_create"});let C={"Content-Type":"application/json","x-checkout-session-token":t,[l.IDEMPOTENCY_KEY_HEADER]:s?.idempotencyKey||m},_=!1;try{let y=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents`,{method:"POST",headers:C,body:JSON.stringify({...o,authorizationAttemptId:m}),signal:s?.signal});if(!y.ok){_=!0;let w=await q(y,"Failed to create checkout intent"),pe=(0,l.classifyTelemetryFailure)(w,"PAYMENT_PROCESSING_FAILED");throw Ue(w.statusCode)?this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"intent_create",statusClass:"4xx"}):this.directTelemetry?.error({...pe,stage:"processing",requestCategory:"intent_create"}),w}let x=(await y.json()).data;if(!x||typeof x!="object")throw new l.FloPayError("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});let h=x,N=h.paymentMethodType,me=(h.paymentMethodCategory==="wallet"||h.paymentMethodCategory==="apm")&&typeof N=="string"&&N.trim().toLowerCase()!=="card"&&(typeof h.paymentMethodId=="string"||h.paymentMethodId===null)&&typeof h.providerObjectId=="string",X=h.provider==="stripe"&&(h.intentKind==="payment"||h.intentKind==="setup")&&typeof h.clientSecret=="string",O=h.provider==="paypal"&&h.paymentMethodCategory==="wallet"&&h.paymentMethodId===null&&(h.paymentMethodType==="paypal"&&h.intentKind==="payment"&&(h.providerObjectType==="order"||h.providerObjectType==="subscription")||h.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&h.intentKind==="payment"&&h.providerObjectType==="order"||h.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&h.intentKind==="setup"&&h.providerObjectType==="setup_token")&&h.clientSecret===null,I=h.provider===o.provider&&h.paymentMethodCategory===o.paymentMethodCategory&&h.paymentMethodType===o.paymentMethodType&&h.paymentMethodId===o.paymentMethodId&&h.intentKind===o.intentKind;if(!me||!X&&!O||!I)throw new l.FloPayError("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});return this.directTelemetry?.log({name:"payment.intent.completed",stage:"processing",requestCategory:"intent_create",statusClass:(0,l.telemetryStatusClass)(y.status)}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-f),durationMode:"machine",requestCategory:"intent_create",statusClass:(0,l.telemetryStatusClass)(y.status)}),h}catch(y){throw _||this.reportDirectFailure(y,"PAYMENT_PROCESSING_FAILED","processing","intent_create"),y}}async reportSessionIntentDecline(e,t,o,s){if(!t)throw new l.FloPayError("reportSessionIntentDecline requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let n=o,i=n.providerDeclineReason,c=n.paymentMethodType,a=n.providerIntentId,u=typeof i=="string"&&/^[a-z0-9][a-z0-9_.:-]{0,63}$/i.test(i)&&!/^(?:pm|pi|seti|tok|src|cus|sess|sk|pk)_/i.test(i),d=typeof c=="string"&&c.length>0&&c.trim().toLowerCase()!=="card"&&u,p=n.provider==="stripe"&&(n.paymentMethodCategory==="wallet"||n.paymentMethodCategory==="apm")&&(a===void 0||typeof a=="string"&&/^pi_[a-z0-9_]{1,252}$/i.test(a)),m=n.provider==="paypal"&&n.paymentMethodCategory==="wallet"&&n.paymentMethodType==="paypal"&&a===void 0;if(!d||!p&&!m)throw new l.FloPayError("Invalid non-card decline classification.","validation_error",{code:"InvalidSessionIntentDeclineRequest"});let f=m?{provider:"paypal",paymentMethodCategory:"wallet",paymentMethodType:"paypal",providerDeclineReason:i}:{provider:"stripe",paymentMethodCategory:n.paymentMethodCategory,paymentMethodType:n.paymentMethodType,providerDeclineReason:i,...typeof a=="string"?{providerIntentId:a}:{}},C=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents/decline`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(f),signal:s?.signal});if(!C.ok)throw await q(C,"Failed to report checkout decline")}async getPaymentsByEmail(e,t){this.beginDirectTelemetryOperation();let o=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved"});let s=t?.page??1,n=t?.limit??1,i=new URLSearchParams({email:e,page:String(s),limit:String(n),sortField:"createdAt",sortDirection:"DESC"});try{let c=await fetch(`${this.baseUrl}/v1/payments?${i.toString()}`,{method:"GET",signal:t?.signal,keepalive:!0});if(!c.ok)throw new l.FloPayError("Failed to fetch payments","api_error",{statusCode:c.status});let a=await c.json();return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-o),durationMode:"machine",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),a}catch(c){throw this.reportDirectFailure(c,"RECOVERY_FAILED","recovery","other","saved"),c}}async createAndFetchSession(e){if((0,l.isDetachedSessionEligible)(e)){let n=e.account.email?.trim();if(n&&!(0,l.isValidEmail)(n))throw new l.FloPayError("Buyer email must be valid when supplied.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"});return(await this.createDetachedSession(e)).claimed}this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),o=R(e.timeoutMs??12e3),s={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});try{let n=await this.createAndFetchSessionRequest(e,o.signal,s);return this.adoptDirectTelemetryCheckout(n.data.session?.id),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:s.statusClass}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:s.statusClass,attempt:s.attempt}),n}catch(n){throw this.reportSessionCreateFailure(n,t,s),n}finally{o.clear()}}async createAndFetchSessionRequest(e,t,o){let s=e.products??(0,l.foldIntoProducts)(e.items,e.subscriptions);(0,l.assertCaptureMethodEligible)({captureMethod:e.captureMethod,products:s});let n=(0,l.resolveSessionCurrency)(e.currency,e.items,e.subscriptions,s);if(!n)throw new l.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});let i={clientId:e.clientId,checkoutVersion:l.SDK_VERSION,successUrl:e.successUrl,cancelUrl:e.cancelUrl,currency:n,checkoutMode:e.checkoutMode??"full",products:s.map(p=>(0,l.buildProductPayload)(p,n)),accountData:ze(e.account),couponCodes:e.couponCodes??[]};e.captureMethod==="manual"&&(i.captureMethod=e.captureMethod),e.tokenizedData&&(i.tokenizedData=e.tokenizedData),Be(i,e);let a=await(await this.postCheckoutSessionCreate(i,e,t,o)).json();if(a.data&&"gateways"in a.data){this.autoCacheDisplayData(a.data.uuid,e);let p=this.mergeCachedDisplayData(a.data),m=this.normalizeRawSession(p);return a.vault&&m.data.session&&(m.data.session.vault=this.toVaultBlock(a.vault)),{...m,autoProcessingError:a.autoProcessingError,autoProcessingAttempted:a.autoProcessingAttempted,autoProcessingPending:a.autoProcessingPending}}let u=a.data?.uuid;if(!u)throw new l.FloPayError("No session ID returned","api_error",{code:"InvalidCheckoutSessionResponse"});return this.autoCacheDisplayData(u,e),this.adoptDirectTelemetryCheckout(u),{...await this.getUnifiedCheckoutSession(u),autoProcessingError:a.autoProcessingError,autoProcessingAttempted:a.autoProcessingAttempted,autoProcessingPending:a.autoProcessingPending}}async postCheckoutSessionCreate(e,t,o,s){let n={"Content-Type":"application/json",[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION},i=(0,l.resolveIdempotencyKey)(t.idempotencyKey);i&&(n[l.IDEMPOTENCY_KEY_HEADER]=i);let c,a=!1,u=Ft(t),d=(m,f,C)=>{a||(a=!0,this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_create",statusClass:C,attempt:m}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:Math.max(0,this.telemetryTimestamp()-f),durationMode:"machine",requestCategory:"session_create",statusClass:C,attempt:m}))},p=m=>{try{this.telemetryHooks?.onRetry?.("session_create",m),this.directTelemetry?.log({name:"operation.retry",stage:"session_create",requestCategory:"session_create",attempt:m})}catch{}};for(let m=0;m<3;m++){s.attempt=m;let f=this.telemetryTimestamp();try{u?.onAttempt?.(m)}catch{}try{c=await fetch(`${this.baseUrl}/v1/checkouts/sessions?expand=true`,{method:"POST",headers:n,body:JSON.stringify(e),signal:o})}catch(y){if(s.statusClass=o.aborted||y instanceof Error&&y.name==="AbortError"?"timeout":"network_error",o.aborted||y instanceof Error&&y.name==="AbortError"||m>=2)throw y;let P=m+1;p(P),await z(m,o);continue}let C=(0,l.telemetryStatusClass)(c.status);if(s.statusClass=C,c.status===204)throw d(m,f,C),new l.FloPayError("Session auto-completed \u2014 payment method already on file","api_error",{code:"session_auto_completed"});if(c.ok){d(m,f,C);break}let _=await q(c,"Failed to create checkout session");if(_.code===l.IDEMPOTENCY_IN_PROGRESS_CODE&&m<2){p(m+1),await z(m,o);continue}throw d(m,f,C),_}if(!c)throw new TypeError("Checkout-session creation exhausted its retry budget.");return c}async createDetachedSession(e){this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),o=R(e.timeoutMs??12e3),s={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});let n=e.products??(0,l.foldIntoProducts)(e.items,e.subscriptions);try{(0,l.assertCaptureMethodEligible)({captureMethod:e.captureMethod,products:n})}catch(y){throw o.clear(),this.reportSessionCreateFailure(y,t,s),y}let i=(0,l.resolveSessionCurrency)(e.currency,e.items,e.subscriptions,n);if(!i)throw o.clear(),this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"}),new l.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});try{Ne(e,i,n)}catch(y){throw o.clear(),this.reportSessionCreateFailure(y,t,s),y}let c,a;try{if(a=await(await this.postCheckoutSessionCreate(Lt(e,i),e,o.signal,s)).json(),!a.data||!("gateways"in a.data))throw new l.FloPayError("The billing API returned no session shell for a detached create. It must support `deferDataAttachment` (TeamFloPay/backend#1099).","api_error",{code:"InvalidCheckoutSessionResponse"});c=this.normalizeRawSession(this.mergeCachedDisplayData(a.data)),a.vault&&c.data.session&&(c.data.session.vault=this.toVaultBlock(a.vault))}catch(y){throw o.clear(),this.reportSessionCreateFailure(y,t,s),y}let u=c.data.session?.id??a.data.uuid??"",d=c.data.session?.clientSecret??a.data.nonce??"";if(!u||!d){o.clear();let y=new l.FloPayError("Checkout session shell was created without a session id or nonce.","api_error",{code:"InvalidCheckoutSessionResponse"});throw this.reportSessionCreateFailure(y,t,s),y}o.clear(),this.adoptDirectTelemetryCheckout(u),this.directTelemetry?.log({name:"session.shell.ready",stage:"session_shell",requestCategory:"session_create",statusClass:s.statusClass,paymentMethodCategory:"card"}),this.directTelemetry?.performance({stage:"session_shell",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:s.statusClass,attempt:s.attempt,paymentMethodCategory:"card"});let p=!e.account.email?.trim(),m=R(e.timeoutMs??12e3),f=this.claimCheckoutSession(u,d,p?Ut(e,i,n):Ne(e,i,n),{params:e,startedAt:t,deadline:m,createAttempt:s.attempt}),C=p?void 0:f,_=(y={})=>{if(C)return C;let P={...e,account:{...e.account,...y,email:y.email?.trim()||e.account.email?.trim()}};return(0,l.isValidEmail)(P.account.email)?(C=f.then(()=>{let x=this.telemetryTimestamp();return this.claimCheckoutSession(u,d,Nt(P.account),{params:P,startedAt:x,deadline:R(e.timeoutMs??12e3),createAttempt:0})}),C.catch(()=>{}),C):Promise.reject(new l.FloPayError("A valid buyer email is required before claiming checkout.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"}))};return f.catch(()=>{}),{shell:c,sessionId:u,nonce:d,claimed:f,claim:_}}async claimCheckoutSession(e,t,o,s){let n=s?.startedAt??this.telemetryTimestamp(),i=this.telemetryTimestamp(),c=s?.deadline??R(12e3),a=JSON.stringify(o),u="unknown",d=0;this.directTelemetry?.log({name:"session.claim.started",stage:"session_claim",requestCategory:"session_claim"});try{let p;for(d=0;d<3;d++){try{p=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/claim`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t,[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION},body:a,signal:c.signal})}catch(C){let _=c.signal.aborted||C instanceof Error&&C.name==="AbortError";if(u=_?"timeout":"network_error",_||d>=2)throw C;try{this.telemetryHooks?.onRetry?.("session_claim",d+1),this.directTelemetry?.log({name:"operation.retry",stage:"session_claim",requestCategory:"session_claim",attempt:d+1})}catch{}await z(d,c.signal);continue}if(u=(0,l.telemetryStatusClass)(p.status),p.ok)break;throw await q(p,"Failed to attach checkout session data")}if(!p)throw new TypeError("Checkout-session claim exhausted its retry budget.");let m=await p.json();if(!m.data?.gateways)throw new l.FloPayError("The billing API returned no checkout session with gateways after claiming it.","api_error",{code:"InvalidCheckoutSessionResponse"});s?.params&&this.autoCacheDisplayData(m.data.uuid??e,s.params);let f=this.normalizeRawSession(this.mergeCachedDisplayData(m.data));return m.vault&&f.data.session&&(f.data.session.vault=this.toVaultBlock(m.vault)),this.directTelemetry?.log({name:"session.claim.completed",stage:"session_claim",requestCategory:"session_claim",statusClass:u}),this.directTelemetry?.performance({stage:"session_claim",durationMs:Math.max(0,this.telemetryTimestamp()-i),durationMode:"machine",requestCategory:"session_claim",statusClass:u,attempt:d}),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:u}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-n),durationMode:"machine",requestCategory:"session_create",statusClass:u,attempt:s?.createAttempt??d}),f}catch(p){throw this.reportSessionCreateFailure(p,i,{attempt:d,statusClass:u},"session_claim"),p}finally{c.clear()}}reportSessionCreateFailure(e,t,o,s="session_create"){if(!(e instanceof l.FloPayError&&e.code==="session_auto_completed"))try{this.telemetryHooks?.onSessionCreateFailure?.(e)}catch{}let n=(0,l.classifyTelemetryFailure)(e,"CHECKOUT_SESSION_CREATE_FAILED");if(this.directTelemetry?.performance({stage:s,durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:s==="session_claim"?"session_claim":"session_create",statusClass:n.statusClass,attempt:o.attempt}),e instanceof l.FloPayError&&e.type==="validation_error"||e instanceof l.FloPayError&&Ue(e.statusCode)){this.directTelemetry?.terminal({outcome:"validation_rejected",stage:s,requestCategory:s==="session_claim"?"session_claim":"session_create",...e.type==="validation_error"?{}:{statusClass:"4xx"}});return}e instanceof l.FloPayError&&e.code==="session_auto_completed"||this.directTelemetry?.error({...n,stage:s,requestCategory:s==="session_claim"?"session_claim":"session_create"})}async waitForCheckoutSessionCompletion(e,t){this.beginDirectTelemetryCheckout(e);let o=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"});let s=t?.timeoutMs??Rt,n=Date.now()+s,i=this.clampRetryAfterMs(t?.initialDelayMs??qe),c=0;try{for(;;){let a=n-Date.now();if(a<=0)throw ce();if(i>0){try{c+=1,this.telemetryHooks?.onRetry?.("session_read",c),this.directTelemetry?.log({name:"operation.retry",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved",attempt:c})}catch{}if(await Ve(Math.min(i,a)),Date.now()>=n)throw ce()}let u=await this.getUnifiedCheckoutSessionForRecovery(e,t?.nonce),d=u.data.session?.status;if(d==="authorized"||d==="complete"||d==="expired")return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-o),durationMode:"machine",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),u;if(Date.now()>=n)throw ce();i=this.clampRetryAfterMs(Math.max(i*2,wt))}}catch(a){throw this.reportDirectFailure(a,"RECOVERY_FAILED","recovery","session_read",t?.paymentMethodCategory??"saved"),a}}normalizeRawSession(e){let t=e.gateways??{},o=[],s={session:this.toCheckoutSession(e)},n=t.stripe;if(n?.publishableKey){o.push("stripe");let a=[e.stripeClientSecret,n.stripeClientSecret].find(u=>typeof u=="string"&&u.length>0);s.stripe={clientSecret:a??"",publishableKey:n.publishableKey??void 0,paypalPublishableKey:n.paypalPublishableKey??void 0,environment:n.environment,enabledPaymentMethods:Array.isArray(n.enabledPaymentMethods)?n.enabledPaymentMethods.filter(u=>typeof u=="string"):void 0}}let i=t.paypal;return i?.publishableKey&&(o.push("paypal"),s.paypal={publishableKey:i.publishableKey,environment:i.environment,providerObjectType:i.providerObjectType,approvalPresentation:i.approvalPresentation}),{providers:o,mode:"tokenize",...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},data:s,raw:{data:e}}}toCheckoutSession(e){let t=e.products??[],o=typeof e.totalAmount=="number"&&Number.isFinite(e.totalAmount),s=t.reduce((u,d)=>u+(d.overrideAmount??d.totalAmount??0),0),n=o?e.totalAmount:s,i=Math.round(n*100),c=e.currency??t[0]?.currency??"USD",a="payment";return e.checkoutMode==="setup"?a="setup":t.some(u=>u.type==="subscription")&&(a="subscription"),{id:e.uuid,clientSecret:e.nonce,mode:a,status:this.toCheckoutSessionStatus(e.status),amount:i,currency:c,captureMethod:e.captureMethod,paymentId:e.paymentId,authorizationExpiresAt:e.authorizationExpiresAt,failureOutcome:(0,l.normalizeCheckoutFailureOutcome)(e.outcome)??(0,l.normalizeCheckoutFailureOutcome)(e.failureReason)??(e.status==="expired"&&e.captureMethod==="manual"?"authorization_expired":void 0),customer:{id:e.accountData.userId??void 0,email:e.accountData.email??void 0,firstName:e.accountData.firstName??void 0,lastName:e.accountData.lastName??void 0,country:e.accountData.country??void 0,city:e.accountData.city??void 0,state:e.accountData.state??void 0,zip:e.accountData.zip??void 0,gender:e.accountData.gender??void 0,line1:e.accountData.addressLine1??void 0,line2:e.accountData.addressLine2??void 0},...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},metadata:{},checkoutMode:e.checkoutMode,buyerIdentified:e.buyerIdentified,providerPaymentMethodId:typeof e.providerPaymentMethodId=="string"?e.providerPaymentMethodId:null,products:t.map(u=>({...u,totalAmount:typeof u.totalAmount=="number"?u.totalAmount:void 0,overrideAmount:typeof u.overrideAmount=="number"?u.overrideAmount:null,currency:typeof u.currency=="string"?u.currency:void 0,metadata:u.metadata??null})),successUrl:e.successUrl,cancelUrl:e.cancelUrl,coupons:e.coupons,subtotalAmount:e.subtotalAmount,discountAmount:e.discountAmount,totalAmount:e.totalAmount,createdAt:e.createdAt,gateways:e.gateways,accountData:e.accountData,tagsData:e.tagsData}}toVaultBlock(e){return{html:typeof e.html=="string"?e.html:void 0,url:typeof e.url=="string"?e.url:void 0,messageToken:typeof e.messageToken=="string"?e.messageToken:void 0,expectedOrigin:typeof e.expectedOrigin=="string"?e.expectedOrigin:void 0}}toCheckoutSessionStatus(e){return e==="completed"?"complete":e==="authorized"?"authorized":e==="expired"?"expired":"open"}async resolveProcessResponse(e,t,o){if(e.status!==202)return e;let s=await e.json().catch(()=>null),n=this.toCheckoutProcessingPending(s,e,t),i=await this.waitForCheckoutSessionCompletion(n.sessionId,{initialDelayMs:n.retryAfterMs,timeoutMs:o?.pollTimeoutMs,nonce:o?.nonce,paymentMethodCategory:o?.paymentMethodCategory});return this.toProcessResponseFromSession(i,t)}async reconcileProcessPayment(e,t){let o=await this.waitForCheckoutSessionCompletion(e,{initialDelayMs:0,timeoutMs:t?.pollTimeoutMs,nonce:t?.nonce,paymentMethodCategory:t?.paymentMethodCategory});return this.toProcessResponseFromSession(o,e)}toProcessResponseFromSession(e,t){if(e.data.session?.status==="complete")return new Response(null,{status:204,statusText:"No Content"});if(e.data.session?.status==="authorized"){let o=e.data.session;return new Response(JSON.stringify({status:"authorized",paymentId:o.paymentId,sessionId:o.id||t,authorizationExpiresAt:o.authorizationExpiresAt}),{status:200,headers:{"Content-Type":"application/json"}})}if(e.data.session?.status==="expired"){let o=e.data.session.failureOutcome==="authorization_expired"||e.data.session.captureMethod==="manual";throw new l.FloPayError(o?"Authorization has expired.":"Checkout session has expired.","api_error",{code:o?"authorization_expired":"checkout_session_expired"})}throw ce()}toCheckoutProcessingPending(e,t,o){let s=t.headers.get("Retry-After"),n=s===null||s.trim()===""?void 0:Number(s),i=n!==void 0&&Number.isFinite(n)?n*1e3:void 0;return{type:"checkout_processing",sessionId:H(e,"sessionId")??o,retryAfterMs:this.clampRetryAfterMs(Dt(e,"retryAfterMs")??i??qe),statusUrl:H(e,"statusUrl"),sessionUrl:H(e,"sessionUrl")}}clampRetryAfterMs(e){return Math.max(0,Math.min(e,At))}autoCacheDisplayData(e,t){if(!e)return;let o=t.products??(0,l.foldIntoProducts)(t.items,t.subscriptions);if(o.length===0&&!t.currency)return;let s=t.products!==void 0,n=(0,l.resolveSessionCurrency)(t.currency,s?void 0:t.items,s?void 0:t.subscriptions,o);F(e,{currency:n??void 0,products:o.map(i=>({code:i.code??i.providerItemId??i.providerPlanId,type:i.type,name:i.name??i.itemName??i.providerItemName??i.subscriptionName??i.providerPlanName??null,totalAmount:i.totalAmount,overrideAmount:i.overrideAmount,currency:i.currency??n??void 0}))})}mergeCachedDisplayData(e){let t=ne(e.uuid),o=new Map,s=i=>i?`code:${i}`:void 0;for(let i of t?.products??[]){let c=s(i.code);c&&o.set(c,i)}let n=(e.products??[]).map(i=>{let c=s(i.code),a=c?o.get(c):void 0;return{...i,name:i.name??a?.name??null,totalAmount:i.totalAmount??a?.totalAmount,overrideAmount:i.overrideAmount??a?.overrideAmount,currency:i.currency??a?.currency}});return{...e,currency:e.currency??t?.currency,products:n}}};L.activeVaultCaptureRequests=new Map;var W=L;function je(r,e){let t=W;return new t(r,e)}var T=require("@flopay/shared");var be="flopay-vault",Vt=3e5,zt=3e4,Bt=Vt+zt,jt="Card authentication timed out.",He={ready:["vault.widget.ready","vault_ready"],submitting:["vault.submission.started","vault_submit"],blocked:["operation.state_transition","vault_submit"],action_required:["vault.action.required","three_ds_handoff"]};function Ht(r){return r.class==="lifecycle"?r.name:r.class==="technical_error"?r.code:r.class==="expected_outcome"?r.outcome:"sdk.performance"}function J(r){let e={class:r.class,stage:r.stage};"code"in r&&(e.code=r.code),"provider"in r&&r.provider&&(e.provider=r.provider),"paymentMethodCategory"in r&&r.paymentMethodCategory&&(e.paymentMethodCategory=r.paymentMethodCategory),"outcome"in r&&(e.outcome=r.outcome),"durationMs"in r&&r.durationMs!==void 0&&(e.durationMs=r.durationMs),"durationMode"in r&&r.durationMode&&(e.durationMode=r.durationMode);try{globalThis.Sentry?.addBreadcrumb?.({category:"flopay.telemetry",level:r.class==="technical_error"?"error":"info",message:Ht(r),data:e})}catch{}}function le(r,e){return(0,T.buildTelemetryLogEvent)({eventId:"11111111-1111-4111-8111-111111111111",name:r,stage:e,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}function Ke(r){return r?{errorCode:"VAULT_SUBMIT_FAILED",stage:"vault_submit",failureCategory:"provider_runtime"}:{errorCode:"VAULT_LOAD_FAILED",stage:"vault_mount",failureCategory:"provider_runtime"}}function $e(r,e,t="checkout"){return t==="card_setup"?r.type==="decline"?"card_setup_declined":"card_setup_succeeded":r.type==="decline"?"payment_declined":r.outcome==="authorized"||e==="manual"?"payment_authorized":"payment_succeeded"}function Kt(r,e,t,o="checkout"){let{type:s}=r;if(s==="complete"||s==="decline")return(0,T.buildTelemetryTerminalEvent)({eventId:"22222222-2222-4222-8222-222222222222",outcome:$e(r,t,o),sequence:0,provider:"pcivault",paymentMethodCategory:"card"});if(s==="error"){let c=Ke(e);return(0,T.buildTelemetryErrorEvent)({eventId:"33333333-3333-4333-8333-333333333333",...c,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}let[n,i]=He[s];return le(n,i)}function $t(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===be&&(e.type==="ready"||e.type==="submitting"||e.type==="blocked"||e.type==="complete"||e.type==="decline"||e.type==="error"||e.type==="action_required")}function Gt(r){if(typeof r!="object"||r===null)return;let e=r,t=e.status;if(!(typeof e.id!="string"||e.id.trim()===""||typeof e.brand!="string"||e.brand.trim()===""||typeof e.lastFour!="string"||!/^\d{4}$/.test(e.lastFour)||typeof e.expiryMonth!="number"||!Number.isInteger(e.expiryMonth)||e.expiryMonth<1||e.expiryMonth>12||typeof e.expiryYear!="number"||!Number.isInteger(e.expiryYear)||e.expiryYear<1970||e.expiryYear>9999||t!=="pending"&&t!=="active"&&t!=="deleted"))return{id:e.id,brand:e.brand,lastFour:e.lastFour,expiryMonth:e.expiryMonth,expiryYear:e.expiryYear,status:t}}function Yt(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===be&&e.type==="validation"&&Array.isArray(e.messages)}function Wt(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===be&&e.type==="resize"&&typeof e.height=="number"&&Number.isFinite(e.height)}var U=class{constructor(e={},t){this.provider="pcivault";this.container=null;this.messageHandler=null;this.actionOverlay=null;this.threeDsReturnHandler=null;this.actionOverlayPreviousFocus=null;this.actionOverlayTimer=null;this.messageToken=null;this.expectedOrigin=null;this.theme=void 0;this.submitGateBlocked=!1;this.cardFieldOrder=null;this.cardAutoFocus=!0;this.submitLabel=void 0;this.mountStartedAt=0;this.vaultReadyReported=!1;this.submissionStarted=!1;this.submissionStartedAt=null;this.listeners=new Map;this.config=e,this.ownsTelemetryReporter=!t&&e.telemetry!==!1,this.telemetryReporter=t?.reporter??(this.ownsTelemetryReporter?new b({billingApiUrl:(0,T.resolveBillingApiUrl)(e.billingApiUrl),sdkVersion:T.SDK_VERSION}):void 0)}async mount(e,t){this.ownsTelemetryReporter&&!this.telemetryReporter&&(this.telemetryReporter=new b({billingApiUrl:(0,T.resolveBillingApiUrl)(this.config.billingApiUrl),sdkVersion:T.SDK_VERSION}));let o=this.telemetryReporter;if(this.config.operation==="card_setup"&&o&&this.setupTelemetryReporter!==o){this.setupTelemetryReporter=o;try{o.beginCheckout({checkoutMode:"setup"})}catch{}}if(this.mountStartedAt=this.telemetryReporter?.now?.()??S(),this.vaultReadyReported=!1,this.submissionStarted=!1,this.submissionStartedAt=null,typeof window>"u"||typeof document>"u")throw this.reportVaultLoadFailure(),new T.FloPayError("The vault card form is only available in the browser.","api_error",{code:"card_capture_no_window"});if(!t?.html?.trim())throw this.reportVaultLoadFailure(),new T.FloPayError("No vault capture widget HTML was provided to mount the secure card form.","api_error",{code:"card_capture_no_widget_html"});this.container=e,this.messageToken=t.messageToken??null,this.expectedOrigin=t.expectedOrigin??this.config.expectedOrigin??null,this.theme=t.theme,t.submitLabel!==void 0&&(this.submitLabel=t.submitLabel);try{this.attachMessageListener(),this.injectWidget(e,t.html)}catch(s){throw this.reportVaultLoadFailure(),s}this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel(),J(le("vault.widget.mounted","vault_mount")),this.telemetryReporter?.log({name:"vault.widget.mounted",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"}),this.telemetryReporter?.performance?.({stage:"vault_mount",durationMs:Math.max(0,(this.telemetryReporter.now?.()??S())-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),this.emit("ready",{sessionId:this.config.sessionId})}reportVaultLoadFailure(){this.telemetryReporter?.error({errorCode:"VAULT_LOAD_FAILED",failureCategory:"provider_runtime",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"})}on(e,t){let o=this.listeners.get(e);return o||(o=new Set,this.listeners.set(e,o)),o.add(t),()=>{this.listeners.get(e)?.delete(t)}}unmount(){this.hideActionRequiredOverlay(),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.container&&(this.container.replaceChildren(),this.container=null),this.messageToken=null,this.expectedOrigin=null,this.ownsTelemetryReporter&&(this.telemetryReporter?.destroy(),this.telemetryReporter=void 0)}injectWidget(e,t){e.innerHTML=t;let o=Array.from(e.querySelectorAll("script"));for(let s of o){let n=document.createElement("script");for(let i of Array.from(s.attributes))n.setAttribute(i.name,i.value);n.text=s.text,s.replaceWith(n)}}attachMessageListener(){if(this.messageHandler)return;let e=t=>{if(this.expectedOrigin&&t.origin!==this.expectedOrigin)return;let o=t.data;if(Wt(o)){if(this.messageToken&&o.messageToken!==this.messageToken)return;this.applyHeight(o.height);return}if(Yt(o)){if(this.messageToken&&o.messageToken!==this.messageToken)return;let a=o.messages.filter(u=>typeof u=="string"&&u.trim()).join(" ");this.emit("validation",{sessionId:this.config.sessionId,message:a||void 0});return}if(!$t(o)||this.messageToken&&o.messageToken!==this.messageToken)return;let s=this.config.sessionId,n=typeof o.sessionId=="string"?o.sessionId:void 0;if(s&&n&&n!==s||(o.type==="complete"||o.type==="decline")&&s&&n!==s)return;let i=Gt(o.paymentMethod),c={...o.sessionId??this.config.sessionId?{sessionId:o.sessionId??this.config.sessionId}:{},...o.outcome?{outcome:o.outcome}:{},...o.paymentId?{paymentId:o.paymentId}:{},...o.authorizationExpiresAt?{authorizationExpiresAt:o.authorizationExpiresAt}:{},...o.failureOutcome?{failureOutcome:o.failureOutcome}:{},...o.intentId?{intentId:o.intentId}:{},...o.declineReason?{declineReason:o.declineReason}:{},...o.message?{message:o.message}:{},...i?{paymentMethod:i}:{}};o.type==="submitting"&&(this.submissionStarted=!0,this.submissionStartedAt=this.telemetryReporter?.now?.()??S()),J(Kt(o,this.submissionStarted,this.config.captureMethod,this.config.operation)),this.reportOutcome(o),o.type==="ready"&&(this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel()),o.type==="action_required"&&o.nextActionRedirectUrl&&this.showActionRequiredOverlay(o.nextActionRedirectUrl),(o.type==="complete"||o.type==="decline"||o.type==="error"||o.type==="submitting")&&this.hideActionRequiredOverlay(),o.type!=="action_required"&&this.emit(o.type,c)};this.messageHandler=e,window.addEventListener("message",e)}reportOutcome(e){let t=this.telemetryReporter;if(!t)return;let{type:o}=e;if(o==="ready"&&!this.vaultReadyReported&&(this.vaultReadyReported=!0,t.performance({stage:"vault_ready",durationMs:Math.max(0,t.now()-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card",requestCategory:"provider_sdk"})),o==="complete"||o==="decline"){t.log({name:"vault.terminal",stage:"completion",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:$e(e,this.config.captureMethod,this.config.operation),provider:"pcivault",paymentMethodCategory:"card"});return}if(o==="error"){let i=Ke(this.submissionStarted);t.log({name:"vault.terminal",stage:i.stage,provider:"pcivault",paymentMethodCategory:"card"}),t.error({...i,provider:"pcivault",paymentMethodCategory:"card"});return}if(o==="action_required"){t.log({name:"vault.action.required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"}),t.log({name:"vault.three_ds.handoff",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});let i=this.submissionStartedAt;this.submissionStartedAt=null,i!==null&&t.performance({stage:"three_ds_handoff",durationMs:Math.max(0,t.now()-i),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:"action_required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});return}let[s,n]=He[o];t.log({name:s,stage:n,provider:"pcivault",paymentMethodCategory:"card"})}applyTheme(e){this.theme=e,this.postTheme()}postTheme(){this.theme!==void 0&&this.postToHostedWindow({source:"flopay-vault-host",type:"theme",theme:this.theme},this.directiveTargetOrigin())}setSubmitGate(e){this.submitGateBlocked=e,this.postSubmitGate()}postSubmitGate(){this.postToHostedWindow({source:"flopay-vault-host",type:"gate",blocked:this.submitGateBlocked},this.directiveTargetOrigin())}setCardFieldOrder(e,t){this.cardFieldOrder=e,this.cardAutoFocus=t,this.postCardFieldOrder()}postCardFieldOrder(){this.postToHostedWindow({source:"flopay-vault-host",type:"fieldOrder",order:this.cardFieldOrder,autoFocus:this.cardAutoFocus},this.directiveTargetOrigin())}setSubmitLabel(e){this.submitLabel=e,this.postSubmitLabel()}postSubmitLabel(){let e=this.submitLabel,t=this.config.sessionId,{messageToken:o,expectedOrigin:s}=this;e===void 0||!t||!o||!s||this.postToHostedWindow({source:"flopay-vault-host",type:"submitLabel",sessionId:t,messageToken:o,label:e},s)}hostedWindow(){return this.container?.querySelector("iframe")?.contentWindow??null}postToHostedWindow(e,t){let o=this.hostedWindow();if(o)try{o.postMessage(e,t)}catch{}}directiveTargetOrigin(){return this.expectedOrigin??"*"}emit(e,t){for(let o of this.listeners.get(e)??[])o(t)}showActionRequiredOverlay(e){if(typeof document>"u")return;if(this.actionOverlay){let i=this.actionOverlay.querySelector("iframe");i instanceof HTMLIFrameElement&&i.src!==e&&(i.src=e),this.armActionRequiredTimeout();return}this.actionOverlayPreviousFocus=document.activeElement instanceof HTMLElement?document.activeElement:null;let t=document.createElement("div");t.setAttribute("data-flopay-action-required","1"),t.setAttribute("role","dialog"),t.setAttribute("aria-modal","true"),t.setAttribute("aria-label","Card authentication"),t.style.cssText=["position:fixed","inset:0","z-index:2147483647","background:rgba(15,23,42,0.6)","display:flex","align-items:center","justify-content:center","padding:16px"].join(";");let o=document.createElement("iframe");o.setAttribute("title","Card authentication"),o.setAttribute("allow","payment"),o.tabIndex=0,o.style.cssText=["width:min(100%,460px)","height:min(100%,640px)","border:0","border-radius:12px","background:#fff","box-shadow:0 12px 30px rgba(0,0,0,0.35)"].join(";"),o.src=e,t.appendChild(o);let s=document.createElement("button");s.type="button",s.setAttribute("aria-label","Close card authentication"),s.textContent="\xD7",s.style.cssText=["position:fixed","top:20px","right:20px","width:40px","height:40px","border:0","border-radius:9999px","background:#fff","color:#0f172a","font-size:28px","line-height:40px","cursor:pointer","box-shadow:0 4px 14px rgba(0,0,0,0.25)"].join(";"),s.addEventListener("click",()=>this.abandonActionRequiredOverlay()),t.appendChild(s),t.addEventListener("click",i=>{i.target===t&&this.abandonActionRequiredOverlay()});let n=i=>{if(i.source!==o.contentWindow)return;let c=i.data;!c||typeof c!="object"||c.source!=="flopay-vault-3ds-return"||(J(le("vault.three_ds.returned","three_ds_return")),this.telemetryReporter?.log({name:"vault.three_ds.returned",stage:"three_ds_return",provider:"pcivault",paymentMethodCategory:"card"}),this.hideActionRequiredOverlay())};window.addEventListener("message",n),this.threeDsReturnHandler=n,document.body.appendChild(t),this.actionOverlay=t,o.focus(),this.armActionRequiredTimeout(),J(le("vault.three_ds.handoff","three_ds_handoff"))}armActionRequiredTimeout(){this.actionOverlayTimer&&clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=setTimeout(()=>{this.actionOverlayTimer=null,this.actionOverlay&&this.timeOutActionRequiredOverlay()},Bt)}reportChallengeAbandoned(){J((0,T.buildTelemetryTerminalEvent)({eventId:"77777777-7777-4777-8777-777777777777",outcome:"customer_abandoned",stage:"three_ds_handoff",sequence:0,provider:"pcivault",paymentMethodCategory:"card"})),this.telemetryReporter?.terminal({outcome:"customer_abandoned",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"})}timeOutActionRequiredOverlay(){this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("error",{...this.config.sessionId?{sessionId:this.config.sessionId}:{},message:jt})}abandonActionRequiredOverlay(){this.actionOverlay&&(this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("challenge_dismissed",{...this.config.sessionId?{sessionId:this.config.sessionId}:{}}))}hideActionRequiredOverlay(){if(this.actionOverlayTimer&&(clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=null),this.threeDsReturnHandler&&(window.removeEventListener("message",this.threeDsReturnHandler),this.threeDsReturnHandler=null),!this.actionOverlay)return;this.actionOverlay.parentNode?.removeChild(this.actionOverlay),this.actionOverlay=null;let e=this.actionOverlayPreviousFocus;this.actionOverlayPreviousFocus=null,e?.isConnected&&e.focus()}applyHeight(e){let t=this.container?.querySelector("iframe");if(!t)return;let o=Math.max(0,Math.min(Math.ceil(e),2e3));t.style.height=`${o}px`}};function Ge(r,e){let t=U;return new t(r,{reporter:e})}var Ye=Symbol.for("@flopay/js.telemetry.bridge.v1");function We(r,e,t){let o=()=>e?.now()??t();Object.defineProperty(r,Ye,{configurable:!1,enumerable:!1,writable:!1,value:{error:n=>e?.error(n),log:n=>e?.log(n),performance:n=>e?.performance(n),terminal:n=>e?.terminal(n),now:o,elapsed:n=>Math.max(0,o()-n),setCheckoutContext:n=>e?.setCheckoutContext(n),beginCheckout:(n={})=>e?.beginCheckout(n)??o(),disable:()=>e?.disable(),subscribe:n=>e?.subscribe(n)??(()=>{}),flush:()=>e?.flush()??Promise.resolve()}})}function Je(r){return r[Ye]}var Q=class{now(){return this.telemetryReporter?.now?.()??S()}constructor(e,t,o){this.provider=e,this.config=t,this.telemetryReporter=o??new b({billingApiUrl:(0,M.resolveBillingApiUrl)(t.billingApiUrl),sdkVersion:M.SDK_VERSION,enabled:t.telemetry!==!1}),We(this,this.telemetryReporter,S)}cardCapture(e){return this.telemetryReporter?.log({name:"vault.capture.requested",stage:"vault_request",provider:"pcivault",paymentMethodCategory:"card"}),this.telemetryReporter?Ge({sessionId:e?.sessionId,captureMethod:e?.captureMethod},this.telemetryReporter):new U({sessionId:e?.sessionId,captureMethod:e?.captureMethod,telemetry:!1})}async retrieveSession(e,t){if(!e)throw new M.FloPayError("sessionId is required to retrieve a session.","validation_error",{param:"sessionId"});let o=await this.retrieveUnifiedSession(e,t);if(!o.data.session)throw new M.FloPayError("Session not found","api_error");return o.data.session}async retrieveUnifiedSession(e,t){if(!e)throw new M.FloPayError("sessionId is required.","validation_error",{param:"sessionId"});let o=(0,M.resolveBillingApiUrl)(t??this.config.billingApiUrl),s=this.now();this.telemetryReporter?.log({name:"session.read.started",stage:"session_read",requestCategory:"session_read"});let n,i,c=u=>{if(n===void 0)return;let d=n,p=i;n=void 0,i=void 0,this.telemetryReporter?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_read",statusClass:u,attempt:p}),this.telemetryReporter?.performance({stage:"session_first_byte",durationMs:d,durationMode:"machine",requestCategory:"session_read",statusClass:u,attempt:p})},a=je(o,{now:()=>this.telemetryReporter?.now()??S(),onFirstByte:(u,d)=>{n=u,i=d},onRetry:(u,d)=>{this.telemetryReporter?.log({name:"operation.retry",stage:u==="session_read"?"session_read":"processing",requestCategory:u,attempt:d})}});try{let u=await a.getUnifiedCheckoutSession(e);return c("2xx"),this.telemetryReporter?.log({name:"session.request.completed",stage:"session_complete",requestCategory:"session_read",statusClass:"2xx"}),this.telemetryReporter?.log({name:"checkout.data.ready",stage:"checkout_data_ready"}),this.telemetryReporter?.performance({stage:"session_complete",durationMs:this.now()-s,durationMode:"machine",requestCategory:"session_read",statusClass:"2xx"}),u}catch(u){let d=(0,M.classifyTelemetryFailure)(u,u instanceof M.FloPayError&&u.code==="checkout_processing_timeout"?"REQUEST_TIMEOUT":"NETWORK_REQUEST_FAILED");throw c(d.statusClass),this.telemetryReporter?.error({...d,stage:"session_read",provider:"flo",paymentMethodCategory:"unknown"}),this.telemetryReporter?.performance({stage:"session_complete",durationMs:this.now()-s,durationMode:"machine",requestCategory:"session_read",statusClass:d.statusClass}),u}}getRawProvider(){return this.provider.getRawProvider()}destroy(){this.telemetryReporter?.log({name:"checkout.unmount",stage:"unmount"}),this.telemetryReporter?.destroy(),this.provider.destroy()}};function Qe(r,e,t){let o=Q;return new o(r,e,t)}var E=require("@flopay/shared");var _e=require("@flopay/shared"),Xe=require("@stripe/stripe-js"),Ze=new WeakSet;function et(r){return r instanceof _e.FloPayError&&Ze.has(r)}function ke(r){switch(r){case"night":return"night";case"flat":return"flat";default:return"stripe"}}function tt(r){return{...r,theme:ke(r.theme)}}var K=class{constructor(){this.name="stripe";this.stripe=null}async initialize(e){if(typeof window>"u")return;let t=await(0,Xe.loadStripe)(e.publishableKey,{locale:e.locale??"auto"});if(!t){let o=new _e.FloPayError("Failed to initialize Stripe. Check your publishable key.","authentication_error");throw Ze.add(o),o}this.stripe=t}getRawProvider(){return this.stripe}destroy(){this.stripe=null}};var rt=new Map;function Se(r){return Array.isArray(r)?r.map(Se):r&&typeof r=="object"?Object.fromEntries(Object.entries(r).filter(([,e])=>e!==void 0).sort(([e],[t])=>e.localeCompare(t)).map(([e,t])=>[e,Se(t)])):r}function Jt(r,e){return JSON.stringify([r,(0,E.resolveBillingApiUrl)(e?.billingApiUrl),e?.telemetry!==!1,e?.locale??"auto",e?.apiVersion??null,Se(e?.appearance??null)])}var de=new Map;async function ot(r,e){if(!r){let c=new b({billingApiUrl:(0,E.resolveBillingApiUrl)(e?.billingApiUrl),sdkVersion:E.SDK_VERSION,enabled:e?.telemetry!==!1});throw c.error({errorCode:"CONFIGURATION_INVALID",stage:"sdk_initialize",paymentMethodCategory:"unknown"}),c.flush().catch(()=>{}).finally(()=>c.destroy()),new E.FloPayError("A publishable key is required to initialize FloPay.","validation_error",{param:"publishableKey"})}let t=Jt(r,e),o=rt.get(t);if(o)return e?.telemetry!==!1&&Je(o)?.log({name:"sdk.cache.hit",stage:"sdk_initialize"}),o;let s=de.get(t);if(s)return s;let n={...e,publishableKey:r},i=(async()=>{let c=new b({billingApiUrl:(0,E.resolveBillingApiUrl)(n.billingApiUrl),sdkVersion:E.SDK_VERSION,enabled:n.telemetry!==!1}),a=c.now();c.log({name:"sdk.initialize.started",stage:"sdk_initialize"}),c.log({name:"sdk.cache.miss",stage:"sdk_initialize"}),c.log({name:"provider.load.started",stage:"provider_load",provider:"stripe"});let u=new K,d=c.now();try{await u.initialize(n)}catch(f){throw c.error({errorCode:"PROVIDER_LOAD_FAILED",failureCategory:et(f)?"invalid_response":"provider_runtime",stage:"provider_load",provider:"stripe",requestCategory:"provider_sdk",paymentMethodCategory:"unknown"}),c.destroy(),f}let p=c.now();c.log({name:"provider.ready",stage:"provider_ready",provider:"stripe"}),c.log({name:"provider.availability.checked",stage:"provider_ready",provider:"stripe"}),c.log({name:"sdk.initialize.ready",stage:"sdk_initialize"}),c.performance({stage:"sdk_initialize",durationMs:p-a,durationMode:"machine",provider:"stripe"}),c.performance({stage:"provider_ready",durationMs:p-d,durationMode:"machine",provider:"stripe"});let m=Qe(u,n,c);return rt.set(t,m),m})();de.set(t,i);try{return await i}finally{de.get(t)===i&&de.delete(t)}}0&&(module.exports={FloPay,PaymentAPI,PciVaultCardCapture,SESSION_CREATE_TELEMETRY,StripeAdapter,cacheSessionDisplayData,clearSessionDisplayData,createCheckoutSession,createCheckoutSessionWithRetries,dropThirdPartyOnlyError,getSessionDisplayData,loadFloPay,toStripeAppearance,toStripeAppearanceTheme});
+"use strict";var ge=Object.defineProperty;var ut=Object.getOwnPropertyDescriptor;var lt=Object.getOwnPropertyNames;var dt=Object.prototype.hasOwnProperty;var mt=(r,e)=>{for(var t in e)ge(r,t,{get:e[t],enumerable:!0})},pt=(r,e,t,o)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of lt(e))!dt.call(r,n)&&n!==t&&ge(r,n,{get:()=>e[n],enumerable:!(o=ut(e,n))||o.enumerable});return r};var yt=r=>pt(ge({},"__esModule",{value:!0}),r);var Qt={};mt(Qt,{FloPay:()=>X,PaymentAPI:()=>J,PciVaultCardCapture:()=>N,SESSION_CREATE_TELEMETRY:()=>Se,StripeAdapter:()=>$,cacheSessionDisplayData:()=>U,clearSessionDisplayData:()=>ae,createCheckoutSession:()=>xe,createCheckoutSessionWithRetries:()=>Ue,dropThirdPartyOnlyError:()=>at.dropThirdPartyOnlyError,getSessionDisplayData:()=>ie,loadFloPay:()=>it,toStripeAppearance:()=>st,toStripeAppearanceTheme:()=>Re});module.exports=yt(Qt);var at=require("@flopay/shared");var C=require("@flopay/shared");function G(r){return typeof r=="string"&&r.trim()?r:void 0}function Y(r){if(typeof r=="string")return r.trim()?r:void 0;if(Array.isArray(r))return r.filter(t=>typeof t=="string"&&t.trim().length>0).join("; ")||void 0}function P(r=12e3){let e=Number.isFinite(r)&&r>=0?r:12e3,t=new AbortController,o=setTimeout(()=>t.abort(),e);return{signal:t.signal,clear:()=>clearTimeout(o)}}function ht(){return Object.assign(new Error("The operation was aborted."),{name:"AbortError"})}function B(r,e){let t=150*2**r,o=Math.round(t*(.75+Math.random()*.5));return new Promise((n,s)=>{let i,a=()=>e.removeEventListener("abort",c),c=()=>{i!==void 0&&clearTimeout(i),a(),s(ht())};if(e.aborted){c();return}i=setTimeout(()=>{a(),n()},o),e.addEventListener("abort",c,{once:!0})})}var gt="flopay_session_display:";var se=new Map;function ne(r){return`${gt}${r}`}function fe(){if(typeof window>"u")return null;try{return window.sessionStorage}catch{return null}}function U(r,e,t){if(!r)return;let o=t?.ttlMs??36e5,n={data:e,expiresAt:Date.now()+o},s=fe();if(s)try{s.setItem(ne(r),JSON.stringify(n));return}catch{}se.set(r,n)}function ie(r){if(!r)return null;let e=fe();if(e)try{let o=e.getItem(ne(r));if(o){let n=JSON.parse(o);if(n&&typeof n.expiresAt=="number"&&n.expiresAt>Date.now())return n.data;e.removeItem(ne(r))}}catch{}let t=se.get(r);if(t){if(t.expiresAt>Date.now())return t.data;se.delete(r)}return null}function ae(r){if(!r)return;se.delete(r);let e=fe();if(e)try{e.removeItem(ne(r))}catch{}}var k=require("@flopay/shared"),ft="/v1/sdk-telemetry/events",Ce=16,Ct=64,vt=1500,Ee=1e3,Tt=64,bt="00000000-0000-4000-8000-000000000000",St={technical_error:8,lifecycle:32,expected_outcome:32,performance:24};function j(){try{return globalThis.crypto.randomUUID()}catch{let r=new Uint8Array(16);try{globalThis.crypto.getRandomValues(r)}catch{for(let t=0;t<r.length;t+=1)r[t]=Math.floor(Math.random()*256)}r[6]=(r[6]??0)&15|64,r[8]=(r[8]??0)&63|128;let e=[...r].map(t=>t.toString(16).padStart(2,"0")).join("");return`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`}}function _t(r){try{return new TextEncoder().encode(r).byteLength}catch{return r.length}}function kt(r){return JSON.stringify([r.code,r.failureCategory,r.stage,r.provider,r.attempt,r.statusClass,r.requestCategory,r.paymentMethodCategory,r.walletType,r.operationOutcome,r.checkoutMode,r.layout,r.inAppBrowser,r.appFamily,r.popupCapability,r.presentationMode,r.terminalReason])}function R(){return globalThis.performance?.now()??0}var S=class{constructor(e){this.ingestionDisabled=!1;this.queue=[];this.sequence=0;this.flushTimer=null;this.flushInFlight=null;this.reportedFailures=new Map;this.checkoutContext={};this.checkoutStartedAt=null;this.destroyed=!1;this.observers=new Set;this.pageExitHandler=()=>{this.drainQueue()};this.visibilityHandler=()=>{document.visibilityState==="hidden"&&this.flush()};this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0};this.endpoint=`${e.billingApiUrl.replace(/\/+$/,"")}${ft}`,this.sdkPackage=e.sdkPackage??"@flopay/js",this.sdkVersion=e.sdkVersion,this.correlationId=j(),this.merchantEnabled=e.enabled!==!1,this.clock=e.clock??R,this.browserTransportAvailable=typeof window<"u"&&typeof document<"u",this.browserTransportAvailable&&(window.addEventListener("pagehide",this.pageExitHandler),document.addEventListener("visibilitychange",this.visibilityHandler))}log(e){this.notify({...e,class:"lifecycle"}),this.canCollect()&&this.enqueue((0,k.buildTelemetryLogEvent)({...this.checkoutContext,...e,eventId:j(),sequence:this.sequence++}))}error(e){if(this.notify({...e,class:"technical_error"}),!this.canCollect())return;let t=(0,k.buildTelemetryErrorEvent)({...this.checkoutContext,...e,eventId:bt,sequence:0}),o=kt(t),n=this.now();this.pruneReportedFailures(n);let s=this.reportedFailures.get(o);if(s!==void 0&&n>=s&&n-s<Ee){this.log({name:"operation.deduplicated",stage:e.stage,provider:e.provider,paymentMethodCategory:e.paymentMethodCategory,attempt:e.attempt,inAppBrowser:e.inAppBrowser,appFamily:e.appFamily,popupCapability:e.popupCapability,presentationMode:e.presentationMode,terminalReason:e.terminalReason});return}this.rememberReportedFailure(o,n),this.enqueue((0,k.buildTelemetryErrorEvent)({...this.checkoutContext,...e,eventId:j(),sequence:this.sequence++}))}performance(e){this.canCollect()&&this.enqueue((0,k.buildTelemetryPerformanceEvent)({...this.checkoutContext,...e,eventId:j(),sequence:this.sequence++}))}terminal(e){if(this.canCollect()&&(this.enqueue((0,k.buildTelemetryTerminalEvent)({...this.checkoutContext,...e,eventId:j(),sequence:this.sequence++})),e.outcome!=="action_required"&&this.checkoutStartedAt!==null)){let t=this.checkoutStartedAt;this.checkoutStartedAt=null,this.performance({...e,stage:"total_journey",durationMs:Math.max(0,this.now()-t),durationMode:"total"})}}now(){try{return this.clock()}catch{return R()}}subscribe(e){return this.destroyed?()=>{}:(this.observers.add(e),()=>this.observers.delete(e))}notify(e){if(!this.destroyed)for(let t of this.observers)try{t(e)}catch{}}pruneReportedFailures(e){for(let[t,o]of this.reportedFailures)(e<o||e-o>=Ee)&&this.reportedFailures.delete(t)}rememberReportedFailure(e,t){for(;this.reportedFailures.size>=Tt;){let o=this.reportedFailures.keys().next();if(o.done)break;this.reportedFailures.delete(o.value)}this.reportedFailures.set(e,t)}setCheckoutContext(e){this.checkoutContext={checkoutMode:e.checkoutMode,layout:e.layout}}beginCheckout(e={}){return this.canCollect()?(this.drainQueue(),this.setCheckoutContext(e),this.sequence=0,this.reportedFailures.clear(),this.eventCounts={technical_error:0,lifecycle:0,expected_outcome:0,performance:0},this.checkoutStartedAt=this.now(),this.checkoutStartedAt):0}enqueue(e){if(this.canCollect()&&!(this.queue.length>=Ct||this.eventCounts[e.class]>=St[e.class])){if(this.eventCounts[e.class]+=1,this.queue.push(e),this.queue.length>=Ce){this.flush();return}this.scheduleFlush()}}canCollect(){return this.browserTransportAvailable&&this.merchantEnabled&&!this.ingestionDisabled&&!this.destroyed}async flush(){if(this.flushInFlight!==null)return this.flushInFlight;if(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0)return;this.clearFlushTimer();let e=this.queue.splice(0,Ce);return this.flushInFlight=this.sendBatch(e).finally(()=>{this.flushInFlight=null,this.queue.length>0&&this.scheduleFlush()}),this.flushInFlight}destroy(){this.destroyed||(this.drainQueue(),this.destroyed=!0,this.clearFlushTimer(),this.browserTransportAvailable&&(window.removeEventListener("pagehide",this.pageExitHandler),document.removeEventListener("visibilitychange",this.visibilityHandler)),this.queue.splice(0),this.reportedFailures.clear(),this.observers.clear())}disable(){this.merchantEnabled=!1,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}drainQueue(){if(!(!this.browserTransportAvailable||this.destroyed||this.ingestionDisabled||this.queue.length===0))for(this.clearFlushTimer();this.queue.length>0;){let e=this.queue.splice(0,Ce);this.sendBatch(e)}}async sendBatch(e){if(!this.browserTransportAvailable||this.ingestionDisabled)return;let t=(0,k.serializeTelemetryBatch)(e,{correlationId:this.correlationId,sdkPackage:this.sdkPackage,sdkVersion:this.sdkVersion,batchId:j()});if(_t(t)>k.TELEMETRY_MAX_BATCH_BYTES)return;let o=typeof AbortController>"u"?null:new AbortController,n=null;try{let s=fetch(this.endpoint,{method:"POST",headers:{"content-type":"text/plain;charset=UTF-8"},body:t,credentials:"omit",keepalive:!0,referrerPolicy:"no-referrer",signal:o?.signal}).then(async c=>{if(c.status!==202)return null;let u=null;try{u=await c.json()}catch{}return u?.status==="disabled"?"disabled":null}).catch(()=>null),i=new Promise(c=>{n=setTimeout(()=>{o?.abort(),c(null)},vt)});await Promise.race([s,i])==="disabled"&&this.disableFromIngestion()}catch{}finally{n&&clearTimeout(n)}}disableFromIngestion(){this.ingestionDisabled=!0,this.queue.splice(0),this.reportedFailures.clear(),this.clearFlushTimer()}scheduleFlush(){this.flushTimer||this.destroyed||this.ingestionDisabled||(this.flushTimer=setTimeout(()=>{this.flushTimer=null,this.flush()},0))}clearFlushTimer(){this.flushTimer&&(clearTimeout(this.flushTimer),this.flushTimer=null)}},Me=Symbol.for("@flopay/js.telemetry.reporter-factory.v1"),Pe=globalThis;Pe[Me]===void 0&&Object.defineProperty(Pe,Me,{configurable:!0,enumerable:!1,writable:!1,value:r=>new S(r)});var ve=5,Ie=new WeakSet;function Rt(r){(typeof r=="object"&&r!==null||typeof r=="function")&&Ie.add(r)}function wt(r){return(typeof r=="object"&&r!==null||typeof r=="function")&&Ie.has(r)}function At(r,e){let t=e?.error,o=G(e?.code)??G(t?.code)??`http_${r}`,n=Y(e?.message)??Y(t?.message)??Et(o,r);return new C.FloPayError(n,"api_error",{code:o,statusCode:r})}function Et(r,e){switch(r){case"CouponLimitExceeded":return`Too many coupon codes \u2014 a checkout session accepts at most ${ve}.`;case"CouponCurrencyUnsupported":return"One of the applied coupons has no price configured for the cart currency.";default:return`Failed to create checkout session (HTTP ${e}).`}}async function De(r,e,t){let{billingApiUrl:o,checkoutBaseUrl:n,items:s=[],subscriptions:i=[],products:a,account:c,successUrl:u,cancelUrl:d,checkoutMode:p="confirm",captureMethod:m,couponCodes:y=[],checkoutMetadata:h,tagsData:v,redirectParams:g={},setCookie:w=!0,clientId:_,currency:f,utmMetadata:V,idempotencyKey:pe}=r,Z=(0,C.resolveIdempotencyKey)(pe);if(y.length>ve)throw new C.FloPayError(`Too many coupon codes \u2014 a checkout session accepts at most ${ve}.`,"validation_error",{code:"CouponLimitExceeded",param:"couponCodes"});let q=a??(0,C.foldIntoProducts)(s,i);(0,C.assertCaptureMethodEligible)({captureMethod:m,products:q});let x=(0,C.resolveSessionCurrency)(f,s,i,q);if(!x)throw new C.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});let M={clientId:_,checkoutVersion:C.SDK_VERSION,successUrl:u,cancelUrl:d,currency:x,checkoutMode:p,products:q.map(O=>(0,C.buildProductPayload)(O,x)),accountData:{userId:c.userId,firstName:c.firstName??null,lastName:c.lastName??null,email:c.email,country:c.country??null,gender:c.gender??null,city:c.city??null,state:c.state??null,zip:c.zip??null,addressLine1:c.addressLine1??null,addressLine2:c.addressLine2??null},couponCodes:y};m==="manual"&&(M.captureMethod=m),h!==void 0&&(M.checkoutMetadata=h),v&&(M.tagsData=v),V&&V.length>0&&(M.utmMetadata=V);let ye=`${o.replace(/\/+$/,"")}/v1/checkouts/sessions`,Ae={"Content-Type":"application/json"};Z&&(Ae[C.IDEMPOTENCY_KEY_HEADER]=Z);let z,ee,ct={method:"POST",headers:Ae,body:JSON.stringify(M),signal:e},te;try{t?.startAttempt(),te=await fetch(ye,ct)}catch(O){throw Rt(O),O}try{t?.record(te.status)}catch{}z=te.status;try{ee=await te.json()}catch{}if(z>=400)throw At(z,ee);if(z===201){let O=ee?.data?.uuid,he=ee?.data?.nonce;if(!O)throw new Error("Checkout session created but no UUID was returned by the billing API");if(!he)throw new C.FloPayError("Checkout session created but no `nonce` was returned by the billing API. Upgrade the billing service to TeamFloPay/backend#640 or later.","api_error",{code:"MissingCheckoutSessionToken"});(q.length>0||x)&&U(O,{currency:x,products:q.map(T=>({code:T.code??T.providerItemId??T.providerPlanId,type:T.type,name:T.name??T.itemName??T.providerItemName??T.subscriptionName??T.providerPlanName??null,totalAmount:T.totalAmount,overrideAmount:T.overrideAmount,currency:T.currency??x}))});let re=new URL(`${n.replace(/\/+$/,"")}/secure`);re.searchParams.set("id",O);for(let[T,oe]of Object.entries(g))re.searchParams.set(T,oe);if(w&&typeof window<"u"&&typeof document<"u"){let T=JSON.stringify({origin_url:d}),oe=window.location.hostname.split(".").slice(-2).join(".");document.cookie=`checkout_data=${encodeURIComponent(T)}; domain=.${oe}; path=/; max-age=3600; SameSite=Lax; Secure;`,document.cookie=`flopay_checkout_token=${encodeURIComponent(he)}; domain=.${oe}; path=/; max-age=3600; SameSite=Lax; Secure;`}return typeof window<"u"&&(window.location.href=re.toString()),{status:201,redirectUrl:re.toString(),nonce:he}}return z===204?(typeof window<"u"&&(window.location.href=u),{status:204}):{status:z}}async function xe(r){let e=Fe(r),t=Oe(e),o=P(r.timeoutMs);try{let n=await De(r,o.signal,t);return t.commit(),qe(e,n),n}catch(n){throw t.commit(),ce(e,n),n}finally{o.clear(),H(e.reporter)}}function Oe(r){let e=!1,t=r.startedAt,o;return{startAttempt(){t=r.reporter.now()},record(n){o={status:n,durationMs:Math.max(0,r.reporter.now()-t),attempt:r.attempt}},commit(){if(e||!o)return;e=!0;let n=(0,C.telemetryStatusClass)(o.status);r.reporter.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_create",statusClass:n,attempt:o.attempt}),r.reporter.performance({stage:"session_first_byte",durationMs:o.durationMs,durationMode:"machine",requestCategory:"session_create",statusClass:n,attempt:o.attempt})}}}function Fe(r){let e=new S({billingApiUrl:r.billingApiUrl,sdkVersion:C.SDK_VERSION,enabled:r.telemetry!==!1}),t=e.now();return e.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"}),{reporter:e,startedAt:t,attempt:0}}function qe(r,e){let t=(0,C.telemetryStatusClass)(e.status);r.reporter.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:t}),r.reporter.performance({stage:"session_create",durationMs:r.reporter.now()-r.startedAt,durationMode:"machine",requestCategory:"session_create",statusClass:t,attempt:r.attempt})}function ce(r,e){let{reporter:t}=r,o=(0,C.classifyTelemetryFailure)(e,"CHECKOUT_SESSION_CREATE_FAILED");if(t.performance({stage:"session_create",durationMs:t.now()-r.startedAt,durationMode:"machine",requestCategory:"session_create",statusClass:o.statusClass,attempt:r.attempt}),e instanceof C.FloPayError&&e.type==="validation_error"){t.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"});return}if(o.statusClass==="4xx"){t.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create",statusClass:"4xx"});return}t.error({...o,stage:"session_create",requestCategory:"session_create"})}function H(r){r.flush().catch(()=>{}).finally(()=>r.destroy())}async function Ue(r){let{maxRetries:e=2,...t}=r,o=Fe(r),n=Oe(o);if(!Number.isFinite(e)||!Number.isInteger(e)||e<0||e>=3)throw o.reporter.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"}),H(o.reporter),new Error(`Number of retries must be an integer between 0 and ${2}`);let s={...t,idempotencyKey:(0,C.resolveIdempotencyKey)(t.idempotencyKey)},i=P(t.timeoutMs),a;for(let c=0;c<=e;c++){o.attempt=c;try{let u=await De(s,i.signal,n);return n.commit(),qe(o,u),i.clear(),H(o.reporter),u}catch(u){a=u;let d=u instanceof Error&&u.name==="AbortError",p=wt(u),m=u instanceof C.FloPayError&&u.code===C.IDEMPOTENCY_IN_PROGRESS_CODE;if((d||p||m)&&!i.signal.aborted&&c<e){o.reporter.log({name:"operation.retry",stage:"session_create",requestCategory:"session_create",attempt:c+1});try{await B(c,i.signal)}catch(y){throw n.commit(),ce(o,y),i.clear(),H(o.reporter),y}continue}throw n.commit(),ce(o,u),i.clear(),H(o.reporter),u}}throw n.commit(),ce(o,a),i.clear(),H(o.reporter),a??new Error("Unknown error during checkout session creation")}var A=require("@flopay/shared");var l=require("@flopay/shared");var Le=0,Ne=500,Te=15e3,Mt=3e3,Pt=1e4,It=1e4;function je(r){return typeof r=="object"&&r!==null}function K(r,e){return G(r?.[e])}function Ve(r,e){return Y(r?.[e])}function Dt(r,e){let t=r?.[e];return typeof t=="number"&&Number.isFinite(t)?t:void 0}function be(r,e){return e?new Promise((t,o)=>{let n=()=>{clearTimeout(s),o(e.reason??Object.assign(new Error("The operation was aborted."),{name:"AbortError"}))},s=setTimeout(()=>{e.removeEventListener("abort",n),t()},r);e.aborted?n():e.addEventListener("abort",n,{once:!0})}):new Promise(t=>setTimeout(t,r))}function xt(r){return r instanceof Error&&r.name==="AbortError"}function E(){return new l.FloPayError("Checkout is still processing. Please try again shortly.","api_error",{code:"checkout_processing_timeout"})}async function F(r,e){let t=await r.json().catch(()=>null),o=je(t?.error)?t.error:null,n=Ve(t,"message")??Ve(o,"message")??e,s=K(t,"code")??K(t,"gatewayErrorCode")??K(o,"code")??`http_${r.status}`;return new l.FloPayError(n,"api_error",{code:s,statusCode:r.status})}async function Ot(r){let e=r.status===400?await r.clone().json().catch(()=>null):null;return(0,l.classifyPaymentRejection)(r.status,e)}function ze(r){return r===400||r===422}var le=2;async function ue(r,e,t=le,o,n){let s;for(let i=0;;i++)try{return n?.(i),await fetch(r,e)}catch(a){if(e?.signal?.aborted||a instanceof Error&&a.name==="AbortError")throw a;if(s=a,i>=t)throw s;try{o?.(i+1)}catch{}await be(150*2**i,e?.signal??void 0)}}var Se=Symbol.for("@flopay/js.session-create.telemetry.v1");function Ft(r){return r[Se]}function qt(r){return"now"in r||"onFirstByte"in r||"onSessionCreateFailure"in r||"onRetry"in r}function He(r){let e=(0,l.isCardHolderNamePlaceholder)(r.firstName,r.lastName);return{userId:r.userId,firstName:e?null:r.firstName??null,lastName:e?null:r.lastName??null,email:r.email,country:r.country??null,gender:r.gender??null,city:r.city??null,state:r.state??null,zip:r.zip??null,addressLine1:r.addressLine1??null,addressLine2:r.addressLine2??null}}function Ke(r,e){e.checkoutMetadata!==void 0&&(r.checkoutMetadata=e.checkoutMetadata),e.tagsData&&(r.tagsData=e.tagsData),e.utmMetadata&&e.utmMetadata.length>0&&(r.utmMetadata=e.utmMetadata),e.avsCheck!==void 0&&(r.avsCheck=e.avsCheck),e.checkoutType&&(r.checkoutType=e.checkoutType),e.checkoutLayout&&(r.checkoutLayout=e.checkoutLayout),e.avsConfig&&(r.avsConfig=e.avsConfig)}function Ut(r,e){let t={clientId:r.clientId,checkoutVersion:l.SDK_VERSION,successUrl:r.successUrl,cancelUrl:r.cancelUrl,currency:e,checkoutMode:"full",deferDataAttachment:!0};return r.captureMethod==="manual"&&(t.captureMethod=r.captureMethod),r.account.country&&(t.accountData={country:r.account.country}),Ke(t,r),t}function Be(r,e,t){return{currency:e,products:t.map(o=>(0,l.buildProductPayload)(o,e)),couponCodes:r.couponCodes??[],accountData:He(r.account)}}function Lt(r,e,t){return{currency:e,products:t.map(o=>(0,l.buildProductPayload)(o,e)),couponCodes:r.couponCodes??[]}}function Nt(r){let e={},t=(0,l.isCardHolderNamePlaceholder)(r.firstName,r.lastName);for(let[o,n]of Object.entries(r)){if(t&&o.endsWith("Name")||typeof n!="string")continue;let s=n.trim();s&&(e[o]=s)}return{accountData:e}}var L=class L{constructor(e,t={}){this.baseUrl=e.replace(/\/+$/,"");let o=qt(t);this.telemetryHooks=o?t:void 0,this.directTelemetry=o||t.telemetry===!1?void 0:new S({billingApiUrl:this.baseUrl,sdkVersion:l.SDK_VERSION})}destroy(){this.directTelemetry?.destroy()}reportDirectFailure(e,t,o,n,s="unknown"){let i=(0,l.classifyTelemetryFailure)(e,t);this.directTelemetry?.error({...i,stage:o,requestCategory:n,paymentMethodCategory:s})}reportAccountSnapshotFailure(e,t){let o=(0,l.classifyTelemetryFailure)(e,"NETWORK_REQUEST_FAILED");if(t==="best_effort"&&o.errorCode==="REQUEST_TIMEOUT"){this.directTelemetry?.log({name:"operation.fallback",stage:"processing",requestCategory:"account_snapshot",statusClass:"timeout"});return}this.directTelemetry?.error({...o,stage:"processing",requestCategory:"account_snapshot",paymentMethodCategory:"unknown"})}telemetryTimestamp(){try{return this.telemetryHooks?.now?.()??this.directTelemetry?.now()??R()}catch{return R()}}beginDirectTelemetryCheckout(e){!this.directTelemetry||this.directTelemetryCheckoutId===e||(this.directTelemetryCheckoutId=e,this.directTelemetry.beginCheckout())}beginDirectTelemetryOperation(){this.directTelemetry&&(this.directTelemetryCheckoutId=void 0,this.directTelemetry.beginCheckout())}adoptDirectTelemetryCheckout(e){e&&(this.directTelemetryCheckoutId=e)}async getCheckoutSession(e,t){return this.fetchCheckoutSession(e,t)}async fetchCheckoutSession(e,t,o=!0,n){this.beginDirectTelemetryCheckout(e);let s=this.telemetryTimestamp(),i=s,a=0;this.directTelemetry?.log({name:"session.read.started",stage:"session_read",requestCategory:"session_read"});let c={[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION};t&&(c["x-checkout-session-token"]=t);try{let u=await ue(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}`,{headers:c,signal:n},le,y=>{this.telemetryHooks?.onRetry?.("session_read",y),this.directTelemetry?.log({name:"operation.retry",stage:"session_read",requestCategory:"session_read",attempt:y})},y=>{a=y,i=this.telemetryTimestamp()}),d=Math.max(0,this.telemetryTimestamp()-i);try{this.telemetryHooks?.onFirstByte?.(d,a)}catch{}let p=`${Math.floor(u.status/100)}xx`;if(this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_read",statusClass:p,attempt:a}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:d,durationMode:"machine",requestCategory:"session_read",statusClass:p,attempt:a}),!u.ok)throw await F(u,"Failed to get checkout session");let m=await u.json();return this.directTelemetry?.log({name:"session.request.completed",stage:"session_complete",requestCategory:"session_read",statusClass:p}),this.directTelemetry?.performance({stage:"session_complete",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"session_read",statusClass:p}),{...m,data:this.mergeCachedDisplayData(m.data)}}catch(u){throw o&&this.directTelemetry?.error({...(0,l.classifyTelemetryFailure)(u,"NETWORK_REQUEST_FAILED"),stage:"session_read",requestCategory:"session_read"}),u}}cacheSessionDisplayData(e,t,o){U(e,t,o)}clearSessionDisplayData(e){ae(e)}async getVaultCapture(e,t){let o=`${this.baseUrl}\0${e}\0${t??""}`,n=L.activeVaultCaptureRequests.get(o);if(n)return n;let s=this.requestVaultCapture(e,t);L.activeVaultCaptureRequests.set(o,s);try{return await s}finally{L.activeVaultCaptureRequests.get(o)===s&&L.activeVaultCaptureRequests.delete(o)}}async requestVaultCapture(e,t){let o=new AbortController,n=setTimeout(()=>o.abort(),It);this.beginDirectTelemetryCheckout(e);let s=this.telemetryTimestamp();this.directTelemetry?.log({name:"vault.capture.requested",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card"});let i={"Content-Type":"application/json"};t&&(i["x-checkout-session-token"]=t);try{let a=await ue(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/vault/capture`,{method:"POST",headers:i,signal:o.signal},le,u=>{this.telemetryHooks?.onRetry?.("vault_capture",u),this.directTelemetry?.log({name:"operation.retry",stage:"vault_request",requestCategory:"vault_capture",paymentMethodCategory:"card",attempt:u})});if(!a.ok)throw await F(a,"Failed to load the secure card form");let c=await a.json();return this.directTelemetry?.performance({stage:"vault_request",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"vault_capture",paymentMethodCategory:"card",statusClass:"2xx"}),this.toVaultBlock(c)}catch(a){let c=o.signal.aborted?new l.FloPayError("Timed out while loading the secure card form. Please try again.","api_error",{code:"vault_capture_timeout"}):a;throw this.reportDirectFailure(c,"VAULT_LOAD_FAILED","vault_request","vault_capture","card"),c}finally{clearTimeout(n)}}async getUnifiedCheckoutSession(e,t){let o=await this.getCheckoutSession(e,t);return this.normalizeCheckoutSessionResponse(o)}async getUnifiedCheckoutSessionForRecovery(e,t,o){let n=await this.fetchCheckoutSession(e,t,!1,o);return this.normalizeCheckoutSessionResponse(n)}normalizeCheckoutSessionResponse(e){let t=this.normalizeRawSession(e.data),o=e.vault;return o&&t.data.session&&(t.data.session.vault=this.toVaultBlock(o)),t}async processPayment(e,t,o){this.beginDirectTelemetryCheckout(t.sessionId);let n=t.paymentMethodCategory??"unknown";if(!t.nonce)throw this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:n}),new l.FloPayError("processPayment requires `nonce` \u2014 pass the value returned from session creation.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let s=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.processing.started",stage:"processing",requestCategory:"process_payment",paymentMethodCategory:n});let{nonce:i,paymentMethodCategory:a,...c}=t,u;try{u=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(t.sessionId)}/process`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":i},body:JSON.stringify(c)})}catch(d){if(xt(d))throw this.reportDirectFailure(d,"PAYMENT_PROCESSING_FAILED","processing","process_payment",n),d;u=await this.reconcileProcessPayment(t.sessionId,{...o,nonce:i,paymentMethodCategory:n})}if(!u.ok&&u.status!==202){let d=await Ot(u);return d?this.directTelemetry?.terminal({outcome:d,stage:"processing",requestCategory:"process_payment",statusClass:"4xx",paymentMethodCategory:n}):this.directTelemetry?.error({errorCode:"PAYMENT_PROCESSING_FAILED",stage:"processing",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(u.status),failureCategory:u.status>=500?"server_error":void 0,paymentMethodCategory:n}),u}try{let d=await this.resolveProcessResponse(u,t.sessionId,{...o,nonce:i,paymentMethodCategory:n});return this.directTelemetry?.log({name:"payment.processing.completed",stage:"processing",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(d.status),paymentMethodCategory:n}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"process_payment",statusClass:(0,l.telemetryStatusClass)(d.status),paymentMethodCategory:n}),d}catch(d){throw d instanceof l.FloPayError&&d.code==="checkout_processing_timeout"||this.reportDirectFailure(d,"PAYMENT_PROCESSING_FAILED","processing","process_payment",n),d}}async patchAccountSnapshot(e,t,o,n){this.beginDirectTelemetryCheckout(e);let s=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.state_transition",stage:"processing",requestCategory:"account_snapshot"});let i=n?.timeoutMs??Pt,a=new AbortController,c=()=>a.abort();n?.signal&&(n.signal.aborted?a.abort():n.signal.addEventListener("abort",c,{once:!0}));let u=setTimeout(()=>a.abort(),i);try{let d;try{d=await ue(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/account`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(o),signal:a.signal},le,p=>{this.telemetryHooks?.onRetry?.("account_snapshot",p),this.directTelemetry?.log({name:"operation.retry",stage:"processing",requestCategory:"account_snapshot",attempt:p})})}finally{clearTimeout(u),n?.signal?.removeEventListener("abort",c)}if(!d.ok)throw await F(d,"Failed to persist account snapshot");this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"account_snapshot",statusClass:"2xx"})}catch(d){throw this.reportAccountSnapshotFailure(d,n?.telemetryMode??"blocking"),d}}async createSessionIntent(e,t,o,n){if(!t)throw new l.FloPayError("createSessionIntent requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let s=o,i=s.paymentMethodType,a=typeof i=="string"&&i.trim().toLowerCase()==="card",c=typeof i=="string"&&i.length>0&&!a&&(typeof s.paymentMethodId=="string"||s.paymentMethodId===null),u=s.provider==="stripe"&&(s.paymentMethodCategory==="wallet"||s.paymentMethodCategory==="apm")&&(s.intentKind==="payment"||s.intentKind==="setup"),d=s.provider==="paypal"&&s.paymentMethodCategory==="wallet"&&s.paymentMethodId===null&&(s.paymentMethodType==="paypal"&&s.intentKind==="payment"||s.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&(s.intentKind==="payment"||s.intentKind==="setup"));if(!c||!u&&!d)throw new l.FloPayError("Only wallet, APM, and PayPal session intents are supported.","validation_error",{code:"InvalidSessionIntentRequest"});let p=s.authorizationAttemptId;if(p!==void 0&&!(0,l.isUuidV4)(p))throw new l.FloPayError("authorizationAttemptId must be a v4 UUID identifying one buyer authorization attempt.","validation_error",{code:"InvalidAuthorizationAttemptId",param:"authorizationAttemptId"});let m=(0,l.isUuidV4)(p)?p:(0,l.randomUuidV4)();this.beginDirectTelemetryCheckout(e);let y=this.telemetryTimestamp();this.directTelemetry?.log({name:"payment.intent.started",stage:"processing",requestCategory:"intent_create"});let h={"Content-Type":"application/json","x-checkout-session-token":t,[l.IDEMPOTENCY_KEY_HEADER]:n?.idempotencyKey||m},v=!1;try{let g=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents`,{method:"POST",headers:h,body:JSON.stringify({...o,authorizationAttemptId:m}),signal:n?.signal});if(!g.ok){v=!0;let M=await F(g,"Failed to create checkout intent"),ye=(0,l.classifyTelemetryFailure)(M,"PAYMENT_PROCESSING_FAILED");throw ze(M.statusCode)?this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"processing",requestCategory:"intent_create",statusClass:"4xx"}):this.directTelemetry?.error({...ye,stage:"processing",requestCategory:"intent_create"}),M}let _=(await g.json()).data;if(!_||typeof _!="object")throw new l.FloPayError("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});let f=_,V=f.paymentMethodType,pe=(f.paymentMethodCategory==="wallet"||f.paymentMethodCategory==="apm")&&typeof V=="string"&&V.trim().toLowerCase()!=="card"&&(typeof f.paymentMethodId=="string"||f.paymentMethodId===null)&&typeof f.providerObjectId=="string",Z=f.provider==="stripe"&&(f.intentKind==="payment"||f.intentKind==="setup")&&typeof f.clientSecret=="string",q=f.provider==="paypal"&&f.paymentMethodCategory==="wallet"&&f.paymentMethodId===null&&(f.paymentMethodType==="paypal"&&f.intentKind==="payment"&&(f.providerObjectType==="order"||f.providerObjectType==="subscription")||f.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&f.intentKind==="payment"&&f.providerObjectType==="order"||f.paymentMethodType===l.PAYPAL_VAULTED_PAYMENT_METHOD_TYPE&&f.intentKind==="setup"&&f.providerObjectType==="setup_token")&&f.clientSecret===null,x=f.provider===o.provider&&f.paymentMethodCategory===o.paymentMethodCategory&&f.paymentMethodType===o.paymentMethodType&&f.paymentMethodId===o.paymentMethodId&&f.intentKind===o.intentKind;if(!pe||!Z&&!q||!x)throw new l.FloPayError("Invalid checkout intent response.","api_error",{code:"InvalidSessionIntentResponse"});return this.directTelemetry?.log({name:"payment.intent.completed",stage:"processing",requestCategory:"intent_create",statusClass:(0,l.telemetryStatusClass)(g.status)}),this.directTelemetry?.performance({stage:"processing",durationMs:Math.max(0,this.telemetryTimestamp()-y),durationMode:"machine",requestCategory:"intent_create",statusClass:(0,l.telemetryStatusClass)(g.status)}),f}catch(g){throw v||this.reportDirectFailure(g,"PAYMENT_PROCESSING_FAILED","processing","intent_create"),g}}async reportSessionIntentDecline(e,t,o,n){if(!t)throw new l.FloPayError("reportSessionIntentDecline requires the checkout session nonce.","validation_error",{code:"MissingCheckoutSessionToken",param:"nonce"});let s=o,i=s.providerDeclineReason,a=s.paymentMethodType,c=s.providerIntentId,u=typeof i=="string"&&/^[a-z0-9][a-z0-9_.:-]{0,63}$/i.test(i)&&!/^(?:pm|pi|seti|tok|src|cus|sess|sk|pk)_/i.test(i),d=typeof a=="string"&&a.length>0&&a.trim().toLowerCase()!=="card"&&u,p=s.provider==="stripe"&&(s.paymentMethodCategory==="wallet"||s.paymentMethodCategory==="apm")&&(c===void 0||typeof c=="string"&&/^pi_[a-z0-9_]{1,252}$/i.test(c)),m=s.provider==="paypal"&&s.paymentMethodCategory==="wallet"&&s.paymentMethodType==="paypal"&&c===void 0;if(!d||!p&&!m)throw new l.FloPayError("Invalid non-card decline classification.","validation_error",{code:"InvalidSessionIntentDeclineRequest"});let y=m?{provider:"paypal",paymentMethodCategory:"wallet",paymentMethodType:"paypal",providerDeclineReason:i}:{provider:"stripe",paymentMethodCategory:s.paymentMethodCategory,paymentMethodType:s.paymentMethodType,providerDeclineReason:i,...typeof c=="string"?{providerIntentId:c}:{}},h=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/intents/decline`,{method:"POST",headers:{"Content-Type":"application/json","x-checkout-session-token":t},body:JSON.stringify(y),signal:n?.signal});if(!h.ok)throw await F(h,"Failed to report checkout decline")}async getPaymentsByEmail(e,t){this.beginDirectTelemetryOperation();let o=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved"});let n=t?.page??1,s=t?.limit??1,i=new URLSearchParams({email:e,page:String(n),limit:String(s),sortField:"createdAt",sortDirection:"DESC"});try{let a=await fetch(`${this.baseUrl}/v1/payments?${i.toString()}`,{method:"GET",signal:t?.signal,keepalive:!0});if(!a.ok)throw new l.FloPayError("Failed to fetch payments","api_error",{statusCode:a.status});let c=await a.json();return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-o),durationMode:"machine",requestCategory:"other",paymentMethodCategory:"saved",statusClass:"2xx"}),c}catch(a){throw this.reportDirectFailure(a,"RECOVERY_FAILED","recovery","other","saved"),a}}async createAndFetchSession(e){if((0,l.isDetachedSessionEligible)(e)){let s=e.account.email?.trim();if(s&&!(0,l.isValidEmail)(s))throw new l.FloPayError("Buyer email must be valid when supplied.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"});return(await this.createDetachedSession(e)).claimed}this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),o=P(e.timeoutMs??12e3),n={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});try{let s=await this.createAndFetchSessionRequest(e,o.signal,n);return this.adoptDirectTelemetryCheckout(s.data.session?.id),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:n.statusClass}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:n.statusClass,attempt:n.attempt}),s}catch(s){throw this.reportSessionCreateFailure(s,t,n),s}finally{o.clear()}}async createAndFetchSessionRequest(e,t,o){let n=e.products??(0,l.foldIntoProducts)(e.items,e.subscriptions);(0,l.assertCaptureMethodEligible)({captureMethod:e.captureMethod,products:n});let s=(0,l.resolveSessionCurrency)(e.currency,e.items,e.subscriptions,n);if(!s)throw new l.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});let i={clientId:e.clientId,checkoutVersion:l.SDK_VERSION,successUrl:e.successUrl,cancelUrl:e.cancelUrl,currency:s,checkoutMode:e.checkoutMode??"full",products:n.map(p=>(0,l.buildProductPayload)(p,s)),accountData:He(e.account),couponCodes:e.couponCodes??[]};e.captureMethod==="manual"&&(i.captureMethod=e.captureMethod),e.tokenizedData&&(i.tokenizedData=e.tokenizedData),Ke(i,e);let c=await(await this.postCheckoutSessionCreate(i,e,t,o)).json();if(c.data&&"gateways"in c.data){this.autoCacheDisplayData(c.data.uuid,e);let p=this.mergeCachedDisplayData(c.data),m=this.normalizeRawSession(p);return c.vault&&m.data.session&&(m.data.session.vault=this.toVaultBlock(c.vault)),{...m,autoProcessingError:c.autoProcessingError,autoProcessingAttempted:c.autoProcessingAttempted,autoProcessingPending:c.autoProcessingPending}}let u=c.data?.uuid;if(!u)throw new l.FloPayError("No session ID returned","api_error",{code:"InvalidCheckoutSessionResponse"});return this.autoCacheDisplayData(u,e),this.adoptDirectTelemetryCheckout(u),{...await this.getUnifiedCheckoutSession(u),autoProcessingError:c.autoProcessingError,autoProcessingAttempted:c.autoProcessingAttempted,autoProcessingPending:c.autoProcessingPending}}async postCheckoutSessionCreate(e,t,o,n){let s={"Content-Type":"application/json",[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION},i=(0,l.resolveIdempotencyKey)(t.idempotencyKey);i&&(s[l.IDEMPOTENCY_KEY_HEADER]=i),t.checkoutMode==="auto"&&(s[l.FLO_SDK_CAPABILITIES_HEADER]=l.ASYNC_AUTO_CHECKOUT_CAPABILITY);let a,c=!1,u=Ft(t),d=(m,y,h)=>{c||(c=!0,this.directTelemetry?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_create",statusClass:h,attempt:m}),this.directTelemetry?.performance({stage:"session_first_byte",durationMs:Math.max(0,this.telemetryTimestamp()-y),durationMode:"machine",requestCategory:"session_create",statusClass:h,attempt:m}))},p=m=>{try{this.telemetryHooks?.onRetry?.("session_create",m),this.directTelemetry?.log({name:"operation.retry",stage:"session_create",requestCategory:"session_create",attempt:m})}catch{}};for(let m=0;m<3;m++){n.attempt=m;let y=this.telemetryTimestamp();try{u?.onAttempt?.(m)}catch{}try{a=await fetch(`${this.baseUrl}/v1/checkouts/sessions?expand=true`,{method:"POST",headers:s,body:JSON.stringify(e),signal:o})}catch(g){if(n.statusClass=o.aborted||g instanceof Error&&g.name==="AbortError"?"timeout":"network_error",o.aborted||g instanceof Error&&g.name==="AbortError"||m>=2)throw g;let w=m+1;p(w),await B(m,o);continue}let h=(0,l.telemetryStatusClass)(a.status);if(n.statusClass=h,a.status===204)throw d(m,y,h),new l.FloPayError("Session auto-completed \u2014 payment method already on file","api_error",{code:"session_auto_completed"});if(a.ok){d(m,y,h);break}let v=await F(a,"Failed to create checkout session");if(v.code===l.IDEMPOTENCY_IN_PROGRESS_CODE&&m<2){p(m+1),await B(m,o);continue}throw d(m,y,h),v}if(!a)throw new TypeError("Checkout-session creation exhausted its retry budget.");return a}async createDetachedSession(e){this.beginDirectTelemetryOperation();let t=this.telemetryTimestamp(),o=P(e.timeoutMs??12e3),n={attempt:0,statusClass:"unknown"};this.directTelemetry?.log({name:"session.create.started",stage:"session_create",requestCategory:"session_create"});let s=e.products??(0,l.foldIntoProducts)(e.items,e.subscriptions);try{(0,l.assertCaptureMethodEligible)({captureMethod:e.captureMethod,products:s})}catch(g){throw o.clear(),this.reportSessionCreateFailure(g,t,n),g}let i=(0,l.resolveSessionCurrency)(e.currency,e.items,e.subscriptions,s);if(!i)throw o.clear(),this.directTelemetry?.terminal({outcome:"validation_rejected",stage:"session_create",requestCategory:"session_create"}),new l.FloPayError("currency is required: pass `currency` on the session, or include a `currency` on the first item/subscription/product.","validation_error",{code:"CurrencyRequired",param:"currency"});try{Be(e,i,s)}catch(g){throw o.clear(),this.reportSessionCreateFailure(g,t,n),g}let a,c;try{if(c=await(await this.postCheckoutSessionCreate(Ut(e,i),e,o.signal,n)).json(),!c.data||!("gateways"in c.data))throw new l.FloPayError("The billing API returned no session shell for a detached create. It must support `deferDataAttachment` (TeamFloPay/backend#1099).","api_error",{code:"InvalidCheckoutSessionResponse"});a=this.normalizeRawSession(this.mergeCachedDisplayData(c.data)),c.vault&&a.data.session&&(a.data.session.vault=this.toVaultBlock(c.vault))}catch(g){throw o.clear(),this.reportSessionCreateFailure(g,t,n),g}let u=a.data.session?.id??c.data.uuid??"",d=a.data.session?.clientSecret??c.data.nonce??"";if(!u||!d){o.clear();let g=new l.FloPayError("Checkout session shell was created without a session id or nonce.","api_error",{code:"InvalidCheckoutSessionResponse"});throw this.reportSessionCreateFailure(g,t,n),g}o.clear(),this.adoptDirectTelemetryCheckout(u),this.directTelemetry?.log({name:"session.shell.ready",stage:"session_shell",requestCategory:"session_create",statusClass:n.statusClass,paymentMethodCategory:"card"}),this.directTelemetry?.performance({stage:"session_shell",durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:"session_create",statusClass:n.statusClass,attempt:n.attempt,paymentMethodCategory:"card"});let p=!e.account.email?.trim(),m=P(e.timeoutMs??12e3),y=this.claimCheckoutSession(u,d,p?Lt(e,i,s):Be(e,i,s),{params:e,startedAt:t,deadline:m,createAttempt:n.attempt}),h=p?void 0:y,v=(g={})=>{if(h)return h;let w={...e,account:{...e.account,...g,email:g.email?.trim()||e.account.email?.trim()}};return(0,l.isValidEmail)(w.account.email)?(h=y.then(()=>{let _=this.telemetryTimestamp();return this.claimCheckoutSession(u,d,Nt(w.account),{params:w,startedAt:_,deadline:P(e.timeoutMs??12e3),createAttempt:0})}),h.catch(()=>{}),h):Promise.reject(new l.FloPayError("A valid buyer email is required before claiming checkout.","validation_error",{code:"BuyerEmailCollectionRequired",param:"account.email"}))};return y.catch(()=>{}),{shell:a,sessionId:u,nonce:d,claimed:y,claim:v}}async claimCheckoutSession(e,t,o,n){let s=n?.startedAt??this.telemetryTimestamp(),i=this.telemetryTimestamp(),a=n?.deadline??P(12e3),c=JSON.stringify(o),u="unknown",d=0;this.directTelemetry?.log({name:"session.claim.started",stage:"session_claim",requestCategory:"session_claim"});try{let p;for(d=0;d<3;d++){try{p=await fetch(`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/claim`,{method:"PATCH",headers:{"Content-Type":"application/json","x-checkout-session-token":t,[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION},body:c,signal:a.signal})}catch(h){let v=a.signal.aborted||h instanceof Error&&h.name==="AbortError";if(u=v?"timeout":"network_error",v||d>=2)throw h;try{this.telemetryHooks?.onRetry?.("session_claim",d+1),this.directTelemetry?.log({name:"operation.retry",stage:"session_claim",requestCategory:"session_claim",attempt:d+1})}catch{}await B(d,a.signal);continue}if(u=(0,l.telemetryStatusClass)(p.status),p.ok)break;throw await F(p,"Failed to attach checkout session data")}if(!p)throw new TypeError("Checkout-session claim exhausted its retry budget.");let m=await p.json();if(!m.data?.gateways)throw new l.FloPayError("The billing API returned no checkout session with gateways after claiming it.","api_error",{code:"InvalidCheckoutSessionResponse"});n?.params&&this.autoCacheDisplayData(m.data.uuid??e,n.params);let y=this.normalizeRawSession(this.mergeCachedDisplayData(m.data));return m.vault&&y.data.session&&(y.data.session.vault=this.toVaultBlock(m.vault)),this.directTelemetry?.log({name:"session.claim.completed",stage:"session_claim",requestCategory:"session_claim",statusClass:u}),this.directTelemetry?.performance({stage:"session_claim",durationMs:Math.max(0,this.telemetryTimestamp()-i),durationMode:"machine",requestCategory:"session_claim",statusClass:u,attempt:d}),this.directTelemetry?.log({name:"session.request.completed",stage:"session_create",requestCategory:"session_create",statusClass:u}),this.directTelemetry?.performance({stage:"session_create",durationMs:Math.max(0,this.telemetryTimestamp()-s),durationMode:"machine",requestCategory:"session_create",statusClass:u,attempt:n?.createAttempt??d}),y}catch(p){throw this.reportSessionCreateFailure(p,i,{attempt:d,statusClass:u},"session_claim"),p}finally{a.clear()}}reportSessionCreateFailure(e,t,o,n="session_create"){if(!(e instanceof l.FloPayError&&e.code==="session_auto_completed"))try{this.telemetryHooks?.onSessionCreateFailure?.(e)}catch{}let s=(0,l.classifyTelemetryFailure)(e,"CHECKOUT_SESSION_CREATE_FAILED");if(this.directTelemetry?.performance({stage:n,durationMs:Math.max(0,this.telemetryTimestamp()-t),durationMode:"machine",requestCategory:n==="session_claim"?"session_claim":"session_create",statusClass:s.statusClass,attempt:o.attempt}),e instanceof l.FloPayError&&e.type==="validation_error"||e instanceof l.FloPayError&&ze(e.statusCode)){this.directTelemetry?.terminal({outcome:"validation_rejected",stage:n,requestCategory:n==="session_claim"?"session_claim":"session_create",...e.type==="validation_error"?{}:{statusClass:"4xx"}});return}e instanceof l.FloPayError&&e.code==="session_auto_completed"||this.directTelemetry?.error({...s,stage:n,requestCategory:n==="session_claim"?"session_claim":"session_create"})}async waitForCheckoutSessionCompletion(e,t){this.beginDirectTelemetryCheckout(e);let o=this.telemetryTimestamp();this.directTelemetry?.log({name:"operation.recovery.started",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"});let n=t?.timeoutMs??Te,s=Date.now()+n,i=new AbortController,a=!1,c=setTimeout(()=>{a=!0,i.abort()},n),u=()=>i.abort(t?.signal?.reason);t?.signal?.aborted?u():t?.signal?.addEventListener("abort",u,{once:!0});let d=this.clampRetryAfterMs(t?.initialDelayMs??Le),p=0;try{if(t?.statusUrl){let m=await this.waitForCheckoutStatus(e,{initialDelayMs:d,timeoutMs:n,nonce:t.nonce,statusUrl:t.statusUrl,continueAfterActionRequired:t.continueAfterActionRequired,signal:i.signal});if(m)return await this.resolveCheckoutSessionStatus(e,m,t.nonce,i.signal)}for(;;){let m=s-Date.now();if(m<=0)throw E();if(d>0){try{p+=1,this.telemetryHooks?.onRetry?.("session_read",p),this.directTelemetry?.log({name:"operation.retry",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved",attempt:p})}catch{}if(await be(Math.min(d,m),i.signal),Date.now()>=s)throw E()}let y=await this.getUnifiedCheckoutSessionForRecovery(e,t?.nonce,i.signal),h=y.data.session?.status;if(h==="authorized"||h==="complete"||h==="expired")return this.directTelemetry?.log({name:"operation.recovery.completed",stage:"recovery",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),this.directTelemetry?.performance({stage:"recovery",durationMs:Math.max(0,this.telemetryTimestamp()-o),durationMode:"machine",requestCategory:"session_read",paymentMethodCategory:t?.paymentMethodCategory??"saved"}),y;if(Date.now()>=s)throw E();d=this.clampRetryAfterMs(Math.max(d*2,Ne))}}catch(m){let y=a?E():m;throw this.reportDirectFailure(y,"RECOVERY_FAILED","recovery","session_read",t?.paymentMethodCategory??"saved"),y}finally{clearTimeout(c),t?.signal?.removeEventListener("abort",u)}}async resolveCheckoutSessionStatus(e,t,o,n){let s=t.latestTransactionAttempt;if(s?.result==="DECLINE"){let c=s.code===l.STORED_PAYMENT_METHOD_UNSUPPORTED_CODE;throw new l.FloPayError(c?l.STORED_PAYMENT_METHOD_UNSUPPORTED_MESSAGE:"Payment was declined. Please choose another payment method.","api_error",{code:s.code??s.declineReason??"authorization_declined",statusCode:400})}if(s?.result==="ERROR"||t.status==="voided")throw new l.FloPayError("Payment could not be completed. Please try again.","api_error",{code:s?.code??"payment_processing_error",statusCode:500});let i=await this.getUnifiedCheckoutSessionForRecovery(e,o,n),a=i.data.session;return a&&s?.result==="SUCCESS"?{...i,data:{...i.data,session:{...a,status:"complete"}}}:a&&s?.result==="AUTHORIZED"?{...i,data:{...i.data,session:{...a,status:"authorized",paymentId:t.paymentId??void 0,authorizationExpiresAt:t.authorizationExpiresAt??void 0}}}:a&&t.status==="completed"?{...i,data:{...i.data,session:{...a,status:"complete"}}}:a&&t.status==="authorized"?{...i,data:{...i.data,session:{...a,status:"authorized",paymentId:t.paymentId??void 0,authorizationExpiresAt:t.authorizationExpiresAt??void 0}}}:a&&t.status==="expired"?{...i,data:{...i.data,session:{...a,status:"expired"}}}:s?.result!=="ACTION_REQUIRED"?i:s.gateway==="paypal"&&s.providerIntentId?{...i,autoProcessingError:{type:"paypal_direct_required",message:"PayPal authorization required",orderId:s.providerIntentId,checkoutMethod:"paypal"}}:s.nextActionRedirectUrl?{...i,autoProcessingError:{type:"3ds_required",message:"Additional authentication is required.",nextActionRedirectUrl:s.nextActionRedirectUrl}}:i}async waitForCheckoutStatus(e,t){let o=t.timeoutMs??Te,n=Date.now()+o,s=this.clampRetryAfterMs(t.initialDelayMs);for(;;){let i=n-Date.now();if(i<=0||s>0&&(await be(Math.min(s,i),t.signal),Date.now()>=n))throw E();let a=n-Date.now();if(a<=0)throw E();let c=new AbortController,u,d=t.signal?new Promise((w,_)=>{u=_}):null,p=()=>{c.abort(t.signal?.reason),u?.(t.signal?.reason??Object.assign(new Error("The operation was aborted."),{name:"AbortError"}))};t.signal?.aborted?p():t.signal?.addEventListener("abort",p,{once:!0});let m,y=t.signal?null:new Promise((w,_)=>{m=setTimeout(()=>{_(E()),c.abort()},a)}),h;try{let w=this.fetchCheckoutStatus(e,t.nonce,t.statusUrl,c.signal);h=await Promise.race([w,y,d].filter(_=>_!==null))}finally{m!==void 0&&clearTimeout(m),t.signal?.removeEventListener("abort",p)}if(!h)return null;let v=h.latestTransactionAttempt?.result,g=t.continueAfterActionRequired===!0&&v==="ACTION_REQUIRED";if(h.status==="completed"||h.status==="authorized"||h.status==="expired"||h.status==="voided"||v!==void 0&&v!=="PENDING"&&!g)return h;s=this.clampRetryAfterMs(Math.max(s*2,Ne))}}async fetchCheckoutStatus(e,t,o,n){let s=`${this.baseUrl}/v1/checkouts/sessions/${encodeURIComponent(e)}/status`,i=s;if(o)try{let d=new URL(o,`${this.baseUrl}/`),p=new URL(s);d.origin===p.origin&&(i=d.toString())}catch{}let a={[l.FLO_SDK_VERSION_HEADER]:l.SDK_VERSION};t&&(a["x-checkout-session-token"]=t);let c=await ue(i,{headers:a,signal:n});if(c.status===404||c.status===405)return null;if(!c.ok)throw await F(c,"Failed to get checkout session status");let u=await c.json();return je(u.data)&&"latestTransactionAttempt"in u.data?u.data:null}normalizeRawSession(e){let t=e.gateways??{},o=[],n={session:this.toCheckoutSession(e)},s=t.stripe;if(s?.publishableKey){o.push("stripe");let c=[e.stripeClientSecret,s.stripeClientSecret].find(u=>typeof u=="string"&&u.length>0);n.stripe={clientSecret:c??"",publishableKey:s.publishableKey??void 0,paypalPublishableKey:s.paypalPublishableKey??void 0,environment:s.environment,enabledPaymentMethods:Array.isArray(s.enabledPaymentMethods)?s.enabledPaymentMethods.filter(u=>typeof u=="string"):void 0}}let i=t.paypal;return i?.publishableKey&&(o.push("paypal"),n.paypal={publishableKey:i.publishableKey,environment:i.environment,providerObjectType:i.providerObjectType,approvalPresentation:i.approvalPresentation}),{providers:o,mode:"tokenize",...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},data:n,raw:{data:e}}}toCheckoutSession(e){let t=e.products??[],o=typeof e.totalAmount=="number"&&Number.isFinite(e.totalAmount),n=t.reduce((u,d)=>u+(d.overrideAmount??d.totalAmount??0),0),s=o?e.totalAmount:n,i=Math.round(s*100),a=e.currency??t[0]?.currency??"USD",c="payment";return e.checkoutMode==="setup"?c="setup":t.some(u=>u.type==="subscription")&&(c="subscription"),{id:e.uuid,clientSecret:e.nonce,mode:c,status:this.toCheckoutSessionStatus(e.status),amount:i,currency:a,captureMethod:e.captureMethod,paymentId:e.paymentId,authorizationExpiresAt:e.authorizationExpiresAt,failureOutcome:(0,l.normalizeCheckoutFailureOutcome)(e.outcome)??(0,l.normalizeCheckoutFailureOutcome)(e.failureReason)??(e.status==="expired"&&e.captureMethod==="manual"?"authorization_expired":void 0),customer:{id:e.accountData.userId??void 0,email:e.accountData.email??void 0,firstName:e.accountData.firstName??void 0,lastName:e.accountData.lastName??void 0,country:e.accountData.country??void 0,city:e.accountData.city??void 0,state:e.accountData.state??void 0,zip:e.accountData.zip??void 0,gender:e.accountData.gender??void 0,line1:e.accountData.addressLine1??void 0,line2:e.accountData.addressLine2??void 0},...e.checkoutMetadata===void 0?{}:{checkoutMetadata:e.checkoutMetadata},metadata:{},checkoutMode:e.checkoutMode,buyerIdentified:e.buyerIdentified,providerPaymentMethodId:typeof e.providerPaymentMethodId=="string"?e.providerPaymentMethodId:null,products:t.map(u=>({...u,totalAmount:typeof u.totalAmount=="number"?u.totalAmount:void 0,overrideAmount:typeof u.overrideAmount=="number"?u.overrideAmount:null,currency:typeof u.currency=="string"?u.currency:void 0,metadata:u.metadata??null})),successUrl:e.successUrl,cancelUrl:e.cancelUrl,coupons:e.coupons,subtotalAmount:e.subtotalAmount,discountAmount:e.discountAmount,totalAmount:e.totalAmount,createdAt:e.createdAt,gateways:e.gateways,accountData:e.accountData,tagsData:e.tagsData}}toVaultBlock(e){return{html:typeof e.html=="string"?e.html:void 0,url:typeof e.url=="string"?e.url:void 0,messageToken:typeof e.messageToken=="string"?e.messageToken:void 0,expectedOrigin:typeof e.expectedOrigin=="string"?e.expectedOrigin:void 0}}toCheckoutSessionStatus(e){return e==="completed"?"complete":e==="authorized"?"authorized":e==="expired"?"expired":"open"}async resolveProcessResponse(e,t,o){if(e.status!==202)return e;let n=await e.json().catch(()=>null),s=this.toCheckoutProcessingPending(n,e,t);if(s.statusUrl){let a=await this.waitForCheckoutStatus(s.sessionId,{initialDelayMs:s.retryAfterMs,timeoutMs:o?.pollTimeoutMs,nonce:o?.nonce,statusUrl:s.statusUrl});if(a)return this.toProcessResponseFromStatus(a,t,o?.nonce)}let i=await this.waitForCheckoutSessionCompletion(s.sessionId,{initialDelayMs:s.retryAfterMs,timeoutMs:o?.pollTimeoutMs,nonce:o?.nonce,paymentMethodCategory:o?.paymentMethodCategory});return this.toProcessResponseFromSession(i,t)}async toProcessResponseFromStatus(e,t,o){let n=e.latestTransactionAttempt?.result;if(e.status==="completed"||n==="SUCCESS")return new Response(null,{status:204,statusText:"No Content"});if(e.status==="authorized"||n==="AUTHORIZED")return new Response(JSON.stringify({status:"authorized",paymentId:e.paymentId??void 0,sessionId:e.uuid||t,authorizationExpiresAt:e.authorizationExpiresAt??void 0}),{status:200,headers:{"Content-Type":"application/json"}});if(e.status==="expired"){let s=await this.resolveCheckoutSessionStatus(t,e,o);return this.toProcessResponseFromSession(s,t)}if(n==="DECLINE"){let s=e.latestTransactionAttempt,i=s?.code===l.STORED_PAYMENT_METHOD_UNSUPPORTED_CODE;return new Response(JSON.stringify({type:s?.declineReason??"authorization_declined",message:i?l.STORED_PAYMENT_METHOD_UNSUPPORTED_MESSAGE:"Payment was declined. Please choose another payment method.",...s?.code?{code:s.code}:{}}),{status:400,headers:{"Content-Type":"application/json"}})}if(n==="ACTION_REQUIRED"&&e.latestTransactionAttempt?.gateway==="paypal"&&e.latestTransactionAttempt.providerIntentId)return new Response(JSON.stringify({type:"paypal_direct_required",message:"PayPal authorization required",orderId:e.latestTransactionAttempt.providerIntentId}),{status:400,headers:{"Content-Type":"application/json"}});if(n==="ACTION_REQUIRED"&&e.latestTransactionAttempt?.nextActionRedirectUrl)return new Response(JSON.stringify({type:"3ds_required",message:"Additional authentication is required.",nextActionRedirectUrl:e.latestTransactionAttempt.nextActionRedirectUrl}),{status:400,headers:{"Content-Type":"application/json"}});if(n==="ERROR"||e.status==="voided")return new Response(JSON.stringify({type:"unknown",code:e.latestTransactionAttempt?.code??"payment_processing_error",message:"Payment could not be completed. Please try again."}),{status:500,headers:{"Content-Type":"application/json"}});throw E()}async reconcileProcessPayment(e,t){let o=t?.pollTimeoutMs??Te,n=Date.now()+o,s=null;try{s=await this.waitForCheckoutStatus(e,{initialDelayMs:0,timeoutMs:o,nonce:t?.nonce})}catch(c){if(this.reportDirectFailure(c,"RECOVERY_FAILED","recovery","session_read",t?.paymentMethodCategory??"saved"),c instanceof l.FloPayError&&c.code==="checkout_processing_timeout")throw c}if(s)return this.toProcessResponseFromStatus(s,e,t?.nonce);let i=n-Date.now();if(i<=0)throw E();let a=await this.waitForCheckoutSessionCompletion(e,{initialDelayMs:0,timeoutMs:i,nonce:t?.nonce,paymentMethodCategory:t?.paymentMethodCategory});return this.toProcessResponseFromSession(a,e)}toProcessResponseFromSession(e,t){if(e.data.session?.status==="complete")return new Response(null,{status:204,statusText:"No Content"});if(e.data.session?.status==="authorized"){let o=e.data.session;return new Response(JSON.stringify({status:"authorized",paymentId:o.paymentId,sessionId:o.id||t,authorizationExpiresAt:o.authorizationExpiresAt}),{status:200,headers:{"Content-Type":"application/json"}})}if(e.data.session?.status==="expired"){let o=e.data.session.failureOutcome==="authorization_expired"||e.data.session.captureMethod==="manual";throw new l.FloPayError(o?"Authorization has expired.":"Checkout session has expired.","api_error",{code:o?"authorization_expired":"checkout_session_expired"})}throw E()}toCheckoutProcessingPending(e,t,o){let n=t.headers.get("Retry-After"),s=n===null||n.trim()===""?void 0:Number(n),i=s!==void 0&&Number.isFinite(s)?s*1e3:void 0;return{type:"checkout_processing",sessionId:K(e,"sessionId")??o,retryAfterMs:this.clampRetryAfterMs(Dt(e,"retryAfterMs")??i??Le),statusUrl:K(e,"statusUrl"),sessionUrl:K(e,"sessionUrl")}}clampRetryAfterMs(e){return Math.max(0,Math.min(e,Mt))}autoCacheDisplayData(e,t){if(!e)return;let o=t.products??(0,l.foldIntoProducts)(t.items,t.subscriptions);if(o.length===0&&!t.currency)return;let n=t.products!==void 0,s=(0,l.resolveSessionCurrency)(t.currency,n?void 0:t.items,n?void 0:t.subscriptions,o);U(e,{currency:s??void 0,products:o.map(i=>({code:i.code??i.providerItemId??i.providerPlanId,type:i.type,name:i.name??i.itemName??i.providerItemName??i.subscriptionName??i.providerPlanName??null,totalAmount:i.totalAmount,overrideAmount:i.overrideAmount,currency:i.currency??s??void 0}))})}mergeCachedDisplayData(e){let t=ie(e.uuid),o=new Map,n=i=>i?`code:${i}`:void 0;for(let i of t?.products??[]){let a=n(i.code);a&&o.set(a,i)}let s=(e.products??[]).map(i=>{let a=n(i.code),c=a?o.get(a):void 0;return{...i,name:i.name??c?.name??null,totalAmount:i.totalAmount??c?.totalAmount,overrideAmount:i.overrideAmount??c?.overrideAmount,currency:i.currency??c?.currency}});return{...e,currency:e.currency??t?.currency,products:s}}};L.activeVaultCaptureRequests=new Map;var J=L;function $e(r,e){let t=J;return new t(r,e)}var b=require("@flopay/shared");var _e="flopay-vault",Vt=3e5,zt=3e4,Bt=Vt+zt,jt="Card authentication timed out.",Ge={ready:["vault.widget.ready","vault_ready"],submitting:["vault.submission.started","vault_submit"],blocked:["operation.state_transition","vault_submit"],action_required:["vault.action.required","three_ds_handoff"]};function Ht(r){return r.class==="lifecycle"?r.name:r.class==="technical_error"?r.code:r.class==="expected_outcome"?r.outcome:"sdk.performance"}function Q(r){let e={class:r.class,stage:r.stage};"code"in r&&(e.code=r.code),"provider"in r&&r.provider&&(e.provider=r.provider),"paymentMethodCategory"in r&&r.paymentMethodCategory&&(e.paymentMethodCategory=r.paymentMethodCategory),"outcome"in r&&(e.outcome=r.outcome),"durationMs"in r&&r.durationMs!==void 0&&(e.durationMs=r.durationMs),"durationMode"in r&&r.durationMode&&(e.durationMode=r.durationMode);try{globalThis.Sentry?.addBreadcrumb?.({category:"flopay.telemetry",level:r.class==="technical_error"?"error":"info",message:Ht(r),data:e})}catch{}}function de(r,e){return(0,b.buildTelemetryLogEvent)({eventId:"11111111-1111-4111-8111-111111111111",name:r,stage:e,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}function Ye(r){return r?{errorCode:"VAULT_SUBMIT_FAILED",stage:"vault_submit",failureCategory:"provider_runtime"}:{errorCode:"VAULT_LOAD_FAILED",stage:"vault_mount",failureCategory:"provider_runtime"}}function We(r,e,t="checkout"){return t==="card_setup"?r.type==="decline"?"card_setup_declined":"card_setup_succeeded":r.type==="decline"?"payment_declined":r.outcome==="authorized"||e==="manual"?"payment_authorized":"payment_succeeded"}function Kt(r,e,t,o="checkout"){let{type:n}=r;if(n==="complete"||n==="decline")return(0,b.buildTelemetryTerminalEvent)({eventId:"22222222-2222-4222-8222-222222222222",outcome:We(r,t,o),sequence:0,provider:"pcivault",paymentMethodCategory:"card"});if(n==="error"){let a=Ye(e);return(0,b.buildTelemetryErrorEvent)({eventId:"33333333-3333-4333-8333-333333333333",...a,sequence:0,provider:"pcivault",paymentMethodCategory:"card"})}let[s,i]=Ge[n];return de(s,i)}function $t(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===_e&&(e.type==="ready"||e.type==="submitting"||e.type==="blocked"||e.type==="complete"||e.type==="decline"||e.type==="error"||e.type==="action_required")}function Gt(r){if(typeof r!="object"||r===null)return;let e=r,t=e.status;if(!(typeof e.id!="string"||e.id.trim()===""||typeof e.brand!="string"||e.brand.trim()===""||typeof e.lastFour!="string"||!/^\d{4}$/.test(e.lastFour)||typeof e.expiryMonth!="number"||!Number.isInteger(e.expiryMonth)||e.expiryMonth<1||e.expiryMonth>12||typeof e.expiryYear!="number"||!Number.isInteger(e.expiryYear)||e.expiryYear<1970||e.expiryYear>9999||t!=="pending"&&t!=="active"&&t!=="deleted"))return{id:e.id,brand:e.brand,lastFour:e.lastFour,expiryMonth:e.expiryMonth,expiryYear:e.expiryYear,status:t}}function Yt(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===_e&&e.type==="validation"&&Array.isArray(e.messages)}function Wt(r){if(typeof r!="object"||r===null)return!1;let e=r;return e.source===_e&&e.type==="resize"&&typeof e.height=="number"&&Number.isFinite(e.height)}var N=class{constructor(e={},t){this.provider="pcivault";this.container=null;this.messageHandler=null;this.actionOverlay=null;this.threeDsReturnHandler=null;this.actionOverlayPreviousFocus=null;this.actionOverlayTimer=null;this.messageToken=null;this.expectedOrigin=null;this.theme=void 0;this.submitGateBlocked=!1;this.cardFieldOrder=null;this.cardAutoFocus=!0;this.submitLabel=void 0;this.mountStartedAt=0;this.vaultReadyReported=!1;this.submissionStarted=!1;this.submissionStartedAt=null;this.listeners=new Map;this.config=e,this.ownsTelemetryReporter=!t&&e.telemetry!==!1,this.telemetryReporter=t?.reporter??(this.ownsTelemetryReporter?new S({billingApiUrl:(0,b.resolveBillingApiUrl)(e.billingApiUrl),sdkVersion:b.SDK_VERSION}):void 0)}async mount(e,t){this.ownsTelemetryReporter&&!this.telemetryReporter&&(this.telemetryReporter=new S({billingApiUrl:(0,b.resolveBillingApiUrl)(this.config.billingApiUrl),sdkVersion:b.SDK_VERSION}));let o=this.telemetryReporter;if(this.config.operation==="card_setup"&&o&&this.setupTelemetryReporter!==o){this.setupTelemetryReporter=o;try{o.beginCheckout({checkoutMode:"setup"})}catch{}}if(this.mountStartedAt=this.telemetryReporter?.now?.()??R(),this.vaultReadyReported=!1,this.submissionStarted=!1,this.submissionStartedAt=null,typeof window>"u"||typeof document>"u")throw this.reportVaultLoadFailure(),new b.FloPayError("The vault card form is only available in the browser.","api_error",{code:"card_capture_no_window"});if(!t?.html?.trim())throw this.reportVaultLoadFailure(),new b.FloPayError("No vault capture widget HTML was provided to mount the secure card form.","api_error",{code:"card_capture_no_widget_html"});this.container=e,this.messageToken=t.messageToken??null,this.expectedOrigin=t.expectedOrigin??this.config.expectedOrigin??null,this.theme=t.theme,t.submitLabel!==void 0&&(this.submitLabel=t.submitLabel);try{this.attachMessageListener(),this.injectWidget(e,t.html)}catch(n){throw this.reportVaultLoadFailure(),n}this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel(),Q(de("vault.widget.mounted","vault_mount")),this.telemetryReporter?.log({name:"vault.widget.mounted",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"}),this.telemetryReporter?.performance?.({stage:"vault_mount",durationMs:Math.max(0,(this.telemetryReporter.now?.()??R())-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),this.emit("ready",{sessionId:this.config.sessionId})}reportVaultLoadFailure(){this.telemetryReporter?.error({errorCode:"VAULT_LOAD_FAILED",failureCategory:"provider_runtime",stage:"vault_mount",provider:"pcivault",paymentMethodCategory:"card"})}on(e,t){let o=this.listeners.get(e);return o||(o=new Set,this.listeners.set(e,o)),o.add(t),()=>{this.listeners.get(e)?.delete(t)}}unmount(){this.hideActionRequiredOverlay(),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.container&&(this.container.replaceChildren(),this.container=null),this.messageToken=null,this.expectedOrigin=null,this.ownsTelemetryReporter&&(this.telemetryReporter?.destroy(),this.telemetryReporter=void 0)}injectWidget(e,t){e.innerHTML=t;let o=Array.from(e.querySelectorAll("script"));for(let n of o){let s=document.createElement("script");for(let i of Array.from(n.attributes))s.setAttribute(i.name,i.value);s.text=n.text,n.replaceWith(s)}}attachMessageListener(){if(this.messageHandler)return;let e=t=>{if(this.expectedOrigin&&t.origin!==this.expectedOrigin)return;let o=t.data;if(Wt(o)){if(this.messageToken&&o.messageToken!==this.messageToken)return;this.applyHeight(o.height);return}if(Yt(o)){if(this.messageToken&&o.messageToken!==this.messageToken)return;let c=o.messages.filter(u=>typeof u=="string"&&u.trim()).join(" ");this.emit("validation",{sessionId:this.config.sessionId,message:c||void 0});return}if(!$t(o)||this.messageToken&&o.messageToken!==this.messageToken)return;let n=this.config.sessionId,s=typeof o.sessionId=="string"?o.sessionId:void 0;if(n&&s&&s!==n||(o.type==="complete"||o.type==="decline")&&n&&s!==n)return;let i=Gt(o.paymentMethod),a={...o.sessionId??this.config.sessionId?{sessionId:o.sessionId??this.config.sessionId}:{},...o.outcome?{outcome:o.outcome}:{},...o.paymentId?{paymentId:o.paymentId}:{},...o.authorizationExpiresAt?{authorizationExpiresAt:o.authorizationExpiresAt}:{},...o.failureOutcome?{failureOutcome:o.failureOutcome}:{},...o.intentId?{intentId:o.intentId}:{},...o.declineReason?{declineReason:o.declineReason}:{},...o.message?{message:o.message}:{},...i?{paymentMethod:i}:{}};o.type==="submitting"&&(this.submissionStarted=!0,this.submissionStartedAt=this.telemetryReporter?.now?.()??R()),Q(Kt(o,this.submissionStarted,this.config.captureMethod,this.config.operation)),this.reportOutcome(o),o.type==="ready"&&(this.postTheme(),this.postSubmitGate(),this.postCardFieldOrder(),this.postSubmitLabel()),o.type==="action_required"&&o.nextActionRedirectUrl&&this.showActionRequiredOverlay(o.nextActionRedirectUrl),(o.type==="complete"||o.type==="decline"||o.type==="error"||o.type==="submitting")&&this.hideActionRequiredOverlay(),o.type!=="action_required"&&this.emit(o.type,a)};this.messageHandler=e,window.addEventListener("message",e)}reportOutcome(e){let t=this.telemetryReporter;if(!t)return;let{type:o}=e;if(o==="ready"&&!this.vaultReadyReported&&(this.vaultReadyReported=!0,t.performance({stage:"vault_ready",durationMs:Math.max(0,t.now()-this.mountStartedAt),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card",requestCategory:"provider_sdk"})),o==="complete"||o==="decline"){t.log({name:"vault.terminal",stage:"completion",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:We(e,this.config.captureMethod,this.config.operation),provider:"pcivault",paymentMethodCategory:"card"});return}if(o==="error"){let i=Ye(this.submissionStarted);t.log({name:"vault.terminal",stage:i.stage,provider:"pcivault",paymentMethodCategory:"card"}),t.error({...i,provider:"pcivault",paymentMethodCategory:"card"});return}if(o==="action_required"){t.log({name:"vault.action.required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"}),t.log({name:"vault.three_ds.handoff",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});let i=this.submissionStartedAt;this.submissionStartedAt=null,i!==null&&t.performance({stage:"three_ds_handoff",durationMs:Math.max(0,t.now()-i),durationMode:"machine",provider:"pcivault",paymentMethodCategory:"card"}),t.terminal({outcome:"action_required",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"});return}let[n,s]=Ge[o];t.log({name:n,stage:s,provider:"pcivault",paymentMethodCategory:"card"})}applyTheme(e){this.theme=e,this.postTheme()}postTheme(){this.theme!==void 0&&this.postToHostedWindow({source:"flopay-vault-host",type:"theme",theme:this.theme},this.directiveTargetOrigin())}setSubmitGate(e){this.submitGateBlocked=e,this.postSubmitGate()}postSubmitGate(){this.postToHostedWindow({source:"flopay-vault-host",type:"gate",blocked:this.submitGateBlocked},this.directiveTargetOrigin())}setCardFieldOrder(e,t){this.cardFieldOrder=e,this.cardAutoFocus=t,this.postCardFieldOrder()}postCardFieldOrder(){this.postToHostedWindow({source:"flopay-vault-host",type:"fieldOrder",order:this.cardFieldOrder,autoFocus:this.cardAutoFocus},this.directiveTargetOrigin())}setSubmitLabel(e){this.submitLabel=e,this.postSubmitLabel()}postSubmitLabel(){let e=this.submitLabel,t=this.config.sessionId,{messageToken:o,expectedOrigin:n}=this;e===void 0||!t||!o||!n||this.postToHostedWindow({source:"flopay-vault-host",type:"submitLabel",sessionId:t,messageToken:o,label:e},n)}hostedWindow(){return this.container?.querySelector("iframe")?.contentWindow??null}postToHostedWindow(e,t){let o=this.hostedWindow();if(o)try{o.postMessage(e,t)}catch{}}directiveTargetOrigin(){return this.expectedOrigin??"*"}emit(e,t){for(let o of this.listeners.get(e)??[])o(t)}showActionRequiredOverlay(e){if(typeof document>"u")return;if(this.actionOverlay){let i=this.actionOverlay.querySelector("iframe");i instanceof HTMLIFrameElement&&i.src!==e&&(i.src=e),this.armActionRequiredTimeout();return}this.actionOverlayPreviousFocus=document.activeElement instanceof HTMLElement?document.activeElement:null;let t=document.createElement("div");t.setAttribute("data-flopay-action-required","1"),t.setAttribute("role","dialog"),t.setAttribute("aria-modal","true"),t.setAttribute("aria-label","Card authentication"),t.style.cssText=["position:fixed","inset:0","z-index:2147483647","background:rgba(15,23,42,0.6)","display:flex","align-items:center","justify-content:center","padding:16px"].join(";");let o=document.createElement("iframe");o.setAttribute("title","Card authentication"),o.setAttribute("allow","payment"),o.tabIndex=0,o.style.cssText=["width:min(100%,460px)","height:min(100%,640px)","border:0","border-radius:12px","background:#fff","box-shadow:0 12px 30px rgba(0,0,0,0.35)"].join(";"),o.src=e,t.appendChild(o);let n=document.createElement("button");n.type="button",n.setAttribute("aria-label","Close card authentication"),n.textContent="\xD7",n.style.cssText=["position:fixed","top:20px","right:20px","width:40px","height:40px","border:0","border-radius:9999px","background:#fff","color:#0f172a","font-size:28px","line-height:40px","cursor:pointer","box-shadow:0 4px 14px rgba(0,0,0,0.25)"].join(";"),n.addEventListener("click",()=>this.abandonActionRequiredOverlay()),t.appendChild(n),t.addEventListener("click",i=>{i.target===t&&this.abandonActionRequiredOverlay()});let s=i=>{if(i.source!==o.contentWindow)return;let a=i.data;!a||typeof a!="object"||a.source!=="flopay-vault-3ds-return"||(Q(de("vault.three_ds.returned","three_ds_return")),this.telemetryReporter?.log({name:"vault.three_ds.returned",stage:"three_ds_return",provider:"pcivault",paymentMethodCategory:"card"}),this.hideActionRequiredOverlay())};window.addEventListener("message",s),this.threeDsReturnHandler=s,document.body.appendChild(t),this.actionOverlay=t,o.focus(),this.armActionRequiredTimeout(),Q(de("vault.three_ds.handoff","three_ds_handoff"))}armActionRequiredTimeout(){this.actionOverlayTimer&&clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=setTimeout(()=>{this.actionOverlayTimer=null,this.actionOverlay&&this.timeOutActionRequiredOverlay()},Bt)}reportChallengeAbandoned(){Q((0,b.buildTelemetryTerminalEvent)({eventId:"77777777-7777-4777-8777-777777777777",outcome:"customer_abandoned",stage:"three_ds_handoff",sequence:0,provider:"pcivault",paymentMethodCategory:"card"})),this.telemetryReporter?.terminal({outcome:"customer_abandoned",stage:"three_ds_handoff",provider:"pcivault",paymentMethodCategory:"card"})}timeOutActionRequiredOverlay(){this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("error",{...this.config.sessionId?{sessionId:this.config.sessionId}:{},message:jt})}abandonActionRequiredOverlay(){this.actionOverlay&&(this.reportChallengeAbandoned(),this.hideActionRequiredOverlay(),this.emit("challenge_dismissed",{...this.config.sessionId?{sessionId:this.config.sessionId}:{}}))}hideActionRequiredOverlay(){if(this.actionOverlayTimer&&(clearTimeout(this.actionOverlayTimer),this.actionOverlayTimer=null),this.threeDsReturnHandler&&(window.removeEventListener("message",this.threeDsReturnHandler),this.threeDsReturnHandler=null),!this.actionOverlay)return;this.actionOverlay.parentNode?.removeChild(this.actionOverlay),this.actionOverlay=null;let e=this.actionOverlayPreviousFocus;this.actionOverlayPreviousFocus=null,e?.isConnected&&e.focus()}applyHeight(e){let t=this.container?.querySelector("iframe");if(!t)return;let o=Math.max(0,Math.min(Math.ceil(e),2e3));t.style.height=`${o}px`}};function Je(r,e){let t=N;return new t(r,{reporter:e})}var Qe=Symbol.for("@flopay/js.telemetry.bridge.v1");function Xe(r,e,t){let o=()=>e?.now()??t();Object.defineProperty(r,Qe,{configurable:!1,enumerable:!1,writable:!1,value:{error:s=>e?.error(s),log:s=>e?.log(s),performance:s=>e?.performance(s),terminal:s=>e?.terminal(s),now:o,elapsed:s=>Math.max(0,o()-s),setCheckoutContext:s=>e?.setCheckoutContext(s),beginCheckout:(s={})=>e?.beginCheckout(s)??o(),disable:()=>e?.disable(),subscribe:s=>e?.subscribe(s)??(()=>{}),flush:()=>e?.flush()??Promise.resolve()}})}function Ze(r){return r[Qe]}var X=class{now(){return this.telemetryReporter?.now?.()??R()}constructor(e,t,o){this.provider=e,this.config=t,this.telemetryReporter=o??new S({billingApiUrl:(0,A.resolveBillingApiUrl)(t.billingApiUrl),sdkVersion:A.SDK_VERSION,enabled:t.telemetry!==!1}),Xe(this,this.telemetryReporter,R)}cardCapture(e){return this.telemetryReporter?.log({name:"vault.capture.requested",stage:"vault_request",provider:"pcivault",paymentMethodCategory:"card"}),this.telemetryReporter?Je({sessionId:e?.sessionId,captureMethod:e?.captureMethod},this.telemetryReporter):new N({sessionId:e?.sessionId,captureMethod:e?.captureMethod,telemetry:!1})}async retrieveSession(e,t){if(!e)throw new A.FloPayError("sessionId is required to retrieve a session.","validation_error",{param:"sessionId"});let o=await this.retrieveUnifiedSession(e,t);if(!o.data.session)throw new A.FloPayError("Session not found","api_error");return o.data.session}async retrieveUnifiedSession(e,t){if(!e)throw new A.FloPayError("sessionId is required.","validation_error",{param:"sessionId"});let o=(0,A.resolveBillingApiUrl)(t??this.config.billingApiUrl),n=this.now();this.telemetryReporter?.log({name:"session.read.started",stage:"session_read",requestCategory:"session_read"});let s,i,a=u=>{if(s===void 0)return;let d=s,p=i;s=void 0,i=void 0,this.telemetryReporter?.log({name:"session.request.first_byte",stage:"session_first_byte",requestCategory:"session_read",statusClass:u,attempt:p}),this.telemetryReporter?.performance({stage:"session_first_byte",durationMs:d,durationMode:"machine",requestCategory:"session_read",statusClass:u,attempt:p})},c=$e(o,{now:()=>this.telemetryReporter?.now()??R(),onFirstByte:(u,d)=>{s=u,i=d},onRetry:(u,d)=>{this.telemetryReporter?.log({name:"operation.retry",stage:u==="session_read"?"session_read":"processing",requestCategory:u,attempt:d})}});try{let u=await c.getUnifiedCheckoutSession(e);return a("2xx"),this.telemetryReporter?.log({name:"session.request.completed",stage:"session_complete",requestCategory:"session_read",statusClass:"2xx"}),this.telemetryReporter?.log({name:"checkout.data.ready",stage:"checkout_data_ready"}),this.telemetryReporter?.performance({stage:"session_complete",durationMs:this.now()-n,durationMode:"machine",requestCategory:"session_read",statusClass:"2xx"}),u}catch(u){let d=(0,A.classifyTelemetryFailure)(u,u instanceof A.FloPayError&&u.code==="checkout_processing_timeout"?"REQUEST_TIMEOUT":"NETWORK_REQUEST_FAILED");throw a(d.statusClass),this.telemetryReporter?.error({...d,stage:"session_read",provider:"flo",paymentMethodCategory:"unknown"}),this.telemetryReporter?.performance({stage:"session_complete",durationMs:this.now()-n,durationMode:"machine",requestCategory:"session_read",statusClass:d.statusClass}),u}}getRawProvider(){return this.provider.getRawProvider()}destroy(){this.telemetryReporter?.log({name:"checkout.unmount",stage:"unmount"}),this.telemetryReporter?.destroy(),this.provider.destroy()}};function et(r,e,t){let o=X;return new o(r,e,t)}var D=require("@flopay/shared");var ke=require("@flopay/shared"),tt=require("@stripe/stripe-js"),rt=new WeakSet;function ot(r){return r instanceof ke.FloPayError&&rt.has(r)}function Re(r){switch(r){case"night":return"night";case"flat":return"flat";default:return"stripe"}}function st(r){return{...r,theme:Re(r.theme)}}var $=class{constructor(){this.name="stripe";this.stripe=null}async initialize(e){if(typeof window>"u")return;let t=await(0,tt.loadStripe)(e.publishableKey,{locale:e.locale??"auto"});if(!t){let o=new ke.FloPayError("Failed to initialize Stripe. Check your publishable key.","authentication_error");throw rt.add(o),o}this.stripe=t}getRawProvider(){return this.stripe}destroy(){this.stripe=null}};var nt=new Map;function we(r){return Array.isArray(r)?r.map(we):r&&typeof r=="object"?Object.fromEntries(Object.entries(r).filter(([,e])=>e!==void 0).sort(([e],[t])=>e.localeCompare(t)).map(([e,t])=>[e,we(t)])):r}function Jt(r,e){return JSON.stringify([r,(0,D.resolveBillingApiUrl)(e?.billingApiUrl),e?.telemetry!==!1,e?.locale??"auto",e?.apiVersion??null,we(e?.appearance??null)])}var me=new Map;async function it(r,e){if(!r){let a=new S({billingApiUrl:(0,D.resolveBillingApiUrl)(e?.billingApiUrl),sdkVersion:D.SDK_VERSION,enabled:e?.telemetry!==!1});throw a.error({errorCode:"CONFIGURATION_INVALID",stage:"sdk_initialize",paymentMethodCategory:"unknown"}),a.flush().catch(()=>{}).finally(()=>a.destroy()),new D.FloPayError("A publishable key is required to initialize FloPay.","validation_error",{param:"publishableKey"})}let t=Jt(r,e),o=nt.get(t);if(o)return e?.telemetry!==!1&&Ze(o)?.log({name:"sdk.cache.hit",stage:"sdk_initialize"}),o;let n=me.get(t);if(n)return n;let s={...e,publishableKey:r},i=(async()=>{let a=new S({billingApiUrl:(0,D.resolveBillingApiUrl)(s.billingApiUrl),sdkVersion:D.SDK_VERSION,enabled:s.telemetry!==!1}),c=a.now();a.log({name:"sdk.initialize.started",stage:"sdk_initialize"}),a.log({name:"sdk.cache.miss",stage:"sdk_initialize"}),a.log({name:"provider.load.started",stage:"provider_load",provider:"stripe"});let u=new $,d=a.now();try{await u.initialize(s)}catch(y){throw a.error({errorCode:"PROVIDER_LOAD_FAILED",failureCategory:ot(y)?"invalid_response":"provider_runtime",stage:"provider_load",provider:"stripe",requestCategory:"provider_sdk",paymentMethodCategory:"unknown"}),a.destroy(),y}let p=a.now();a.log({name:"provider.ready",stage:"provider_ready",provider:"stripe"}),a.log({name:"provider.availability.checked",stage:"provider_ready",provider:"stripe"}),a.log({name:"sdk.initialize.ready",stage:"sdk_initialize"}),a.performance({stage:"sdk_initialize",durationMs:p-c,durationMode:"machine",provider:"stripe"}),a.performance({stage:"provider_ready",durationMs:p-d,durationMode:"machine",provider:"stripe"});let m=et(u,s,a);return nt.set(t,m),m})();me.set(t,i);try{return await i}finally{me.get(t)===i&&me.delete(t)}}0&&(module.exports={FloPay,PaymentAPI,PciVaultCardCapture,SESSION_CREATE_TELEMETRY,StripeAdapter,cacheSessionDisplayData,clearSessionDisplayData,createCheckoutSession,createCheckoutSessionWithRetries,dropThirdPartyOnlyError,getSessionDisplayData,loadFloPay,toStripeAppearance,toStripeAppearanceTheme});