@starfish-codes/hellgate 3.8.1 → 3.9.1

package/dist/hellgate-sdk.mjs

@@ -1,25 +1,28 @@
-function re(t) {
-  return Array.isArray(t) ? t.filter(Boolean) : Object.fromEntries(Object.entries(t).map(([e, r]) => [
+function x(i) {
+  return Array.isArray(i) ? i.filter(Boolean) : Object.fromEntries(Object.entries(i).map(([e, t]) => [
     e,
-    typeof r == "object" && r && !Array.isArray(r) ? re(r) : r
-  ]).filter(([e, r]) => typeof r == "object" && r && !Array.isArray(r) ? !!Object.keys(r).length : r != null && r != null));
+    typeof t == "object" && t && !Array.isArray(t) ? x(t) : t
+  ]).filter(([e, t]) => typeof t == "object" && t && !Array.isArray(t) ? !!Object.keys(t).length : t != null && t != null));
 }
-function v(t, e) {
-  const r = { ...t, ...e }, n = Object.keys(r);
-  for (const i of n) {
-    const a = t[i], s = e[i];
-    typeof a == "object" && !Array.isArray(a) && a && typeof s == "object" && !Array.isArray(s) && s && (r[i] = v(a, s));
+function h(i, e) {
+  const t = { ...i, ...e }, r = Object.keys(t);
+  for (const n of r) {
+    const a = i[n], s = e[n];
+    typeof a == "object" && !Array.isArray(a) && a && typeof s == "object" && !Array.isArray(s) && s && (t[n] = h(a, s));
   }
-  return r;
+  return t;
+}
+function E(i) {
+  if (!i.ok)
+    throw i;
+  return i.json();
 }
-function V(t) {
-  if (!t.ok)
-    throw t;
-  return t.json();
+function C(i) {
+  return `https://${window.HG_IFRAME_HOST ?? "sdk.hellgate.io"}/web/${i}/iframe/`;
 }
-const Ce = 2e3;
-class Pe {
-  constructor(e, r) {
+const N = 2e3;
+class F {
+  constructor(e, t) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
@@ -79,40 +82,40 @@ class Pe {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.decoupledAuthHandlers.push(n);
+      value: (r) => {
+        this.decoupledAuthHandlers.push(r);
       }
     }), Object.defineProperty(this, "onStartChallenge", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onStartHandler = n;
+      value: (r) => {
+        this.onStartHandler = r;
       }
     }), Object.defineProperty(this, "onChallengeFinished", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onFinishHandler = n;
+      value: (r) => {
+        this.onFinishHandler = r;
       }
     }), Object.defineProperty(this, "sessionStateHandle", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        var i, a;
-        switch (n.next_action) {
+      value: (r) => {
+        var n, a;
+        switch (r.next_action) {
           case "3ds_check": {
-            this.initCheck3DSIframes(n.data.threeds_server_callback_url, n.data.mon_url);
+            this.initCheck3DSIframes(r.data.threeds_server_callback_url, r.data.mon_url);
             break;
           }
           case "3ds_challenge": {
-            (i = this.onStartHandler) == null || i.call(this), this.disposeCheck3DSIframe(), this.startChallenge(n.data.challenge_url, n.data.result_mon_url);
+            (n = this.onStartHandler) == null || n.call(this), this.disposeCheck3DSIframe(), this.startChallenge(r.data.challenge_url, r.data.result_mon_url);
             break;
           }
           case "3ds_challenge_decoupled": {
-            this.startDecoupledAuth(n.data.cardholder_info, n.data.result_mon_url, n.data.transaction_id);
+            this.startDecoupledAuth(r.data.cardholder_info, r.data.result_mon_url, r.data.transaction_id);
             break;
           }
           case null: {
@@ -121,820 +124,98 @@ class Pe {
           }
         }
       }
-    }), this.domContainer = r.domContainer ?? M(), this.disposers.push(this.session.onStateChange(this.sessionStateHandle)), this.labelText = r.labelText;
+    }), this.domContainer = t.domContainer ?? p(), this.disposers.push(this.session.onStateChange(this.sessionStateHandle)), this.labelText = t.labelText;
   }
   dispose() {
     this.disposers.forEach((e) => e()), this.check3dsIframeDisposers.forEach((e) => e());
   }
-  initCheck3DSIframes(e, r) {
-    const n = M();
-    n.insertAdjacentHTML("beforeend", `<iframe id="check_3ds_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${e}"></iframe>`);
-    const i = n.querySelector(`#check_3ds_${this.iframeId}`);
-    if (i) {
+  initCheck3DSIframes(e, t) {
+    const r = p();
+    r.insertAdjacentHTML("beforeend", `<iframe id="check_3ds_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${e}"></iframe>`);
+    const n = r.querySelector(`#check_3ds_${this.iframeId}`);
+    if (n) {
       const a = (s) => {
-        s.source === i.contentWindow && this.session.completeAction({ action: "3ds_check", result: s.data });
+        s.source === n.contentWindow && this.session.completeAction({ action: "3ds_check", result: s.data });
       };
-      window.addEventListener("message", a), this.check3dsIframeDisposers.push(() => window.removeEventListener("message", a), () => i.remove());
+      window.addEventListener("message", a), this.check3dsIframeDisposers.push(() => window.removeEventListener("message", a), () => n.remove());
     }
-    if (r) {
-      n.insertAdjacentHTML("beforeend", `<iframe id="mon_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${r}"></iframe>`);
-      const a = n.querySelector(`#mon_${this.iframeId}`);
+    if (t) {
+      r.insertAdjacentHTML("beforeend", `<iframe id="mon_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${t}"></iframe>`);
+      const a = r.querySelector(`#mon_${this.iframeId}`);
       a && this.disposers.push(() => a.remove());
     }
   }
   disposeCheck3DSIframe() {
     this.check3dsIframeDisposers.forEach((e) => e()), this.check3dsIframeDisposers = [];
   }
-  startChallenge(e, r) {
-    const n = M(), i = `<div style="display: flex; flex-direction: column; gap: 10px; align-items: center; ${this.domContainer === n ? 'border:0; max-width: 800px; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%); width:100% " ' : 'border:0;" width="100%" height="100%"'}><iframe id="cha_${this.iframeId}" src="${e}"  width="100%" height="500"></iframe>${this.labelText ? '<span id="tds_label_text" style="font-size: large;">' + this.labelText + "</span>" : ""}<div>`;
-    this.domContainer.insertAdjacentHTML("beforeend", this.domContainer === n ? `<div id="cha_${this.iframeId}_wrap" style="background: #fff; position: fixed; left: 0; top: 0; width: 100%; height: 100%; z-index: 10000;">${i}</div>` : i);
+  startChallenge(e, t) {
+    const r = p(), n = `<div style="display: flex; flex-direction: column; gap: 10px; align-items: center; ${this.domContainer === r ? 'border:0; max-width: 800px; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%); width:100% " ' : 'border:0;" width="100%" height="100%"'}><iframe id="cha_${this.iframeId}" src="${e}"  width="100%" height="500"></iframe>${this.labelText ? '<span id="tds_label_text" style="font-size: large;">' + this.labelText + "</span>" : ""}<div>`;
+    this.domContainer.insertAdjacentHTML("beforeend", this.domContainer === r ? `<div id="cha_${this.iframeId}_wrap" style="background: #fff; position: fixed; left: 0; top: 0; width: 100%; height: 100%; z-index: 10000;">${n}</div>` : n);
     const a = this.domContainer.querySelector(`#cha_${this.iframeId}`), s = this.domContainer.querySelector(`#cha_${this.iframeId}_wrap`);
     if (!a)
       throw new Error("3DS Challenge Iframe initialization failed");
     this.disposers.push(() => {
       a.remove(), s == null || s.remove();
     });
-    const o = new Promise((u) => {
-      const d = (l) => {
-        l.source !== a.contentWindow || l.data.event !== "AuthResultReady" || u(l.data);
+    const o = new Promise((c) => {
+      const d = (u) => {
+        u.source !== a.contentWindow || u.data.event !== "AuthResultReady" || c({
+          ...u.data,
+          requestor_trans_id: u.data.requestor_trans_id ?? u.data.requestorTransId,
+          // TODO: remove this field after the backend is updated
+          requestorTransId: void 0,
+          param: u.data.param || void 0
+        });
       };
       window.addEventListener("message", d), this.disposers.push(() => window.removeEventListener("message", d));
-    }), c = new Promise((u) => {
-      const d = this.startAuthResultPolling(r, (l) => {
-        l.event === "AuthResultReady" && (d(), u({
-          requestor_trans_id: l.threeDSRequestorTransID,
-          event: l.event
+    }), l = new Promise((c) => {
+      const d = this.startAuthResultPolling(t, (u) => {
+        u.event === "AuthResultReady" && (d(), c({
+          requestor_trans_id: u.threeDSRequestorTransID,
+          event: u.event
         }));
       });
     });
-    Promise.any([o, c]).then((u) => {
+    Promise.any([o, l]).then((c) => {
       this.session.completeAction({
         action: "3ds_challenge",
-        result: u
+        result: c
       });
     });
   }
-  startDecoupledAuth(e, r, n) {
-    this.transactionId || (this.transactionId = n), this.decoupledAuthHandlers.forEach((a) => a(e));
-    const i = this.startAuthResultPolling(r, (a) => {
+  startDecoupledAuth(e, t, r) {
+    this.transactionId || (this.transactionId = r), this.decoupledAuthHandlers.forEach((a) => a(e));
+    const n = this.startAuthResultPolling(t, (a) => {
       a.event === "AuthResultReady" && (this.session.completeAction({
         action: "3ds_challenge_decoupled",
         result: { ...a, event: a.event }
-      }), i());
+      }), n());
     });
   }
-  startAuthResultPolling(e, r) {
-    return window.clearTimeout(this.resultPollingTimer), this.resultPollingTimer = window.setTimeout(() => fetch(e).then((n) => V(n)).then((n) => {
-      this.startAuthResultPolling(e, r), r(n);
+  startAuthResultPolling(e, t) {
+    return window.clearTimeout(this.resultPollingTimer), this.resultPollingTimer = window.setTimeout(() => fetch(e).then((r) => E(r)).then((r) => {
+      this.startAuthResultPolling(e, t), t(r);
     }).catch(() => {
-    }), Ce), () => window.clearTimeout(this.resultPollingTimer);
+    }), N), () => window.clearTimeout(this.resultPollingTimer);
   }
 }
-function M() {
+function p() {
   return document.body;
 }
-const h = crypto, w = (t) => t instanceof CryptoKey, ve = async (t, e) => {
-  const r = `SHA-${t.slice(-3)}`;
-  return new Uint8Array(await h.subtle.digest(r, e));
-}, C = new TextEncoder(), ne = new TextDecoder(), I = 2 ** 32;
-function D(...t) {
-  const e = t.reduce((i, { length: a }) => i + a, 0), r = new Uint8Array(e);
-  let n = 0;
-  for (const i of t)
-    r.set(i, n), n += i.length;
-  return r;
-}
-function Oe(t, e) {
-  return D(C.encode(t), new Uint8Array([0]), e);
-}
-function J(t, e, r) {
-  if (e < 0 || e >= I)
-    throw new RangeError(`value must be >= 0 and <= ${I - 1}. Received ${e}`);
-  t.set([e >>> 24, e >>> 16, e >>> 8, e & 255], r);
-}
-function He(t) {
-  const e = Math.floor(t / I), r = t % I, n = new Uint8Array(8);
-  return J(n, e, 0), J(n, r, 4), n;
-}
-function k(t) {
-  const e = new Uint8Array(4);
-  return J(e, t), e;
-}
-function U(t) {
-  return D(k(t.length), t);
-}
-async function xe(t, e, r) {
-  const n = Math.ceil((e >> 3) / 32), i = new Uint8Array(n * 32);
-  for (let a = 0; a < n; a++) {
-    const s = new Uint8Array(4 + t.length + r.length);
-    s.set(k(a + 1)), s.set(t, 4), s.set(r, 4 + t.length), i.set(await ve("sha256", s), a * 32);
-  }
-  return i.slice(0, e >> 3);
-}
-const Ke = (t) => {
-  let e = t;
-  typeof e == "string" && (e = C.encode(e));
-  const r = 32768, n = [];
-  for (let i = 0; i < e.length; i += r)
-    n.push(String.fromCharCode.apply(null, e.subarray(i, i + r)));
-  return btoa(n.join(""));
-}, m = (t) => Ke(t).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_"), Te = (t) => {
-  const e = atob(t), r = new Uint8Array(e.length);
-  for (let n = 0; n < e.length; n++)
-    r[n] = e.charCodeAt(n);
-  return r;
-}, ie = (t) => {
-  let e = t;
-  e instanceof Uint8Array && (e = ne.decode(e)), e = e.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
-  try {
-    return Te(e);
-  } catch {
-    throw new TypeError("The input to be decoded is not correctly encoded.");
-  }
-};
-class ae extends Error {
-  static get code() {
-    return "ERR_JOSE_GENERIC";
-  }
-  constructor(e) {
-    var r;
-    super(e), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
-  }
-}
-class f extends ae {
-  constructor() {
-    super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
-  }
-  static get code() {
-    return "ERR_JOSE_NOT_SUPPORTED";
-  }
-}
-class A extends ae {
-  constructor() {
-    super(...arguments), this.code = "ERR_JWE_INVALID";
-  }
-  static get code() {
-    return "ERR_JWE_INVALID";
-  }
-}
-const q = h.getRandomValues.bind(h);
-function se(t) {
-  switch (t) {
-    case "A128GCM":
-    case "A128GCMKW":
-    case "A192GCM":
-    case "A192GCMKW":
-    case "A256GCM":
-    case "A256GCMKW":
-      return 96;
-    case "A128CBC-HS256":
-    case "A192CBC-HS384":
-    case "A256CBC-HS512":
-      return 128;
-    default:
-      throw new f(`Unsupported JWE Algorithm: ${t}`);
-  }
-}
-const De = (t) => q(new Uint8Array(se(t) >> 3)), Re = (t, e) => {
-  if (e.length << 3 !== se(t))
-    throw new A("Invalid Initialization Vector length");
-}, Z = (t, e) => {
-  const r = t.byteLength << 3;
-  if (r !== e)
-    throw new A(`Invalid Content Encryption Key length. Expected ${e} bits, got ${r} bits`);
-};
-function E(t, e = "algorithm.name") {
-  return new TypeError(`CryptoKey does not support this operation, its ${e} must be ${t}`);
-}
-function j(t, e) {
-  return t.name === e;
-}
-function je(t) {
-  return parseInt(t.name.slice(4), 10);
-}
-function Ie(t, e) {
-  if (e.length && !e.some((r) => t.usages.includes(r))) {
-    let r = "CryptoKey does not support this operation, its usages must include ";
-    if (e.length > 2) {
-      const n = e.pop();
-      r += `one of ${e.join(", ")}, or ${n}.`;
-    } else e.length === 2 ? r += `one of ${e[0]} or ${e[1]}.` : r += `${e[0]}.`;
-    throw new TypeError(r);
-  }
-}
-function x(t, e, ...r) {
-  switch (e) {
-    case "A128GCM":
-    case "A192GCM":
-    case "A256GCM": {
-      if (!j(t.algorithm, "AES-GCM"))
-        throw E("AES-GCM");
-      const n = parseInt(e.slice(1, 4), 10);
-      if (t.algorithm.length !== n)
-        throw E(n, "algorithm.length");
-      break;
-    }
-    case "A128KW":
-    case "A192KW":
-    case "A256KW": {
-      if (!j(t.algorithm, "AES-KW"))
-        throw E("AES-KW");
-      const n = parseInt(e.slice(1, 4), 10);
-      if (t.algorithm.length !== n)
-        throw E(n, "algorithm.length");
-      break;
-    }
-    case "ECDH": {
-      switch (t.algorithm.name) {
-        case "ECDH":
-        case "X25519":
-        case "X448":
-          break;
-        default:
-          throw E("ECDH, X25519, or X448");
-      }
-      break;
-    }
-    case "PBES2-HS256+A128KW":
-    case "PBES2-HS384+A192KW":
-    case "PBES2-HS512+A256KW":
-      if (!j(t.algorithm, "PBKDF2"))
-        throw E("PBKDF2");
-      break;
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512": {
-      if (!j(t.algorithm, "RSA-OAEP"))
-        throw E("RSA-OAEP");
-      const n = parseInt(e.slice(9), 10) || 1;
-      if (je(t.algorithm.hash) !== n)
-        throw E(`SHA-${n}`, "algorithm.hash");
-      break;
-    }
-    default:
-      throw new TypeError("CryptoKey does not support this operation");
-  }
-  Ie(t, r);
-}
-function oe(t, e, ...r) {
-  var n;
-  if (r.length > 2) {
-    const i = r.pop();
-    t += `one of type ${r.join(", ")}, or ${i}.`;
-  } else r.length === 2 ? t += `one of type ${r[0]} or ${r[1]}.` : t += `of type ${r[0]}.`;
-  return e == null ? t += ` Received ${e}` : typeof e == "function" && e.name ? t += ` Received function ${e.name}` : typeof e == "object" && e != null && (n = e.constructor) != null && n.name && (t += ` Received an instance of ${e.constructor.name}`), t;
-}
-const g = (t, ...e) => oe("Key must be ", t, ...e);
-function ce(t, e, ...r) {
-  return oe(`Key for the ${t} algorithm must be `, e, ...r);
-}
-const le = (t) => w(t) ? !0 : (t == null ? void 0 : t[Symbol.toStringTag]) === "KeyObject", y = ["CryptoKey"], Me = (...t) => {
-  const e = t.filter(Boolean);
-  if (e.length === 0 || e.length === 1)
-    return !0;
-  let r;
-  for (const n of e) {
-    const i = Object.keys(n);
-    if (!r || r.size === 0) {
-      r = new Set(i);
-      continue;
-    }
-    for (const a of i) {
-      if (r.has(a))
-        return !1;
-      r.add(a);
-    }
-  }
-  return !0;
-};
-function Ue(t) {
-  return typeof t == "object" && t !== null;
-}
-function $e(t) {
-  if (!Ue(t) || Object.prototype.toString.call(t) !== "[object Object]")
-    return !1;
-  if (Object.getPrototypeOf(t) === null)
-    return !0;
-  let e = t;
-  for (; Object.getPrototypeOf(e) !== null; )
-    e = Object.getPrototypeOf(e);
-  return Object.getPrototypeOf(t) === e;
-}
-const ue = [
-  { hash: "SHA-256", name: "HMAC" },
-  !0,
-  ["sign"]
-];
-function We(t, e) {
-  if (t.algorithm.length !== parseInt(e.slice(1, 4), 10))
-    throw new TypeError(`Invalid key size for alg: ${e}`);
-}
-function Ne(t, e, r) {
-  if (w(t))
-    return x(t, e, r), t;
-  if (t instanceof Uint8Array)
-    return h.subtle.importKey("raw", t, "AES-KW", !0, [r]);
-  throw new TypeError(g(t, ...y, "Uint8Array"));
-}
-const z = async (t, e, r) => {
-  const n = await Ne(e, t, "wrapKey");
-  We(n, t);
-  const i = await h.subtle.importKey("raw", r, ...ue);
-  return new Uint8Array(await h.subtle.wrapKey("raw", i, n, "AES-KW"));
-};
-async function Le(t, e, r, n, i = new Uint8Array(0), a = new Uint8Array(0)) {
-  if (!w(t))
-    throw new TypeError(g(t, ...y));
-  if (x(t, "ECDH"), !w(e))
-    throw new TypeError(g(e, ...y));
-  x(e, "ECDH", "deriveBits");
-  const s = D(U(C.encode(r)), U(i), U(a), k(n));
-  let o;
-  t.algorithm.name === "X25519" ? o = 256 : t.algorithm.name === "X448" ? o = 448 : o = Math.ceil(parseInt(t.algorithm.namedCurve.substr(-3), 10) / 8) << 3;
-  const c = new Uint8Array(await h.subtle.deriveBits({
-    name: t.algorithm.name,
-    public: t
-  }, e, o));
-  return xe(c, n, s);
-}
-async function Fe(t) {
-  if (!w(t))
-    throw new TypeError(g(t, ...y));
-  return h.subtle.generateKey(t.algorithm, !0, ["deriveBits"]);
-}
-function Be(t) {
-  if (!w(t))
-    throw new TypeError(g(t, ...y));
-  return ["P-256", "P-384", "P-521"].includes(t.algorithm.namedCurve) || t.algorithm.name === "X25519" || t.algorithm.name === "X448";
-}
-function Ve(t) {
-  if (!(t instanceof Uint8Array) || t.length < 8)
-    throw new A("PBES2 Salt Input must be 8 or more octets");
-}
-function Je(t, e) {
-  if (t instanceof Uint8Array)
-    return h.subtle.importKey("raw", t, "PBKDF2", !1, ["deriveBits"]);
-  if (w(t))
-    return x(t, e, "deriveBits", "deriveKey"), t;
-  throw new TypeError(g(t, ...y, "Uint8Array"));
-}
-async function ze(t, e, r, n) {
-  Ve(t);
-  const i = Oe(e, t), a = parseInt(e.slice(13, 16), 10), s = {
-    hash: `SHA-${e.slice(8, 11)}`,
-    iterations: r,
-    name: "PBKDF2",
-    salt: i
-  }, o = {
-    length: a,
-    name: "AES-KW"
-  }, c = await Je(n, e);
-  if (c.usages.includes("deriveBits"))
-    return new Uint8Array(await h.subtle.deriveBits(s, c, a));
-  if (c.usages.includes("deriveKey"))
-    return h.subtle.deriveKey(s, c, o, !1, ["wrapKey", "unwrapKey"]);
-  throw new TypeError('PBKDF2 key "usages" must include "deriveBits" or "deriveKey"');
-}
-const Ge = async (t, e, r, n = 2048, i = q(new Uint8Array(16))) => {
-  const a = await ze(i, t, n, e);
-  return { encryptedKey: await z(t.slice(-6), a, r), p2c: n, p2s: m(i) };
-};
-function Q(t) {
-  switch (t) {
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512":
-      return "RSA-OAEP";
-    default:
-      throw new f(`alg ${t} is not supported either by JOSE or your javascript runtime`);
-  }
-}
-const ke = (t, e) => {
-  if (t.startsWith("RS") || t.startsWith("PS")) {
-    const { modulusLength: r } = e.algorithm;
-    if (typeof r != "number" || r < 2048)
-      throw new TypeError(`${t} requires key modulusLength to be 2048 bits or larger`);
-  }
-}, qe = async (t, e, r) => {
-  if (!w(e))
-    throw new TypeError(g(e, ...y));
-  if (x(e, t, "encrypt", "wrapKey"), ke(t, e), e.usages.includes("encrypt"))
-    return new Uint8Array(await h.subtle.encrypt(Q(t), e, r));
-  if (e.usages.includes("wrapKey")) {
-    const n = await h.subtle.importKey("raw", r, ...ue);
-    return new Uint8Array(await h.subtle.wrapKey("raw", n, e, Q(t)));
-  }
-  throw new TypeError('RSA-OAEP key "usages" must include "encrypt" or "wrapKey" for this operation');
-};
-function Xe(t) {
-  let e, r;
-  switch (t.kty) {
-    case "RSA": {
-      switch (t.alg) {
-        case "PS256":
-        case "PS384":
-        case "PS512":
-          e = { name: "RSA-PSS", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "RS256":
-        case "RS384":
-        case "RS512":
-          e = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "RSA-OAEP":
-        case "RSA-OAEP-256":
-        case "RSA-OAEP-384":
-        case "RSA-OAEP-512":
-          e = {
-            name: "RSA-OAEP",
-            hash: `SHA-${parseInt(t.alg.slice(-3), 10) || 1}`
-          }, r = t.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
-          break;
-        default:
-          throw new f('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    case "EC": {
-      switch (t.alg) {
-        case "ES256":
-          e = { name: "ECDSA", namedCurve: "P-256" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ES384":
-          e = { name: "ECDSA", namedCurve: "P-384" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ES512":
-          e = { name: "ECDSA", namedCurve: "P-521" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          e = { name: "ECDH", namedCurve: t.crv }, r = t.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new f('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    case "OKP": {
-      switch (t.alg) {
-        case "EdDSA":
-          e = { name: t.crv }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          e = { name: t.crv }, r = t.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new f('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    default:
-      throw new f('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
-  }
-  return { algorithm: e, keyUsages: r };
-}
-const de = async (t) => {
-  if (!t.alg)
-    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: e, keyUsages: r } = Xe(t), n = [
-    e,
-    t.ext ?? !1,
-    t.key_ops ?? r
-  ], i = { ...t };
-  return delete i.alg, delete i.use, h.subtle.importKey("jwk", i, ...n);
-}, he = (t) => ie(t);
-let $, W;
-const fe = (t) => (t == null ? void 0 : t[Symbol.toStringTag]) === "KeyObject", pe = async (t, e, r, n) => {
-  let i = t.get(e);
-  if (i != null && i[n])
-    return i[n];
-  const a = await de({ ...r, alg: n });
-  return i ? i[n] = a : t.set(e, { [n]: a }), a;
-}, Ye = (t, e) => {
-  if (fe(t)) {
-    let r = t.export({ format: "jwk" });
-    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? he(r.k) : (W || (W = /* @__PURE__ */ new WeakMap()), pe(W, t, r, e));
-  }
-  return t;
-}, Ze = (t, e) => {
-  if (fe(t)) {
-    let r = t.export({ format: "jwk" });
-    return r.k ? he(r.k) : ($ || ($ = /* @__PURE__ */ new WeakMap()), pe($, t, r, e));
-  }
-  return t;
-}, N = { normalizePublicKey: Ye, normalizePrivateKey: Ze };
-function me(t) {
-  switch (t) {
-    case "A128GCM":
-      return 128;
-    case "A192GCM":
-      return 192;
-    case "A256GCM":
-    case "A128CBC-HS256":
-      return 256;
-    case "A192CBC-HS384":
-      return 384;
-    case "A256CBC-HS512":
-      return 512;
-    default:
-      throw new f(`Unsupported JWE Algorithm: ${t}`);
-  }
-}
-const K = (t) => q(new Uint8Array(me(t) >> 3));
-async function Qe(t, e) {
-  if (!$e(t))
-    throw new TypeError("JWK must be an object");
-  switch (t.kty) {
-    case "oct":
-      if (typeof t.k != "string" || !t.k)
-        throw new TypeError('missing "k" (Key Value) Parameter value');
-      return ie(t.k);
-    case "RSA":
-      if (t.oth !== void 0)
-        throw new f('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-    case "EC":
-    case "OKP":
-      return de({ ...t, alg: e });
-    default:
-      throw new f('Unsupported "kty" (Key Type) Parameter value');
-  }
-}
-const G = (t) => t == null ? void 0 : t[Symbol.toStringTag], et = (t, e) => {
-  if (!(e instanceof Uint8Array)) {
-    if (!le(e))
-      throw new TypeError(ce(t, e, ...y, "Uint8Array"));
-    if (e.type !== "secret")
-      throw new TypeError(`${G(e)} instances for symmetric algorithms must be of type "secret"`);
-  }
-}, tt = (t, e, r) => {
-  if (!le(e))
-    throw new TypeError(ce(t, e, ...y));
-  if (e.type === "secret")
-    throw new TypeError(`${G(e)} instances for asymmetric algorithms must not be of type "secret"`);
-  if (e.algorithm, e.algorithm && r === "encrypt" && e.type === "private")
-    throw new TypeError(`${G(e)} instances for asymmetric algorithm encryption must be of type "public"`);
-}, rt = (t, e, r) => {
-  t.startsWith("HS") || t === "dir" || t.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(t) ? et(t, e) : tt(t, e, r);
-};
-async function nt(t, e, r, n, i) {
-  if (!(r instanceof Uint8Array))
-    throw new TypeError(g(r, "Uint8Array"));
-  const a = parseInt(t.slice(1, 4), 10), s = await h.subtle.importKey("raw", r.subarray(a >> 3), "AES-CBC", !1, ["encrypt"]), o = await h.subtle.importKey("raw", r.subarray(0, a >> 3), {
-    hash: `SHA-${a << 1}`,
-    name: "HMAC"
-  }, !1, ["sign"]), c = new Uint8Array(await h.subtle.encrypt({
-    iv: n,
-    name: "AES-CBC"
-  }, s, e)), u = D(i, n, c, He(i.length << 3)), d = new Uint8Array((await h.subtle.sign("HMAC", o, u)).slice(0, a >> 3));
-  return { ciphertext: c, tag: d, iv: n };
-}
-async function it(t, e, r, n, i) {
-  let a;
-  r instanceof Uint8Array ? a = await h.subtle.importKey("raw", r, "AES-GCM", !1, ["encrypt"]) : (x(r, t, "encrypt"), a = r);
-  const s = new Uint8Array(await h.subtle.encrypt({
-    additionalData: i,
-    iv: n,
-    name: "AES-GCM",
-    tagLength: 128
-  }, a, e)), o = s.slice(-16);
-  return { ciphertext: s.slice(0, -16), tag: o, iv: n };
-}
-const be = async (t, e, r, n, i) => {
-  if (!w(r) && !(r instanceof Uint8Array))
-    throw new TypeError(g(r, ...y, "Uint8Array"));
-  switch (n ? Re(t, n) : n = De(t), t) {
-    case "A128CBC-HS256":
-    case "A192CBC-HS384":
-    case "A256CBC-HS512":
-      return r instanceof Uint8Array && Z(r, parseInt(t.slice(-3), 10)), nt(t, e, r, n, i);
-    case "A128GCM":
-    case "A192GCM":
-    case "A256GCM":
-      return r instanceof Uint8Array && Z(r, parseInt(t.slice(1, 4), 10)), it(t, e, r, n, i);
-    default:
-      throw new f("Unsupported JWE Content Encryption Algorithm");
-  }
-};
-async function at(t, e, r, n) {
-  const i = t.slice(0, 7), a = await be(i, r, e, n, new Uint8Array(0));
-  return {
-    encryptedKey: a.ciphertext,
-    iv: m(a.iv),
-    tag: m(a.tag)
-  };
-}
-function st(t, e, r, n, i) {
-  if (i.crit !== void 0 && (n == null ? void 0 : n.crit) === void 0)
-    throw new t('"crit" (Critical) Header Parameter MUST be integrity protected');
-  if (!n || n.crit === void 0)
-    return /* @__PURE__ */ new Set();
-  if (!Array.isArray(n.crit) || n.crit.length === 0 || n.crit.some((s) => typeof s != "string" || s.length === 0))
-    throw new t('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
-  let a;
-  r !== void 0 ? a = new Map([...Object.entries(r), ...e.entries()]) : a = e;
-  for (const s of n.crit) {
-    if (!a.has(s))
-      throw new f(`Extension Header Parameter "${s}" is not recognized`);
-    if (i[s] === void 0)
-      throw new t(`Extension Header Parameter "${s}" is missing`);
-    if (a.get(s) && n[s] === void 0)
-      throw new t(`Extension Header Parameter "${s}" MUST be integrity protected`);
-  }
-  return new Set(n.crit);
-}
-const ot = async (t) => {
-  if (t instanceof Uint8Array)
-    return {
-      kty: "oct",
-      k: m(t)
-    };
-  if (!w(t))
-    throw new TypeError(g(t, ...y, "Uint8Array"));
-  if (!t.extractable)
-    throw new TypeError("non-extractable CryptoKey cannot be exported as a JWK");
-  const { ext: e, key_ops: r, alg: n, use: i, ...a } = await h.subtle.exportKey("jwk", t);
-  return a;
-};
-async function ct(t) {
-  return ot(t);
-}
-async function lt(t, e, r, n, i = {}) {
-  var c;
-  let a, s, o;
-  switch (rt(t, r, "encrypt"), r = await ((c = N.normalizePublicKey) == null ? void 0 : c.call(N, r, t)) || r, t) {
-    case "dir": {
-      o = r;
-      break;
-    }
-    case "ECDH-ES":
-    case "ECDH-ES+A128KW":
-    case "ECDH-ES+A192KW":
-    case "ECDH-ES+A256KW": {
-      if (!Be(r))
-        throw new f("ECDH with the provided key is not allowed or not supported by your javascript runtime");
-      const { apu: u, apv: d } = i;
-      let { epk: l } = i;
-      l || (l = (await Fe(r)).privateKey);
-      const { x: _, y: S, crv: p, kty: b } = await ct(l), Y = await Le(r, l, t === "ECDH-ES" ? e : t, t === "ECDH-ES" ? me(e) : parseInt(t.slice(-5, -2), 10), u, d);
-      if (s = { epk: { x: _, crv: p, kty: b } }, b === "EC" && (s.epk.y = S), u && (s.apu = m(u)), d && (s.apv = m(d)), t === "ECDH-ES") {
-        o = Y;
-        break;
-      }
-      o = n || K(e);
-      const Se = t.slice(-6);
-      a = await z(Se, Y, o);
-      break;
-    }
-    case "RSA1_5":
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512": {
-      o = n || K(e), a = await qe(t, r, o);
-      break;
-    }
-    case "PBES2-HS256+A128KW":
-    case "PBES2-HS384+A192KW":
-    case "PBES2-HS512+A256KW": {
-      o = n || K(e);
-      const { p2c: u, p2s: d } = i;
-      ({ encryptedKey: a, ...s } = await Ge(t, r, o, u, d));
-      break;
-    }
-    case "A128KW":
-    case "A192KW":
-    case "A256KW": {
-      o = n || K(e), a = await z(t, r, o);
-      break;
-    }
-    case "A128GCMKW":
-    case "A192GCMKW":
-    case "A256GCMKW": {
-      o = n || K(e);
-      const { iv: u } = i;
-      ({ encryptedKey: a, ...s } = await at(t, r, o, u));
-      break;
-    }
-    default:
-      throw new f('Invalid or unsupported "alg" (JWE Algorithm) header value');
-  }
-  return { cek: o, encryptedKey: a, parameters: s };
-}
-const ut = Symbol();
-class dt {
-  constructor(e) {
-    if (!(e instanceof Uint8Array))
-      throw new TypeError("plaintext must be an instance of Uint8Array");
-    this._plaintext = e;
-  }
-  setKeyManagementParameters(e) {
-    if (this._keyManagementParameters)
-      throw new TypeError("setKeyManagementParameters can only be called once");
-    return this._keyManagementParameters = e, this;
-  }
-  setProtectedHeader(e) {
-    if (this._protectedHeader)
-      throw new TypeError("setProtectedHeader can only be called once");
-    return this._protectedHeader = e, this;
-  }
-  setSharedUnprotectedHeader(e) {
-    if (this._sharedUnprotectedHeader)
-      throw new TypeError("setSharedUnprotectedHeader can only be called once");
-    return this._sharedUnprotectedHeader = e, this;
-  }
-  setUnprotectedHeader(e) {
-    if (this._unprotectedHeader)
-      throw new TypeError("setUnprotectedHeader can only be called once");
-    return this._unprotectedHeader = e, this;
-  }
-  setAdditionalAuthenticatedData(e) {
-    return this._aad = e, this;
-  }
-  setContentEncryptionKey(e) {
-    if (this._cek)
-      throw new TypeError("setContentEncryptionKey can only be called once");
-    return this._cek = e, this;
-  }
-  setInitializationVector(e) {
-    if (this._iv)
-      throw new TypeError("setInitializationVector can only be called once");
-    return this._iv = e, this;
-  }
-  async encrypt(e, r) {
-    if (!this._protectedHeader && !this._unprotectedHeader && !this._sharedUnprotectedHeader)
-      throw new A("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");
-    if (!Me(this._protectedHeader, this._unprotectedHeader, this._sharedUnprotectedHeader))
-      throw new A("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");
-    const n = {
-      ...this._protectedHeader,
-      ...this._unprotectedHeader,
-      ...this._sharedUnprotectedHeader
-    };
-    if (st(A, /* @__PURE__ */ new Map(), r == null ? void 0 : r.crit, this._protectedHeader, n), n.zip !== void 0)
-      throw new f('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');
-    const { alg: i, enc: a } = n;
-    if (typeof i != "string" || !i)
-      throw new A('JWE "alg" (Algorithm) Header Parameter missing or invalid');
-    if (typeof a != "string" || !a)
-      throw new A('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
-    let s;
-    if (this._cek && (i === "dir" || i === "ECDH-ES"))
-      throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${i}`);
-    let o;
-    {
-      let b;
-      ({ cek: o, encryptedKey: s, parameters: b } = await lt(i, a, e, this._cek, this._keyManagementParameters)), b && (r && ut in r ? this._unprotectedHeader ? this._unprotectedHeader = { ...this._unprotectedHeader, ...b } : this.setUnprotectedHeader(b) : this._protectedHeader ? this._protectedHeader = { ...this._protectedHeader, ...b } : this.setProtectedHeader(b));
-    }
-    let c, u, d;
-    this._protectedHeader ? u = C.encode(m(JSON.stringify(this._protectedHeader))) : u = C.encode(""), this._aad ? (d = m(this._aad), c = D(u, C.encode("."), C.encode(d))) : c = u;
-    const { ciphertext: l, tag: _, iv: S } = await be(a, this._plaintext, o, this._iv, c), p = {
-      ciphertext: m(l)
-    };
-    return S && (p.iv = m(S)), _ && (p.tag = m(_)), s && (p.encrypted_key = m(s)), d && (p.aad = d), this._protectedHeader && (p.protected = ne.decode(u)), this._sharedUnprotectedHeader && (p.unprotected = this._sharedUnprotectedHeader), this._unprotectedHeader && (p.header = this._unprotectedHeader), p;
-  }
-}
-class ht {
-  constructor(e) {
-    this._flattened = new dt(e);
-  }
-  setContentEncryptionKey(e) {
-    return this._flattened.setContentEncryptionKey(e), this;
-  }
-  setInitializationVector(e) {
-    return this._flattened.setInitializationVector(e), this;
-  }
-  setProtectedHeader(e) {
-    return this._flattened.setProtectedHeader(e), this;
-  }
-  setKeyManagementParameters(e) {
-    return this._flattened.setKeyManagementParameters(e), this;
-  }
-  async encrypt(e, r) {
-    const n = await this._flattened.encrypt(e, r);
-    return [n.protected, n.encrypted_key, n.iv, n.ciphertext, n.tag].join(".");
-  }
-}
-const L = {
+const y = {
   base: {
     ":disabled": {
       backgroundColor: "transparent"
     }
   }
-}, ft = "DOM Element was not found";
-var ee;
-(function(t) {
-  t.NOT_COMPLETE = "NOT_COMPLETE", t.SCHEME_NOT_SUPPORTED = "SCHEME_NOT_SUPPORTED", t.LUHN_CHECK_FAILED = "LUHN_CHECK_FAILED", t.INVALID_EXPIRY_DATE = "INVALID_EXPIRY_DATE";
-})(ee || (ee = {}));
-const ye = (t) => t != null, pt = "v3.8.1";
-class R {
-  constructor(e, r) {
+}, k = "DOM Element was not found";
+var O;
+(function(i) {
+  i.NOT_COMPLETE = "NOT_COMPLETE", i.SCHEME_NOT_SUPPORTED = "SCHEME_NOT_SUPPORTED", i.LUHN_CHECK_FAILED = "LUHN_CHECK_FAILED", i.INVALID_EXPIRY_DATE = "INVALID_EXPIRY_DATE";
+})(O || (O = {}));
+const S = (i) => i != null, R = "v3.9.1";
+class f {
+  constructor(e) {
     if (Object.defineProperty(this, "options", {
       enumerable: !0,
       configurable: !0,
@@ -955,16 +236,21 @@ class R {
       configurable: !0,
       writable: !0,
       value: { ready: [], blur: [], focus: [], keydown: [], change: [] }
+    }), Object.defineProperty(this, "key", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: ""
     }), Object.defineProperty(this, "update", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async ({ ...n }) => {
-        this.iframe && ye(n.height) && (this.iframe.height = n.height), this.iframePostMessage({
+      value: async ({ ...t }) => {
+        this.iframe && S(t.height) && (this.iframe.height = t.height), this.iframePostMessage({
           type: "update",
           data: {
-            ...n,
-            value: n.value ? this.putValue(n.value) ?? void 0 : void 0
+            ...t,
+            value: t.value ? this.putValue(t.value) ?? void 0 : void 0
           }
         });
       }
@@ -994,74 +280,110 @@ class R {
       configurable: !0,
       writable: !0,
       value: () => {
-        var n;
-        (n = this.iframe) == null || n.remove(), this.iframe = null;
+        var t;
+        (t = this.iframe) == null || t.remove(), this.iframe = null;
       }
-    }), this.IFRAME_BASE_URL = mt(pt), !this.IFRAME_BASE_URL)
+    }), this.IFRAME_BASE_URL = C(R), !this.IFRAME_BASE_URL)
       throw new Error("IFRAME_BASE_URL not found");
-    r && F.set(this, { key: r });
   }
   mount(e) {
-    const r = typeof e == "string" ? document.querySelector(e) : e;
-    if (!r)
-      throw new Error(ft);
-    r.innerHTML = `<iframe width="100%" height="29" src="${this.IFRAME_BASE_URL}?field=${this.type}&origin=${location.origin}"></iframe>`, this.iframe = r.querySelector("iframe");
-    const n = (i) => {
+    const t = typeof e == "string" ? document.querySelector(e) : e;
+    if (!t)
+      throw new Error(`${k}: ${e}`);
+    t.innerHTML = `<iframe width="100%" height="29" src="${this.IFRAME_BASE_URL}?field=${this.type}&origin=${location.origin}"></iframe>`, this.iframe = t.querySelector("iframe");
+    const r = (n) => {
       var a;
-      if (!(i.source !== ((a = this.iframe) == null ? void 0 : a.contentWindow) || i.data.element !== this.type))
-        if (i.data.type === "change") {
-          const s = this.extractValue(i.data.data.value), o = { ...i.data.data };
-          delete o.value;
-          const c = F.get(this);
-          c && (c.value = s), this.emitEvent({
-            ...i.data,
-            data: o
-          });
-        } else
-          this.emitEvent(i.data);
+      n.source !== ((a = this.iframe) == null ? void 0 : a.contentWindow) || n.data.element !== this.type || this.emitEvent(n.data);
     };
-    return window.addEventListener("message", n), new Promise((i) => {
-      this.on("ready", () => {
-        this.update(this.options), i();
+    return window.addEventListener("message", r), new Promise((n) => {
+      this.on("ready", (a) => {
+        this.key = a.key, this.update(this.options), n();
       });
     });
   }
-  on(e, r) {
-    return this.subscriptions[e].push(r), {
-      unsubscribe: () => this.subscriptions[e].splice(this.subscriptions[e].indexOf(r), 1)
+  on(e, t) {
+    return this.subscriptions[e].push(t), {
+      unsubscribe: () => this.subscriptions[e].splice(this.subscriptions[e].indexOf(t), 1)
     };
   }
-  secureValue(e) {
-    const r = F.get(this);
-    return (r == null ? void 0 : r.key) !== e ? null : (r == null ? void 0 : r.value) ?? null;
-  }
   emitEvent(e) {
-    var r;
-    (r = this.subscriptions[e.type]) == null || r.forEach((n) => n(e.data));
+    var t;
+    (t = this.subscriptions[e.type]) == null || t.forEach((r) => r(e.data));
   }
   iframePostMessage(e) {
-    var r, n;
-    (n = (r = this.iframe) == null ? void 0 : r.contentWindow) == null || n.postMessage(e, this.IFRAME_BASE_URL);
+    var t, r;
+    (r = (t = this.iframe) == null ? void 0 : t.contentWindow) == null || r.postMessage(e, this.IFRAME_BASE_URL);
   }
 }
-function mt(t) {
-  return `https://${window.HG_IFRAME_HOST ?? "sdk.hellgate.io"}/web/${t}/iframe/`;
+class $ extends f {
+  constructor() {
+    super(...arguments), Object.defineProperty(this, "type", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: "cardExpirationMonth"
+    }), Object.defineProperty(this, "extractValue", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: j
+    }), Object.defineProperty(this, "putValue", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: A
+    });
+  }
+}
+function j(i) {
+  return i ? Number(i) : null;
 }
-const F = /* @__PURE__ */ new Map();
-function we(t) {
-  const [e = null, r = null] = (t ?? "").split("/").map((n) => Number(n.trim()));
-  return { month: e, year: r && r > 10 ? +`20${r}` : null };
+function A(i) {
+  return i ? i < 10 ? `0${i}` : String(i) : null;
 }
-function ge(t) {
-  if (!t)
+class U extends f {
+  constructor() {
+    super(...arguments), Object.defineProperty(this, "type", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: "cardExpirationYear"
+    }), Object.defineProperty(this, "extractValue", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: H
+    }), Object.defineProperty(this, "putValue", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: D
+    });
+  }
+}
+function H(i) {
+  if (!i)
     return null;
-  const { month: e, year: r } = t;
-  return [
-    e && e < 10 ? `0${e}` : e,
-    r && r >= 100 ? String(r).slice(-2) : r
-  ].filter(ye).join(" / ");
+  const e = Number(i);
+  return e > 10 ? +`20${e}` : null;
+}
+function D(i) {
+  return i ? i >= 100 ? String(i).slice(-2) : String(i) : null;
+}
+function T(i) {
+  const [e = null, t = null] = (i ?? "").split("/").map((r) => r.trim());
+  return {
+    month: j(e),
+    year: H(t)
+  };
 }
-class bt extends R {
+function M(i) {
+  if (!i)
+    return null;
+  const { month: e, year: t } = i;
+  return [A(e), D(t)].filter(S).join(" / ");
+}
+class V extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1072,22 +394,22 @@ class bt extends R {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: we
+      value: T
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: ge
+      value: M
     });
   }
 }
-function Ee(t) {
-  return (t == null ? void 0 : t.replaceAll(" ", "")) ?? null;
+function I(i) {
+  return (i == null ? void 0 : i.replaceAll(" ", "")) ?? null;
 }
-function yt(t) {
-  return t;
+function z(i) {
+  return i;
 }
-class wt extends R {
+class B extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1098,16 +420,16 @@ class wt extends R {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: Ee
+      value: I
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: yt
+      value: z
     });
   }
 }
-class gt extends R {
+class Y extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1119,8 +441,8 @@ class gt extends R {
       configurable: !0,
       writable: !0,
       value: (e) => e ? {
-        number: e.cardNumber ? Ee(e.cardNumber) : null,
-        expiry_date: e.cardExpirationDate ? we(e.cardExpirationDate) : null,
+        number: e.cardNumber ? I(e.cardNumber) : null,
+        expiry_date: e.cardExpirationDate ? T(e.cardExpirationDate) : null,
         cvc: e.cardVerificationCode ?? null
       } : null
     }), Object.defineProperty(this, "putValue", {
@@ -1129,13 +451,13 @@ class gt extends R {
       writable: !0,
       value: (e) => e ? {
         cardNumber: e.number ? e.number : null,
-        cardExpirationDate: e.expiry_date ? ge(e.expiry_date) : null,
+        cardExpirationDate: e.expiry_date ? M(e.expiry_date) : null,
         cardVerificationCode: e.cvc ?? null
       } : null
     });
   }
 }
-class Et extends R {
+class q extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1155,7 +477,7 @@ class Et extends R {
     });
   }
 }
-class Ae extends R {
+class K extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1175,42 +497,48 @@ class Ae extends R {
     });
   }
 }
-function T(t, e, r) {
-  switch (t) {
+function b(i, e) {
+  switch (i) {
     case "card":
-      return new gt(e, r);
+      return new Y(e);
     case "cardNumber":
-      return new wt(e, r);
+      return new B(e);
     case "cardExpirationDate":
-      return new bt(e, r);
+      return new V(e);
+    case "cardExpirationMonth":
+      return new $(e);
+    case "cardExpirationYear":
+      return new U(e);
     case "cardVerificationCode":
-      return new Et(e, r);
+      return new q(e);
     case "text":
-      return new Ae(e, r);
+      return new K(e);
     default:
-      ASSERT_EXHAUSTIVE(t);
+      ASSERT_EXHAUSTIVE(i);
   }
 }
-function At() {
-  return Date.now().toString(36) + Math.random().toString(36).slice(2);
-}
-function te(t) {
+function P(i) {
   return [
-    t.issuer_identification_number,
-    "".padEnd(t.account_number_length - t.issuer_identification_number.length - t.account_number_last_four.length, "*"),
-    t.account_number_last_four
+    i.issuer_identification_number,
+    "".padEnd(i.account_number_length - i.issuer_identification_number.length - i.account_number_last_four.length, "*"),
+    i.account_number_last_four
   ].join(" ");
 }
-class X {
-  static async init(e) {
-    return new X(e);
+class w {
+  static async init(e, t) {
+    return new w(e, t);
   }
-  constructor(e) {
+  constructor(e, t) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
       value: e
+    }), Object.defineProperty(this, "coordinator", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: t
     }), Object.defineProperty(this, "state", {
       enumerable: !0,
       configurable: !0,
@@ -1244,18 +572,15 @@ class X {
         var s;
         if (this.hasFormElements())
           throw new Error("Form elements can't be initialized twice. You can call `reset()` method or create new Hellgate client.");
-        const n = H.get(this);
-        if (!n)
-          throw new Error("Secure key not found");
-        const i = v({
+        const n = h({
           disabled: !1,
           autocomplete: "on",
-          style: { ...L }
+          style: { ...y }
         }, r);
         if (this.session.isNextAction("refresh_security_code") && ((s = this.session.state) != null && s.data)) {
           const o = this.session.state.data;
-          i.cvcOnly = !0, i.value = {
-            number: te(o),
+          n.cvcOnly = !0, n.value = {
+            number: P(o),
             expiry_date: {
               month: (o == null ? void 0 : o.expiry_month) ?? null,
               year: (o == null ? void 0 : o.expiry_year) ?? null
@@ -1263,86 +588,24 @@ class X {
             cvc: null
           };
         }
-        const a = T("card", i, n);
+        const a = b("card", n);
         return this.cardElements.card = {
           element: a,
           state: this.createFieldDefaultState()
         }, this.addElementStateListener("card"), a;
       }
-    }), Object.defineProperty(this, "createFormFields", {
-      enumerable: !0,
-      configurable: !0,
-      writable: !0,
-      value: (r = {}) => {
-        var _, S;
-        if (this.hasFormElements())
-          throw new Error("Form elements can't be initialized twice. You can call `reset()` method or create new Hellgate client.");
-        const n = H.get(this);
-        if (!n)
-          throw new Error("Secure key not found");
-        const i = {
-          disabled: this.cvcOnlyEnabled,
-          autocomplete: "on",
-          style: { ...L }
-        }, { cardNumber: a = {}, expiryDate: s = {}, securityCode: o = {}, ...c } = r, u = T("cardNumber", {
-          ...v(i, {
-            ...c,
-            ...a,
-            cvcOnly: this.cvcOnlyEnabled,
-            value: this.session.isNextAction("refresh_security_code") && ((_ = this.session.state) != null && _.data) ? te(this.session.state.data) : null
-          })
-        }, n), d = T("cardExpirationDate", {
-          ...v(i, {
-            ...c,
-            ...s,
-            value: this.session.isNextAction("refresh_security_code") && ((S = this.session.state) != null && S.data) ? {
-              month: this.session.state.data.expiry_month,
-              year: this.session.state.data.expiry_year
-            } : null
-          })
-        }, n), l = T("cardVerificationCode", {
-          ...v({
-            ...i,
-            disabled: !1,
-            autofocus: this.cvcOnlyEnabled
-          }, {
-            ...c,
-            ...o
-          })
-        }, n);
-        return u.on("change", (p) => {
-          const b = p.cardBrand;
-          l.update({ cardType: b });
-        }), this.cardElements = {
-          cardNumber: {
-            element: u,
-            state: this.createFieldDefaultState()
-          },
-          cardExpirationDate: {
-            element: d,
-            state: this.createFieldDefaultState()
-          },
-          cardVerificationCode: {
-            element: l,
-            state: this.createFieldDefaultState()
-          }
-        }, this.addElementStateListener("cardNumber"), this.addElementStateListener("cardExpirationDate"), this.addElementStateListener("cardVerificationCode"), { cardNumber: u, expiryDate: d, securityCode: l };
-      }
     }), Object.defineProperty(this, "createTextField", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
       value: (r = {}) => {
-        const n = H.get(this);
-        if (!n)
-          throw new Error("Secure key not found");
-        const i = {
+        const n = {
           disabled: !1,
           autocomplete: "on",
-          style: { ...L }
-        }, a = T("text", {
-          ...v(i, { ...r })
-        }, n);
+          style: { ...y }
+        }, a = b("text", {
+          ...h(n, { ...r })
+        });
         return this.textElements.push(a), a;
       }
     }), Object.defineProperty(this, "tokenize", {
@@ -1350,25 +613,20 @@ class X {
       configurable: !0,
       writable: !0,
       value: async (r) => {
-        var o, c;
-        if (((o = this.session.state) == null ? void 0 : o.next_action) !== "tokenize_card")
-          throw new Error(`The session's next_action='${(c = this.session.state) == null ? void 0 : c.next_action}'. tokenize() is available only if next_action='tokenize_card'`);
-        const n = this.getFormValue(), i = this.extractAdditionalData(r);
-        if (!n)
-          throw new Error("Form elements must be initialized before tokenization");
-        const a = this.getCardDataValidationError();
-        if (a)
-          throw a;
-        if (!n.number || !n.expiration_month || !n.expiration_year || !n.cvc)
-          throw new Error("Card data is not complete");
-        const s = this.session.state.data;
-        return this.encryptCardData({
-          account_number: n.number,
-          expiry_month: n.expiration_month,
-          expiry_year: n.expiration_year,
-          security_code: n.cvc,
-          additional_data: i
-        }, s.jwk);
+        var a, s;
+        if (((a = this.session.state) == null ? void 0 : a.next_action) !== "tokenize_card")
+          throw new Error(`The session's next_action='${(s = this.session.state) == null ? void 0 : s.next_action}'. tokenize() is available only if next_action='tokenize_card'`);
+        const n = this.getCardDataValidationError();
+        if (n)
+          throw n;
+        return this.coordinator.postMessage({
+          type: "card:tokenize",
+          additionalData: this.serializeAdditionalData(r)
+        }), new Promise((o) => {
+          this.coordinator.onMessage("card:tokenize:response", (l) => {
+            o(l.success ? l.result : null);
+          });
+        });
       }
     }), Object.defineProperty(this, "onStateChange", {
       enumerable: !0,
@@ -1389,7 +647,7 @@ class X {
       configurable: !0,
       writable: !0,
       value: () => {
-        Object.values(this.cardElements).forEach((r) => r == null ? void 0 : r.element.unmount()), this.textElements.forEach((r) => r == null ? void 0 : r.unmount()), this.cardElements = {}, this.textElements = [];
+        Object.values(this.cardElements).forEach((r) => r == null ? void 0 : r.element.unmount()), this.textElements.forEach((r) => r == null ? void 0 : r.unmount()), this.cardElements = {}, this.textElements = [], this.state = this.createFieldDefaultState();
       }
     }), Object.defineProperty(this, "dispose", {
       enumerable: !0,
@@ -1405,97 +663,130 @@ class X {
       value: async (r = {}) => {
         if (!this.hasFormElements())
           throw new Error("Card form must be initialized and completed before processing");
+        const n = this.getCardDataValidationError();
+        if (n)
+          throw n;
         if (this.session.isNextAction("refresh_security_code"))
           return this.refreshSecurityCode();
         this.disableFormElements(!0);
         try {
-          const n = await this.tokenize(r);
-          if (!n)
-            throw new Error("Tokenization failed");
-          return await this.session.completeAction({
-            action: "tokenize_card",
-            result: n
+          return this.coordinator.postMessage({
+            type: "card:process",
+            additionalData: this.serializeAdditionalData(r)
+          }), new Promise((a, s) => {
+            this.coordinator.onMessage("card:process:response", (o) => {
+              o.result && o.success ? a(o.result) : s(new Error(o.error));
+            });
           });
-        } catch (n) {
-          throw this.disableFormElements(!1), n;
+        } catch (a) {
+          throw this.disableFormElements(!1), a;
         }
       }
-    }), H.set(this, At()), this.cvcOnlyEnabled = this.session.isNextAction("refresh_security_code");
+    }), this.cvcOnlyEnabled = this.session.isNextAction("refresh_security_code");
+  }
+  createFormFields(e = {}) {
+    var l, c;
+    if (this.hasFormElements())
+      throw new Error("Form elements can't be initialized twice. You can call `reset()` method or create new Hellgate client.");
+    const t = {
+      disabled: this.cvcOnlyEnabled,
+      autocomplete: "on",
+      style: { ...y }
+    }, { cardNumber: r = {}, securityCode: n = {}, ...a } = e, s = b("cardNumber", {
+      ...h(t, {
+        ...a,
+        ...r,
+        cvcOnly: this.cvcOnlyEnabled,
+        value: this.session.isNextAction("refresh_security_code") && ((l = this.session.state) != null && l.data) ? P(this.session.state.data) : null
+      })
+    }), o = b("cardVerificationCode", {
+      ...h({
+        ...t,
+        disabled: !1,
+        autofocus: this.cvcOnlyEnabled
+      }, {
+        ...a,
+        ...n
+      })
+    });
+    if (s.on("change", (d) => {
+      const u = d.cardBrand;
+      o.update({ cardType: u });
+    }), this.cardElements = {
+      cardNumber: {
+        element: s,
+        state: this.createFieldDefaultState()
+      },
+      cardVerificationCode: {
+        element: o,
+        state: this.createFieldDefaultState()
+      }
+    }, this.addElementStateListener("cardNumber"), this.addElementStateListener("cardVerificationCode"), e.expiryDateElement === "separate") {
+      const { expiryMonth: d = {}, expiryYear: u = {} } = e, _ = b("cardExpirationMonth", {
+        ...h(t, {
+          ...a,
+          ...d
+        })
+      }), v = b("cardExpirationYear", {
+        ...h(t, {
+          ...a,
+          ...u
+        })
+      });
+      return this.cardElements.cardExpirationMonth = {
+        element: _,
+        state: this.createFieldDefaultState()
+      }, this.cardElements.cardExpirationYear = {
+        element: v,
+        state: this.createFieldDefaultState()
+      }, this.addElementStateListener("cardExpirationMonth"), this.addElementStateListener("cardExpirationYear"), { cardNumber: s, expiryMonth: _, expiryYear: v, securityCode: o };
+    } else {
+      const { expiryDate: d = {} } = e, u = b("cardExpirationDate", {
+        ...h(t, {
+          ...a,
+          ...d,
+          value: this.session.isNextAction("refresh_security_code") && ((c = this.session.state) != null && c.data) ? {
+            month: this.session.state.data.expiry_month,
+            year: this.session.state.data.expiry_year
+          } : null
+        })
+      });
+      return this.cardElements.cardExpirationDate = {
+        element: u,
+        state: this.createFieldDefaultState()
+      }, this.addElementStateListener("cardExpirationDate"), { cardNumber: s, expiryDate: u, securityCode: o };
+    }
   }
   async refreshSecurityCode() {
-    const e = this.getFormValue();
-    if (!(e != null && e.cvc))
-      throw new Error("cvc field was not filled");
-    if (!this.session.isNextAction("refresh_security_code") || !this.session.state)
-      throw new Error("refreshSecurityCode() is available only if next_action=refresh_security_code");
-    this.disableFormElements(!0);
-    const r = await this.encryptCardData({ security_code: e.cvc }, this.session.state.data.jwk);
-    return this.session.completeAction({
-      action: "refresh_security_code",
-      result: { ...r }
-    }).catch((n) => {
-      if (this.disableFormElements(!1), n instanceof Error)
-        throw n;
-      return { status: "failure", data: n };
+    return this.coordinator.postMessage({
+      type: "card:refresh_security_code"
+    }), new Promise((e, t) => {
+      this.coordinator.onMessage("card:refresh_security_code:response", (r) => {
+        r.result ? e(r.result) : t(new Error(r.error));
+      });
     });
   }
-  getFormValue() {
-    var s, o, c, u, d;
-    const { card: e, cardNumber: r, cardExpirationDate: n, cardVerificationCode: i } = this.cardElements;
-    let a;
-    if (e) {
-      const l = O(this, e.element);
-      a = {
-        number: (l == null ? void 0 : l.number) ?? null,
-        expiration_month: ((s = l == null ? void 0 : l.expiry_date) == null ? void 0 : s.month) ?? null,
-        expiration_year: ((o = l == null ? void 0 : l.expiry_date) == null ? void 0 : o.year) ?? null,
-        cvc: (l == null ? void 0 : l.cvc) ?? null
-      };
-    }
-    return r && n && i && (a = {
-      number: ((c = O(this, r.element)) == null ? void 0 : c.replaceAll(" ", "")) ?? null,
-      expiration_month: ((u = O(this, n.element)) == null ? void 0 : u.month) ?? null,
-      expiration_year: ((d = O(this, n.element)) == null ? void 0 : d.year) ?? null,
-      cvc: O(this, i.element)
-    }), a;
-  }
   hasFormElements() {
     return !!Object.keys(this.cardElements).length;
   }
   disableFormElements(e) {
-    Object.values(this.cardElements).forEach(({ element: r }) => {
-      r.update({ disabled: e });
-    });
-  }
-  extractAdditionalData({ cardholder_name: e, billing_address: r = {} }) {
-    return re({
-      cardholder_name: P(this, e),
-      billing_address: {
-        line1: P(this, r.line1),
-        line2: P(this, r.line2),
-        line3: P(this, r.line3),
-        city: P(this, r.city),
-        postal_code: P(this, r.postal_code)
-      }
+    Object.values(this.cardElements).forEach(({ element: t }) => {
+      t.update({ disabled: e });
     });
   }
-  async encryptCardData(e, r) {
-    const n = await Qe(r, "RSA-OAEP"), i = JSON.stringify(e), a = new TextEncoder().encode(i);
-    return { enc_payload: await new ht(a).setProtectedHeader({ alg: "RSA-OAEP", enc: "A256GCM" }).encrypt(n) };
-  }
   addElementStateListener(e) {
-    const r = this.cardElements[e];
-    r && r.element.on("change", (n) => {
-      r.state = n, this.updateFormState();
+    const t = this.cardElements[e];
+    t && t.element.on("change", (r) => {
+      t.state = r, this.updateFormState();
     });
   }
   updateFormState() {
     const e = this.cvcOnlyEnabled && this.cardElements.cardVerificationCode ? [this.cardElements.cardVerificationCode] : Object.values(this.cardElements);
-    e.length ? this.state = e.reduce((r, { state: n }) => (r.valid = !!r.valid && !!n.valid, r.complete = !!r.complete && !!n.complete, r.empty = !!r.empty && !!n.empty, r.error = r.error || n.error, r.errorCode = r.errorCode || n.errorCode, r), {
+    e.length ? this.state = e.reduce((t, { state: r }) => (t.valid = !!t.valid && !!r.valid, t.complete = !!t.complete && !!r.complete, t.empty = !!t.empty && !!r.empty, t.error = t.error || r.error, t.errorCode = t.errorCode || r.errorCode, t), {
       valid: !0,
       complete: !0,
       empty: !0
-    }) : this.state = this.createFieldDefaultState(), this.stateChangeHandlers.forEach((r) => r(this.state));
+    }) : this.state = this.createFieldDefaultState(), this.stateChangeHandlers.forEach((t) => t(this.state));
   }
   createFieldDefaultState() {
     return {
@@ -1504,6 +795,18 @@ class X {
       valid: !1
     };
   }
+  serializeAdditionalData({ cardholder_name: e, billing_address: t = {} }) {
+    return x({
+      cardholder_name: m(e),
+      billing_address: {
+        line1: m(t.line1),
+        line2: m(t.line2),
+        line3: m(t.line3),
+        city: m(t.city),
+        postal_code: m(t.postal_code)
+      }
+    });
+  }
   getCardDataValidationError() {
     if (!this.state.complete)
       return new Error(this.state.error ?? "Card data is not complete");
@@ -1511,22 +814,96 @@ class X {
       return new Error(`Card data is not valid. ${this.state.error}`);
   }
 }
-const H = /* @__PURE__ */ new Map();
-function O(t, e) {
-  const r = H.get(t);
-  return r ? e.secureValue(r) : null;
+function m(i) {
+  if (typeof i == "string")
+    return i;
+  if (i != null && i.key)
+    return { key: i.key };
 }
-function P(t, e) {
-  const r = H.get(t);
-  return e instanceof Ae && r ? O(t, e) ?? void 0 : e;
+const W = "v3.9.1";
+class G {
+  constructor() {
+    if (Object.defineProperty(this, "iframe", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: null
+    }), Object.defineProperty(this, "iframeBaseUrl", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: void 0
+    }), Object.defineProperty(this, "messageHandler", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: null
+    }), Object.defineProperty(this, "init", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: async (e, t, r) => (window.fetchMocker = { a: 1 }, new Promise((n, a) => {
+        r == null || r.signal.addEventListener("abort", () => {
+          const l = new Error("Coordinator init aborted");
+          l.name = "AbortError", a(l), this.dispose();
+        });
+        const s = document.createElement("div");
+        s.setAttribute("style", "position:absolute;width:0;height:0;overflow:hidden;"), s.setAttribute("data-hg-coordinator", ""), document.body.appendChild(s);
+        const o = `${this.iframeBaseUrl}?type=coordinator&sessionId=${e}&apiBaseUrl=${t}&origin=${encodeURIComponent(location.origin)}`;
+        if (s.innerHTML = `<iframe src="${o}" width="0" height="0" style="border:none;" tabindex="-1" aria-hidden="true"></iframe>`, this.iframe = s.querySelector("iframe"), !this.iframe) {
+          a(new Error("Failed to create coordinator iframe"));
+          return;
+        }
+        this.messageHandler = (l) => {
+          var c, d, u;
+          if (l.source === ((c = this.iframe) == null ? void 0 : c.contentWindow)) {
+            if (((d = l.data) == null ? void 0 : d.type) === "coordinator:ready") {
+              n();
+              return;
+            }
+            if (((u = l.data) == null ? void 0 : u.type) === "coordinator:error") {
+              a(l.data.error);
+              return;
+            }
+          }
+        }, window.addEventListener("message", this.messageHandler), this.iframe.addEventListener("error", () => {
+          a(new Error("Coordinator iframe failed to load"));
+        });
+      }))
+    }), this.iframeBaseUrl = C(W), !this.iframeBaseUrl)
+      throw new Error("IFRAME_BASE_URL not found");
+  }
+  /**
+   * Send a command to the coordinator iframe.
+   * Only commands and configuration — never card data.
+   */
+  postMessage(e) {
+    var t, r;
+    (r = (t = this.iframe) == null ? void 0 : t.contentWindow) == null || r.postMessage(e, this.iframeBaseUrl);
+  }
+  onMessage(e, t) {
+    window.addEventListener("message", (r) => {
+      var n, a;
+      r.source === ((n = this.iframe) == null ? void 0 : n.contentWindow) && ((a = r.data) == null ? void 0 : a.type) === e && t(r.data);
+    });
+  }
+  /**
+   * Clean up the coordinator iframe and all associated resources.
+   */
+  dispose() {
+    var t;
+    this.postMessage({ type: "coordinator:dispose" }), this.messageHandler && (window.removeEventListener("message", this.messageHandler), this.messageHandler = null);
+    const e = (t = this.iframe) == null ? void 0 : t.parentElement;
+    this.iframe = null, e == null || e.remove();
+  }
 }
-class _t {
-  constructor(e = "https://api.hellgate.io", r = new AbortController()) {
+class X {
+  constructor(e = "https://api.hellgate.io", t = new AbortController()) {
     Object.defineProperty(this, "abortCtrl", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: r
+      value: t
     }), Object.defineProperty(this, "baseUrl", {
       enumerable: !0,
       configurable: !0,
@@ -1537,26 +914,26 @@ class _t {
   getSession(e) {
     return fetch(`${this.baseUrl}/sessions/${e}`, {
       signal: this.abortCtrl.signal
-    }).then((r) => V(r));
+    }).then((t) => E(t));
   }
-  completeAction(e, r) {
+  completeAction(e, t) {
     return fetch(`${this.baseUrl}/sessions/${e}/complete-action`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
       },
       mode: "cors",
-      body: JSON.stringify(r),
+      body: JSON.stringify(t),
       signal: this.abortCtrl.signal
-    }).then((n) => V(n));
+    }).then((r) => E(r));
   }
   cancelAll() {
     this.abortCtrl.abort();
   }
 }
-const St = 2e3;
-class Ct {
-  constructor(e, r) {
+const J = 2e3;
+class Q {
+  constructor(e, t) {
     Object.defineProperty(this, "id", {
       enumerable: !0,
       configurable: !0,
@@ -1566,7 +943,7 @@ class Ct {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: r
+      value: t
     }), Object.defineProperty(this, "state", {
       enumerable: !0,
       configurable: !0,
@@ -1591,47 +968,47 @@ class Ct {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async () => new Promise((n, i) => {
+      value: async () => new Promise((r, n) => {
         const a = this.onStateChange((s) => {
-          s.next_action !== "wait" && (n(s), a());
+          s.next_action !== "wait" && (r(s), a());
         });
         this.updateSessionState().catch((s) => {
-          s instanceof Response && s.status === 404 && i(new Error(`Session ${this.id} doesn't exist or has expired`)), i(s);
+          s instanceof Response && s.status === 404 && n(new Error(`Session ${this.id} doesn't exist or has expired`)), n(s);
         });
       })
     }), Object.defineProperty(this, "onStateChange", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => (this.stateChangeHandlers.push(n), this.state && n(this.state), () => this.stateChangeHandlers = this.stateChangeHandlers.filter((i) => i !== n))
+      value: (r) => (this.stateChangeHandlers.push(r), this.state && r(this.state), () => this.stateChangeHandlers = this.stateChangeHandlers.filter((n) => n !== r))
     }), Object.defineProperty(this, "onClose", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        var i;
-        return ((i = this.state) == null ? void 0 : i.next_action) === null ? (n(B(this.state)), () => {
-        }) : (this.onCloseHandlers.push(n), () => this.onCloseHandlers = this.onCloseHandlers.filter((a) => a !== n));
+      value: (r) => {
+        var n;
+        return ((n = this.state) == null ? void 0 : n.next_action) === null ? (r(g(this.state)), () => {
+        }) : (this.onCloseHandlers.push(r), () => this.onCloseHandlers = this.onCloseHandlers.filter((a) => a !== r));
       }
     }), Object.defineProperty(this, "completeAction", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async (n) => {
-        const i = this.state;
+      value: async (r) => {
+        const n = this.state;
         return new Promise((a, s) => {
-          const o = this.onStateChange((c) => {
-            c.next_action !== (i == null ? void 0 : i.next_action) && c.next_action === null && (a(B(c)), o());
+          const o = this.onStateChange((l) => {
+            l.next_action !== (n == null ? void 0 : n.next_action) && l.next_action === null && (a(g(l)), o());
           });
-          this.api.completeAction(this.id, n).then((c) => this.newStateHandle(c, s)).catch(async (c) => s(await Pt(c)));
+          this.api.completeAction(this.id, r).then((l) => this.newStateHandle(l, s)).catch(async (l) => s(await Z(l)));
         });
       }
     }), Object.defineProperty(this, "completeSession", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onCloseHandlers.forEach((i) => i(n)), this.stop();
+      value: (r) => {
+        this.onCloseHandlers.forEach((n) => n(r)), this.stop();
       }
     }), Object.defineProperty(this, "dispose", {
       enumerable: !0,
@@ -1643,46 +1020,51 @@ class Ct {
     });
   }
   isNextAction(e) {
-    var r;
-    return ((r = this.state) == null ? void 0 : r.next_action) === e;
+    var t;
+    return ((t = this.state) == null ? void 0 : t.next_action) === e;
   }
   stop() {
     window.clearTimeout(this.pollingTimer), this.stateChangeHandlers = [], this.onCloseHandlers = [];
   }
   async updateSessionState(e) {
-    const r = await this.api.getSession(this.id);
-    this.newStateHandle(r, e);
+    const t = await this.api.getSession(this.id);
+    this.newStateHandle(t, e);
   }
-  newStateHandle(e, r) {
-    var n;
+  newStateHandle(e, t) {
+    var r;
     switch (!e.next_action && e.status && (e.next_action = null), e.next_action) {
       case "wait": {
-        window.clearTimeout(this.pollingTimer), this.pollingTimer = window.setTimeout(() => this.updateSessionState(r).catch((i) => {
-          i instanceof Response && i.status === 404 && (r == null || r(new Error(`Session ${this.id} has expired`)));
-        }), St);
+        window.clearTimeout(this.pollingTimer), this.pollingTimer = window.setTimeout(() => this.updateSessionState(t).catch((n) => {
+          n instanceof Response && n.status === 404 && (t == null || t(new Error(`Session ${this.id} has expired`)));
+        }), J);
         break;
       }
     }
-    e.next_action !== ((n = this.state) == null ? void 0 : n.next_action) && this.stateChangeHandlers.forEach((i) => i(e)), e.next_action === null && this.completeSession(B(e)), this.state = e;
+    e.next_action !== ((r = this.state) == null ? void 0 : r.next_action) && this.stateChangeHandlers.forEach((n) => n(e)), e.next_action === null && this.completeSession(g(e)), this.state = e;
   }
 }
-async function Pt(t) {
-  return !t.ok && t.status >= 400 && t.status <= 500 ? t.json() : t;
+async function Z(i) {
+  return !i.ok && i.status >= 400 && i.status <= 500 ? i.json() : i;
 }
-function B(t) {
-  const e = { ...t };
+function g(i) {
+  const e = { ...i };
   return delete e.next_action, e;
 }
-const vt = {
+const ee = {
   base_url: "https://api.hellgate.io"
 };
-class _e {
-  constructor(e, r) {
+class L {
+  constructor(e, t, r) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
       value: e
+    }), Object.defineProperty(this, "coordinator", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: t
     }), Object.defineProperty(this, "paymentFlowHandlers", {
       enumerable: !0,
       configurable: !0,
@@ -1693,7 +1075,7 @@ class _e {
       configurable: !0,
       writable: !0,
       value: () => {
-        this.session.dispose(), Object.values(this.paymentFlowHandlers).forEach((n) => n == null ? void 0 : n.dispose());
+        this.session.dispose(), this.coordinator.dispose(), Object.values(this.paymentFlowHandlers).forEach((n) => n == null ? void 0 : n.dispose());
       }
     }), Object.defineProperty(this, "onSessionComplete", {
       enumerable: !0,
@@ -1707,46 +1089,47 @@ class _e {
   use(e) {
     return this.paymentFlowHandlers[e];
   }
-  static async init(e, r = {}) {
-    const { session: n, cardHandler: i, handler3DS: a } = await this.initHandlers(e, r);
-    return new _e(n, {
-      CARD: i,
-      "3DS": a
+  static async init(e, t = {}) {
+    const { session: r, coordinator: n, cardHandler: a, handler3DS: s } = await this.initHandlers(e, t);
+    return new L(r, n, {
+      CARD: a,
+      "3DS": s
     });
   }
-  static async initHandlers(e, r) {
-    const n = {
-      ...vt,
-      ...r
-    }, i = new _t(n.base_url, n.abortCtrl), a = new Ct(e, i);
-    await a.init();
-    const s = a.isNextAction("tokenize_card") || a.isNextAction("refresh_security_code") ? await this.createCardHandler(a) : void 0, o = this.create3DSHandler(a, r);
-    return { session: a, cardHandler: s, handler3DS: o };
-  }
-  static createCardHandler(e) {
-    return X.init(e);
-  }
-  static create3DSHandler(e, r) {
-    return new Pe(e, {
-      domContainer: r.challenge_3ds_container,
-      labelText: r.challenge_3ds_label_text
+  static async initHandlers(e, t) {
+    const r = {
+      ...ee,
+      ...t
+    }, n = new X(r.base_url, r.abortCtrl), a = new Q(e, n), s = new G();
+    s.onMessage("coordinator:session_state_change", (c) => {
+      c.state.next_action !== "wait" && a.newStateHandle(c.state);
+    }), await s.init(e, r.base_url, r.abortCtrl);
+    const o = a.isNextAction("tokenize_card") || a.isNextAction("refresh_security_code") ? await this.createCardHandler(a, s) : void 0, l = this.create3DSHandler(a, t);
+    return { session: a, coordinator: s, cardHandler: o, handler3DS: l };
+  }
+  static createCardHandler(e, t) {
+    return w.init(e, t);
+  }
+  static create3DSHandler(e, t) {
+    return new F(e, {
+      domContainer: t.challenge_3ds_container,
+      labelText: t.challenge_3ds_label_text
     });
   }
 }
 globalThis.HellgateSDK && (globalThis.Hellgate = globalThis.HellgateSDK.Hellgate, delete globalThis.HellgateSDK);
 export {
-  gt as CardElement,
-  bt as CardExpirationDateElement,
-  wt as CardNumberElement,
-  Et as CardVerificationCodeElement,
-  _e as Hellgate,
-  Pe as Hellgate3DSHandler,
-  X as HellgateCardHandler,
-  Ae as TextElement,
-  T as createElement,
-  Ee as extractCardNumberValue,
-  we as extractExpiryDateValue,
-  yt as putCardNumberValue,
-  ge as putExpiryDateValue,
-  At as uid
+  Y as CardElement,
+  V as CardExpirationDateElement,
+  B as CardNumberElement,
+  q as CardVerificationCodeElement,
+  L as Hellgate,
+  F as Hellgate3DSHandler,
+  w as HellgateCardHandler,
+  K as TextElement,
+  b as createElement,
+  I as extractCardNumberValue,
+  T as extractExpiryDateValue,
+  z as putCardNumberValue,
+  M as putExpiryDateValue
 };