@starfish-codes/hellgate 3.9.0 → 3.10.0

package/dist/hellgate-sdk.mjs

@@ -1,25 +1,28 @@
-function re(t) {
-  return Array.isArray(t) ? t.filter(Boolean) : Object.fromEntries(Object.entries(t).map(([e, r]) => [
+function C(i) {
+  return Array.isArray(i) ? i.filter(Boolean) : Object.fromEntries(Object.entries(i).map(([e, t]) => [
     e,
-    typeof r == "object" && r && !Array.isArray(r) ? re(r) : r
-  ]).filter(([e, r]) => typeof r == "object" && r && !Array.isArray(r) ? !!Object.keys(r).length : r != null && r != null));
+    typeof t == "object" && t && !Array.isArray(t) ? C(t) : t
+  ]).filter(([e, t]) => typeof t == "object" && t && !Array.isArray(t) ? !!Object.keys(t).length : t != null && t != null));
 }
-function C(t, e) {
-  const r = { ...t, ...e }, n = Object.keys(r);
-  for (const i of n) {
-    const a = t[i], s = e[i];
-    typeof a == "object" && !Array.isArray(a) && a && typeof s == "object" && !Array.isArray(s) && s && (r[i] = C(a, s));
+function h(i, e) {
+  const t = { ...i, ...e }, r = Object.keys(t);
+  for (const n of r) {
+    const a = i[n], s = e[n];
+    typeof a == "object" && !Array.isArray(a) && a && typeof s == "object" && !Array.isArray(s) && s && (t[n] = h(a, s));
   }
-  return r;
+  return t;
+}
+function E(i) {
+  if (!i.ok)
+    throw i;
+  return i.json();
 }
-function V(t) {
-  if (!t.ok)
-    throw t;
-  return t.json();
+function S(i) {
+  return `https://${window.HG_IFRAME_HOST ?? "sdk.hellgate.io"}/web/${i}/iframe/`;
 }
-const xe = 2e3;
-class He {
-  constructor(e, r) {
+const F = 2e3;
+class k {
+  constructor(e, t) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
@@ -79,40 +82,40 @@ class He {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.decoupledAuthHandlers.push(n);
+      value: (r) => {
+        this.decoupledAuthHandlers.push(r);
       }
     }), Object.defineProperty(this, "onStartChallenge", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onStartHandler = n;
+      value: (r) => {
+        this.onStartHandler = r;
       }
     }), Object.defineProperty(this, "onChallengeFinished", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onFinishHandler = n;
+      value: (r) => {
+        this.onFinishHandler = r;
       }
     }), Object.defineProperty(this, "sessionStateHandle", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        var i, a;
-        switch (n.next_action) {
+      value: (r) => {
+        var n, a;
+        switch (r.next_action) {
           case "3ds_check": {
-            this.initCheck3DSIframes(n.data.threeds_server_callback_url, n.data.mon_url);
+            this.initCheck3DSIframes(r.data.threeds_server_callback_url, r.data.mon_url);
             break;
           }
           case "3ds_challenge": {
-            (i = this.onStartHandler) == null || i.call(this), this.disposeCheck3DSIframe(), this.startChallenge(n.data.challenge_url, n.data.result_mon_url);
+            (n = this.onStartHandler) == null || n.call(this), this.disposeCheck3DSIframe(), this.startChallenge(r.data.challenge_url, r.data.result_mon_url);
             break;
           }
           case "3ds_challenge_decoupled": {
-            this.startDecoupledAuth(n.data.cardholder_info, n.data.result_mon_url, n.data.transaction_id);
+            this.startDecoupledAuth(r.data.cardholder_info, r.data.result_mon_url, r.data.transaction_id);
             break;
           }
           case null: {
@@ -121,820 +124,98 @@ class He {
           }
         }
       }
-    }), this.domContainer = r.domContainer ?? I(), this.disposers.push(this.session.onStateChange(this.sessionStateHandle)), this.labelText = r.labelText;
+    }), this.domContainer = t.domContainer ?? p(), this.disposers.push(this.session.onStateChange(this.sessionStateHandle)), this.labelText = t.labelText;
   }
   dispose() {
     this.disposers.forEach((e) => e()), this.check3dsIframeDisposers.forEach((e) => e());
   }
-  initCheck3DSIframes(e, r) {
-    const n = I();
-    n.insertAdjacentHTML("beforeend", `<iframe id="check_3ds_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${e}"></iframe>`);
-    const i = n.querySelector(`#check_3ds_${this.iframeId}`);
-    if (i) {
+  initCheck3DSIframes(e, t) {
+    const r = p();
+    r.insertAdjacentHTML("beforeend", `<iframe id="check_3ds_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${e}"></iframe>`);
+    const n = r.querySelector(`#check_3ds_${this.iframeId}`);
+    if (n) {
       const a = (s) => {
-        s.source === i.contentWindow && this.session.completeAction({ action: "3ds_check", result: s.data });
+        s.source === n.contentWindow && this.session.completeAction({ action: "3ds_check", result: s.data });
       };
-      window.addEventListener("message", a), this.check3dsIframeDisposers.push(() => window.removeEventListener("message", a), () => i.remove());
+      window.addEventListener("message", a), this.check3dsIframeDisposers.push(() => window.removeEventListener("message", a), () => n.remove());
     }
-    if (r) {
-      n.insertAdjacentHTML("beforeend", `<iframe id="mon_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${r}"></iframe>`);
-      const a = n.querySelector(`#mon_${this.iframeId}`);
+    if (t) {
+      r.insertAdjacentHTML("beforeend", `<iframe id="mon_${this.iframeId}" width="0" height="0" style="border:0;visibility: hidden;" src="${t}"></iframe>`);
+      const a = r.querySelector(`#mon_${this.iframeId}`);
       a && this.disposers.push(() => a.remove());
     }
   }
   disposeCheck3DSIframe() {
     this.check3dsIframeDisposers.forEach((e) => e()), this.check3dsIframeDisposers = [];
   }
-  startChallenge(e, r) {
-    const n = I(), i = `<div style="display: flex; flex-direction: column; gap: 10px; align-items: center; ${this.domContainer === n ? 'border:0; max-width: 800px; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%); width:100% " ' : 'border:0;" width="100%" height="100%"'}><iframe id="cha_${this.iframeId}" src="${e}"  width="100%" height="500"></iframe>${this.labelText ? '<span id="tds_label_text" style="font-size: large;">' + this.labelText + "</span>" : ""}<div>`;
-    this.domContainer.insertAdjacentHTML("beforeend", this.domContainer === n ? `<div id="cha_${this.iframeId}_wrap" style="background: #fff; position: fixed; left: 0; top: 0; width: 100%; height: 100%; z-index: 10000;">${i}</div>` : i);
+  startChallenge(e, t) {
+    const r = p(), n = `<div style="display: flex; flex-direction: column; gap: 10px; align-items: center; ${this.domContainer === r ? 'border:0; max-width: 800px; position: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%); width:100% " ' : 'border:0;" width="100%" height="100%"'}><iframe id="cha_${this.iframeId}" src="${e}"  width="100%" height="500"></iframe>${this.labelText ? '<span id="tds_label_text" style="font-size: large;">' + this.labelText + "</span>" : ""}<div>`;
+    this.domContainer.insertAdjacentHTML("beforeend", this.domContainer === r ? `<div id="cha_${this.iframeId}_wrap" style="background: #fff; position: fixed; left: 0; top: 0; width: 100%; height: 100%; z-index: 10000;">${n}</div>` : n);
     const a = this.domContainer.querySelector(`#cha_${this.iframeId}`), s = this.domContainer.querySelector(`#cha_${this.iframeId}_wrap`);
     if (!a)
       throw new Error("3DS Challenge Iframe initialization failed");
     this.disposers.push(() => {
       a.remove(), s == null || s.remove();
     });
-    const o = new Promise((u) => {
-      const d = (h) => {
-        h.source !== a.contentWindow || h.data.event !== "AuthResultReady" || u(h.data);
+    const o = new Promise((c) => {
+      const d = (u) => {
+        u.source !== a.contentWindow || u.data.event !== "AuthResultReady" || c({
+          ...u.data,
+          requestor_trans_id: u.data.requestor_trans_id ?? u.data.requestorTransId,
+          // TODO: remove this field after the backend is updated
+          requestorTransId: void 0,
+          param: u.data.param || void 0
+        });
       };
       window.addEventListener("message", d), this.disposers.push(() => window.removeEventListener("message", d));
-    }), c = new Promise((u) => {
-      const d = this.startAuthResultPolling(r, (h) => {
-        h.event === "AuthResultReady" && (d(), u({
-          requestor_trans_id: h.threeDSRequestorTransID,
-          event: h.event
+    }), l = new Promise((c) => {
+      const d = this.startAuthResultPolling(t, (u) => {
+        u.event === "AuthResultReady" && (d(), c({
+          requestor_trans_id: u.threeDSRequestorTransID,
+          event: u.event
         }));
       });
     });
-    Promise.any([o, c]).then((u) => {
+    Promise.any([o, l]).then((c) => {
       this.session.completeAction({
         action: "3ds_challenge",
-        result: u
+        result: c
       });
     });
   }
-  startDecoupledAuth(e, r, n) {
-    this.transactionId || (this.transactionId = n), this.decoupledAuthHandlers.forEach((a) => a(e));
-    const i = this.startAuthResultPolling(r, (a) => {
+  startDecoupledAuth(e, t, r) {
+    this.transactionId || (this.transactionId = r), this.decoupledAuthHandlers.forEach((a) => a(e));
+    const n = this.startAuthResultPolling(t, (a) => {
       a.event === "AuthResultReady" && (this.session.completeAction({
         action: "3ds_challenge_decoupled",
         result: { ...a, event: a.event }
-      }), i());
+      }), n());
     });
   }
-  startAuthResultPolling(e, r) {
-    return window.clearTimeout(this.resultPollingTimer), this.resultPollingTimer = window.setTimeout(() => fetch(e).then((n) => V(n)).then((n) => {
-      this.startAuthResultPolling(e, r), r(n);
+  startAuthResultPolling(e, t) {
+    return window.clearTimeout(this.resultPollingTimer), this.resultPollingTimer = window.setTimeout(() => fetch(e).then((r) => E(r)).then((r) => {
+      this.startAuthResultPolling(e, t), t(r);
     }).catch(() => {
-    }), xe), () => window.clearTimeout(this.resultPollingTimer);
+    }), F), () => window.clearTimeout(this.resultPollingTimer);
   }
 }
-function I() {
+function p() {
   return document.body;
 }
-const f = crypto, A = (t) => t instanceof CryptoKey, Ke = async (t, e) => {
-  const r = `SHA-${t.slice(-3)}`;
-  return new Uint8Array(await f.subtle.digest(r, e));
-}, O = new TextEncoder(), ne = new TextDecoder(), R = 2 ** 32;
-function M(...t) {
-  const e = t.reduce((i, { length: a }) => i + a, 0), r = new Uint8Array(e);
-  let n = 0;
-  for (const i of t)
-    r.set(i, n), n += i.length;
-  return r;
-}
-function Te(t, e) {
-  return M(O.encode(t), new Uint8Array([0]), e);
-}
-function J(t, e, r) {
-  if (e < 0 || e >= R)
-    throw new RangeError(`value must be >= 0 and <= ${R - 1}. Received ${e}`);
-  t.set([e >>> 24, e >>> 16, e >>> 8, e & 255], r);
-}
-function De(t) {
-  const e = Math.floor(t / R), r = t % R, n = new Uint8Array(8);
-  return J(n, e, 0), J(n, r, 4), n;
-}
-function Y(t) {
-  const e = new Uint8Array(4);
-  return J(e, t), e;
-}
-function U(t) {
-  return M(Y(t.length), t);
-}
-async function Me(t, e, r) {
-  const n = Math.ceil((e >> 3) / 32), i = new Uint8Array(n * 32);
-  for (let a = 0; a < n; a++) {
-    const s = new Uint8Array(4 + t.length + r.length);
-    s.set(Y(a + 1)), s.set(t, 4), s.set(r, 4 + t.length), i.set(await Ke("sha256", s), a * 32);
-  }
-  return i.slice(0, e >> 3);
-}
-const je = (t) => {
-  let e = t;
-  typeof e == "string" && (e = O.encode(e));
-  const r = 32768, n = [];
-  for (let i = 0; i < e.length; i += r)
-    n.push(String.fromCharCode.apply(null, e.subarray(i, i + r)));
-  return btoa(n.join(""));
-}, w = (t) => je(t).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_"), Re = (t) => {
-  const e = atob(t), r = new Uint8Array(e.length);
-  for (let n = 0; n < e.length; n++)
-    r[n] = e.charCodeAt(n);
-  return r;
-}, ie = (t) => {
-  let e = t;
-  e instanceof Uint8Array && (e = ne.decode(e)), e = e.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
-  try {
-    return Re(e);
-  } catch {
-    throw new TypeError("The input to be decoded is not correctly encoded.");
-  }
-};
-class ae extends Error {
-  static get code() {
-    return "ERR_JOSE_GENERIC";
-  }
-  constructor(e) {
-    var r;
-    super(e), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
-  }
-}
-class b extends ae {
-  constructor() {
-    super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
-  }
-  static get code() {
-    return "ERR_JOSE_NOT_SUPPORTED";
-  }
-}
-class P extends ae {
-  constructor() {
-    super(...arguments), this.code = "ERR_JWE_INVALID";
-  }
-  static get code() {
-    return "ERR_JWE_INVALID";
-  }
-}
-const k = f.getRandomValues.bind(f);
-function se(t) {
-  switch (t) {
-    case "A128GCM":
-    case "A128GCMKW":
-    case "A192GCM":
-    case "A192GCMKW":
-    case "A256GCM":
-    case "A256GCMKW":
-      return 96;
-    case "A128CBC-HS256":
-    case "A192CBC-HS384":
-    case "A256CBC-HS512":
-      return 128;
-    default:
-      throw new b(`Unsupported JWE Algorithm: ${t}`);
-  }
-}
-const Ie = (t) => k(new Uint8Array(se(t) >> 3)), Ue = (t, e) => {
-  if (e.length << 3 !== se(t))
-    throw new P("Invalid Initialization Vector length");
-}, Z = (t, e) => {
-  const r = t.byteLength << 3;
-  if (r !== e)
-    throw new P(`Invalid Content Encryption Key length. Expected ${e} bits, got ${r} bits`);
-};
-function S(t, e = "algorithm.name") {
-  return new TypeError(`CryptoKey does not support this operation, its ${e} must be ${t}`);
-}
-function j(t, e) {
-  return t.name === e;
-}
-function $e(t) {
-  return parseInt(t.name.slice(4), 10);
-}
-function We(t, e) {
-  if (e.length && !e.some((r) => t.usages.includes(r))) {
-    let r = "CryptoKey does not support this operation, its usages must include ";
-    if (e.length > 2) {
-      const n = e.pop();
-      r += `one of ${e.join(", ")}, or ${n}.`;
-    } else e.length === 2 ? r += `one of ${e[0]} or ${e[1]}.` : r += `${e[0]}.`;
-    throw new TypeError(r);
-  }
-}
-function T(t, e, ...r) {
-  switch (e) {
-    case "A128GCM":
-    case "A192GCM":
-    case "A256GCM": {
-      if (!j(t.algorithm, "AES-GCM"))
-        throw S("AES-GCM");
-      const n = parseInt(e.slice(1, 4), 10);
-      if (t.algorithm.length !== n)
-        throw S(n, "algorithm.length");
-      break;
-    }
-    case "A128KW":
-    case "A192KW":
-    case "A256KW": {
-      if (!j(t.algorithm, "AES-KW"))
-        throw S("AES-KW");
-      const n = parseInt(e.slice(1, 4), 10);
-      if (t.algorithm.length !== n)
-        throw S(n, "algorithm.length");
-      break;
-    }
-    case "ECDH": {
-      switch (t.algorithm.name) {
-        case "ECDH":
-        case "X25519":
-        case "X448":
-          break;
-        default:
-          throw S("ECDH, X25519, or X448");
-      }
-      break;
-    }
-    case "PBES2-HS256+A128KW":
-    case "PBES2-HS384+A192KW":
-    case "PBES2-HS512+A256KW":
-      if (!j(t.algorithm, "PBKDF2"))
-        throw S("PBKDF2");
-      break;
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512": {
-      if (!j(t.algorithm, "RSA-OAEP"))
-        throw S("RSA-OAEP");
-      const n = parseInt(e.slice(9), 10) || 1;
-      if ($e(t.algorithm.hash) !== n)
-        throw S(`SHA-${n}`, "algorithm.hash");
-      break;
-    }
-    default:
-      throw new TypeError("CryptoKey does not support this operation");
-  }
-  We(t, r);
-}
-function oe(t, e, ...r) {
-  var n;
-  if (r.length > 2) {
-    const i = r.pop();
-    t += `one of type ${r.join(", ")}, or ${i}.`;
-  } else r.length === 2 ? t += `one of type ${r[0]} or ${r[1]}.` : t += `of type ${r[0]}.`;
-  return e == null ? t += ` Received ${e}` : typeof e == "function" && e.name ? t += ` Received function ${e.name}` : typeof e == "object" && e != null && (n = e.constructor) != null && n.name && (t += ` Received an instance of ${e.constructor.name}`), t;
-}
-const _ = (t, ...e) => oe("Key must be ", t, ...e);
-function ce(t, e, ...r) {
-  return oe(`Key for the ${t} algorithm must be `, e, ...r);
-}
-const le = (t) => A(t) ? !0 : (t == null ? void 0 : t[Symbol.toStringTag]) === "KeyObject", g = ["CryptoKey"], Ne = (...t) => {
-  const e = t.filter(Boolean);
-  if (e.length === 0 || e.length === 1)
-    return !0;
-  let r;
-  for (const n of e) {
-    const i = Object.keys(n);
-    if (!r || r.size === 0) {
-      r = new Set(i);
-      continue;
-    }
-    for (const a of i) {
-      if (r.has(a))
-        return !1;
-      r.add(a);
-    }
-  }
-  return !0;
-};
-function Le(t) {
-  return typeof t == "object" && t !== null;
-}
-function Fe(t) {
-  if (!Le(t) || Object.prototype.toString.call(t) !== "[object Object]")
-    return !1;
-  if (Object.getPrototypeOf(t) === null)
-    return !0;
-  let e = t;
-  for (; Object.getPrototypeOf(e) !== null; )
-    e = Object.getPrototypeOf(e);
-  return Object.getPrototypeOf(t) === e;
-}
-const ue = [
-  { hash: "SHA-256", name: "HMAC" },
-  !0,
-  ["sign"]
-];
-function Be(t, e) {
-  if (t.algorithm.length !== parseInt(e.slice(1, 4), 10))
-    throw new TypeError(`Invalid key size for alg: ${e}`);
-}
-function Ve(t, e, r) {
-  if (A(t))
-    return T(t, e, r), t;
-  if (t instanceof Uint8Array)
-    return f.subtle.importKey("raw", t, "AES-KW", !0, [r]);
-  throw new TypeError(_(t, ...g, "Uint8Array"));
-}
-const z = async (t, e, r) => {
-  const n = await Ve(e, t, "wrapKey");
-  Be(n, t);
-  const i = await f.subtle.importKey("raw", r, ...ue);
-  return new Uint8Array(await f.subtle.wrapKey("raw", i, n, "AES-KW"));
-};
-async function Je(t, e, r, n, i = new Uint8Array(0), a = new Uint8Array(0)) {
-  if (!A(t))
-    throw new TypeError(_(t, ...g));
-  if (T(t, "ECDH"), !A(e))
-    throw new TypeError(_(e, ...g));
-  T(e, "ECDH", "deriveBits");
-  const s = M(U(O.encode(r)), U(i), U(a), Y(n));
-  let o;
-  t.algorithm.name === "X25519" ? o = 256 : t.algorithm.name === "X448" ? o = 448 : o = Math.ceil(parseInt(t.algorithm.namedCurve.substr(-3), 10) / 8) << 3;
-  const c = new Uint8Array(await f.subtle.deriveBits({
-    name: t.algorithm.name,
-    public: t
-  }, e, o));
-  return Me(c, n, s);
-}
-async function ze(t) {
-  if (!A(t))
-    throw new TypeError(_(t, ...g));
-  return f.subtle.generateKey(t.algorithm, !0, ["deriveBits"]);
-}
-function Ge(t) {
-  if (!A(t))
-    throw new TypeError(_(t, ...g));
-  return ["P-256", "P-384", "P-521"].includes(t.algorithm.namedCurve) || t.algorithm.name === "X25519" || t.algorithm.name === "X448";
-}
-function Ye(t) {
-  if (!(t instanceof Uint8Array) || t.length < 8)
-    throw new P("PBES2 Salt Input must be 8 or more octets");
-}
-function ke(t, e) {
-  if (t instanceof Uint8Array)
-    return f.subtle.importKey("raw", t, "PBKDF2", !1, ["deriveBits"]);
-  if (A(t))
-    return T(t, e, "deriveBits", "deriveKey"), t;
-  throw new TypeError(_(t, ...g, "Uint8Array"));
-}
-async function qe(t, e, r, n) {
-  Ye(t);
-  const i = Te(e, t), a = parseInt(e.slice(13, 16), 10), s = {
-    hash: `SHA-${e.slice(8, 11)}`,
-    iterations: r,
-    name: "PBKDF2",
-    salt: i
-  }, o = {
-    length: a,
-    name: "AES-KW"
-  }, c = await ke(n, e);
-  if (c.usages.includes("deriveBits"))
-    return new Uint8Array(await f.subtle.deriveBits(s, c, a));
-  if (c.usages.includes("deriveKey"))
-    return f.subtle.deriveKey(s, c, o, !1, ["wrapKey", "unwrapKey"]);
-  throw new TypeError('PBKDF2 key "usages" must include "deriveBits" or "deriveKey"');
-}
-const Xe = async (t, e, r, n = 2048, i = k(new Uint8Array(16))) => {
-  const a = await qe(i, t, n, e);
-  return { encryptedKey: await z(t.slice(-6), a, r), p2c: n, p2s: w(i) };
-};
-function Q(t) {
-  switch (t) {
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512":
-      return "RSA-OAEP";
-    default:
-      throw new b(`alg ${t} is not supported either by JOSE or your javascript runtime`);
-  }
-}
-const Ze = (t, e) => {
-  if (t.startsWith("RS") || t.startsWith("PS")) {
-    const { modulusLength: r } = e.algorithm;
-    if (typeof r != "number" || r < 2048)
-      throw new TypeError(`${t} requires key modulusLength to be 2048 bits or larger`);
-  }
-}, Qe = async (t, e, r) => {
-  if (!A(e))
-    throw new TypeError(_(e, ...g));
-  if (T(e, t, "encrypt", "wrapKey"), Ze(t, e), e.usages.includes("encrypt"))
-    return new Uint8Array(await f.subtle.encrypt(Q(t), e, r));
-  if (e.usages.includes("wrapKey")) {
-    const n = await f.subtle.importKey("raw", r, ...ue);
-    return new Uint8Array(await f.subtle.wrapKey("raw", n, e, Q(t)));
-  }
-  throw new TypeError('RSA-OAEP key "usages" must include "encrypt" or "wrapKey" for this operation');
-};
-function et(t) {
-  let e, r;
-  switch (t.kty) {
-    case "RSA": {
-      switch (t.alg) {
-        case "PS256":
-        case "PS384":
-        case "PS512":
-          e = { name: "RSA-PSS", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "RS256":
-        case "RS384":
-        case "RS512":
-          e = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${t.alg.slice(-3)}` }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "RSA-OAEP":
-        case "RSA-OAEP-256":
-        case "RSA-OAEP-384":
-        case "RSA-OAEP-512":
-          e = {
-            name: "RSA-OAEP",
-            hash: `SHA-${parseInt(t.alg.slice(-3), 10) || 1}`
-          }, r = t.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
-          break;
-        default:
-          throw new b('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    case "EC": {
-      switch (t.alg) {
-        case "ES256":
-          e = { name: "ECDSA", namedCurve: "P-256" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ES384":
-          e = { name: "ECDSA", namedCurve: "P-384" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ES512":
-          e = { name: "ECDSA", namedCurve: "P-521" }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          e = { name: "ECDH", namedCurve: t.crv }, r = t.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new b('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    case "OKP": {
-      switch (t.alg) {
-        case "EdDSA":
-          e = { name: t.crv }, r = t.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          e = { name: t.crv }, r = t.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new b('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-      }
-      break;
-    }
-    default:
-      throw new b('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
-  }
-  return { algorithm: e, keyUsages: r };
-}
-const de = async (t) => {
-  if (!t.alg)
-    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: e, keyUsages: r } = et(t), n = [
-    e,
-    t.ext ?? !1,
-    t.key_ops ?? r
-  ], i = { ...t };
-  return delete i.alg, delete i.use, f.subtle.importKey("jwk", i, ...n);
-}, he = (t) => ie(t);
-let $, W;
-const fe = (t) => (t == null ? void 0 : t[Symbol.toStringTag]) === "KeyObject", pe = async (t, e, r, n) => {
-  let i = t.get(e);
-  if (i != null && i[n])
-    return i[n];
-  const a = await de({ ...r, alg: n });
-  return i ? i[n] = a : t.set(e, { [n]: a }), a;
-}, tt = (t, e) => {
-  if (fe(t)) {
-    let r = t.export({ format: "jwk" });
-    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? he(r.k) : (W || (W = /* @__PURE__ */ new WeakMap()), pe(W, t, r, e));
-  }
-  return t;
-}, rt = (t, e) => {
-  if (fe(t)) {
-    let r = t.export({ format: "jwk" });
-    return r.k ? he(r.k) : ($ || ($ = /* @__PURE__ */ new WeakMap()), pe($, t, r, e));
-  }
-  return t;
-}, N = { normalizePublicKey: tt, normalizePrivateKey: rt };
-function me(t) {
-  switch (t) {
-    case "A128GCM":
-      return 128;
-    case "A192GCM":
-      return 192;
-    case "A256GCM":
-    case "A128CBC-HS256":
-      return 256;
-    case "A192CBC-HS384":
-      return 384;
-    case "A256CBC-HS512":
-      return 512;
-    default:
-      throw new b(`Unsupported JWE Algorithm: ${t}`);
-  }
-}
-const D = (t) => k(new Uint8Array(me(t) >> 3));
-async function nt(t, e) {
-  if (!Fe(t))
-    throw new TypeError("JWK must be an object");
-  switch (t.kty) {
-    case "oct":
-      if (typeof t.k != "string" || !t.k)
-        throw new TypeError('missing "k" (Key Value) Parameter value');
-      return ie(t.k);
-    case "RSA":
-      if (t.oth !== void 0)
-        throw new b('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-    case "EC":
-    case "OKP":
-      return de({ ...t, alg: e });
-    default:
-      throw new b('Unsupported "kty" (Key Type) Parameter value');
-  }
-}
-const G = (t) => t == null ? void 0 : t[Symbol.toStringTag], it = (t, e) => {
-  if (!(e instanceof Uint8Array)) {
-    if (!le(e))
-      throw new TypeError(ce(t, e, ...g, "Uint8Array"));
-    if (e.type !== "secret")
-      throw new TypeError(`${G(e)} instances for symmetric algorithms must be of type "secret"`);
-  }
-}, at = (t, e, r) => {
-  if (!le(e))
-    throw new TypeError(ce(t, e, ...g));
-  if (e.type === "secret")
-    throw new TypeError(`${G(e)} instances for asymmetric algorithms must not be of type "secret"`);
-  if (e.algorithm, e.algorithm && r === "encrypt" && e.type === "private")
-    throw new TypeError(`${G(e)} instances for asymmetric algorithm encryption must be of type "public"`);
-}, st = (t, e, r) => {
-  t.startsWith("HS") || t === "dir" || t.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(t) ? it(t, e) : at(t, e, r);
-};
-async function ot(t, e, r, n, i) {
-  if (!(r instanceof Uint8Array))
-    throw new TypeError(_(r, "Uint8Array"));
-  const a = parseInt(t.slice(1, 4), 10), s = await f.subtle.importKey("raw", r.subarray(a >> 3), "AES-CBC", !1, ["encrypt"]), o = await f.subtle.importKey("raw", r.subarray(0, a >> 3), {
-    hash: `SHA-${a << 1}`,
-    name: "HMAC"
-  }, !1, ["sign"]), c = new Uint8Array(await f.subtle.encrypt({
-    iv: n,
-    name: "AES-CBC"
-  }, s, e)), u = M(i, n, c, De(i.length << 3)), d = new Uint8Array((await f.subtle.sign("HMAC", o, u)).slice(0, a >> 3));
-  return { ciphertext: c, tag: d, iv: n };
-}
-async function ct(t, e, r, n, i) {
-  let a;
-  r instanceof Uint8Array ? a = await f.subtle.importKey("raw", r, "AES-GCM", !1, ["encrypt"]) : (T(r, t, "encrypt"), a = r);
-  const s = new Uint8Array(await f.subtle.encrypt({
-    additionalData: i,
-    iv: n,
-    name: "AES-GCM",
-    tagLength: 128
-  }, a, e)), o = s.slice(-16);
-  return { ciphertext: s.slice(0, -16), tag: o, iv: n };
-}
-const be = async (t, e, r, n, i) => {
-  if (!A(r) && !(r instanceof Uint8Array))
-    throw new TypeError(_(r, ...g, "Uint8Array"));
-  switch (n ? Ue(t, n) : n = Ie(t), t) {
-    case "A128CBC-HS256":
-    case "A192CBC-HS384":
-    case "A256CBC-HS512":
-      return r instanceof Uint8Array && Z(r, parseInt(t.slice(-3), 10)), ot(t, e, r, n, i);
-    case "A128GCM":
-    case "A192GCM":
-    case "A256GCM":
-      return r instanceof Uint8Array && Z(r, parseInt(t.slice(1, 4), 10)), ct(t, e, r, n, i);
-    default:
-      throw new b("Unsupported JWE Content Encryption Algorithm");
-  }
-};
-async function lt(t, e, r, n) {
-  const i = t.slice(0, 7), a = await be(i, r, e, n, new Uint8Array(0));
-  return {
-    encryptedKey: a.ciphertext,
-    iv: w(a.iv),
-    tag: w(a.tag)
-  };
-}
-function ut(t, e, r, n, i) {
-  if (i.crit !== void 0 && (n == null ? void 0 : n.crit) === void 0)
-    throw new t('"crit" (Critical) Header Parameter MUST be integrity protected');
-  if (!n || n.crit === void 0)
-    return /* @__PURE__ */ new Set();
-  if (!Array.isArray(n.crit) || n.crit.length === 0 || n.crit.some((s) => typeof s != "string" || s.length === 0))
-    throw new t('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
-  let a;
-  r !== void 0 ? a = new Map([...Object.entries(r), ...e.entries()]) : a = e;
-  for (const s of n.crit) {
-    if (!a.has(s))
-      throw new b(`Extension Header Parameter "${s}" is not recognized`);
-    if (i[s] === void 0)
-      throw new t(`Extension Header Parameter "${s}" is missing`);
-    if (a.get(s) && n[s] === void 0)
-      throw new t(`Extension Header Parameter "${s}" MUST be integrity protected`);
-  }
-  return new Set(n.crit);
-}
-const dt = async (t) => {
-  if (t instanceof Uint8Array)
-    return {
-      kty: "oct",
-      k: w(t)
-    };
-  if (!A(t))
-    throw new TypeError(_(t, ...g, "Uint8Array"));
-  if (!t.extractable)
-    throw new TypeError("non-extractable CryptoKey cannot be exported as a JWK");
-  const { ext: e, key_ops: r, alg: n, use: i, ...a } = await f.subtle.exportKey("jwk", t);
-  return a;
-};
-async function ht(t) {
-  return dt(t);
-}
-async function ft(t, e, r, n, i = {}) {
-  var c;
-  let a, s, o;
-  switch (st(t, r, "encrypt"), r = await ((c = N.normalizePublicKey) == null ? void 0 : c.call(N, r, t)) || r, t) {
-    case "dir": {
-      o = r;
-      break;
-    }
-    case "ECDH-ES":
-    case "ECDH-ES+A128KW":
-    case "ECDH-ES+A192KW":
-    case "ECDH-ES+A256KW": {
-      if (!Ge(r))
-        throw new b("ECDH with the provided key is not allowed or not supported by your javascript runtime");
-      const { apu: u, apv: d } = i;
-      let { epk: h } = i;
-      h || (h = (await ze(r)).privateKey);
-      const { x: p, y: E, crv: l, kty: m } = await ht(h), X = await Je(r, h, t === "ECDH-ES" ? e : t, t === "ECDH-ES" ? me(e) : parseInt(t.slice(-5, -2), 10), u, d);
-      if (s = { epk: { x: p, crv: l, kty: m } }, m === "EC" && (s.epk.y = E), u && (s.apu = w(u)), d && (s.apv = w(d)), t === "ECDH-ES") {
-        o = X;
-        break;
-      }
-      o = n || D(e);
-      const Oe = t.slice(-6);
-      a = await z(Oe, X, o);
-      break;
-    }
-    case "RSA1_5":
-    case "RSA-OAEP":
-    case "RSA-OAEP-256":
-    case "RSA-OAEP-384":
-    case "RSA-OAEP-512": {
-      o = n || D(e), a = await Qe(t, r, o);
-      break;
-    }
-    case "PBES2-HS256+A128KW":
-    case "PBES2-HS384+A192KW":
-    case "PBES2-HS512+A256KW": {
-      o = n || D(e);
-      const { p2c: u, p2s: d } = i;
-      ({ encryptedKey: a, ...s } = await Xe(t, r, o, u, d));
-      break;
-    }
-    case "A128KW":
-    case "A192KW":
-    case "A256KW": {
-      o = n || D(e), a = await z(t, r, o);
-      break;
-    }
-    case "A128GCMKW":
-    case "A192GCMKW":
-    case "A256GCMKW": {
-      o = n || D(e);
-      const { iv: u } = i;
-      ({ encryptedKey: a, ...s } = await lt(t, r, o, u));
-      break;
-    }
-    default:
-      throw new b('Invalid or unsupported "alg" (JWE Algorithm) header value');
-  }
-  return { cek: o, encryptedKey: a, parameters: s };
-}
-const pt = Symbol();
-class mt {
-  constructor(e) {
-    if (!(e instanceof Uint8Array))
-      throw new TypeError("plaintext must be an instance of Uint8Array");
-    this._plaintext = e;
-  }
-  setKeyManagementParameters(e) {
-    if (this._keyManagementParameters)
-      throw new TypeError("setKeyManagementParameters can only be called once");
-    return this._keyManagementParameters = e, this;
-  }
-  setProtectedHeader(e) {
-    if (this._protectedHeader)
-      throw new TypeError("setProtectedHeader can only be called once");
-    return this._protectedHeader = e, this;
-  }
-  setSharedUnprotectedHeader(e) {
-    if (this._sharedUnprotectedHeader)
-      throw new TypeError("setSharedUnprotectedHeader can only be called once");
-    return this._sharedUnprotectedHeader = e, this;
-  }
-  setUnprotectedHeader(e) {
-    if (this._unprotectedHeader)
-      throw new TypeError("setUnprotectedHeader can only be called once");
-    return this._unprotectedHeader = e, this;
-  }
-  setAdditionalAuthenticatedData(e) {
-    return this._aad = e, this;
-  }
-  setContentEncryptionKey(e) {
-    if (this._cek)
-      throw new TypeError("setContentEncryptionKey can only be called once");
-    return this._cek = e, this;
-  }
-  setInitializationVector(e) {
-    if (this._iv)
-      throw new TypeError("setInitializationVector can only be called once");
-    return this._iv = e, this;
-  }
-  async encrypt(e, r) {
-    if (!this._protectedHeader && !this._unprotectedHeader && !this._sharedUnprotectedHeader)
-      throw new P("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");
-    if (!Ne(this._protectedHeader, this._unprotectedHeader, this._sharedUnprotectedHeader))
-      throw new P("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");
-    const n = {
-      ...this._protectedHeader,
-      ...this._unprotectedHeader,
-      ...this._sharedUnprotectedHeader
-    };
-    if (ut(P, /* @__PURE__ */ new Map(), r == null ? void 0 : r.crit, this._protectedHeader, n), n.zip !== void 0)
-      throw new b('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');
-    const { alg: i, enc: a } = n;
-    if (typeof i != "string" || !i)
-      throw new P('JWE "alg" (Algorithm) Header Parameter missing or invalid');
-    if (typeof a != "string" || !a)
-      throw new P('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
-    let s;
-    if (this._cek && (i === "dir" || i === "ECDH-ES"))
-      throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${i}`);
-    let o;
-    {
-      let m;
-      ({ cek: o, encryptedKey: s, parameters: m } = await ft(i, a, e, this._cek, this._keyManagementParameters)), m && (r && pt in r ? this._unprotectedHeader ? this._unprotectedHeader = { ...this._unprotectedHeader, ...m } : this.setUnprotectedHeader(m) : this._protectedHeader ? this._protectedHeader = { ...this._protectedHeader, ...m } : this.setProtectedHeader(m));
-    }
-    let c, u, d;
-    this._protectedHeader ? u = O.encode(w(JSON.stringify(this._protectedHeader))) : u = O.encode(""), this._aad ? (d = w(this._aad), c = M(u, O.encode("."), O.encode(d))) : c = u;
-    const { ciphertext: h, tag: p, iv: E } = await be(a, this._plaintext, o, this._iv, c), l = {
-      ciphertext: w(h)
-    };
-    return E && (l.iv = w(E)), p && (l.tag = w(p)), s && (l.encrypted_key = w(s)), d && (l.aad = d), this._protectedHeader && (l.protected = ne.decode(u)), this._sharedUnprotectedHeader && (l.unprotected = this._sharedUnprotectedHeader), this._unprotectedHeader && (l.header = this._unprotectedHeader), l;
-  }
-}
-class bt {
-  constructor(e) {
-    this._flattened = new mt(e);
-  }
-  setContentEncryptionKey(e) {
-    return this._flattened.setContentEncryptionKey(e), this;
-  }
-  setInitializationVector(e) {
-    return this._flattened.setInitializationVector(e), this;
-  }
-  setProtectedHeader(e) {
-    return this._flattened.setProtectedHeader(e), this;
-  }
-  setKeyManagementParameters(e) {
-    return this._flattened.setKeyManagementParameters(e), this;
-  }
-  async encrypt(e, r) {
-    const n = await this._flattened.encrypt(e, r);
-    return [n.protected, n.encrypted_key, n.iv, n.ciphertext, n.tag].join(".");
-  }
-}
-const L = {
+const g = {
   base: {
     ":disabled": {
       backgroundColor: "transparent"
     }
   }
-}, yt = "DOM Element was not found";
-var ee;
-(function(t) {
-  t.NOT_COMPLETE = "NOT_COMPLETE", t.SCHEME_NOT_SUPPORTED = "SCHEME_NOT_SUPPORTED", t.LUHN_CHECK_FAILED = "LUHN_CHECK_FAILED", t.INVALID_EXPIRY_DATE = "INVALID_EXPIRY_DATE";
-})(ee || (ee = {}));
-const ye = (t) => t != null, wt = "v3.9.0";
-class x {
-  constructor(e, r) {
+}, R = "DOM Element was not found";
+var O;
+(function(i) {
+  i.NOT_COMPLETE = "NOT_COMPLETE", i.SCHEME_NOT_SUPPORTED = "SCHEME_NOT_SUPPORTED", i.LUHN_CHECK_FAILED = "LUHN_CHECK_FAILED", i.INVALID_EXPIRY_DATE = "INVALID_EXPIRY_DATE";
+})(O || (O = {}));
+const j = (i) => i != null, $ = "v3.10.0";
+class f {
+  constructor(e) {
     if (Object.defineProperty(this, "options", {
       enumerable: !0,
       configurable: !0,
@@ -955,16 +236,21 @@ class x {
       configurable: !0,
       writable: !0,
       value: { ready: [], blur: [], focus: [], keydown: [], change: [] }
+    }), Object.defineProperty(this, "key", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: ""
     }), Object.defineProperty(this, "update", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async ({ ...n }) => {
-        this.iframe && ye(n.height) && (this.iframe.height = n.height), this.iframePostMessage({
+      value: async ({ ...t }) => {
+        this.iframe && j(t.height) && (this.iframe.height = t.height), this.iframePostMessage({
           type: "update",
           data: {
-            ...n,
-            value: n.value ? this.putValue(n.value) ?? void 0 : void 0
+            ...t,
+            value: t.value ? this.putValue(t.value) ?? void 0 : void 0
           }
         });
       }
@@ -994,61 +280,42 @@ class x {
       configurable: !0,
       writable: !0,
       value: () => {
-        var n;
-        (n = this.iframe) == null || n.remove(), this.iframe = null;
+        var t;
+        (t = this.iframe) == null || t.remove(), this.iframe = null;
       }
-    }), this.IFRAME_BASE_URL = Et(wt), !this.IFRAME_BASE_URL)
+    }), this.IFRAME_BASE_URL = S($), !this.IFRAME_BASE_URL)
       throw new Error("IFRAME_BASE_URL not found");
-    r && F.set(this, { key: r });
   }
   mount(e) {
-    const r = typeof e == "string" ? document.querySelector(e) : e;
-    if (!r)
-      throw new Error(`${yt}: ${e}`);
-    r.innerHTML = `<iframe width="100%" height="29" src="${this.IFRAME_BASE_URL}?field=${this.type}&origin=${location.origin}"></iframe>`, this.iframe = r.querySelector("iframe");
-    const n = (i) => {
+    const t = typeof e == "string" ? document.querySelector(e) : e;
+    if (!t)
+      throw new Error(`${R}: ${e}`);
+    t.innerHTML = `<iframe width="100%" height="29" src="${this.IFRAME_BASE_URL}?field=${this.type}&origin=${location.origin}"></iframe>`, this.iframe = t.querySelector("iframe");
+    const r = (n) => {
       var a;
-      if (!(i.source !== ((a = this.iframe) == null ? void 0 : a.contentWindow) || i.data.element !== this.type))
-        if (i.data.type === "change") {
-          const s = this.extractValue(i.data.data.value), o = { ...i.data.data };
-          delete o.value;
-          const c = F.get(this);
-          c && (c.value = s), this.emitEvent({
-            ...i.data,
-            data: o
-          });
-        } else
-          this.emitEvent(i.data);
+      n.source !== ((a = this.iframe) == null ? void 0 : a.contentWindow) || n.data.element !== this.type || this.emitEvent(n.data);
     };
-    return window.addEventListener("message", n), new Promise((i) => {
-      this.on("ready", () => {
-        this.update(this.options), i();
+    return window.addEventListener("message", r), new Promise((n) => {
+      this.on("ready", (a) => {
+        this.key = a.key, this.update(this.options), n();
       });
     });
   }
-  on(e, r) {
-    return this.subscriptions[e].push(r), {
-      unsubscribe: () => this.subscriptions[e].splice(this.subscriptions[e].indexOf(r), 1)
+  on(e, t) {
+    return this.subscriptions[e].push(t), {
+      unsubscribe: () => this.subscriptions[e].splice(this.subscriptions[e].indexOf(t), 1)
     };
   }
-  secureValue(e) {
-    const r = F.get(this);
-    return (r == null ? void 0 : r.key) !== e ? null : (r == null ? void 0 : r.value) ?? null;
-  }
   emitEvent(e) {
-    var r;
-    (r = this.subscriptions[e.type]) == null || r.forEach((n) => n(e.data));
+    var t;
+    (t = this.subscriptions[e.type]) == null || t.forEach((r) => r(e.data));
   }
   iframePostMessage(e) {
-    var r, n;
-    (n = (r = this.iframe) == null ? void 0 : r.contentWindow) == null || n.postMessage(e, this.IFRAME_BASE_URL);
+    var t, r;
+    (r = (t = this.iframe) == null ? void 0 : t.contentWindow) == null || r.postMessage(e, this.IFRAME_BASE_URL);
   }
 }
-function Et(t) {
-  return `https://${window.HG_IFRAME_HOST ?? "sdk.hellgate.io"}/web/${t}/iframe/`;
-}
-const F = /* @__PURE__ */ new Map();
-class gt extends x {
+class U extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1059,22 +326,22 @@ class gt extends x {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: we
+      value: A
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: Ee
+      value: H
     });
   }
 }
-function we(t) {
-  return t ? Number(t) : null;
+function A(i) {
+  return i ? Number(i) : null;
 }
-function Ee(t) {
-  return t ? t < 10 ? `0${t}` : String(t) : null;
+function H(i) {
+  return i ? i < 10 ? `0${i}` : String(i) : null;
 }
-class At extends x {
+class V extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1085,38 +352,38 @@ class At extends x {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: ge
+      value: D
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: Ae
+      value: T
     });
   }
 }
-function ge(t) {
-  if (!t)
+function D(i) {
+  if (!i)
     return null;
-  const e = Number(t);
+  const e = Number(i);
   return e > 10 ? +`20${e}` : null;
 }
-function Ae(t) {
-  return t ? t >= 100 ? String(t).slice(-2) : String(t) : null;
+function T(i) {
+  return i ? i >= 100 ? String(i).slice(-2) : String(i) : null;
 }
-function _e(t) {
-  const [e = null, r = null] = (t ?? "").split("/").map((n) => n.trim());
+function M(i) {
+  const [e = null, t = null] = (i ?? "").split("/").map((r) => r.trim());
   return {
-    month: we(e),
-    year: ge(r)
+    month: A(e),
+    year: D(t)
   };
 }
-function Se(t) {
-  if (!t)
+function I(i) {
+  if (!i)
     return null;
-  const { month: e, year: r } = t;
-  return [Ee(e), Ae(r)].filter(ye).join(" / ");
+  const { month: e, year: t } = i;
+  return [H(e), T(t)].filter(j).join(" / ");
 }
-class _t extends x {
+class z extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1127,22 +394,22 @@ class _t extends x {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: _e
+      value: M
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: Se
+      value: I
     });
   }
 }
-function Ce(t) {
-  return (t == null ? void 0 : t.replaceAll(" ", "")) ?? null;
+function L(i) {
+  return (i == null ? void 0 : i.replaceAll(" ", "")) ?? null;
 }
-function St(t) {
-  return t;
+function B(i) {
+  return i;
 }
-class Ct extends x {
+class Y extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1153,16 +420,16 @@ class Ct extends x {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: Ce
+      value: L
     }), Object.defineProperty(this, "putValue", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: St
+      value: B
     });
   }
 }
-class Pt extends x {
+class q extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1174,8 +441,8 @@ class Pt extends x {
       configurable: !0,
       writable: !0,
       value: (e) => e ? {
-        number: e.cardNumber ? Ce(e.cardNumber) : null,
-        expiry_date: e.cardExpirationDate ? _e(e.cardExpirationDate) : null,
+        number: e.cardNumber ? L(e.cardNumber) : null,
+        expiry_date: e.cardExpirationDate ? M(e.cardExpirationDate) : null,
         cvc: e.cardVerificationCode ?? null
       } : null
     }), Object.defineProperty(this, "putValue", {
@@ -1184,13 +451,13 @@ class Pt extends x {
       writable: !0,
       value: (e) => e ? {
         cardNumber: e.number ? e.number : null,
-        cardExpirationDate: e.expiry_date ? Se(e.expiry_date) : null,
+        cardExpirationDate: e.expiry_date ? I(e.expiry_date) : null,
         cardVerificationCode: e.cvc ?? null
       } : null
     });
   }
 }
-class vt extends x {
+class G extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1210,7 +477,7 @@ class vt extends x {
     });
   }
 }
-class Pe extends x {
+class K extends f {
   constructor() {
     super(...arguments), Object.defineProperty(this, "type", {
       enumerable: !0,
@@ -1230,46 +497,60 @@ class Pe extends x {
     });
   }
 }
-function v(t, e, r) {
-  switch (t) {
+function b(i, e) {
+  switch (i) {
     case "card":
-      return new Pt(e, r);
+      return new q(e);
     case "cardNumber":
-      return new Ct(e, r);
+      return new Y(e);
     case "cardExpirationDate":
-      return new _t(e, r);
+      return new z(e);
     case "cardExpirationMonth":
-      return new gt(e, r);
+      return new U(e);
     case "cardExpirationYear":
-      return new At(e, r);
+      return new V(e);
     case "cardVerificationCode":
-      return new vt(e, r);
+      return new G(e);
     case "text":
-      return new Pe(e, r);
+      return new K(e);
     default:
-      ASSERT_EXHAUSTIVE(t);
+      ASSERT_EXHAUSTIVE(i);
   }
 }
-function Ot() {
-  return Date.now().toString(36) + Math.random().toString(36).slice(2);
+const W = {
+  visa: "visa",
+  mastercard: "mastercard",
+  americanexpress: "american-express",
+  discover: "discover",
+  dinersclub: "diners-club",
+  jcb: "jcb",
+  unionpay: "unionpay"
+};
+function X(i) {
+  return i.map((e) => W[e]).filter(Boolean);
 }
-function te(t) {
+function P(i) {
   return [
-    t.issuer_identification_number,
-    "".padEnd(t.account_number_length - t.issuer_identification_number.length - t.account_number_last_four.length, "*"),
-    t.account_number_last_four
+    i.issuer_identification_number,
+    "".padEnd(i.account_number_length - i.issuer_identification_number.length - i.account_number_last_four.length, "*"),
+    i.account_number_last_four
   ].join(" ");
 }
-class q {
-  static async init(e) {
-    return new q(e);
+class w {
+  static async init(e, t) {
+    return new w(e, t);
   }
-  constructor(e) {
+  constructor(e, t) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
       value: e
+    }), Object.defineProperty(this, "coordinator", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: t
     }), Object.defineProperty(this, "state", {
       enumerable: !0,
       configurable: !0,
@@ -1303,18 +584,15 @@ class q {
         var s;
         if (this.hasFormElements())
           throw new Error("Form elements can't be initialized twice. You can call `reset()` method or create new Hellgate client.");
-        const n = K.get(this);
-        if (!n)
-          throw new Error("Secure key not found");
-        const i = C({
+        const n = h({
           disabled: !1,
           autocomplete: "on",
-          style: { ...L }
+          style: { ...g }
         }, r);
         if (this.session.isNextAction("refresh_security_code") && ((s = this.session.state) != null && s.data)) {
           const o = this.session.state.data;
-          i.cvcOnly = !0, i.value = {
-            number: te(o),
+          n.cvcOnly = !0, n.value = {
+            number: P(o),
             expiry_date: {
               month: (o == null ? void 0 : o.expiry_month) ?? null,
               year: (o == null ? void 0 : o.expiry_year) ?? null
@@ -1322,7 +600,8 @@ class q {
             cvc: null
           };
         }
-        const a = v("card", i, n);
+        n.schemes = x(this.getSessionSchemes(), n.schemes);
+        const a = b("card", n);
         return this.cardElements.card = {
           element: a,
           state: this.createFieldDefaultState()
@@ -1333,16 +612,13 @@ class q {
       configurable: !0,
       writable: !0,
       value: (r = {}) => {
-        const n = K.get(this);
-        if (!n)
-          throw new Error("Secure key not found");
-        const i = {
+        const n = {
           disabled: !1,
           autocomplete: "on",
-          style: { ...L }
-        }, a = v("text", {
-          ...C(i, { ...r })
-        }, n);
+          style: { ...g }
+        }, a = b("text", {
+          ...h(n, { ...r })
+        });
         return this.textElements.push(a), a;
       }
     }), Object.defineProperty(this, "tokenize", {
@@ -1350,25 +626,20 @@ class q {
       configurable: !0,
       writable: !0,
       value: async (r) => {
-        var o, c;
-        if (((o = this.session.state) == null ? void 0 : o.next_action) !== "tokenize_card")
-          throw new Error(`The session's next_action='${(c = this.session.state) == null ? void 0 : c.next_action}'. tokenize() is available only if next_action='tokenize_card'`);
-        const n = this.getFormValue(), i = this.extractAdditionalData(r);
-        if (!n)
-          throw new Error("Form elements must be initialized before tokenization");
-        const a = this.getCardDataValidationError();
-        if (a)
-          throw a;
-        if (!n.number || !n.expiration_month || !n.expiration_year || !n.cvc)
-          throw new Error("Card data is not complete");
-        const s = this.session.state.data;
-        return this.encryptCardData({
-          account_number: n.number,
-          expiry_month: n.expiration_month,
-          expiry_year: n.expiration_year,
-          security_code: n.cvc,
-          additional_data: i
-        }, s.jwk);
+        var a, s;
+        if (((a = this.session.state) == null ? void 0 : a.next_action) !== "tokenize_card")
+          throw new Error(`The session's next_action='${(s = this.session.state) == null ? void 0 : s.next_action}'. tokenize() is available only if next_action='tokenize_card'`);
+        const n = this.getCardDataValidationError();
+        if (n)
+          throw n;
+        return this.coordinator.postMessage({
+          type: "card:tokenize",
+          additionalData: this.serializeAdditionalData(r)
+        }), new Promise((o) => {
+          this.coordinator.onMessage("card:tokenize:response", (l) => {
+            o(l.success ? l.result : null);
+          });
+        });
       }
     }), Object.defineProperty(this, "onStateChange", {
       enumerable: !0,
@@ -1389,7 +660,7 @@ class q {
       configurable: !0,
       writable: !0,
       value: () => {
-        Object.values(this.cardElements).forEach((r) => r == null ? void 0 : r.element.unmount()), this.textElements.forEach((r) => r == null ? void 0 : r.unmount()), this.cardElements = {}, this.textElements = [];
+        Object.values(this.cardElements).forEach((r) => r == null ? void 0 : r.element.unmount()), this.textElements.forEach((r) => r == null ? void 0 : r.unmount()), this.cardElements = {}, this.textElements = [], this.state = this.createFieldDefaultState();
       }
     }), Object.defineProperty(this, "dispose", {
       enumerable: !0,
@@ -1405,187 +676,131 @@ class q {
       value: async (r = {}) => {
         if (!this.hasFormElements())
           throw new Error("Card form must be initialized and completed before processing");
+        const n = this.getCardDataValidationError();
+        if (n)
+          throw n;
         if (this.session.isNextAction("refresh_security_code"))
           return this.refreshSecurityCode();
         this.disableFormElements(!0);
         try {
-          const n = await this.tokenize(r);
-          if (!n)
-            throw new Error("Tokenization failed");
-          return await this.session.completeAction({
-            action: "tokenize_card",
-            result: n
+          return this.coordinator.postMessage({
+            type: "card:process",
+            additionalData: this.serializeAdditionalData(r)
+          }), new Promise((a, s) => {
+            this.coordinator.onMessage("card:process:response", (o) => {
+              o.result && o.success ? a(o.result) : s(new Error(o.error));
+            });
           });
-        } catch (n) {
-          throw this.disableFormElements(!1), n;
+        } catch (a) {
+          throw this.disableFormElements(!1), a;
         }
       }
-    }), K.set(this, Ot()), this.cvcOnlyEnabled = this.session.isNextAction("refresh_security_code");
+    }), this.cvcOnlyEnabled = this.session.isNextAction("refresh_security_code");
   }
   createFormFields(e = {}) {
-    var u, d;
+    var l, c;
     if (this.hasFormElements())
       throw new Error("Form elements can't be initialized twice. You can call `reset()` method or create new Hellgate client.");
-    const r = K.get(this);
-    if (!r)
-      throw new Error("Secure key not found");
-    const n = {
+    const t = {
       disabled: this.cvcOnlyEnabled,
       autocomplete: "on",
-      style: { ...L }
-    }, { cardNumber: i = {}, securityCode: a = {}, ...s } = e, o = v("cardNumber", {
-      ...C(n, {
-        ...s,
-        ...i,
+      style: { ...g }
+    }, { cardNumber: r = {}, securityCode: n = {}, ...a } = e, s = b("cardNumber", {
+      ...h(t, {
+        ...a,
+        ...r,
         cvcOnly: this.cvcOnlyEnabled,
-        value: this.session.isNextAction("refresh_security_code") && ((u = this.session.state) != null && u.data) ? te(this.session.state.data) : null
+        schemes: x(this.getSessionSchemes(), r.schemes ?? a.schemes),
+        value: this.session.isNextAction("refresh_security_code") && ((l = this.session.state) != null && l.data) ? P(this.session.state.data) : null
       })
-    }, r), c = v("cardVerificationCode", {
-      ...C({
-        ...n,
+    }), o = b("cardVerificationCode", {
+      ...h({
+        ...t,
         disabled: !1,
         autofocus: this.cvcOnlyEnabled
       }, {
-        ...s,
-        ...a
+        ...a,
+        ...n
       })
-    }, r);
-    if (o.on("change", (h) => {
-      const p = h.cardBrand;
-      c.update({ cardType: p });
+    });
+    if (s.on("change", (d) => {
+      const u = d.cardBrand;
+      o.update({ cardType: u });
     }), this.cardElements = {
       cardNumber: {
-        element: o,
+        element: s,
         state: this.createFieldDefaultState()
       },
       cardVerificationCode: {
-        element: c,
+        element: o,
         state: this.createFieldDefaultState()
       }
     }, this.addElementStateListener("cardNumber"), this.addElementStateListener("cardVerificationCode"), e.expiryDateElement === "separate") {
-      const { expiryMonth: h = {}, expiryYear: p = {} } = e, E = v("cardExpirationMonth", {
-        ...C(n, {
-          ...s,
-          ...h
+      const { expiryMonth: d = {}, expiryYear: u = {} } = e, _ = b("cardExpirationMonth", {
+        ...h(t, {
+          ...a,
+          ...d
         })
-      }, r), l = v("cardExpirationYear", {
-        ...C(n, {
-          ...s,
-          ...p
+      }), v = b("cardExpirationYear", {
+        ...h(t, {
+          ...a,
+          ...u
         })
-      }, r);
-      return l.on("change", () => {
-        const m = y(this, l);
-        E.update({
-          expiryYear: m ? String(y(this, l)) : void 0
-        });
-      }), this.cardElements.cardExpirationMonth = {
-        element: E,
+      });
+      return this.cardElements.cardExpirationMonth = {
+        element: _,
         state: this.createFieldDefaultState()
       }, this.cardElements.cardExpirationYear = {
-        element: l,
+        element: v,
         state: this.createFieldDefaultState()
-      }, this.addElementStateListener("cardExpirationMonth"), this.addElementStateListener("cardExpirationYear"), { cardNumber: o, expiryMonth: E, expiryYear: l, securityCode: c };
+      }, this.addElementStateListener("cardExpirationMonth"), this.addElementStateListener("cardExpirationYear"), { cardNumber: s, expiryMonth: _, expiryYear: v, securityCode: o };
     } else {
-      const { expiryDate: h = {} } = e, p = v("cardExpirationDate", {
-        ...C(n, {
-          ...s,
-          ...h,
-          value: this.session.isNextAction("refresh_security_code") && ((d = this.session.state) != null && d.data) ? {
+      const { expiryDate: d = {} } = e, u = b("cardExpirationDate", {
+        ...h(t, {
+          ...a,
+          ...d,
+          value: this.session.isNextAction("refresh_security_code") && ((c = this.session.state) != null && c.data) ? {
             month: this.session.state.data.expiry_month,
             year: this.session.state.data.expiry_year
           } : null
         })
-      }, r);
+      });
       return this.cardElements.cardExpirationDate = {
-        element: p,
+        element: u,
         state: this.createFieldDefaultState()
-      }, this.addElementStateListener("cardExpirationDate"), { cardNumber: o, expiryDate: p, securityCode: c };
+      }, this.addElementStateListener("cardExpirationDate"), { cardNumber: s, expiryDate: u, securityCode: o };
     }
   }
   async refreshSecurityCode() {
-    const e = this.getFormValue();
-    if (!(e != null && e.cvc))
-      throw new Error("cvc field was not filled");
-    if (!this.session.isNextAction("refresh_security_code") || !this.session.state)
-      throw new Error("refreshSecurityCode() is available only if next_action=refresh_security_code");
-    this.disableFormElements(!0);
-    const r = await this.encryptCardData({ security_code: e.cvc }, this.session.state.data.jwk);
-    return this.session.completeAction({
-      action: "refresh_security_code",
-      result: { ...r }
-    }).catch((n) => {
-      if (this.disableFormElements(!1), n instanceof Error)
-        throw n;
-      return { status: "failure", data: n };
+    return this.coordinator.postMessage({
+      type: "card:refresh_security_code"
+    }), new Promise((e, t) => {
+      this.coordinator.onMessage("card:refresh_security_code:response", (r) => {
+        r.result ? e(r.result) : t(new Error(r.error));
+      });
     });
   }
-  getFormValue() {
-    var c, u, d, h, p, E;
-    const { card: e, cardNumber: r, cardExpirationDate: n, cardExpirationMonth: i, cardExpirationYear: a, cardVerificationCode: s } = this.cardElements;
-    let o;
-    if (e) {
-      const l = y(this, e.element);
-      o = {
-        number: (l == null ? void 0 : l.number) ?? null,
-        expiration_month: ((c = l == null ? void 0 : l.expiry_date) == null ? void 0 : c.month) ?? null,
-        expiration_year: ((u = l == null ? void 0 : l.expiry_date) == null ? void 0 : u.year) ?? null,
-        cvc: (l == null ? void 0 : l.cvc) ?? null
-      };
-    }
-    if (r && s && (n && (o = {
-      number: ((d = y(this, r.element)) == null ? void 0 : d.replaceAll(" ", "")) ?? null,
-      expiration_month: ((h = y(this, n.element)) == null ? void 0 : h.month) ?? null,
-      expiration_year: ((p = y(this, n.element)) == null ? void 0 : p.year) ?? null,
-      cvc: y(this, s.element)
-    }), i && a)) {
-      const l = y(this, i.element), m = y(this, a.element);
-      o = {
-        number: ((E = y(this, r.element)) == null ? void 0 : E.replaceAll(" ", "")) ?? null,
-        expiration_month: l ? Number(l) : null,
-        expiration_year: m ? Number(m) : null,
-        cvc: y(this, s.element)
-      };
-    }
-    return o;
-  }
   hasFormElements() {
     return !!Object.keys(this.cardElements).length;
   }
   disableFormElements(e) {
-    Object.values(this.cardElements).forEach(({ element: r }) => {
-      r.update({ disabled: e });
-    });
-  }
-  extractAdditionalData({ cardholder_name: e, billing_address: r = {} }) {
-    return re({
-      cardholder_name: H(this, e),
-      billing_address: {
-        line1: H(this, r.line1),
-        line2: H(this, r.line2),
-        line3: H(this, r.line3),
-        city: H(this, r.city),
-        postal_code: H(this, r.postal_code)
-      }
+    Object.values(this.cardElements).forEach(({ element: t }) => {
+      t.update({ disabled: e });
     });
   }
-  async encryptCardData(e, r) {
-    const n = await nt(r, "RSA-OAEP"), i = JSON.stringify(e), a = new TextEncoder().encode(i);
-    return { enc_payload: await new bt(a).setProtectedHeader({ alg: "RSA-OAEP", enc: "A256GCM" }).encrypt(n) };
-  }
   addElementStateListener(e) {
-    const r = this.cardElements[e];
-    r && r.element.on("change", (n) => {
-      r.state = n, this.updateFormState();
+    const t = this.cardElements[e];
+    t && t.element.on("change", (r) => {
+      t.state = r, this.updateFormState();
     });
   }
   updateFormState() {
     const e = this.cvcOnlyEnabled && this.cardElements.cardVerificationCode ? [this.cardElements.cardVerificationCode] : Object.values(this.cardElements);
-    e.length ? this.state = e.reduce((r, { state: n }) => (r.valid = !!r.valid && !!n.valid, r.complete = !!r.complete && !!n.complete, r.empty = !!r.empty && !!n.empty, r.error = r.error || n.error, r.errorCode = r.errorCode || n.errorCode, r), {
+    e.length ? this.state = e.reduce((t, { state: r }) => (t.valid = !!t.valid && !!r.valid, t.complete = !!t.complete && !!r.complete, t.empty = !!t.empty && !!r.empty, t.error = t.error || r.error, t.errorCode = t.errorCode || r.errorCode, t), {
       valid: !0,
       complete: !0,
       empty: !0
-    }) : this.state = this.createFieldDefaultState(), this.stateChangeHandlers.forEach((r) => r(this.state));
+    }) : this.state = this.createFieldDefaultState(), this.stateChangeHandlers.forEach((t) => t(this.state));
   }
   createFieldDefaultState() {
     return {
@@ -1594,6 +809,27 @@ class q {
       valid: !1
     };
   }
+  serializeAdditionalData({ cardholder_name: e, billing_address: t = {}, ephemeral: r, expiration_date: n }) {
+    const a = C({
+      cardholder_name: m(e),
+      billing_address: {
+        line1: m(t.line1),
+        line2: m(t.line2),
+        line3: m(t.line3),
+        city: m(t.city),
+        postal_code: m(t.postal_code)
+      }
+    });
+    return typeof r == "boolean" && (a.ephemeral = r), typeof n == "string" && (a.expiration_date = n), a;
+  }
+  getSessionSchemes() {
+    var t, r;
+    if (!this.session.isNextAction("tokenize_card"))
+      return;
+    const e = (t = this.session.state) == null ? void 0 : t.data;
+    if ((r = e == null ? void 0 : e.allowed_schemes) != null && r.length)
+      return X(e.allowed_schemes);
+  }
   getCardDataValidationError() {
     if (!this.state.complete)
       return new Error(this.state.error ?? "Card data is not complete");
@@ -1601,22 +837,99 @@ class q {
       return new Error(`Card data is not valid. ${this.state.error}`);
   }
 }
-const K = /* @__PURE__ */ new Map();
-function y(t, e) {
-  const r = K.get(t);
-  return r ? e.secureValue(r) : null;
+function m(i) {
+  if (typeof i == "string")
+    return i;
+  if (i != null && i.key)
+    return { key: i.key };
+}
+function x(i, e) {
+  return i === void 0 ? e : i.length === 0 ? [] : e != null && e.length ? e.filter((t) => i.includes(t)) : i;
 }
-function H(t, e) {
-  const r = K.get(t);
-  return e instanceof Pe && r ? y(t, e) ?? void 0 : e;
+const J = "v3.10.0";
+class Q {
+  constructor() {
+    if (Object.defineProperty(this, "iframe", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: null
+    }), Object.defineProperty(this, "iframeBaseUrl", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: void 0
+    }), Object.defineProperty(this, "messageHandler", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: null
+    }), Object.defineProperty(this, "init", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: async (e, t, r) => (window.fetchMocker = { a: 1 }, new Promise((n, a) => {
+        r == null || r.signal.addEventListener("abort", () => {
+          const l = new Error("Coordinator init aborted");
+          l.name = "AbortError", a(l), this.dispose();
+        });
+        const s = document.createElement("div");
+        s.setAttribute("style", "position:absolute;width:0;height:0;overflow:hidden;"), s.setAttribute("data-hg-coordinator", ""), document.body.appendChild(s);
+        const o = `${this.iframeBaseUrl}?type=coordinator&sessionId=${e}&apiBaseUrl=${t}&origin=${encodeURIComponent(location.origin)}`;
+        if (s.innerHTML = `<iframe src="${o}" width="0" height="0" style="border:none;" tabindex="-1" aria-hidden="true"></iframe>`, this.iframe = s.querySelector("iframe"), !this.iframe) {
+          a(new Error("Failed to create coordinator iframe"));
+          return;
+        }
+        this.messageHandler = (l) => {
+          var c, d, u;
+          if (l.source === ((c = this.iframe) == null ? void 0 : c.contentWindow)) {
+            if (((d = l.data) == null ? void 0 : d.type) === "coordinator:ready") {
+              n();
+              return;
+            }
+            if (((u = l.data) == null ? void 0 : u.type) === "coordinator:error") {
+              a(l.data.error);
+              return;
+            }
+          }
+        }, window.addEventListener("message", this.messageHandler), this.iframe.addEventListener("error", () => {
+          a(new Error("Coordinator iframe failed to load"));
+        });
+      }))
+    }), this.iframeBaseUrl = S(J), !this.iframeBaseUrl)
+      throw new Error("IFRAME_BASE_URL not found");
+  }
+  /**
+   * Send a command to the coordinator iframe.
+   * Only commands and configuration — never card data.
+   */
+  postMessage(e) {
+    var t, r;
+    (r = (t = this.iframe) == null ? void 0 : t.contentWindow) == null || r.postMessage(e, this.iframeBaseUrl);
+  }
+  onMessage(e, t) {
+    window.addEventListener("message", (r) => {
+      var n, a;
+      r.source === ((n = this.iframe) == null ? void 0 : n.contentWindow) && ((a = r.data) == null ? void 0 : a.type) === e && t(r.data);
+    });
+  }
+  /**
+   * Clean up the coordinator iframe and all associated resources.
+   */
+  dispose() {
+    var t;
+    this.postMessage({ type: "coordinator:dispose" }), this.messageHandler && (window.removeEventListener("message", this.messageHandler), this.messageHandler = null);
+    const e = (t = this.iframe) == null ? void 0 : t.parentElement;
+    this.iframe = null, e == null || e.remove();
+  }
 }
-class xt {
-  constructor(e = "https://api.hellgate.io", r = new AbortController()) {
+class Z {
+  constructor(e = "https://api.hellgate.io", t = new AbortController()) {
     Object.defineProperty(this, "abortCtrl", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: r
+      value: t
     }), Object.defineProperty(this, "baseUrl", {
       enumerable: !0,
       configurable: !0,
@@ -1627,26 +940,26 @@ class xt {
   getSession(e) {
     return fetch(`${this.baseUrl}/sessions/${e}`, {
       signal: this.abortCtrl.signal
-    }).then((r) => V(r));
+    }).then((t) => E(t));
   }
-  completeAction(e, r) {
+  completeAction(e, t) {
     return fetch(`${this.baseUrl}/sessions/${e}/complete-action`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
       },
       mode: "cors",
-      body: JSON.stringify(r),
+      body: JSON.stringify(t),
       signal: this.abortCtrl.signal
-    }).then((n) => V(n));
+    }).then((r) => E(r));
   }
   cancelAll() {
     this.abortCtrl.abort();
   }
 }
-const Ht = 2e3;
-class Kt {
-  constructor(e, r) {
+const ee = 2e3;
+class te {
+  constructor(e, t) {
     Object.defineProperty(this, "id", {
       enumerable: !0,
       configurable: !0,
@@ -1656,7 +969,7 @@ class Kt {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: r
+      value: t
     }), Object.defineProperty(this, "state", {
       enumerable: !0,
       configurable: !0,
@@ -1681,47 +994,47 @@ class Kt {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async () => new Promise((n, i) => {
+      value: async () => new Promise((r, n) => {
         const a = this.onStateChange((s) => {
-          s.next_action !== "wait" && (n(s), a());
+          s.next_action !== "wait" && (r(s), a());
         });
         this.updateSessionState().catch((s) => {
-          s instanceof Response && s.status === 404 && i(new Error(`Session ${this.id} doesn't exist or has expired`)), i(s);
+          s instanceof Response && s.status === 404 && n(new Error(`Session ${this.id} doesn't exist or has expired`)), n(s);
         });
       })
     }), Object.defineProperty(this, "onStateChange", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => (this.stateChangeHandlers.push(n), this.state && n(this.state), () => this.stateChangeHandlers = this.stateChangeHandlers.filter((i) => i !== n))
+      value: (r) => (this.stateChangeHandlers.push(r), this.state && r(this.state), () => this.stateChangeHandlers = this.stateChangeHandlers.filter((n) => n !== r))
     }), Object.defineProperty(this, "onClose", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        var i;
-        return ((i = this.state) == null ? void 0 : i.next_action) === null ? (n(B(this.state)), () => {
-        }) : (this.onCloseHandlers.push(n), () => this.onCloseHandlers = this.onCloseHandlers.filter((a) => a !== n));
+      value: (r) => {
+        var n;
+        return ((n = this.state) == null ? void 0 : n.next_action) === null ? (r(y(this.state)), () => {
+        }) : (this.onCloseHandlers.push(r), () => this.onCloseHandlers = this.onCloseHandlers.filter((a) => a !== r));
       }
     }), Object.defineProperty(this, "completeAction", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: async (n) => {
-        const i = this.state;
+      value: async (r) => {
+        const n = this.state;
         return new Promise((a, s) => {
-          const o = this.onStateChange((c) => {
-            c.next_action !== (i == null ? void 0 : i.next_action) && c.next_action === null && (a(B(c)), o());
+          const o = this.onStateChange((l) => {
+            l.next_action !== (n == null ? void 0 : n.next_action) && l.next_action === null && (a(y(l)), o());
           });
-          this.api.completeAction(this.id, n).then((c) => this.newStateHandle(c, s)).catch(async (c) => s(await Tt(c)));
+          this.api.completeAction(this.id, r).then((l) => this.newStateHandle(l, s)).catch(async (l) => s(await re(l)));
         });
       }
     }), Object.defineProperty(this, "completeSession", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
-      value: (n) => {
-        this.onCloseHandlers.forEach((i) => i(n)), this.stop();
+      value: (r) => {
+        this.onCloseHandlers.forEach((n) => n(r)), this.stop();
       }
     }), Object.defineProperty(this, "dispose", {
       enumerable: !0,
@@ -1733,46 +1046,51 @@ class Kt {
     });
   }
   isNextAction(e) {
-    var r;
-    return ((r = this.state) == null ? void 0 : r.next_action) === e;
+    var t;
+    return ((t = this.state) == null ? void 0 : t.next_action) === e;
   }
   stop() {
     window.clearTimeout(this.pollingTimer), this.stateChangeHandlers = [], this.onCloseHandlers = [];
   }
   async updateSessionState(e) {
-    const r = await this.api.getSession(this.id);
-    this.newStateHandle(r, e);
+    const t = await this.api.getSession(this.id);
+    this.newStateHandle(t, e);
   }
-  newStateHandle(e, r) {
-    var n;
+  newStateHandle(e, t) {
+    var r;
     switch (!e.next_action && e.status && (e.next_action = null), e.next_action) {
       case "wait": {
-        window.clearTimeout(this.pollingTimer), this.pollingTimer = window.setTimeout(() => this.updateSessionState(r).catch((i) => {
-          i instanceof Response && i.status === 404 && (r == null || r(new Error(`Session ${this.id} has expired`)));
-        }), Ht);
+        window.clearTimeout(this.pollingTimer), this.pollingTimer = window.setTimeout(() => this.updateSessionState(t).catch((n) => {
+          n instanceof Response && n.status === 404 && (t == null || t(new Error(`Session ${this.id} has expired`)));
+        }), ee);
         break;
       }
     }
-    e.next_action !== ((n = this.state) == null ? void 0 : n.next_action) && this.stateChangeHandlers.forEach((i) => i(e)), e.next_action === null && this.completeSession(B(e)), this.state = e;
+    e.next_action !== ((r = this.state) == null ? void 0 : r.next_action) && this.stateChangeHandlers.forEach((n) => n(e)), e.next_action === null && this.completeSession(y(e)), this.state = e;
   }
 }
-async function Tt(t) {
-  return !t.ok && t.status >= 400 && t.status <= 500 ? t.json() : t;
+async function re(i) {
+  return !i.ok && i.status >= 400 && i.status <= 500 ? i.json() : i;
 }
-function B(t) {
-  const e = { ...t };
+function y(i) {
+  const e = { ...i };
   return delete e.next_action, e;
 }
-const Dt = {
+const ie = {
   base_url: "https://api.hellgate.io"
 };
-class ve {
-  constructor(e, r) {
+class N {
+  constructor(e, t, r) {
     Object.defineProperty(this, "session", {
       enumerable: !0,
       configurable: !0,
       writable: !0,
       value: e
+    }), Object.defineProperty(this, "coordinator", {
+      enumerable: !0,
+      configurable: !0,
+      writable: !0,
+      value: t
     }), Object.defineProperty(this, "paymentFlowHandlers", {
       enumerable: !0,
       configurable: !0,
@@ -1783,7 +1101,7 @@ class ve {
       configurable: !0,
       writable: !0,
       value: () => {
-        this.session.dispose(), Object.values(this.paymentFlowHandlers).forEach((n) => n == null ? void 0 : n.dispose());
+        this.session.dispose(), this.coordinator.dispose(), Object.values(this.paymentFlowHandlers).forEach((n) => n == null ? void 0 : n.dispose());
       }
     }), Object.defineProperty(this, "onSessionComplete", {
       enumerable: !0,
@@ -1797,46 +1115,47 @@ class ve {
   use(e) {
     return this.paymentFlowHandlers[e];
   }
-  static async init(e, r = {}) {
-    const { session: n, cardHandler: i, handler3DS: a } = await this.initHandlers(e, r);
-    return new ve(n, {
-      CARD: i,
-      "3DS": a
+  static async init(e, t = {}) {
+    const { session: r, coordinator: n, cardHandler: a, handler3DS: s } = await this.initHandlers(e, t);
+    return new N(r, n, {
+      CARD: a,
+      "3DS": s
     });
   }
-  static async initHandlers(e, r) {
-    const n = {
-      ...Dt,
-      ...r
-    }, i = new xt(n.base_url, n.abortCtrl), a = new Kt(e, i);
-    await a.init();
-    const s = a.isNextAction("tokenize_card") || a.isNextAction("refresh_security_code") ? await this.createCardHandler(a) : void 0, o = this.create3DSHandler(a, r);
-    return { session: a, cardHandler: s, handler3DS: o };
-  }
-  static createCardHandler(e) {
-    return q.init(e);
-  }
-  static create3DSHandler(e, r) {
-    return new He(e, {
-      domContainer: r.challenge_3ds_container,
-      labelText: r.challenge_3ds_label_text
+  static async initHandlers(e, t) {
+    const r = {
+      ...ie,
+      ...t
+    }, n = new Z(r.base_url, r.abortCtrl), a = new te(e, n), s = new Q();
+    s.onMessage("coordinator:session_state_change", (c) => {
+      c.state.next_action !== "wait" && a.newStateHandle(c.state);
+    }), await s.init(e, r.base_url, r.abortCtrl);
+    const o = a.isNextAction("tokenize_card") || a.isNextAction("refresh_security_code") ? await this.createCardHandler(a, s) : void 0, l = this.create3DSHandler(a, t);
+    return { session: a, coordinator: s, cardHandler: o, handler3DS: l };
+  }
+  static createCardHandler(e, t) {
+    return w.init(e, t);
+  }
+  static create3DSHandler(e, t) {
+    return new k(e, {
+      domContainer: t.challenge_3ds_container,
+      labelText: t.challenge_3ds_label_text
     });
   }
 }
 globalThis.HellgateSDK && (globalThis.Hellgate = globalThis.HellgateSDK.Hellgate, delete globalThis.HellgateSDK);
 export {
-  Pt as CardElement,
-  _t as CardExpirationDateElement,
-  Ct as CardNumberElement,
-  vt as CardVerificationCodeElement,
-  ve as Hellgate,
-  He as Hellgate3DSHandler,
-  q as HellgateCardHandler,
-  Pe as TextElement,
-  v as createElement,
-  Ce as extractCardNumberValue,
-  _e as extractExpiryDateValue,
-  St as putCardNumberValue,
-  Se as putExpiryDateValue,
-  Ot as uid
+  q as CardElement,
+  z as CardExpirationDateElement,
+  Y as CardNumberElement,
+  G as CardVerificationCodeElement,
+  N as Hellgate,
+  k as Hellgate3DSHandler,
+  w as HellgateCardHandler,
+  K as TextElement,
+  b as createElement,
+  L as extractCardNumberValue,
+  M as extractExpiryDateValue,
+  B as putCardNumberValue,
+  I as putExpiryDateValue
 };