@thavguard/arc-pay 0.1.14 → 0.1.16

package/README.md

@@ -75,28 +75,29 @@ return as navigation only; confirm the final status through webhooks or
 `GET /payments/{id}`.
 
 H2H card execution returns a standardized `next_action` when the buyer must do
-something in the browser. The SDK helper turns that action into the POST form
-descriptor you render in a hidden iframe or visible browser page:
+something in the browser. Use `runThreeDSBrowserFlow()` to run the 3DS Method
+hidden iframe, call your backend completion proxy, and submit any returned ACS
+challenge form:
 
 ```ts
-import {
-  buildThreeDSBrowserStep,
-  buildThreeDSMethodCompletion,
-  getThreeDSAction,
-} from "@thavguard/arc-pay/server";
+import { runThreeDSBrowserFlow } from "@thavguard/arc-pay/js";
 
 const result = await client.executePayment(paymentId, body, { idempotencyKey });
-const action = getThreeDSAction(result.next_action);
-
-if (action) {
-  const step = buildThreeDSBrowserStep(action);
-  // Render step.form using form.action, form.method, form.target, form.fields.
-  // For step.kind === "method", call completeThreeDSMethod from your backend
-  // after the hidden iframe finishes or times out.
-  const completeBody = buildThreeDSMethodCompletion(action, "Y");
-  const afterMethod = await client.completeThreeDSMethod(paymentId, completeBody);
-  // If afterMethod.next_action is a challenge, render the returned browser step.
-}
+await runThreeDSBrowserFlow(result.next_action, {
+  methodCompletionIdempotencyKey: crypto.randomUUID(),
+  async completeThreeDSMethod(completion, _nextAction, opts) {
+    const response = await fetch(`/api/payments/${paymentId}/complete-3ds-method`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "Idempotency-Key": opts.idempotencyKey,
+      },
+      body: JSON.stringify(completion),
+    });
+    if (!response.ok) throw new Error("3DS Method completion failed");
+    return response.json();
+  },
+});
 ```
 
 Do not branch on bank-specific 3DS fields. Arc Pay normalizes 3DS 1.x and 2.x
@@ -104,8 +105,9 @@ into `next_action.three_ds.submit`.
 
 After the browser step redirects or the customer returns to your order page,
 use `waitForPaymentTerminal(paymentId)` or your own webhook/status loop. The
-helper polls `GET /payments/{id}` and stops at terminal Arc Pay statuses; it
-does not attempt to automate issuer ACS challenge pages.
+server helper polls `GET /payments/{id}` and stops at terminal Arc Pay statuses.
+The browser helper automates the merchant-owned handoff, but the issuer ACS page
+still belongs to the bank after the challenge form is submitted.
 
 For saved cards and subscriptions, create a setup intent with
 `createCardSetup()`, tokenize through Hosted Fields, execute the setup payment,

package/dist/{actions-BYQh0wu2.d.cts → actions-BqOvavQk.d.cts}

@@ -344,6 +344,41 @@ interface ThreeDSBrowserStep {
     completionEndpoint?: string;
     threeDSServerTransId?: string;
 }
+interface MountedThreeDSForm {
+    form: HTMLFormElement;
+    iframe?: HTMLIFrameElement;
+    submit: () => void;
+    remove: () => void;
+}
+interface ThreeDSMountOptions {
+    document?: Document;
+    container?: HTMLElement;
+    challengeTarget?: "_self";
+    submitter?: (form: HTMLFormElement) => void;
+}
+interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {
+    methodCompletionIdempotencyKey: string;
+    completeThreeDSMethod: (completion: ReturnType<typeof buildThreeDSMethodCompletion>, nextAction: PaymentNextAction, opts: {
+        idempotencyKey: string;
+    }) => Promise<ExecutePaymentResponse>;
+    methodCompletionIndicator?: "Y" | "N" | "U";
+    methodTimeoutMs?: number;
+    signal?: AbortSignal;
+}
+type ThreeDSBrowserFlowResult = {
+    status: "no_action";
+    response?: ExecutePaymentResponse;
+} | {
+    status: "method_completed";
+    response: ExecutePaymentResponse;
+    methodResult: "loaded" | "timeout";
+} | {
+    status: "challenge_submitted";
+    action: PaymentNextAction;
+    response?: ExecutePaymentResponse;
+    mounted: MountedThreeDSForm;
+    methodResult?: "loaded" | "timeout";
+};
 declare const collectBrowserInfo: (acceptHeader?: string) => BrowserInfo;
 declare const getThreeDSAction: (nextAction?: PaymentNextAction) => PaymentNextAction | null;
 declare const isThreeDSMethodAction: (nextAction?: PaymentNextAction) => boolean;
@@ -354,6 +389,8 @@ declare const buildThreeDSMethodCompletion: (nextAction: PaymentNextAction, comp
     completion_indicator: "Y" | "N" | "U";
     three_ds_server_trans_id: string;
 };
+declare const mountThreeDSBrowserForm: (nextAction: PaymentNextAction, options?: ThreeDSMountOptions) => MountedThreeDSForm;
+declare const runThreeDSBrowserFlow: (nextAction: PaymentNextAction | undefined, options: RunThreeDSBrowserFlowOptions) => Promise<ThreeDSBrowserFlowResult>;
 declare const buildThreeDSAutoSubmitHtml: (nextAction: PaymentNextAction) => string;
 
-export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, type ExecutePaymentRequest as E, type Link as L, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type WaitForPaymentOptions as W, type BrowserInfo as a, type BrowserPostForm as b, type ChargeSavedCardRequest as c, type CheckoutSession as d, type CompleteThreeDSMethodRequest as e, type CreateCardSetupRequest as f, type CreateCheckoutSessionRequest as g, type CreateLinkRequest as h, type CreatePaymentRequest as i, type CreateRefundRequest as j, type ExecutePaymentResponse as k, type ListAvailablePaymentMethodsQuery as l, type ListPaymentsQuery as m, type PaymentFlowMode as n, type PaymentList as o, type PaymentMethod as p, type PaymentNextAction as q, type ThreeDSBrowserStep as r, buildThreeDSAutoSubmitHtml as s, buildThreeDSBrowserForm as t, buildThreeDSBrowserStep as u, buildThreeDSMethodCompletion as v, collectBrowserInfo as w, getThreeDSAction as x, isThreeDSChallengeAction as y, isThreeDSMethodAction as z };
+export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, getThreeDSAction as D, type ExecutePaymentRequest as E, isThreeDSChallengeAction as F, isThreeDSMethodAction as G, mountThreeDSBrowserForm as H, runThreeDSBrowserFlow as I, type Link as L, type MountedThreeDSForm as M, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type WaitForPaymentOptions as W, type BrowserInfo as a, type BrowserPostForm as b, type ChargeSavedCardRequest as c, type CheckoutSession as d, type CompleteThreeDSMethodRequest as e, type CreateCardSetupRequest as f, type CreateCheckoutSessionRequest as g, type CreateLinkRequest as h, type CreatePaymentRequest as i, type CreateRefundRequest as j, type ExecutePaymentResponse as k, type ListAvailablePaymentMethodsQuery as l, type ListPaymentsQuery as m, type PaymentFlowMode as n, type PaymentList as o, type PaymentMethod as p, type PaymentNextAction as q, type RunThreeDSBrowserFlowOptions as r, type ThreeDSBrowserFlowResult as s, type ThreeDSBrowserStep as t, type ThreeDSMountOptions as u, buildThreeDSAutoSubmitHtml as v, buildThreeDSBrowserForm as w, buildThreeDSBrowserStep as x, buildThreeDSMethodCompletion as y, collectBrowserInfo as z };

package/dist/{actions-BYQh0wu2.d.ts → actions-BqOvavQk.d.ts}

@@ -344,6 +344,41 @@ interface ThreeDSBrowserStep {
     completionEndpoint?: string;
     threeDSServerTransId?: string;
 }
+interface MountedThreeDSForm {
+    form: HTMLFormElement;
+    iframe?: HTMLIFrameElement;
+    submit: () => void;
+    remove: () => void;
+}
+interface ThreeDSMountOptions {
+    document?: Document;
+    container?: HTMLElement;
+    challengeTarget?: "_self";
+    submitter?: (form: HTMLFormElement) => void;
+}
+interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {
+    methodCompletionIdempotencyKey: string;
+    completeThreeDSMethod: (completion: ReturnType<typeof buildThreeDSMethodCompletion>, nextAction: PaymentNextAction, opts: {
+        idempotencyKey: string;
+    }) => Promise<ExecutePaymentResponse>;
+    methodCompletionIndicator?: "Y" | "N" | "U";
+    methodTimeoutMs?: number;
+    signal?: AbortSignal;
+}
+type ThreeDSBrowserFlowResult = {
+    status: "no_action";
+    response?: ExecutePaymentResponse;
+} | {
+    status: "method_completed";
+    response: ExecutePaymentResponse;
+    methodResult: "loaded" | "timeout";
+} | {
+    status: "challenge_submitted";
+    action: PaymentNextAction;
+    response?: ExecutePaymentResponse;
+    mounted: MountedThreeDSForm;
+    methodResult?: "loaded" | "timeout";
+};
 declare const collectBrowserInfo: (acceptHeader?: string) => BrowserInfo;
 declare const getThreeDSAction: (nextAction?: PaymentNextAction) => PaymentNextAction | null;
 declare const isThreeDSMethodAction: (nextAction?: PaymentNextAction) => boolean;
@@ -354,6 +389,8 @@ declare const buildThreeDSMethodCompletion: (nextAction: PaymentNextAction, comp
     completion_indicator: "Y" | "N" | "U";
     three_ds_server_trans_id: string;
 };
+declare const mountThreeDSBrowserForm: (nextAction: PaymentNextAction, options?: ThreeDSMountOptions) => MountedThreeDSForm;
+declare const runThreeDSBrowserFlow: (nextAction: PaymentNextAction | undefined, options: RunThreeDSBrowserFlowOptions) => Promise<ThreeDSBrowserFlowResult>;
 declare const buildThreeDSAutoSubmitHtml: (nextAction: PaymentNextAction) => string;
 
-export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, type ExecutePaymentRequest as E, type Link as L, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type WaitForPaymentOptions as W, type BrowserInfo as a, type BrowserPostForm as b, type ChargeSavedCardRequest as c, type CheckoutSession as d, type CompleteThreeDSMethodRequest as e, type CreateCardSetupRequest as f, type CreateCheckoutSessionRequest as g, type CreateLinkRequest as h, type CreatePaymentRequest as i, type CreateRefundRequest as j, type ExecutePaymentResponse as k, type ListAvailablePaymentMethodsQuery as l, type ListPaymentsQuery as m, type PaymentFlowMode as n, type PaymentList as o, type PaymentMethod as p, type PaymentNextAction as q, type ThreeDSBrowserStep as r, buildThreeDSAutoSubmitHtml as s, buildThreeDSBrowserForm as t, buildThreeDSBrowserStep as u, buildThreeDSMethodCompletion as v, collectBrowserInfo as w, getThreeDSAction as x, isThreeDSChallengeAction as y, isThreeDSMethodAction as z };
+export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, getThreeDSAction as D, type ExecutePaymentRequest as E, isThreeDSChallengeAction as F, isThreeDSMethodAction as G, mountThreeDSBrowserForm as H, runThreeDSBrowserFlow as I, type Link as L, type MountedThreeDSForm as M, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type WaitForPaymentOptions as W, type BrowserInfo as a, type BrowserPostForm as b, type ChargeSavedCardRequest as c, type CheckoutSession as d, type CompleteThreeDSMethodRequest as e, type CreateCardSetupRequest as f, type CreateCheckoutSessionRequest as g, type CreateLinkRequest as h, type CreatePaymentRequest as i, type CreateRefundRequest as j, type ExecutePaymentResponse as k, type ListAvailablePaymentMethodsQuery as l, type ListPaymentsQuery as m, type PaymentFlowMode as n, type PaymentList as o, type PaymentMethod as p, type PaymentNextAction as q, type RunThreeDSBrowserFlowOptions as r, type ThreeDSBrowserFlowResult as s, type ThreeDSBrowserStep as t, type ThreeDSMountOptions as u, buildThreeDSAutoSubmitHtml as v, buildThreeDSBrowserForm as w, buildThreeDSBrowserStep as x, buildThreeDSMethodCompletion as y, collectBrowserInfo as z };

package/dist/cdn/arcpay.global.js

@@ -1,3 +1,3 @@
-var ArcPay=(function(exports){'use strict';var n=class extends Error{constructor(r){super(r.message),this.name="ArcPayError",this.type=r.type,this.code=r.code,this.param=r.param,this.paymentId=r.paymentId,this.declineCode=r.declineCode,this.retryable=r.retryable,this.requestId=r.requestId;}},C=e=>e instanceof n&&e.type==="validation_error",M=e=>e instanceof n&&e.type==="authentication_error",R=e=>e instanceof n&&e.type==="authorization_error",L=e=>e instanceof n&&e.type==="state_error",N=e=>e instanceof n&&e.type==="rate_limit_error",O=e=>e instanceof n&&e.type==="api_error",W=e=>e instanceof n&&e.type==="network_error",H=e=>e instanceof n&&e.type==="challenge_aborted";var f=e=>e.startsWith("pk_test_")?"sandbox":"live",S=e=>{if(typeof e!="string"||e.length===0)throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must be a non-empty string",retryable:false});if(!e.startsWith("pk_test_")&&!e.startsWith("pk_live_"))throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.",retryable:false})};var I="data-arcpay-sandbox-banner",P=()=>{if(typeof document=="undefined"||document.querySelector(`[${I}]`))return;let e=document.createElement("div");e.setAttribute(I,""),e.style.cssText="position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);";let r=document.createElement("span");r.textContent="ARC PAY TEST MODE \u2014 payments are simulated",e.appendChild(r);let t=document.createElement("button");t.type="button",t.setAttribute("data-arcpay-banner-dismiss",""),t.textContent="\xD7",t.setAttribute("aria-label","Dismiss test mode banner"),t.style.cssText="margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;",t.addEventListener("click",()=>e.remove()),e.appendChild(t),document.body.appendChild(e);};var K="arcpay:",$=e=>typeof e=="object"&&e!==null&&"type"in e&&typeof e.type=="string"&&e.type.startsWith(K),u=(e,r,t)=>{if(t==="*")throw new n({type:"validation_error",code:"wildcard_origin_forbidden",message:"postToIframe: targetOrigin cannot be '*'",retryable:false});if(!e.contentWindow)throw new n({type:"validation_error",code:"iframe_not_loaded",message:"postToIframe: iframe.contentWindow is null (iframe not mounted)",retryable:false});e.contentWindow.postMessage(r,t);};var m=(e,r)=>e.origin!==r||!$(e.data)?null:e.data;var U=new Set(["position","transform","pointer-events","z-index","top","left","right","bottom","inset"]),g=e=>{let r={};for(let[t,o]of Object.entries(e)){let s=t.toLowerCase();U.has(s)||(r[t]=o);}return r},b=e=>{let r={base:g(e.base)};return e.invalid!==void 0&&(r.invalid=g(e.invalid)),e.focus!==void 0&&(r.focus=g(e.focus)),r};var y=class{constructor(r,t,o){this.field=r;this.options=t;this.context=o;this.iframe=null;this.listeners=new Set;this.status="pending";this.messageHandler=null;}mount(r){if(this.iframe)throw new n({type:"validation_error",code:"already_mounted",message:`Element ${this.field} is already mounted`,retryable:false});let t=typeof r=="string"?document.querySelector(r):r;if(!(t instanceof HTMLElement))throw new n({type:"validation_error",code:"mount_target_not_found",message:`mount target not found: ${String(r)}`,retryable:false});let o=document.createElement("iframe");o.src=`${this.context.iframeBase}/iframe/${this.field}`,o.style.cssText="border:0;width:100%;height:100%;display:block;",o.setAttribute("allow","payment"),o.setAttribute("data-arcpay-element",this.field),t.appendChild(o),this.iframe=o;let s=new URL(this.context.iframeBase).origin;this.messageHandler=a=>{var l;if(a.source!==((l=this.iframe)==null?void 0:l.contentWindow))return;let p=m(a,s);p&&this.handleMessage(p);},window.addEventListener("message",this.messageHandler),o.addEventListener("load",()=>{if(!this.iframe)return;let a={type:"arcpay:hello",origin:window.location.origin,publishableKey:this.context.publishableKey,channelId:this.context.channelId};u(this.iframe,a,s);},{once:true});}handleMessage(r){r.type==="arcpay:ready"?(this.status="ready",this.options.style&&this.send({type:"arcpay:style",payload:b(this.options.style)}),this.emit({type:"ready"})):r.type==="arcpay:rejected"?(this.status="error",this.emit({type:"error",reason:r.reason})):r.type==="arcpay:change"&&r.field===this.field&&this.emit({type:"change",isValid:r.isValid,brand:r.brand,lastFour:r.lastFour});}update(r){r.style&&this.send({type:"arcpay:style",payload:b(r.style)});}destroy(){this.iframe&&(this.iframe.remove(),this.iframe=null),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.listeners.clear(),this.status="pending";}on(r,t){return this.listeners.add(t),()=>this.listeners.delete(t)}focus(){this.send({type:"arcpay:focus"});}clear(){this.send({type:"arcpay:clear"});}isReady(){return this.status==="ready"}getIframeContentWindow(){var r,t;return (t=(r=this.iframe)==null?void 0:r.contentWindow)!=null?t:null}send(r){if(!this.iframe)throw new n({type:"validation_error",code:"not_mounted",message:`Element ${this.field} is not mounted`,retryable:false});u(this.iframe,r,new URL(this.context.iframeBase).origin);}emit(r){for(let t of this.listeners)t(r);}};var q="https://sdk.arcpay.space",V=()=>{var e;if(!((e=globalThis.crypto)!=null&&e.randomUUID))throw new n({type:"validation_error",code:"crypto_unavailable",message:"crypto.randomUUID is required for Hosted Fields",retryable:false});return globalThis.crypto.randomUUID()},d=class{constructor(r){this.elementMap=new Map;this.tokenizeInFlight=false;var t;this.publishableKey=r.publishableKey,this.iframeBase=(t=r.iframeBase)!=null?t:q,this.channelId=V();}create(r,t={}){if(this.elementMap.has(r))throw new n({type:"validation_error",code:"duplicate_element",message:`Element for ${r} already created`,retryable:false});let o={iframeBase:this.iframeBase,publishableKey:this.publishableKey,channelId:this.channelId},s=new y(r,t,o);return this.elementMap.set(r,s),s}async tokenize(r,t){if(this.tokenizeInFlight)throw new n({type:"validation_error",code:"tokenize_in_progress",message:"A tokenize() call is already in progress for this Elements instance",retryable:false});let o=this.elementMap.get("cardNumber"),s=this.elementMap.get("cardExpiry"),a=this.elementMap.get("cardCvv");if(!o||!s||!a)throw new n({type:"validation_error",code:"incomplete_elements",message:"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()",retryable:false});if(!o.isReady()||!s.isReady()||!a.isReady())throw new n({type:"validation_error",code:"elements_not_ready",message:"Wait for all elements to fire 'ready' event before tokenize()",retryable:false});this.tokenizeInFlight=true;try{return await this.doTokenize(o,r,t)}finally{this.tokenizeInFlight=false;}}doTokenize(r,t,o){let s=new URL(this.iframeBase).origin,a=r.getIframeContentWindow();return new Promise((p,l)=>{let x=window.setTimeout(()=>{window.removeEventListener("message",c),l(new n({type:"network_error",code:"tokenize_timeout",message:"tokenize() timed out after 30 seconds",retryable:true,paymentId:t}));},3e4),c=T=>{if(a!==null&&T.source!==a)return;let i=m(T,s);if(i){if(i.type==="arcpay:tokenize-result")clearTimeout(x),window.removeEventListener("message",c),p({cardTokenId:i.cardTokenId,cardMask:i.cardMask,cardScheme:i.cardScheme,cardBin:i.cardBin,expiresIn:i.expiresIn,expiresAt:i.expiresAt});else if(i.type==="arcpay:tokenize-error"){clearTimeout(x),window.removeEventListener("message",c);let F=i.errorType==="validation_error"||i.errorType==="api_error"?i.errorType:"api_error";l(new n({type:F,code:i.code,message:i.message,retryable:false,paymentId:t}));}}};window.addEventListener("message",c),r.send({type:"arcpay:tokenize",paymentId:t,idempotencyKey:o});})}destroy(){for(let r of this.elementMap.values())r.destroy();this.elementMap.clear();}};var j=S,w=new Map,Y=e=>(f(e)==="sandbox"&&P(),{publishableKey:e,environment:f(e),elements:()=>new d({publishableKey:e})});function X(e){try{j(e);}catch(s){return Promise.reject(s)}let r=e,t=w.get(r);if(t)return t;let o=Promise.resolve(Y(e));return w.set(r,o),o}var G=()=>{w.clear();},J={load:X,__resetForTests:G};var Q=[1,4,8,15,16,24,32,48],Z=e=>Q.includes(e)?e:24,ee=e=>e>=1e3?"05":e>=600?"04":e>=500?"03":e>=390?"02":"01",k=(e="text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8")=>{if(typeof window=="undefined"||typeof navigator=="undefined"||typeof screen=="undefined")throw new Error("collectBrowserInfo must be called in a browser environment");return {accept_header:e,language:navigator.language||"en",screen_width:screen.width,screen_height:screen.height,color_depth:Z(screen.colorDepth),timezone_offset_minutes:new Date().getTimezoneOffset(),java_enabled:false,user_agent:navigator.userAgent,window_size:ee(window.innerWidth||screen.width)}},v=e=>e!=null?e:null,E=e=>(e==null?void 0:e.type)==="three_ds_method"&&e.three_ds.phase==="method",A=e=>(e==null?void 0:e.type)==="three_ds_challenge"&&e.three_ds.phase==="challenge",h=e=>({action:e.three_ds.submit.url,method:e.three_ds.submit.method,target:e.three_ds.submit.target,fields:e.three_ds.submit.fields}),B=e=>{let r=v(e);return r?{kind:r.three_ds.phase,protocolVersion:r.three_ds.version,form:h(r),completionEndpoint:r.three_ds.completion_endpoint,threeDSServerTransId:r.three_ds.three_ds_server_trans_id}:null},z=(e,r="Y")=>{if(!E(e)||!e.three_ds.three_ds_server_trans_id)throw new Error("nextAction must be a three_ds_method action with three_ds_server_trans_id");return {completion_indicator:r,three_ds_server_trans_id:e.three_ds.three_ds_server_trans_id}},_=e=>e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;"),D=e=>{let r=h(e),t=r.target==="hidden_iframe"?"arcpay-three-ds-method":"_self",o=r.fields.map(a=>`<input type="hidden" name="${_(a.name)}" value="${_(a.value)}">`).join("");return `<!doctype html><html><head><meta charset="utf-8"></head><body>${r.target==="hidden_iframe"?'<iframe name="arcpay-three-ds-method" title="3-D Secure method" hidden></iframe>':""}<form method="POST" action="${_(r.action)}" target="${t}">${o}</form><script>document.forms[0].submit();</script></body></html>`};var xe="0.1.14";
-exports.ArcPay=J;exports.ArcPayError=n;exports.Elements=d;exports.SDK_VERSION=xe;exports.buildThreeDSAutoSubmitHtml=D;exports.buildThreeDSBrowserForm=h;exports.buildThreeDSBrowserStep=B;exports.buildThreeDSMethodCompletion=z;exports.collectBrowserInfo=k;exports.getThreeDSAction=v;exports.isApiError=O;exports.isAuthenticationError=M;exports.isAuthorizationError=R;exports.isChallengeAborted=H;exports.isNetworkError=W;exports.isRateLimitError=N;exports.isStateError=L;exports.isThreeDSChallengeAction=A;exports.isThreeDSMethodAction=E;exports.isValidationError=C;return exports;})({});//# sourceMappingURL=arcpay.global.js.map
+var ArcPay=(function(exports){'use strict';var s=class extends Error{constructor(t){super(t.message),this.name="ArcPayError",this.type=t.type,this.code=t.code,this.param=t.param,this.paymentId=t.paymentId,this.declineCode=t.declineCode,this.retryable=t.retryable,this.requestId=t.requestId;}},L=e=>e instanceof s&&e.type==="validation_error",O=e=>e instanceof s&&e.type==="authentication_error",N=e=>e instanceof s&&e.type==="authorization_error",H=e=>e instanceof s&&e.type==="state_error",K=e=>e instanceof s&&e.type==="rate_limit_error",U=e=>e instanceof s&&e.type==="api_error",W=e=>e instanceof s&&e.type==="network_error",$=e=>e instanceof s&&e.type==="challenge_aborted";var T=e=>e.startsWith("pk_test_")?"sandbox":"live",D=e=>{if(typeof e!="string"||e.length===0)throw new s({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must be a non-empty string",retryable:false});if(!e.startsWith("pk_test_")&&!e.startsWith("pk_live_"))throw new s({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.",retryable:false})};var k="data-arcpay-sandbox-banner",A=()=>{if(typeof document=="undefined"||document.querySelector(`[${k}]`))return;let e=document.createElement("div");e.setAttribute(k,""),e.style.cssText="position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);";let t=document.createElement("span");t.textContent="ARC PAY TEST MODE \u2014 payments are simulated",e.appendChild(t);let r=document.createElement("button");r.type="button",r.setAttribute("data-arcpay-banner-dismiss",""),r.textContent="\xD7",r.setAttribute("aria-label","Dismiss test mode banner"),r.style.cssText="margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;",r.addEventListener("click",()=>e.remove()),e.appendChild(r),document.body.appendChild(e);};var q="arcpay:",V=e=>typeof e=="object"&&e!==null&&"type"in e&&typeof e.type=="string"&&e.type.startsWith(q),v=(e,t,r)=>{if(r==="*")throw new s({type:"validation_error",code:"wildcard_origin_forbidden",message:"postToIframe: targetOrigin cannot be '*'",retryable:false});if(!e.contentWindow)throw new s({type:"validation_error",code:"iframe_not_loaded",message:"postToIframe: iframe.contentWindow is null (iframe not mounted)",retryable:false});e.contentWindow.postMessage(t,r);};var f=(e,t)=>e.origin!==t||!V(e.data)?null:e.data;var Y=new Set(["position","transform","pointer-events","z-index","top","left","right","bottom","inset"]),E=e=>{let t={};for(let[r,n]of Object.entries(e)){let i=r.toLowerCase();Y.has(i)||(t[r]=n);}return t},S=e=>{let t={base:E(e.base)};return e.invalid!==void 0&&(t.invalid=E(e.invalid)),e.focus!==void 0&&(t.focus=E(e.focus)),t};var g=class{constructor(t,r,n){this.field=t;this.options=r;this.context=n;this.iframe=null;this.listeners=new Set;this.status="pending";this.messageHandler=null;}mount(t){if(this.iframe)throw new s({type:"validation_error",code:"already_mounted",message:`Element ${this.field} is already mounted`,retryable:false});let r=typeof t=="string"?document.querySelector(t):t;if(!(r instanceof HTMLElement))throw new s({type:"validation_error",code:"mount_target_not_found",message:`mount target not found: ${String(t)}`,retryable:false});let n=document.createElement("iframe");n.src=`${this.context.iframeBase}/iframe/${this.field}`,n.style.cssText="border:0;width:100%;height:100%;display:block;",n.setAttribute("allow","payment"),n.setAttribute("data-arcpay-element",this.field),r.appendChild(n),this.iframe=n;let i=new URL(this.context.iframeBase).origin;this.messageHandler=o=>{var d;if(o.source!==((d=this.iframe)==null?void 0:d.contentWindow))return;let c=f(o,i);c&&this.handleMessage(c);},window.addEventListener("message",this.messageHandler),n.addEventListener("load",()=>{if(!this.iframe)return;let o={type:"arcpay:hello",origin:window.location.origin,publishableKey:this.context.publishableKey,channelId:this.context.channelId};v(this.iframe,o,i);},{once:true});}handleMessage(t){t.type==="arcpay:ready"?(this.status="ready",this.options.style&&this.send({type:"arcpay:style",payload:S(this.options.style)}),this.emit({type:"ready"})):t.type==="arcpay:rejected"?(this.status="error",this.emit({type:"error",reason:t.reason})):t.type==="arcpay:change"&&t.field===this.field&&this.emit({type:"change",isValid:t.isValid,brand:t.brand,lastFour:t.lastFour});}update(t){t.style&&this.send({type:"arcpay:style",payload:S(t.style)});}destroy(){this.iframe&&(this.iframe.remove(),this.iframe=null),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.listeners.clear(),this.status="pending";}on(t,r){return this.listeners.add(r),()=>this.listeners.delete(r)}focus(){this.send({type:"arcpay:focus"});}clear(){this.send({type:"arcpay:clear"});}isReady(){return this.status==="ready"}getIframeContentWindow(){var t,r;return (r=(t=this.iframe)==null?void 0:t.contentWindow)!=null?r:null}send(t){if(!this.iframe)throw new s({type:"validation_error",code:"not_mounted",message:`Element ${this.field} is not mounted`,retryable:false});v(this.iframe,t,new URL(this.context.iframeBase).origin);}emit(t){for(let r of this.listeners)r(t);}};var j="https://sdk.arcpay.space",X=()=>{var e;if(!((e=globalThis.crypto)!=null&&e.randomUUID))throw new s({type:"validation_error",code:"crypto_unavailable",message:"crypto.randomUUID is required for Hosted Fields",retryable:false});return globalThis.crypto.randomUUID()},u=class{constructor(t){this.elementMap=new Map;this.tokenizeInFlight=false;var r;this.publishableKey=t.publishableKey,this.iframeBase=(r=t.iframeBase)!=null?r:j,this.channelId=X();}create(t,r={}){if(this.elementMap.has(t))throw new s({type:"validation_error",code:"duplicate_element",message:`Element for ${t} already created`,retryable:false});let n={iframeBase:this.iframeBase,publishableKey:this.publishableKey,channelId:this.channelId},i=new g(t,r,n);return this.elementMap.set(t,i),i}async tokenize(t,r){if(this.tokenizeInFlight)throw new s({type:"validation_error",code:"tokenize_in_progress",message:"A tokenize() call is already in progress for this Elements instance",retryable:false});let n=this.elementMap.get("cardNumber"),i=this.elementMap.get("cardExpiry"),o=this.elementMap.get("cardCvv");if(!n||!i||!o)throw new s({type:"validation_error",code:"incomplete_elements",message:"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()",retryable:false});if(!n.isReady()||!i.isReady()||!o.isReady())throw new s({type:"validation_error",code:"elements_not_ready",message:"Wait for all elements to fire 'ready' event before tokenize()",retryable:false});this.tokenizeInFlight=true;try{return await this.doTokenize(n,t,r)}finally{this.tokenizeInFlight=false;}}doTokenize(t,r,n){let i=new URL(this.iframeBase).origin,o=t.getIframeContentWindow();return new Promise((c,d)=>{let l=window.setTimeout(()=>{window.removeEventListener("message",m),d(new s({type:"network_error",code:"tokenize_timeout",message:"tokenize() timed out after 30 seconds",retryable:true,paymentId:r}));},3e4),m=p=>{if(o!==null&&p.source!==o)return;let a=f(p,i);if(a){if(a.type==="arcpay:tokenize-result")clearTimeout(l),window.removeEventListener("message",m),c({cardTokenId:a.cardTokenId,cardMask:a.cardMask,cardScheme:a.cardScheme,cardBin:a.cardBin,expiresIn:a.expiresIn,expiresAt:a.expiresAt});else if(a.type==="arcpay:tokenize-error"){clearTimeout(l),window.removeEventListener("message",m);let C=a.errorType==="validation_error"||a.errorType==="api_error"?a.errorType:"api_error";d(new s({type:C,code:a.code,message:a.message,retryable:false,paymentId:r}));}}};window.addEventListener("message",m),t.send({type:"arcpay:tokenize",paymentId:r,idempotencyKey:n});})}destroy(){for(let t of this.elementMap.values())t.destroy();this.elementMap.clear();}};var G=D,x=new Map,J=e=>(T(e)==="sandbox"&&A(),{publishableKey:e,environment:T(e),elements:()=>new u({publishableKey:e})});function Q(e){try{G(e);}catch(i){return Promise.reject(i)}let t=e,r=x.get(t);if(r)return r;let n=Promise.resolve(J(e));return x.set(t,n),n}var Z=()=>{x.clear();},ee={load:Q,__resetForTests:Z};var te=[1,4,8,15,16,24,32,48],re=e=>te.includes(e)?e:24,oe=e=>e>=1e3?"05":e>=600?"04":e>=500?"03":e>=390?"02":"01",F=(e="text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8")=>{if(typeof window=="undefined"||typeof navigator=="undefined"||typeof screen=="undefined")throw new Error("collectBrowserInfo must be called in a browser environment");return {accept_header:e,language:navigator.language||"en",screen_width:screen.width,screen_height:screen.height,color_depth:re(screen.colorDepth),timezone_offset_minutes:new Date().getTimezoneOffset(),java_enabled:false,user_agent:navigator.userAgent,window_size:oe(window.innerWidth||screen.width)}},b=e=>e!=null?e:null,_=e=>(e==null?void 0:e.type)==="three_ds_method"&&e.three_ds.phase==="method",w=e=>(e==null?void 0:e.type)==="three_ds_challenge"&&e.three_ds.phase==="challenge",h=e=>({action:e.three_ds.submit.url,method:e.three_ds.submit.method,target:e.three_ds.submit.target,fields:e.three_ds.submit.fields}),B=e=>{let t;try{t=new URL(e);}catch(r){throw new Error("3DS form action must be an absolute HTTPS URL")}if(t.protocol!=="https:")throw new Error("3DS form action must use HTTPS")},M=e=>{let t=b(e);return t?{kind:t.three_ds.phase,protocolVersion:t.three_ds.version,form:h(t),completionEndpoint:t.three_ds.completion_endpoint,threeDSServerTransId:t.three_ds.three_ds_server_trans_id}:null},I=(e,t="Y")=>{if(!_(e)||!e.three_ds.three_ds_server_trans_id)throw new Error("nextAction must be a three_ds_method action with three_ds_server_trans_id");return {completion_indicator:t,three_ds_server_trans_id:e.three_ds.three_ds_server_trans_id}},ne=e=>{if(e)return e;if(typeof document=="undefined")throw new Error("3DS browser helpers must be called in a browser environment");return document},se=e=>{e.submit();},y=(e,t={})=>{var l,m;let r=ne(t.document),n=(l=t.container)!=null?l:r.body,i=h(e);B(i.action);let o=r.createElement("form"),c=i.target==="hidden_iframe"?`arcpay-three-ds-method-${Math.random().toString(36).slice(2)}`:(m=t.challengeTarget)!=null?m:"_self",d;o.method=i.method,o.action=i.action,o.target=c,o.hidden=true;for(let p of i.fields){let a=r.createElement("input");a.type="hidden",a.name=p.name,a.value=p.value,o.append(a);}return i.target==="hidden_iframe"&&(d=r.createElement("iframe"),d.name=c,d.title="3-D Secure method",d.hidden=true,n.append(d)),n.append(o),{form:o,iframe:d,submit:()=>{var p;return ((p=t.submitter)!=null?p:se)(o)},remove:()=>{o.remove(),d==null||d.remove();}}},ie=(e,t,r)=>new Promise((n,i)=>{if(!e.iframe){n("loaded");return}if(r!=null&&r.aborted){i(new DOMException("The operation was aborted","AbortError"));return}let o=false,c=()=>{var a;(a=e.iframe)==null||a.removeEventListener("load",l),r==null||r.removeEventListener("abort",m),clearTimeout(p);},d=a=>{o||(o=true,c(),n(a));},l=()=>d("loaded"),m=()=>{o||(o=true,c(),i(new DOMException("The operation was aborted","AbortError")));},p=setTimeout(()=>d("timeout"),t);e.iframe.addEventListener("load",l,{once:true}),r==null||r.addEventListener("abort",m,{once:true});}),R=async(e,t)=>{var n,i;if(!e)return {status:"no_action"};if(w(e)){let o=y(e,t);return o.submit(),{status:"challenge_submitted",action:e,mounted:o}}if(!_(e))return {status:"no_action"};if(!t.methodCompletionIdempotencyKey)throw new Error("methodCompletionIdempotencyKey is required for 3DS Method completion");let r=y(e,t);try{r.submit();let o=await ie(r,(n=t.methodTimeoutMs)!=null?n:1e4,t.signal),c=(i=t.methodCompletionIndicator)!=null?i:o==="loaded"?"Y":"N",d=await t.completeThreeDSMethod(I(e,c),e,{idempotencyKey:t.methodCompletionIdempotencyKey}),l=b(d.next_action);if(l&&w(l)){let m=y(l,t);return m.submit(),{status:"challenge_submitted",action:l,response:d,mounted:m,methodResult:o}}return {status:"method_completed",response:d,methodResult:o}}finally{r.remove();}},P=e=>e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;"),z=e=>{let t=h(e);B(t.action);let r=t.target==="hidden_iframe"?"arcpay-three-ds-method":"_self",n=t.fields.map(o=>`<input type="hidden" name="${P(o.name)}" value="${P(o.value)}">`).join("");return `<!doctype html><html><head><meta charset="utf-8"></head><body>${t.target==="hidden_iframe"?'<iframe name="arcpay-three-ds-method" title="3-D Secure method" hidden></iframe>':""}<form method="POST" action="${P(t.action)}" target="${r}">${n}</form><script>document.forms[0].submit();</script></body></html>`};var ke="0.1.16";
+exports.ArcPay=ee;exports.ArcPayError=s;exports.Elements=u;exports.SDK_VERSION=ke;exports.buildThreeDSAutoSubmitHtml=z;exports.buildThreeDSBrowserForm=h;exports.buildThreeDSBrowserStep=M;exports.buildThreeDSMethodCompletion=I;exports.collectBrowserInfo=F;exports.getThreeDSAction=b;exports.isApiError=U;exports.isAuthenticationError=O;exports.isAuthorizationError=N;exports.isChallengeAborted=$;exports.isNetworkError=W;exports.isRateLimitError=K;exports.isStateError=H;exports.isThreeDSChallengeAction=w;exports.isThreeDSMethodAction=_;exports.isValidationError=L;exports.mountThreeDSBrowserForm=y;exports.runThreeDSBrowserFlow=R;return exports;})({});//# sourceMappingURL=arcpay.global.js.map
 //# sourceMappingURL=arcpay.global.js.map

package/dist/cdn/arcpay.global.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/three-ds/actions.ts","../../src/index.ts"],"names":["ArcPayError","init","isValidationError","isAuthenticationError","isAuthorizationError","isStateError","isRateLimitError","isApiError","isNetworkError","isChallengeAborted","detectEnvironment","publishableKey","validatePublishableKey","key","BANNER_ATTR","showSandboxBanner","bar","text","dismiss","ARCPAY_TYPE_PREFIX","isArcpayMessage","data","postToIframe","iframe","message","targetOrigin","parseIncoming","event","expectedOrigin","FORBIDDEN_PROPERTIES","sanitizeBlock","block","out","value","normalizedKey","sanitizeStyle","style","result","Element","field","options","context","target","container","_a","hello","_event","callback","_b","listener","DEFAULT_IFRAME_BASE","createChannelId","Elements","opts","ctx","element","paymentId","idempotencyKey","cardNumber","cardExpiry","cardCvv","iframeOrigin","cardIframeWindow","resolve","reject","timer","onMessage","errType","el","cache","buildInstance","load","err","existing","promise","resetForTests","ArcPay","supportedColorDepths","normalizeColorDepth","resolveWindowSize","width","collectBrowserInfo","acceptHeader","getThreeDSAction","nextAction","isThreeDSMethodAction","isThreeDSChallengeAction","buildThreeDSBrowserForm","buildThreeDSBrowserStep","action","buildThreeDSMethodCompletion","completionIndicator","htmlEscape","buildThreeDSAutoSubmitHtml","form","inputs","SDK_VERSION"],"mappings":"2CAqBO,IAAMA,CAAAA,CAAN,cAA0B,KAAM,CASrC,YAAYC,CAAAA,CAAuB,CACjC,MAAMA,CAAAA,CAAK,OAAO,EAClB,IAAA,CAAK,IAAA,CAAO,cACZ,IAAA,CAAK,IAAA,CAAOA,EAAK,IAAA,CACjB,IAAA,CAAK,IAAA,CAAOA,CAAAA,CAAK,IAAA,CACjB,IAAA,CAAK,MAAQA,CAAAA,CAAK,KAAA,CAClB,KAAK,SAAA,CAAYA,CAAAA,CAAK,UACtB,IAAA,CAAK,WAAA,CAAcA,CAAAA,CAAK,WAAA,CACxB,IAAA,CAAK,SAAA,CAAYA,EAAK,SAAA,CACtB,IAAA,CAAK,UAAYA,CAAAA,CAAK,UACxB,CACF,CAAA,CAEaC,CAAAA,CAAqB,CAAA,EAChC,CAAA,YAAaF,CAAAA,EAAe,CAAA,CAAE,OAAS,kBAAA,CAC5BG,CAAAA,CAAyB,GACpC,CAAA,YAAaH,CAAAA,EAAe,EAAE,IAAA,GAAS,sBAAA,CAC5BI,CAAAA,CAAwB,CAAA,EACnC,CAAA,YAAaJ,CAAAA,EAAe,EAAE,IAAA,GAAS,qBAAA,CAC5BK,EAAgB,CAAA,EAC3B,CAAA,YAAaL,GAAe,CAAA,CAAE,IAAA,GAAS,aAAA,CAC5BM,CAAAA,CAAoB,CAAA,EAC/B,CAAA,YAAaN,GAAe,CAAA,CAAE,IAAA,GAAS,mBAC5BO,CAAAA,CAAc,CAAA,EACzB,aAAaP,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,WAAA,CAC5BQ,CAAAA,CAAkB,CAAA,EAC7B,aAAaR,CAAAA,EAAe,CAAA,CAAE,OAAS,eAAA,CAC5BS,CAAAA,CAAsB,GACjC,CAAA,YAAaT,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,oBCtDlC,IAAMU,EAAqBC,CAAAA,EAChCA,CAAAA,CAAe,WAAW,UAAU,CAAA,CAAI,UAAY,MAAA,CAEzCC,CAAAA,CAA0BC,GAAwC,CAC7E,GAAI,OAAOA,CAAAA,EAAQ,QAAA,EAAYA,EAAI,MAAA,GAAW,CAAA,CAC5C,MAAM,IAAIb,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,0BACN,OAAA,CAAS,4CAAA,CACT,UAAW,KACb,CAAC,EAEH,GAAI,CAACa,CAAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAK,CAACA,CAAAA,CAAI,UAAA,CAAW,UAAU,CAAA,CAC3D,MAAM,IAAIb,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,yBAAA,CACN,QACE,qGAAA,CACF,SAAA,CAAW,KACb,CAAC,CAEL,ECzBA,IAAMc,CAAAA,CAAc,4BAAA,CAEPC,CAAAA,CAAoB,IAAY,CAE3C,GADI,OAAO,QAAA,EAAa,aACpB,QAAA,CAAS,aAAA,CAAc,IAAID,CAAW,CAAA,CAAA,CAAG,CAAA,CAAG,OAEhD,IAAME,CAAAA,CAAM,SAAS,aAAA,CAAc,KAAK,EACxCA,CAAAA,CAAI,YAAA,CAAaF,EAAa,EAAE,CAAA,CAChCE,CAAAA,CAAI,KAAA,CAAM,OAAA,CACR,uOAAA,CAEF,IAAMC,CAAAA,CAAO,QAAA,CAAS,cAAc,MAAM,CAAA,CAC1CA,EAAK,WAAA,CAAc,iDAAA,CACnBD,CAAAA,CAAI,WAAA,CAAYC,CAAI,CAAA,CAEpB,IAAMC,CAAAA,CAAU,QAAA,CAAS,cAAc,QAAQ,CAAA,CAC/CA,EAAQ,IAAA,CAAO,QAAA,CACfA,EAAQ,YAAA,CAAa,4BAAA,CAA8B,EAAE,CAAA,CACrDA,CAAAA,CAAQ,YAAc,MAAA,CACtBA,CAAAA,CAAQ,aAAa,YAAA,CAAc,0BAA0B,CAAA,CAC7DA,CAAAA,CAAQ,KAAA,CAAM,OAAA,CACZ,gGACFA,CAAAA,CAAQ,gBAAA,CAAiB,QAAS,IAAMF,CAAAA,CAAI,QAAQ,CAAA,CACpDA,CAAAA,CAAI,WAAA,CAAYE,CAAO,CAAA,CAEvB,SAAS,IAAA,CAAK,WAAA,CAAYF,CAAG,EAC/B,CAAA,CCcA,IAAMG,CAAAA,CAAqB,SAAA,CAErBC,CAAAA,CAAmBC,CAAAA,EACvB,OAAOA,CAAAA,EAAS,UAChBA,CAAAA,GAAS,IAAA,EACT,SAAUA,CAAAA,EACV,OAAQA,EAA2B,IAAA,EAAS,QAAA,EAC3CA,CAAAA,CAA0B,IAAA,CAAK,UAAA,CAAWF,CAAkB,EAElDG,CAAAA,CAAe,CAC1BC,EACAC,CAAAA,CACAC,CAAAA,GACS,CACT,GAAIA,CAAAA,GAAiB,GAAA,CACnB,MAAM,IAAIzB,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,KAAM,2BAAA,CACN,OAAA,CAAS,2CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,GAAI,CAACuB,EAAO,aAAA,CACV,MAAM,IAAIvB,CAAAA,CAAY,CACpB,KAAM,kBAAA,CACN,IAAA,CAAM,mBAAA,CACN,OAAA,CAAS,iEAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEHuB,EAAO,aAAA,CAAc,WAAA,CAAYC,EAASC,CAAY,EACxD,CAAA,CASO,IAAMC,CAAAA,CAAgB,CAC3BC,EACAC,CAAAA,GAEID,CAAAA,CAAM,SAAWC,CAAAA,EACjB,CAACR,EAAgBO,CAAAA,CAAM,IAAI,CAAA,CAAU,IAAA,CAClCA,CAAAA,CAAM,IAAA,CC/Ef,IAAME,CAAAA,CAAuB,IAAI,IAAI,CACnC,UAAA,CACA,YACA,gBAAA,CACA,SAAA,CACA,KAAA,CACA,MAAA,CACA,OAAA,CACA,QAAA,CACA,OACF,CAAC,CAAA,CAEKC,EAAiBC,CAAAA,EAA0D,CAC/E,IAAMC,CAAAA,CAA8B,EAAC,CACrC,IAAA,GAAW,CAACnB,CAAAA,CAAKoB,CAAK,CAAA,GAAK,MAAA,CAAO,QAAQF,CAAK,CAAA,CAAG,CAChD,IAAMG,CAAAA,CAAgBrB,CAAAA,CAAI,WAAA,EAAY,CAClCgB,CAAAA,CAAqB,IAAIK,CAAa,CAAA,GAI1CF,EAAInB,CAAG,CAAA,CAAIoB,GACb,CACA,OAAOD,CACT,CAAA,CAEaG,CAAAA,CAAiBC,CAAAA,EAAoC,CAChE,IAAMC,CAAAA,CAAsB,CAAE,IAAA,CAAMP,CAAAA,CAAcM,EAAM,IAAI,CAAE,CAAA,CAC9D,OAAIA,CAAAA,CAAM,OAAA,GAAY,SAAWC,CAAAA,CAAO,OAAA,CAAUP,EAAcM,CAAAA,CAAM,OAAO,GACzEA,CAAAA,CAAM,KAAA,GAAU,MAAA,GAAWC,CAAAA,CAAO,KAAA,CAAQP,CAAAA,CAAcM,EAAM,KAAK,CAAA,CAAA,CAChEC,CACT,CAAA,CCPO,IAAMC,EAAN,KAAc,CAMnB,YACkBC,CAAAA,CACCC,CAAAA,CACAC,EACjB,CAHgB,IAAA,CAAA,KAAA,CAAAF,EACC,IAAA,CAAA,OAAA,CAAAC,CAAAA,CACA,aAAAC,CAAAA,CARnB,IAAA,CAAQ,MAAA,CAAmC,IAAA,CAC3C,IAAA,CAAiB,SAAA,CAAY,IAAI,GAAA,CACjC,IAAA,CAAQ,OAAwC,SAAA,CAChD,IAAA,CAAQ,eAAqD,KAM1D,CAEH,KAAA,CAAMC,CAAAA,CAAoC,CACxC,GAAI,KAAK,MAAA,CACP,MAAM,IAAI1C,CAAAA,CAAY,CACpB,KAAM,kBAAA,CACN,IAAA,CAAM,iBAAA,CACN,OAAA,CAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA,CAC9B,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,IAAM2C,CAAAA,CAAY,OAAOD,CAAAA,EAAW,QAAA,CAAW,QAAA,CAAS,aAAA,CAAcA,CAAM,CAAA,CAAIA,CAAAA,CAChF,GAAI,EAAEC,CAAAA,YAAqB,aACzB,MAAM,IAAI3C,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,KAAM,wBAAA,CACN,OAAA,CAAS,2BAA2B,MAAA,CAAO0C,CAAM,CAAC,CAAA,CAAA,CAClD,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAMnB,EAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA,CAC9CA,CAAAA,CAAO,IAAM,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,CAAA,CAC5DA,CAAAA,CAAO,MAAM,OAAA,CAAU,gDAAA,CACvBA,EAAO,YAAA,CAAa,OAAA,CAAS,SAAS,CAAA,CACtCA,CAAAA,CAAO,aAAa,qBAAA,CAAuB,IAAA,CAAK,KAAK,CAAA,CACrDoB,CAAAA,CAAU,YAAYpB,CAAM,CAAA,CAC5B,IAAA,CAAK,MAAA,CAASA,CAAAA,CAEd,IAAMK,EAAiB,IAAI,GAAA,CAAI,KAAK,OAAA,CAAQ,UAAU,EAAE,MAAA,CAExD,IAAA,CAAK,cAAA,CAAkBD,CAAAA,EAAwB,CAvEnD,IAAAiB,EA2EM,GAAIjB,CAAAA,CAAM,WAAWiB,CAAAA,CAAA,IAAA,CAAK,SAAL,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAa,aAAA,CAAA,CAAe,OAEjD,IAAMvB,CAAAA,CAAOK,EAA8BC,CAAAA,CAAOC,CAAc,EAC3DP,CAAAA,EACL,IAAA,CAAK,cAAcA,CAAI,EACzB,CAAA,CACA,MAAA,CAAO,gBAAA,CAAiB,SAAA,CAAW,KAAK,cAAc,CAAA,CAEtDE,EAAO,gBAAA,CACL,MAAA,CACA,IAAM,CACJ,GAAI,CAAC,IAAA,CAAK,MAAA,CAAQ,OAClB,IAAMsB,CAAAA,CAAwB,CAC5B,KAAM,cAAA,CACN,MAAA,CAAQ,OAAO,QAAA,CAAS,MAAA,CACxB,cAAA,CAAgB,IAAA,CAAK,OAAA,CAAQ,cAAA,CAC7B,UAAW,IAAA,CAAK,OAAA,CAAQ,SAC1B,CAAA,CACAvB,CAAAA,CAAa,KAAK,MAAA,CAAQuB,CAAAA,CAAOjB,CAAc,EACjD,CAAA,CACA,CAAE,KAAM,IAAK,CACf,EACF,CAEQ,aAAA,CAAcP,EAA4B,CAC5CA,CAAAA,CAAK,OAAS,cAAA,EAChB,IAAA,CAAK,OAAS,OAAA,CAEV,IAAA,CAAK,QAAQ,KAAA,EACf,IAAA,CAAK,KAAK,CAAE,IAAA,CAAM,cAAA,CAAgB,OAAA,CAASc,CAAAA,CAAc,IAAA,CAAK,QAAQ,KAAK,CAAE,CAAC,CAAA,CAEhF,IAAA,CAAK,KAAK,CAAE,IAAA,CAAM,OAAQ,CAAC,CAAA,EAClBd,CAAAA,CAAK,OAAS,iBAAA,EACvB,IAAA,CAAK,OAAS,OAAA,CACd,IAAA,CAAK,KAAK,CAAE,IAAA,CAAM,OAAA,CAAS,MAAA,CAAQA,CAAAA,CAAK,MAAO,CAAC,CAAA,EACvCA,CAAAA,CAAK,OAAS,eAAA,EAAmBA,CAAAA,CAAK,QAAU,IAAA,CAAK,KAAA,EAC9D,IAAA,CAAK,IAAA,CAAK,CACR,IAAA,CAAM,SACN,OAAA,CAASA,CAAAA,CAAK,QACd,KAAA,CAAOA,CAAAA,CAAK,MACZ,QAAA,CAAUA,CAAAA,CAAK,QACjB,CAAC,EAGL,CAEA,OAAOmB,CAAAA,CAAwC,CACzCA,EAAQ,KAAA,EACV,IAAA,CAAK,KAAK,CAAE,IAAA,CAAM,cAAA,CAAgB,OAAA,CAASL,CAAAA,CAAcK,CAAAA,CAAQ,KAAK,CAAE,CAAC,EAE7E,CAEA,OAAA,EAAgB,CACV,IAAA,CAAK,MAAA,GACP,IAAA,CAAK,MAAA,CAAO,MAAA,EAAO,CACnB,KAAK,MAAA,CAAS,IAAA,CAAA,CAEZ,KAAK,cAAA,GACP,MAAA,CAAO,oBAAoB,SAAA,CAAW,IAAA,CAAK,cAAc,CAAA,CACzD,IAAA,CAAK,cAAA,CAAiB,MAExB,IAAA,CAAK,SAAA,CAAU,OAAM,CACrB,IAAA,CAAK,OAAS,UAChB,CAEA,EAAA,CAAGM,CAAAA,CAAsCC,CAAAA,CAAgC,CACvE,YAAK,SAAA,CAAU,GAAA,CAAIA,CAAQ,CAAA,CACpB,IAAM,KAAK,SAAA,CAAU,MAAA,CAAOA,CAAQ,CAC7C,CAEA,KAAA,EAAc,CACZ,IAAA,CAAK,IAAA,CAAK,CAAE,IAAA,CAAM,cAAe,CAAC,EACpC,CAEA,KAAA,EAAc,CACZ,IAAA,CAAK,IAAA,CAAK,CAAE,IAAA,CAAM,cAAe,CAAC,EACpC,CAEA,SAAmB,CACjB,OAAO,IAAA,CAAK,MAAA,GAAW,OACzB,CAOA,wBAAwC,CAlK1C,IAAAH,EAAAI,CAAAA,CAmKI,OAAA,CAAOA,GAAAJ,CAAAA,CAAA,IAAA,CAAK,MAAA,GAAL,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAa,aAAA,GAAb,KAAAI,CAAAA,CAA8B,IACvC,CAGA,IAAA,CAAKxB,CAAAA,CAA+B,CAClC,GAAI,CAAC,IAAA,CAAK,MAAA,CACR,MAAM,IAAIxB,EAAY,CACpB,IAAA,CAAM,mBACN,IAAA,CAAM,aAAA,CACN,QAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA,CAC9B,SAAA,CAAW,KACb,CAAC,CAAA,CAEHsB,CAAAA,CAAa,KAAK,MAAA,CAAQE,CAAAA,CAAS,IAAI,GAAA,CAAI,IAAA,CAAK,QAAQ,UAAU,CAAA,CAAE,MAAM,EAC5E,CAEQ,KAAKG,CAAAA,CAA2B,CACtC,QAAWsB,CAAAA,IAAY,IAAA,CAAK,SAAA,CAC1BA,CAAAA,CAAStB,CAAK,EAElB,CACF,CAAA,CC9KA,IAAMuB,EAAsB,0BAAA,CAEtBC,CAAAA,CAAkB,IAAc,CAZtC,IAAAP,CAAAA,CAaE,GAAI,EAAA,CAACA,CAAAA,CAAA,WAAW,MAAA,GAAX,IAAA,EAAAA,EAAmB,UAAA,CAAA,CACtB,MAAM,IAAI5C,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,oBAAA,CACN,QAAS,iDAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,OAAO,UAAA,CAAW,MAAA,CAAO,UAAA,EAC3B,CAAA,CAEaoD,CAAAA,CAAN,KAAe,CAOpB,WAAA,CAAYC,EAAuD,CANnE,IAAA,CAAiB,WAAa,IAAI,GAAA,CAIlC,IAAA,CAAQ,gBAAA,CAAmB,KAAA,CA7B7B,IAAAT,EAgCI,IAAA,CAAK,cAAA,CAAiBS,EAAK,cAAA,CAC3B,IAAA,CAAK,YAAaT,CAAAA,CAAAS,CAAAA,CAAK,UAAA,GAAL,IAAA,CAAAT,CAAAA,CAAmBM,CAAAA,CACrC,KAAK,SAAA,CAAYC,CAAAA,GACnB,CAEA,MAAA,CAAOZ,EAAkBC,CAAAA,CAA0B,EAAC,CAAY,CAC9D,GAAI,IAAA,CAAK,WAAW,GAAA,CAAID,CAAK,EAC3B,MAAM,IAAIvC,EAAY,CACpB,IAAA,CAAM,mBACN,IAAA,CAAM,mBAAA,CACN,QAAS,CAAA,YAAA,EAAeuC,CAAK,mBAC7B,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,IAAMe,CAAAA,CAAsB,CAC1B,UAAA,CAAY,IAAA,CAAK,WACjB,cAAA,CAAgB,IAAA,CAAK,eACrB,SAAA,CAAW,IAAA,CAAK,SAClB,CAAA,CACMC,CAAAA,CAAU,IAAIjB,CAAAA,CAAQC,CAAAA,CAAOC,CAAAA,CAASc,CAAG,CAAA,CAC/C,OAAA,IAAA,CAAK,WAAW,GAAA,CAAIf,CAAAA,CAAOgB,CAAO,CAAA,CAC3BA,CACT,CAEA,MAAM,QAAA,CAASC,CAAAA,CAAmBC,EAAiD,CAEjF,GAAI,KAAK,gBAAA,CACP,MAAM,IAAIzD,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,sBAAA,CACN,QAAS,qEAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAM0D,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA,CAC7CC,EAAa,IAAA,CAAK,UAAA,CAAW,IAAI,YAAY,CAAA,CAC7CC,EAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA,CAE7C,GAAI,CAACF,CAAAA,EAAc,CAACC,GAAc,CAACC,CAAAA,CACjC,MAAM,IAAI5D,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,sBACN,OAAA,CACE,oGAAA,CACF,UAAW,KACb,CAAC,EAEH,GAAI,CAAC0D,EAAW,OAAA,EAAQ,EAAK,CAACC,CAAAA,CAAW,OAAA,IAAa,CAACC,CAAAA,CAAQ,SAAQ,CACrE,MAAM,IAAI5D,CAAAA,CAAY,CACpB,IAAA,CAAM,mBACN,IAAA,CAAM,oBAAA,CACN,QAAS,+DAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAA,CAAK,gBAAA,CAAmB,IAAA,CACxB,GAAI,CACF,OAAO,MAAM,KAAK,UAAA,CAAW0D,CAAAA,CAAYF,EAAWC,CAAc,CACpE,CAAA,OAAE,CACA,IAAA,CAAK,gBAAA,CAAmB,MAC1B,CACF,CAEQ,WACNC,CAAAA,CACAF,CAAAA,CACAC,EACyB,CACzB,IAAMI,CAAAA,CAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,CAGxCC,EAAmBJ,CAAAA,CAAW,sBAAA,GAEpC,OAAO,IAAI,OAAA,CAAwB,CAACK,CAAAA,CAASC,CAAAA,GAAW,CAEtD,IAAMC,CAAAA,CAAQ,OAAO,UAAA,CAAW,IAAM,CACpC,MAAA,CAAO,mBAAA,CAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/CF,CAAAA,CACE,IAAIhE,CAAAA,CAAY,CACd,KAAM,eAAA,CACN,IAAA,CAAM,mBACN,OAAA,CAAS,uCAAA,CACT,SAAA,CAAW,IAAA,CACX,SAAA,CAAAwD,CACF,CAAC,CACH,EACF,EAAG,GAAM,CAAA,CAEHU,EAAavC,CAAAA,EAAwB,CAEzC,GAAImC,CAAAA,GAAqB,IAAA,EAAQnC,CAAAA,CAAM,SAAWmC,CAAAA,CAAkB,OAEpE,IAAMzC,CAAAA,CAAOK,CAAAA,CAA8BC,EAAOkC,CAAY,CAAA,CAC9D,GAAKxC,CAAAA,CAAAA,CAEL,GAAIA,CAAAA,CAAK,OAAS,wBAAA,CAChB,YAAA,CAAa4C,CAAK,CAAA,CAClB,MAAA,CAAO,oBAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/CH,CAAAA,CAAQ,CACN,WAAA,CAAa1C,EAAK,WAAA,CAClB,QAAA,CAAUA,EAAK,QAAA,CACf,UAAA,CAAYA,EAAK,UAAA,CACjB,OAAA,CAASA,CAAAA,CAAK,OAAA,CACd,SAAA,CAAWA,CAAAA,CAAK,UAChB,SAAA,CAAWA,CAAAA,CAAK,SAClB,CAAC,CAAA,CAAA,KAAA,GACQA,EAAK,IAAA,GAAS,uBAAA,CAAyB,CAChD,YAAA,CAAa4C,CAAK,CAAA,CAClB,OAAO,mBAAA,CAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/C,IAAMC,EACJ9C,CAAAA,CAAK,SAAA,GAAc,kBAAA,EAAsBA,CAAAA,CAAK,SAAA,GAAc,WAAA,CACxDA,EAAK,SAAA,CACL,WAAA,CACN2C,EACE,IAAIhE,CAAAA,CAAY,CACd,IAAA,CAAMmE,CAAAA,CACN,IAAA,CAAM9C,CAAAA,CAAK,IAAA,CACX,OAAA,CAASA,EAAK,OAAA,CACd,SAAA,CAAW,MACX,SAAA,CAAAmC,CACF,CAAC,CACH,EACF,CAAA,CACF,CAAA,CAEA,MAAA,CAAO,gBAAA,CAAiB,UAAWU,CAAS,CAAA,CAC5CR,EAAW,IAAA,CAAK,CAAE,KAAM,iBAAA,CAAmB,SAAA,CAAAF,EAAW,cAAA,CAAAC,CAAe,CAAC,EACxE,CAAC,CACH,CAEA,OAAA,EAAgB,CACd,IAAA,IAAWW,CAAAA,IAAM,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,CACtCA,EAAG,OAAA,EAAQ,CAEb,KAAK,UAAA,CAAW,KAAA,GAClB,CACF,EClKA,IAAMxD,CAAAA,CAAkEA,CAAAA,CAYlEyD,CAAAA,CAAQ,IAAI,GAAA,CAEZC,CAAAA,CAAiB3D,IACjBD,CAAAA,CAAkBC,CAAc,IAAM,SAAA,EACxCI,CAAAA,EAAkB,CAEb,CACL,cAAA,CAAAJ,CAAAA,CACA,YAAaD,CAAAA,CAAkBC,CAAc,EAC7C,QAAA,CAAU,IAAM,IAAIyC,CAAAA,CAAS,CAAE,cAAA,CAAAzC,CAAe,CAAC,CACjD,GAGF,SAAS4D,CAAAA,CAAK5D,EAAiD,CAC7D,GAAI,CACFC,CAAAA,CAAuBD,CAAc,EACvC,CAAA,MAAS6D,CAAAA,CAAK,CACZ,OAAO,OAAA,CAAQ,MAAA,CAAOA,CAAG,CAC3B,CACA,IAAM3D,CAAAA,CAAMF,CAAAA,CACN8D,CAAAA,CAAWJ,CAAAA,CAAM,GAAA,CAAIxD,CAAG,EAC9B,GAAI4D,CAAAA,CAAU,OAAOA,CAAAA,CACrB,IAAMC,EAAU,OAAA,CAAQ,OAAA,CAAQJ,CAAAA,CAAc3D,CAAc,CAAC,CAAA,CAC7D,OAAA0D,CAAAA,CAAM,GAAA,CAAIxD,EAAK6D,CAAO,CAAA,CACfA,CACT,CAEA,IAAMC,CAAAA,CAAgB,IAAY,CAChCN,CAAAA,CAAM,QACR,CAAA,CAEaO,EAAS,CACpB,IAAA,CAAAL,EACA,eAAA,CAAiBI,CACnB,EC7BA,IAAME,CAAAA,CAAuB,CAAC,EAAG,CAAA,CAAG,CAAA,CAAG,GAAI,EAAA,CAAI,EAAA,CAAI,GAAI,EAAE,CAAA,CAEnDC,CAAAA,CAAuB7C,CAAAA,EAC3B4C,CAAAA,CAAqB,QAAA,CAAS5C,CAAmC,CAAA,CAC5DA,CAAAA,CACD,GAEA8C,EAAAA,CAAqBC,CAAAA,EACrBA,GAAS,GAAA,CAAa,IAAA,CACtBA,CAAAA,EAAS,GAAA,CAAY,IAAA,CACrBA,CAAAA,EAAS,IAAY,IAAA,CACrBA,CAAAA,EAAS,IAAY,IAAA,CAClB,IAAA,CAGIC,EAAqB,CAChCC,CAAAA,CAAe,iEAAA,GACC,CAChB,GACE,OAAO,QAAW,WAAA,EAClB,OAAO,WAAc,WAAA,EACrB,OAAO,QAAW,WAAA,CAElB,MAAM,IAAI,KAAA,CAAM,4DAA4D,CAAA,CAE9E,OAAO,CACL,aAAA,CAAeA,EACf,QAAA,CAAU,SAAA,CAAU,UAAY,IAAA,CAChC,YAAA,CAAc,MAAA,CAAO,KAAA,CACrB,aAAA,CAAe,MAAA,CAAO,OACtB,WAAA,CAAaJ,CAAAA,CAAoB,OAAO,UAAU,CAAA,CAClD,wBAAyB,IAAI,IAAA,EAAK,CAAE,iBAAA,EAAkB,CACtD,YAAA,CAAc,MACd,UAAA,CAAY,SAAA,CAAU,UACtB,WAAA,CAAaC,EAAAA,CAAkB,OAAO,UAAA,EAAc,MAAA,CAAO,KAAK,CAClE,CACF,EAEaI,CAAAA,CAAoBC,CAAAA,EACxBA,GAAA,IAAA,CAAAA,CAAAA,CAAc,KAGVC,CAAAA,CAAyBD,CAAAA,EAAAA,CAC7BA,CAAAA,EAAA,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAY,IAAA,IAAS,mBAAqBA,CAAAA,CAAW,QAAA,CAAS,QAAU,QAAA,CAGpEE,CAAAA,CAA4BF,IAChCA,CAAAA,EAAA,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAY,IAAA,IAAS,oBAAA,EAAwBA,CAAAA,CAAW,SAAS,KAAA,GAAU,WAAA,CAGvEG,EAA2BH,CAAAA,GAAoD,CAC1F,OAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA,CACnC,MAAA,CAAQA,CAAAA,CAAW,SAAS,MAAA,CAAO,MAAA,CACnC,OAAQA,CAAAA,CAAW,QAAA,CAAS,OAAO,MAAA,CACnC,MAAA,CAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MACrC,GAEaI,CAAAA,CACXJ,CAAAA,EAC8B,CAC9B,IAAMK,CAAAA,CAASN,EAAiBC,CAAU,CAAA,CAC1C,OAAKK,CAAAA,CACE,CACL,IAAA,CAAMA,EAAO,QAAA,CAAS,KAAA,CACtB,gBAAiBA,CAAAA,CAAO,QAAA,CAAS,QACjC,IAAA,CAAMF,CAAAA,CAAwBE,CAAM,CAAA,CACpC,kBAAA,CAAoBA,CAAAA,CAAO,SAAS,mBAAA,CACpC,oBAAA,CAAsBA,EAAO,QAAA,CAAS,wBACxC,EAPoB,IAQtB,CAAA,CAEaC,CAAAA,CAA+B,CAC1CN,CAAAA,CACAO,CAAAA,CAAuC,MACyC,CAChF,GAAI,CAACN,CAAAA,CAAsBD,CAAU,GAAK,CAACA,CAAAA,CAAW,QAAA,CAAS,wBAAA,CAC7D,MAAM,IAAI,MAAM,2EAA2E,CAAA,CAE7F,OAAO,CACL,oBAAA,CAAsBO,EACtB,wBAAA,CAA0BP,CAAAA,CAAW,QAAA,CAAS,wBAChD,CACF,CAAA,CAEMQ,EAAc3D,CAAAA,EAClBA,CAAAA,CACG,QAAQ,IAAA,CAAM,OAAO,EACrB,OAAA,CAAQ,IAAA,CAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,IAAA,CAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,KAAM,QAAQ,CAAA,CACtB,QAAQ,IAAA,CAAM,OAAO,CAAA,CAEb4D,CAAAA,CAA8BT,CAAAA,EAA0C,CACnF,IAAMU,CAAAA,CAAOP,CAAAA,CAAwBH,CAAU,CAAA,CACzC1C,CAAAA,CAASoD,EAAK,MAAA,GAAW,eAAA,CAAkB,wBAAA,CAA2B,OAAA,CACtEC,CAAAA,CAASD,CAAAA,CAAK,OACjB,GAAA,CACEvD,CAAAA,EACC,8BAA8BqD,CAAAA,CAAWrD,CAAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAYqD,CAAAA,CAAWrD,CAAAA,CAAM,KAAK,CAAC,IAC3F,CAAA,CACC,IAAA,CAAK,EAAE,CAAA,CAKV,OAAO,iEAHLuD,CAAAA,CAAK,MAAA,GAAW,eAAA,CACZ,kFAAA,CACA,EACwE,CAAA,4BAAA,EAA+BF,EAAWE,CAAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAapD,CAAM,KAAKqD,CAAM,CAAA,iEAAA,CACpK,ECjGO,IAAMC,EAAAA,CAAc","file":"arcpay.global.js","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n  publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message: \"Publishable key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message:\n        \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n      retryable: false,\n    });\n  }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n  if (typeof document === \"undefined\") return;\n  if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n  const bar = document.createElement(\"div\");\n  bar.setAttribute(BANNER_ATTR, \"\");\n  bar.style.cssText =\n    \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n  const text = document.createElement(\"span\");\n  text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n  bar.appendChild(text);\n\n  const dismiss = document.createElement(\"button\");\n  dismiss.type = \"button\";\n  dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n  dismiss.textContent = \"×\";\n  dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n  dismiss.style.cssText =\n    \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n  dismiss.addEventListener(\"click\", () => bar.remove());\n  bar.appendChild(dismiss);\n\n  document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n  | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n  | { type: \"arcpay:style\"; payload: StyleSubset }\n  | { type: \"arcpay:focus\" }\n  | { type: \"arcpay:clear\" }\n  | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n  | { type: \"arcpay:ready\" }\n  | { type: \"arcpay:rejected\"; reason: string }\n  | {\n      type: \"arcpay:change\";\n      field: FieldType;\n      isValid: boolean;\n      brand?: string;\n      lastFour?: string;\n    }\n  | {\n      type: \"arcpay:tokenize-result\";\n      cardTokenId: string;\n      cardMask: string;\n      cardScheme: string;\n      cardBin: string;\n      expiresIn: number;\n      expiresAt: string;\n    }\n  | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n  base: Record<string, string>;\n  invalid?: Record<string, string>;\n  focus?: Record<string, string>;\n}\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n  typeof data === \"object\" &&\n  data !== null &&\n  \"type\" in data &&\n  typeof (data as { type: unknown }).type === \"string\" &&\n  (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n  iframe: HTMLIFrameElement,\n  message: ParentToIframe,\n  targetOrigin: string,\n): void => {\n  if (targetOrigin === \"*\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"wildcard_origin_forbidden\",\n      message: \"postToIframe: targetOrigin cannot be '*'\",\n      retryable: false,\n    });\n  }\n  if (!iframe.contentWindow) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"iframe_not_loaded\",\n      message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n      retryable: false,\n    });\n  }\n  iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n  if (targetOrigin === \"*\") {\n    throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n  }\n  window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n  event: MessageEvent,\n  expectedOrigin: string,\n): T | null => {\n  if (event.origin !== expectedOrigin) return null;\n  if (!isArcpayMessage(event.data)) return null;\n  return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\n// Spec calls out position:fixed, transform, pointer-events:none as forbidden.\n// We extend to cover the full clickjacking attack surface: any positioning\n// (fixed/absolute/sticky), transform, all pointer-events values, z-index, and\n// inset properties (top/left/right/bottom/inset). The legitimate use cases\n// for these in a 1-line input field are zero, so blanket drop.\nconst FORBIDDEN_PROPERTIES = new Set([\n  \"position\",\n  \"transform\",\n  \"pointer-events\",\n  \"z-index\",\n  \"top\",\n  \"left\",\n  \"right\",\n  \"bottom\",\n  \"inset\",\n]);\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n  const out: Record<string, string> = {};\n  for (const [key, value] of Object.entries(block)) {\n    const normalizedKey = key.toLowerCase();\n    if (FORBIDDEN_PROPERTIES.has(normalizedKey)) {\n      // Defense against position/transform-based clickjacking. Silently drop.\n      continue;\n    }\n    out[key] = value;\n  }\n  return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n  const result: StyleSubset = { base: sanitizeBlock(style.base) };\n  if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n  if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n  return result;\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n  type FieldType,\n  type ParentToIframe,\n  type IframeToParent,\n  type StyleSubset,\n  postToIframe,\n  parseIncoming,\n} from \"./postmessage\";\nimport { sanitizeStyle } from \"./style\";\n\nexport interface ElementOptions {\n  /** StyleSubset applied via arcpay:style postMessage. */\n  style?: StyleSubset;\n  placeholder?: string;\n}\n\nexport type ElementEvent =\n  | { type: \"ready\" }\n  | { type: \"change\"; isValid: boolean; brand?: string; lastFour?: string }\n  | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\n\nexport interface ElementContext {\n  iframeBase: string;\n  publishableKey: string;\n  channelId: string;\n}\n\nexport class Element {\n  private iframe: HTMLIFrameElement | null = null;\n  private readonly listeners = new Set<Listener>();\n  private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n  private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n  constructor(\n    public readonly field: FieldType,\n    private readonly options: ElementOptions,\n    private readonly context: ElementContext,\n  ) {}\n\n  mount(target: string | HTMLElement): void {\n    if (this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"already_mounted\",\n        message: `Element ${this.field} is already mounted`,\n        retryable: false,\n      });\n    }\n    const container = typeof target === \"string\" ? document.querySelector(target) : target;\n    if (!(container instanceof HTMLElement)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"mount_target_not_found\",\n        message: `mount target not found: ${String(target)}`,\n        retryable: false,\n      });\n    }\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n    iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n    iframe.setAttribute(\"allow\", \"payment\");\n    iframe.setAttribute(\"data-arcpay-element\", this.field);\n    container.appendChild(iframe);\n    this.iframe = iframe;\n\n    const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n    this.messageHandler = (event: MessageEvent) => {\n      // C1: source guard — only accept messages from this element's own iframe.\n      // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n      // could trigger handlers on cardNumber and vice-versa.\n      if (event.source !== this.iframe?.contentWindow) return;\n      // C4: use parseIncoming for origin + arcpay: prefix guard.\n      const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n      if (!data) return;\n      this.handleMessage(data);\n    };\n    window.addEventListener(\"message\", this.messageHandler);\n\n    iframe.addEventListener(\n      \"load\",\n      () => {\n        if (!this.iframe) return;\n        const hello: ParentToIframe = {\n          type: \"arcpay:hello\",\n          origin: window.location.origin,\n          publishableKey: this.context.publishableKey,\n          channelId: this.context.channelId,\n        };\n        postToIframe(this.iframe, hello, expectedOrigin);\n      },\n      { once: true },\n    );\n  }\n\n  private handleMessage(data: IframeToParent): void {\n    if (data.type === \"arcpay:ready\") {\n      this.status = \"ready\";\n      // Apply initial style if provided at construction time.\n      if (this.options.style) {\n        this.send({ type: \"arcpay:style\", payload: sanitizeStyle(this.options.style) });\n      }\n      this.emit({ type: \"ready\" });\n    } else if (data.type === \"arcpay:rejected\") {\n      this.status = \"error\";\n      this.emit({ type: \"error\", reason: data.reason });\n    } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n      this.emit({\n        type: \"change\",\n        isValid: data.isValid,\n        brand: data.brand,\n        lastFour: data.lastFour,\n      });\n    }\n    // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n  }\n\n  update(options: { style?: StyleSubset }): void {\n    if (options.style) {\n      this.send({ type: \"arcpay:style\", payload: sanitizeStyle(options.style) });\n    }\n  }\n\n  destroy(): void {\n    if (this.iframe) {\n      this.iframe.remove();\n      this.iframe = null;\n    }\n    if (this.messageHandler) {\n      window.removeEventListener(\"message\", this.messageHandler);\n      this.messageHandler = null;\n    }\n    this.listeners.clear();\n    this.status = \"pending\";\n  }\n\n  on(_event: \"ready\" | \"change\" | \"error\", callback: Listener): () => void {\n    this.listeners.add(callback);\n    return () => this.listeners.delete(callback);\n  }\n\n  focus(): void {\n    this.send({ type: \"arcpay:focus\" });\n  }\n\n  clear(): void {\n    this.send({ type: \"arcpay:clear\" });\n  }\n\n  isReady(): boolean {\n    return this.status === \"ready\";\n  }\n\n  /**\n   * Internal: returns the iframe's contentWindow for source-filtering in\n   * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n   * or when jsdom has not yet populated contentWindow (test environment).\n   */\n  getIframeContentWindow(): Window | null {\n    return this.iframe?.contentWindow ?? null;\n  }\n\n  /** Internal: used by Elements factory to send tokenize commands. */\n  send(message: ParentToIframe): void {\n    if (!this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"not_mounted\",\n        message: `Element ${this.field} is not mounted`,\n        retryable: false,\n      });\n    }\n    postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n  }\n\n  private emit(event: ElementEvent): void {\n    for (const listener of this.listeners) {\n      listener(event);\n    }\n  }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\n\nexport type { TokenizeResult };\n\nexport type ElementsOptions = Record<string, never>;\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n  if (!globalThis.crypto?.randomUUID) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"crypto_unavailable\",\n      message: \"crypto.randomUUID is required for Hosted Fields\",\n      retryable: false,\n    });\n  }\n  return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n  private readonly elementMap = new Map<FieldType, Element>();\n  private readonly iframeBase: string;\n  private readonly publishableKey: string;\n  private readonly channelId: string;\n  private tokenizeInFlight = false;\n\n  constructor(opts: { publishableKey: string; iframeBase?: string }) {\n    this.publishableKey = opts.publishableKey;\n    this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n    this.channelId = createChannelId();\n  }\n\n  create(field: FieldType, options: ElementOptions = {}): Element {\n    if (this.elementMap.has(field)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"duplicate_element\",\n        message: `Element for ${field} already created`,\n        retryable: false,\n      });\n    }\n    const ctx: ElementContext = {\n      iframeBase: this.iframeBase,\n      publishableKey: this.publishableKey,\n      channelId: this.channelId,\n    };\n    const element = new Element(field, options, ctx);\n    this.elementMap.set(field, element);\n    return element;\n  }\n\n  async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n    // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n    if (this.tokenizeInFlight) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"tokenize_in_progress\",\n        message: \"A tokenize() call is already in progress for this Elements instance\",\n        retryable: false,\n      });\n    }\n\n    const cardNumber = this.elementMap.get(\"cardNumber\");\n    const cardExpiry = this.elementMap.get(\"cardExpiry\");\n    const cardCvv = this.elementMap.get(\"cardCvv\");\n\n    if (!cardNumber || !cardExpiry || !cardCvv) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"incomplete_elements\",\n        message:\n          \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n        retryable: false,\n      });\n    }\n    if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"elements_not_ready\",\n        message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n        retryable: false,\n      });\n    }\n\n    this.tokenizeInFlight = true;\n    try {\n      return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n    } finally {\n      this.tokenizeInFlight = false;\n    }\n  }\n\n  private doTokenize(\n    cardNumber: Element,\n    paymentId: string,\n    idempotencyKey: string,\n  ): Promise<TokenizeResult> {\n    const iframeOrigin = new URL(this.iframeBase).origin;\n    // C1: obtain reference to the cardNumber iframe's contentWindow before\n    // registering the listener so we can filter by source.\n    const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n    return new Promise<TokenizeResult>((resolve, reject) => {\n      // C3: 30-second timeout — rejects and cleans up if no result arrives.\n      const timer = window.setTimeout(() => {\n        window.removeEventListener(\"message\", onMessage);\n        reject(\n          new ArcPayError({\n            type: \"network_error\",\n            code: \"tokenize_timeout\",\n            message: \"tokenize() timed out after 30 seconds\",\n            retryable: true,\n            paymentId,\n          }),\n        );\n      }, 30_000);\n\n      const onMessage = (event: MessageEvent) => {\n        // C1: source guard — only accept messages from the cardNumber iframe.\n        if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n        // C4: use parseIncoming for origin + arcpay: prefix guard.\n        const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n        if (!data) return;\n\n        if (data.type === \"arcpay:tokenize-result\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          resolve({\n            cardTokenId: data.cardTokenId,\n            cardMask: data.cardMask,\n            cardScheme: data.cardScheme,\n            cardBin: data.cardBin,\n            expiresIn: data.expiresIn,\n            expiresAt: data.expiresAt,\n          });\n        } else if (data.type === \"arcpay:tokenize-error\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          const errType =\n            data.errorType === \"validation_error\" || data.errorType === \"api_error\"\n              ? data.errorType\n              : \"api_error\";\n          reject(\n            new ArcPayError({\n              type: errType,\n              code: data.code,\n              message: data.message,\n              retryable: false,\n              paymentId,\n            }),\n          );\n        }\n      };\n\n      window.addEventListener(\"message\", onMessage);\n      cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n    });\n  }\n\n  destroy(): void {\n    for (const el of this.elementMap.values()) {\n      el.destroy();\n    }\n    this.elementMap.clear();\n  }\n}\n","import {\n  detectEnvironment,\n  type Environment,\n  validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n  readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n  readonly publishableKey: string;\n  readonly environment: Environment;\n  elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n  if (detectEnvironment(publishableKey) === \"sandbox\") {\n    showSandboxBanner();\n  }\n  return {\n    publishableKey,\n    environment: detectEnvironment(publishableKey),\n    elements: () => new Elements({ publishableKey }),\n  };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n  try {\n    validatePublishableKey(publishableKey);\n  } catch (err) {\n    return Promise.reject(err);\n  }\n  const key = publishableKey;\n  const existing = cache.get(key);\n  if (existing) return existing;\n  const promise = Promise.resolve(buildInstance(publishableKey));\n  cache.set(key, promise);\n  return promise;\n}\n\nconst resetForTests = (): void => {\n  cache.clear();\n};\n\nexport const ArcPay = {\n  load,\n  __resetForTests: resetForTests,\n};\n","import type { CardBrowserInfo, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n  name: string;\n  value: string;\n}\n\nexport interface BrowserPostForm {\n  action: string;\n  method: \"POST\";\n  target: \"hidden_iframe\" | \"browser\";\n  fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n  kind: \"method\" | \"challenge\";\n  protocolVersion: \"1\" | \"2\";\n  form: BrowserPostForm;\n  completionEndpoint?: string;\n  threeDSServerTransId?: string;\n}\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n  supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n    ? (value as BrowserInfo[\"color_depth\"])\n    : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n  if (width >= 1000) return \"05\";\n  if (width >= 600) return \"04\";\n  if (width >= 500) return \"03\";\n  if (width >= 390) return \"02\";\n  return \"01\";\n};\n\nexport const collectBrowserInfo = (\n  acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n  if (\n    typeof window === \"undefined\" ||\n    typeof navigator === \"undefined\" ||\n    typeof screen === \"undefined\"\n  ) {\n    throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n  }\n  return {\n    accept_header: acceptHeader,\n    language: navigator.language || \"en\",\n    screen_width: screen.width,\n    screen_height: screen.height,\n    color_depth: normalizeColorDepth(screen.colorDepth),\n    timezone_offset_minutes: new Date().getTimezoneOffset(),\n    java_enabled: false,\n    user_agent: navigator.userAgent,\n    window_size: resolveWindowSize(window.innerWidth || screen.width),\n  };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n  return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n  action: nextAction.three_ds.submit.url,\n  method: nextAction.three_ds.submit.method,\n  target: nextAction.three_ds.submit.target,\n  fields: nextAction.three_ds.submit.fields,\n});\n\nexport const buildThreeDSBrowserStep = (\n  nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n  const action = getThreeDSAction(nextAction);\n  if (!action) return null;\n  return {\n    kind: action.three_ds.phase,\n    protocolVersion: action.three_ds.version,\n    form: buildThreeDSBrowserForm(action),\n    completionEndpoint: action.three_ds.completion_endpoint,\n    threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n  };\n};\n\nexport const buildThreeDSMethodCompletion = (\n  nextAction: PaymentNextAction,\n  completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n  if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n    throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n  }\n  return {\n    completion_indicator: completionIndicator,\n    three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n  };\n};\n\nconst htmlEscape = (value: string): string =>\n  value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n  const form = buildThreeDSBrowserForm(nextAction);\n  const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n  const inputs = form.fields\n    .map(\n      (field) =>\n        `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n    )\n    .join(\"\");\n  const iframe =\n    form.target === \"hidden_iframe\"\n      ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n      : \"\";\n  return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n","export { ArcPay } from \"./core/arcpay\";\nexport type { ArcPayInstance, ArcPayLoadOptions } from \"./core/arcpay\";\nexport {\n  ArcPayError,\n  isValidationError,\n  isAuthenticationError,\n  isAuthorizationError,\n  isStateError,\n  isRateLimitError,\n  isApiError,\n  isNetworkError,\n  isChallengeAborted,\n} from \"./core/errors\";\nexport type { ArcPayErrorType } from \"./core/errors\";\nexport type { Environment } from \"./core/env\";\nexport type { TokenizeResult } from \"./tokenize/tokenize\";\nexport type { CardScheme } from \"./tokenize/scheme\";\nexport {\n  buildThreeDSAutoSubmitHtml,\n  buildThreeDSBrowserForm,\n  buildThreeDSBrowserStep,\n  buildThreeDSMethodCompletion,\n  collectBrowserInfo,\n  getThreeDSAction,\n  isThreeDSChallengeAction,\n  isThreeDSMethodAction,\n} from \"./three-ds\";\nexport type {\n  BrowserFormField,\n  BrowserInfo,\n  BrowserPostForm,\n  ThreeDSAction,\n  ThreeDSBrowserStep,\n} from \"./three-ds\";\nexport const SDK_VERSION = \"0.1.14\";\n\nexport type { FieldType } from \"./elements/postmessage\";\nexport type { ElementOptions, ElementEvent } from \"./elements/element\";\nexport { Elements } from \"./elements/elements\";\nexport type { ElementsOptions } from \"./elements/elements\";\n"]}
+{"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/three-ds/actions.ts","../../src/index.ts"],"names":["ArcPayError","init","isValidationError","isAuthenticationError","isAuthorizationError","isStateError","isRateLimitError","isApiError","isNetworkError","isChallengeAborted","detectEnvironment","publishableKey","validatePublishableKey","key","BANNER_ATTR","showSandboxBanner","bar","text","dismiss","ARCPAY_TYPE_PREFIX","isArcpayMessage","data","postToIframe","iframe","message","targetOrigin","parseIncoming","event","expectedOrigin","FORBIDDEN_PROPERTIES","sanitizeBlock","block","out","value","normalizedKey","sanitizeStyle","style","result","Element","field","options","context","target","container","_a","hello","_event","callback","_b","listener","DEFAULT_IFRAME_BASE","createChannelId","Elements","opts","ctx","element","paymentId","idempotencyKey","cardNumber","cardExpiry","cardCvv","iframeOrigin","cardIframeWindow","resolve","reject","timer","onMessage","errType","el","cache","buildInstance","load","err","existing","promise","resetForTests","ArcPay","supportedColorDepths","normalizeColorDepth","resolveWindowSize","width","collectBrowserInfo","acceptHeader","getThreeDSAction","nextAction","isThreeDSMethodAction","isThreeDSChallengeAction","buildThreeDSBrowserForm","assertHTTPSActionURL","action","parsed","e","buildThreeDSBrowserStep","buildThreeDSMethodCompletion","completionIndicator","requireDocument","explicitDocument","defaultSubmitter","form","mountThreeDSBrowserForm","doc","formDescriptor","input","waitForMethodFrame","mounted","timeoutMs","signal","settled","cleanup","onLoad","onAbort","settle","runThreeDSBrowserFlow","methodResult","indicator","response","followUpAction","challengeMounted","htmlEscape","buildThreeDSAutoSubmitHtml","inputs","SDK_VERSION"],"mappings":"2CAqBO,IAAMA,CAAAA,CAAN,cAA0B,KAAM,CASrC,WAAA,CAAYC,CAAAA,CAAuB,CACjC,KAAA,CAAMA,CAAAA,CAAK,OAAO,CAAA,CAClB,IAAA,CAAK,IAAA,CAAO,aAAA,CACZ,IAAA,CAAK,IAAA,CAAOA,CAAAA,CAAK,IAAA,CACjB,IAAA,CAAK,IAAA,CAAOA,CAAAA,CAAK,IAAA,CACjB,IAAA,CAAK,KAAA,CAAQA,CAAAA,CAAK,KAAA,CAClB,IAAA,CAAK,SAAA,CAAYA,EAAK,SAAA,CACtB,IAAA,CAAK,WAAA,CAAcA,CAAAA,CAAK,WAAA,CACxB,IAAA,CAAK,SAAA,CAAYA,CAAAA,CAAK,SAAA,CACtB,IAAA,CAAK,SAAA,CAAYA,CAAAA,CAAK,UACxB,CACF,CAAA,CAEaC,CAAAA,CAAqB,GAChC,CAAA,YAAaF,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,kBAAA,CAC5BG,CAAAA,CAAyB,CAAA,EACpC,CAAA,YAAaH,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,sBAAA,CAC5BI,CAAAA,CAAwB,CAAA,EACnC,CAAA,YAAaJ,CAAAA,EAAe,EAAE,IAAA,GAAS,qBAAA,CAC5BK,CAAAA,CAAgB,CAAA,EAC3B,CAAA,YAAaL,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,aAAA,CAC5BM,CAAAA,CAAoB,CAAA,EAC/B,CAAA,YAAaN,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,kBAAA,CAC5BO,CAAAA,CAAc,CAAA,EACzB,CAAA,YAAaP,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,WAAA,CAC5BQ,CAAAA,CAAkB,CAAA,EAC7B,CAAA,YAAaR,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,eAAA,CAC5BS,CAAAA,CAAsB,CAAA,EACjC,aAAaT,CAAAA,EAAe,CAAA,CAAE,IAAA,GAAS,oBCtDlC,IAAMU,CAAAA,CAAqBC,CAAAA,EAChCA,CAAAA,CAAe,UAAA,CAAW,UAAU,CAAA,CAAI,SAAA,CAAY,MAAA,CAEzCC,CAAAA,CAA0BC,CAAAA,EAAwC,CAC7E,GAAI,OAAOA,CAAAA,EAAQ,QAAA,EAAYA,CAAAA,CAAI,MAAA,GAAW,CAAA,CAC5C,MAAM,IAAIb,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,yBAAA,CACN,OAAA,CAAS,4CAAA,CACT,UAAW,KACb,CAAC,CAAA,CAEH,GAAI,CAACa,CAAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAK,CAACA,CAAAA,CAAI,UAAA,CAAW,UAAU,CAAA,CAC3D,MAAM,IAAIb,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,yBAAA,CACN,OAAA,CACE,qGAAA,CACF,SAAA,CAAW,KACb,CAAC,CAEL,CAAA,CCzBA,IAAMc,CAAAA,CAAc,4BAAA,CAEPC,EAAoB,IAAY,CAE3C,GADI,OAAO,QAAA,EAAa,WAAA,EACpB,QAAA,CAAS,aAAA,CAAc,CAAA,CAAA,EAAID,CAAW,CAAA,CAAA,CAAG,CAAA,CAAG,OAEhD,IAAME,CAAAA,CAAM,QAAA,CAAS,cAAc,KAAK,CAAA,CACxCA,CAAAA,CAAI,YAAA,CAAaF,CAAAA,CAAa,EAAE,CAAA,CAChCE,CAAAA,CAAI,KAAA,CAAM,OAAA,CACR,uOAAA,CAEF,IAAMC,CAAAA,CAAO,QAAA,CAAS,aAAA,CAAc,MAAM,EAC1CA,CAAAA,CAAK,WAAA,CAAc,iDAAA,CACnBD,CAAAA,CAAI,WAAA,CAAYC,CAAI,CAAA,CAEpB,IAAMC,CAAAA,CAAU,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA,CAC/CA,CAAAA,CAAQ,IAAA,CAAO,QAAA,CACfA,EAAQ,YAAA,CAAa,4BAAA,CAA8B,EAAE,CAAA,CACrDA,CAAAA,CAAQ,WAAA,CAAc,MAAA,CACtBA,CAAAA,CAAQ,YAAA,CAAa,YAAA,CAAc,0BAA0B,CAAA,CAC7DA,CAAAA,CAAQ,KAAA,CAAM,OAAA,CACZ,+FAAA,CACFA,EAAQ,gBAAA,CAAiB,OAAA,CAAS,IAAMF,CAAAA,CAAI,MAAA,EAAQ,CAAA,CACpDA,CAAAA,CAAI,WAAA,CAAYE,CAAO,CAAA,CAEvB,QAAA,CAAS,IAAA,CAAK,WAAA,CAAYF,CAAG,EAC/B,ECcA,IAAMG,CAAAA,CAAqB,SAAA,CAErBC,CAAAA,CAAmBC,CAAAA,EACvB,OAAOA,CAAAA,EAAS,QAAA,EAChBA,CAAAA,GAAS,IAAA,EACT,MAAA,GAAUA,CAAAA,EACV,OAAQA,CAAAA,CAA2B,IAAA,EAAS,QAAA,EAC3CA,EAA0B,IAAA,CAAK,UAAA,CAAWF,CAAkB,CAAA,CAElDG,CAAAA,CAAe,CAC1BC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,GACS,CACT,GAAIA,CAAAA,GAAiB,GAAA,CACnB,MAAM,IAAIzB,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,2BAAA,CACN,OAAA,CAAS,0CAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,GAAI,CAACuB,CAAAA,CAAO,aAAA,CACV,MAAM,IAAIvB,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,mBAAA,CACN,OAAA,CAAS,iEAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEHuB,CAAAA,CAAO,aAAA,CAAc,WAAA,CAAYC,CAAAA,CAASC,CAAY,EACxD,CAAA,CASO,IAAMC,CAAAA,CAAgB,CAC3BC,CAAAA,CACAC,CAAAA,GAEID,CAAAA,CAAM,MAAA,GAAWC,CAAAA,EACjB,CAACR,CAAAA,CAAgBO,CAAAA,CAAM,IAAI,CAAA,CAAU,IAAA,CAClCA,EAAM,IAAA,CC/Ef,IAAME,CAAAA,CAAuB,IAAI,GAAA,CAAI,CACnC,UAAA,CACA,WAAA,CACA,gBAAA,CACA,SAAA,CACA,KAAA,CACA,MAAA,CACA,OAAA,CACA,QAAA,CACA,OACF,CAAC,EAEKC,CAAAA,CAAiBC,CAAAA,EAA0D,CAC/E,IAAMC,CAAAA,CAA8B,EAAC,CACrC,IAAA,GAAW,CAACnB,CAAAA,CAAKoB,CAAK,CAAA,GAAK,MAAA,CAAO,OAAA,CAAQF,CAAK,CAAA,CAAG,CAChD,IAAMG,CAAAA,CAAgBrB,CAAAA,CAAI,WAAA,EAAY,CAClCgB,CAAAA,CAAqB,GAAA,CAAIK,CAAa,CAAA,GAI1CF,CAAAA,CAAInB,CAAG,CAAA,CAAIoB,CAAAA,EACb,CACA,OAAOD,CACT,EAEaG,CAAAA,CAAiBC,CAAAA,EAAoC,CAChE,IAAMC,CAAAA,CAAsB,CAAE,IAAA,CAAMP,CAAAA,CAAcM,CAAAA,CAAM,IAAI,CAAE,CAAA,CAC9D,OAAIA,CAAAA,CAAM,OAAA,GAAY,MAAA,GAAWC,EAAO,OAAA,CAAUP,CAAAA,CAAcM,CAAAA,CAAM,OAAO,CAAA,CAAA,CACzEA,CAAAA,CAAM,KAAA,GAAU,MAAA,GAAWC,CAAAA,CAAO,KAAA,CAAQP,CAAAA,CAAcM,CAAAA,CAAM,KAAK,CAAA,CAAA,CAChEC,CACT,CAAA,CCPO,IAAMC,CAAAA,CAAN,KAAc,CAMnB,WAAA,CACkBC,CAAAA,CACCC,CAAAA,CACAC,CAAAA,CACjB,CAHgB,IAAA,CAAA,KAAA,CAAAF,CAAAA,CACC,IAAA,CAAA,OAAA,CAAAC,CAAAA,CACA,IAAA,CAAA,OAAA,CAAAC,CAAAA,CARnB,IAAA,CAAQ,OAAmC,IAAA,CAC3C,IAAA,CAAiB,SAAA,CAAY,IAAI,GAAA,CACjC,IAAA,CAAQ,MAAA,CAAwC,SAAA,CAChD,IAAA,CAAQ,cAAA,CAAqD,KAM1D,CAEH,KAAA,CAAMC,CAAAA,CAAoC,CACxC,GAAI,KAAK,MAAA,CACP,MAAM,IAAI1C,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,iBAAA,CACN,OAAA,CAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA,CAC9B,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,IAAM2C,CAAAA,CAAY,OAAOD,CAAAA,EAAW,QAAA,CAAW,QAAA,CAAS,aAAA,CAAcA,CAAM,CAAA,CAAIA,CAAAA,CAChF,GAAI,EAAEC,CAAAA,YAAqB,WAAA,CAAA,CACzB,MAAM,IAAI3C,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,wBAAA,CACN,OAAA,CAAS,CAAA,wBAAA,EAA2B,MAAA,CAAO0C,CAAM,CAAC,CAAA,CAAA,CAClD,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAMnB,CAAAA,CAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA,CAC9CA,CAAAA,CAAO,GAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,CAAA,CAC5DA,CAAAA,CAAO,MAAM,OAAA,CAAU,gDAAA,CACvBA,CAAAA,CAAO,YAAA,CAAa,OAAA,CAAS,SAAS,CAAA,CACtCA,CAAAA,CAAO,YAAA,CAAa,qBAAA,CAAuB,IAAA,CAAK,KAAK,CAAA,CACrDoB,CAAAA,CAAU,WAAA,CAAYpB,CAAM,EAC5B,IAAA,CAAK,MAAA,CAASA,CAAAA,CAEd,IAAMK,CAAAA,CAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAA,CAExD,IAAA,CAAK,cAAA,CAAkBD,CAAAA,EAAwB,CAvEnD,IAAAiB,CAAAA,CA2EM,GAAIjB,CAAAA,CAAM,MAAA,IAAA,CAAWiB,CAAAA,CAAA,IAAA,CAAK,MAAA,GAAL,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAa,aAAA,CAAA,CAAe,OAEjD,IAAMvB,CAAAA,CAAOK,CAAAA,CAA8BC,CAAAA,CAAOC,CAAc,CAAA,CAC3DP,CAAAA,EACL,IAAA,CAAK,aAAA,CAAcA,CAAI,EACzB,CAAA,CACA,MAAA,CAAO,gBAAA,CAAiB,SAAA,CAAW,IAAA,CAAK,cAAc,CAAA,CAEtDE,CAAAA,CAAO,gBAAA,CACL,MAAA,CACA,IAAM,CACJ,GAAI,CAAC,IAAA,CAAK,MAAA,CAAQ,OAClB,IAAMsB,CAAAA,CAAwB,CAC5B,IAAA,CAAM,cAAA,CACN,MAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,MAAA,CACxB,cAAA,CAAgB,KAAK,OAAA,CAAQ,cAAA,CAC7B,SAAA,CAAW,IAAA,CAAK,OAAA,CAAQ,SAC1B,CAAA,CACAvB,CAAAA,CAAa,IAAA,CAAK,MAAA,CAAQuB,CAAAA,CAAOjB,CAAc,EACjD,CAAA,CACA,CAAE,IAAA,CAAM,IAAK,CACf,EACF,CAEQ,aAAA,CAAcP,CAAAA,CAA4B,CAC5CA,CAAAA,CAAK,IAAA,GAAS,cAAA,EAChB,IAAA,CAAK,MAAA,CAAS,OAAA,CAEV,IAAA,CAAK,OAAA,CAAQ,KAAA,EACf,IAAA,CAAK,KAAK,CAAE,IAAA,CAAM,cAAA,CAAgB,OAAA,CAASc,CAAAA,CAAc,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAE,CAAC,CAAA,CAEhF,IAAA,CAAK,IAAA,CAAK,CAAE,IAAA,CAAM,OAAQ,CAAC,CAAA,EAClBd,CAAAA,CAAK,IAAA,GAAS,iBAAA,EACvB,IAAA,CAAK,MAAA,CAAS,OAAA,CACd,IAAA,CAAK,IAAA,CAAK,CAAE,IAAA,CAAM,OAAA,CAAS,MAAA,CAAQA,CAAAA,CAAK,MAAO,CAAC,GACvCA,CAAAA,CAAK,IAAA,GAAS,eAAA,EAAmBA,CAAAA,CAAK,KAAA,GAAU,IAAA,CAAK,KAAA,EAC9D,IAAA,CAAK,IAAA,CAAK,CACR,IAAA,CAAM,QAAA,CACN,OAAA,CAASA,CAAAA,CAAK,OAAA,CACd,KAAA,CAAOA,CAAAA,CAAK,KAAA,CACZ,QAAA,CAAUA,CAAAA,CAAK,QACjB,CAAC,EAGL,CAEA,MAAA,CAAOmB,CAAAA,CAAwC,CACzCA,CAAAA,CAAQ,KAAA,EACV,IAAA,CAAK,IAAA,CAAK,CAAE,KAAM,cAAA,CAAgB,OAAA,CAASL,CAAAA,CAAcK,CAAAA,CAAQ,KAAK,CAAE,CAAC,EAE7E,CAEA,OAAA,EAAgB,CACV,IAAA,CAAK,MAAA,GACP,IAAA,CAAK,MAAA,CAAO,MAAA,GACZ,IAAA,CAAK,MAAA,CAAS,IAAA,CAAA,CAEZ,IAAA,CAAK,cAAA,GACP,MAAA,CAAO,mBAAA,CAAoB,SAAA,CAAW,IAAA,CAAK,cAAc,CAAA,CACzD,IAAA,CAAK,cAAA,CAAiB,IAAA,CAAA,CAExB,IAAA,CAAK,SAAA,CAAU,OAAM,CACrB,IAAA,CAAK,MAAA,CAAS,UAChB,CAEA,EAAA,CAAGM,CAAAA,CAAsCC,CAAAA,CAAgC,CACvE,OAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAIA,CAAQ,CAAA,CACpB,IAAM,IAAA,CAAK,UAAU,MAAA,CAAOA,CAAQ,CAC7C,CAEA,KAAA,EAAc,CACZ,IAAA,CAAK,IAAA,CAAK,CAAE,IAAA,CAAM,cAAe,CAAC,EACpC,CAEA,KAAA,EAAc,CACZ,KAAK,IAAA,CAAK,CAAE,IAAA,CAAM,cAAe,CAAC,EACpC,CAEA,OAAA,EAAmB,CACjB,OAAO,IAAA,CAAK,MAAA,GAAW,OACzB,CAOA,sBAAA,EAAwC,CAlK1C,IAAAH,CAAAA,CAAAI,CAAAA,CAmKI,OAAA,CAAOA,CAAAA,CAAAA,CAAAJ,CAAAA,CAAA,IAAA,CAAK,MAAA,GAAL,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAa,aAAA,GAAb,IAAA,CAAAI,CAAAA,CAA8B,IACvC,CAGA,IAAA,CAAKxB,CAAAA,CAA+B,CAClC,GAAI,CAAC,IAAA,CAAK,MAAA,CACR,MAAM,IAAIxB,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,aAAA,CACN,OAAA,CAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA,CAC9B,SAAA,CAAW,KACb,CAAC,CAAA,CAEHsB,CAAAA,CAAa,IAAA,CAAK,MAAA,CAAQE,CAAAA,CAAS,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAM,EAC5E,CAEQ,IAAA,CAAKG,CAAAA,CAA2B,CACtC,IAAA,IAAWsB,CAAAA,IAAY,IAAA,CAAK,SAAA,CAC1BA,CAAAA,CAAStB,CAAK,EAElB,CACF,CAAA,CC9KA,IAAMuB,CAAAA,CAAsB,0BAAA,CAEtBC,EAAkB,IAAc,CAZtC,IAAAP,CAAAA,CAaE,GAAI,EAAA,CAACA,CAAAA,CAAA,UAAA,CAAW,MAAA,GAAX,IAAA,EAAAA,CAAAA,CAAmB,UAAA,CAAA,CACtB,MAAM,IAAI5C,CAAAA,CAAY,CACpB,KAAM,kBAAA,CACN,IAAA,CAAM,oBAAA,CACN,OAAA,CAAS,iDAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,OAAO,UAAA,CAAW,MAAA,CAAO,UAAA,EAC3B,CAAA,CAEaoD,CAAAA,CAAN,KAAe,CAOpB,WAAA,CAAYC,CAAAA,CAAuD,CANnE,IAAA,CAAiB,UAAA,CAAa,IAAI,GAAA,CAIlC,IAAA,CAAQ,gBAAA,CAAmB,KAAA,CA7B7B,IAAAT,CAAAA,CAgCI,IAAA,CAAK,cAAA,CAAiBS,CAAAA,CAAK,eAC3B,IAAA,CAAK,UAAA,CAAA,CAAaT,CAAAA,CAAAS,CAAAA,CAAK,UAAA,GAAL,IAAA,CAAAT,CAAAA,CAAmBM,CAAAA,CACrC,IAAA,CAAK,SAAA,CAAYC,CAAAA,GACnB,CAEA,MAAA,CAAOZ,CAAAA,CAAkBC,CAAAA,CAA0B,EAAC,CAAY,CAC9D,GAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAID,CAAK,CAAA,CAC3B,MAAM,IAAIvC,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,mBAAA,CACN,QAAS,CAAA,YAAA,EAAeuC,CAAK,CAAA,gBAAA,CAAA,CAC7B,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,IAAMe,CAAAA,CAAsB,CAC1B,UAAA,CAAY,IAAA,CAAK,UAAA,CACjB,cAAA,CAAgB,IAAA,CAAK,cAAA,CACrB,SAAA,CAAW,IAAA,CAAK,SAClB,CAAA,CACMC,CAAAA,CAAU,IAAIjB,CAAAA,CAAQC,CAAAA,CAAOC,CAAAA,CAASc,CAAG,CAAA,CAC/C,OAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAIf,CAAAA,CAAOgB,CAAO,EAC3BA,CACT,CAEA,MAAM,QAAA,CAASC,CAAAA,CAAmBC,CAAAA,CAAiD,CAEjF,GAAI,IAAA,CAAK,gBAAA,CACP,MAAM,IAAIzD,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,KAAM,sBAAA,CACN,OAAA,CAAS,qEAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAM0D,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA,CAC7CC,CAAAA,CAAa,IAAA,CAAK,WAAW,GAAA,CAAI,YAAY,CAAA,CAC7CC,CAAAA,CAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA,CAE7C,GAAI,CAACF,CAAAA,EAAc,CAACC,CAAAA,EAAc,CAACC,CAAAA,CACjC,MAAM,IAAI5D,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,qBAAA,CACN,OAAA,CACE,oGAAA,CACF,SAAA,CAAW,KACb,CAAC,CAAA,CAEH,GAAI,CAAC0D,CAAAA,CAAW,SAAQ,EAAK,CAACC,CAAAA,CAAW,OAAA,EAAQ,EAAK,CAACC,CAAAA,CAAQ,OAAA,EAAQ,CACrE,MAAM,IAAI5D,CAAAA,CAAY,CACpB,IAAA,CAAM,kBAAA,CACN,IAAA,CAAM,qBACN,OAAA,CAAS,+DAAA,CACT,SAAA,CAAW,KACb,CAAC,CAAA,CAGH,IAAA,CAAK,gBAAA,CAAmB,IAAA,CACxB,GAAI,CACF,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW0D,CAAAA,CAAYF,EAAWC,CAAc,CACpE,CAAA,OAAE,CACA,IAAA,CAAK,gBAAA,CAAmB,MAC1B,CACF,CAEQ,UAAA,CACNC,CAAAA,CACAF,CAAAA,CACAC,CAAAA,CACyB,CACzB,IAAMI,CAAAA,CAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,CAGxCC,CAAAA,CAAmBJ,CAAAA,CAAW,sBAAA,EAAuB,CAE3D,OAAO,IAAI,OAAA,CAAwB,CAACK,CAAAA,CAASC,CAAAA,GAAW,CAEtD,IAAMC,CAAAA,CAAQ,MAAA,CAAO,UAAA,CAAW,IAAM,CACpC,MAAA,CAAO,mBAAA,CAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/CF,CAAAA,CACE,IAAIhE,CAAAA,CAAY,CACd,IAAA,CAAM,gBACN,IAAA,CAAM,kBAAA,CACN,OAAA,CAAS,uCAAA,CACT,SAAA,CAAW,IAAA,CACX,SAAA,CAAAwD,CACF,CAAC,CACH,EACF,CAAA,CAAG,GAAM,CAAA,CAEHU,CAAAA,CAAavC,CAAAA,EAAwB,CAEzC,GAAImC,CAAAA,GAAqB,IAAA,EAAQnC,CAAAA,CAAM,MAAA,GAAWmC,CAAAA,CAAkB,OAEpE,IAAMzC,CAAAA,CAAOK,CAAAA,CAA8BC,CAAAA,CAAOkC,CAAY,CAAA,CAC9D,GAAKxC,CAAAA,CAAAA,CAEL,GAAIA,CAAAA,CAAK,IAAA,GAAS,wBAAA,CAChB,YAAA,CAAa4C,CAAK,CAAA,CAClB,MAAA,CAAO,mBAAA,CAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/CH,CAAAA,CAAQ,CACN,WAAA,CAAa1C,CAAAA,CAAK,WAAA,CAClB,SAAUA,CAAAA,CAAK,QAAA,CACf,UAAA,CAAYA,CAAAA,CAAK,UAAA,CACjB,OAAA,CAASA,CAAAA,CAAK,OAAA,CACd,SAAA,CAAWA,CAAAA,CAAK,SAAA,CAChB,SAAA,CAAWA,CAAAA,CAAK,SAClB,CAAC,CAAA,CAAA,KAAA,GACQA,EAAK,IAAA,GAAS,uBAAA,CAAyB,CAChD,YAAA,CAAa4C,CAAK,CAAA,CAClB,MAAA,CAAO,mBAAA,CAAoB,SAAA,CAAWC,CAAS,CAAA,CAC/C,IAAMC,CAAAA,CACJ9C,CAAAA,CAAK,SAAA,GAAc,kBAAA,EAAsBA,EAAK,SAAA,GAAc,WAAA,CACxDA,CAAAA,CAAK,SAAA,CACL,WAAA,CACN2C,CAAAA,CACE,IAAIhE,CAAAA,CAAY,CACd,IAAA,CAAMmE,CAAAA,CACN,IAAA,CAAM9C,CAAAA,CAAK,IAAA,CACX,OAAA,CAASA,CAAAA,CAAK,OAAA,CACd,SAAA,CAAW,KAAA,CACX,SAAA,CAAAmC,CACF,CAAC,CACH,EACF,CAAA,CACF,CAAA,CAEA,MAAA,CAAO,gBAAA,CAAiB,SAAA,CAAWU,CAAS,CAAA,CAC5CR,CAAAA,CAAW,KAAK,CAAE,IAAA,CAAM,iBAAA,CAAmB,SAAA,CAAAF,CAAAA,CAAW,cAAA,CAAAC,CAAe,CAAC,EACxE,CAAC,CACH,CAEA,OAAA,EAAgB,CACd,IAAA,IAAWW,CAAAA,IAAM,KAAK,UAAA,CAAW,MAAA,EAAO,CACtCA,CAAAA,CAAG,OAAA,EAAQ,CAEb,IAAA,CAAK,UAAA,CAAW,KAAA,GAClB,CACF,EClKA,IAAMxD,CAAAA,CAAkEA,CAAAA,CAYlEyD,CAAAA,CAAQ,IAAI,GAAA,CAEZC,CAAAA,CAAiB3D,CAAAA,GACjBD,CAAAA,CAAkBC,CAAc,CAAA,GAAM,SAAA,EACxCI,CAAAA,EAAkB,CAEb,CACL,cAAA,CAAAJ,CAAAA,CACA,WAAA,CAAaD,CAAAA,CAAkBC,CAAc,CAAA,CAC7C,SAAU,IAAM,IAAIyC,CAAAA,CAAS,CAAE,cAAA,CAAAzC,CAAe,CAAC,CACjD,CAAA,CAAA,CAGF,SAAS4D,CAAAA,CAAK5D,CAAAA,CAAiD,CAC7D,GAAI,CACFC,CAAAA,CAAuBD,CAAc,EACvC,CAAA,MAAS6D,CAAAA,CAAK,CACZ,OAAO,OAAA,CAAQ,MAAA,CAAOA,CAAG,CAC3B,CACA,IAAM3D,CAAAA,CAAMF,CAAAA,CACN8D,CAAAA,CAAWJ,CAAAA,CAAM,GAAA,CAAIxD,CAAG,CAAA,CAC9B,GAAI4D,CAAAA,CAAU,OAAOA,CAAAA,CACrB,IAAMC,CAAAA,CAAU,OAAA,CAAQ,OAAA,CAAQJ,CAAAA,CAAc3D,CAAc,CAAC,CAAA,CAC7D,OAAA0D,CAAAA,CAAM,GAAA,CAAIxD,EAAK6D,CAAO,CAAA,CACfA,CACT,CAEA,IAAMC,CAAAA,CAAgB,IAAY,CAChCN,CAAAA,CAAM,KAAA,GACR,CAAA,CAEaO,EAAAA,CAAS,CACpB,IAAA,CAAAL,CAAAA,CACA,eAAA,CAAiBI,CACnB,ECeA,IAAME,EAAAA,CAAuB,CAAC,CAAA,CAAG,CAAA,CAAG,CAAA,CAAG,EAAA,CAAI,EAAA,CAAI,EAAA,CAAI,EAAA,CAAI,EAAE,CAAA,CAEnDC,EAAAA,CAAuB7C,GAC3B4C,EAAAA,CAAqB,QAAA,CAAS5C,CAAmC,CAAA,CAC5DA,CAAAA,CACD,EAAA,CAEA8C,EAAAA,CAAqBC,CAAAA,EACrBA,CAAAA,EAAS,GAAA,CAAa,IAAA,CACtBA,CAAAA,EAAS,GAAA,CAAY,IAAA,CACrBA,CAAAA,EAAS,GAAA,CAAY,KACrBA,CAAAA,EAAS,GAAA,CAAY,IAAA,CAClB,IAAA,CAGIC,CAAAA,CAAqB,CAChCC,CAAAA,CAAe,iEAAA,GACC,CAChB,GACE,OAAO,MAAA,EAAW,WAAA,EAClB,OAAO,SAAA,EAAc,WAAA,EACrB,OAAO,MAAA,EAAW,WAAA,CAElB,MAAM,IAAI,KAAA,CAAM,4DAA4D,CAAA,CAE9E,OAAO,CACL,aAAA,CAAeA,CAAAA,CACf,QAAA,CAAU,SAAA,CAAU,QAAA,EAAY,IAAA,CAChC,YAAA,CAAc,OAAO,KAAA,CACrB,aAAA,CAAe,MAAA,CAAO,MAAA,CACtB,WAAA,CAAaJ,EAAAA,CAAoB,MAAA,CAAO,UAAU,CAAA,CAClD,uBAAA,CAAyB,IAAI,IAAA,EAAK,CAAE,iBAAA,EAAkB,CACtD,YAAA,CAAc,MACd,UAAA,CAAY,SAAA,CAAU,SAAA,CACtB,WAAA,CAAaC,EAAAA,CAAkB,MAAA,CAAO,UAAA,EAAc,MAAA,CAAO,KAAK,CAClE,CACF,CAAA,CAEaI,CAAAA,CAAoBC,CAAAA,EACxBA,CAAAA,EAAA,IAAA,CAAAA,EAAc,IAAA,CAGVC,CAAAA,CAAyBD,CAAAA,EAAAA,CAC7BA,CAAAA,EAAA,IAAA,CAAA,MAAA,CAAAA,CAAAA,CAAY,IAAA,IAAS,iBAAA,EAAqBA,CAAAA,CAAW,QAAA,CAAS,KAAA,GAAU,QAAA,CAGpEE,CAAAA,CAA4BF,CAAAA,EAAAA,CAChCA,CAAAA,EAAA,IAAA,CAAA,MAAA,CAAAA,EAAY,IAAA,IAAS,oBAAA,EAAwBA,CAAAA,CAAW,QAAA,CAAS,KAAA,GAAU,WAAA,CAGvEG,CAAAA,CAA2BH,CAAAA,GAAoD,CAC1F,MAAA,CAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA,CACnC,MAAA,CAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA,CACnC,MAAA,CAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA,CACnC,MAAA,CAAQA,CAAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MACrC,CAAA,CAAA,CAEMI,CAAAA,CAAwBC,CAAAA,EAAyB,CACrD,IAAIC,CAAAA,CACJ,GAAI,CACFA,CAAAA,CAAS,IAAI,GAAA,CAAID,CAAM,EACzB,CAAA,MAAQE,CAAAA,CAAA,CACN,MAAM,IAAI,KAAA,CAAM,+CAA+C,CACjE,CACA,GAAID,CAAAA,CAAO,QAAA,GAAa,QAAA,CACtB,MAAM,IAAI,KAAA,CAAM,gCAAgC,CAEpD,CAAA,CAEaE,CAAAA,CACXR,CAAAA,EAC8B,CAC9B,IAAMK,CAAAA,CAASN,EAAiBC,CAAU,CAAA,CAC1C,OAAKK,CAAAA,CACE,CACL,IAAA,CAAMA,CAAAA,CAAO,QAAA,CAAS,KAAA,CACtB,eAAA,CAAiBA,CAAAA,CAAO,QAAA,CAAS,OAAA,CACjC,IAAA,CAAMF,CAAAA,CAAwBE,CAAM,EACpC,kBAAA,CAAoBA,CAAAA,CAAO,QAAA,CAAS,mBAAA,CACpC,oBAAA,CAAsBA,CAAAA,CAAO,QAAA,CAAS,wBACxC,CAAA,CAPoB,IAQtB,CAAA,CAEaI,CAAAA,CAA+B,CAC1CT,CAAAA,CACAU,CAAAA,CAAuC,GAAA,GACyC,CAChF,GAAI,CAACT,CAAAA,CAAsBD,CAAU,CAAA,EAAK,CAACA,CAAAA,CAAW,QAAA,CAAS,wBAAA,CAC7D,MAAM,IAAI,KAAA,CAAM,2EAA2E,CAAA,CAE7F,OAAO,CACL,qBAAsBU,CAAAA,CACtB,wBAAA,CAA0BV,CAAAA,CAAW,QAAA,CAAS,wBAChD,CACF,CAAA,CAEMW,EAAAA,CAAmBC,CAAAA,EAA0C,CACjE,GAAIA,CAAAA,CAAkB,OAAOA,CAAAA,CAC7B,GAAI,OAAO,UAAa,WAAA,CACtB,MAAM,IAAI,KAAA,CAAM,6DAA6D,CAAA,CAE/E,OAAO,QACT,CAAA,CAEMC,EAAAA,CAAoBC,CAAAA,EAAgC,CACxDA,CAAAA,CAAK,MAAA,GACP,CAAA,CAEaC,CAAAA,CAA0B,CACrCf,CAAAA,CACA5C,CAAAA,CAA+B,EAAC,GACT,CApLzB,IAAAI,CAAAA,CAAAI,CAAAA,CAqLE,IAAMoD,CAAAA,CAAML,EAAAA,CAAgBvD,CAAAA,CAAQ,QAAQ,CAAA,CACtCG,GAAYC,CAAAA,CAAAJ,CAAAA,CAAQ,SAAA,GAAR,IAAA,CAAAI,CAAAA,CAAqBwD,CAAAA,CAAI,IAAA,CACrCC,CAAAA,CAAiBd,CAAAA,CAAwBH,CAAU,CAAA,CACzDI,CAAAA,CAAqBa,CAAAA,CAAe,MAAM,CAAA,CAC1C,IAAMH,EAAOE,CAAAA,CAAI,aAAA,CAAc,MAAM,CAAA,CAC/B1D,CAAAA,CACJ2D,CAAAA,CAAe,MAAA,GAAW,eAAA,CACtB,CAAA,uBAAA,EAA0B,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,CAAA,CAC5DrD,CAAAA,CAAAR,CAAAA,CAAQ,eAAA,GAAR,IAAA,CAAAQ,CAAAA,CAA2B,OAAA,CAC9BzB,CAAAA,CAEJ2E,CAAAA,CAAK,MAAA,CAASG,CAAAA,CAAe,MAAA,CAC7BH,CAAAA,CAAK,MAAA,CAASG,CAAAA,CAAe,OAC7BH,CAAAA,CAAK,MAAA,CAASxD,CAAAA,CACdwD,CAAAA,CAAK,MAAA,CAAS,IAAA,CAEd,IAAA,IAAW3D,CAAAA,IAAS8D,CAAAA,CAAe,MAAA,CAAQ,CACzC,IAAMC,CAAAA,CAAQF,CAAAA,CAAI,aAAA,CAAc,OAAO,EACvCE,CAAAA,CAAM,IAAA,CAAO,QAAA,CACbA,CAAAA,CAAM,IAAA,CAAO/D,CAAAA,CAAM,IAAA,CACnB+D,CAAAA,CAAM,KAAA,CAAQ/D,CAAAA,CAAM,KAAA,CACpB2D,CAAAA,CAAK,MAAA,CAAOI,CAAK,EACnB,CAEA,OAAID,CAAAA,CAAe,MAAA,GAAW,eAAA,GAC5B9E,CAAAA,CAAS6E,CAAAA,CAAI,aAAA,CAAc,QAAQ,CAAA,CACnC7E,CAAAA,CAAO,IAAA,CAAOmB,CAAAA,CACdnB,CAAAA,CAAO,KAAA,CAAQ,mBAAA,CACfA,CAAAA,CAAO,MAAA,CAAS,KAChBoB,CAAAA,CAAU,MAAA,CAAOpB,CAAM,CAAA,CAAA,CAGzBoB,CAAAA,CAAU,MAAA,CAAOuD,CAAI,CAAA,CAEd,CACL,IAAA,CAAAA,CAAAA,CACA,MAAA,CAAA3E,CAAAA,CACA,MAAA,CAAQ,IAAG,CA1Nf,IAAAqB,CAAAA,CA0NmB,OAAA,CAAA,CAAAA,CAAAA,CAAAJ,CAAAA,CAAQ,SAAA,GAAR,IAAA,CAAAI,CAAAA,CAAqBqD,EAAAA,EAAkBC,CAAI,CAAA,CAAA,CAC1D,MAAA,CAAQ,IAAM,CACZA,CAAAA,CAAK,MAAA,GACL3E,CAAAA,EAAA,IAAA,EAAAA,CAAAA,CAAQ,MAAA,GACV,CACF,CACF,CAAA,CAEMgF,EAAAA,CAAqB,CACzBC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,GAEA,IAAI,OAAA,CAAQ,CAAC3C,CAAAA,CAASC,IAAW,CAC/B,GAAI,CAACwC,CAAAA,CAAQ,MAAA,CAAQ,CACnBzC,CAAAA,CAAQ,QAAQ,CAAA,CAChB,MACF,CACA,GAAI2C,CAAAA,EAAA,IAAA,EAAAA,CAAAA,CAAQ,OAAA,CAAS,CACnB1C,CAAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,CAA6B,YAAY,CAAC,CAAA,CAClE,MACF,CAEA,IAAI2C,CAAAA,CAAU,KAAA,CACRC,CAAAA,CAAU,IAAM,CAlP1B,IAAAhE,GAmPMA,CAAAA,CAAA4D,CAAAA,CAAQ,MAAA,GAAR,IAAA,EAAA5D,CAAAA,CAAgB,mBAAA,CAAoB,MAAA,CAAQiE,CAAAA,CAAAA,CAC5CH,CAAAA,EAAA,IAAA,EAAAA,CAAAA,CAAQ,mBAAA,CAAoB,OAAA,CAASI,CAAAA,CAAAA,CACrC,YAAA,CAAa7C,CAAK,EACpB,CAAA,CACM8C,CAAAA,CAAU1E,CAAAA,EAAiC,CAC3CsE,CAAAA,GACJA,CAAAA,CAAU,IAAA,CACVC,CAAAA,EAAQ,CACR7C,CAAAA,CAAQ1B,CAAM,CAAA,EAChB,CAAA,CACMwE,CAAAA,CAAS,IAAME,CAAAA,CAAO,QAAQ,CAAA,CAC9BD,CAAAA,CAAU,IAAM,CAChBH,CAAAA,GACJA,CAAAA,CAAU,IAAA,CACVC,CAAAA,EAAQ,CACR5C,CAAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,CAA6B,YAAY,CAAC,CAAA,EACpE,EACMC,CAAAA,CAAQ,UAAA,CAAW,IAAM8C,CAAAA,CAAO,SAAS,CAAA,CAAGN,CAAS,CAAA,CAE3DD,CAAAA,CAAQ,MAAA,CAAO,gBAAA,CAAiB,MAAA,CAAQK,CAAAA,CAAQ,CAAE,IAAA,CAAM,IAAK,CAAC,CAAA,CAC9DH,CAAAA,EAAA,IAAA,EAAAA,CAAAA,CAAQ,gBAAA,CAAiB,OAAA,CAASI,CAAAA,CAAS,CAAE,IAAA,CAAM,IAAK,CAAA,EAC1D,CAAC,CAAA,CAEUE,CAAAA,CAAwB,MACnC5B,EACA5C,CAAAA,GACsC,CA7QxC,IAAAI,CAAAA,CAAAI,CAAAA,CA8QE,GAAI,CAACoC,CAAAA,CAAY,OAAO,CAAE,MAAA,CAAQ,WAAY,CAAA,CAE9C,GAAIE,CAAAA,CAAyBF,CAAU,EAAG,CACxC,IAAMoB,CAAAA,CAAUL,CAAAA,CAAwBf,CAAAA,CAAY5C,CAAO,CAAA,CAC3D,OAAAgE,CAAAA,CAAQ,MAAA,EAAO,CACR,CAAE,MAAA,CAAQ,qBAAA,CAAuB,MAAA,CAAQpB,CAAAA,CAAY,QAAAoB,CAAQ,CACtE,CAEA,GAAI,CAACnB,CAAAA,CAAsBD,CAAU,CAAA,CAAG,OAAO,CAAE,MAAA,CAAQ,WAAY,CAAA,CACrE,GAAI,CAAC5C,CAAAA,CAAQ,+BACX,MAAM,IAAI,KAAA,CAAM,sEAAsE,CAAA,CAGxF,IAAMgE,CAAAA,CAAUL,CAAAA,CAAwBf,CAAAA,CAAY5C,CAAO,CAAA,CAC3D,GAAI,CACFgE,CAAAA,CAAQ,MAAA,EAAO,CACf,IAAMS,CAAAA,CAAe,MAAMV,EAAAA,CACzBC,CAAAA,CAAAA,CACA5D,CAAAA,CAAAJ,CAAAA,CAAQ,eAAA,GAAR,IAAA,CAAAI,CAAAA,CAA2B,GAAA,CAC3BJ,CAAAA,CAAQ,MACV,CAAA,CACM0E,CAAAA,CAAAA,CAAYlE,CAAAA,CAAAR,CAAAA,CAAQ,4BAAR,IAAA,CAAAQ,CAAAA,CAAsCiE,CAAAA,GAAiB,QAAA,CAAW,GAAA,CAAM,GAAA,CACpFE,CAAAA,CAAW,MAAM3E,CAAAA,CAAQ,qBAAA,CAC7BqD,CAAAA,CAA6BT,CAAAA,CAAY8B,CAAS,CAAA,CAClD9B,CAAAA,CACA,CAAE,eAAgB5C,CAAAA,CAAQ,8BAA+B,CAC3D,CAAA,CACM4E,CAAAA,CAAiBjC,CAAAA,CAAiBgC,CAAAA,CAAS,WAAW,CAAA,CAC5D,GAAIC,CAAAA,EAAkB9B,CAAAA,CAAyB8B,CAAc,CAAA,CAAG,CAC9D,IAAMC,CAAAA,CAAmBlB,CAAAA,CAAwBiB,CAAAA,CAAgB5E,CAAO,CAAA,CACxE,OAAA6E,CAAAA,CAAiB,MAAA,EAAO,CACjB,CACL,MAAA,CAAQ,qBAAA,CACR,MAAA,CAAQD,CAAAA,CACR,QAAA,CAAAD,CAAAA,CACA,QAASE,CAAAA,CACT,YAAA,CAAAJ,CACF,CACF,CACA,OAAO,CAAE,MAAA,CAAQ,kBAAA,CAAoB,QAAA,CAAAE,CAAAA,CAAU,YAAA,CAAAF,CAAa,CAC9D,CAAA,OAAE,CACAT,EAAQ,MAAA,GACV,CACF,CAAA,CAEMc,CAAAA,CAAcrF,CAAAA,EAClBA,CAAAA,CACG,OAAA,CAAQ,IAAA,CAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,IAAA,CAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,KAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,IAAA,CAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,IAAA,CAAM,OAAO,CAAA,CAEbsF,CAAAA,CAA8BnC,CAAAA,EAA0C,CACnF,IAAMc,CAAAA,CAAOX,CAAAA,CAAwBH,CAAU,CAAA,CAC/CI,CAAAA,CAAqBU,CAAAA,CAAK,MAAM,CAAA,CAChC,IAAMxD,CAAAA,CAASwD,CAAAA,CAAK,MAAA,GAAW,eAAA,CAAkB,wBAAA,CAA2B,OAAA,CACtEsB,CAAAA,CAAStB,CAAAA,CAAK,MAAA,CACjB,GAAA,CACE3D,GACC,CAAA,2BAAA,EAA8B+E,CAAAA,CAAW/E,CAAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAY+E,CAAAA,CAAW/E,CAAAA,CAAM,KAAK,CAAC,CAAA,EAAA,CAC3F,CAAA,CACC,IAAA,CAAK,EAAE,CAAA,CAKV,OAAO,iEAHL2D,CAAAA,CAAK,MAAA,GAAW,eAAA,CACZ,kFAAA,CACA,EACwE,CAAA,4BAAA,EAA+BoB,CAAAA,CAAWpB,CAAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAaxD,CAAM,CAAA,EAAA,EAAK8E,CAAM,CAAA,iEAAA,CACpK,MC1SaC,EAAAA,CAAc","file":"arcpay.global.js","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n  publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message: \"Publishable key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message:\n        \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n      retryable: false,\n    });\n  }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n  if (typeof document === \"undefined\") return;\n  if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n  const bar = document.createElement(\"div\");\n  bar.setAttribute(BANNER_ATTR, \"\");\n  bar.style.cssText =\n    \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n  const text = document.createElement(\"span\");\n  text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n  bar.appendChild(text);\n\n  const dismiss = document.createElement(\"button\");\n  dismiss.type = \"button\";\n  dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n  dismiss.textContent = \"×\";\n  dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n  dismiss.style.cssText =\n    \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n  dismiss.addEventListener(\"click\", () => bar.remove());\n  bar.appendChild(dismiss);\n\n  document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n  | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n  | { type: \"arcpay:style\"; payload: StyleSubset }\n  | { type: \"arcpay:focus\" }\n  | { type: \"arcpay:clear\" }\n  | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n  | { type: \"arcpay:ready\" }\n  | { type: \"arcpay:rejected\"; reason: string }\n  | {\n      type: \"arcpay:change\";\n      field: FieldType;\n      isValid: boolean;\n      brand?: string;\n      lastFour?: string;\n    }\n  | {\n      type: \"arcpay:tokenize-result\";\n      cardTokenId: string;\n      cardMask: string;\n      cardScheme: string;\n      cardBin: string;\n      expiresIn: number;\n      expiresAt: string;\n    }\n  | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n  base: Record<string, string>;\n  invalid?: Record<string, string>;\n  focus?: Record<string, string>;\n}\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n  typeof data === \"object\" &&\n  data !== null &&\n  \"type\" in data &&\n  typeof (data as { type: unknown }).type === \"string\" &&\n  (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n  iframe: HTMLIFrameElement,\n  message: ParentToIframe,\n  targetOrigin: string,\n): void => {\n  if (targetOrigin === \"*\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"wildcard_origin_forbidden\",\n      message: \"postToIframe: targetOrigin cannot be '*'\",\n      retryable: false,\n    });\n  }\n  if (!iframe.contentWindow) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"iframe_not_loaded\",\n      message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n      retryable: false,\n    });\n  }\n  iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n  if (targetOrigin === \"*\") {\n    throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n  }\n  window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n  event: MessageEvent,\n  expectedOrigin: string,\n): T | null => {\n  if (event.origin !== expectedOrigin) return null;\n  if (!isArcpayMessage(event.data)) return null;\n  return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\n// Spec calls out position:fixed, transform, pointer-events:none as forbidden.\n// We extend to cover the full clickjacking attack surface: any positioning\n// (fixed/absolute/sticky), transform, all pointer-events values, z-index, and\n// inset properties (top/left/right/bottom/inset). The legitimate use cases\n// for these in a 1-line input field are zero, so blanket drop.\nconst FORBIDDEN_PROPERTIES = new Set([\n  \"position\",\n  \"transform\",\n  \"pointer-events\",\n  \"z-index\",\n  \"top\",\n  \"left\",\n  \"right\",\n  \"bottom\",\n  \"inset\",\n]);\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n  const out: Record<string, string> = {};\n  for (const [key, value] of Object.entries(block)) {\n    const normalizedKey = key.toLowerCase();\n    if (FORBIDDEN_PROPERTIES.has(normalizedKey)) {\n      // Defense against position/transform-based clickjacking. Silently drop.\n      continue;\n    }\n    out[key] = value;\n  }\n  return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n  const result: StyleSubset = { base: sanitizeBlock(style.base) };\n  if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n  if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n  return result;\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n  type FieldType,\n  type ParentToIframe,\n  type IframeToParent,\n  type StyleSubset,\n  postToIframe,\n  parseIncoming,\n} from \"./postmessage\";\nimport { sanitizeStyle } from \"./style\";\n\nexport interface ElementOptions {\n  /** StyleSubset applied via arcpay:style postMessage. */\n  style?: StyleSubset;\n  placeholder?: string;\n}\n\nexport type ElementEvent =\n  | { type: \"ready\" }\n  | { type: \"change\"; isValid: boolean; brand?: string; lastFour?: string }\n  | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\n\nexport interface ElementContext {\n  iframeBase: string;\n  publishableKey: string;\n  channelId: string;\n}\n\nexport class Element {\n  private iframe: HTMLIFrameElement | null = null;\n  private readonly listeners = new Set<Listener>();\n  private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n  private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n  constructor(\n    public readonly field: FieldType,\n    private readonly options: ElementOptions,\n    private readonly context: ElementContext,\n  ) {}\n\n  mount(target: string | HTMLElement): void {\n    if (this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"already_mounted\",\n        message: `Element ${this.field} is already mounted`,\n        retryable: false,\n      });\n    }\n    const container = typeof target === \"string\" ? document.querySelector(target) : target;\n    if (!(container instanceof HTMLElement)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"mount_target_not_found\",\n        message: `mount target not found: ${String(target)}`,\n        retryable: false,\n      });\n    }\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n    iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n    iframe.setAttribute(\"allow\", \"payment\");\n    iframe.setAttribute(\"data-arcpay-element\", this.field);\n    container.appendChild(iframe);\n    this.iframe = iframe;\n\n    const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n    this.messageHandler = (event: MessageEvent) => {\n      // C1: source guard — only accept messages from this element's own iframe.\n      // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n      // could trigger handlers on cardNumber and vice-versa.\n      if (event.source !== this.iframe?.contentWindow) return;\n      // C4: use parseIncoming for origin + arcpay: prefix guard.\n      const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n      if (!data) return;\n      this.handleMessage(data);\n    };\n    window.addEventListener(\"message\", this.messageHandler);\n\n    iframe.addEventListener(\n      \"load\",\n      () => {\n        if (!this.iframe) return;\n        const hello: ParentToIframe = {\n          type: \"arcpay:hello\",\n          origin: window.location.origin,\n          publishableKey: this.context.publishableKey,\n          channelId: this.context.channelId,\n        };\n        postToIframe(this.iframe, hello, expectedOrigin);\n      },\n      { once: true },\n    );\n  }\n\n  private handleMessage(data: IframeToParent): void {\n    if (data.type === \"arcpay:ready\") {\n      this.status = \"ready\";\n      // Apply initial style if provided at construction time.\n      if (this.options.style) {\n        this.send({ type: \"arcpay:style\", payload: sanitizeStyle(this.options.style) });\n      }\n      this.emit({ type: \"ready\" });\n    } else if (data.type === \"arcpay:rejected\") {\n      this.status = \"error\";\n      this.emit({ type: \"error\", reason: data.reason });\n    } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n      this.emit({\n        type: \"change\",\n        isValid: data.isValid,\n        brand: data.brand,\n        lastFour: data.lastFour,\n      });\n    }\n    // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n  }\n\n  update(options: { style?: StyleSubset }): void {\n    if (options.style) {\n      this.send({ type: \"arcpay:style\", payload: sanitizeStyle(options.style) });\n    }\n  }\n\n  destroy(): void {\n    if (this.iframe) {\n      this.iframe.remove();\n      this.iframe = null;\n    }\n    if (this.messageHandler) {\n      window.removeEventListener(\"message\", this.messageHandler);\n      this.messageHandler = null;\n    }\n    this.listeners.clear();\n    this.status = \"pending\";\n  }\n\n  on(_event: \"ready\" | \"change\" | \"error\", callback: Listener): () => void {\n    this.listeners.add(callback);\n    return () => this.listeners.delete(callback);\n  }\n\n  focus(): void {\n    this.send({ type: \"arcpay:focus\" });\n  }\n\n  clear(): void {\n    this.send({ type: \"arcpay:clear\" });\n  }\n\n  isReady(): boolean {\n    return this.status === \"ready\";\n  }\n\n  /**\n   * Internal: returns the iframe's contentWindow for source-filtering in\n   * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n   * or when jsdom has not yet populated contentWindow (test environment).\n   */\n  getIframeContentWindow(): Window | null {\n    return this.iframe?.contentWindow ?? null;\n  }\n\n  /** Internal: used by Elements factory to send tokenize commands. */\n  send(message: ParentToIframe): void {\n    if (!this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"not_mounted\",\n        message: `Element ${this.field} is not mounted`,\n        retryable: false,\n      });\n    }\n    postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n  }\n\n  private emit(event: ElementEvent): void {\n    for (const listener of this.listeners) {\n      listener(event);\n    }\n  }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\n\nexport type { TokenizeResult };\n\nexport type ElementsOptions = Record<string, never>;\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n  if (!globalThis.crypto?.randomUUID) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"crypto_unavailable\",\n      message: \"crypto.randomUUID is required for Hosted Fields\",\n      retryable: false,\n    });\n  }\n  return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n  private readonly elementMap = new Map<FieldType, Element>();\n  private readonly iframeBase: string;\n  private readonly publishableKey: string;\n  private readonly channelId: string;\n  private tokenizeInFlight = false;\n\n  constructor(opts: { publishableKey: string; iframeBase?: string }) {\n    this.publishableKey = opts.publishableKey;\n    this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n    this.channelId = createChannelId();\n  }\n\n  create(field: FieldType, options: ElementOptions = {}): Element {\n    if (this.elementMap.has(field)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"duplicate_element\",\n        message: `Element for ${field} already created`,\n        retryable: false,\n      });\n    }\n    const ctx: ElementContext = {\n      iframeBase: this.iframeBase,\n      publishableKey: this.publishableKey,\n      channelId: this.channelId,\n    };\n    const element = new Element(field, options, ctx);\n    this.elementMap.set(field, element);\n    return element;\n  }\n\n  async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n    // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n    if (this.tokenizeInFlight) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"tokenize_in_progress\",\n        message: \"A tokenize() call is already in progress for this Elements instance\",\n        retryable: false,\n      });\n    }\n\n    const cardNumber = this.elementMap.get(\"cardNumber\");\n    const cardExpiry = this.elementMap.get(\"cardExpiry\");\n    const cardCvv = this.elementMap.get(\"cardCvv\");\n\n    if (!cardNumber || !cardExpiry || !cardCvv) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"incomplete_elements\",\n        message:\n          \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n        retryable: false,\n      });\n    }\n    if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"elements_not_ready\",\n        message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n        retryable: false,\n      });\n    }\n\n    this.tokenizeInFlight = true;\n    try {\n      return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n    } finally {\n      this.tokenizeInFlight = false;\n    }\n  }\n\n  private doTokenize(\n    cardNumber: Element,\n    paymentId: string,\n    idempotencyKey: string,\n  ): Promise<TokenizeResult> {\n    const iframeOrigin = new URL(this.iframeBase).origin;\n    // C1: obtain reference to the cardNumber iframe's contentWindow before\n    // registering the listener so we can filter by source.\n    const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n    return new Promise<TokenizeResult>((resolve, reject) => {\n      // C3: 30-second timeout — rejects and cleans up if no result arrives.\n      const timer = window.setTimeout(() => {\n        window.removeEventListener(\"message\", onMessage);\n        reject(\n          new ArcPayError({\n            type: \"network_error\",\n            code: \"tokenize_timeout\",\n            message: \"tokenize() timed out after 30 seconds\",\n            retryable: true,\n            paymentId,\n          }),\n        );\n      }, 30_000);\n\n      const onMessage = (event: MessageEvent) => {\n        // C1: source guard — only accept messages from the cardNumber iframe.\n        if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n        // C4: use parseIncoming for origin + arcpay: prefix guard.\n        const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n        if (!data) return;\n\n        if (data.type === \"arcpay:tokenize-result\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          resolve({\n            cardTokenId: data.cardTokenId,\n            cardMask: data.cardMask,\n            cardScheme: data.cardScheme,\n            cardBin: data.cardBin,\n            expiresIn: data.expiresIn,\n            expiresAt: data.expiresAt,\n          });\n        } else if (data.type === \"arcpay:tokenize-error\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          const errType =\n            data.errorType === \"validation_error\" || data.errorType === \"api_error\"\n              ? data.errorType\n              : \"api_error\";\n          reject(\n            new ArcPayError({\n              type: errType,\n              code: data.code,\n              message: data.message,\n              retryable: false,\n              paymentId,\n            }),\n          );\n        }\n      };\n\n      window.addEventListener(\"message\", onMessage);\n      cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n    });\n  }\n\n  destroy(): void {\n    for (const el of this.elementMap.values()) {\n      el.destroy();\n    }\n    this.elementMap.clear();\n  }\n}\n","import {\n  detectEnvironment,\n  type Environment,\n  validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n  readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n  readonly publishableKey: string;\n  readonly environment: Environment;\n  elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n  if (detectEnvironment(publishableKey) === \"sandbox\") {\n    showSandboxBanner();\n  }\n  return {\n    publishableKey,\n    environment: detectEnvironment(publishableKey),\n    elements: () => new Elements({ publishableKey }),\n  };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n  try {\n    validatePublishableKey(publishableKey);\n  } catch (err) {\n    return Promise.reject(err);\n  }\n  const key = publishableKey;\n  const existing = cache.get(key);\n  if (existing) return existing;\n  const promise = Promise.resolve(buildInstance(publishableKey));\n  cache.set(key, promise);\n  return promise;\n}\n\nconst resetForTests = (): void => {\n  cache.clear();\n};\n\nexport const ArcPay = {\n  load,\n  __resetForTests: resetForTests,\n};\n","import type { CardBrowserInfo, ExecutePaymentResponse, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n  name: string;\n  value: string;\n}\n\nexport interface BrowserPostForm {\n  action: string;\n  method: \"POST\";\n  target: \"hidden_iframe\" | \"browser\";\n  fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n  kind: \"method\" | \"challenge\";\n  protocolVersion: \"1\" | \"2\";\n  form: BrowserPostForm;\n  completionEndpoint?: string;\n  threeDSServerTransId?: string;\n}\n\nexport interface MountedThreeDSForm {\n  form: HTMLFormElement;\n  iframe?: HTMLIFrameElement;\n  submit: () => void;\n  remove: () => void;\n}\n\nexport interface ThreeDSMountOptions {\n  document?: Document;\n  container?: HTMLElement;\n  challengeTarget?: \"_self\";\n  submitter?: (form: HTMLFormElement) => void;\n}\n\nexport interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {\n  methodCompletionIdempotencyKey: string;\n  completeThreeDSMethod: (\n    completion: ReturnType<typeof buildThreeDSMethodCompletion>,\n    nextAction: PaymentNextAction,\n    opts: { idempotencyKey: string },\n  ) => Promise<ExecutePaymentResponse>;\n  methodCompletionIndicator?: \"Y\" | \"N\" | \"U\";\n  methodTimeoutMs?: number;\n  signal?: AbortSignal;\n}\n\nexport type ThreeDSBrowserFlowResult =\n  | {\n      status: \"no_action\";\n      response?: ExecutePaymentResponse;\n    }\n  | {\n      status: \"method_completed\";\n      response: ExecutePaymentResponse;\n      methodResult: \"loaded\" | \"timeout\";\n    }\n  | {\n      status: \"challenge_submitted\";\n      action: PaymentNextAction;\n      response?: ExecutePaymentResponse;\n      mounted: MountedThreeDSForm;\n      methodResult?: \"loaded\" | \"timeout\";\n    };\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n  supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n    ? (value as BrowserInfo[\"color_depth\"])\n    : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n  if (width >= 1000) return \"05\";\n  if (width >= 600) return \"04\";\n  if (width >= 500) return \"03\";\n  if (width >= 390) return \"02\";\n  return \"01\";\n};\n\nexport const collectBrowserInfo = (\n  acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n  if (\n    typeof window === \"undefined\" ||\n    typeof navigator === \"undefined\" ||\n    typeof screen === \"undefined\"\n  ) {\n    throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n  }\n  return {\n    accept_header: acceptHeader,\n    language: navigator.language || \"en\",\n    screen_width: screen.width,\n    screen_height: screen.height,\n    color_depth: normalizeColorDepth(screen.colorDepth),\n    timezone_offset_minutes: new Date().getTimezoneOffset(),\n    java_enabled: false,\n    user_agent: navigator.userAgent,\n    window_size: resolveWindowSize(window.innerWidth || screen.width),\n  };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n  return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n  action: nextAction.three_ds.submit.url,\n  method: nextAction.three_ds.submit.method,\n  target: nextAction.three_ds.submit.target,\n  fields: nextAction.three_ds.submit.fields,\n});\n\nconst assertHTTPSActionURL = (action: string): void => {\n  let parsed: URL;\n  try {\n    parsed = new URL(action);\n  } catch {\n    throw new Error(\"3DS form action must be an absolute HTTPS URL\");\n  }\n  if (parsed.protocol !== \"https:\") {\n    throw new Error(\"3DS form action must use HTTPS\");\n  }\n};\n\nexport const buildThreeDSBrowserStep = (\n  nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n  const action = getThreeDSAction(nextAction);\n  if (!action) return null;\n  return {\n    kind: action.three_ds.phase,\n    protocolVersion: action.three_ds.version,\n    form: buildThreeDSBrowserForm(action),\n    completionEndpoint: action.three_ds.completion_endpoint,\n    threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n  };\n};\n\nexport const buildThreeDSMethodCompletion = (\n  nextAction: PaymentNextAction,\n  completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n  if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n    throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n  }\n  return {\n    completion_indicator: completionIndicator,\n    three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n  };\n};\n\nconst requireDocument = (explicitDocument?: Document): Document => {\n  if (explicitDocument) return explicitDocument;\n  if (typeof document === \"undefined\") {\n    throw new Error(\"3DS browser helpers must be called in a browser environment\");\n  }\n  return document;\n};\n\nconst defaultSubmitter = (form: HTMLFormElement): void => {\n  form.submit();\n};\n\nexport const mountThreeDSBrowserForm = (\n  nextAction: PaymentNextAction,\n  options: ThreeDSMountOptions = {},\n): MountedThreeDSForm => {\n  const doc = requireDocument(options.document);\n  const container = options.container ?? doc.body;\n  const formDescriptor = buildThreeDSBrowserForm(nextAction);\n  assertHTTPSActionURL(formDescriptor.action);\n  const form = doc.createElement(\"form\");\n  const target =\n    formDescriptor.target === \"hidden_iframe\"\n      ? `arcpay-three-ds-method-${Math.random().toString(36).slice(2)}`\n      : (options.challengeTarget ?? \"_self\");\n  let iframe: HTMLIFrameElement | undefined;\n\n  form.method = formDescriptor.method;\n  form.action = formDescriptor.action;\n  form.target = target;\n  form.hidden = true;\n\n  for (const field of formDescriptor.fields) {\n    const input = doc.createElement(\"input\");\n    input.type = \"hidden\";\n    input.name = field.name;\n    input.value = field.value;\n    form.append(input);\n  }\n\n  if (formDescriptor.target === \"hidden_iframe\") {\n    iframe = doc.createElement(\"iframe\");\n    iframe.name = target;\n    iframe.title = \"3-D Secure method\";\n    iframe.hidden = true;\n    container.append(iframe);\n  }\n\n  container.append(form);\n\n  return {\n    form,\n    iframe,\n    submit: () => (options.submitter ?? defaultSubmitter)(form),\n    remove: () => {\n      form.remove();\n      iframe?.remove();\n    },\n  };\n};\n\nconst waitForMethodFrame = (\n  mounted: MountedThreeDSForm,\n  timeoutMs: number,\n  signal?: AbortSignal,\n): Promise<\"loaded\" | \"timeout\"> =>\n  new Promise((resolve, reject) => {\n    if (!mounted.iframe) {\n      resolve(\"loaded\");\n      return;\n    }\n    if (signal?.aborted) {\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      return;\n    }\n\n    let settled = false;\n    const cleanup = () => {\n      mounted.iframe?.removeEventListener(\"load\", onLoad);\n      signal?.removeEventListener(\"abort\", onAbort);\n      clearTimeout(timer);\n    };\n    const settle = (result: \"loaded\" | \"timeout\") => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      resolve(result);\n    };\n    const onLoad = () => settle(\"loaded\");\n    const onAbort = () => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n    };\n    const timer = setTimeout(() => settle(\"timeout\"), timeoutMs);\n\n    mounted.iframe.addEventListener(\"load\", onLoad, { once: true });\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n\nexport const runThreeDSBrowserFlow = async (\n  nextAction: PaymentNextAction | undefined,\n  options: RunThreeDSBrowserFlowOptions,\n): Promise<ThreeDSBrowserFlowResult> => {\n  if (!nextAction) return { status: \"no_action\" };\n\n  if (isThreeDSChallengeAction(nextAction)) {\n    const mounted = mountThreeDSBrowserForm(nextAction, options);\n    mounted.submit();\n    return { status: \"challenge_submitted\", action: nextAction, mounted };\n  }\n\n  if (!isThreeDSMethodAction(nextAction)) return { status: \"no_action\" };\n  if (!options.methodCompletionIdempotencyKey) {\n    throw new Error(\"methodCompletionIdempotencyKey is required for 3DS Method completion\");\n  }\n\n  const mounted = mountThreeDSBrowserForm(nextAction, options);\n  try {\n    mounted.submit();\n    const methodResult = await waitForMethodFrame(\n      mounted,\n      options.methodTimeoutMs ?? 10_000,\n      options.signal,\n    );\n    const indicator = options.methodCompletionIndicator ?? (methodResult === \"loaded\" ? \"Y\" : \"N\");\n    const response = await options.completeThreeDSMethod(\n      buildThreeDSMethodCompletion(nextAction, indicator),\n      nextAction,\n      { idempotencyKey: options.methodCompletionIdempotencyKey },\n    );\n    const followUpAction = getThreeDSAction(response.next_action);\n    if (followUpAction && isThreeDSChallengeAction(followUpAction)) {\n      const challengeMounted = mountThreeDSBrowserForm(followUpAction, options);\n      challengeMounted.submit();\n      return {\n        status: \"challenge_submitted\",\n        action: followUpAction,\n        response,\n        mounted: challengeMounted,\n        methodResult,\n      };\n    }\n    return { status: \"method_completed\", response, methodResult };\n  } finally {\n    mounted.remove();\n  }\n};\n\nconst htmlEscape = (value: string): string =>\n  value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n  const form = buildThreeDSBrowserForm(nextAction);\n  assertHTTPSActionURL(form.action);\n  const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n  const inputs = form.fields\n    .map(\n      (field) =>\n        `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n    )\n    .join(\"\");\n  const iframe =\n    form.target === \"hidden_iframe\"\n      ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n      : \"\";\n  return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n","export { ArcPay } from \"./core/arcpay\";\nexport type { ArcPayInstance, ArcPayLoadOptions } from \"./core/arcpay\";\nexport {\n  ArcPayError,\n  isValidationError,\n  isAuthenticationError,\n  isAuthorizationError,\n  isStateError,\n  isRateLimitError,\n  isApiError,\n  isNetworkError,\n  isChallengeAborted,\n} from \"./core/errors\";\nexport type { ArcPayErrorType } from \"./core/errors\";\nexport type { Environment } from \"./core/env\";\nexport type { TokenizeResult } from \"./tokenize/tokenize\";\nexport type { CardScheme } from \"./tokenize/scheme\";\nexport {\n  buildThreeDSAutoSubmitHtml,\n  buildThreeDSBrowserForm,\n  buildThreeDSBrowserStep,\n  buildThreeDSMethodCompletion,\n  collectBrowserInfo,\n  getThreeDSAction,\n  isThreeDSChallengeAction,\n  isThreeDSMethodAction,\n  mountThreeDSBrowserForm,\n  runThreeDSBrowserFlow,\n} from \"./three-ds\";\nexport type {\n  BrowserFormField,\n  BrowserInfo,\n  BrowserPostForm,\n  MountedThreeDSForm,\n  RunThreeDSBrowserFlowOptions,\n  ThreeDSAction,\n  ThreeDSBrowserStep,\n  ThreeDSBrowserFlowResult,\n  ThreeDSMountOptions,\n} from \"./three-ds\";\nexport const SDK_VERSION = \"0.1.16\";\n\nexport type { FieldType } from \"./elements/postmessage\";\nexport type { ElementOptions, ElementEvent } from \"./elements/element\";\nexport { Elements } from \"./elements/elements\";\nexport type { ElementsOptions } from \"./elements/elements\";\n"]}