@thavguard/arc-pay 0.1.14 → 0.1.16

package/dist/react/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/react/provider.tsx","../../src/react/use-arcpay.ts","../../src/react/index.ts"],"names":["validatePublishableKey","React2"],"mappings":";;;;AAqBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACrCO,IAAM,oBAAoB,CAAC,cAAA,KAChC,eAAe,UAAA,CAAW,UAAU,IAAI,SAAA,GAAY,MAAA;AAE/C,IAAM,sBAAA,GAAyB,CAAC,GAAA,KAAwC;AAC7E,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,4CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EACE,qGAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF,CAAA;;;ACzBA,IAAM,WAAA,GAAc,4BAAA;AAEb,IAAM,oBAAoB,MAAY;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,IAAI,QAAA,CAAS,aAAA,CAAc,CAAA,CAAA,EAAI,WAAW,GAAG,CAAA,EAAG;AAEhD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AACxC,EAAA,GAAA,CAAI,YAAA,CAAa,aAAa,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,MAAM,OAAA,GACR,uOAAA;AAEF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA;AAC1C,EAAA,IAAA,CAAK,WAAA,GAAc,iDAAA;AACnB,EAAA,GAAA,CAAI,YAAY,IAAI,CAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC/C,EAAA,OAAA,CAAQ,IAAA,GAAO,QAAA;AACf,EAAA,OAAA,CAAQ,YAAA,CAAa,8BAA8B,EAAE,CAAA;AACrD,EAAA,OAAA,CAAQ,WAAA,GAAc,MAAA;AACtB,EAAA,OAAA,CAAQ,YAAA,CAAa,cAAc,0BAA0B,CAAA;AAC7D,EAAA,OAAA,CAAQ,MAAM,OAAA,GACZ,+FAAA;AACF,EAAA,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,MAAM,GAAA,CAAI,QAAQ,CAAA;AACpD,EAAA,GAAA,CAAI,YAAY,OAAO,CAAA;AAEvB,EAAA,QAAA,CAAS,IAAA,CAAK,YAAY,GAAG,CAAA;AAC/B,CAAA;;;ACcA,IAAM,kBAAA,GAAqB,SAAA;AAE3B,IAAM,kBAAkB,CAAC,IAAA,KACvB,OAAO,IAAA,KAAS,YAChB,IAAA,KAAS,IAAA,IACT,MAAA,IAAU,IAAA,IACV,OAAQ,IAAA,CAA2B,IAAA,KAAS,YAC3C,IAAA,CAA0B,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAExD,IAAM,YAAA,GAAe,CAC1B,MAAA,EACA,OAAA,EACA,YAAA,KACS;AACT,EAAA,IAAI,iBAAiB,GAAA,EAAK;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,2BAAA;AAAA,MACN,OAAA,EAAS,0CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,mBAAA;AAAA,MACN,OAAA,EAAS,iEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAA,CAAO,aAAA,CAAc,WAAA,CAAY,OAAA,EAAS,YAAY,CAAA;AACxD,CAAA;AASO,IAAM,aAAA,GAAgB,CAC3B,KAAA,EACA,cAAA,KACa;AACb,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,cAAA,EAAgB,OAAO,IAAA;AAC5C,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,CAAM,IAAI,GAAG,OAAO,IAAA;AACzC,EAAA,OAAO,KAAA,CAAM,IAAA;AACf,CAAA;;;AChFA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA0D;AAC/E,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAM,aAAA,GAAgB,IAAI,WAAA,EAAY;AACtC,IAAA,IAAI,oBAAA,CAAqB,GAAA,CAAI,aAAa,CAAA,EAAG;AAE3C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,GAAA;AACT,CAAA;AAEO,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AAChE,EAAA,MAAM,SAAsB,EAAE,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,IAAI,CAAA,EAAE;AAC9D,EAAA,IAAI,MAAM,OAAA,KAAY,MAAA,SAAkB,OAAA,GAAU,aAAA,CAAc,MAAM,OAAO,CAAA;AAC7E,EAAA,IAAI,MAAM,KAAA,KAAU,MAAA,SAAkB,KAAA,GAAQ,aAAA,CAAc,MAAM,KAAK,CAAA;AACvE,EAAA,OAAO,MAAA;AACT,CAAA;;;ACPO,IAAM,UAAN,MAAc;AAAA,EAMnB,WAAA,CACkB,KAAA,EACC,OAAA,EACA,OAAA,EACjB;AAHgB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AARnB,IAAA,IAAA,CAAQ,MAAA,GAAmC,IAAA;AAC3C,IAAA,IAAA,CAAiB,SAAA,uBAAgB,GAAA,EAAc;AAC/C,IAAA,IAAA,CAAQ,MAAA,GAAwC,SAAA;AAChD,IAAA,IAAA,CAAQ,cAAA,GAAqD,IAAA;AAAA,EAM1D;AAAA,EAEH,MAAM,MAAA,EAAoC;AACxC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,YAAY,OAAO,MAAA,KAAW,WAAW,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA,GAAI,MAAA;AAChF,IAAA,IAAI,EAAE,qBAAqB,WAAA,CAAA,EAAc;AACvC,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,wBAAA;AAAA,QACN,OAAA,EAAS,CAAA,wBAAA,EAA2B,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AAAA,QAClD,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,IAAA,CAAK,QAAQ,UAAU,CAAA,QAAA,EAAW,KAAK,KAAK,CAAA,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAM,OAAA,GAAU,gDAAA;AACvB,IAAA,MAAA,CAAO,YAAA,CAAa,SAAS,SAAS,CAAA;AACtC,IAAA,MAAA,CAAO,YAAA,CAAa,qBAAA,EAAuB,IAAA,CAAK,KAAK,CAAA;AACrD,IAAA,SAAA,CAAU,YAAY,MAAM,CAAA;AAC5B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAM,iBAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAA;AAExD,IAAA,IAAA,CAAK,cAAA,GAAiB,CAAC,KAAA,KAAwB;AAvEnD,MAAA,IAAA,EAAA;AA2EM,MAAA,IAAI,KAAA,CAAM,MAAA,MAAA,CAAW,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,mBAAa,aAAA,CAAA,EAAe;AAEjD,MAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,cAAc,CAAA;AAChE,MAAA,IAAI,CAAC,IAAA,EAAM;AACX,MAAA,IAAA,CAAK,cAAc,IAAI,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AAEtD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,MAAA;AAAA,MACA,MAAM;AACJ,QAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,QAAA,MAAM,KAAA,GAAwB;AAAA,UAC5B,IAAA,EAAM,cAAA;AAAA,UACN,MAAA,EAAQ,OAAO,QAAA,CAAS,MAAA;AAAA,UACxB,cAAA,EAAgB,KAAK,OAAA,CAAQ,cAAA;AAAA,UAC7B,SAAA,EAAW,KAAK,OAAA,CAAQ;AAAA,SAC1B;AACA,QAAA,YAAA,CAAa,IAAA,CAAK,MAAA,EAAQ,KAAA,EAAO,cAAc,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA4B;AAChD,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAChC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AAEd,MAAA,IAAI,IAAA,CAAK,QAAQ,KAAA,EAAO;AACtB,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,cAAc,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,MAChF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,IAC7B,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,iBAAA,EAAmB;AAC1C,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAK,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClD,WAAW,IAAA,CAAK,IAAA,KAAS,mBAAmB,IAAA,CAAK,KAAA,KAAU,KAAK,KAAA,EAAO;AACrE,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAAA,EAEF;AAAA,EAEA,OAAO,OAAA,EAAwC;AAC7C,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,SAAS,aAAA,CAAc,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,IAC3E;AAAA,EACF;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,IAAA,CAAK,OAAO,MAAA,EAAO;AACnB,MAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AACzD,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,IACxB;AACA,IAAA,IAAA,CAAK,UAAU,KAAA,EAAM;AACrB,IAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AAAA,EAChB;AAAA,EAEA,EAAA,CAAG,QAAsC,QAAA,EAAgC;AACvE,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,OAAA,GAAmB;AACjB,IAAA,OAAO,KAAK,MAAA,KAAW,OAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,sBAAA,GAAwC;AAlK1C,IAAA,IAAA,EAAA,EAAA,EAAA;AAmKI,IAAA,OAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,aAAA,KAAb,IAAA,GAAA,EAAA,GAA8B,IAAA;AAAA,EACvC;AAAA;AAAA,EAGA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,aAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,YAAA,CAAa,IAAA,CAAK,QAAQ,OAAA,EAAS,IAAI,IAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAM,CAAA;AAAA,EAC5E;AAAA,EAEQ,KAAK,KAAA,EAA2B;AACtC,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,QAAA,CAAS,KAAK,CAAA;AAAA,IAChB;AAAA,EACF;AACF,CAAA;;;AC9KA,IAAM,mBAAA,GAAsB,0BAAA;AAE5B,IAAM,kBAAkB,MAAc;AAZtC,EAAA,IAAA,EAAA;AAaE,EAAA,IAAI,EAAA,CAAC,EAAA,GAAA,UAAA,CAAW,MAAA,KAAX,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmB,UAAA,CAAA,EAAY;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,iDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AACtC,CAAA;AAEO,IAAM,WAAN,MAAe;AAAA,EAOpB,YAAY,IAAA,EAAuD;AANnE,IAAA,IAAA,CAAiB,UAAA,uBAAiB,GAAA,EAAwB;AAI1D,IAAA,IAAA,CAAQ,gBAAA,GAAmB,KAAA;AA7B7B,IAAA,IAAA,EAAA;AAgCI,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,UAAA,GAAA,CAAa,EAAA,GAAA,IAAA,CAAK,UAAA,KAAL,IAAA,GAAA,EAAA,GAAmB,mBAAA;AACrC,IAAA,IAAA,CAAK,YAAY,eAAA,EAAgB;AAAA,EACnC;AAAA,EAEA,MAAA,CAAO,KAAA,EAAkB,OAAA,GAA0B,EAAC,EAAY;AAC9D,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAK,CAAA,EAAG;AAC9B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,eAAe,KAAK,CAAA,gBAAA,CAAA;AAAA,QAC7B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,gBAAgB,IAAA,CAAK,cAAA;AAAA,MACrB,WAAW,IAAA,CAAK;AAAA,KAClB;AACA,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,KAAA,EAAO,SAAS,GAAG,CAAA;AAC/C,IAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,EAAO,OAAO,CAAA;AAClC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,QAAA,CAAS,SAAA,EAAmB,cAAA,EAAiD;AAEjF,IAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,sBAAA;AAAA,QACN,OAAA,EAAS,qEAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA;AAE7C,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC1C,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,qBAAA;AAAA,QACN,OAAA,EACE,oGAAA;AAAA,QACF,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,OAAA,CAAQ,OAAA,EAAQ,EAAG;AACxE,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,oBAAA;AAAA,QACN,OAAA,EAAS,+DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,UAAA,EAAY,WAAW,cAAc,CAAA;AAAA,IACpE,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,gBAAA,GAAmB,KAAA;AAAA,IAC1B;AAAA,EACF;AAAA,EAEQ,UAAA,CACN,UAAA,EACA,SAAA,EACA,cAAA,EACyB;AACzB,IAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAG9C,IAAA,MAAM,gBAAA,GAAmB,WAAW,sBAAA,EAAuB;AAE3D,IAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,EAAS,MAAA,KAAW;AAEtD,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,MAAM;AACpC,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,QAAA,MAAA;AAAA,UACE,IAAI,WAAA,CAAY;AAAA,YACd,IAAA,EAAM,eAAA;AAAA,YACN,IAAA,EAAM,kBAAA;AAAA,YACN,OAAA,EAAS,uCAAA;AAAA,YACT,SAAA,EAAW,IAAA;AAAA,YACX;AAAA,WACD;AAAA,SACH;AAAA,MACF,GAAG,GAAM,CAAA;AAET,MAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAAwB;AAEzC,QAAA,IAAI,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,MAAA,KAAW,gBAAA,EAAkB;AAEpE,QAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,YAAY,CAAA;AAC9D,QAAA,IAAI,CAAC,IAAA,EAAM;AAEX,QAAA,IAAI,IAAA,CAAK,SAAS,wBAAA,EAA0B;AAC1C,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,OAAA,CAAQ;AAAA,YACN,aAAa,IAAA,CAAK,WAAA;AAAA,YAClB,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,YAAY,IAAA,CAAK,UAAA;AAAA,YACjB,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,WAAW,IAAA,CAAK;AAAA,WACjB,CAAA;AAAA,QACH,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,uBAAA,EAAyB;AAChD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,MAAM,OAAA,GACJ,KAAK,SAAA,KAAc,kBAAA,IAAsB,KAAK,SAAA,KAAc,WAAA,GACxD,KAAK,SAAA,GACL,WAAA;AACN,UAAA,MAAA;AAAA,YACE,IAAI,WAAA,CAAY;AAAA,cACd,IAAA,EAAM,OAAA;AAAA,cACN,MAAM,IAAA,CAAK,IAAA;AAAA,cACX,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,SAAA,EAAW,KAAA;AAAA,cACX;AAAA,aACD;AAAA,WACH;AAAA,QACF;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,MAAA,UAAA,CAAW,KAAK,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAA,EAAW,gBAAgB,CAAA;AAAA,IACxE,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,EAAG;AACzC,MAAA,EAAA,CAAG,OAAA,EAAQ;AAAA,IACb;AACA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AACF,CAAA;;;AClKA,IAAMA,uBAAAA,GAAkE,sBAAA;AAYxE,IAAM,KAAA,uBAAY,GAAA,EAAqC;AAEvD,IAAM,aAAA,GAAgB,CAAC,cAAA,KAA2C;AAChE,EAAA,IAAI,iBAAA,CAAkB,cAAc,CAAA,KAAM,SAAA,EAAW;AACnD,IAAA,iBAAA,EAAkB;AAAA,EACpB;AACA,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,WAAA,EAAa,kBAAkB,cAAc,CAAA;AAAA,IAC7C,UAAU,MAAM,IAAI,QAAA,CAAS,EAAE,gBAAgB;AAAA,GACjD;AACF,CAAA;AAEA,SAAS,KAAK,cAAA,EAAiD;AAC7D,EAAA,IAAI;AACF,IAAAA,wBAAuB,cAAc,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,MAAM,GAAA,GAAM,cAAA;AACZ,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC9B,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,cAAc,CAAC,CAAA;AAC7D,EAAA,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACtB,EAAA,OAAO,OAAA;AACT;AAEA,IAAM,gBAAgB,MAAY;AAChC,EAAA,KAAA,CAAM,KAAA,EAAM;AACd,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,IAAA;AAAA,EACA,eAAA,EAAiB;AACnB,CAAA;AC9CA,IAAM,GAAA,GAAY,oBAAkC,IAAI,CAAA;AAOjD,IAAM,cAAA,GAAgD,CAAC,EAAE,cAAA,EAAgB,UAAS,KAAM;AAC7F,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAU,KAAA,CAAA,QAAA,CAAsB;AAAA,IACpD,MAAA,EAAQ,SAAA;AAAA,IACR,QAAA,EAAU,IAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACR,CAAA;AAED,EAAM,gBAAU,MAAM;AACpB,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CACvB,IAAA,CAAK,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,EAAE,QAAQ,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACpE,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAmB;AACzB,MAAA,IAAI,CAAC,QAAA;AACH,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,QAAA,EAAU,IAAA;AAAA,UACV,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC;AAAA,SAChE,CAAA;AAAA,IACL,CAAC,CAAA;AACH,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,cAAc,CAAC,CAAA;AAEnB,EAAA,2BAAQ,GAAA,CAAI,QAAA,EAAJ,EAAa,KAAA,EAAO,OAAQ,QAAA,EAAS,CAAA;AAC/C;AAEO,IAAM,aAAA,GAAgB;ACzCtB,IAAM,YAAY,MAAmB;AAC1C,EAAA,MAAM,GAAA,GAAYC,iBAAW,aAAa,CAAA;AAC1C,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC7E,EAAA,OAAO,GAAA;AACT;;;ACJO,IAAM,qBAAA,GAAwB","file":"index.mjs","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n  publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message: \"Publishable key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message:\n        \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n      retryable: false,\n    });\n  }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n  if (typeof document === \"undefined\") return;\n  if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n  const bar = document.createElement(\"div\");\n  bar.setAttribute(BANNER_ATTR, \"\");\n  bar.style.cssText =\n    \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n  const text = document.createElement(\"span\");\n  text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n  bar.appendChild(text);\n\n  const dismiss = document.createElement(\"button\");\n  dismiss.type = \"button\";\n  dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n  dismiss.textContent = \"×\";\n  dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n  dismiss.style.cssText =\n    \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n  dismiss.addEventListener(\"click\", () => bar.remove());\n  bar.appendChild(dismiss);\n\n  document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n  | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n  | { type: \"arcpay:style\"; payload: StyleSubset }\n  | { type: \"arcpay:focus\" }\n  | { type: \"arcpay:clear\" }\n  | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n  | { type: \"arcpay:ready\" }\n  | { type: \"arcpay:rejected\"; reason: string }\n  | {\n      type: \"arcpay:change\";\n      field: FieldType;\n      isValid: boolean;\n      brand?: string;\n      lastFour?: string;\n    }\n  | {\n      type: \"arcpay:tokenize-result\";\n      cardTokenId: string;\n      cardMask: string;\n      cardScheme: string;\n      cardBin: string;\n      expiresIn: number;\n      expiresAt: string;\n    }\n  | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n  base: Record<string, string>;\n  invalid?: Record<string, string>;\n  focus?: Record<string, string>;\n}\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n  typeof data === \"object\" &&\n  data !== null &&\n  \"type\" in data &&\n  typeof (data as { type: unknown }).type === \"string\" &&\n  (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n  iframe: HTMLIFrameElement,\n  message: ParentToIframe,\n  targetOrigin: string,\n): void => {\n  if (targetOrigin === \"*\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"wildcard_origin_forbidden\",\n      message: \"postToIframe: targetOrigin cannot be '*'\",\n      retryable: false,\n    });\n  }\n  if (!iframe.contentWindow) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"iframe_not_loaded\",\n      message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n      retryable: false,\n    });\n  }\n  iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n  if (targetOrigin === \"*\") {\n    throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n  }\n  window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n  event: MessageEvent,\n  expectedOrigin: string,\n): T | null => {\n  if (event.origin !== expectedOrigin) return null;\n  if (!isArcpayMessage(event.data)) return null;\n  return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\n// Spec calls out position:fixed, transform, pointer-events:none as forbidden.\n// We extend to cover the full clickjacking attack surface: any positioning\n// (fixed/absolute/sticky), transform, all pointer-events values, z-index, and\n// inset properties (top/left/right/bottom/inset). The legitimate use cases\n// for these in a 1-line input field are zero, so blanket drop.\nconst FORBIDDEN_PROPERTIES = new Set([\n  \"position\",\n  \"transform\",\n  \"pointer-events\",\n  \"z-index\",\n  \"top\",\n  \"left\",\n  \"right\",\n  \"bottom\",\n  \"inset\",\n]);\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n  const out: Record<string, string> = {};\n  for (const [key, value] of Object.entries(block)) {\n    const normalizedKey = key.toLowerCase();\n    if (FORBIDDEN_PROPERTIES.has(normalizedKey)) {\n      // Defense against position/transform-based clickjacking. Silently drop.\n      continue;\n    }\n    out[key] = value;\n  }\n  return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n  const result: StyleSubset = { base: sanitizeBlock(style.base) };\n  if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n  if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n  return result;\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n  type FieldType,\n  type ParentToIframe,\n  type IframeToParent,\n  type StyleSubset,\n  postToIframe,\n  parseIncoming,\n} from \"./postmessage\";\nimport { sanitizeStyle } from \"./style\";\n\nexport interface ElementOptions {\n  /** StyleSubset applied via arcpay:style postMessage. */\n  style?: StyleSubset;\n  placeholder?: string;\n}\n\nexport type ElementEvent =\n  | { type: \"ready\" }\n  | { type: \"change\"; isValid: boolean; brand?: string; lastFour?: string }\n  | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\n\nexport interface ElementContext {\n  iframeBase: string;\n  publishableKey: string;\n  channelId: string;\n}\n\nexport class Element {\n  private iframe: HTMLIFrameElement | null = null;\n  private readonly listeners = new Set<Listener>();\n  private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n  private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n  constructor(\n    public readonly field: FieldType,\n    private readonly options: ElementOptions,\n    private readonly context: ElementContext,\n  ) {}\n\n  mount(target: string | HTMLElement): void {\n    if (this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"already_mounted\",\n        message: `Element ${this.field} is already mounted`,\n        retryable: false,\n      });\n    }\n    const container = typeof target === \"string\" ? document.querySelector(target) : target;\n    if (!(container instanceof HTMLElement)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"mount_target_not_found\",\n        message: `mount target not found: ${String(target)}`,\n        retryable: false,\n      });\n    }\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n    iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n    iframe.setAttribute(\"allow\", \"payment\");\n    iframe.setAttribute(\"data-arcpay-element\", this.field);\n    container.appendChild(iframe);\n    this.iframe = iframe;\n\n    const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n    this.messageHandler = (event: MessageEvent) => {\n      // C1: source guard — only accept messages from this element's own iframe.\n      // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n      // could trigger handlers on cardNumber and vice-versa.\n      if (event.source !== this.iframe?.contentWindow) return;\n      // C4: use parseIncoming for origin + arcpay: prefix guard.\n      const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n      if (!data) return;\n      this.handleMessage(data);\n    };\n    window.addEventListener(\"message\", this.messageHandler);\n\n    iframe.addEventListener(\n      \"load\",\n      () => {\n        if (!this.iframe) return;\n        const hello: ParentToIframe = {\n          type: \"arcpay:hello\",\n          origin: window.location.origin,\n          publishableKey: this.context.publishableKey,\n          channelId: this.context.channelId,\n        };\n        postToIframe(this.iframe, hello, expectedOrigin);\n      },\n      { once: true },\n    );\n  }\n\n  private handleMessage(data: IframeToParent): void {\n    if (data.type === \"arcpay:ready\") {\n      this.status = \"ready\";\n      // Apply initial style if provided at construction time.\n      if (this.options.style) {\n        this.send({ type: \"arcpay:style\", payload: sanitizeStyle(this.options.style) });\n      }\n      this.emit({ type: \"ready\" });\n    } else if (data.type === \"arcpay:rejected\") {\n      this.status = \"error\";\n      this.emit({ type: \"error\", reason: data.reason });\n    } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n      this.emit({\n        type: \"change\",\n        isValid: data.isValid,\n        brand: data.brand,\n        lastFour: data.lastFour,\n      });\n    }\n    // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n  }\n\n  update(options: { style?: StyleSubset }): void {\n    if (options.style) {\n      this.send({ type: \"arcpay:style\", payload: sanitizeStyle(options.style) });\n    }\n  }\n\n  destroy(): void {\n    if (this.iframe) {\n      this.iframe.remove();\n      this.iframe = null;\n    }\n    if (this.messageHandler) {\n      window.removeEventListener(\"message\", this.messageHandler);\n      this.messageHandler = null;\n    }\n    this.listeners.clear();\n    this.status = \"pending\";\n  }\n\n  on(_event: \"ready\" | \"change\" | \"error\", callback: Listener): () => void {\n    this.listeners.add(callback);\n    return () => this.listeners.delete(callback);\n  }\n\n  focus(): void {\n    this.send({ type: \"arcpay:focus\" });\n  }\n\n  clear(): void {\n    this.send({ type: \"arcpay:clear\" });\n  }\n\n  isReady(): boolean {\n    return this.status === \"ready\";\n  }\n\n  /**\n   * Internal: returns the iframe's contentWindow for source-filtering in\n   * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n   * or when jsdom has not yet populated contentWindow (test environment).\n   */\n  getIframeContentWindow(): Window | null {\n    return this.iframe?.contentWindow ?? null;\n  }\n\n  /** Internal: used by Elements factory to send tokenize commands. */\n  send(message: ParentToIframe): void {\n    if (!this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"not_mounted\",\n        message: `Element ${this.field} is not mounted`,\n        retryable: false,\n      });\n    }\n    postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n  }\n\n  private emit(event: ElementEvent): void {\n    for (const listener of this.listeners) {\n      listener(event);\n    }\n  }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\n\nexport type { TokenizeResult };\n\nexport type ElementsOptions = Record<string, never>;\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n  if (!globalThis.crypto?.randomUUID) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"crypto_unavailable\",\n      message: \"crypto.randomUUID is required for Hosted Fields\",\n      retryable: false,\n    });\n  }\n  return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n  private readonly elementMap = new Map<FieldType, Element>();\n  private readonly iframeBase: string;\n  private readonly publishableKey: string;\n  private readonly channelId: string;\n  private tokenizeInFlight = false;\n\n  constructor(opts: { publishableKey: string; iframeBase?: string }) {\n    this.publishableKey = opts.publishableKey;\n    this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n    this.channelId = createChannelId();\n  }\n\n  create(field: FieldType, options: ElementOptions = {}): Element {\n    if (this.elementMap.has(field)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"duplicate_element\",\n        message: `Element for ${field} already created`,\n        retryable: false,\n      });\n    }\n    const ctx: ElementContext = {\n      iframeBase: this.iframeBase,\n      publishableKey: this.publishableKey,\n      channelId: this.channelId,\n    };\n    const element = new Element(field, options, ctx);\n    this.elementMap.set(field, element);\n    return element;\n  }\n\n  async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n    // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n    if (this.tokenizeInFlight) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"tokenize_in_progress\",\n        message: \"A tokenize() call is already in progress for this Elements instance\",\n        retryable: false,\n      });\n    }\n\n    const cardNumber = this.elementMap.get(\"cardNumber\");\n    const cardExpiry = this.elementMap.get(\"cardExpiry\");\n    const cardCvv = this.elementMap.get(\"cardCvv\");\n\n    if (!cardNumber || !cardExpiry || !cardCvv) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"incomplete_elements\",\n        message:\n          \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n        retryable: false,\n      });\n    }\n    if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"elements_not_ready\",\n        message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n        retryable: false,\n      });\n    }\n\n    this.tokenizeInFlight = true;\n    try {\n      return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n    } finally {\n      this.tokenizeInFlight = false;\n    }\n  }\n\n  private doTokenize(\n    cardNumber: Element,\n    paymentId: string,\n    idempotencyKey: string,\n  ): Promise<TokenizeResult> {\n    const iframeOrigin = new URL(this.iframeBase).origin;\n    // C1: obtain reference to the cardNumber iframe's contentWindow before\n    // registering the listener so we can filter by source.\n    const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n    return new Promise<TokenizeResult>((resolve, reject) => {\n      // C3: 30-second timeout — rejects and cleans up if no result arrives.\n      const timer = window.setTimeout(() => {\n        window.removeEventListener(\"message\", onMessage);\n        reject(\n          new ArcPayError({\n            type: \"network_error\",\n            code: \"tokenize_timeout\",\n            message: \"tokenize() timed out after 30 seconds\",\n            retryable: true,\n            paymentId,\n          }),\n        );\n      }, 30_000);\n\n      const onMessage = (event: MessageEvent) => {\n        // C1: source guard — only accept messages from the cardNumber iframe.\n        if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n        // C4: use parseIncoming for origin + arcpay: prefix guard.\n        const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n        if (!data) return;\n\n        if (data.type === \"arcpay:tokenize-result\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          resolve({\n            cardTokenId: data.cardTokenId,\n            cardMask: data.cardMask,\n            cardScheme: data.cardScheme,\n            cardBin: data.cardBin,\n            expiresIn: data.expiresIn,\n            expiresAt: data.expiresAt,\n          });\n        } else if (data.type === \"arcpay:tokenize-error\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          const errType =\n            data.errorType === \"validation_error\" || data.errorType === \"api_error\"\n              ? data.errorType\n              : \"api_error\";\n          reject(\n            new ArcPayError({\n              type: errType,\n              code: data.code,\n              message: data.message,\n              retryable: false,\n              paymentId,\n            }),\n          );\n        }\n      };\n\n      window.addEventListener(\"message\", onMessage);\n      cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n    });\n  }\n\n  destroy(): void {\n    for (const el of this.elementMap.values()) {\n      el.destroy();\n    }\n    this.elementMap.clear();\n  }\n}\n","import {\n  detectEnvironment,\n  type Environment,\n  validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n  readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n  readonly publishableKey: string;\n  readonly environment: Environment;\n  elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n  if (detectEnvironment(publishableKey) === \"sandbox\") {\n    showSandboxBanner();\n  }\n  return {\n    publishableKey,\n    environment: detectEnvironment(publishableKey),\n    elements: () => new Elements({ publishableKey }),\n  };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n  try {\n    validatePublishableKey(publishableKey);\n  } catch (err) {\n    return Promise.reject(err);\n  }\n  const key = publishableKey;\n  const existing = cache.get(key);\n  if (existing) return existing;\n  const promise = Promise.resolve(buildInstance(publishableKey));\n  cache.set(key, promise);\n  return promise;\n}\n\nconst resetForTests = (): void => {\n  cache.clear();\n};\n\nexport const ArcPay = {\n  load,\n  __resetForTests: resetForTests,\n};\n","import { ArcPay, type ArcPayInstance } from \"../index\";\nimport * as React from \"react\";\n\nexport type ArcPayState =\n  | { status: \"loading\"; instance: null; error: null }\n  | { status: \"ready\"; instance: ArcPayInstance; error: null }\n  | { status: \"error\"; instance: null; error: Error };\n\nconst Ctx = React.createContext<ArcPayState | null>(null);\n\nexport interface ArcPayProviderProps {\n  publishableKey: string;\n  children: React.ReactNode;\n}\n\nexport const ArcPayProvider: React.FC<ArcPayProviderProps> = ({ publishableKey, children }) => {\n  const [state, setState] = React.useState<ArcPayState>({\n    status: \"loading\",\n    instance: null,\n    error: null,\n  });\n\n  React.useEffect(() => {\n    let canceled = false;\n    ArcPay.load(publishableKey)\n      .then((instance) => {\n        if (!canceled) setState({ status: \"ready\", instance, error: null });\n      })\n      .catch((error: unknown) => {\n        if (!canceled)\n          setState({\n            status: \"error\",\n            instance: null,\n            error: error instanceof Error ? error : new Error(String(error)),\n          });\n      });\n    return () => {\n      canceled = true;\n    };\n  }, [publishableKey]);\n\n  return <Ctx.Provider value={state}>{children}</Ctx.Provider>;\n};\n\nexport const ArcPayContext = Ctx;\n","import * as React from \"react\";\nimport { ArcPayContext, type ArcPayState } from \"./provider\";\n\nexport const useArcPay = (): ArcPayState => {\n  const ctx = React.useContext(ArcPayContext);\n  if (!ctx) throw new Error(\"useArcPay must be called within an ArcPayProvider\");\n  return ctx;\n};\n","export { ArcPayProvider, ArcPayContext } from \"./provider\";\nexport type { ArcPayProviderProps, ArcPayState } from \"./provider\";\nexport { useArcPay } from \"./use-arcpay\";\nexport const REACT_WRAPPER_VERSION = \"0.1.14\";\n"]}
+{"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/react/provider.tsx","../../src/react/use-arcpay.ts","../../src/react/index.ts"],"names":["validatePublishableKey","React2"],"mappings":";;;;AAqBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACrCO,IAAM,oBAAoB,CAAC,cAAA,KAChC,eAAe,UAAA,CAAW,UAAU,IAAI,SAAA,GAAY,MAAA;AAE/C,IAAM,sBAAA,GAAyB,CAAC,GAAA,KAAwC;AAC7E,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,4CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EACE,qGAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF,CAAA;;;ACzBA,IAAM,WAAA,GAAc,4BAAA;AAEb,IAAM,oBAAoB,MAAY;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,IAAI,QAAA,CAAS,aAAA,CAAc,CAAA,CAAA,EAAI,WAAW,GAAG,CAAA,EAAG;AAEhD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AACxC,EAAA,GAAA,CAAI,YAAA,CAAa,aAAa,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,MAAM,OAAA,GACR,uOAAA;AAEF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA;AAC1C,EAAA,IAAA,CAAK,WAAA,GAAc,iDAAA;AACnB,EAAA,GAAA,CAAI,YAAY,IAAI,CAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC/C,EAAA,OAAA,CAAQ,IAAA,GAAO,QAAA;AACf,EAAA,OAAA,CAAQ,YAAA,CAAa,8BAA8B,EAAE,CAAA;AACrD,EAAA,OAAA,CAAQ,WAAA,GAAc,MAAA;AACtB,EAAA,OAAA,CAAQ,YAAA,CAAa,cAAc,0BAA0B,CAAA;AAC7D,EAAA,OAAA,CAAQ,MAAM,OAAA,GACZ,+FAAA;AACF,EAAA,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,MAAM,GAAA,CAAI,QAAQ,CAAA;AACpD,EAAA,GAAA,CAAI,YAAY,OAAO,CAAA;AAEvB,EAAA,QAAA,CAAS,IAAA,CAAK,YAAY,GAAG,CAAA;AAC/B,CAAA;;;ACcA,IAAM,kBAAA,GAAqB,SAAA;AAE3B,IAAM,kBAAkB,CAAC,IAAA,KACvB,OAAO,IAAA,KAAS,YAChB,IAAA,KAAS,IAAA,IACT,MAAA,IAAU,IAAA,IACV,OAAQ,IAAA,CAA2B,IAAA,KAAS,YAC3C,IAAA,CAA0B,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAExD,IAAM,YAAA,GAAe,CAC1B,MAAA,EACA,OAAA,EACA,YAAA,KACS;AACT,EAAA,IAAI,iBAAiB,GAAA,EAAK;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,2BAAA;AAAA,MACN,OAAA,EAAS,0CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,mBAAA;AAAA,MACN,OAAA,EAAS,iEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAA,CAAO,aAAA,CAAc,WAAA,CAAY,OAAA,EAAS,YAAY,CAAA;AACxD,CAAA;AASO,IAAM,aAAA,GAAgB,CAC3B,KAAA,EACA,cAAA,KACa;AACb,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,cAAA,EAAgB,OAAO,IAAA;AAC5C,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,CAAM,IAAI,GAAG,OAAO,IAAA;AACzC,EAAA,OAAO,KAAA,CAAM,IAAA;AACf,CAAA;;;AChFA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA0D;AAC/E,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAM,aAAA,GAAgB,IAAI,WAAA,EAAY;AACtC,IAAA,IAAI,oBAAA,CAAqB,GAAA,CAAI,aAAa,CAAA,EAAG;AAE3C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,GAAA;AACT,CAAA;AAEO,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AAChE,EAAA,MAAM,SAAsB,EAAE,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,IAAI,CAAA,EAAE;AAC9D,EAAA,IAAI,MAAM,OAAA,KAAY,MAAA,SAAkB,OAAA,GAAU,aAAA,CAAc,MAAM,OAAO,CAAA;AAC7E,EAAA,IAAI,MAAM,KAAA,KAAU,MAAA,SAAkB,KAAA,GAAQ,aAAA,CAAc,MAAM,KAAK,CAAA;AACvE,EAAA,OAAO,MAAA;AACT,CAAA;;;ACPO,IAAM,UAAN,MAAc;AAAA,EAMnB,WAAA,CACkB,KAAA,EACC,OAAA,EACA,OAAA,EACjB;AAHgB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AARnB,IAAA,IAAA,CAAQ,MAAA,GAAmC,IAAA;AAC3C,IAAA,IAAA,CAAiB,SAAA,uBAAgB,GAAA,EAAc;AAC/C,IAAA,IAAA,CAAQ,MAAA,GAAwC,SAAA;AAChD,IAAA,IAAA,CAAQ,cAAA,GAAqD,IAAA;AAAA,EAM1D;AAAA,EAEH,MAAM,MAAA,EAAoC;AACxC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,YAAY,OAAO,MAAA,KAAW,WAAW,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA,GAAI,MAAA;AAChF,IAAA,IAAI,EAAE,qBAAqB,WAAA,CAAA,EAAc;AACvC,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,wBAAA;AAAA,QACN,OAAA,EAAS,CAAA,wBAAA,EAA2B,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AAAA,QAClD,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,IAAA,CAAK,QAAQ,UAAU,CAAA,QAAA,EAAW,KAAK,KAAK,CAAA,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAM,OAAA,GAAU,gDAAA;AACvB,IAAA,MAAA,CAAO,YAAA,CAAa,SAAS,SAAS,CAAA;AACtC,IAAA,MAAA,CAAO,YAAA,CAAa,qBAAA,EAAuB,IAAA,CAAK,KAAK,CAAA;AACrD,IAAA,SAAA,CAAU,YAAY,MAAM,CAAA;AAC5B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAM,iBAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAA;AAExD,IAAA,IAAA,CAAK,cAAA,GAAiB,CAAC,KAAA,KAAwB;AAvEnD,MAAA,IAAA,EAAA;AA2EM,MAAA,IAAI,KAAA,CAAM,MAAA,MAAA,CAAW,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,mBAAa,aAAA,CAAA,EAAe;AAEjD,MAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,cAAc,CAAA;AAChE,MAAA,IAAI,CAAC,IAAA,EAAM;AACX,MAAA,IAAA,CAAK,cAAc,IAAI,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AAEtD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,MAAA;AAAA,MACA,MAAM;AACJ,QAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,QAAA,MAAM,KAAA,GAAwB;AAAA,UAC5B,IAAA,EAAM,cAAA;AAAA,UACN,MAAA,EAAQ,OAAO,QAAA,CAAS,MAAA;AAAA,UACxB,cAAA,EAAgB,KAAK,OAAA,CAAQ,cAAA;AAAA,UAC7B,SAAA,EAAW,KAAK,OAAA,CAAQ;AAAA,SAC1B;AACA,QAAA,YAAA,CAAa,IAAA,CAAK,MAAA,EAAQ,KAAA,EAAO,cAAc,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA4B;AAChD,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAChC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AAEd,MAAA,IAAI,IAAA,CAAK,QAAQ,KAAA,EAAO;AACtB,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,cAAc,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,MAChF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,IAC7B,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,iBAAA,EAAmB;AAC1C,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAK,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClD,WAAW,IAAA,CAAK,IAAA,KAAS,mBAAmB,IAAA,CAAK,KAAA,KAAU,KAAK,KAAA,EAAO;AACrE,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAAA,EAEF;AAAA,EAEA,OAAO,OAAA,EAAwC;AAC7C,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,SAAS,aAAA,CAAc,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,IAC3E;AAAA,EACF;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,IAAA,CAAK,OAAO,MAAA,EAAO;AACnB,MAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AACzD,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,IACxB;AACA,IAAA,IAAA,CAAK,UAAU,KAAA,EAAM;AACrB,IAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AAAA,EAChB;AAAA,EAEA,EAAA,CAAG,QAAsC,QAAA,EAAgC;AACvE,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,OAAA,GAAmB;AACjB,IAAA,OAAO,KAAK,MAAA,KAAW,OAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,sBAAA,GAAwC;AAlK1C,IAAA,IAAA,EAAA,EAAA,EAAA;AAmKI,IAAA,OAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,aAAA,KAAb,IAAA,GAAA,EAAA,GAA8B,IAAA;AAAA,EACvC;AAAA;AAAA,EAGA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,aAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,YAAA,CAAa,IAAA,CAAK,QAAQ,OAAA,EAAS,IAAI,IAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAM,CAAA;AAAA,EAC5E;AAAA,EAEQ,KAAK,KAAA,EAA2B;AACtC,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,QAAA,CAAS,KAAK,CAAA;AAAA,IAChB;AAAA,EACF;AACF,CAAA;;;AC9KA,IAAM,mBAAA,GAAsB,0BAAA;AAE5B,IAAM,kBAAkB,MAAc;AAZtC,EAAA,IAAA,EAAA;AAaE,EAAA,IAAI,EAAA,CAAC,EAAA,GAAA,UAAA,CAAW,MAAA,KAAX,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmB,UAAA,CAAA,EAAY;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,iDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AACtC,CAAA;AAEO,IAAM,WAAN,MAAe;AAAA,EAOpB,YAAY,IAAA,EAAuD;AANnE,IAAA,IAAA,CAAiB,UAAA,uBAAiB,GAAA,EAAwB;AAI1D,IAAA,IAAA,CAAQ,gBAAA,GAAmB,KAAA;AA7B7B,IAAA,IAAA,EAAA;AAgCI,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,UAAA,GAAA,CAAa,EAAA,GAAA,IAAA,CAAK,UAAA,KAAL,IAAA,GAAA,EAAA,GAAmB,mBAAA;AACrC,IAAA,IAAA,CAAK,YAAY,eAAA,EAAgB;AAAA,EACnC;AAAA,EAEA,MAAA,CAAO,KAAA,EAAkB,OAAA,GAA0B,EAAC,EAAY;AAC9D,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAK,CAAA,EAAG;AAC9B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,eAAe,KAAK,CAAA,gBAAA,CAAA;AAAA,QAC7B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,gBAAgB,IAAA,CAAK,cAAA;AAAA,MACrB,WAAW,IAAA,CAAK;AAAA,KAClB;AACA,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,KAAA,EAAO,SAAS,GAAG,CAAA;AAC/C,IAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,EAAO,OAAO,CAAA;AAClC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,QAAA,CAAS,SAAA,EAAmB,cAAA,EAAiD;AAEjF,IAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,sBAAA;AAAA,QACN,OAAA,EAAS,qEAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA;AAE7C,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC1C,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,qBAAA;AAAA,QACN,OAAA,EACE,oGAAA;AAAA,QACF,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,OAAA,CAAQ,OAAA,EAAQ,EAAG;AACxE,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,oBAAA;AAAA,QACN,OAAA,EAAS,+DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,UAAA,EAAY,WAAW,cAAc,CAAA;AAAA,IACpE,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,gBAAA,GAAmB,KAAA;AAAA,IAC1B;AAAA,EACF;AAAA,EAEQ,UAAA,CACN,UAAA,EACA,SAAA,EACA,cAAA,EACyB;AACzB,IAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAG9C,IAAA,MAAM,gBAAA,GAAmB,WAAW,sBAAA,EAAuB;AAE3D,IAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,EAAS,MAAA,KAAW;AAEtD,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,MAAM;AACpC,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,QAAA,MAAA;AAAA,UACE,IAAI,WAAA,CAAY;AAAA,YACd,IAAA,EAAM,eAAA;AAAA,YACN,IAAA,EAAM,kBAAA;AAAA,YACN,OAAA,EAAS,uCAAA;AAAA,YACT,SAAA,EAAW,IAAA;AAAA,YACX;AAAA,WACD;AAAA,SACH;AAAA,MACF,GAAG,GAAM,CAAA;AAET,MAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAAwB;AAEzC,QAAA,IAAI,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,MAAA,KAAW,gBAAA,EAAkB;AAEpE,QAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,YAAY,CAAA;AAC9D,QAAA,IAAI,CAAC,IAAA,EAAM;AAEX,QAAA,IAAI,IAAA,CAAK,SAAS,wBAAA,EAA0B;AAC1C,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,OAAA,CAAQ;AAAA,YACN,aAAa,IAAA,CAAK,WAAA;AAAA,YAClB,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,YAAY,IAAA,CAAK,UAAA;AAAA,YACjB,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,WAAW,IAAA,CAAK;AAAA,WACjB,CAAA;AAAA,QACH,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,uBAAA,EAAyB;AAChD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,MAAM,OAAA,GACJ,KAAK,SAAA,KAAc,kBAAA,IAAsB,KAAK,SAAA,KAAc,WAAA,GACxD,KAAK,SAAA,GACL,WAAA;AACN,UAAA,MAAA;AAAA,YACE,IAAI,WAAA,CAAY;AAAA,cACd,IAAA,EAAM,OAAA;AAAA,cACN,MAAM,IAAA,CAAK,IAAA;AAAA,cACX,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,SAAA,EAAW,KAAA;AAAA,cACX;AAAA,aACD;AAAA,WACH;AAAA,QACF;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,MAAA,UAAA,CAAW,KAAK,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAA,EAAW,gBAAgB,CAAA;AAAA,IACxE,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,EAAG;AACzC,MAAA,EAAA,CAAG,OAAA,EAAQ;AAAA,IACb;AACA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AACF,CAAA;;;AClKA,IAAMA,uBAAAA,GAAkE,sBAAA;AAYxE,IAAM,KAAA,uBAAY,GAAA,EAAqC;AAEvD,IAAM,aAAA,GAAgB,CAAC,cAAA,KAA2C;AAChE,EAAA,IAAI,iBAAA,CAAkB,cAAc,CAAA,KAAM,SAAA,EAAW;AACnD,IAAA,iBAAA,EAAkB;AAAA,EACpB;AACA,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,WAAA,EAAa,kBAAkB,cAAc,CAAA;AAAA,IAC7C,UAAU,MAAM,IAAI,QAAA,CAAS,EAAE,gBAAgB;AAAA,GACjD;AACF,CAAA;AAEA,SAAS,KAAK,cAAA,EAAiD;AAC7D,EAAA,IAAI;AACF,IAAAA,wBAAuB,cAAc,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,MAAM,GAAA,GAAM,cAAA;AACZ,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC9B,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,cAAc,CAAC,CAAA;AAC7D,EAAA,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACtB,EAAA,OAAO,OAAA;AACT;AAEA,IAAM,gBAAgB,MAAY;AAChC,EAAA,KAAA,CAAM,KAAA,EAAM;AACd,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,IAAA;AAAA,EACA,eAAA,EAAiB;AACnB,CAAA;AC9CA,IAAM,GAAA,GAAY,oBAAkC,IAAI,CAAA;AAOjD,IAAM,cAAA,GAAgD,CAAC,EAAE,cAAA,EAAgB,UAAS,KAAM;AAC7F,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAU,KAAA,CAAA,QAAA,CAAsB;AAAA,IACpD,MAAA,EAAQ,SAAA;AAAA,IACR,QAAA,EAAU,IAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACR,CAAA;AAED,EAAM,gBAAU,MAAM;AACpB,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CACvB,IAAA,CAAK,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,EAAE,QAAQ,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACpE,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAmB;AACzB,MAAA,IAAI,CAAC,QAAA;AACH,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,QAAA,EAAU,IAAA;AAAA,UACV,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC;AAAA,SAChE,CAAA;AAAA,IACL,CAAC,CAAA;AACH,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,cAAc,CAAC,CAAA;AAEnB,EAAA,2BAAQ,GAAA,CAAI,QAAA,EAAJ,EAAa,KAAA,EAAO,OAAQ,QAAA,EAAS,CAAA;AAC/C;AAEO,IAAM,aAAA,GAAgB;ACzCtB,IAAM,YAAY,MAAmB;AAC1C,EAAA,MAAM,GAAA,GAAYC,iBAAW,aAAa,CAAA;AAC1C,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC7E,EAAA,OAAO,GAAA;AACT;;;ACJO,IAAM,qBAAA,GAAwB","file":"index.mjs","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n  publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message: \"Publishable key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_publishable_key\",\n      message:\n        \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n      retryable: false,\n    });\n  }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n  if (typeof document === \"undefined\") return;\n  if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n  const bar = document.createElement(\"div\");\n  bar.setAttribute(BANNER_ATTR, \"\");\n  bar.style.cssText =\n    \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n  const text = document.createElement(\"span\");\n  text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n  bar.appendChild(text);\n\n  const dismiss = document.createElement(\"button\");\n  dismiss.type = \"button\";\n  dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n  dismiss.textContent = \"×\";\n  dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n  dismiss.style.cssText =\n    \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n  dismiss.addEventListener(\"click\", () => bar.remove());\n  bar.appendChild(dismiss);\n\n  document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n  | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n  | { type: \"arcpay:style\"; payload: StyleSubset }\n  | { type: \"arcpay:focus\" }\n  | { type: \"arcpay:clear\" }\n  | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n  | { type: \"arcpay:ready\" }\n  | { type: \"arcpay:rejected\"; reason: string }\n  | {\n      type: \"arcpay:change\";\n      field: FieldType;\n      isValid: boolean;\n      brand?: string;\n      lastFour?: string;\n    }\n  | {\n      type: \"arcpay:tokenize-result\";\n      cardTokenId: string;\n      cardMask: string;\n      cardScheme: string;\n      cardBin: string;\n      expiresIn: number;\n      expiresAt: string;\n    }\n  | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n  base: Record<string, string>;\n  invalid?: Record<string, string>;\n  focus?: Record<string, string>;\n}\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n  typeof data === \"object\" &&\n  data !== null &&\n  \"type\" in data &&\n  typeof (data as { type: unknown }).type === \"string\" &&\n  (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n  iframe: HTMLIFrameElement,\n  message: ParentToIframe,\n  targetOrigin: string,\n): void => {\n  if (targetOrigin === \"*\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"wildcard_origin_forbidden\",\n      message: \"postToIframe: targetOrigin cannot be '*'\",\n      retryable: false,\n    });\n  }\n  if (!iframe.contentWindow) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"iframe_not_loaded\",\n      message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n      retryable: false,\n    });\n  }\n  iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n  if (targetOrigin === \"*\") {\n    throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n  }\n  window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n  event: MessageEvent,\n  expectedOrigin: string,\n): T | null => {\n  if (event.origin !== expectedOrigin) return null;\n  if (!isArcpayMessage(event.data)) return null;\n  return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\n// Spec calls out position:fixed, transform, pointer-events:none as forbidden.\n// We extend to cover the full clickjacking attack surface: any positioning\n// (fixed/absolute/sticky), transform, all pointer-events values, z-index, and\n// inset properties (top/left/right/bottom/inset). The legitimate use cases\n// for these in a 1-line input field are zero, so blanket drop.\nconst FORBIDDEN_PROPERTIES = new Set([\n  \"position\",\n  \"transform\",\n  \"pointer-events\",\n  \"z-index\",\n  \"top\",\n  \"left\",\n  \"right\",\n  \"bottom\",\n  \"inset\",\n]);\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n  const out: Record<string, string> = {};\n  for (const [key, value] of Object.entries(block)) {\n    const normalizedKey = key.toLowerCase();\n    if (FORBIDDEN_PROPERTIES.has(normalizedKey)) {\n      // Defense against position/transform-based clickjacking. Silently drop.\n      continue;\n    }\n    out[key] = value;\n  }\n  return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n  const result: StyleSubset = { base: sanitizeBlock(style.base) };\n  if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n  if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n  return result;\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n  type FieldType,\n  type ParentToIframe,\n  type IframeToParent,\n  type StyleSubset,\n  postToIframe,\n  parseIncoming,\n} from \"./postmessage\";\nimport { sanitizeStyle } from \"./style\";\n\nexport interface ElementOptions {\n  /** StyleSubset applied via arcpay:style postMessage. */\n  style?: StyleSubset;\n  placeholder?: string;\n}\n\nexport type ElementEvent =\n  | { type: \"ready\" }\n  | { type: \"change\"; isValid: boolean; brand?: string; lastFour?: string }\n  | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\n\nexport interface ElementContext {\n  iframeBase: string;\n  publishableKey: string;\n  channelId: string;\n}\n\nexport class Element {\n  private iframe: HTMLIFrameElement | null = null;\n  private readonly listeners = new Set<Listener>();\n  private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n  private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n  constructor(\n    public readonly field: FieldType,\n    private readonly options: ElementOptions,\n    private readonly context: ElementContext,\n  ) {}\n\n  mount(target: string | HTMLElement): void {\n    if (this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"already_mounted\",\n        message: `Element ${this.field} is already mounted`,\n        retryable: false,\n      });\n    }\n    const container = typeof target === \"string\" ? document.querySelector(target) : target;\n    if (!(container instanceof HTMLElement)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"mount_target_not_found\",\n        message: `mount target not found: ${String(target)}`,\n        retryable: false,\n      });\n    }\n\n    const iframe = document.createElement(\"iframe\");\n    iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n    iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n    iframe.setAttribute(\"allow\", \"payment\");\n    iframe.setAttribute(\"data-arcpay-element\", this.field);\n    container.appendChild(iframe);\n    this.iframe = iframe;\n\n    const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n    this.messageHandler = (event: MessageEvent) => {\n      // C1: source guard — only accept messages from this element's own iframe.\n      // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n      // could trigger handlers on cardNumber and vice-versa.\n      if (event.source !== this.iframe?.contentWindow) return;\n      // C4: use parseIncoming for origin + arcpay: prefix guard.\n      const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n      if (!data) return;\n      this.handleMessage(data);\n    };\n    window.addEventListener(\"message\", this.messageHandler);\n\n    iframe.addEventListener(\n      \"load\",\n      () => {\n        if (!this.iframe) return;\n        const hello: ParentToIframe = {\n          type: \"arcpay:hello\",\n          origin: window.location.origin,\n          publishableKey: this.context.publishableKey,\n          channelId: this.context.channelId,\n        };\n        postToIframe(this.iframe, hello, expectedOrigin);\n      },\n      { once: true },\n    );\n  }\n\n  private handleMessage(data: IframeToParent): void {\n    if (data.type === \"arcpay:ready\") {\n      this.status = \"ready\";\n      // Apply initial style if provided at construction time.\n      if (this.options.style) {\n        this.send({ type: \"arcpay:style\", payload: sanitizeStyle(this.options.style) });\n      }\n      this.emit({ type: \"ready\" });\n    } else if (data.type === \"arcpay:rejected\") {\n      this.status = \"error\";\n      this.emit({ type: \"error\", reason: data.reason });\n    } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n      this.emit({\n        type: \"change\",\n        isValid: data.isValid,\n        brand: data.brand,\n        lastFour: data.lastFour,\n      });\n    }\n    // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n  }\n\n  update(options: { style?: StyleSubset }): void {\n    if (options.style) {\n      this.send({ type: \"arcpay:style\", payload: sanitizeStyle(options.style) });\n    }\n  }\n\n  destroy(): void {\n    if (this.iframe) {\n      this.iframe.remove();\n      this.iframe = null;\n    }\n    if (this.messageHandler) {\n      window.removeEventListener(\"message\", this.messageHandler);\n      this.messageHandler = null;\n    }\n    this.listeners.clear();\n    this.status = \"pending\";\n  }\n\n  on(_event: \"ready\" | \"change\" | \"error\", callback: Listener): () => void {\n    this.listeners.add(callback);\n    return () => this.listeners.delete(callback);\n  }\n\n  focus(): void {\n    this.send({ type: \"arcpay:focus\" });\n  }\n\n  clear(): void {\n    this.send({ type: \"arcpay:clear\" });\n  }\n\n  isReady(): boolean {\n    return this.status === \"ready\";\n  }\n\n  /**\n   * Internal: returns the iframe's contentWindow for source-filtering in\n   * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n   * or when jsdom has not yet populated contentWindow (test environment).\n   */\n  getIframeContentWindow(): Window | null {\n    return this.iframe?.contentWindow ?? null;\n  }\n\n  /** Internal: used by Elements factory to send tokenize commands. */\n  send(message: ParentToIframe): void {\n    if (!this.iframe) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"not_mounted\",\n        message: `Element ${this.field} is not mounted`,\n        retryable: false,\n      });\n    }\n    postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n  }\n\n  private emit(event: ElementEvent): void {\n    for (const listener of this.listeners) {\n      listener(event);\n    }\n  }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\n\nexport type { TokenizeResult };\n\nexport type ElementsOptions = Record<string, never>;\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n  if (!globalThis.crypto?.randomUUID) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"crypto_unavailable\",\n      message: \"crypto.randomUUID is required for Hosted Fields\",\n      retryable: false,\n    });\n  }\n  return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n  private readonly elementMap = new Map<FieldType, Element>();\n  private readonly iframeBase: string;\n  private readonly publishableKey: string;\n  private readonly channelId: string;\n  private tokenizeInFlight = false;\n\n  constructor(opts: { publishableKey: string; iframeBase?: string }) {\n    this.publishableKey = opts.publishableKey;\n    this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n    this.channelId = createChannelId();\n  }\n\n  create(field: FieldType, options: ElementOptions = {}): Element {\n    if (this.elementMap.has(field)) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"duplicate_element\",\n        message: `Element for ${field} already created`,\n        retryable: false,\n      });\n    }\n    const ctx: ElementContext = {\n      iframeBase: this.iframeBase,\n      publishableKey: this.publishableKey,\n      channelId: this.channelId,\n    };\n    const element = new Element(field, options, ctx);\n    this.elementMap.set(field, element);\n    return element;\n  }\n\n  async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n    // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n    if (this.tokenizeInFlight) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"tokenize_in_progress\",\n        message: \"A tokenize() call is already in progress for this Elements instance\",\n        retryable: false,\n      });\n    }\n\n    const cardNumber = this.elementMap.get(\"cardNumber\");\n    const cardExpiry = this.elementMap.get(\"cardExpiry\");\n    const cardCvv = this.elementMap.get(\"cardCvv\");\n\n    if (!cardNumber || !cardExpiry || !cardCvv) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"incomplete_elements\",\n        message:\n          \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n        retryable: false,\n      });\n    }\n    if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"elements_not_ready\",\n        message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n        retryable: false,\n      });\n    }\n\n    this.tokenizeInFlight = true;\n    try {\n      return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n    } finally {\n      this.tokenizeInFlight = false;\n    }\n  }\n\n  private doTokenize(\n    cardNumber: Element,\n    paymentId: string,\n    idempotencyKey: string,\n  ): Promise<TokenizeResult> {\n    const iframeOrigin = new URL(this.iframeBase).origin;\n    // C1: obtain reference to the cardNumber iframe's contentWindow before\n    // registering the listener so we can filter by source.\n    const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n    return new Promise<TokenizeResult>((resolve, reject) => {\n      // C3: 30-second timeout — rejects and cleans up if no result arrives.\n      const timer = window.setTimeout(() => {\n        window.removeEventListener(\"message\", onMessage);\n        reject(\n          new ArcPayError({\n            type: \"network_error\",\n            code: \"tokenize_timeout\",\n            message: \"tokenize() timed out after 30 seconds\",\n            retryable: true,\n            paymentId,\n          }),\n        );\n      }, 30_000);\n\n      const onMessage = (event: MessageEvent) => {\n        // C1: source guard — only accept messages from the cardNumber iframe.\n        if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n        // C4: use parseIncoming for origin + arcpay: prefix guard.\n        const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n        if (!data) return;\n\n        if (data.type === \"arcpay:tokenize-result\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          resolve({\n            cardTokenId: data.cardTokenId,\n            cardMask: data.cardMask,\n            cardScheme: data.cardScheme,\n            cardBin: data.cardBin,\n            expiresIn: data.expiresIn,\n            expiresAt: data.expiresAt,\n          });\n        } else if (data.type === \"arcpay:tokenize-error\") {\n          clearTimeout(timer);\n          window.removeEventListener(\"message\", onMessage);\n          const errType =\n            data.errorType === \"validation_error\" || data.errorType === \"api_error\"\n              ? data.errorType\n              : \"api_error\";\n          reject(\n            new ArcPayError({\n              type: errType,\n              code: data.code,\n              message: data.message,\n              retryable: false,\n              paymentId,\n            }),\n          );\n        }\n      };\n\n      window.addEventListener(\"message\", onMessage);\n      cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n    });\n  }\n\n  destroy(): void {\n    for (const el of this.elementMap.values()) {\n      el.destroy();\n    }\n    this.elementMap.clear();\n  }\n}\n","import {\n  detectEnvironment,\n  type Environment,\n  validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n  readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n  readonly publishableKey: string;\n  readonly environment: Environment;\n  elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n  if (detectEnvironment(publishableKey) === \"sandbox\") {\n    showSandboxBanner();\n  }\n  return {\n    publishableKey,\n    environment: detectEnvironment(publishableKey),\n    elements: () => new Elements({ publishableKey }),\n  };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n  try {\n    validatePublishableKey(publishableKey);\n  } catch (err) {\n    return Promise.reject(err);\n  }\n  const key = publishableKey;\n  const existing = cache.get(key);\n  if (existing) return existing;\n  const promise = Promise.resolve(buildInstance(publishableKey));\n  cache.set(key, promise);\n  return promise;\n}\n\nconst resetForTests = (): void => {\n  cache.clear();\n};\n\nexport const ArcPay = {\n  load,\n  __resetForTests: resetForTests,\n};\n","import { ArcPay, type ArcPayInstance } from \"../index\";\nimport * as React from \"react\";\n\nexport type ArcPayState =\n  | { status: \"loading\"; instance: null; error: null }\n  | { status: \"ready\"; instance: ArcPayInstance; error: null }\n  | { status: \"error\"; instance: null; error: Error };\n\nconst Ctx = React.createContext<ArcPayState | null>(null);\n\nexport interface ArcPayProviderProps {\n  publishableKey: string;\n  children: React.ReactNode;\n}\n\nexport const ArcPayProvider: React.FC<ArcPayProviderProps> = ({ publishableKey, children }) => {\n  const [state, setState] = React.useState<ArcPayState>({\n    status: \"loading\",\n    instance: null,\n    error: null,\n  });\n\n  React.useEffect(() => {\n    let canceled = false;\n    ArcPay.load(publishableKey)\n      .then((instance) => {\n        if (!canceled) setState({ status: \"ready\", instance, error: null });\n      })\n      .catch((error: unknown) => {\n        if (!canceled)\n          setState({\n            status: \"error\",\n            instance: null,\n            error: error instanceof Error ? error : new Error(String(error)),\n          });\n      });\n    return () => {\n      canceled = true;\n    };\n  }, [publishableKey]);\n\n  return <Ctx.Provider value={state}>{children}</Ctx.Provider>;\n};\n\nexport const ArcPayContext = Ctx;\n","import * as React from \"react\";\nimport { ArcPayContext, type ArcPayState } from \"./provider\";\n\nexport const useArcPay = (): ArcPayState => {\n  const ctx = React.useContext(ArcPayContext);\n  if (!ctx) throw new Error(\"useArcPay must be called within an ArcPayProvider\");\n  return ctx;\n};\n","export { ArcPayProvider, ArcPayContext } from \"./provider\";\nexport type { ArcPayProviderProps, ArcPayState } from \"./provider\";\nexport { useArcPay } from \"./use-arcpay\";\nexport const REACT_WRAPPER_VERSION = \"0.1.16\";\n"]}

package/dist/server/index.cjs

@@ -282,12 +282,13 @@ var ArcPayClient = class {
       true
     );
   }
-  async completeThreeDSMethod(paymentId, body, opts = {}) {
+  async completeThreeDSMethod(paymentId, body, opts) {
     return this.request(
       "POST",
       `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,
       body,
-      opts
+      opts,
+      true
     );
   }
   async listAvailablePaymentMethods(query, opts = {}) {
@@ -359,6 +360,17 @@ var buildThreeDSBrowserForm = (nextAction) => ({
   target: nextAction.three_ds.submit.target,
   fields: nextAction.three_ds.submit.fields
 });
+var assertHTTPSActionURL = (action) => {
+  let parsed;
+  try {
+    parsed = new URL(action);
+  } catch (e) {
+    throw new Error("3DS form action must be an absolute HTTPS URL");
+  }
+  if (parsed.protocol !== "https:") {
+    throw new Error("3DS form action must use HTTPS");
+  }
+};
 var buildThreeDSBrowserStep = (nextAction) => {
   const action = getThreeDSAction(nextAction);
   if (!action) return null;
@@ -382,6 +394,7 @@ var buildThreeDSMethodCompletion = (nextAction, completionIndicator = "Y") => {
 var htmlEscape = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 var buildThreeDSAutoSubmitHtml = (nextAction) => {
   const form = buildThreeDSBrowserForm(nextAction);
+  assertHTTPSActionURL(form.action);
   const target = form.target === "hidden_iframe" ? "arcpay-three-ds-method" : "_self";
   const inputs = form.fields.map(
     (field) => `<input type="hidden" name="${htmlEscape(field.name)}" value="${htmlEscape(field.value)}">`

package/dist/server/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts","../../src/server/client.ts","../../src/three-ds/actions.ts"],"names":[],"mappings":";;;AAqBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACgCA,IAAM,gBAAA,GAAmB,6BAAA;AACzB,IAAM,WAAA,GAAc,YAAA;AACpB,IAAM,wBAAA,GAA2B,IAAA;AACjC,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,iCAAA,GAAsE;AAAA,EAC1E,YAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,kBAAkB,GAAA,EAAqC;AAC9D,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EACE,4FAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF;AAEA,IAAM,aAAA,GAAgB,CAAC,IAAA,KAAyB;AAC9C,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,MAAM,CAAA,IAAK,IAAA,CAAK,WAAW,GAAA,GAAM,CAAC,MAAM,EAAA,EAAI;AACjD,IAAA,GAAA,IAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC1B,CAAA;AAMA,IAAM,uBAAA,GAA0B,CAC9B,IAAA,KAC0C,IAAA,IAAA,IAAA,GAAA,IAAA,GAAQ,EAAC;AAErD,IAAM,kBAAA,GACJ,4EAAA;AAEF,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAwD;AACrF,EAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,+CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,qCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAA,CAAK,cAAA;AACd,CAAA;AAEA,IAAM,8BAAA,GAAiC,CAAC,IAAA,KAAuD;AApJ/F,EAAA,IAAA,EAAA;AAqJE,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,CAAK,cAAA,EAAgB;AACjC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,iBAAA;AAAA,MACN,OAAA,EAAS,4BAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,cAAA,KAAmB,WAAA,IAAe,CAAC,KAAK,aAAA,EAAe;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,wDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAM,WAAA,GAAA,CAAc,EAAA,GAAA,IAAA,CAAK,YAAA,KAAL,IAAA,GAAA,EAAA,GAAqB,KAAA;AACzC,EAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,6CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,mBAAmB,WAAA,EAAa;AACvC,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,0DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,IAAA,CAAK,kBAAA,CAAmB,QAAA,KAAa,IAAA,CAAK,cAAA,EAAgB;AAC5D,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,uDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,EAAE,GAAG,IAAA,EAAM,YAAA,EAAc,WAAA,EAAY;AAC9C,CAAA;AAEA,IAAM,WAAA,GAAc,CAAC,IAAA,EAAc,KAAA,KAA2B;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,UAAU,EAAA,EAAI;AAC3D,IAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,QAAA,EAAS;AAChC,EAAA,OAAO,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,GAAK,IAAA;AAC1C,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAQ,CAAC,SAAS,MAAA,KAAW;AAC/B,EAAA,IAAI,iCAAQ,OAAA,EAAS;AACnB,IAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAClE,IAAA;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AACpC,EAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,gBAAA;AAAA,IACN,OAAA;AAAA,IACA,MAAM;AACJ,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAAA,IACpE,CAAA;AAAA,IACA,EAAE,MAAM,IAAA;AAAK,GAAA;AAEjB,CAAC,CAAA;AAEH,IAAM,eAAA,GAAkB,CAAC,KAAA,EAA2B,QAAA,KAA6B;AAC/E,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,QAAA;AAChC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,gEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAA;AACT,CAAA;AAaA,IAAM,iBAAA,GAAoB,CAAC,KAAA,KACzB,KAAA,KAAU,kBAAA,IACV,KAAA,KAAU,sBAAA,IACV,KAAA,KAAU,qBAAA,IACV,KAAA,KAAU,aAAA,IACV,KAAA,KAAU,sBACV,KAAA,KAAU,WAAA;AAEZ,IAAM,gBAAA,GAAmB,CAAC,IAAA,EAAuB,MAAA,EAAgB,IAAA,KAA2B;AAC1F,EAAA,IAAI,IAAA,KAAS,oBAAoB,OAAO,IAAA;AACxC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,OAAO,IAAA,KAAS,eAAe,MAAA,IAAU,GAAA;AAC3C,CAAA;AAEA,IAAM,kBAAA,GAAqB,OAAO,GAAA,KAAwC;AArQ1E,EAAA,IAAA,EAAA,EAAA,EAAA;AAsQE,EAAA,IAAI,OAAqB,EAAC;AAC1B,EAAA,IAAI;AACF,IAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,EAER;AACA,EAAA,MAAM,MAAA,GAAA,CAAS,EAAA,GAAA,IAAA,CAAK,KAAA,KAAL,IAAA,GAAA,EAAA,GAAc,EAAC;AAC9B,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,MAAA,CAAO,IAAI,CAAA,GACtC,OAAO,IAAA,GACP,GAAA,CAAI,MAAA,IAAU,GAAA,GACZ,WAAA,GACA,kBAAA;AACN,EAAA,OAAO,IAAI,WAAA,CAAY;AAAA,IACrB,IAAA;AAAA,IACA,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,UAAS,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,CAAA,2BAAA,EAA8B,IAAI,MAAM,CAAA,CAAA;AAAA,IACnE,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,WAAW,MAAA,CAAO,UAAA;AAAA,IAClB,aAAa,MAAA,CAAO,YAAA;AAAA,IACpB,WAAW,gBAAA,CAAiB,IAAA,EAAM,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAI;AAAA,GAC1D,CAAA;AACH,CAAA;AAEO,IAAM,eAAN,MAAmB;AAAA,EAKxB,YAAY,OAAA,EAA8B;AAlS5C,IAAA,IAAA,EAAA,EAAA,EAAA;AAmSI,IAAA,MAAM,YAAqB,OAAA,CAAQ,SAAA;AACnC,IAAA,iBAAA,CAAkB,SAAS,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,IAAS,OAAO,UAAU,WAAA,EAAa;AAClD,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,WAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,oDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,OAAA,GAAU,aAAA,CAAA,CAAc,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,YAAmB,gBAAgB,CAAA;AAChE,IAAA,IAAA,CAAK,SAAA,GAAA,CAAY,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,KAAA;AAAA,EACpC;AAAA,EAEA,MAAM,YAAA,CACJ,KAAA,GAA2B,EAAC,EAC5B,IAAA,GAAuB,EAAC,EACF;AACtB,IAAA,OAAO,IAAA,CAAK,QAAqB,KAAA,EAAO,WAAA,CAAY,aAAa,KAAK,CAAA,EAAG,QAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAGA,MAAM,aAAA,CAAc,IAAA,EAA4B,IAAA,EAA6C;AAC3F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACpE;AAAA,EAGA,MAAM,eAAA,CAAgB,IAAA,EAA8B,IAAA,EAA6C;AAC/F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,cAAA,EAAgB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAA,CAAW,SAAA,EAAmB,IAAA,GAAuB,EAAC,EAAqB;AAC/E,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAAA,MAC1C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACJ,SAAA,EACA,IAAA,GAA8B,EAAC,EACb;AA/UtB,IAAA,IAAA,EAAA;AAgVI,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,IAAA,CAAK,UAAA,EAAY,wBAAwB,CAAA;AAC5E,IAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,IAAA,CAAK,SAAA,EAAW,uBAAuB,CAAA;AACzE,IAAA,MAAM,mBAAmB,IAAI,GAAA,CAAA,CAAI,EAAA,GAAA,IAAA,CAAK,gBAAA,KAAL,YAAyB,iCAAiC,CAAA;AAC3F,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,IAAA,WAAS;AACP,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACxE,MAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,OAAA,CAAQ,MAA+B,CAAA,EAAG;AACjE,QAAA,OAAO,OAAA;AAAA,MACT;AACA,MAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,IAAa,SAAA,EAAW;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY;AAAA,UACpB,IAAA,EAAM,WAAA;AAAA,UACN,IAAA,EAAM,sBAAA;AAAA,UACN,OAAA,EAAS,CAAA,QAAA,EAAW,SAAS,CAAA,wCAAA,EAA2C,SAAS,CAAA,EAAA,CAAA;AAAA,UACjF,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AACA,MAAA,MAAM,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,MAAM,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,WAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,KAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,YAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAMA,MAAM,eAAA,CACJ,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,KAAK,OAAA,CAAgC,MAAA,EAAQ,sBAAA,EAAwB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9F;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,MAAM,WAAA,GAAc,+BAA+B,IAAI,CAAA;AACvD,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,WAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,GAAuB,EAAC,EACS;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,oBAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,2BAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACW;AACnC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,WAAA,CAAY,8BAA8B,KAAK,CAAA;AAAA,MAC/C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAGA,MAAM,UAAA,CAAW,IAAA,EAAyB,IAAA,EAA0C;AAClF,IAAA,OAAO,KAAK,OAAA,CAAc,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACtE,IAAA,OAAO,IAAA,CAAK,QAAc,KAAA,EAAO,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACzE,IAAA,OAAO,IAAA,CAAK,QAAc,QAAA,EAAU,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC7F;AAAA,EAMA,MAAM,qBAAA,CACJ,IAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,OAAO,KAAK,OAAA,CAAyB,MAAA,EAAQ,oBAAA,EAAsB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACrF;AAAA,EAEA,MAAc,QACZ,MAAA,EACA,IAAA,EACA,MACA,IAAA,GAA4B,MAAA,EAC5B,qBAAqB,KAAA,EACT;AACZ,IAAA,MAAM,WAAA,GAAc,wBAAwB,IAAI,CAAA;AAChD,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,MACvC,uBAAA,EAAyB,WAAA;AAAA,MACzB,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE,CAAA,MAAA,IAAW,WAAA,CAAY,cAAA,KAAmB,MAAA,EAAW;AACnD,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,KAAK,SAAA,CAAU,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QACnD,MAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAM,IAAA,KAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,QAC1D,QAAQ,WAAA,CAAY;AAAA,OACrB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,wBAAA;AAAA,QAC9C,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,mBAAmB,GAAG,CAAA;AAC/C,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,OAAA,KACjC,IAAI,aAAa,OAAO;;;ACxdnB,IAAM,gBAAA,GAAmB,CAAC,UAAA,KAA6D;AAC5F,EAAA,OAAO,UAAA,IAAA,IAAA,GAAA,UAAA,GAAc,IAAA;AACvB;AAEO,IAAM,qBAAA,GAAwB,CAAC,UAAA,KAA4C;AAChF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,iBAAA,IAAqB,UAAA,CAAW,SAAS,KAAA,KAAU,QAAA;AACjF;AAEO,IAAM,wBAAA,GAA2B,CAAC,UAAA,KAA4C;AACnF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,oBAAA,IAAwB,UAAA,CAAW,SAAS,KAAA,KAAU,WAAA;AACpF;AAEO,IAAM,uBAAA,GAA0B,CAAC,UAAA,MAAoD;AAAA,EAC1F,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO;AACrC,CAAA;AAEO,IAAM,uBAAA,GAA0B,CACrC,UAAA,KAC8B;AAC9B,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAO,QAAA,CAAS,KAAA;AAAA,IACtB,eAAA,EAAiB,OAAO,QAAA,CAAS,OAAA;AAAA,IACjC,IAAA,EAAM,wBAAwB,MAAM,CAAA;AAAA,IACpC,kBAAA,EAAoB,OAAO,QAAA,CAAS,mBAAA;AAAA,IACpC,oBAAA,EAAsB,OAAO,QAAA,CAAS;AAAA,GACxC;AACF;AAEO,IAAM,4BAAA,GAA+B,CAC1C,UAAA,EACA,mBAAA,GAAuC,GAAA,KACyC;AAChF,EAAA,IAAI,CAAC,qBAAA,CAAsB,UAAU,KAAK,CAAC,UAAA,CAAW,SAAS,wBAAA,EAA0B;AACvF,IAAA,MAAM,IAAI,MAAM,2EAA2E,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO;AAAA,IACL,oBAAA,EAAsB,mBAAA;AAAA,IACtB,wBAAA,EAA0B,WAAW,QAAA,CAAS;AAAA,GAChD;AACF;AAEA,IAAM,UAAA,GAAa,CAAC,KAAA,KAClB,KAAA,CACG,QAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,MAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAEnB,IAAM,0BAAA,GAA6B,CAAC,UAAA,KAA0C;AACnF,EAAA,MAAM,IAAA,GAAO,wBAAwB,UAAU,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,KAAW,eAAA,GAAkB,wBAAA,GAA2B,OAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,CACjB,GAAA;AAAA,IACC,CAAC,KAAA,KACC,CAAA,2BAAA,EAA8B,UAAA,CAAW,KAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAY,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,EAAA;AAAA,GAC3F,CACC,KAAK,EAAE,CAAA;AACV,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,KAAW,eAAA,GACZ,kFAAA,GACA,EAAA;AACN,EAAA,OAAO,CAAA,8DAAA,EAAiE,MAAM,CAAA,4BAAA,EAA+B,UAAA,CAAW,IAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAa,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,iEAAA,CAAA;AACpK","file":"index.cjs","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError, type ArcPayErrorType } from \"../core/errors\";\nimport type {\n  AvailablePaymentMethod,\n  CaptureRequest,\n  ChargeSavedCardRequest,\n  CheckoutSession,\n  CompleteThreeDSMethodRequest,\n  CreateCheckoutSessionRequest,\n  CreateCardSetupRequest,\n  CreateLinkRequest,\n  CreatePaymentRequest,\n  CreateRefundRequest,\n  ExecutePaymentRequest,\n  ExecutePaymentResponse,\n  Link,\n  ListAvailablePaymentMethodsQuery,\n  ListPaymentsQuery,\n  Payment,\n  PaymentList,\n  PaymentNextAction,\n  Refund,\n  TerminalPaymentStatus,\n  VoidRequest,\n  WaitForPaymentOptions,\n} from \"./types\";\n\nexport type {\n  AvailablePaymentMethod,\n  CaptureMode,\n  CaptureRequest,\n  ChargeSavedCardRequest,\n  CheckoutSession,\n  CompleteThreeDSMethodRequest,\n  CreateCheckoutSessionRequest,\n  CreateCardSetupRequest,\n  CreateLinkRequest,\n  CreatePaymentRequest,\n  CreateRefundRequest,\n  Currency,\n  ExecutePaymentRequest,\n  ExecutePaymentResponse,\n  PaymentNextAction,\n  Link,\n  ListAvailablePaymentMethodsQuery,\n  ListPaymentsQuery,\n  Payment,\n  PaymentFlowMode,\n  PaymentList,\n  PaymentMethod,\n  PaymentStatus,\n  TerminalPaymentStatus,\n  Refund,\n  VoidRequest,\n  WaitForPaymentOptions,\n} from \"./types\";\n\nexport interface ArcPayClientOptions {\n  secretKey: string;\n  apiBase?: string;\n  fetch?: typeof fetch;\n}\n\nexport interface IdempotencyOptions {\n  idempotencyKey: string;\n  signal?: AbortSignal;\n}\n\ntype RequestOptionsInput = RequestOptions | IdempotencyOptions | null | undefined;\n\nexport interface RequestOptions {\n  signal?: AbortSignal;\n}\n\nconst DEFAULT_API_BASE = \"https://api.arcpay.space/v1\";\nconst API_VERSION = \"2026-05-06\";\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_POLL_TIMEOUT_MS = 60_000;\nconst DEFAULT_TERMINAL_PAYMENT_STATUSES: readonly TerminalPaymentStatus[] = [\n  \"authorized\",\n  \"captured\",\n  \"settled\",\n  \"voided\",\n  \"expired\",\n  \"refunded\",\n  \"chargeback\",\n  \"declined\",\n  \"failed\",\n];\n\nfunction validateSecretKey(key: unknown): asserts key is string {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"authentication_error\",\n      code: \"invalid_secret_key\",\n      message: \"Secret key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"sk_test_\") && !key.startsWith(\"sk_live_\")) {\n    throw new ArcPayError({\n      type: \"authentication_error\",\n      code: \"invalid_secret_key\",\n      message:\n        \"Secret key must start with sk_test_ or sk_live_. Publishable keys cannot call server APIs.\",\n      retryable: false,\n    });\n  }\n}\n\nconst normalizeBase = (base: string): string => {\n  let end = base.length;\n  while (end > 0 && base.charCodeAt(end - 1) === 47) {\n    end -= 1;\n  }\n  return base.slice(0, end);\n};\n\ninterface RequestOptionsWithOptionalIdempotency extends RequestOptions {\n  idempotencyKey?: string;\n}\n\nconst normalizeRequestOptions = (\n  opts: RequestOptionsInput,\n): RequestOptionsWithOptionalIdempotency => opts ?? {};\n\nconst IDEMPOTENCY_KEY_RE =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\nconst requireIdempotencyKey = (opts: RequestOptionsWithOptionalIdempotency): string => {\n  if (!opts.idempotencyKey) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"missing_idempotency_key\",\n      message: \"idempotencyKey is required for this operation\",\n      retryable: false,\n    });\n  }\n  if (!IDEMPOTENCY_KEY_RE.test(opts.idempotencyKey)) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_idempotency_key\",\n      message: \"idempotencyKey must be a valid UUID\",\n      retryable: false,\n    });\n  }\n  return opts.idempotencyKey;\n};\n\nconst normalizeExecutePaymentRequest = (body: ExecutePaymentRequest): ExecutePaymentRequest => {\n  if (!body || !body.payment_method) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_request\",\n      message: \"payment_method is required\",\n      retryable: false,\n    });\n  }\n  if (body.payment_method === \"bank_card\" && !body.card_token_id) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"missing_card_token_id\",\n      message: \"card_token_id is required for bank_card executePayment\",\n      retryable: false,\n    });\n  }\n  const paymentMode = body.payment_mode ?? \"h2h\";\n  if (paymentMode !== \"h2h\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_payment_mode\",\n      message: \"payment_mode must be h2h for executePayment\",\n      retryable: false,\n    });\n  }\n  if (body.payment_method !== \"bank_card\") {\n    if (!body.wallet_interaction) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"invalid_request\",\n        message: \"wallet_interaction is required for wallet executePayment\",\n        retryable: false,\n      });\n    }\n    if (body.wallet_interaction.provider !== body.payment_method) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"invalid_request\",\n        message: \"wallet_interaction.provider must match payment_method\",\n        retryable: false,\n      });\n    }\n  }\n  return { ...body, payment_mode: paymentMode };\n};\n\nconst appendQuery = (path: string, query?: object): string => {\n  if (!query) return path;\n  const params = new URLSearchParams();\n  for (const [key, value] of Object.entries(query)) {\n    if (value === undefined || value === null || value === \"\") continue;\n    params.set(key, String(value));\n  }\n  const encoded = params.toString();\n  return encoded ? `${path}?${encoded}` : path;\n};\n\nconst sleep = (ms: number, signal?: AbortSignal): Promise<void> =>\n  new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      return;\n    }\n    const timer = setTimeout(resolve, ms);\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timer);\n        reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n\nconst normalizePollMs = (value: number | undefined, fallback: number): number => {\n  if (value === undefined) return fallback;\n  if (!Number.isFinite(value) || value <= 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_poll_options\",\n      message: \"Polling intervals and timeouts must be positive finite numbers\",\n      retryable: false,\n    });\n  }\n  return value;\n};\n\ninterface APIErrorBody {\n  error?: {\n    type?: string;\n    code?: string;\n    message?: string;\n    param?: string;\n    request_id?: string;\n    decline_code?: string;\n  };\n}\n\nconst isPublicErrorType = (value: unknown): value is ArcPayErrorType =>\n  value === \"validation_error\" ||\n  value === \"authentication_error\" ||\n  value === \"authorization_error\" ||\n  value === \"state_error\" ||\n  value === \"rate_limit_error\" ||\n  value === \"api_error\";\n\nconst isRetryableError = (type: ArcPayErrorType, status: number, code?: string): boolean => {\n  if (type === \"rate_limit_error\") return true;\n  if (code === \"timeout\") return false;\n  return type === \"api_error\" && status >= 500;\n};\n\nconst parseErrorResponse = async (res: Response): Promise<ArcPayError> => {\n  let body: APIErrorBody = {};\n  try {\n    body = (await res.json()) as APIErrorBody;\n  } catch {\n    /* keep default error below */\n  }\n  const detail = body.error ?? {};\n  const type = isPublicErrorType(detail.type)\n    ? detail.type\n    : res.status >= 500\n      ? \"api_error\"\n      : \"validation_error\";\n  return new ArcPayError({\n    type,\n    code: detail.code,\n    message: detail.message ?? `Request failed with status ${res.status}`,\n    param: detail.param,\n    requestId: detail.request_id,\n    declineCode: detail.decline_code,\n    retryable: isRetryableError(type, res.status, detail.code),\n  });\n};\n\nexport class ArcPayClient {\n  private readonly secretKey: string;\n  private readonly apiBase: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(options: ArcPayClientOptions) {\n    const secretKey: unknown = options.secretKey;\n    validateSecretKey(secretKey);\n    if (!options.fetch && typeof fetch === \"undefined\") {\n      throw new ArcPayError({\n        type: \"api_error\",\n        code: \"fetch_unavailable\",\n        message: \"A fetch implementation is required in this runtime\",\n        retryable: false,\n      });\n    }\n    this.secretKey = secretKey;\n    this.apiBase = normalizeBase(options.apiBase ?? DEFAULT_API_BASE);\n    this.fetchImpl = options.fetch ?? fetch;\n  }\n\n  async listPayments(\n    query: ListPaymentsQuery = {},\n    opts: RequestOptions = {},\n  ): Promise<PaymentList> {\n    return this.request<PaymentList>(\"GET\", appendQuery(\"/payments\", query), undefined, opts);\n  }\n\n  async createPayment(body: CreatePaymentRequest, opts: IdempotencyOptions): Promise<Payment>;\n  async createPayment(body: CreatePaymentRequest, opts: RequestOptionsInput): Promise<Payment> {\n    return this.request<Payment>(\"POST\", \"/payments\", body, opts, true);\n  }\n\n  async createCardSetup(body: CreateCardSetupRequest, opts: IdempotencyOptions): Promise<Payment>;\n  async createCardSetup(body: CreateCardSetupRequest, opts: RequestOptionsInput): Promise<Payment> {\n    return this.request<Payment>(\"POST\", \"/cards/setup\", body, opts, true);\n  }\n\n  async getPayment(paymentId: string, opts: RequestOptions = {}): Promise<Payment> {\n    return this.request<Payment>(\n      \"GET\",\n      `/payments/${encodeURIComponent(paymentId)}`,\n      undefined,\n      opts,\n    );\n  }\n\n  async waitForPaymentTerminal(\n    paymentId: string,\n    opts: WaitForPaymentOptions = {},\n  ): Promise<Payment> {\n    const intervalMs = normalizePollMs(opts.intervalMs, DEFAULT_POLL_INTERVAL_MS);\n    const timeoutMs = normalizePollMs(opts.timeoutMs, DEFAULT_POLL_TIMEOUT_MS);\n    const terminalStatuses = new Set(opts.terminalStatuses ?? DEFAULT_TERMINAL_PAYMENT_STATUSES);\n    const startedAt = Date.now();\n\n    for (;;) {\n      const payment = await this.getPayment(paymentId, { signal: opts.signal });\n      if (terminalStatuses.has(payment.status as TerminalPaymentStatus)) {\n        return payment;\n      }\n      if (Date.now() - startedAt >= timeoutMs) {\n        throw new ArcPayError({\n          type: \"api_error\",\n          code: \"payment_poll_timeout\",\n          message: `Payment ${paymentId} did not reach a terminal status within ${timeoutMs}ms`,\n          retryable: true,\n        });\n      }\n      await sleep(intervalMs, opts.signal);\n    }\n  }\n\n  async capturePayment(\n    paymentId: string,\n    body: CaptureRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Payment>;\n  async capturePayment(\n    paymentId: string,\n    body: CaptureRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Payment> {\n    return this.request<Payment>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/capture`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async voidPayment(\n    paymentId: string,\n    body: VoidRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Payment>;\n  async voidPayment(\n    paymentId: string,\n    body: VoidRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Payment> {\n    return this.request<Payment>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/void`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async createRefund(\n    paymentId: string,\n    body: CreateRefundRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Refund>;\n  async createRefund(\n    paymentId: string,\n    body: CreateRefundRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Refund> {\n    return this.request<Refund>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/refunds`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async chargeSavedCard(\n    body: ChargeSavedCardRequest,\n    opts: IdempotencyOptions,\n  ): Promise<ExecutePaymentResponse>;\n  async chargeSavedCard(\n    body: ChargeSavedCardRequest,\n    opts: RequestOptionsInput,\n  ): Promise<ExecutePaymentResponse> {\n    return this.request<ExecutePaymentResponse>(\"POST\", \"/payments/saved-card\", body, opts, true);\n  }\n\n  async executePayment(\n    paymentId: string,\n    body: ExecutePaymentRequest,\n    opts: IdempotencyOptions,\n  ): Promise<ExecutePaymentResponse>;\n  async executePayment(\n    paymentId: string,\n    body: ExecutePaymentRequest,\n    opts: RequestOptionsInput,\n  ): Promise<ExecutePaymentResponse> {\n    const requestBody = normalizeExecutePaymentRequest(body);\n    return this.request<ExecutePaymentResponse>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/execute`,\n      requestBody,\n      opts,\n      true,\n    );\n  }\n\n  async completeThreeDSMethod(\n    paymentId: string,\n    body: CompleteThreeDSMethodRequest,\n    opts: RequestOptions = {},\n  ): Promise<ExecutePaymentResponse> {\n    return this.request<ExecutePaymentResponse>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,\n      body,\n      opts,\n    );\n  }\n\n  async listAvailablePaymentMethods(\n    query: ListAvailablePaymentMethodsQuery,\n    opts: RequestOptions = {},\n  ): Promise<AvailablePaymentMethod[]> {\n    return this.request<AvailablePaymentMethod[]>(\n      \"GET\",\n      appendQuery(\"/payment-methods/available\", query),\n      undefined,\n      opts,\n    );\n  }\n\n  async createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;\n  async createLink(body: CreateLinkRequest, opts: RequestOptionsInput): Promise<Link> {\n    return this.request<Link>(\"POST\", \"/links\", body, opts, true);\n  }\n\n  async getLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n    return this.request<Link>(\"GET\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n  }\n\n  async cancelLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n    return this.request<Link>(\"DELETE\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n  }\n\n  async createCheckoutSession(\n    body: CreateCheckoutSessionRequest,\n    opts: IdempotencyOptions,\n  ): Promise<CheckoutSession>;\n  async createCheckoutSession(\n    body: CreateCheckoutSessionRequest,\n    opts: RequestOptionsInput,\n  ): Promise<CheckoutSession> {\n    return this.request<CheckoutSession>(\"POST\", \"/checkout/sessions\", body, opts, true);\n  }\n\n  private async request<T>(\n    method: \"GET\" | \"POST\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    opts: RequestOptionsInput = undefined,\n    requireIdempotency = false,\n  ): Promise<T> {\n    const requestOpts = normalizeRequestOptions(opts);\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${this.secretKey}`,\n      \"X-Arc-Pay-API-Version\": API_VERSION,\n      \"Content-Type\": \"application/json\",\n    };\n    if (requireIdempotency) {\n      headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n    } else if (requestOpts.idempotencyKey !== undefined) {\n      headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n    }\n\n    let res: Response;\n    try {\n      res = await this.fetchImpl(`${this.apiBase}${path}`, {\n        method,\n        headers,\n        body: body === undefined ? undefined : JSON.stringify(body),\n        signal: requestOpts.signal,\n      });\n    } catch (err) {\n      throw new ArcPayError({\n        type: \"network_error\",\n        message: err instanceof Error ? err.message : \"Network request failed\",\n        retryable: true,\n      });\n    }\n    if (!res.ok) throw await parseErrorResponse(res);\n    return (await res.json()) as T;\n  }\n}\n\nexport const createArcPayClient = (options: ArcPayClientOptions): ArcPayClient =>\n  new ArcPayClient(options);\n","import type { CardBrowserInfo, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n  name: string;\n  value: string;\n}\n\nexport interface BrowserPostForm {\n  action: string;\n  method: \"POST\";\n  target: \"hidden_iframe\" | \"browser\";\n  fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n  kind: \"method\" | \"challenge\";\n  protocolVersion: \"1\" | \"2\";\n  form: BrowserPostForm;\n  completionEndpoint?: string;\n  threeDSServerTransId?: string;\n}\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n  supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n    ? (value as BrowserInfo[\"color_depth\"])\n    : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n  if (width >= 1000) return \"05\";\n  if (width >= 600) return \"04\";\n  if (width >= 500) return \"03\";\n  if (width >= 390) return \"02\";\n  return \"01\";\n};\n\nexport const collectBrowserInfo = (\n  acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n  if (\n    typeof window === \"undefined\" ||\n    typeof navigator === \"undefined\" ||\n    typeof screen === \"undefined\"\n  ) {\n    throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n  }\n  return {\n    accept_header: acceptHeader,\n    language: navigator.language || \"en\",\n    screen_width: screen.width,\n    screen_height: screen.height,\n    color_depth: normalizeColorDepth(screen.colorDepth),\n    timezone_offset_minutes: new Date().getTimezoneOffset(),\n    java_enabled: false,\n    user_agent: navigator.userAgent,\n    window_size: resolveWindowSize(window.innerWidth || screen.width),\n  };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n  return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n  action: nextAction.three_ds.submit.url,\n  method: nextAction.three_ds.submit.method,\n  target: nextAction.three_ds.submit.target,\n  fields: nextAction.three_ds.submit.fields,\n});\n\nexport const buildThreeDSBrowserStep = (\n  nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n  const action = getThreeDSAction(nextAction);\n  if (!action) return null;\n  return {\n    kind: action.three_ds.phase,\n    protocolVersion: action.three_ds.version,\n    form: buildThreeDSBrowserForm(action),\n    completionEndpoint: action.three_ds.completion_endpoint,\n    threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n  };\n};\n\nexport const buildThreeDSMethodCompletion = (\n  nextAction: PaymentNextAction,\n  completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n  if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n    throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n  }\n  return {\n    completion_indicator: completionIndicator,\n    three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n  };\n};\n\nconst htmlEscape = (value: string): string =>\n  value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n  const form = buildThreeDSBrowserForm(nextAction);\n  const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n  const inputs = form.fields\n    .map(\n      (field) =>\n        `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n    )\n    .join(\"\");\n  const iframe =\n    form.target === \"hidden_iframe\"\n      ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n      : \"\";\n  return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n"]}
+{"version":3,"sources":["../../src/core/errors.ts","../../src/server/client.ts","../../src/three-ds/actions.ts"],"names":[],"mappings":";;;AAqBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACgCA,IAAM,gBAAA,GAAmB,6BAAA;AACzB,IAAM,WAAA,GAAc,YAAA;AACpB,IAAM,wBAAA,GAA2B,IAAA;AACjC,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,iCAAA,GAAsE;AAAA,EAC1E,YAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,kBAAkB,GAAA,EAAqC;AAC9D,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EACE,4FAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF;AAEA,IAAM,aAAA,GAAgB,CAAC,IAAA,KAAyB;AAC9C,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,MAAM,CAAA,IAAK,IAAA,CAAK,WAAW,GAAA,GAAM,CAAC,MAAM,EAAA,EAAI;AACjD,IAAA,GAAA,IAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC1B,CAAA;AAMA,IAAM,uBAAA,GAA0B,CAC9B,IAAA,KAC0C,IAAA,IAAA,IAAA,GAAA,IAAA,GAAQ,EAAC;AAErD,IAAM,kBAAA,GACJ,4EAAA;AAEF,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAwD;AACrF,EAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,+CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,qCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAA,CAAK,cAAA;AACd,CAAA;AAEA,IAAM,8BAAA,GAAiC,CAAC,IAAA,KAAuD;AApJ/F,EAAA,IAAA,EAAA;AAqJE,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,CAAK,cAAA,EAAgB;AACjC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,iBAAA;AAAA,MACN,OAAA,EAAS,4BAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,cAAA,KAAmB,WAAA,IAAe,CAAC,KAAK,aAAA,EAAe;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,wDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAM,WAAA,GAAA,CAAc,EAAA,GAAA,IAAA,CAAK,YAAA,KAAL,IAAA,GAAA,EAAA,GAAqB,KAAA;AACzC,EAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,6CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,mBAAmB,WAAA,EAAa;AACvC,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,0DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,IAAA,CAAK,kBAAA,CAAmB,QAAA,KAAa,IAAA,CAAK,cAAA,EAAgB;AAC5D,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,uDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,EAAE,GAAG,IAAA,EAAM,YAAA,EAAc,WAAA,EAAY;AAC9C,CAAA;AAEA,IAAM,WAAA,GAAc,CAAC,IAAA,EAAc,KAAA,KAA2B;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,UAAU,EAAA,EAAI;AAC3D,IAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,QAAA,EAAS;AAChC,EAAA,OAAO,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,GAAK,IAAA;AAC1C,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAQ,CAAC,SAAS,MAAA,KAAW;AAC/B,EAAA,IAAI,iCAAQ,OAAA,EAAS;AACnB,IAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAClE,IAAA;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AACpC,EAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,gBAAA;AAAA,IACN,OAAA;AAAA,IACA,MAAM;AACJ,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAAA,IACpE,CAAA;AAAA,IACA,EAAE,MAAM,IAAA;AAAK,GAAA;AAEjB,CAAC,CAAA;AAEH,IAAM,eAAA,GAAkB,CAAC,KAAA,EAA2B,QAAA,KAA6B;AAC/E,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,QAAA;AAChC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,gEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAA;AACT,CAAA;AAaA,IAAM,iBAAA,GAAoB,CAAC,KAAA,KACzB,KAAA,KAAU,kBAAA,IACV,KAAA,KAAU,sBAAA,IACV,KAAA,KAAU,qBAAA,IACV,KAAA,KAAU,aAAA,IACV,KAAA,KAAU,sBACV,KAAA,KAAU,WAAA;AAEZ,IAAM,gBAAA,GAAmB,CAAC,IAAA,EAAuB,MAAA,EAAgB,IAAA,KAA2B;AAC1F,EAAA,IAAI,IAAA,KAAS,oBAAoB,OAAO,IAAA;AACxC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,OAAO,IAAA,KAAS,eAAe,MAAA,IAAU,GAAA;AAC3C,CAAA;AAEA,IAAM,kBAAA,GAAqB,OAAO,GAAA,KAAwC;AArQ1E,EAAA,IAAA,EAAA,EAAA,EAAA;AAsQE,EAAA,IAAI,OAAqB,EAAC;AAC1B,EAAA,IAAI;AACF,IAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,EAER;AACA,EAAA,MAAM,MAAA,GAAA,CAAS,EAAA,GAAA,IAAA,CAAK,KAAA,KAAL,IAAA,GAAA,EAAA,GAAc,EAAC;AAC9B,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,MAAA,CAAO,IAAI,CAAA,GACtC,OAAO,IAAA,GACP,GAAA,CAAI,MAAA,IAAU,GAAA,GACZ,WAAA,GACA,kBAAA;AACN,EAAA,OAAO,IAAI,WAAA,CAAY;AAAA,IACrB,IAAA;AAAA,IACA,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,UAAS,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,CAAA,2BAAA,EAA8B,IAAI,MAAM,CAAA,CAAA;AAAA,IACnE,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,WAAW,MAAA,CAAO,UAAA;AAAA,IAClB,aAAa,MAAA,CAAO,YAAA;AAAA,IACpB,WAAW,gBAAA,CAAiB,IAAA,EAAM,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAI;AAAA,GAC1D,CAAA;AACH,CAAA;AAEO,IAAM,eAAN,MAAmB;AAAA,EAKxB,YAAY,OAAA,EAA8B;AAlS5C,IAAA,IAAA,EAAA,EAAA,EAAA;AAmSI,IAAA,MAAM,YAAqB,OAAA,CAAQ,SAAA;AACnC,IAAA,iBAAA,CAAkB,SAAS,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,IAAS,OAAO,UAAU,WAAA,EAAa;AAClD,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,WAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,oDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,OAAA,GAAU,aAAA,CAAA,CAAc,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,YAAmB,gBAAgB,CAAA;AAChE,IAAA,IAAA,CAAK,SAAA,GAAA,CAAY,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,KAAA;AAAA,EACpC;AAAA,EAEA,MAAM,YAAA,CACJ,KAAA,GAA2B,EAAC,EAC5B,IAAA,GAAuB,EAAC,EACF;AACtB,IAAA,OAAO,IAAA,CAAK,QAAqB,KAAA,EAAO,WAAA,CAAY,aAAa,KAAK,CAAA,EAAG,QAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAGA,MAAM,aAAA,CAAc,IAAA,EAA4B,IAAA,EAA6C;AAC3F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACpE;AAAA,EAGA,MAAM,eAAA,CAAgB,IAAA,EAA8B,IAAA,EAA6C;AAC/F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,cAAA,EAAgB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAA,CAAW,SAAA,EAAmB,IAAA,GAAuB,EAAC,EAAqB;AAC/E,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAAA,MAC1C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACJ,SAAA,EACA,IAAA,GAA8B,EAAC,EACb;AA/UtB,IAAA,IAAA,EAAA;AAgVI,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,IAAA,CAAK,UAAA,EAAY,wBAAwB,CAAA;AAC5E,IAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,IAAA,CAAK,SAAA,EAAW,uBAAuB,CAAA;AACzE,IAAA,MAAM,mBAAmB,IAAI,GAAA,CAAA,CAAI,EAAA,GAAA,IAAA,CAAK,gBAAA,KAAL,YAAyB,iCAAiC,CAAA;AAC3F,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,IAAA,WAAS;AACP,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACxE,MAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,OAAA,CAAQ,MAA+B,CAAA,EAAG;AACjE,QAAA,OAAO,OAAA;AAAA,MACT;AACA,MAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,IAAa,SAAA,EAAW;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY;AAAA,UACpB,IAAA,EAAM,WAAA;AAAA,UACN,IAAA,EAAM,sBAAA;AAAA,UACN,OAAA,EAAS,CAAA,QAAA,EAAW,SAAS,CAAA,wCAAA,EAA2C,SAAS,CAAA,EAAA,CAAA;AAAA,UACjF,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AACA,MAAA,MAAM,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,MAAM,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,WAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,KAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,YAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAMA,MAAM,eAAA,CACJ,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,KAAK,OAAA,CAAgC,MAAA,EAAQ,sBAAA,EAAwB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9F;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,MAAM,WAAA,GAAc,+BAA+B,IAAI,CAAA;AACvD,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,WAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,oBAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,2BAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACW;AACnC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,WAAA,CAAY,8BAA8B,KAAK,CAAA;AAAA,MAC/C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAGA,MAAM,UAAA,CAAW,IAAA,EAAyB,IAAA,EAA0C;AAClF,IAAA,OAAO,KAAK,OAAA,CAAc,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACtE,IAAA,OAAO,IAAA,CAAK,QAAc,KAAA,EAAO,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACzE,IAAA,OAAO,IAAA,CAAK,QAAc,QAAA,EAAU,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC7F;AAAA,EAMA,MAAM,qBAAA,CACJ,IAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,OAAO,KAAK,OAAA,CAAyB,MAAA,EAAQ,oBAAA,EAAsB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACrF;AAAA,EAEA,MAAc,QACZ,MAAA,EACA,IAAA,EACA,MACA,IAAA,GAA4B,MAAA,EAC5B,qBAAqB,KAAA,EACT;AACZ,IAAA,MAAM,WAAA,GAAc,wBAAwB,IAAI,CAAA;AAChD,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,MACvC,uBAAA,EAAyB,WAAA;AAAA,MACzB,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE,CAAA,MAAA,IAAW,WAAA,CAAY,cAAA,KAAmB,MAAA,EAAW;AACnD,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,KAAK,SAAA,CAAU,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QACnD,MAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAM,IAAA,KAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,QAC1D,QAAQ,WAAA,CAAY;AAAA,OACrB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,wBAAA;AAAA,QAC9C,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,mBAAmB,GAAG,CAAA;AAC/C,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,OAAA,KACjC,IAAI,aAAa,OAAO;;;AC7anB,IAAM,gBAAA,GAAmB,CAAC,UAAA,KAA6D;AAC5F,EAAA,OAAO,UAAA,IAAA,IAAA,GAAA,UAAA,GAAc,IAAA;AACvB;AAEO,IAAM,qBAAA,GAAwB,CAAC,UAAA,KAA4C;AAChF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,iBAAA,IAAqB,UAAA,CAAW,SAAS,KAAA,KAAU,QAAA;AACjF;AAEO,IAAM,wBAAA,GAA2B,CAAC,UAAA,KAA4C;AACnF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,oBAAA,IAAwB,UAAA,CAAW,SAAS,KAAA,KAAU,WAAA;AACpF;AAEO,IAAM,uBAAA,GAA0B,CAAC,UAAA,MAAoD;AAAA,EAC1F,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO;AACrC,CAAA;AAEA,IAAM,oBAAA,GAAuB,CAAC,MAAA,KAAyB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,MAAM,CAAA;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAChC,IAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,EAClD;AACF,CAAA;AAEO,IAAM,uBAAA,GAA0B,CACrC,UAAA,KAC8B;AAC9B,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAO,QAAA,CAAS,KAAA;AAAA,IACtB,eAAA,EAAiB,OAAO,QAAA,CAAS,OAAA;AAAA,IACjC,IAAA,EAAM,wBAAwB,MAAM,CAAA;AAAA,IACpC,kBAAA,EAAoB,OAAO,QAAA,CAAS,mBAAA;AAAA,IACpC,oBAAA,EAAsB,OAAO,QAAA,CAAS;AAAA,GACxC;AACF;AAEO,IAAM,4BAAA,GAA+B,CAC1C,UAAA,EACA,mBAAA,GAAuC,GAAA,KACyC;AAChF,EAAA,IAAI,CAAC,qBAAA,CAAsB,UAAU,KAAK,CAAC,UAAA,CAAW,SAAS,wBAAA,EAA0B;AACvF,IAAA,MAAM,IAAI,MAAM,2EAA2E,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO;AAAA,IACL,oBAAA,EAAsB,mBAAA;AAAA,IACtB,wBAAA,EAA0B,WAAW,QAAA,CAAS;AAAA,GAChD;AACF;AAwJA,IAAM,UAAA,GAAa,CAAC,KAAA,KAClB,KAAA,CACG,QAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,MAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAEnB,IAAM,0BAAA,GAA6B,CAAC,UAAA,KAA0C;AACnF,EAAA,MAAM,IAAA,GAAO,wBAAwB,UAAU,CAAA;AAC/C,EAAA,oBAAA,CAAqB,KAAK,MAAM,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,KAAW,eAAA,GAAkB,wBAAA,GAA2B,OAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,CACjB,GAAA;AAAA,IACC,CAAC,KAAA,KACC,CAAA,2BAAA,EAA8B,UAAA,CAAW,KAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAY,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,EAAA;AAAA,GAC3F,CACC,KAAK,EAAE,CAAA;AACV,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,KAAW,eAAA,GACZ,kFAAA,GACA,EAAA;AACN,EAAA,OAAO,CAAA,8DAAA,EAAiE,MAAM,CAAA,4BAAA,EAA+B,UAAA,CAAW,IAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAa,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,iEAAA,CAAA;AACpK","file":"index.cjs","sourcesContent":["export type ArcPayErrorType =\n  | \"validation_error\"\n  | \"authentication_error\"\n  | \"authorization_error\"\n  | \"state_error\"\n  | \"rate_limit_error\"\n  | \"api_error\"\n  | \"network_error\"\n  | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n  type: ArcPayErrorType;\n  message: string;\n  code?: string;\n  param?: string;\n  paymentId?: string;\n  declineCode?: string;\n  retryable: boolean;\n  requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n  readonly type: ArcPayErrorType;\n  readonly code?: string;\n  readonly param?: string;\n  readonly paymentId?: string;\n  readonly declineCode?: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n\n  constructor(init: ArcPayErrorInit) {\n    super(init.message);\n    this.name = \"ArcPayError\";\n    this.type = init.type;\n    this.code = init.code;\n    this.param = init.param;\n    this.paymentId = init.paymentId;\n    this.declineCode = init.declineCode;\n    this.retryable = init.retryable;\n    this.requestId = init.requestId;\n  }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n  e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError, type ArcPayErrorType } from \"../core/errors\";\nimport type {\n  AvailablePaymentMethod,\n  CaptureRequest,\n  ChargeSavedCardRequest,\n  CheckoutSession,\n  CompleteThreeDSMethodRequest,\n  CreateCheckoutSessionRequest,\n  CreateCardSetupRequest,\n  CreateLinkRequest,\n  CreatePaymentRequest,\n  CreateRefundRequest,\n  ExecutePaymentRequest,\n  ExecutePaymentResponse,\n  Link,\n  ListAvailablePaymentMethodsQuery,\n  ListPaymentsQuery,\n  Payment,\n  PaymentList,\n  PaymentNextAction,\n  Refund,\n  TerminalPaymentStatus,\n  VoidRequest,\n  WaitForPaymentOptions,\n} from \"./types\";\n\nexport type {\n  AvailablePaymentMethod,\n  CaptureMode,\n  CaptureRequest,\n  ChargeSavedCardRequest,\n  CheckoutSession,\n  CompleteThreeDSMethodRequest,\n  CreateCheckoutSessionRequest,\n  CreateCardSetupRequest,\n  CreateLinkRequest,\n  CreatePaymentRequest,\n  CreateRefundRequest,\n  Currency,\n  ExecutePaymentRequest,\n  ExecutePaymentResponse,\n  PaymentNextAction,\n  Link,\n  ListAvailablePaymentMethodsQuery,\n  ListPaymentsQuery,\n  Payment,\n  PaymentFlowMode,\n  PaymentList,\n  PaymentMethod,\n  PaymentStatus,\n  TerminalPaymentStatus,\n  Refund,\n  VoidRequest,\n  WaitForPaymentOptions,\n} from \"./types\";\n\nexport interface ArcPayClientOptions {\n  secretKey: string;\n  apiBase?: string;\n  fetch?: typeof fetch;\n}\n\nexport interface IdempotencyOptions {\n  idempotencyKey: string;\n  signal?: AbortSignal;\n}\n\ntype RequestOptionsInput = RequestOptions | IdempotencyOptions | null | undefined;\n\nexport interface RequestOptions {\n  signal?: AbortSignal;\n}\n\nconst DEFAULT_API_BASE = \"https://api.arcpay.space/v1\";\nconst API_VERSION = \"2026-05-06\";\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_POLL_TIMEOUT_MS = 60_000;\nconst DEFAULT_TERMINAL_PAYMENT_STATUSES: readonly TerminalPaymentStatus[] = [\n  \"authorized\",\n  \"captured\",\n  \"settled\",\n  \"voided\",\n  \"expired\",\n  \"refunded\",\n  \"chargeback\",\n  \"declined\",\n  \"failed\",\n];\n\nfunction validateSecretKey(key: unknown): asserts key is string {\n  if (typeof key !== \"string\" || key.length === 0) {\n    throw new ArcPayError({\n      type: \"authentication_error\",\n      code: \"invalid_secret_key\",\n      message: \"Secret key must be a non-empty string\",\n      retryable: false,\n    });\n  }\n  if (!key.startsWith(\"sk_test_\") && !key.startsWith(\"sk_live_\")) {\n    throw new ArcPayError({\n      type: \"authentication_error\",\n      code: \"invalid_secret_key\",\n      message:\n        \"Secret key must start with sk_test_ or sk_live_. Publishable keys cannot call server APIs.\",\n      retryable: false,\n    });\n  }\n}\n\nconst normalizeBase = (base: string): string => {\n  let end = base.length;\n  while (end > 0 && base.charCodeAt(end - 1) === 47) {\n    end -= 1;\n  }\n  return base.slice(0, end);\n};\n\ninterface RequestOptionsWithOptionalIdempotency extends RequestOptions {\n  idempotencyKey?: string;\n}\n\nconst normalizeRequestOptions = (\n  opts: RequestOptionsInput,\n): RequestOptionsWithOptionalIdempotency => opts ?? {};\n\nconst IDEMPOTENCY_KEY_RE =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\nconst requireIdempotencyKey = (opts: RequestOptionsWithOptionalIdempotency): string => {\n  if (!opts.idempotencyKey) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"missing_idempotency_key\",\n      message: \"idempotencyKey is required for this operation\",\n      retryable: false,\n    });\n  }\n  if (!IDEMPOTENCY_KEY_RE.test(opts.idempotencyKey)) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_idempotency_key\",\n      message: \"idempotencyKey must be a valid UUID\",\n      retryable: false,\n    });\n  }\n  return opts.idempotencyKey;\n};\n\nconst normalizeExecutePaymentRequest = (body: ExecutePaymentRequest): ExecutePaymentRequest => {\n  if (!body || !body.payment_method) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_request\",\n      message: \"payment_method is required\",\n      retryable: false,\n    });\n  }\n  if (body.payment_method === \"bank_card\" && !body.card_token_id) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"missing_card_token_id\",\n      message: \"card_token_id is required for bank_card executePayment\",\n      retryable: false,\n    });\n  }\n  const paymentMode = body.payment_mode ?? \"h2h\";\n  if (paymentMode !== \"h2h\") {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_payment_mode\",\n      message: \"payment_mode must be h2h for executePayment\",\n      retryable: false,\n    });\n  }\n  if (body.payment_method !== \"bank_card\") {\n    if (!body.wallet_interaction) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"invalid_request\",\n        message: \"wallet_interaction is required for wallet executePayment\",\n        retryable: false,\n      });\n    }\n    if (body.wallet_interaction.provider !== body.payment_method) {\n      throw new ArcPayError({\n        type: \"validation_error\",\n        code: \"invalid_request\",\n        message: \"wallet_interaction.provider must match payment_method\",\n        retryable: false,\n      });\n    }\n  }\n  return { ...body, payment_mode: paymentMode };\n};\n\nconst appendQuery = (path: string, query?: object): string => {\n  if (!query) return path;\n  const params = new URLSearchParams();\n  for (const [key, value] of Object.entries(query)) {\n    if (value === undefined || value === null || value === \"\") continue;\n    params.set(key, String(value));\n  }\n  const encoded = params.toString();\n  return encoded ? `${path}?${encoded}` : path;\n};\n\nconst sleep = (ms: number, signal?: AbortSignal): Promise<void> =>\n  new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      return;\n    }\n    const timer = setTimeout(resolve, ms);\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timer);\n        reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n\nconst normalizePollMs = (value: number | undefined, fallback: number): number => {\n  if (value === undefined) return fallback;\n  if (!Number.isFinite(value) || value <= 0) {\n    throw new ArcPayError({\n      type: \"validation_error\",\n      code: \"invalid_poll_options\",\n      message: \"Polling intervals and timeouts must be positive finite numbers\",\n      retryable: false,\n    });\n  }\n  return value;\n};\n\ninterface APIErrorBody {\n  error?: {\n    type?: string;\n    code?: string;\n    message?: string;\n    param?: string;\n    request_id?: string;\n    decline_code?: string;\n  };\n}\n\nconst isPublicErrorType = (value: unknown): value is ArcPayErrorType =>\n  value === \"validation_error\" ||\n  value === \"authentication_error\" ||\n  value === \"authorization_error\" ||\n  value === \"state_error\" ||\n  value === \"rate_limit_error\" ||\n  value === \"api_error\";\n\nconst isRetryableError = (type: ArcPayErrorType, status: number, code?: string): boolean => {\n  if (type === \"rate_limit_error\") return true;\n  if (code === \"timeout\") return false;\n  return type === \"api_error\" && status >= 500;\n};\n\nconst parseErrorResponse = async (res: Response): Promise<ArcPayError> => {\n  let body: APIErrorBody = {};\n  try {\n    body = (await res.json()) as APIErrorBody;\n  } catch {\n    /* keep default error below */\n  }\n  const detail = body.error ?? {};\n  const type = isPublicErrorType(detail.type)\n    ? detail.type\n    : res.status >= 500\n      ? \"api_error\"\n      : \"validation_error\";\n  return new ArcPayError({\n    type,\n    code: detail.code,\n    message: detail.message ?? `Request failed with status ${res.status}`,\n    param: detail.param,\n    requestId: detail.request_id,\n    declineCode: detail.decline_code,\n    retryable: isRetryableError(type, res.status, detail.code),\n  });\n};\n\nexport class ArcPayClient {\n  private readonly secretKey: string;\n  private readonly apiBase: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(options: ArcPayClientOptions) {\n    const secretKey: unknown = options.secretKey;\n    validateSecretKey(secretKey);\n    if (!options.fetch && typeof fetch === \"undefined\") {\n      throw new ArcPayError({\n        type: \"api_error\",\n        code: \"fetch_unavailable\",\n        message: \"A fetch implementation is required in this runtime\",\n        retryable: false,\n      });\n    }\n    this.secretKey = secretKey;\n    this.apiBase = normalizeBase(options.apiBase ?? DEFAULT_API_BASE);\n    this.fetchImpl = options.fetch ?? fetch;\n  }\n\n  async listPayments(\n    query: ListPaymentsQuery = {},\n    opts: RequestOptions = {},\n  ): Promise<PaymentList> {\n    return this.request<PaymentList>(\"GET\", appendQuery(\"/payments\", query), undefined, opts);\n  }\n\n  async createPayment(body: CreatePaymentRequest, opts: IdempotencyOptions): Promise<Payment>;\n  async createPayment(body: CreatePaymentRequest, opts: RequestOptionsInput): Promise<Payment> {\n    return this.request<Payment>(\"POST\", \"/payments\", body, opts, true);\n  }\n\n  async createCardSetup(body: CreateCardSetupRequest, opts: IdempotencyOptions): Promise<Payment>;\n  async createCardSetup(body: CreateCardSetupRequest, opts: RequestOptionsInput): Promise<Payment> {\n    return this.request<Payment>(\"POST\", \"/cards/setup\", body, opts, true);\n  }\n\n  async getPayment(paymentId: string, opts: RequestOptions = {}): Promise<Payment> {\n    return this.request<Payment>(\n      \"GET\",\n      `/payments/${encodeURIComponent(paymentId)}`,\n      undefined,\n      opts,\n    );\n  }\n\n  async waitForPaymentTerminal(\n    paymentId: string,\n    opts: WaitForPaymentOptions = {},\n  ): Promise<Payment> {\n    const intervalMs = normalizePollMs(opts.intervalMs, DEFAULT_POLL_INTERVAL_MS);\n    const timeoutMs = normalizePollMs(opts.timeoutMs, DEFAULT_POLL_TIMEOUT_MS);\n    const terminalStatuses = new Set(opts.terminalStatuses ?? DEFAULT_TERMINAL_PAYMENT_STATUSES);\n    const startedAt = Date.now();\n\n    for (;;) {\n      const payment = await this.getPayment(paymentId, { signal: opts.signal });\n      if (terminalStatuses.has(payment.status as TerminalPaymentStatus)) {\n        return payment;\n      }\n      if (Date.now() - startedAt >= timeoutMs) {\n        throw new ArcPayError({\n          type: \"api_error\",\n          code: \"payment_poll_timeout\",\n          message: `Payment ${paymentId} did not reach a terminal status within ${timeoutMs}ms`,\n          retryable: true,\n        });\n      }\n      await sleep(intervalMs, opts.signal);\n    }\n  }\n\n  async capturePayment(\n    paymentId: string,\n    body: CaptureRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Payment>;\n  async capturePayment(\n    paymentId: string,\n    body: CaptureRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Payment> {\n    return this.request<Payment>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/capture`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async voidPayment(\n    paymentId: string,\n    body: VoidRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Payment>;\n  async voidPayment(\n    paymentId: string,\n    body: VoidRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Payment> {\n    return this.request<Payment>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/void`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async createRefund(\n    paymentId: string,\n    body: CreateRefundRequest,\n    opts: IdempotencyOptions,\n  ): Promise<Refund>;\n  async createRefund(\n    paymentId: string,\n    body: CreateRefundRequest,\n    opts: RequestOptionsInput,\n  ): Promise<Refund> {\n    return this.request<Refund>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/refunds`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async chargeSavedCard(\n    body: ChargeSavedCardRequest,\n    opts: IdempotencyOptions,\n  ): Promise<ExecutePaymentResponse>;\n  async chargeSavedCard(\n    body: ChargeSavedCardRequest,\n    opts: RequestOptionsInput,\n  ): Promise<ExecutePaymentResponse> {\n    return this.request<ExecutePaymentResponse>(\"POST\", \"/payments/saved-card\", body, opts, true);\n  }\n\n  async executePayment(\n    paymentId: string,\n    body: ExecutePaymentRequest,\n    opts: IdempotencyOptions,\n  ): Promise<ExecutePaymentResponse>;\n  async executePayment(\n    paymentId: string,\n    body: ExecutePaymentRequest,\n    opts: RequestOptionsInput,\n  ): Promise<ExecutePaymentResponse> {\n    const requestBody = normalizeExecutePaymentRequest(body);\n    return this.request<ExecutePaymentResponse>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/execute`,\n      requestBody,\n      opts,\n      true,\n    );\n  }\n\n  async completeThreeDSMethod(\n    paymentId: string,\n    body: CompleteThreeDSMethodRequest,\n    opts: IdempotencyOptions,\n  ): Promise<ExecutePaymentResponse> {\n    return this.request<ExecutePaymentResponse>(\n      \"POST\",\n      `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,\n      body,\n      opts,\n      true,\n    );\n  }\n\n  async listAvailablePaymentMethods(\n    query: ListAvailablePaymentMethodsQuery,\n    opts: RequestOptions = {},\n  ): Promise<AvailablePaymentMethod[]> {\n    return this.request<AvailablePaymentMethod[]>(\n      \"GET\",\n      appendQuery(\"/payment-methods/available\", query),\n      undefined,\n      opts,\n    );\n  }\n\n  async createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;\n  async createLink(body: CreateLinkRequest, opts: RequestOptionsInput): Promise<Link> {\n    return this.request<Link>(\"POST\", \"/links\", body, opts, true);\n  }\n\n  async getLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n    return this.request<Link>(\"GET\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n  }\n\n  async cancelLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n    return this.request<Link>(\"DELETE\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n  }\n\n  async createCheckoutSession(\n    body: CreateCheckoutSessionRequest,\n    opts: IdempotencyOptions,\n  ): Promise<CheckoutSession>;\n  async createCheckoutSession(\n    body: CreateCheckoutSessionRequest,\n    opts: RequestOptionsInput,\n  ): Promise<CheckoutSession> {\n    return this.request<CheckoutSession>(\"POST\", \"/checkout/sessions\", body, opts, true);\n  }\n\n  private async request<T>(\n    method: \"GET\" | \"POST\" | \"DELETE\",\n    path: string,\n    body: unknown,\n    opts: RequestOptionsInput = undefined,\n    requireIdempotency = false,\n  ): Promise<T> {\n    const requestOpts = normalizeRequestOptions(opts);\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${this.secretKey}`,\n      \"X-Arc-Pay-API-Version\": API_VERSION,\n      \"Content-Type\": \"application/json\",\n    };\n    if (requireIdempotency) {\n      headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n    } else if (requestOpts.idempotencyKey !== undefined) {\n      headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n    }\n\n    let res: Response;\n    try {\n      res = await this.fetchImpl(`${this.apiBase}${path}`, {\n        method,\n        headers,\n        body: body === undefined ? undefined : JSON.stringify(body),\n        signal: requestOpts.signal,\n      });\n    } catch (err) {\n      throw new ArcPayError({\n        type: \"network_error\",\n        message: err instanceof Error ? err.message : \"Network request failed\",\n        retryable: true,\n      });\n    }\n    if (!res.ok) throw await parseErrorResponse(res);\n    return (await res.json()) as T;\n  }\n}\n\nexport const createArcPayClient = (options: ArcPayClientOptions): ArcPayClient =>\n  new ArcPayClient(options);\n","import type { CardBrowserInfo, ExecutePaymentResponse, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n  name: string;\n  value: string;\n}\n\nexport interface BrowserPostForm {\n  action: string;\n  method: \"POST\";\n  target: \"hidden_iframe\" | \"browser\";\n  fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n  kind: \"method\" | \"challenge\";\n  protocolVersion: \"1\" | \"2\";\n  form: BrowserPostForm;\n  completionEndpoint?: string;\n  threeDSServerTransId?: string;\n}\n\nexport interface MountedThreeDSForm {\n  form: HTMLFormElement;\n  iframe?: HTMLIFrameElement;\n  submit: () => void;\n  remove: () => void;\n}\n\nexport interface ThreeDSMountOptions {\n  document?: Document;\n  container?: HTMLElement;\n  challengeTarget?: \"_self\";\n  submitter?: (form: HTMLFormElement) => void;\n}\n\nexport interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {\n  methodCompletionIdempotencyKey: string;\n  completeThreeDSMethod: (\n    completion: ReturnType<typeof buildThreeDSMethodCompletion>,\n    nextAction: PaymentNextAction,\n    opts: { idempotencyKey: string },\n  ) => Promise<ExecutePaymentResponse>;\n  methodCompletionIndicator?: \"Y\" | \"N\" | \"U\";\n  methodTimeoutMs?: number;\n  signal?: AbortSignal;\n}\n\nexport type ThreeDSBrowserFlowResult =\n  | {\n      status: \"no_action\";\n      response?: ExecutePaymentResponse;\n    }\n  | {\n      status: \"method_completed\";\n      response: ExecutePaymentResponse;\n      methodResult: \"loaded\" | \"timeout\";\n    }\n  | {\n      status: \"challenge_submitted\";\n      action: PaymentNextAction;\n      response?: ExecutePaymentResponse;\n      mounted: MountedThreeDSForm;\n      methodResult?: \"loaded\" | \"timeout\";\n    };\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n  supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n    ? (value as BrowserInfo[\"color_depth\"])\n    : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n  if (width >= 1000) return \"05\";\n  if (width >= 600) return \"04\";\n  if (width >= 500) return \"03\";\n  if (width >= 390) return \"02\";\n  return \"01\";\n};\n\nexport const collectBrowserInfo = (\n  acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n  if (\n    typeof window === \"undefined\" ||\n    typeof navigator === \"undefined\" ||\n    typeof screen === \"undefined\"\n  ) {\n    throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n  }\n  return {\n    accept_header: acceptHeader,\n    language: navigator.language || \"en\",\n    screen_width: screen.width,\n    screen_height: screen.height,\n    color_depth: normalizeColorDepth(screen.colorDepth),\n    timezone_offset_minutes: new Date().getTimezoneOffset(),\n    java_enabled: false,\n    user_agent: navigator.userAgent,\n    window_size: resolveWindowSize(window.innerWidth || screen.width),\n  };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n  return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n  return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n  action: nextAction.three_ds.submit.url,\n  method: nextAction.three_ds.submit.method,\n  target: nextAction.three_ds.submit.target,\n  fields: nextAction.three_ds.submit.fields,\n});\n\nconst assertHTTPSActionURL = (action: string): void => {\n  let parsed: URL;\n  try {\n    parsed = new URL(action);\n  } catch {\n    throw new Error(\"3DS form action must be an absolute HTTPS URL\");\n  }\n  if (parsed.protocol !== \"https:\") {\n    throw new Error(\"3DS form action must use HTTPS\");\n  }\n};\n\nexport const buildThreeDSBrowserStep = (\n  nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n  const action = getThreeDSAction(nextAction);\n  if (!action) return null;\n  return {\n    kind: action.three_ds.phase,\n    protocolVersion: action.three_ds.version,\n    form: buildThreeDSBrowserForm(action),\n    completionEndpoint: action.three_ds.completion_endpoint,\n    threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n  };\n};\n\nexport const buildThreeDSMethodCompletion = (\n  nextAction: PaymentNextAction,\n  completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n  if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n    throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n  }\n  return {\n    completion_indicator: completionIndicator,\n    three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n  };\n};\n\nconst requireDocument = (explicitDocument?: Document): Document => {\n  if (explicitDocument) return explicitDocument;\n  if (typeof document === \"undefined\") {\n    throw new Error(\"3DS browser helpers must be called in a browser environment\");\n  }\n  return document;\n};\n\nconst defaultSubmitter = (form: HTMLFormElement): void => {\n  form.submit();\n};\n\nexport const mountThreeDSBrowserForm = (\n  nextAction: PaymentNextAction,\n  options: ThreeDSMountOptions = {},\n): MountedThreeDSForm => {\n  const doc = requireDocument(options.document);\n  const container = options.container ?? doc.body;\n  const formDescriptor = buildThreeDSBrowserForm(nextAction);\n  assertHTTPSActionURL(formDescriptor.action);\n  const form = doc.createElement(\"form\");\n  const target =\n    formDescriptor.target === \"hidden_iframe\"\n      ? `arcpay-three-ds-method-${Math.random().toString(36).slice(2)}`\n      : (options.challengeTarget ?? \"_self\");\n  let iframe: HTMLIFrameElement | undefined;\n\n  form.method = formDescriptor.method;\n  form.action = formDescriptor.action;\n  form.target = target;\n  form.hidden = true;\n\n  for (const field of formDescriptor.fields) {\n    const input = doc.createElement(\"input\");\n    input.type = \"hidden\";\n    input.name = field.name;\n    input.value = field.value;\n    form.append(input);\n  }\n\n  if (formDescriptor.target === \"hidden_iframe\") {\n    iframe = doc.createElement(\"iframe\");\n    iframe.name = target;\n    iframe.title = \"3-D Secure method\";\n    iframe.hidden = true;\n    container.append(iframe);\n  }\n\n  container.append(form);\n\n  return {\n    form,\n    iframe,\n    submit: () => (options.submitter ?? defaultSubmitter)(form),\n    remove: () => {\n      form.remove();\n      iframe?.remove();\n    },\n  };\n};\n\nconst waitForMethodFrame = (\n  mounted: MountedThreeDSForm,\n  timeoutMs: number,\n  signal?: AbortSignal,\n): Promise<\"loaded\" | \"timeout\"> =>\n  new Promise((resolve, reject) => {\n    if (!mounted.iframe) {\n      resolve(\"loaded\");\n      return;\n    }\n    if (signal?.aborted) {\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n      return;\n    }\n\n    let settled = false;\n    const cleanup = () => {\n      mounted.iframe?.removeEventListener(\"load\", onLoad);\n      signal?.removeEventListener(\"abort\", onAbort);\n      clearTimeout(timer);\n    };\n    const settle = (result: \"loaded\" | \"timeout\") => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      resolve(result);\n    };\n    const onLoad = () => settle(\"loaded\");\n    const onAbort = () => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n    };\n    const timer = setTimeout(() => settle(\"timeout\"), timeoutMs);\n\n    mounted.iframe.addEventListener(\"load\", onLoad, { once: true });\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n\nexport const runThreeDSBrowserFlow = async (\n  nextAction: PaymentNextAction | undefined,\n  options: RunThreeDSBrowserFlowOptions,\n): Promise<ThreeDSBrowserFlowResult> => {\n  if (!nextAction) return { status: \"no_action\" };\n\n  if (isThreeDSChallengeAction(nextAction)) {\n    const mounted = mountThreeDSBrowserForm(nextAction, options);\n    mounted.submit();\n    return { status: \"challenge_submitted\", action: nextAction, mounted };\n  }\n\n  if (!isThreeDSMethodAction(nextAction)) return { status: \"no_action\" };\n  if (!options.methodCompletionIdempotencyKey) {\n    throw new Error(\"methodCompletionIdempotencyKey is required for 3DS Method completion\");\n  }\n\n  const mounted = mountThreeDSBrowserForm(nextAction, options);\n  try {\n    mounted.submit();\n    const methodResult = await waitForMethodFrame(\n      mounted,\n      options.methodTimeoutMs ?? 10_000,\n      options.signal,\n    );\n    const indicator = options.methodCompletionIndicator ?? (methodResult === \"loaded\" ? \"Y\" : \"N\");\n    const response = await options.completeThreeDSMethod(\n      buildThreeDSMethodCompletion(nextAction, indicator),\n      nextAction,\n      { idempotencyKey: options.methodCompletionIdempotencyKey },\n    );\n    const followUpAction = getThreeDSAction(response.next_action);\n    if (followUpAction && isThreeDSChallengeAction(followUpAction)) {\n      const challengeMounted = mountThreeDSBrowserForm(followUpAction, options);\n      challengeMounted.submit();\n      return {\n        status: \"challenge_submitted\",\n        action: followUpAction,\n        response,\n        mounted: challengeMounted,\n        methodResult,\n      };\n    }\n    return { status: \"method_completed\", response, methodResult };\n  } finally {\n    mounted.remove();\n  }\n};\n\nconst htmlEscape = (value: string): string =>\n  value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n  const form = buildThreeDSBrowserForm(nextAction);\n  assertHTTPSActionURL(form.action);\n  const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n  const inputs = form.fields\n    .map(\n      (field) =>\n        `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n    )\n    .join(\"\");\n  const iframe =\n    form.target === \"hidden_iframe\"\n      ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n      : \"\";\n  return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n"]}

package/dist/server/index.d.cts

@@ -1,5 +1,5 @@
-import { m as ListPaymentsQuery, o as PaymentList, i as CreatePaymentRequest, P as Payment, f as CreateCardSetupRequest, W as WaitForPaymentOptions, C as CaptureRequest, V as VoidRequest, j as CreateRefundRequest, R as Refund, c as ChargeSavedCardRequest, k as ExecutePaymentResponse, E as ExecutePaymentRequest, e as CompleteThreeDSMethodRequest, l as ListAvailablePaymentMethodsQuery, A as AvailablePaymentMethod, h as CreateLinkRequest, L as Link, g as CreateCheckoutSessionRequest, d as CheckoutSession } from '../actions-BYQh0wu2.cjs';
-export { B as BrowserFormField, b as BrowserPostForm, n as PaymentFlowMode, p as PaymentMethod, q as PaymentNextAction, T as ThreeDSAction, r as ThreeDSBrowserStep, s as buildThreeDSAutoSubmitHtml, t as buildThreeDSBrowserForm, u as buildThreeDSBrowserStep, v as buildThreeDSMethodCompletion, x as getThreeDSAction, y as isThreeDSChallengeAction, z as isThreeDSMethodAction } from '../actions-BYQh0wu2.cjs';
+import { m as ListPaymentsQuery, o as PaymentList, i as CreatePaymentRequest, P as Payment, f as CreateCardSetupRequest, W as WaitForPaymentOptions, C as CaptureRequest, V as VoidRequest, j as CreateRefundRequest, R as Refund, c as ChargeSavedCardRequest, k as ExecutePaymentResponse, E as ExecutePaymentRequest, e as CompleteThreeDSMethodRequest, l as ListAvailablePaymentMethodsQuery, A as AvailablePaymentMethod, h as CreateLinkRequest, L as Link, g as CreateCheckoutSessionRequest, d as CheckoutSession } from '../actions-BqOvavQk.cjs';
+export { B as BrowserFormField, b as BrowserPostForm, n as PaymentFlowMode, p as PaymentMethod, q as PaymentNextAction, T as ThreeDSAction, t as ThreeDSBrowserStep, v as buildThreeDSAutoSubmitHtml, w as buildThreeDSBrowserForm, x as buildThreeDSBrowserStep, y as buildThreeDSMethodCompletion, D as getThreeDSAction, F as isThreeDSChallengeAction, G as isThreeDSMethodAction } from '../actions-BqOvavQk.cjs';
 
 interface ArcPayClientOptions {
     secretKey: string;
@@ -28,7 +28,7 @@ declare class ArcPayClient {
     createRefund(paymentId: string, body: CreateRefundRequest, opts: IdempotencyOptions): Promise<Refund>;
     chargeSavedCard(body: ChargeSavedCardRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
     executePayment(paymentId: string, body: ExecutePaymentRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
-    completeThreeDSMethod(paymentId: string, body: CompleteThreeDSMethodRequest, opts?: RequestOptions): Promise<ExecutePaymentResponse>;
+    completeThreeDSMethod(paymentId: string, body: CompleteThreeDSMethodRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
     listAvailablePaymentMethods(query: ListAvailablePaymentMethodsQuery, opts?: RequestOptions): Promise<AvailablePaymentMethod[]>;
     createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;
     getLink(linkId: string, opts?: RequestOptions): Promise<Link>;

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
-import { m as ListPaymentsQuery, o as PaymentList, i as CreatePaymentRequest, P as Payment, f as CreateCardSetupRequest, W as WaitForPaymentOptions, C as CaptureRequest, V as VoidRequest, j as CreateRefundRequest, R as Refund, c as ChargeSavedCardRequest, k as ExecutePaymentResponse, E as ExecutePaymentRequest, e as CompleteThreeDSMethodRequest, l as ListAvailablePaymentMethodsQuery, A as AvailablePaymentMethod, h as CreateLinkRequest, L as Link, g as CreateCheckoutSessionRequest, d as CheckoutSession } from '../actions-BYQh0wu2.js';
-export { B as BrowserFormField, b as BrowserPostForm, n as PaymentFlowMode, p as PaymentMethod, q as PaymentNextAction, T as ThreeDSAction, r as ThreeDSBrowserStep, s as buildThreeDSAutoSubmitHtml, t as buildThreeDSBrowserForm, u as buildThreeDSBrowserStep, v as buildThreeDSMethodCompletion, x as getThreeDSAction, y as isThreeDSChallengeAction, z as isThreeDSMethodAction } from '../actions-BYQh0wu2.js';
+import { m as ListPaymentsQuery, o as PaymentList, i as CreatePaymentRequest, P as Payment, f as CreateCardSetupRequest, W as WaitForPaymentOptions, C as CaptureRequest, V as VoidRequest, j as CreateRefundRequest, R as Refund, c as ChargeSavedCardRequest, k as ExecutePaymentResponse, E as ExecutePaymentRequest, e as CompleteThreeDSMethodRequest, l as ListAvailablePaymentMethodsQuery, A as AvailablePaymentMethod, h as CreateLinkRequest, L as Link, g as CreateCheckoutSessionRequest, d as CheckoutSession } from '../actions-BqOvavQk.js';
+export { B as BrowserFormField, b as BrowserPostForm, n as PaymentFlowMode, p as PaymentMethod, q as PaymentNextAction, T as ThreeDSAction, t as ThreeDSBrowserStep, v as buildThreeDSAutoSubmitHtml, w as buildThreeDSBrowserForm, x as buildThreeDSBrowserStep, y as buildThreeDSMethodCompletion, D as getThreeDSAction, F as isThreeDSChallengeAction, G as isThreeDSMethodAction } from '../actions-BqOvavQk.js';
 
 interface ArcPayClientOptions {
     secretKey: string;
@@ -28,7 +28,7 @@ declare class ArcPayClient {
     createRefund(paymentId: string, body: CreateRefundRequest, opts: IdempotencyOptions): Promise<Refund>;
     chargeSavedCard(body: ChargeSavedCardRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
     executePayment(paymentId: string, body: ExecutePaymentRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
-    completeThreeDSMethod(paymentId: string, body: CompleteThreeDSMethodRequest, opts?: RequestOptions): Promise<ExecutePaymentResponse>;
+    completeThreeDSMethod(paymentId: string, body: CompleteThreeDSMethodRequest, opts: IdempotencyOptions): Promise<ExecutePaymentResponse>;
     listAvailablePaymentMethods(query: ListAvailablePaymentMethodsQuery, opts?: RequestOptions): Promise<AvailablePaymentMethod[]>;
     createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;
     getLink(linkId: string, opts?: RequestOptions): Promise<Link>;

package/dist/server/index.mjs

@@ -280,12 +280,13 @@ var ArcPayClient = class {
       true
     );
   }
-  async completeThreeDSMethod(paymentId, body, opts = {}) {
+  async completeThreeDSMethod(paymentId, body, opts) {
     return this.request(
       "POST",
       `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,
       body,
-      opts
+      opts,
+      true
     );
   }
   async listAvailablePaymentMethods(query, opts = {}) {
@@ -357,6 +358,17 @@ var buildThreeDSBrowserForm = (nextAction) => ({
   target: nextAction.three_ds.submit.target,
   fields: nextAction.three_ds.submit.fields
 });
+var assertHTTPSActionURL = (action) => {
+  let parsed;
+  try {
+    parsed = new URL(action);
+  } catch (e) {
+    throw new Error("3DS form action must be an absolute HTTPS URL");
+  }
+  if (parsed.protocol !== "https:") {
+    throw new Error("3DS form action must use HTTPS");
+  }
+};
 var buildThreeDSBrowserStep = (nextAction) => {
   const action = getThreeDSAction(nextAction);
   if (!action) return null;
@@ -380,6 +392,7 @@ var buildThreeDSMethodCompletion = (nextAction, completionIndicator = "Y") => {
 var htmlEscape = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 var buildThreeDSAutoSubmitHtml = (nextAction) => {
   const form = buildThreeDSBrowserForm(nextAction);
+  assertHTTPSActionURL(form.action);
   const target = form.target === "hidden_iframe" ? "arcpay-three-ds-method" : "_self";
   const inputs = form.fields.map(
     (field) => `<input type="hidden" name="${htmlEscape(field.name)}" value="${htmlEscape(field.value)}">`