@thavguard/arc-pay 0.1.22 → 0.1.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/react/provider.tsx","../../src/react/use-arcpay.ts","../../src/react/index.ts"],"names":["validatePublishableKey","React2"],"mappings":";;;;AAsBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACtCO,IAAM,oBAAoB,CAAC,cAAA,KAChC,eAAe,UAAA,CAAW,UAAU,IAAI,SAAA,GAAY,MAAA;AAE/C,IAAM,sBAAA,GAAyB,CAAC,GAAA,KAAwC;AAC7E,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,4CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EACE,qGAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF,CAAA;;;ACzBA,IAAM,WAAA,GAAc,4BAAA;AAEb,IAAM,oBAAoB,MAAY;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,IAAI,QAAA,CAAS,aAAA,CAAc,CAAA,CAAA,EAAI,WAAW,GAAG,CAAA,EAAG;AAEhD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AACxC,EAAA,GAAA,CAAI,YAAA,CAAa,aAAa,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,MAAM,OAAA,GACR,uOAAA;AAEF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA;AAC1C,EAAA,IAAA,CAAK,WAAA,GAAc,iDAAA;AACnB,EAAA,GAAA,CAAI,YAAY,IAAI,CAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC/C,EAAA,OAAA,CAAQ,IAAA,GAAO,QAAA;AACf,EAAA,OAAA,CAAQ,YAAA,CAAa,8BAA8B,EAAE,CAAA;AACrD,EAAA,OAAA,CAAQ,WAAA,GAAc,MAAA;AACtB,EAAA,OAAA,CAAQ,YAAA,CAAa,cAAc,0BAA0B,CAAA;AAC7D,EAAA,OAAA,CAAQ,MAAM,OAAA,GACZ,+FAAA;AACF,EAAA,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,MAAM,GAAA,CAAI,QAAQ,CAAA;AACpD,EAAA,GAAA,CAAI,YAAY,OAAO,CAAA;AAEvB,EAAA,QAAA,CAAS,IAAA,CAAK,YAAY,GAAG,CAAA;AAC/B,CAAA;;;ACqBA,IAAM,kBAAA,GAAqB,SAAA;AAE3B,IAAM,kBAAkB,CAAC,IAAA,KACvB,OAAO,IAAA,KAAS,YAChB,IAAA,KAAS,IAAA,IACT,MAAA,IAAU,IAAA,IACV,OAAQ,IAAA,CAA2B,IAAA,KAAS,YAC3C,IAAA,CAA0B,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAExD,IAAM,YAAA,GAAe,CAC1B,MAAA,EACA,OAAA,EACA,YAAA,KACS;AACT,EAAA,IAAI,iBAAiB,GAAA,EAAK;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,2BAAA;AAAA,MACN,OAAA,EAAS,0CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,mBAAA;AAAA,MACN,OAAA,EAAS,iEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAA,CAAO,aAAA,CAAc,WAAA,CAAY,OAAA,EAAS,YAAY,CAAA;AACxD,CAAA;AASO,IAAM,aAAA,GAAgB,CAC3B,KAAA,EACA,cAAA,KACa;AACb,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,cAAA,EAAgB,OAAO,IAAA;AAC5C,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,CAAM,IAAI,GAAG,OAAO,IAAA;AACzC,EAAA,OAAO,KAAA,CAAM,IAAA;AACf,CAAA;;;ACvFA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA0D;AAC/E,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAM,aAAA,GAAgB,IAAI,WAAA,EAAY;AACtC,IAAA,IAAI,oBAAA,CAAqB,GAAA,CAAI,aAAa,CAAA,EAAG;AAE3C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EACb;AACA,EAAA,OAAO,GAAA;AACT,CAAA;AAEO,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AAChE,EAAA,MAAM,SAAsB,EAAE,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,IAAI,CAAA,EAAE;AAC9D,EAAA,IAAI,MAAM,OAAA,KAAY,MAAA,SAAkB,OAAA,GAAU,aAAA,CAAc,MAAM,OAAO,CAAA;AAC7E,EAAA,IAAI,MAAM,KAAA,KAAU,MAAA,SAAkB,KAAA,GAAQ,aAAA,CAAc,MAAM,KAAK,CAAA;AACvE,EAAA,OAAO,MAAA;AACT,CAAA;;;ACRO,IAAM,UAAN,MAAc;AAAA,EAUnB,WAAA,CACkB,KAAA,EACC,OAAA,EACA,OAAA,EACjB;AAHgB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAZnB,IAAA,IAAA,CAAQ,MAAA,GAAmC,IAAA;AAC3C,IAAA,IAAA,CAAiB,SAAA,GAAqD;AAAA,MACpE,KAAA,sBAAW,GAAA,EAAc;AAAA,MACzB,MAAA,sBAAY,GAAA,EAAc;AAAA,MAC1B,KAAA,sBAAW,GAAA;AAAc,KAC3B;AACA,IAAA,IAAA,CAAQ,MAAA,GAAwC,SAAA;AAChD,IAAA,IAAA,CAAQ,cAAA,GAAqD,IAAA;AAAA,EAM1D;AAAA,EAEH,MAAM,MAAA,EAAoC;AACxC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,YAAY,OAAO,MAAA,KAAW,WAAW,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA,GAAI,MAAA;AAChF,IAAA,IAAI,EAAE,qBAAqB,WAAA,CAAA,EAAc;AACvC,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,wBAAA;AAAA,QACN,OAAA,EAAS,CAAA,wBAAA,EAA2B,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AAAA,QAClD,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,IAAA,CAAK,QAAQ,UAAU,CAAA,QAAA,EAAW,KAAK,KAAK,CAAA,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAM,OAAA,GAAU,gDAAA;AACvB,IAAA,MAAA,CAAO,YAAA,CAAa,SAAS,SAAS,CAAA;AACtC,IAAA,MAAA,CAAO,YAAA,CAAa,qBAAA,EAAuB,IAAA,CAAK,KAAK,CAAA;AACrD,IAAA,SAAA,CAAU,YAAY,MAAM,CAAA;AAC5B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAM,iBAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAA;AAExD,IAAA,IAAA,CAAK,cAAA,GAAiB,CAAC,KAAA,KAAwB;AA5EnD,MAAA,IAAA,EAAA;AAgFM,MAAA,IAAI,KAAA,CAAM,MAAA,MAAA,CAAW,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,mBAAa,aAAA,CAAA,EAAe;AAEjD,MAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,cAAc,CAAA;AAChE,MAAA,IAAI,CAAC,IAAA,EAAM;AACX,MAAA,IAAA,CAAK,cAAc,IAAI,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AAEtD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,MAAA;AAAA,MACA,MAAM;AACJ,QAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,QAAA,MAAM,KAAA,GAAwB;AAAA,UAC5B,IAAA,EAAM,cAAA;AAAA,UACN,MAAA,EAAQ,OAAO,QAAA,CAAS,MAAA;AAAA,UACxB,cAAA,EAAgB,KAAK,OAAA,CAAQ,cAAA;AAAA,UAC7B,SAAA,EAAW,KAAK,OAAA,CAAQ;AAAA,SAC1B;AACA,QAAA,YAAA,CAAa,IAAA,CAAK,MAAA,EAAQ,KAAA,EAAO,cAAc,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA4B;AAChD,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAChC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AAEd,MAAA,IAAI,IAAA,CAAK,QAAQ,KAAA,EAAO;AACtB,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,cAAc,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,MAChF;AACA,MAAA,IAAI,IAAA,CAAK,QAAQ,WAAA,EAAa;AAC5B,QAAA,IAAA,CAAK,IAAA,CAAK;AAAA,UACR,IAAA,EAAM,oBAAA;AAAA,UACN,OAAO,IAAA,CAAK,KAAA;AAAA,UACZ,WAAA,EAAa,KAAK,OAAA,CAAQ;AAAA,SAC3B,CAAA;AAAA,MACH;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,IAC7B,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,iBAAA,EAAmB;AAC1C,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAK,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClD,WAAW,IAAA,CAAK,IAAA,KAAS,mBAAmB,IAAA,CAAK,KAAA,KAAU,KAAK,KAAA,EAAO;AACrE,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAAA,EAEF;AAAA,EAEA,OAAO,OAAA,EAA8D;AACnE,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,SAAS,aAAA,CAAc,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAA;AAAA,IAC3E;AACA,IAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,oBAAA;AAAA,QACN,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,aAAa,OAAA,CAAQ;AAAA,OACtB,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,IAAA,CAAK,OAAO,MAAA,EAAO;AACnB,MAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AACzD,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,IACxB;AACA,IAAA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,EAAG;AACrD,MAAA,SAAA,CAAU,KAAA,EAAM;AAAA,IAClB;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AAAA,EAChB;AAAA,EAEA,EAAA,CAAG,OAAyB,QAAA,EAAgC;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAE,GAAA,CAAI,QAAQ,CAAA;AAClC,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAE,OAAO,QAAQ,CAAA;AAAA,EACpD;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,OAAA,GAAmB;AACjB,IAAA,OAAO,KAAK,MAAA,KAAW,OAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,sBAAA,GAAwC;AAvL1C,IAAA,IAAA,EAAA,EAAA,EAAA;AAwLI,IAAA,OAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,aAAA,KAAb,IAAA,GAAA,EAAA,GAA8B,IAAA;AAAA,EACvC;AAAA;AAAA,EAGA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,aAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,YAAA,CAAa,IAAA,CAAK,QAAQ,OAAA,EAAS,IAAI,IAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAM,CAAA;AAAA,EAC5E;AAAA,EAEQ,KAAK,KAAA,EAA2B;AACtC,IAAA,KAAA,MAAW,QAAA,IAAY,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAA,EAAG;AACjD,MAAA,QAAA,CAAS,KAAK,CAAA;AAAA,IAChB;AAAA,EACF;AACF,CAAA;;;ACnMA,IAAM,mBAAA,GAAsB,0BAAA;AAE5B,IAAM,kBAAkB,MAAc;AAZtC,EAAA,IAAA,EAAA;AAaE,EAAA,IAAI,EAAA,CAAC,EAAA,GAAA,UAAA,CAAW,MAAA,KAAX,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmB,UAAA,CAAA,EAAY;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,iDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AACtC,CAAA;AAEO,IAAM,WAAN,MAAe;AAAA,EAOpB,YAAY,IAAA,EAAuD;AANnE,IAAA,IAAA,CAAiB,UAAA,uBAAiB,GAAA,EAAwB;AAI1D,IAAA,IAAA,CAAQ,gBAAA,GAAmB,KAAA;AA7B7B,IAAA,IAAA,EAAA;AAgCI,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,UAAA,GAAA,CAAa,EAAA,GAAA,IAAA,CAAK,UAAA,KAAL,IAAA,GAAA,EAAA,GAAmB,mBAAA;AACrC,IAAA,IAAA,CAAK,YAAY,eAAA,EAAgB;AAAA,EACnC;AAAA,EAEA,MAAA,CAAO,KAAA,EAAkB,OAAA,GAA0B,EAAC,EAAY;AAC9D,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAK,CAAA,EAAG;AAC9B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,eAAe,KAAK,CAAA,gBAAA,CAAA;AAAA,QAC7B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,gBAAgB,IAAA,CAAK,cAAA;AAAA,MACrB,WAAW,IAAA,CAAK;AAAA,KAClB;AACA,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,KAAA,EAAO,SAAS,GAAG,CAAA;AAC/C,IAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,EAAO,OAAO,CAAA;AAClC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,QAAA,CAAS,SAAA,EAAmB,cAAA,EAAiD;AAEjF,IAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,sBAAA;AAAA,QACN,OAAA,EAAS,qEAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA;AAE7C,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC1C,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,qBAAA;AAAA,QACN,OAAA,EACE,oGAAA;AAAA,QACF,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,OAAA,CAAQ,OAAA,EAAQ,EAAG;AACxE,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,oBAAA;AAAA,QACN,OAAA,EAAS,+DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,UAAA,EAAY,WAAW,cAAc,CAAA;AAAA,IACpE,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,gBAAA,GAAmB,KAAA;AAAA,IAC1B;AAAA,EACF;AAAA,EAEQ,UAAA,CACN,UAAA,EACA,SAAA,EACA,cAAA,EACyB;AACzB,IAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAG9C,IAAA,MAAM,gBAAA,GAAmB,WAAW,sBAAA,EAAuB;AAE3D,IAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,EAAS,MAAA,KAAW;AAEtD,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,MAAM;AACpC,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,QAAA,MAAA;AAAA,UACE,IAAI,WAAA,CAAY;AAAA,YACd,IAAA,EAAM,eAAA;AAAA,YACN,IAAA,EAAM,kBAAA;AAAA,YACN,OAAA,EAAS,uCAAA;AAAA,YACT,SAAA,EAAW,IAAA;AAAA,YACX;AAAA,WACD;AAAA,SACH;AAAA,MACF,GAAG,GAAM,CAAA;AAET,MAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAAwB;AAEzC,QAAA,IAAI,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,MAAA,KAAW,gBAAA,EAAkB;AAEpE,QAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,YAAY,CAAA;AAC9D,QAAA,IAAI,CAAC,IAAA,EAAM;AAEX,QAAA,IAAI,IAAA,CAAK,SAAS,wBAAA,EAA0B;AAC1C,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,OAAA,CAAQ;AAAA,YACN,aAAa,IAAA,CAAK,WAAA;AAAA,YAClB,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,YAAY,IAAA,CAAK,UAAA;AAAA,YACjB,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,WAAW,IAAA,CAAK;AAAA,WACjB,CAAA;AAAA,QACH,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,uBAAA,EAAyB;AAChD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,MAAA;AAAA,YACE,IAAI,WAAA,CAAY;AAAA,cACd,IAAA,EACE,IAAA,CAAK,SAAA,KAAc,kBAAA,IACnB,KAAK,SAAA,KAAc,qBAAA,IACnB,IAAA,CAAK,SAAA,KAAc,eAAA,IACnB,IAAA,CAAK,SAAA,KAAc,WAAA,GACf,KAAK,SAAA,GACL,WAAA;AAAA,cACN,MAAM,IAAA,CAAK,IAAA;AAAA,cACX,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,SAAA,EAAW,KAAA;AAAA,cACX;AAAA,aACD;AAAA,WACH;AAAA,QACF;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,MAAA,UAAA,CAAW,KAAK,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAA,EAAW,gBAAgB,CAAA;AAAA,IACxE,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,EAAG;AACzC,MAAA,EAAA,CAAG,OAAA,EAAQ;AAAA,IACb;AACA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AACF,CAAA;;;ACpKA,IAAMA,uBAAAA,GAAkE,sBAAA;AAYxE,IAAM,KAAA,uBAAY,GAAA,EAAqC;AAEvD,IAAM,aAAA,GAAgB,CAAC,cAAA,KAA2C;AAChE,EAAA,IAAI,iBAAA,CAAkB,cAAc,CAAA,KAAM,SAAA,EAAW;AACnD,IAAA,iBAAA,EAAkB;AAAA,EACpB;AACA,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,WAAA,EAAa,kBAAkB,cAAc,CAAA;AAAA,IAC7C,UAAU,MAAM,IAAI,QAAA,CAAS,EAAE,gBAAgB;AAAA,GACjD;AACF,CAAA;AAEA,SAAS,KAAK,cAAA,EAAiD;AAC7D,EAAA,IAAI;AACF,IAAAA,wBAAuB,cAAc,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,MAAM,GAAA,GAAM,cAAA;AACZ,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC9B,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,cAAc,CAAC,CAAA;AAC7D,EAAA,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACtB,EAAA,OAAO,OAAA;AACT;AAEA,IAAM,gBAAgB,MAAY;AAChC,EAAA,KAAA,CAAM,KAAA,EAAM;AACd,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,IAAA;AAAA,EACA,eAAA,EAAiB;AACnB,CAAA;AC9CA,IAAM,GAAA,GAAY,oBAAkC,IAAI,CAAA;AAOjD,IAAM,cAAA,GAAgD,CAAC,EAAE,cAAA,EAAgB,UAAS,KAAM;AAC7F,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAU,KAAA,CAAA,QAAA,CAAsB;AAAA,IACpD,MAAA,EAAQ,SAAA;AAAA,IACR,QAAA,EAAU,IAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACR,CAAA;AAED,EAAM,gBAAU,MAAM;AACpB,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CACvB,IAAA,CAAK,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,EAAE,QAAQ,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACpE,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAmB;AACzB,MAAA,IAAI,CAAC,QAAA;AACH,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,QAAA,EAAU,IAAA;AAAA,UACV,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC;AAAA,SAChE,CAAA;AAAA,IACL,CAAC,CAAA;AACH,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,cAAc,CAAC,CAAA;AAEnB,EAAA,2BAAQ,GAAA,CAAI,QAAA,EAAJ,EAAa,KAAA,EAAO,OAAQ,QAAA,EAAS,CAAA;AAC/C;AAEO,IAAM,aAAA,GAAgB;ACzCtB,IAAM,YAAY,MAAmB;AAC1C,EAAA,MAAM,GAAA,GAAYC,iBAAW,aAAa,CAAA;AAC1C,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC7E,EAAA,OAAO,GAAA;AACT;;;ACJO,IAAM,qBAAA,GAAwB","file":"index.mjs","sourcesContent":["export type ArcPayErrorType =\n | \"validation_error\"\n | \"configuration_error\"\n | \"authentication_error\"\n | \"authorization_error\"\n | \"state_error\"\n | \"rate_limit_error\"\n | \"api_error\"\n | \"network_error\"\n | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n type: ArcPayErrorType;\n message: string;\n code?: string;\n param?: string;\n paymentId?: string;\n declineCode?: string;\n retryable: boolean;\n requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n readonly type: ArcPayErrorType;\n readonly code?: string;\n readonly param?: string;\n readonly paymentId?: string;\n readonly declineCode?: string;\n readonly retryable: boolean;\n readonly requestId?: string;\n\n constructor(init: ArcPayErrorInit) {\n super(init.message);\n this.name = \"ArcPayError\";\n this.type = init.type;\n this.code = init.code;\n this.param = init.param;\n this.paymentId = init.paymentId;\n this.declineCode = init.declineCode;\n this.retryable = init.retryable;\n this.requestId = init.requestId;\n }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isConfigurationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"configuration_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n if (typeof key !== \"string\" || key.length === 0) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_publishable_key\",\n message: \"Publishable key must be a non-empty string\",\n retryable: false,\n });\n }\n if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_publishable_key\",\n message:\n \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n retryable: false,\n });\n }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n if (typeof document === \"undefined\") return;\n if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n const bar = document.createElement(\"div\");\n bar.setAttribute(BANNER_ATTR, \"\");\n bar.style.cssText =\n \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n const text = document.createElement(\"span\");\n text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n bar.appendChild(text);\n\n const dismiss = document.createElement(\"button\");\n dismiss.type = \"button\";\n dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n dismiss.textContent = \"×\";\n dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n dismiss.style.cssText =\n \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n dismiss.addEventListener(\"click\", () => bar.remove());\n bar.appendChild(dismiss);\n\n document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n | { type: \"arcpay:style\"; payload: StyleSubset }\n | { type: \"arcpay:placeholder\"; field: FieldType; placeholder: string }\n | { type: \"arcpay:focus\" }\n | { type: \"arcpay:clear\" }\n | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n | { type: \"arcpay:ready\" }\n | { type: \"arcpay:rejected\"; reason: string }\n | {\n type: \"arcpay:change\";\n field: FieldType;\n isValid: boolean;\n brand?: string;\n lastFour?: string;\n }\n | {\n type: \"arcpay:tokenize-result\";\n cardTokenId: string;\n cardMask: string;\n cardScheme: string;\n cardBin: string;\n expiresIn: number;\n expiresAt: string;\n }\n | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n base: Record<string, string>;\n invalid?: Record<string, string>;\n focus?: Record<string, string>;\n}\n\nexport type TokenizeErrorType =\n | \"validation_error\"\n | \"configuration_error\"\n | \"network_error\"\n | \"api_error\";\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n typeof data === \"object\" &&\n data !== null &&\n \"type\" in data &&\n typeof (data as { type: unknown }).type === \"string\" &&\n (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n iframe: HTMLIFrameElement,\n message: ParentToIframe,\n targetOrigin: string,\n): void => {\n if (targetOrigin === \"*\") {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"wildcard_origin_forbidden\",\n message: \"postToIframe: targetOrigin cannot be '*'\",\n retryable: false,\n });\n }\n if (!iframe.contentWindow) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"iframe_not_loaded\",\n message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n retryable: false,\n });\n }\n iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n if (targetOrigin === \"*\") {\n throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n }\n window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n event: MessageEvent,\n expectedOrigin: string,\n): T | null => {\n if (event.origin !== expectedOrigin) return null;\n if (!isArcpayMessage(event.data)) return null;\n return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\n// Spec calls out position:fixed, transform, pointer-events:none as forbidden.\n// We extend to cover the full clickjacking attack surface: any positioning\n// (fixed/absolute/sticky), transform, all pointer-events values, z-index, and\n// inset properties (top/left/right/bottom/inset). The legitimate use cases\n// for these in a 1-line input field are zero, so blanket drop.\nconst FORBIDDEN_PROPERTIES = new Set([\n \"position\",\n \"transform\",\n \"pointer-events\",\n \"pointerevents\",\n \"z-index\",\n \"zindex\",\n \"top\",\n \"left\",\n \"right\",\n \"bottom\",\n \"inset\",\n]);\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n const out: Record<string, string> = {};\n for (const [key, value] of Object.entries(block)) {\n const normalizedKey = key.toLowerCase();\n if (FORBIDDEN_PROPERTIES.has(normalizedKey)) {\n // Defense against position/transform-based clickjacking. Silently drop.\n continue;\n }\n out[key] = value;\n }\n return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n const result: StyleSubset = { base: sanitizeBlock(style.base) };\n if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n return result;\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n type FieldType,\n type ParentToIframe,\n type IframeToParent,\n type StyleSubset,\n postToIframe,\n parseIncoming,\n} from \"./postmessage\";\nimport { sanitizeStyle } from \"./style\";\n\nexport interface ElementOptions {\n /** StyleSubset applied via arcpay:style postMessage. */\n style?: StyleSubset;\n placeholder?: string;\n}\n\nexport type ElementEvent =\n | { type: \"ready\" }\n | { type: \"change\"; isValid: boolean; brand?: string; lastFour?: string }\n | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\ntype ElementEventName = ElementEvent[\"type\"];\n\nexport interface ElementContext {\n iframeBase: string;\n publishableKey: string;\n channelId: string;\n}\n\nexport class Element {\n private iframe: HTMLIFrameElement | null = null;\n private readonly listeners: Record<ElementEventName, Set<Listener>> = {\n ready: new Set<Listener>(),\n change: new Set<Listener>(),\n error: new Set<Listener>(),\n };\n private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n constructor(\n public readonly field: FieldType,\n private readonly options: ElementOptions,\n private readonly context: ElementContext,\n ) {}\n\n mount(target: string | HTMLElement): void {\n if (this.iframe) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"already_mounted\",\n message: `Element ${this.field} is already mounted`,\n retryable: false,\n });\n }\n const container = typeof target === \"string\" ? document.querySelector(target) : target;\n if (!(container instanceof HTMLElement)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"mount_target_not_found\",\n message: `mount target not found: ${String(target)}`,\n retryable: false,\n });\n }\n\n const iframe = document.createElement(\"iframe\");\n iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n iframe.setAttribute(\"allow\", \"payment\");\n iframe.setAttribute(\"data-arcpay-element\", this.field);\n container.appendChild(iframe);\n this.iframe = iframe;\n\n const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n this.messageHandler = (event: MessageEvent) => {\n // C1: source guard — only accept messages from this element's own iframe.\n // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n // could trigger handlers on cardNumber and vice-versa.\n if (event.source !== this.iframe?.contentWindow) return;\n // C4: use parseIncoming for origin + arcpay: prefix guard.\n const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n if (!data) return;\n this.handleMessage(data);\n };\n window.addEventListener(\"message\", this.messageHandler);\n\n iframe.addEventListener(\n \"load\",\n () => {\n if (!this.iframe) return;\n const hello: ParentToIframe = {\n type: \"arcpay:hello\",\n origin: window.location.origin,\n publishableKey: this.context.publishableKey,\n channelId: this.context.channelId,\n };\n postToIframe(this.iframe, hello, expectedOrigin);\n },\n { once: true },\n );\n }\n\n private handleMessage(data: IframeToParent): void {\n if (data.type === \"arcpay:ready\") {\n this.status = \"ready\";\n // Apply initial style if provided at construction time.\n if (this.options.style) {\n this.send({ type: \"arcpay:style\", payload: sanitizeStyle(this.options.style) });\n }\n if (this.options.placeholder) {\n this.send({\n type: \"arcpay:placeholder\",\n field: this.field,\n placeholder: this.options.placeholder,\n });\n }\n this.emit({ type: \"ready\" });\n } else if (data.type === \"arcpay:rejected\") {\n this.status = \"error\";\n this.emit({ type: \"error\", reason: data.reason });\n } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n this.emit({\n type: \"change\",\n isValid: data.isValid,\n brand: data.brand,\n lastFour: data.lastFour,\n });\n }\n // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n }\n\n update(options: { style?: StyleSubset; placeholder?: string }): void {\n if (options.style) {\n this.send({ type: \"arcpay:style\", payload: sanitizeStyle(options.style) });\n }\n if (options.placeholder) {\n this.send({\n type: \"arcpay:placeholder\",\n field: this.field,\n placeholder: options.placeholder,\n });\n }\n }\n\n destroy(): void {\n if (this.iframe) {\n this.iframe.remove();\n this.iframe = null;\n }\n if (this.messageHandler) {\n window.removeEventListener(\"message\", this.messageHandler);\n this.messageHandler = null;\n }\n for (const listeners of Object.values(this.listeners)) {\n listeners.clear();\n }\n this.status = \"pending\";\n }\n\n on(event: ElementEventName, callback: Listener): () => void {\n this.listeners[event].add(callback);\n return () => this.listeners[event].delete(callback);\n }\n\n focus(): void {\n this.send({ type: \"arcpay:focus\" });\n }\n\n clear(): void {\n this.send({ type: \"arcpay:clear\" });\n }\n\n isReady(): boolean {\n return this.status === \"ready\";\n }\n\n /**\n * Internal: returns the iframe's contentWindow for source-filtering in\n * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n * or when jsdom has not yet populated contentWindow (test environment).\n */\n getIframeContentWindow(): Window | null {\n return this.iframe?.contentWindow ?? null;\n }\n\n /** Internal: used by Elements factory to send tokenize commands. */\n send(message: ParentToIframe): void {\n if (!this.iframe) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"not_mounted\",\n message: `Element ${this.field} is not mounted`,\n retryable: false,\n });\n }\n postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n }\n\n private emit(event: ElementEvent): void {\n for (const listener of this.listeners[event.type]) {\n listener(event);\n }\n }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\n\nexport type { TokenizeResult };\n\nexport type ElementsOptions = Record<string, never>;\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n if (!globalThis.crypto?.randomUUID) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"crypto_unavailable\",\n message: \"crypto.randomUUID is required for Hosted Fields\",\n retryable: false,\n });\n }\n return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n private readonly elementMap = new Map<FieldType, Element>();\n private readonly iframeBase: string;\n private readonly publishableKey: string;\n private readonly channelId: string;\n private tokenizeInFlight = false;\n\n constructor(opts: { publishableKey: string; iframeBase?: string }) {\n this.publishableKey = opts.publishableKey;\n this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n this.channelId = createChannelId();\n }\n\n create(field: FieldType, options: ElementOptions = {}): Element {\n if (this.elementMap.has(field)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"duplicate_element\",\n message: `Element for ${field} already created`,\n retryable: false,\n });\n }\n const ctx: ElementContext = {\n iframeBase: this.iframeBase,\n publishableKey: this.publishableKey,\n channelId: this.channelId,\n };\n const element = new Element(field, options, ctx);\n this.elementMap.set(field, element);\n return element;\n }\n\n async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n if (this.tokenizeInFlight) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"tokenize_in_progress\",\n message: \"A tokenize() call is already in progress for this Elements instance\",\n retryable: false,\n });\n }\n\n const cardNumber = this.elementMap.get(\"cardNumber\");\n const cardExpiry = this.elementMap.get(\"cardExpiry\");\n const cardCvv = this.elementMap.get(\"cardCvv\");\n\n if (!cardNumber || !cardExpiry || !cardCvv) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"incomplete_elements\",\n message:\n \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n retryable: false,\n });\n }\n if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"elements_not_ready\",\n message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n retryable: false,\n });\n }\n\n this.tokenizeInFlight = true;\n try {\n return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n } finally {\n this.tokenizeInFlight = false;\n }\n }\n\n private doTokenize(\n cardNumber: Element,\n paymentId: string,\n idempotencyKey: string,\n ): Promise<TokenizeResult> {\n const iframeOrigin = new URL(this.iframeBase).origin;\n // C1: obtain reference to the cardNumber iframe's contentWindow before\n // registering the listener so we can filter by source.\n const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n return new Promise<TokenizeResult>((resolve, reject) => {\n // C3: 30-second timeout — rejects and cleans up if no result arrives.\n const timer = window.setTimeout(() => {\n window.removeEventListener(\"message\", onMessage);\n reject(\n new ArcPayError({\n type: \"network_error\",\n code: \"tokenize_timeout\",\n message: \"tokenize() timed out after 30 seconds\",\n retryable: true,\n paymentId,\n }),\n );\n }, 30_000);\n\n const onMessage = (event: MessageEvent) => {\n // C1: source guard — only accept messages from the cardNumber iframe.\n if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n // C4: use parseIncoming for origin + arcpay: prefix guard.\n const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n if (!data) return;\n\n if (data.type === \"arcpay:tokenize-result\") {\n clearTimeout(timer);\n window.removeEventListener(\"message\", onMessage);\n resolve({\n cardTokenId: data.cardTokenId,\n cardMask: data.cardMask,\n cardScheme: data.cardScheme,\n cardBin: data.cardBin,\n expiresIn: data.expiresIn,\n expiresAt: data.expiresAt,\n });\n } else if (data.type === \"arcpay:tokenize-error\") {\n clearTimeout(timer);\n window.removeEventListener(\"message\", onMessage);\n reject(\n new ArcPayError({\n type:\n data.errorType === \"validation_error\" ||\n data.errorType === \"configuration_error\" ||\n data.errorType === \"network_error\" ||\n data.errorType === \"api_error\"\n ? data.errorType\n : \"api_error\",\n code: data.code,\n message: data.message,\n retryable: false,\n paymentId,\n }),\n );\n }\n };\n\n window.addEventListener(\"message\", onMessage);\n cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n });\n }\n\n destroy(): void {\n for (const el of this.elementMap.values()) {\n el.destroy();\n }\n this.elementMap.clear();\n }\n}\n","import {\n detectEnvironment,\n type Environment,\n validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n readonly publishableKey: string;\n readonly environment: Environment;\n elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n if (detectEnvironment(publishableKey) === \"sandbox\") {\n showSandboxBanner();\n }\n return {\n publishableKey,\n environment: detectEnvironment(publishableKey),\n elements: () => new Elements({ publishableKey }),\n };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n try {\n validatePublishableKey(publishableKey);\n } catch (err) {\n return Promise.reject(err);\n }\n const key = publishableKey;\n const existing = cache.get(key);\n if (existing) return existing;\n const promise = Promise.resolve(buildInstance(publishableKey));\n cache.set(key, promise);\n return promise;\n}\n\nconst resetForTests = (): void => {\n cache.clear();\n};\n\nexport const ArcPay = {\n load,\n __resetForTests: resetForTests,\n};\n","import { ArcPay, type ArcPayInstance } from \"../index\";\nimport * as React from \"react\";\n\nexport type ArcPayState =\n | { status: \"loading\"; instance: null; error: null }\n | { status: \"ready\"; instance: ArcPayInstance; error: null }\n | { status: \"error\"; instance: null; error: Error };\n\nconst Ctx = React.createContext<ArcPayState | null>(null);\n\nexport interface ArcPayProviderProps {\n publishableKey: string;\n children: React.ReactNode;\n}\n\nexport const ArcPayProvider: React.FC<ArcPayProviderProps> = ({ publishableKey, children }) => {\n const [state, setState] = React.useState<ArcPayState>({\n status: \"loading\",\n instance: null,\n error: null,\n });\n\n React.useEffect(() => {\n let canceled = false;\n ArcPay.load(publishableKey)\n .then((instance) => {\n if (!canceled) setState({ status: \"ready\", instance, error: null });\n })\n .catch((error: unknown) => {\n if (!canceled)\n setState({\n status: \"error\",\n instance: null,\n error: error instanceof Error ? error : new Error(String(error)),\n });\n });\n return () => {\n canceled = true;\n };\n }, [publishableKey]);\n\n return <Ctx.Provider value={state}>{children}</Ctx.Provider>;\n};\n\nexport const ArcPayContext = Ctx;\n","import * as React from \"react\";\nimport { ArcPayContext, type ArcPayState } from \"./provider\";\n\nexport const useArcPay = (): ArcPayState => {\n const ctx = React.useContext(ArcPayContext);\n if (!ctx) throw new Error(\"useArcPay must be called within an ArcPayProvider\");\n return ctx;\n};\n","export { ArcPayProvider, ArcPayContext } from \"./provider\";\nexport type { ArcPayProviderProps, ArcPayState } from \"./provider\";\nexport { useArcPay } from \"./use-arcpay\";\nexport const REACT_WRAPPER_VERSION = \"0.1.22\";\n"]}
1
+ {"version":3,"sources":["../../src/core/errors.ts","../../src/core/env.ts","../../src/core/sandbox-banner.ts","../../src/elements/postmessage.ts","../../src/elements/style.ts","../../src/elements/element.ts","../../src/elements/elements.ts","../../src/core/arcpay.ts","../../src/react/provider.tsx","../../src/react/use-arcpay.ts","../../src/react/index.ts"],"names":["validatePublishableKey","React2"],"mappings":";;;;AAsBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACtCO,IAAM,oBAAoB,CAAC,cAAA,KAChC,eAAe,UAAA,CAAW,UAAU,IAAI,SAAA,GAAY,MAAA;AAE/C,IAAM,sBAAA,GAAyB,CAAC,GAAA,KAAwC;AAC7E,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,4CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EACE,qGAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF,CAAA;;;ACzBA,IAAM,WAAA,GAAc,4BAAA;AAEb,IAAM,oBAAoB,MAAY;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,IAAI,QAAA,CAAS,aAAA,CAAc,CAAA,CAAA,EAAI,WAAW,GAAG,CAAA,EAAG;AAEhD,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AACxC,EAAA,GAAA,CAAI,YAAA,CAAa,aAAa,EAAE,CAAA;AAChC,EAAA,GAAA,CAAI,MAAM,OAAA,GACR,uOAAA;AAEF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA;AAC1C,EAAA,IAAA,CAAK,WAAA,GAAc,iDAAA;AACnB,EAAA,GAAA,CAAI,YAAY,IAAI,CAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC/C,EAAA,OAAA,CAAQ,IAAA,GAAO,QAAA;AACf,EAAA,OAAA,CAAQ,YAAA,CAAa,8BAA8B,EAAE,CAAA;AACrD,EAAA,OAAA,CAAQ,WAAA,GAAc,MAAA;AACtB,EAAA,OAAA,CAAQ,YAAA,CAAa,cAAc,0BAA0B,CAAA;AAC7D,EAAA,OAAA,CAAQ,MAAM,OAAA,GACZ,+FAAA;AACF,EAAA,OAAA,CAAQ,gBAAA,CAAiB,OAAA,EAAS,MAAM,GAAA,CAAI,QAAQ,CAAA;AACpD,EAAA,GAAA,CAAI,YAAY,OAAO,CAAA;AAEvB,EAAA,QAAA,CAAS,IAAA,CAAK,YAAY,GAAG,CAAA;AAC/B,CAAA;;;ACqBA,IAAM,kBAAA,GAAqB,SAAA;AAE3B,IAAM,kBAAkB,CAAC,IAAA,KACvB,OAAO,IAAA,KAAS,YAChB,IAAA,KAAS,IAAA,IACT,MAAA,IAAU,IAAA,IACV,OAAQ,IAAA,CAA2B,IAAA,KAAS,YAC3C,IAAA,CAA0B,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAExD,IAAM,YAAA,GAAe,CAC1B,MAAA,EACA,OAAA,EACA,YAAA,KACS;AACT,EAAA,IAAI,iBAAiB,GAAA,EAAK;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,2BAAA;AAAA,MACN,OAAA,EAAS,0CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,mBAAA;AAAA,MACN,OAAA,EAAS,iEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,MAAA,CAAO,aAAA,CAAc,WAAA,CAAY,OAAA,EAAS,YAAY,CAAA;AACxD,CAAA;AASO,IAAM,aAAA,GAAgB,CAC3B,KAAA,EACA,cAAA,KACa;AACb,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,cAAA,EAAgB,OAAO,IAAA;AAC5C,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,CAAM,IAAI,GAAG,OAAO,IAAA;AACzC,EAAA,OAAO,KAAA,CAAM,IAAA;AACf,CAAA;;;AClEA,IAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,EACjC,4BAAA;AAAA,EACA,kBAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,aAAA;AAAA,EACA,gBAAA;AAAA,EACA,aAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,YAAA,GAA4B;AAAA,EAChC,IAAA,EAAM;AAAA,IACJ,aAAA,EACE,4FAAA;AAAA,IACF,WAAA,EAAa,MAAA;AAAA,IACb,aAAA,EAAe,MAAA;AAAA,IACf,KAAA,EAAO,SAAA;AAAA,IACP,4BAAA,EAA8B,SAAA;AAAA,IAC9B,aAAA,EAAe;AAAA,GACjB;AAAA,EACA,KAAA,EAAO;AAAA,IACL,KAAA,EAAO;AAAA,GACT;AAAA,EACA,OAAA,EAAS;AAAA,IACP,KAAA,EAAO;AAAA,GACT;AAAA,EACA,QAAA,EAAU;AAAA,IACR,KAAA,EAAO;AAAA,GACT;AAAA,EACA,KAAA,EAAO;AAAA,IACL,KAAA,EAAO;AAAA;AAEX,CAAA;AAEA,IAAM,UAAA,GAAa,CACjB,MAAA,EACA,MAAA,KACuC;AACvC,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,MAAA;AAC/B,EAAA,OAAO,EAAE,GAAI,MAAA,IAAA,IAAA,GAAA,MAAA,GAAU,IAAK,GAAI,MAAA,IAAA,IAAA,GAAA,MAAA,GAAU,EAAC,EAAG;AAChD,CAAA;AAEA,IAAM,YAAA,GAAe,CACnB,KAAA,EACA,GAAA,EACA,KAAA,KACS;AACT,EAAA,IAAI,KAAA,KAAU,MAAA,EAAW,KAAA,CAAM,GAAG,CAAA,GAAI,KAAA;AACxC,CAAA;AAEA,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA0D;AAC/E,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,MAAM,aAAA,GAAgB,IAAI,WAAA,EAAY;AACtC,IAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,aAAa,CAAA,EAAG;AAC1C,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,aAAa,CAAA,GAAI,KAAA;AAAA,EACvB;AACA,EAAA,OAAO,GAAA;AACT,CAAA;AAEO,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AAChE,EAAA,MAAM,SAAsB,EAAE,IAAA,EAAM,aAAA,CAAc,KAAA,CAAM,IAAI,CAAA,EAAE;AAC9D,EAAA,IAAI,MAAM,OAAA,KAAY,MAAA,SAAkB,OAAA,GAAU,aAAA,CAAc,MAAM,OAAO,CAAA;AAC7E,EAAA,IAAI,MAAM,KAAA,KAAU,MAAA,SAAkB,KAAA,GAAQ,aAAA,CAAc,MAAM,KAAK,CAAA;AACvE,EAAA,IAAI,MAAM,QAAA,KAAa,MAAA,SAAkB,QAAA,GAAW,aAAA,CAAc,MAAM,QAAQ,CAAA;AAChF,EAAA,IAAI,MAAM,KAAA,KAAU,MAAA,SAAkB,KAAA,GAAQ,aAAA,CAAc,MAAM,KAAK,CAAA;AACvE,EAAA,OAAO,MAAA;AACT,CAAA;AAEO,IAAM,wBAAA,GAA2B,CAAC,UAAA,KAAqD;AA1G9F,EAAA,IAAA,EAAA;AA2GE,EAAA,MAAM,UAAA,GAAA,CAA0B,yCAAY,KAAA,MAAU,QAAA,GAAW,eAAe,EAAE,IAAA,EAAM,EAAC,EAAE;AAC3F,EAAA,MAAM,aAAA,GAA6B,EAAE,IAAA,EAAM,EAAC,EAAE;AAC9C,EAAA,MAAM,YAAY,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,SAAA;AAE9B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,aAAA,EAAe,SAAA,CAAU,UAAU,CAAA;AACpE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,WAAA,EAAa,SAAA,CAAU,QAAQ,CAAA;AAChE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,aAAA,EAAe,SAAA,CAAU,UAAU,CAAA;AACpE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,YAAA,EAAc,SAAA,CAAU,SAAS,CAAA;AAClE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,aAAA,EAAe,SAAA,CAAU,UAAU,CAAA;AACpE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,gBAAA,EAAkB,SAAA,CAAU,aAAa,CAAA;AAC1E,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,YAAA,EAAc,SAAA,CAAU,SAAS,CAAA;AAClE,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,OAAA,EAAS,SAAA,CAAU,SAAS,CAAA;AAC7D,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,4BAAA,EAA8B,SAAA,CAAU,gBAAgB,CAAA;AACzF,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,kBAAA,EAAoB,SAAA,CAAU,eAAe,CAAA;AAC9E,IAAA,YAAA,CAAa,aAAA,CAAc,IAAA,EAAM,aAAA,EAAe,SAAA,CAAU,UAAU,CAAA;AAEpE,IAAA,IAAI,SAAA,CAAU,gBAAgB,MAAA,EAAW;AACvC,MAAA,aAAA,CAAc,OAAA,GAAU,EAAE,KAAA,EAAO,SAAA,CAAU,WAAA,EAAY;AAAA,IACzD;AACA,IAAA,IAAI,SAAA,CAAU,iBAAiB,MAAA,EAAW;AACxC,MAAA,aAAA,CAAc,QAAA,GAAW,EAAE,KAAA,EAAO,SAAA,CAAU,YAAA,EAAa;AAAA,IAC3D;AAAA,EACF;AAEA,EAAA,MAAM,QAAQ,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,KAAA;AAC1B,EAAA,MAAM,QAAA,GAAwB;AAAA,IAC5B,IAAA,EAAM;AAAA,MACJ,GAAG,UAAA,CAAW,IAAA;AAAA,MACd,GAAG,aAAA,CAAc,IAAA;AAAA,MACjB,GAAA,CAAI,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,IAAA,KAAP,IAAA,GAAA,EAAA,GAAe;AAAC;AACtB,GACF;AAEA,EAAA,MAAM,KAAA,GAAQ,WAAW,UAAA,CAAW,UAAA,CAAW,OAAO,aAAA,CAAc,KAAK,CAAA,EAAG,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,KAAK,CAAA;AACxF,EAAA,MAAM,OAAA,GAAU,WAAW,UAAA,CAAW,UAAA,CAAW,SAAS,aAAA,CAAc,OAAO,CAAA,EAAG,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,OAAO,CAAA;AAChG,EAAA,MAAM,QAAA,GAAW,UAAA;AAAA,IACf,UAAA,CAAW,UAAA,CAAW,QAAA,EAAU,aAAA,CAAc,QAAQ,CAAA;AAAA,IACtD,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO;AAAA,GACT;AACA,EAAA,MAAM,KAAA,GAAQ,WAAW,UAAA,CAAW,UAAA,CAAW,OAAO,aAAA,CAAc,KAAK,CAAA,EAAG,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,KAAK,CAAA;AAExF,EAAA,IAAI,KAAA,KAAU,MAAA,EAAW,QAAA,CAAS,KAAA,GAAQ,KAAA;AAC1C,EAAA,IAAI,OAAA,KAAY,MAAA,EAAW,QAAA,CAAS,OAAA,GAAU,OAAA;AAC9C,EAAA,IAAI,QAAA,KAAa,MAAA,EAAW,QAAA,CAAS,QAAA,GAAW,QAAA;AAChD,EAAA,IAAI,KAAA,KAAU,MAAA,EAAW,QAAA,CAAS,KAAA,GAAQ,KAAA;AAE1C,EAAA,OAAO,cAAc,QAAQ,CAAA;AAC/B,CAAA;;;AC5HA,IAAM,YAAA,GAA0C;AAAA,EAC9C,UAAA,EAAY,qBAAA;AAAA,EACZ,UAAA,EAAY,8BAAA;AAAA,EACZ,OAAA,EAAS;AACX,CAAA;AAQO,IAAM,UAAN,MAAc;AAAA,EAUnB,WAAA,CACkB,KAAA,EACC,OAAA,EACA,OAAA,EACjB;AAHgB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAZnB,IAAA,IAAA,CAAQ,MAAA,GAAmC,IAAA;AAC3C,IAAA,IAAA,CAAiB,SAAA,GAAqD;AAAA,MACpE,KAAA,sBAAW,GAAA,EAAc;AAAA,MACzB,MAAA,sBAAY,GAAA,EAAc;AAAA,MAC1B,KAAA,sBAAW,GAAA;AAAc,KAC3B;AACA,IAAA,IAAA,CAAQ,MAAA,GAAwC,SAAA;AAChD,IAAA,IAAA,CAAQ,cAAA,GAAqD,IAAA;AAAA,EAM1D;AAAA,EAEH,MAAM,MAAA,EAAoC;AACxC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,mBAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,YAAY,OAAO,MAAA,KAAW,WAAW,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA,GAAI,MAAA;AAChF,IAAA,IAAI,EAAE,qBAAqB,WAAA,CAAA,EAAc;AACvC,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,wBAAA;AAAA,QACN,OAAA,EAAS,CAAA,wBAAA,EAA2B,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AAAA,QAClD,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,IAAA,CAAK,QAAQ,UAAU,CAAA,QAAA,EAAW,KAAK,KAAK,CAAA,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAM,OAAA,GAAU,gDAAA;AACvB,IAAA,MAAA,CAAO,YAAA,CAAa,SAAS,SAAS,CAAA;AACtC,IAAA,MAAA,CAAO,YAAA,CAAa,qBAAA,EAAuB,IAAA,CAAK,KAAK,CAAA;AACrD,IAAA,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS,YAAA,CAAa,IAAA,CAAK,KAAK,CAAC,CAAA;AACrD,IAAA,MAAA,CAAO,YAAA,CAAa,YAAA,EAAc,YAAA,CAAa,IAAA,CAAK,KAAK,CAAC,CAAA;AAC1D,IAAA,SAAA,CAAU,YAAY,MAAM,CAAA;AAC5B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAM,iBAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAA;AAExD,IAAA,IAAA,CAAK,cAAA,GAAiB,CAAC,KAAA,KAAwB;AA1FnD,MAAA,IAAA,EAAA;AA8FM,MAAA,IAAI,KAAA,CAAM,MAAA,MAAA,CAAW,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,mBAAa,aAAA,CAAA,EAAe;AAEjD,MAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,cAAc,CAAA;AAChE,MAAA,IAAI,CAAC,IAAA,EAAM;AACX,MAAA,IAAA,CAAK,cAAc,IAAI,CAAA;AAAA,IACzB,CAAA;AACA,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AAEtD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,MAAA;AAAA,MACA,MAAM;AACJ,QAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,QAAA,MAAM,KAAA,GAAwB;AAAA,UAC5B,IAAA,EAAM,cAAA;AAAA,UACN,MAAA,EAAQ,OAAO,QAAA,CAAS,MAAA;AAAA,UACxB,cAAA,EAAgB,KAAK,OAAA,CAAQ,cAAA;AAAA,UAC7B,SAAA,EAAW,KAAK,OAAA,CAAQ;AAAA,SAC1B;AACA,QAAA,YAAA,CAAa,IAAA,CAAK,MAAA,EAAQ,KAAA,EAAO,cAAc,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA4B;AAChD,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAChC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAI,IAAA,CAAK,QAAQ,UAAA,EAAY;AAC3B,QAAA,IAAA,CAAK,IAAA,CAAK;AAAA,UACR,IAAA,EAAM,cAAA;AAAA,UACN,OAAA,EAAS,wBAAA,CAAyB,IAAA,CAAK,OAAA,CAAQ,UAAU;AAAA,SAC1D,CAAA;AAAA,MACH;AACA,MAAA,IAAI,IAAA,CAAK,QAAQ,WAAA,EAAa;AAC5B,QAAA,IAAA,CAAK,IAAA,CAAK;AAAA,UACR,IAAA,EAAM,oBAAA;AAAA,UACN,OAAO,IAAA,CAAK,KAAA;AAAA,UACZ,WAAA,EAAa,KAAK,OAAA,CAAQ;AAAA,SAC3B,CAAA;AAAA,MACH;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,IAC7B,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,iBAAA,EAAmB;AAC1C,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAK,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,IAClD,WAAW,IAAA,CAAK,IAAA,KAAS,mBAAmB,IAAA,CAAK,KAAA,KAAU,KAAK,KAAA,EAAO;AACrE,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,QAAA;AAAA,QACN,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,YAAY,IAAA,CAAK,UAAA;AAAA,QACjB,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAAA,EAEF;AAAA,EAEA,OAAO,OAAA,EAA8E;AACnF,IAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,cAAA;AAAA,QACN,OAAA,EAAS,wBAAA,CAAyB,OAAA,CAAQ,UAAU;AAAA,OACrD,CAAA;AAAA,IACH;AACA,IAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,MAAA,IAAA,CAAK,IAAA,CAAK;AAAA,QACR,IAAA,EAAM,oBAAA;AAAA,QACN,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,aAAa,OAAA,CAAQ;AAAA,OACtB,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,IAAA,CAAK,OAAO,MAAA,EAAO;AACnB,MAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAAA,IAChB;AACA,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAA,EAAW,IAAA,CAAK,cAAc,CAAA;AACzD,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,IACxB;AACA,IAAA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,EAAG;AACrD,MAAA,SAAA,CAAU,KAAA,EAAM;AAAA,IAClB;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AAAA,EAChB;AAAA,EAEA,EAAA,CAAG,OAAyB,QAAA,EAAgC;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAE,GAAA,CAAI,QAAQ,CAAA;AAClC,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAE,OAAO,QAAQ,CAAA;AAAA,EACpD;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,cAAA,EAAgB,CAAA;AAAA,EACpC;AAAA,EAEA,OAAA,GAAmB;AACjB,IAAA,OAAO,KAAK,MAAA,KAAW,OAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,sBAAA,GAAwC;AA5M1C,IAAA,IAAA,EAAA,EAAA,EAAA;AA6MI,IAAA,OAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,MAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,aAAA,KAAb,IAAA,GAAA,EAAA,GAA8B,IAAA;AAAA,EACvC;AAAA;AAAA,EAGA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,aAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAW,IAAA,CAAK,KAAK,CAAA,eAAA,CAAA;AAAA,QAC9B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,YAAA,CAAa,IAAA,CAAK,QAAQ,OAAA,EAAS,IAAI,IAAI,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,CAAE,MAAM,CAAA;AAAA,EAC5E;AAAA,EAEQ,KAAK,KAAA,EAA2B;AACtC,IAAA,KAAA,MAAW,QAAA,IAAY,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAA,EAAG;AACjD,MAAA,QAAA,CAAS,KAAK,CAAA;AAAA,IAChB;AAAA,EACF;AACF,CAAA;;;ACpNA,IAAM,mBAAA,GAAsB,0BAAA;AAE5B,IAAM,kBAAkB,MAAc;AAhBtC,EAAA,IAAA,EAAA;AAiBE,EAAA,IAAI,EAAA,CAAC,EAAA,GAAA,UAAA,CAAW,MAAA,KAAX,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmB,UAAA,CAAA,EAAY;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,iDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AACtC,CAAA;AAEO,IAAM,WAAN,MAAe;AAAA,EAQpB,YAAY,IAAA,EAIT;AAXH,IAAA,IAAA,CAAiB,UAAA,uBAAiB,GAAA,EAAwB;AAI1D,IAAA,IAAA,CAAQ,gBAAA,GAAmB,KAAA;AAjC7B,IAAA,IAAA,EAAA;AAyCI,IAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,cAAA;AAC3B,IAAA,IAAA,CAAK,UAAA,GAAA,CAAa,EAAA,GAAA,IAAA,CAAK,UAAA,KAAL,IAAA,GAAA,EAAA,GAAmB,mBAAA;AACrC,IAAA,IAAA,CAAK,YAAY,eAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,aAAa,IAAA,CAAK,UAAA;AAAA,EACzB;AAAA,EAEA,MAAA,CAAO,KAAA,EAAkB,OAAA,GAA0B,EAAC,EAAY;AA/ClE,IAAA,IAAA,EAAA;AAgDI,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAK,CAAA,EAAG;AAC9B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,eAAe,KAAK,CAAA,gBAAA,CAAA;AAAA,QAC7B,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,gBAAgB,IAAA,CAAK,cAAA;AAAA,MACrB,WAAW,IAAA,CAAK;AAAA,KAClB;AACA,IAAA,MAAM,UAAU,IAAI,OAAA;AAAA,MAClB,KAAA;AAAA,MACA;AAAA,QACE,GAAG,OAAA;AAAA,QACH,UAAA,EAAA,CAAY,EAAA,GAAA,OAAA,CAAQ,UAAA,KAAR,IAAA,GAAA,EAAA,GAAsB,IAAA,CAAK;AAAA,OACzC;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,KAAA,EAAO,OAAO,CAAA;AAClC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,QAAA,CAAS,SAAA,EAAmB,cAAA,EAAiD;AAEjF,IAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,sBAAA;AAAA,QACN,OAAA,EAAS,qEAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,YAAY,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,SAAS,CAAA;AAE7C,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,IAAc,CAAC,OAAA,EAAS;AAC1C,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,qBAAA;AAAA,QACN,OAAA,EACE,oGAAA;AAAA,QACF,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,UAAA,CAAW,OAAA,EAAQ,IAAK,CAAC,OAAA,CAAQ,OAAA,EAAQ,EAAG;AACxE,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,oBAAA;AAAA,QACN,OAAA,EAAS,+DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,UAAA,CAAW,UAAA,EAAY,WAAW,cAAc,CAAA;AAAA,IACpE,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,gBAAA,GAAmB,KAAA;AAAA,IAC1B;AAAA,EACF;AAAA,EAEQ,UAAA,CACN,UAAA,EACA,SAAA,EACA,cAAA,EACyB;AACzB,IAAA,MAAM,YAAA,GAAe,IAAI,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAG9C,IAAA,MAAM,gBAAA,GAAmB,WAAW,sBAAA,EAAuB;AAE3D,IAAA,OAAO,IAAI,OAAA,CAAwB,CAAC,OAAA,EAAS,MAAA,KAAW;AAEtD,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,MAAM;AACpC,QAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,QAAA,MAAA;AAAA,UACE,IAAI,WAAA,CAAY;AAAA,YACd,IAAA,EAAM,eAAA;AAAA,YACN,IAAA,EAAM,kBAAA;AAAA,YACN,OAAA,EAAS,uCAAA;AAAA,YACT,SAAA,EAAW,IAAA;AAAA,YACX;AAAA,WACD;AAAA,SACH;AAAA,MACF,GAAG,GAAM,CAAA;AAET,MAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAAwB;AAEzC,QAAA,IAAI,gBAAA,KAAqB,IAAA,IAAQ,KAAA,CAAM,MAAA,KAAW,gBAAA,EAAkB;AAEpE,QAAA,MAAM,IAAA,GAAO,aAAA,CAA8B,KAAA,EAAO,YAAY,CAAA;AAC9D,QAAA,IAAI,CAAC,IAAA,EAAM;AAEX,QAAA,IAAI,IAAA,CAAK,SAAS,wBAAA,EAA0B;AAC1C,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,OAAA,CAAQ;AAAA,YACN,aAAa,IAAA,CAAK,WAAA;AAAA,YAClB,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,YAAY,IAAA,CAAK,UAAA;AAAA,YACjB,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,WAAW,IAAA,CAAK;AAAA,WACjB,CAAA;AAAA,QACH,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,uBAAA,EAAyB;AAChD,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAC/C,UAAA,MAAA;AAAA,YACE,IAAI,WAAA,CAAY;AAAA,cACd,IAAA,EACE,IAAA,CAAK,SAAA,KAAc,kBAAA,IACnB,KAAK,SAAA,KAAc,qBAAA,IACnB,IAAA,CAAK,SAAA,KAAc,eAAA,IACnB,IAAA,CAAK,SAAA,KAAc,WAAA,GACf,KAAK,SAAA,GACL,WAAA;AAAA,cACN,MAAM,IAAA,CAAK,IAAA;AAAA,cACX,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,SAAA,EAAW,KAAA;AAAA,cACX;AAAA,aACD;AAAA,WACH;AAAA,QACF;AAAA,MACF,CAAA;AAEA,MAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,MAAA,UAAA,CAAW,KAAK,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAA,EAAW,gBAAgB,CAAA;AAAA,IACxE,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAA,GAAgB;AACd,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,UAAA,CAAW,MAAA,EAAO,EAAG;AACzC,MAAA,EAAA,CAAG,OAAA,EAAQ;AAAA,IACb;AACA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,EACxB;AACF,CAAA;;;ACrLA,IAAMA,uBAAAA,GAAkE,sBAAA;AAYxE,IAAM,KAAA,uBAAY,GAAA,EAAqC;AAEvD,IAAM,aAAA,GAAgB,CAAC,cAAA,KAA2C;AAChE,EAAA,IAAI,iBAAA,CAAkB,cAAc,CAAA,KAAM,SAAA,EAAW;AACnD,IAAA,iBAAA,EAAkB;AAAA,EACpB;AACA,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,WAAA,EAAa,kBAAkB,cAAc,CAAA;AAAA,IAC7C,QAAA,EAAU,CAAC,IAAA,GAAO,EAAC,KAAM,IAAI,QAAA,CAAS,EAAE,cAAA,EAAgB,GAAG,IAAA,EAAM;AAAA,GACnE;AACF,CAAA;AAEA,SAAS,KAAK,cAAA,EAAiD;AAC7D,EAAA,IAAI;AACF,IAAAA,wBAAuB,cAAc,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,MAAM,GAAA,GAAM,cAAA;AACZ,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC9B,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,cAAc,CAAC,CAAA;AAC7D,EAAA,KAAA,CAAM,GAAA,CAAI,KAAK,OAAO,CAAA;AACtB,EAAA,OAAO,OAAA;AACT;AAEA,IAAM,gBAAgB,MAAY;AAChC,EAAA,KAAA,CAAM,KAAA,EAAM;AACd,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,IAAA;AAAA,EACA,eAAA,EAAiB;AACnB,CAAA;AC9CA,IAAM,GAAA,GAAY,oBAAkC,IAAI,CAAA;AAOjD,IAAM,cAAA,GAAgD,CAAC,EAAE,cAAA,EAAgB,UAAS,KAAM;AAC7F,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAU,KAAA,CAAA,QAAA,CAAsB;AAAA,IACpD,MAAA,EAAQ,SAAA;AAAA,IACR,QAAA,EAAU,IAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACR,CAAA;AAED,EAAM,gBAAU,MAAM;AACpB,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CACvB,IAAA,CAAK,CAAC,QAAA,KAAa;AAClB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,EAAE,QAAQ,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACpE,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAmB;AACzB,MAAA,IAAI,CAAC,QAAA;AACH,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,QAAA,EAAU,IAAA;AAAA,UACV,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC;AAAA,SAChE,CAAA;AAAA,IACL,CAAC,CAAA;AACH,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,cAAc,CAAC,CAAA;AAEnB,EAAA,2BAAQ,GAAA,CAAI,QAAA,EAAJ,EAAa,KAAA,EAAO,OAAQ,QAAA,EAAS,CAAA;AAC/C;AAEO,IAAM,aAAA,GAAgB;ACzCtB,IAAM,YAAY,MAAmB;AAC1C,EAAA,MAAM,GAAA,GAAYC,iBAAW,aAAa,CAAA;AAC1C,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC7E,EAAA,OAAO,GAAA;AACT;;;ACJO,IAAM,qBAAA,GAAwB","file":"index.mjs","sourcesContent":["export type ArcPayErrorType =\n | \"validation_error\"\n | \"configuration_error\"\n | \"authentication_error\"\n | \"authorization_error\"\n | \"state_error\"\n | \"rate_limit_error\"\n | \"api_error\"\n | \"network_error\"\n | \"challenge_aborted\";\n\ninterface ArcPayErrorInit {\n type: ArcPayErrorType;\n message: string;\n code?: string;\n param?: string;\n paymentId?: string;\n declineCode?: string;\n retryable: boolean;\n requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n readonly type: ArcPayErrorType;\n readonly code?: string;\n readonly param?: string;\n readonly paymentId?: string;\n readonly declineCode?: string;\n readonly retryable: boolean;\n readonly requestId?: string;\n\n constructor(init: ArcPayErrorInit) {\n super(init.message);\n this.name = \"ArcPayError\";\n this.type = init.type;\n this.code = init.code;\n this.param = init.param;\n this.paymentId = init.paymentId;\n this.declineCode = init.declineCode;\n this.retryable = init.retryable;\n this.requestId = init.requestId;\n }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"validation_error\";\nconst isConfigurationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"configuration_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError } from \"./errors\";\n\nexport type Environment = \"sandbox\" | \"live\";\n\nexport const detectEnvironment = (publishableKey: string): Environment =>\n publishableKey.startsWith(\"pk_test_\") ? \"sandbox\" : \"live\";\n\nexport const validatePublishableKey = (key: unknown): asserts key is string => {\n if (typeof key !== \"string\" || key.length === 0) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_publishable_key\",\n message: \"Publishable key must be a non-empty string\",\n retryable: false,\n });\n }\n if (!key.startsWith(\"pk_test_\") && !key.startsWith(\"pk_live_\")) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_publishable_key\",\n message:\n \"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.\",\n retryable: false,\n });\n }\n};\n","const BANNER_ATTR = \"data-arcpay-sandbox-banner\";\n\nexport const showSandboxBanner = (): void => {\n if (typeof document === \"undefined\") return;\n if (document.querySelector(`[${BANNER_ATTR}]`)) return;\n\n const bar = document.createElement(\"div\");\n bar.setAttribute(BANNER_ATTR, \"\");\n bar.style.cssText =\n \"position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);\";\n\n const text = document.createElement(\"span\");\n text.textContent = \"ARC PAY TEST MODE — payments are simulated\";\n bar.appendChild(text);\n\n const dismiss = document.createElement(\"button\");\n dismiss.type = \"button\";\n dismiss.setAttribute(\"data-arcpay-banner-dismiss\", \"\");\n dismiss.textContent = \"×\";\n dismiss.setAttribute(\"aria-label\", \"Dismiss test mode banner\");\n dismiss.style.cssText =\n \"margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;\";\n dismiss.addEventListener(\"click\", () => bar.remove());\n bar.appendChild(dismiss);\n\n document.body.appendChild(bar);\n};\n","import { ArcPayError } from \"../core/errors\";\n\nexport type FieldType = \"cardNumber\" | \"cardExpiry\" | \"cardCvv\";\n\n// Parent → iframe\nexport type ParentToIframe =\n | { type: \"arcpay:hello\"; origin: string; publishableKey: string; channelId: string }\n | { type: \"arcpay:style\"; payload: StyleSubset }\n | { type: \"arcpay:placeholder\"; field: FieldType; placeholder: string }\n | { type: \"arcpay:focus\" }\n | { type: \"arcpay:clear\" }\n | { type: \"arcpay:tokenize\"; paymentId: string; idempotencyKey: string };\n\n// iframe → parent\nexport type IframeToParent =\n | { type: \"arcpay:ready\" }\n | { type: \"arcpay:rejected\"; reason: string }\n | {\n type: \"arcpay:change\";\n field: FieldType;\n isValid: boolean;\n isEmpty: boolean;\n isComplete: boolean;\n brand?: string;\n lastFour?: string;\n }\n | {\n type: \"arcpay:tokenize-result\";\n cardTokenId: string;\n cardMask: string;\n cardScheme: string;\n cardBin: string;\n expiresIn: number;\n expiresAt: string;\n }\n | { type: \"arcpay:tokenize-error\"; errorType: string; code?: string; message: string };\n\nexport interface StyleSubset {\n base: Record<string, string>;\n invalid?: Record<string, string>;\n focus?: Record<string, string>;\n complete?: Record<string, string>;\n empty?: Record<string, string>;\n}\n\ntype TokenizeErrorType = \"validation_error\" | \"configuration_error\" | \"network_error\" | \"api_error\";\n\nconst ARCPAY_TYPE_PREFIX = \"arcpay:\";\n\nconst isArcpayMessage = (data: unknown): data is { type: string } =>\n typeof data === \"object\" &&\n data !== null &&\n \"type\" in data &&\n typeof (data as { type: unknown }).type === \"string\" &&\n (data as { type: string }).type.startsWith(ARCPAY_TYPE_PREFIX);\n\nexport const postToIframe = (\n iframe: HTMLIFrameElement,\n message: ParentToIframe,\n targetOrigin: string,\n): void => {\n if (targetOrigin === \"*\") {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"wildcard_origin_forbidden\",\n message: \"postToIframe: targetOrigin cannot be '*'\",\n retryable: false,\n });\n }\n if (!iframe.contentWindow) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"iframe_not_loaded\",\n message: \"postToIframe: iframe.contentWindow is null (iframe not mounted)\",\n retryable: false,\n });\n }\n iframe.contentWindow.postMessage(message, targetOrigin);\n};\n\nexport const postToParent = (message: IframeToParent, targetOrigin: string): void => {\n if (targetOrigin === \"*\") {\n throw new Error(\"postToParent: targetOrigin cannot be '*'\");\n }\n window.parent.postMessage(message, targetOrigin);\n};\n\nexport const parseIncoming = <T extends { type: string }>(\n event: MessageEvent,\n expectedOrigin: string,\n): T | null => {\n if (event.origin !== expectedOrigin) return null;\n if (!isArcpayMessage(event.data)) return null;\n return event.data as T;\n};\n","import type { StyleSubset } from \"./postmessage\";\n\nexport type HostedFieldsTheme = \"none\" | \"arcpay\";\n\nexport interface HostedFieldsAppearanceVariables {\n fontFamily?: string;\n fontSize?: string;\n fontWeight?: string;\n fontStyle?: string;\n lineHeight?: string;\n letterSpacing?: string;\n textAlign?: string;\n colorText?: string;\n colorPlaceholder?: string;\n colorDanger?: string;\n colorSuccess?: string;\n colorBackground?: string;\n caretColor?: string;\n}\n\nexport type HostedFieldsAppearanceRule = \"base\" | \"focus\" | \"invalid\" | \"complete\" | \"empty\";\n\nexport interface HostedFieldsAppearance {\n theme?: HostedFieldsTheme;\n variables?: HostedFieldsAppearanceVariables;\n rules?: Partial<Record<HostedFieldsAppearanceRule, Record<string, string>>>;\n}\n\nconst ALLOWED_PROPERTIES = new Set([\n \"--arcpay-placeholder-color\",\n \"background-color\",\n \"caret-color\",\n \"color\",\n \"font-family\",\n \"font-size\",\n \"font-style\",\n \"font-weight\",\n \"letter-spacing\",\n \"line-height\",\n \"opacity\",\n \"text-align\",\n \"text-decoration\",\n \"text-transform\",\n]);\n\nconst ARCPAY_THEME: StyleSubset = {\n base: {\n \"font-family\":\n 'Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif',\n \"font-size\": \"16px\",\n \"line-height\": \"24px\",\n color: \"#111827\",\n \"--arcpay-placeholder-color\": \"#9ca3af\",\n \"caret-color\": \"#111827\",\n },\n focus: {\n color: \"#111827\",\n },\n invalid: {\n color: \"#dc2626\",\n },\n complete: {\n color: \"#111827\",\n },\n empty: {\n color: \"#111827\",\n },\n};\n\nconst mergeBlock = (\n target: Record<string, string> | undefined,\n source: Record<string, string> | undefined,\n): Record<string, string> | undefined => {\n if (!target && !source) return undefined;\n return { ...(target ?? {}), ...(source ?? {}) };\n};\n\nconst setIfPresent = (\n block: Record<string, string>,\n key: string,\n value: string | undefined,\n): void => {\n if (value !== undefined) block[key] = value;\n};\n\nconst sanitizeBlock = (block: Record<string, string>): Record<string, string> => {\n const out: Record<string, string> = {};\n for (const [key, value] of Object.entries(block)) {\n const normalizedKey = key.toLowerCase();\n if (!ALLOWED_PROPERTIES.has(normalizedKey)) {\n continue;\n }\n out[normalizedKey] = value;\n }\n return out;\n};\n\nexport const sanitizeStyle = (style: StyleSubset): StyleSubset => {\n const result: StyleSubset = { base: sanitizeBlock(style.base) };\n if (style.invalid !== undefined) result.invalid = sanitizeBlock(style.invalid);\n if (style.focus !== undefined) result.focus = sanitizeBlock(style.focus);\n if (style.complete !== undefined) result.complete = sanitizeBlock(style.complete);\n if (style.empty !== undefined) result.empty = sanitizeBlock(style.empty);\n return result;\n};\n\nexport const buildStyleFromAppearance = (appearance?: HostedFieldsAppearance): StyleSubset => {\n const themeStyle: StyleSubset = appearance?.theme === \"arcpay\" ? ARCPAY_THEME : { base: {} };\n const variableStyle: StyleSubset = { base: {} };\n const variables = appearance?.variables;\n\n if (variables) {\n setIfPresent(variableStyle.base, \"font-family\", variables.fontFamily);\n setIfPresent(variableStyle.base, \"font-size\", variables.fontSize);\n setIfPresent(variableStyle.base, \"font-weight\", variables.fontWeight);\n setIfPresent(variableStyle.base, \"font-style\", variables.fontStyle);\n setIfPresent(variableStyle.base, \"line-height\", variables.lineHeight);\n setIfPresent(variableStyle.base, \"letter-spacing\", variables.letterSpacing);\n setIfPresent(variableStyle.base, \"text-align\", variables.textAlign);\n setIfPresent(variableStyle.base, \"color\", variables.colorText);\n setIfPresent(variableStyle.base, \"--arcpay-placeholder-color\", variables.colorPlaceholder);\n setIfPresent(variableStyle.base, \"background-color\", variables.colorBackground);\n setIfPresent(variableStyle.base, \"caret-color\", variables.caretColor);\n\n if (variables.colorDanger !== undefined) {\n variableStyle.invalid = { color: variables.colorDanger };\n }\n if (variables.colorSuccess !== undefined) {\n variableStyle.complete = { color: variables.colorSuccess };\n }\n }\n\n const rules = appearance?.rules;\n const combined: StyleSubset = {\n base: {\n ...themeStyle.base,\n ...variableStyle.base,\n ...(rules?.base ?? {}),\n },\n };\n\n const focus = mergeBlock(mergeBlock(themeStyle.focus, variableStyle.focus), rules?.focus);\n const invalid = mergeBlock(mergeBlock(themeStyle.invalid, variableStyle.invalid), rules?.invalid);\n const complete = mergeBlock(\n mergeBlock(themeStyle.complete, variableStyle.complete),\n rules?.complete,\n );\n const empty = mergeBlock(mergeBlock(themeStyle.empty, variableStyle.empty), rules?.empty);\n\n if (focus !== undefined) combined.focus = focus;\n if (invalid !== undefined) combined.invalid = invalid;\n if (complete !== undefined) combined.complete = complete;\n if (empty !== undefined) combined.empty = empty;\n\n return sanitizeStyle(combined);\n};\n","import { ArcPayError } from \"../core/errors\";\nimport {\n type FieldType,\n type ParentToIframe,\n type IframeToParent,\n postToIframe,\n parseIncoming,\n} from \"./postmessage\";\nimport { buildStyleFromAppearance, type HostedFieldsAppearance } from \"./style\";\n\nexport interface ElementOptions {\n /** Iframe-safe input appearance. Container layout remains merchant-owned CSS. */\n appearance?: HostedFieldsAppearance;\n placeholder?: string;\n}\n\nexport type ElementEvent =\n | { type: \"ready\" }\n | {\n type: \"change\";\n isValid: boolean;\n isEmpty: boolean;\n isComplete: boolean;\n brand?: string;\n lastFour?: string;\n }\n | { type: \"error\"; reason: string };\n\ntype Listener = (event: ElementEvent) => void;\ntype ElementEventName = ElementEvent[\"type\"];\n\nconst FIELD_TITLES: Record<FieldType, string> = {\n cardNumber: \"Arc Pay card number\",\n cardExpiry: \"Arc Pay card expiration date\",\n cardCvv: \"Arc Pay card security code\",\n};\n\nexport interface ElementContext {\n iframeBase: string;\n publishableKey: string;\n channelId: string;\n}\n\nexport class Element {\n private iframe: HTMLIFrameElement | null = null;\n private readonly listeners: Record<ElementEventName, Set<Listener>> = {\n ready: new Set<Listener>(),\n change: new Set<Listener>(),\n error: new Set<Listener>(),\n };\n private status: \"pending\" | \"ready\" | \"error\" = \"pending\";\n private messageHandler: ((e: MessageEvent) => void) | null = null;\n\n constructor(\n public readonly field: FieldType,\n private readonly options: ElementOptions,\n private readonly context: ElementContext,\n ) {}\n\n mount(target: string | HTMLElement): void {\n if (this.iframe) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"already_mounted\",\n message: `Element ${this.field} is already mounted`,\n retryable: false,\n });\n }\n const container = typeof target === \"string\" ? document.querySelector(target) : target;\n if (!(container instanceof HTMLElement)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"mount_target_not_found\",\n message: `mount target not found: ${String(target)}`,\n retryable: false,\n });\n }\n\n const iframe = document.createElement(\"iframe\");\n iframe.src = `${this.context.iframeBase}/iframe/${this.field}`;\n iframe.style.cssText = \"border:0;width:100%;height:100%;display:block;\";\n iframe.setAttribute(\"allow\", \"payment\");\n iframe.setAttribute(\"data-arcpay-element\", this.field);\n iframe.setAttribute(\"title\", FIELD_TITLES[this.field]);\n iframe.setAttribute(\"aria-label\", FIELD_TITLES[this.field]);\n container.appendChild(iframe);\n this.iframe = iframe;\n\n const expectedOrigin = new URL(this.context.iframeBase).origin;\n\n this.messageHandler = (event: MessageEvent) => {\n // C1: source guard — only accept messages from this element's own iframe.\n // Without this, any iframe at the same origin (e.g. cardExpiry, cardCvv)\n // could trigger handlers on cardNumber and vice-versa.\n if (event.source !== this.iframe?.contentWindow) return;\n // C4: use parseIncoming for origin + arcpay: prefix guard.\n const data = parseIncoming<IframeToParent>(event, expectedOrigin);\n if (!data) return;\n this.handleMessage(data);\n };\n window.addEventListener(\"message\", this.messageHandler);\n\n iframe.addEventListener(\n \"load\",\n () => {\n if (!this.iframe) return;\n const hello: ParentToIframe = {\n type: \"arcpay:hello\",\n origin: window.location.origin,\n publishableKey: this.context.publishableKey,\n channelId: this.context.channelId,\n };\n postToIframe(this.iframe, hello, expectedOrigin);\n },\n { once: true },\n );\n }\n\n private handleMessage(data: IframeToParent): void {\n if (data.type === \"arcpay:ready\") {\n this.status = \"ready\";\n if (this.options.appearance) {\n this.send({\n type: \"arcpay:style\",\n payload: buildStyleFromAppearance(this.options.appearance),\n });\n }\n if (this.options.placeholder) {\n this.send({\n type: \"arcpay:placeholder\",\n field: this.field,\n placeholder: this.options.placeholder,\n });\n }\n this.emit({ type: \"ready\" });\n } else if (data.type === \"arcpay:rejected\") {\n this.status = \"error\";\n this.emit({ type: \"error\", reason: data.reason });\n } else if (data.type === \"arcpay:change\" && data.field === this.field) {\n this.emit({\n type: \"change\",\n isValid: data.isValid,\n isEmpty: data.isEmpty,\n isComplete: data.isComplete,\n brand: data.brand,\n lastFour: data.lastFour,\n });\n }\n // arcpay:tokenize-result / arcpay:tokenize-error handled by Elements factory (Task 9).\n }\n\n update(options: { appearance?: HostedFieldsAppearance; placeholder?: string }): void {\n if (options.appearance) {\n this.send({\n type: \"arcpay:style\",\n payload: buildStyleFromAppearance(options.appearance),\n });\n }\n if (options.placeholder) {\n this.send({\n type: \"arcpay:placeholder\",\n field: this.field,\n placeholder: options.placeholder,\n });\n }\n }\n\n destroy(): void {\n if (this.iframe) {\n this.iframe.remove();\n this.iframe = null;\n }\n if (this.messageHandler) {\n window.removeEventListener(\"message\", this.messageHandler);\n this.messageHandler = null;\n }\n for (const listeners of Object.values(this.listeners)) {\n listeners.clear();\n }\n this.status = \"pending\";\n }\n\n on(event: ElementEventName, callback: Listener): () => void {\n this.listeners[event].add(callback);\n return () => this.listeners[event].delete(callback);\n }\n\n focus(): void {\n this.send({ type: \"arcpay:focus\" });\n }\n\n clear(): void {\n this.send({ type: \"arcpay:clear\" });\n }\n\n isReady(): boolean {\n return this.status === \"ready\";\n }\n\n /**\n * Internal: returns the iframe's contentWindow for source-filtering in\n * Elements.doTokenize(). Returns null when the iframe is not yet mounted\n * or when jsdom has not yet populated contentWindow (test environment).\n */\n getIframeContentWindow(): Window | null {\n return this.iframe?.contentWindow ?? null;\n }\n\n /** Internal: used by Elements factory to send tokenize commands. */\n send(message: ParentToIframe): void {\n if (!this.iframe) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"not_mounted\",\n message: `Element ${this.field} is not mounted`,\n retryable: false,\n });\n }\n postToIframe(this.iframe, message, new URL(this.context.iframeBase).origin);\n }\n\n private emit(event: ElementEvent): void {\n for (const listener of this.listeners[event.type]) {\n listener(event);\n }\n }\n}\n","import { ArcPayError } from \"../core/errors\";\nimport { Element, type ElementContext, type ElementOptions } from \"./element\";\nimport type { FieldType, IframeToParent } from \"./postmessage\";\nimport { parseIncoming } from \"./postmessage\";\nimport type { TokenizeResult } from \"../tokenize/tokenize\";\nimport type { HostedFieldsAppearance } from \"./style\";\n\nexport type {};\n\nexport interface ElementsOptions {\n /** Default iframe-safe input appearance applied to elements created by this factory. */\n appearance?: HostedFieldsAppearance;\n}\n\nconst DEFAULT_IFRAME_BASE = \"https://sdk.arcpay.space\";\n\nconst createChannelId = (): string => {\n if (!globalThis.crypto?.randomUUID) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"crypto_unavailable\",\n message: \"crypto.randomUUID is required for Hosted Fields\",\n retryable: false,\n });\n }\n return globalThis.crypto.randomUUID();\n};\n\nexport class Elements {\n private readonly elementMap = new Map<FieldType, Element>();\n private readonly iframeBase: string;\n private readonly publishableKey: string;\n private readonly channelId: string;\n private tokenizeInFlight = false;\n private readonly appearance?: HostedFieldsAppearance;\n\n constructor(opts: {\n publishableKey: string;\n iframeBase?: string;\n appearance?: HostedFieldsAppearance;\n }) {\n this.publishableKey = opts.publishableKey;\n this.iframeBase = opts.iframeBase ?? DEFAULT_IFRAME_BASE;\n this.channelId = createChannelId();\n this.appearance = opts.appearance;\n }\n\n create(field: FieldType, options: ElementOptions = {}): Element {\n if (this.elementMap.has(field)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"duplicate_element\",\n message: `Element for ${field} already created`,\n retryable: false,\n });\n }\n const ctx: ElementContext = {\n iframeBase: this.iframeBase,\n publishableKey: this.publishableKey,\n channelId: this.channelId,\n };\n const element = new Element(\n field,\n {\n ...options,\n appearance: options.appearance ?? this.appearance,\n },\n ctx,\n );\n this.elementMap.set(field, element);\n return element;\n }\n\n async tokenize(paymentId: string, idempotencyKey: string): Promise<TokenizeResult> {\n // C2: concurrent-call guard — only one tokenize() may be in-flight at a time.\n if (this.tokenizeInFlight) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"tokenize_in_progress\",\n message: \"A tokenize() call is already in progress for this Elements instance\",\n retryable: false,\n });\n }\n\n const cardNumber = this.elementMap.get(\"cardNumber\");\n const cardExpiry = this.elementMap.get(\"cardExpiry\");\n const cardCvv = this.elementMap.get(\"cardCvv\");\n\n if (!cardNumber || !cardExpiry || !cardCvv) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"incomplete_elements\",\n message:\n \"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()\",\n retryable: false,\n });\n }\n if (!cardNumber.isReady() || !cardExpiry.isReady() || !cardCvv.isReady()) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"elements_not_ready\",\n message: \"Wait for all elements to fire 'ready' event before tokenize()\",\n retryable: false,\n });\n }\n\n this.tokenizeInFlight = true;\n try {\n return await this.doTokenize(cardNumber, paymentId, idempotencyKey);\n } finally {\n this.tokenizeInFlight = false;\n }\n }\n\n private doTokenize(\n cardNumber: Element,\n paymentId: string,\n idempotencyKey: string,\n ): Promise<TokenizeResult> {\n const iframeOrigin = new URL(this.iframeBase).origin;\n // C1: obtain reference to the cardNumber iframe's contentWindow before\n // registering the listener so we can filter by source.\n const cardIframeWindow = cardNumber.getIframeContentWindow();\n\n return new Promise<TokenizeResult>((resolve, reject) => {\n // C3: 30-second timeout — rejects and cleans up if no result arrives.\n const timer = window.setTimeout(() => {\n window.removeEventListener(\"message\", onMessage);\n reject(\n new ArcPayError({\n type: \"network_error\",\n code: \"tokenize_timeout\",\n message: \"tokenize() timed out after 30 seconds\",\n retryable: true,\n paymentId,\n }),\n );\n }, 30_000);\n\n const onMessage = (event: MessageEvent) => {\n // C1: source guard — only accept messages from the cardNumber iframe.\n if (cardIframeWindow !== null && event.source !== cardIframeWindow) return;\n // C4: use parseIncoming for origin + arcpay: prefix guard.\n const data = parseIncoming<IframeToParent>(event, iframeOrigin);\n if (!data) return;\n\n if (data.type === \"arcpay:tokenize-result\") {\n clearTimeout(timer);\n window.removeEventListener(\"message\", onMessage);\n resolve({\n cardTokenId: data.cardTokenId,\n cardMask: data.cardMask,\n cardScheme: data.cardScheme,\n cardBin: data.cardBin,\n expiresIn: data.expiresIn,\n expiresAt: data.expiresAt,\n });\n } else if (data.type === \"arcpay:tokenize-error\") {\n clearTimeout(timer);\n window.removeEventListener(\"message\", onMessage);\n reject(\n new ArcPayError({\n type:\n data.errorType === \"validation_error\" ||\n data.errorType === \"configuration_error\" ||\n data.errorType === \"network_error\" ||\n data.errorType === \"api_error\"\n ? data.errorType\n : \"api_error\",\n code: data.code,\n message: data.message,\n retryable: false,\n paymentId,\n }),\n );\n }\n };\n\n window.addEventListener(\"message\", onMessage);\n cardNumber.send({ type: \"arcpay:tokenize\", paymentId, idempotencyKey });\n });\n }\n\n destroy(): void {\n for (const el of this.elementMap.values()) {\n el.destroy();\n }\n this.elementMap.clear();\n }\n}\n","import {\n detectEnvironment,\n type Environment,\n validatePublishableKey as _validatePublishableKey,\n} from \"./env\";\nimport { showSandboxBanner } from \"./sandbox-banner\";\nimport { Elements, type ElementsOptions } from \"../elements/elements\";\n\nconst validatePublishableKey: (key: unknown) => asserts key is string = _validatePublishableKey;\n\nexport interface ArcPayLoadOptions {\n readonly _reserved?: never;\n}\n\nexport interface ArcPayInstance {\n readonly publishableKey: string;\n readonly environment: Environment;\n elements: (opts?: ElementsOptions) => Elements;\n}\n\nconst cache = new Map<string, Promise<ArcPayInstance>>();\n\nconst buildInstance = (publishableKey: string): ArcPayInstance => {\n if (detectEnvironment(publishableKey) === \"sandbox\") {\n showSandboxBanner();\n }\n return {\n publishableKey,\n environment: detectEnvironment(publishableKey),\n elements: (opts = {}) => new Elements({ publishableKey, ...opts }),\n };\n};\n\nfunction load(publishableKey: string): Promise<ArcPayInstance> {\n try {\n validatePublishableKey(publishableKey);\n } catch (err) {\n return Promise.reject(err);\n }\n const key = publishableKey;\n const existing = cache.get(key);\n if (existing) return existing;\n const promise = Promise.resolve(buildInstance(publishableKey));\n cache.set(key, promise);\n return promise;\n}\n\nconst resetForTests = (): void => {\n cache.clear();\n};\n\nexport const ArcPay = {\n load,\n __resetForTests: resetForTests,\n};\n","import { ArcPay, type ArcPayInstance } from \"../index\";\nimport * as React from \"react\";\n\nexport type ArcPayState =\n | { status: \"loading\"; instance: null; error: null }\n | { status: \"ready\"; instance: ArcPayInstance; error: null }\n | { status: \"error\"; instance: null; error: Error };\n\nconst Ctx = React.createContext<ArcPayState | null>(null);\n\nexport interface ArcPayProviderProps {\n publishableKey: string;\n children: React.ReactNode;\n}\n\nexport const ArcPayProvider: React.FC<ArcPayProviderProps> = ({ publishableKey, children }) => {\n const [state, setState] = React.useState<ArcPayState>({\n status: \"loading\",\n instance: null,\n error: null,\n });\n\n React.useEffect(() => {\n let canceled = false;\n ArcPay.load(publishableKey)\n .then((instance) => {\n if (!canceled) setState({ status: \"ready\", instance, error: null });\n })\n .catch((error: unknown) => {\n if (!canceled)\n setState({\n status: \"error\",\n instance: null,\n error: error instanceof Error ? error : new Error(String(error)),\n });\n });\n return () => {\n canceled = true;\n };\n }, [publishableKey]);\n\n return <Ctx.Provider value={state}>{children}</Ctx.Provider>;\n};\n\nexport const ArcPayContext = Ctx;\n","import * as React from \"react\";\nimport { ArcPayContext, type ArcPayState } from \"./provider\";\n\nexport const useArcPay = (): ArcPayState => {\n const ctx = React.useContext(ArcPayContext);\n if (!ctx) throw new Error(\"useArcPay must be called within an ArcPayProvider\");\n return ctx;\n};\n","export { ArcPayProvider, ArcPayContext } from \"./provider\";\nexport type { ArcPayProviderProps, ArcPayState } from \"./provider\";\nexport { useArcPay } from \"./use-arcpay\";\nexport const REACT_WRAPPER_VERSION = \"0.1.24\";\n"]}
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/core/errors.ts","../../src/server/client.ts","../../src/three-ds/actions.ts"],"names":[],"mappings":";;;AAsBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;AC+BA,IAAM,gBAAA,GAAmB,6BAAA;AACzB,IAAM,WAAA,GAAc,YAAA;AACpB,IAAM,wBAAA,GAA2B,IAAA;AACjC,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,iCAAA,GAAsE;AAAA,EAC1E,YAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,kBAAkB,GAAA,EAAqC;AAC9D,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EACE,4FAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF;AAEA,IAAM,aAAA,GAAgB,CAAC,IAAA,KAAyB;AAC9C,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,MAAM,CAAA,IAAK,IAAA,CAAK,WAAW,GAAA,GAAM,CAAC,MAAM,EAAA,EAAI;AACjD,IAAA,GAAA,IAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC1B,CAAA;AAMA,IAAM,uBAAA,GAA0B,CAC9B,IAAA,KAC0C,IAAA,IAAA,IAAA,GAAA,IAAA,GAAQ,EAAC;AAErD,IAAM,kBAAA,GACJ,4EAAA;AAEF,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAwD;AACrF,EAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,+CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,qCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAA,CAAK,cAAA;AACd,CAAA;AAEA,IAAM,8BAAA,GAAiC,CAAC,IAAA,KAAuD;AAC7F,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,CAAK,cAAA,EAAgB;AACjC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,iBAAA;AAAA,MACN,OAAA,EAAS,4BAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,cAAA,KAAmB,WAAA,IAAe,CAAC,KAAK,aAAA,EAAe;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,wDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,iBAAiB,KAAA,EAAO;AAC/B,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,6CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,mBAAmB,WAAA,EAAa;AACvC,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,0DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,IAAA,CAAK,kBAAA,CAAmB,QAAA,KAAa,IAAA,CAAK,cAAA,EAAgB;AAC5D,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,uDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT,CAAA;AAEA,IAAM,WAAA,GAAc,CAAC,IAAA,EAAc,KAAA,KAA2B;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,UAAU,EAAA,EAAI;AAC3D,IAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,QAAA,EAAS;AAChC,EAAA,OAAO,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,GAAK,IAAA;AAC1C,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAQ,CAAC,SAAS,MAAA,KAAW;AAC/B,EAAA,IAAI,iCAAQ,OAAA,EAAS;AACnB,IAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAClE,IAAA;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AACpC,EAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,gBAAA;AAAA,IACN,OAAA;AAAA,IACA,MAAM;AACJ,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAAA,IACpE,CAAA;AAAA,IACA,EAAE,MAAM,IAAA;AAAK,GAAA;AAEjB,CAAC,CAAA;AAEH,IAAM,eAAA,GAAkB,CAAC,KAAA,EAA2B,QAAA,KAA6B;AAC/E,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,QAAA;AAChC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,gEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAA;AACT,CAAA;AAaA,IAAM,iBAAA,GAAoB,CAAC,KAAA,KACzB,KAAA,KAAU,kBAAA,IACV,KAAA,KAAU,sBAAA,IACV,KAAA,KAAU,qBAAA,IACV,KAAA,KAAU,aAAA,IACV,KAAA,KAAU,sBACV,KAAA,KAAU,WAAA;AAEZ,IAAM,gBAAA,GAAmB,CAAC,IAAA,EAAuB,MAAA,EAAgB,IAAA,KAA2B;AAC1F,EAAA,IAAI,IAAA,KAAS,oBAAoB,OAAO,IAAA;AACxC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,OAAO,IAAA,KAAS,eAAe,MAAA,IAAU,GAAA;AAC3C,CAAA;AAEA,IAAM,kBAAA,GAAqB,OAAO,GAAA,KAAwC;AApQ1E,EAAA,IAAA,EAAA,EAAA,EAAA;AAqQE,EAAA,IAAI,OAAqB,EAAC;AAC1B,EAAA,IAAI;AACF,IAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,EAER;AACA,EAAA,MAAM,MAAA,GAAA,CAAS,EAAA,GAAA,IAAA,CAAK,KAAA,KAAL,IAAA,GAAA,EAAA,GAAc,EAAC;AAC9B,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,MAAA,CAAO,IAAI,CAAA,GACtC,OAAO,IAAA,GACP,GAAA,CAAI,MAAA,IAAU,GAAA,GACZ,WAAA,GACA,kBAAA;AACN,EAAA,OAAO,IAAI,WAAA,CAAY;AAAA,IACrB,IAAA;AAAA,IACA,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,UAAS,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,CAAA,2BAAA,EAA8B,IAAI,MAAM,CAAA,CAAA;AAAA,IACnE,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,WAAW,MAAA,CAAO,UAAA;AAAA,IAClB,aAAa,MAAA,CAAO,YAAA;AAAA,IACpB,WAAW,gBAAA,CAAiB,IAAA,EAAM,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAI;AAAA,GAC1D,CAAA;AACH,CAAA;AAEO,IAAM,eAAN,MAAmB;AAAA,EAKxB,YAAY,OAAA,EAA8B;AAjS5C,IAAA,IAAA,EAAA,EAAA,EAAA;AAkSI,IAAA,MAAM,YAAqB,OAAA,CAAQ,SAAA;AACnC,IAAA,iBAAA,CAAkB,SAAS,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,IAAS,OAAO,UAAU,WAAA,EAAa;AAClD,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,WAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,oDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,OAAA,GAAU,aAAA,CAAA,CAAc,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,YAAmB,gBAAgB,CAAA;AAChE,IAAA,IAAA,CAAK,SAAA,GAAA,CAAY,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,KAAA;AAAA,EACpC;AAAA,EAEA,MAAM,YAAA,CACJ,KAAA,GAA2B,EAAC,EAC5B,IAAA,GAAuB,EAAC,EACF;AACtB,IAAA,OAAO,IAAA,CAAK,QAAqB,KAAA,EAAO,WAAA,CAAY,aAAa,KAAK,CAAA,EAAG,QAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAGA,MAAM,aAAA,CAAc,IAAA,EAA4B,IAAA,EAA6C;AAC3F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACpE;AAAA,EAGA,MAAM,eAAA,CAAgB,IAAA,EAA8B,IAAA,EAA6C;AAC/F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,cAAA,EAAgB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAA,CAAW,SAAA,EAAmB,IAAA,GAAuB,EAAC,EAAqB;AAC/E,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAAA,MAC1C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACJ,SAAA,EACA,IAAA,GAA8B,EAAC,EACb;AA9UtB,IAAA,IAAA,EAAA;AA+UI,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,IAAA,CAAK,UAAA,EAAY,wBAAwB,CAAA;AAC5E,IAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,IAAA,CAAK,SAAA,EAAW,uBAAuB,CAAA;AACzE,IAAA,MAAM,mBAAmB,IAAI,GAAA,CAAA,CAAI,EAAA,GAAA,IAAA,CAAK,gBAAA,KAAL,YAAyB,iCAAiC,CAAA;AAC3F,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,IAAA,WAAS;AACP,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACxE,MAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,OAAA,CAAQ,MAA+B,CAAA,EAAG;AACjE,QAAA,OAAO,OAAA;AAAA,MACT;AACA,MAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,IAAa,SAAA,EAAW;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY;AAAA,UACpB,IAAA,EAAM,WAAA;AAAA,UACN,IAAA,EAAM,sBAAA;AAAA,UACN,OAAA,EAAS,CAAA,QAAA,EAAW,SAAS,CAAA,wCAAA,EAA2C,SAAS,CAAA,EAAA,CAAA;AAAA,UACjF,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AACA,MAAA,MAAM,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,MAAM,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,WAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,KAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,YAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAMA,MAAM,eAAA,CACJ,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,KAAK,OAAA,CAAgC,MAAA,EAAQ,sBAAA,EAAwB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9F;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,MAAM,WAAA,GAAc,+BAA+B,IAAI,CAAA;AACvD,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,WAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,GAAuB,EAAC,EACS;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,oBAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,2BAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACW;AACnC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,WAAA,CAAY,8BAA8B,KAAK,CAAA;AAAA,MAC/C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAGA,MAAM,UAAA,CAAW,IAAA,EAAyB,IAAA,EAA0C;AAClF,IAAA,OAAO,KAAK,OAAA,CAAc,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACtE,IAAA,OAAO,IAAA,CAAK,QAAc,KAAA,EAAO,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACzE,IAAA,OAAO,IAAA,CAAK,QAAc,QAAA,EAAU,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC7F;AAAA,EAMA,MAAM,qBAAA,CACJ,IAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,OAAO,KAAK,OAAA,CAAyB,MAAA,EAAQ,oBAAA,EAAsB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACrF;AAAA,EAEA,MAAc,QACZ,MAAA,EACA,IAAA,EACA,MACA,IAAA,GAA4B,MAAA,EAC5B,qBAAqB,KAAA,EACT;AACZ,IAAA,MAAM,WAAA,GAAc,wBAAwB,IAAI,CAAA;AAChD,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,MACvC,uBAAA,EAAyB,WAAA;AAAA,MACzB,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE,CAAA,MAAA,IAAW,WAAA,CAAY,cAAA,KAAmB,MAAA,EAAW;AACnD,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,KAAK,SAAA,CAAU,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QACnD,MAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAM,IAAA,KAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,QAC1D,QAAQ,WAAA,CAAY;AAAA,OACrB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,wBAAA;AAAA,QAC9C,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,mBAAmB,GAAG,CAAA;AAC/C,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,OAAA,KACjC,IAAI,aAAa,OAAO;;;AC7anB,IAAM,gBAAA,GAAmB,CAAC,UAAA,KAA6D;AAC5F,EAAA,OAAO,UAAA,IAAA,IAAA,GAAA,UAAA,GAAc,IAAA;AACvB;AAEO,IAAM,qBAAA,GAAwB,CAAC,UAAA,KAA4C;AAChF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,iBAAA,IAAqB,UAAA,CAAW,SAAS,KAAA,KAAU,QAAA;AACjF;AAEO,IAAM,wBAAA,GAA2B,CAAC,UAAA,KAA4C;AACnF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,oBAAA,IAAwB,UAAA,CAAW,SAAS,KAAA,KAAU,WAAA;AACpF;AAEO,IAAM,uBAAA,GAA0B,CAAC,UAAA,MAAoD;AAAA,EAC1F,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO;AACrC,CAAA;AAEA,IAAM,oBAAA,GAAuB,CAAC,MAAA,KAAyB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,MAAM,CAAA;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAChC,IAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,EAClD;AACF,CAAA;AAEO,IAAM,uBAAA,GAA0B,CACrC,UAAA,KAC8B;AAC9B,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAO,QAAA,CAAS,KAAA;AAAA,IACtB,eAAA,EAAiB,OAAO,QAAA,CAAS,OAAA;AAAA,IACjC,IAAA,EAAM,wBAAwB,MAAM,CAAA;AAAA,IACpC,kBAAA,EAAoB,OAAO,QAAA,CAAS,mBAAA;AAAA,IACpC,oBAAA,EAAsB,OAAO,QAAA,CAAS;AAAA,GACxC;AACF;AAEO,IAAM,4BAAA,GAA+B,CAC1C,UAAA,EACA,mBAAA,GAAuC,GAAA,KACyC;AAChF,EAAA,IAAI,CAAC,qBAAA,CAAsB,UAAU,KAAK,CAAC,UAAA,CAAW,SAAS,wBAAA,EAA0B;AACvF,IAAA,MAAM,IAAI,MAAM,2EAA2E,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO;AAAA,IACL,oBAAA,EAAsB,mBAAA;AAAA,IACtB,wBAAA,EAA0B,WAAW,QAAA,CAAS;AAAA,GAChD;AACF;AAwJA,IAAM,UAAA,GAAa,CAAC,KAAA,KAClB,KAAA,CACG,QAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,MAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAEnB,IAAM,0BAAA,GAA6B,CAAC,UAAA,KAA0C;AACnF,EAAA,MAAM,IAAA,GAAO,wBAAwB,UAAU,CAAA;AAC/C,EAAA,oBAAA,CAAqB,KAAK,MAAM,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,KAAW,eAAA,GAAkB,wBAAA,GAA2B,OAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,CACjB,GAAA;AAAA,IACC,CAAC,KAAA,KACC,CAAA,2BAAA,EAA8B,UAAA,CAAW,KAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAY,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,EAAA;AAAA,GAC3F,CACC,KAAK,EAAE,CAAA;AACV,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,KAAW,eAAA,GACZ,kFAAA,GACA,EAAA;AACN,EAAA,OAAO,CAAA,8DAAA,EAAiE,MAAM,CAAA,4BAAA,EAA+B,UAAA,CAAW,IAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAa,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,iEAAA,CAAA;AACpK","file":"index.cjs","sourcesContent":["export type ArcPayErrorType =\n | \"validation_error\"\n | \"configuration_error\"\n | \"authentication_error\"\n | \"authorization_error\"\n | \"state_error\"\n | \"rate_limit_error\"\n | \"api_error\"\n | \"network_error\"\n | \"challenge_aborted\";\n\nexport interface ArcPayErrorInit {\n type: ArcPayErrorType;\n message: string;\n code?: string;\n param?: string;\n paymentId?: string;\n declineCode?: string;\n retryable: boolean;\n requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n readonly type: ArcPayErrorType;\n readonly code?: string;\n readonly param?: string;\n readonly paymentId?: string;\n readonly declineCode?: string;\n readonly retryable: boolean;\n readonly requestId?: string;\n\n constructor(init: ArcPayErrorInit) {\n super(init.message);\n this.name = \"ArcPayError\";\n this.type = init.type;\n this.code = init.code;\n this.param = init.param;\n this.paymentId = init.paymentId;\n this.declineCode = init.declineCode;\n this.retryable = init.retryable;\n this.requestId = init.requestId;\n }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"validation_error\";\nexport const isConfigurationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"configuration_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError, type ArcPayErrorType } from \"../core/errors\";\nimport type {\n AvailablePaymentMethod,\n CaptureRequest,\n ChargeSavedCardRequest,\n CheckoutSession,\n CompleteThreeDSMethodRequest,\n CreateCheckoutSessionRequest,\n CreateCardSetupRequest,\n CreateLinkRequest,\n CreatePaymentRequest,\n CreateRefundRequest,\n ExecutePaymentRequest,\n ExecutePaymentResponse,\n Link,\n ListAvailablePaymentMethodsQuery,\n ListPaymentsQuery,\n Payment,\n PaymentList,\n PaymentNextAction,\n Refund,\n TerminalPaymentStatus,\n VoidRequest,\n WaitForPaymentOptions,\n} from \"./types\";\n\nexport type {\n AvailablePaymentMethod,\n CaptureMode,\n CaptureRequest,\n ChargeSavedCardRequest,\n CheckoutSession,\n CompleteThreeDSMethodRequest,\n CreateCheckoutSessionRequest,\n CreateCardSetupRequest,\n CreateLinkRequest,\n CreatePaymentRequest,\n CreateRefundRequest,\n Currency,\n ExecutePaymentRequest,\n ExecutePaymentResponse,\n PaymentNextAction,\n Link,\n ListAvailablePaymentMethodsQuery,\n ListPaymentsQuery,\n Payment,\n PaymentFlowMode,\n PaymentList,\n PaymentMethod,\n PaymentStatus,\n TerminalPaymentStatus,\n Refund,\n VoidRequest,\n WaitForPaymentOptions,\n} from \"./types\";\n\nexport interface ArcPayClientOptions {\n secretKey: string;\n apiBase?: string;\n fetch?: typeof fetch;\n}\n\nexport interface IdempotencyOptions {\n idempotencyKey: string;\n signal?: AbortSignal;\n}\n\ntype RequestOptionsInput = RequestOptions | IdempotencyOptions | null | undefined;\n\nexport interface RequestOptions {\n signal?: AbortSignal;\n}\n\nconst DEFAULT_API_BASE = \"https://api.arcpay.space/v1\";\nconst API_VERSION = \"2026-05-06\";\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_POLL_TIMEOUT_MS = 60_000;\nconst DEFAULT_TERMINAL_PAYMENT_STATUSES: readonly TerminalPaymentStatus[] = [\n \"authorized\",\n \"captured\",\n \"settled\",\n \"voided\",\n \"expired\",\n \"refunded\",\n \"chargeback\",\n \"declined\",\n \"failed\",\n];\n\nfunction validateSecretKey(key: unknown): asserts key is string {\n if (typeof key !== \"string\" || key.length === 0) {\n throw new ArcPayError({\n type: \"authentication_error\",\n code: \"invalid_secret_key\",\n message: \"Secret key must be a non-empty string\",\n retryable: false,\n });\n }\n if (!key.startsWith(\"sk_test_\") && !key.startsWith(\"sk_live_\")) {\n throw new ArcPayError({\n type: \"authentication_error\",\n code: \"invalid_secret_key\",\n message:\n \"Secret key must start with sk_test_ or sk_live_. Publishable keys cannot call server APIs.\",\n retryable: false,\n });\n }\n}\n\nconst normalizeBase = (base: string): string => {\n let end = base.length;\n while (end > 0 && base.charCodeAt(end - 1) === 47) {\n end -= 1;\n }\n return base.slice(0, end);\n};\n\ninterface RequestOptionsWithOptionalIdempotency extends RequestOptions {\n idempotencyKey?: string;\n}\n\nconst normalizeRequestOptions = (\n opts: RequestOptionsInput,\n): RequestOptionsWithOptionalIdempotency => opts ?? {};\n\nconst IDEMPOTENCY_KEY_RE =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\nconst requireIdempotencyKey = (opts: RequestOptionsWithOptionalIdempotency): string => {\n if (!opts.idempotencyKey) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"missing_idempotency_key\",\n message: \"idempotencyKey is required for this operation\",\n retryable: false,\n });\n }\n if (!IDEMPOTENCY_KEY_RE.test(opts.idempotencyKey)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_idempotency_key\",\n message: \"idempotencyKey must be a valid UUID\",\n retryable: false,\n });\n }\n return opts.idempotencyKey;\n};\n\nconst normalizeExecutePaymentRequest = (body: ExecutePaymentRequest): ExecutePaymentRequest => {\n if (!body || !body.payment_method) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"payment_method is required\",\n retryable: false,\n });\n }\n if (body.payment_method === \"bank_card\" && !body.card_token_id) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"missing_card_token_id\",\n message: \"card_token_id is required for bank_card executePayment\",\n retryable: false,\n });\n }\n if (body.payment_mode !== \"h2h\") {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_payment_mode\",\n message: \"payment_mode must be h2h for executePayment\",\n retryable: false,\n });\n }\n if (body.payment_method !== \"bank_card\") {\n if (!body.wallet_interaction) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"wallet_interaction is required for wallet executePayment\",\n retryable: false,\n });\n }\n if (body.wallet_interaction.provider !== body.payment_method) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"wallet_interaction.provider must match payment_method\",\n retryable: false,\n });\n }\n }\n return body;\n};\n\nconst appendQuery = (path: string, query?: object): string => {\n if (!query) return path;\n const params = new URLSearchParams();\n for (const [key, value] of Object.entries(query)) {\n if (value === undefined || value === null || value === \"\") continue;\n params.set(key, String(value));\n }\n const encoded = params.toString();\n return encoded ? `${path}?${encoded}` : path;\n};\n\nconst sleep = (ms: number, signal?: AbortSignal): Promise<void> =>\n new Promise((resolve, reject) => {\n if (signal?.aborted) {\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n return;\n }\n const timer = setTimeout(resolve, ms);\n signal?.addEventListener(\n \"abort\",\n () => {\n clearTimeout(timer);\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n },\n { once: true },\n );\n });\n\nconst normalizePollMs = (value: number | undefined, fallback: number): number => {\n if (value === undefined) return fallback;\n if (!Number.isFinite(value) || value <= 0) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_poll_options\",\n message: \"Polling intervals and timeouts must be positive finite numbers\",\n retryable: false,\n });\n }\n return value;\n};\n\ninterface APIErrorBody {\n error?: {\n type?: string;\n code?: string;\n message?: string;\n param?: string;\n request_id?: string;\n decline_code?: string;\n };\n}\n\nconst isPublicErrorType = (value: unknown): value is ArcPayErrorType =>\n value === \"validation_error\" ||\n value === \"authentication_error\" ||\n value === \"authorization_error\" ||\n value === \"state_error\" ||\n value === \"rate_limit_error\" ||\n value === \"api_error\";\n\nconst isRetryableError = (type: ArcPayErrorType, status: number, code?: string): boolean => {\n if (type === \"rate_limit_error\") return true;\n if (code === \"timeout\") return false;\n return type === \"api_error\" && status >= 500;\n};\n\nconst parseErrorResponse = async (res: Response): Promise<ArcPayError> => {\n let body: APIErrorBody = {};\n try {\n body = (await res.json()) as APIErrorBody;\n } catch {\n /* keep default error below */\n }\n const detail = body.error ?? {};\n const type = isPublicErrorType(detail.type)\n ? detail.type\n : res.status >= 500\n ? \"api_error\"\n : \"validation_error\";\n return new ArcPayError({\n type,\n code: detail.code,\n message: detail.message ?? `Request failed with status ${res.status}`,\n param: detail.param,\n requestId: detail.request_id,\n declineCode: detail.decline_code,\n retryable: isRetryableError(type, res.status, detail.code),\n });\n};\n\nexport class ArcPayClient {\n private readonly secretKey: string;\n private readonly apiBase: string;\n private readonly fetchImpl: typeof fetch;\n\n constructor(options: ArcPayClientOptions) {\n const secretKey: unknown = options.secretKey;\n validateSecretKey(secretKey);\n if (!options.fetch && typeof fetch === \"undefined\") {\n throw new ArcPayError({\n type: \"api_error\",\n code: \"fetch_unavailable\",\n message: \"A fetch implementation is required in this runtime\",\n retryable: false,\n });\n }\n this.secretKey = secretKey;\n this.apiBase = normalizeBase(options.apiBase ?? DEFAULT_API_BASE);\n this.fetchImpl = options.fetch ?? fetch;\n }\n\n async listPayments(\n query: ListPaymentsQuery = {},\n opts: RequestOptions = {},\n ): Promise<PaymentList> {\n return this.request<PaymentList>(\"GET\", appendQuery(\"/payments\", query), undefined, opts);\n }\n\n async createPayment(body: CreatePaymentRequest, opts: IdempotencyOptions): Promise<Payment>;\n async createPayment(body: CreatePaymentRequest, opts: RequestOptionsInput): Promise<Payment> {\n return this.request<Payment>(\"POST\", \"/payments\", body, opts, true);\n }\n\n async createCardSetup(body: CreateCardSetupRequest, opts: IdempotencyOptions): Promise<Payment>;\n async createCardSetup(body: CreateCardSetupRequest, opts: RequestOptionsInput): Promise<Payment> {\n return this.request<Payment>(\"POST\", \"/cards/setup\", body, opts, true);\n }\n\n async getPayment(paymentId: string, opts: RequestOptions = {}): Promise<Payment> {\n return this.request<Payment>(\n \"GET\",\n `/payments/${encodeURIComponent(paymentId)}`,\n undefined,\n opts,\n );\n }\n\n async waitForPaymentTerminal(\n paymentId: string,\n opts: WaitForPaymentOptions = {},\n ): Promise<Payment> {\n const intervalMs = normalizePollMs(opts.intervalMs, DEFAULT_POLL_INTERVAL_MS);\n const timeoutMs = normalizePollMs(opts.timeoutMs, DEFAULT_POLL_TIMEOUT_MS);\n const terminalStatuses = new Set(opts.terminalStatuses ?? DEFAULT_TERMINAL_PAYMENT_STATUSES);\n const startedAt = Date.now();\n\n for (;;) {\n const payment = await this.getPayment(paymentId, { signal: opts.signal });\n if (terminalStatuses.has(payment.status as TerminalPaymentStatus)) {\n return payment;\n }\n if (Date.now() - startedAt >= timeoutMs) {\n throw new ArcPayError({\n type: \"api_error\",\n code: \"payment_poll_timeout\",\n message: `Payment ${paymentId} did not reach a terminal status within ${timeoutMs}ms`,\n retryable: true,\n });\n }\n await sleep(intervalMs, opts.signal);\n }\n }\n\n async capturePayment(\n paymentId: string,\n body: CaptureRequest,\n opts: IdempotencyOptions,\n ): Promise<Payment>;\n async capturePayment(\n paymentId: string,\n body: CaptureRequest,\n opts: RequestOptionsInput,\n ): Promise<Payment> {\n return this.request<Payment>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/capture`,\n body,\n opts,\n true,\n );\n }\n\n async voidPayment(\n paymentId: string,\n body: VoidRequest,\n opts: IdempotencyOptions,\n ): Promise<Payment>;\n async voidPayment(\n paymentId: string,\n body: VoidRequest,\n opts: RequestOptionsInput,\n ): Promise<Payment> {\n return this.request<Payment>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/void`,\n body,\n opts,\n true,\n );\n }\n\n async createRefund(\n paymentId: string,\n body: CreateRefundRequest,\n opts: IdempotencyOptions,\n ): Promise<Refund>;\n async createRefund(\n paymentId: string,\n body: CreateRefundRequest,\n opts: RequestOptionsInput,\n ): Promise<Refund> {\n return this.request<Refund>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/refunds`,\n body,\n opts,\n true,\n );\n }\n\n async chargeSavedCard(\n body: ChargeSavedCardRequest,\n opts: IdempotencyOptions,\n ): Promise<ExecutePaymentResponse>;\n async chargeSavedCard(\n body: ChargeSavedCardRequest,\n opts: RequestOptionsInput,\n ): Promise<ExecutePaymentResponse> {\n return this.request<ExecutePaymentResponse>(\"POST\", \"/payments/saved-card\", body, opts, true);\n }\n\n async executePayment(\n paymentId: string,\n body: ExecutePaymentRequest,\n opts: IdempotencyOptions,\n ): Promise<ExecutePaymentResponse>;\n async executePayment(\n paymentId: string,\n body: ExecutePaymentRequest,\n opts: RequestOptionsInput,\n ): Promise<ExecutePaymentResponse> {\n const requestBody = normalizeExecutePaymentRequest(body);\n return this.request<ExecutePaymentResponse>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/execute`,\n requestBody,\n opts,\n true,\n );\n }\n\n async completeThreeDSMethod(\n paymentId: string,\n body: CompleteThreeDSMethodRequest,\n opts: RequestOptions = {},\n ): Promise<ExecutePaymentResponse> {\n return this.request<ExecutePaymentResponse>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,\n body,\n opts,\n );\n }\n\n async listAvailablePaymentMethods(\n query: ListAvailablePaymentMethodsQuery,\n opts: RequestOptions = {},\n ): Promise<AvailablePaymentMethod[]> {\n return this.request<AvailablePaymentMethod[]>(\n \"GET\",\n appendQuery(\"/payment-methods/available\", query),\n undefined,\n opts,\n );\n }\n\n async createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;\n async createLink(body: CreateLinkRequest, opts: RequestOptionsInput): Promise<Link> {\n return this.request<Link>(\"POST\", \"/links\", body, opts, true);\n }\n\n async getLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n return this.request<Link>(\"GET\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n }\n\n async cancelLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n return this.request<Link>(\"DELETE\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n }\n\n async createCheckoutSession(\n body: CreateCheckoutSessionRequest,\n opts: IdempotencyOptions,\n ): Promise<CheckoutSession>;\n async createCheckoutSession(\n body: CreateCheckoutSessionRequest,\n opts: RequestOptionsInput,\n ): Promise<CheckoutSession> {\n return this.request<CheckoutSession>(\"POST\", \"/checkout/sessions\", body, opts, true);\n }\n\n private async request<T>(\n method: \"GET\" | \"POST\" | \"DELETE\",\n path: string,\n body: unknown,\n opts: RequestOptionsInput = undefined,\n requireIdempotency = false,\n ): Promise<T> {\n const requestOpts = normalizeRequestOptions(opts);\n const headers: Record<string, string> = {\n Authorization: `Bearer ${this.secretKey}`,\n \"X-Arc-Pay-API-Version\": API_VERSION,\n \"Content-Type\": \"application/json\",\n };\n if (requireIdempotency) {\n headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n } else if (requestOpts.idempotencyKey !== undefined) {\n headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n }\n\n let res: Response;\n try {\n res = await this.fetchImpl(`${this.apiBase}${path}`, {\n method,\n headers,\n body: body === undefined ? undefined : JSON.stringify(body),\n signal: requestOpts.signal,\n });\n } catch (err) {\n throw new ArcPayError({\n type: \"network_error\",\n message: err instanceof Error ? err.message : \"Network request failed\",\n retryable: true,\n });\n }\n if (!res.ok) throw await parseErrorResponse(res);\n return (await res.json()) as T;\n }\n}\n\nexport const createArcPayClient = (options: ArcPayClientOptions): ArcPayClient =>\n new ArcPayClient(options);\n","import type { CardBrowserInfo, ExecutePaymentResponse, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n name: string;\n value: string;\n}\n\nexport interface BrowserPostForm {\n action: string;\n method: \"POST\";\n target: \"hidden_iframe\" | \"browser\";\n fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n kind: \"method\" | \"challenge\";\n protocolVersion: \"1\" | \"2\";\n form: BrowserPostForm;\n completionEndpoint?: string;\n threeDSServerTransId?: string;\n}\n\nexport interface MountedThreeDSForm {\n form: HTMLFormElement;\n iframe?: HTMLIFrameElement;\n submit: () => void;\n remove: () => void;\n}\n\nexport interface ThreeDSMountOptions {\n document?: Document;\n container?: HTMLElement;\n challengeTarget?: \"_self\";\n submitter?: (form: HTMLFormElement) => void;\n}\n\nexport interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {\n completeThreeDSMethod?: (\n completion: ReturnType<typeof buildThreeDSMethodCompletion>,\n nextAction: PaymentNextAction,\n ) => Promise<ExecutePaymentResponse>;\n methodCompletionIndicator?: \"Y\" | \"N\" | \"U\";\n methodTimeoutMs?: number;\n signal?: AbortSignal;\n}\n\nexport type ThreeDSBrowserFlowResult =\n | {\n status: \"no_action\";\n response?: ExecutePaymentResponse;\n }\n | {\n status: \"method_completed\";\n response: ExecutePaymentResponse;\n methodResult: \"loaded\" | \"timeout\";\n }\n | {\n status: \"challenge_submitted\";\n action: PaymentNextAction;\n response?: ExecutePaymentResponse;\n mounted: MountedThreeDSForm;\n methodResult?: \"loaded\" | \"timeout\";\n };\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n ? (value as BrowserInfo[\"color_depth\"])\n : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n if (width >= 1000) return \"05\";\n if (width >= 600) return \"04\";\n if (width >= 500) return \"03\";\n if (width >= 390) return \"02\";\n return \"01\";\n};\n\nexport const collectBrowserInfo = (\n acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n if (\n typeof window === \"undefined\" ||\n typeof navigator === \"undefined\" ||\n typeof screen === \"undefined\"\n ) {\n throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n }\n return {\n accept_header: acceptHeader,\n language: navigator.language || \"en\",\n screen_width: screen.width,\n screen_height: screen.height,\n color_depth: normalizeColorDepth(screen.colorDepth),\n timezone_offset_minutes: new Date().getTimezoneOffset(),\n java_enabled: false,\n user_agent: navigator.userAgent,\n window_size: resolveWindowSize(window.innerWidth || screen.width),\n };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n action: nextAction.three_ds.submit.url,\n method: nextAction.three_ds.submit.method,\n target: nextAction.three_ds.submit.target,\n fields: nextAction.three_ds.submit.fields,\n});\n\nconst assertHTTPSActionURL = (action: string): void => {\n let parsed: URL;\n try {\n parsed = new URL(action);\n } catch {\n throw new Error(\"3DS form action must be an absolute HTTPS URL\");\n }\n if (parsed.protocol !== \"https:\") {\n throw new Error(\"3DS form action must use HTTPS\");\n }\n};\n\nexport const buildThreeDSBrowserStep = (\n nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n const action = getThreeDSAction(nextAction);\n if (!action) return null;\n return {\n kind: action.three_ds.phase,\n protocolVersion: action.three_ds.version,\n form: buildThreeDSBrowserForm(action),\n completionEndpoint: action.three_ds.completion_endpoint,\n threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n };\n};\n\nexport const buildThreeDSMethodCompletion = (\n nextAction: PaymentNextAction,\n completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n }\n return {\n completion_indicator: completionIndicator,\n three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n };\n};\n\nconst requireDocument = (explicitDocument?: Document): Document => {\n if (explicitDocument) return explicitDocument;\n if (typeof document === \"undefined\") {\n throw new Error(\"3DS browser helpers must be called in a browser environment\");\n }\n return document;\n};\n\nconst defaultSubmitter = (form: HTMLFormElement): void => {\n form.submit();\n};\n\nexport const mountThreeDSBrowserForm = (\n nextAction: PaymentNextAction,\n options: ThreeDSMountOptions = {},\n): MountedThreeDSForm => {\n const doc = requireDocument(options.document);\n const container = options.container ?? doc.body;\n const formDescriptor = buildThreeDSBrowserForm(nextAction);\n assertHTTPSActionURL(formDescriptor.action);\n const form = doc.createElement(\"form\");\n const target =\n formDescriptor.target === \"hidden_iframe\"\n ? `arcpay-three-ds-method-${crypto.randomUUID()}`\n : (options.challengeTarget ?? \"_self\");\n let iframe: HTMLIFrameElement | undefined;\n\n form.method = formDescriptor.method;\n form.action = formDescriptor.action;\n form.target = target;\n form.hidden = true;\n\n for (const field of formDescriptor.fields) {\n const input = doc.createElement(\"input\");\n input.type = \"hidden\";\n input.name = field.name;\n input.value = field.value;\n form.append(input);\n }\n\n if (formDescriptor.target === \"hidden_iframe\") {\n iframe = doc.createElement(\"iframe\");\n iframe.name = target;\n iframe.title = \"3-D Secure method\";\n iframe.hidden = true;\n container.append(iframe);\n }\n\n container.append(form);\n\n return {\n form,\n iframe,\n submit: () => (options.submitter ?? defaultSubmitter)(form),\n remove: () => {\n form.remove();\n iframe?.remove();\n },\n };\n};\n\nconst waitForMethodFrame = (\n mounted: MountedThreeDSForm,\n timeoutMs: number,\n signal?: AbortSignal,\n): Promise<\"loaded\" | \"timeout\"> =>\n new Promise((resolve, reject) => {\n if (!mounted.iframe) {\n resolve(\"loaded\");\n return;\n }\n if (signal?.aborted) {\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n return;\n }\n\n let settled = false;\n const cleanup = () => {\n mounted.iframe?.removeEventListener(\"load\", onLoad);\n signal?.removeEventListener(\"abort\", onAbort);\n clearTimeout(timer);\n };\n const settle = (result: \"loaded\" | \"timeout\") => {\n if (settled) return;\n settled = true;\n cleanup();\n resolve(result);\n };\n const onLoad = () => settle(\"loaded\");\n const onAbort = () => {\n if (settled) return;\n settled = true;\n cleanup();\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n };\n const timer = setTimeout(() => settle(\"timeout\"), timeoutMs);\n\n mounted.iframe.addEventListener(\"load\", onLoad, { once: true });\n signal?.addEventListener(\"abort\", onAbort, { once: true });\n });\n\nexport const runThreeDSBrowserFlow = async (\n nextAction: PaymentNextAction | undefined,\n options: RunThreeDSBrowserFlowOptions,\n): Promise<ThreeDSBrowserFlowResult> => {\n if (!nextAction) return { status: \"no_action\" };\n\n if (isThreeDSChallengeAction(nextAction)) {\n const mounted = mountThreeDSBrowserForm(nextAction, options);\n mounted.submit();\n return { status: \"challenge_submitted\", action: nextAction, mounted };\n }\n\n if (!isThreeDSMethodAction(nextAction)) return { status: \"no_action\" };\n const completeThreeDSMethod = options.completeThreeDSMethod;\n if (!completeThreeDSMethod) {\n throw new Error(\"completeThreeDSMethod is required for 3DS Method actions\");\n }\n\n const mounted = mountThreeDSBrowserForm(nextAction, options);\n try {\n mounted.submit();\n const methodResult = await waitForMethodFrame(\n mounted,\n options.methodTimeoutMs ?? 10_000,\n options.signal,\n );\n const indicator = options.methodCompletionIndicator ?? (methodResult === \"loaded\" ? \"Y\" : \"N\");\n const response = await completeThreeDSMethod(\n buildThreeDSMethodCompletion(nextAction, indicator),\n nextAction,\n );\n const followUpAction = getThreeDSAction(response.next_action);\n if (followUpAction && isThreeDSChallengeAction(followUpAction)) {\n const challengeMounted = mountThreeDSBrowserForm(followUpAction, options);\n challengeMounted.submit();\n return {\n status: \"challenge_submitted\",\n action: followUpAction,\n response,\n mounted: challengeMounted,\n methodResult,\n };\n }\n return { status: \"method_completed\", response, methodResult };\n } finally {\n mounted.remove();\n }\n};\n\nconst htmlEscape = (value: string): string =>\n value\n .replace(/&/g, \"&amp;\")\n .replace(/</g, \"&lt;\")\n .replace(/>/g, \"&gt;\")\n .replace(/\"/g, \"&quot;\")\n .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n const form = buildThreeDSBrowserForm(nextAction);\n assertHTTPSActionURL(form.action);\n const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n const inputs = form.fields\n .map(\n (field) =>\n `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n )\n .join(\"\");\n const iframe =\n form.target === \"hidden_iframe\"\n ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n : \"\";\n return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n"]}
1
+ {"version":3,"sources":["../../src/core/errors.ts","../../src/server/client.ts","../../src/three-ds/actions.ts"],"names":[],"mappings":";;;AAsBO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EASrC,YAAY,IAAA,EAAuB;AACjC,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AAAA,EACxB;AACF,CAAA;;;ACyBA,IAAM,gBAAA,GAAmB,6BAAA;AACzB,IAAM,WAAA,GAAc,YAAA;AACpB,IAAM,wBAAA,GAA2B,IAAA;AACjC,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,iCAAA,GAAsE;AAAA,EAC1E,YAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,kBAAkB,GAAA,EAAqC;AAC9D,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EAAS,uCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,IAAI,UAAA,CAAW,UAAU,KAAK,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,sBAAA;AAAA,MACN,IAAA,EAAM,oBAAA;AAAA,MACN,OAAA,EACE,4FAAA;AAAA,MACF,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACF;AAEA,IAAM,aAAA,GAAgB,CAAC,IAAA,KAAyB;AAC9C,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,MAAM,CAAA,IAAK,IAAA,CAAK,WAAW,GAAA,GAAM,CAAC,MAAM,EAAA,EAAI;AACjD,IAAA,GAAA,IAAO,CAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA;AAC1B,CAAA;AAMA,IAAM,uBAAA,GAA0B,CAC9B,IAAA,KAC0C,IAAA,IAAA,IAAA,GAAA,IAAA,GAAQ,EAAC;AAErD,IAAM,kBAAA,GACJ,4EAAA;AAEF,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAwD;AACrF,EAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,+CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,yBAAA;AAAA,MACN,OAAA,EAAS,qCAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAA,CAAK,cAAA;AACd,CAAA;AAEA,IAAM,8BAAA,GAAiC,CAAC,IAAA,KAAuD;AAC7F,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,CAAK,cAAA,EAAgB;AACjC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,iBAAA;AAAA,MACN,OAAA,EAAS,4BAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,cAAA,KAAmB,WAAA,IAAe,CAAC,KAAK,aAAA,EAAe;AAC9D,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,wDAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,iBAAiB,KAAA,EAAO;AAC/B,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,6CAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,IAAI,IAAA,CAAK,mBAAmB,WAAA,EAAa;AACvC,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,0DAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,IAAA,CAAK,kBAAA,CAAmB,QAAA,KAAa,IAAA,CAAK,cAAA,EAAgB;AAC5D,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,kBAAA;AAAA,QACN,IAAA,EAAM,iBAAA;AAAA,QACN,OAAA,EAAS,uDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT,CAAA;AAEA,IAAM,WAAA,GAAc,CAAC,IAAA,EAAc,KAAA,KAA2B;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,UAAU,EAAA,EAAI;AAC3D,IAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,OAAA,GAAU,OAAO,QAAA,EAAS;AAChC,EAAA,OAAO,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,GAAK,IAAA;AAC1C,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,EAAA,EAAY,MAAA,KACzB,IAAI,OAAA,CAAQ,CAAC,SAAS,MAAA,KAAW;AAC/B,EAAA,IAAI,iCAAQ,OAAA,EAAS;AACnB,IAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAClE,IAAA;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,EAAS,EAAE,CAAA;AACpC,EAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,gBAAA;AAAA,IACN,OAAA;AAAA,IACA,MAAM;AACJ,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,CAAO,IAAI,YAAA,CAAa,2BAAA,EAA6B,YAAY,CAAC,CAAA;AAAA,IACpE,CAAA;AAAA,IACA,EAAE,MAAM,IAAA;AAAK,GAAA;AAEjB,CAAC,CAAA;AAEH,IAAM,eAAA,GAAkB,CAAC,KAAA,EAA2B,QAAA,KAA6B;AAC/E,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,QAAA;AAChC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY;AAAA,MACpB,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM,sBAAA;AAAA,MACN,OAAA,EAAS,gEAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH;AACA,EAAA,OAAO,KAAA;AACT,CAAA;AAaA,IAAM,iBAAA,GAAoB,CAAC,KAAA,KACzB,KAAA,KAAU,kBAAA,IACV,KAAA,KAAU,sBAAA,IACV,KAAA,KAAU,qBAAA,IACV,KAAA,KAAU,aAAA,IACV,KAAA,KAAU,sBACV,KAAA,KAAU,WAAA;AAEZ,IAAM,gBAAA,GAAmB,CAAC,IAAA,EAAuB,MAAA,EAAgB,IAAA,KAA2B;AAC1F,EAAA,IAAI,IAAA,KAAS,oBAAoB,OAAO,IAAA;AACxC,EAAA,IAAI,IAAA,KAAS,WAAW,OAAO,KAAA;AAC/B,EAAA,OAAO,IAAA,KAAS,eAAe,MAAA,IAAU,GAAA;AAC3C,CAAA;AAEA,IAAM,kBAAA,GAAqB,OAAO,GAAA,KAAwC;AA9P1E,EAAA,IAAA,EAAA,EAAA,EAAA;AA+PE,EAAA,IAAI,OAAqB,EAAC;AAC1B,EAAA,IAAI;AACF,IAAA,IAAA,GAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,EAER;AACA,EAAA,MAAM,MAAA,GAAA,CAAS,EAAA,GAAA,IAAA,CAAK,KAAA,KAAL,IAAA,GAAA,EAAA,GAAc,EAAC;AAC9B,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,MAAA,CAAO,IAAI,CAAA,GACtC,OAAO,IAAA,GACP,GAAA,CAAI,MAAA,IAAU,GAAA,GACZ,WAAA,GACA,kBAAA;AACN,EAAA,OAAO,IAAI,WAAA,CAAY;AAAA,IACrB,IAAA;AAAA,IACA,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,UAAS,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,CAAA,2BAAA,EAA8B,IAAI,MAAM,CAAA,CAAA;AAAA,IACnE,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,WAAW,MAAA,CAAO,UAAA;AAAA,IAClB,aAAa,MAAA,CAAO,YAAA;AAAA,IACpB,WAAW,gBAAA,CAAiB,IAAA,EAAM,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAI;AAAA,GAC1D,CAAA;AACH,CAAA;AAEO,IAAM,eAAN,MAAmB;AAAA,EAKxB,YAAY,OAAA,EAA8B;AA3R5C,IAAA,IAAA,EAAA,EAAA,EAAA;AA4RI,IAAA,MAAM,YAAqB,OAAA,CAAQ,SAAA;AACnC,IAAA,iBAAA,CAAkB,SAAS,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,IAAS,OAAO,UAAU,WAAA,EAAa;AAClD,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,WAAA;AAAA,QACN,IAAA,EAAM,mBAAA;AAAA,QACN,OAAA,EAAS,oDAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,OAAA,GAAU,aAAA,CAAA,CAAc,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,YAAmB,gBAAgB,CAAA;AAChE,IAAA,IAAA,CAAK,SAAA,GAAA,CAAY,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,KAAA;AAAA,EACpC;AAAA,EAEA,MAAM,YAAA,CACJ,KAAA,GAA2B,EAAC,EAC5B,IAAA,GAAuB,EAAC,EACF;AACtB,IAAA,OAAO,IAAA,CAAK,QAAqB,KAAA,EAAO,WAAA,CAAY,aAAa,KAAK,CAAA,EAAG,QAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAGA,MAAM,aAAA,CAAc,IAAA,EAA4B,IAAA,EAA6C;AAC3F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,WAAA,EAAa,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACpE;AAAA,EAGA,MAAM,eAAA,CAAgB,IAAA,EAA8B,IAAA,EAA6C;AAC/F,IAAA,OAAO,KAAK,OAAA,CAAiB,MAAA,EAAQ,cAAA,EAAgB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAA,CAAW,SAAA,EAAmB,IAAA,GAAuB,EAAC,EAAqB;AAC/E,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAAA,MAC1C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,sBAAA,CACJ,SAAA,EACA,IAAA,GAA8B,EAAC,EACb;AAxUtB,IAAA,IAAA,EAAA;AAyUI,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,IAAA,CAAK,UAAA,EAAY,wBAAwB,CAAA;AAC5E,IAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,IAAA,CAAK,SAAA,EAAW,uBAAuB,CAAA;AACzE,IAAA,MAAM,mBAAmB,IAAI,GAAA,CAAA,CAAI,EAAA,GAAA,IAAA,CAAK,gBAAA,KAAL,YAAyB,iCAAiC,CAAA;AAC3F,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,IAAA,WAAS;AACP,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AACxE,MAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,OAAA,CAAQ,MAA+B,CAAA,EAAG;AACjE,QAAA,OAAO,OAAA;AAAA,MACT;AACA,MAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA,IAAa,SAAA,EAAW;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY;AAAA,UACpB,IAAA,EAAM,WAAA;AAAA,UACN,IAAA,EAAM,sBAAA;AAAA,UACN,OAAA,EAAS,CAAA,QAAA,EAAW,SAAS,CAAA,wCAAA,EAA2C,SAAS,CAAA,EAAA,CAAA;AAAA,UACjF,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AACA,MAAA,MAAM,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,MAAM,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,WAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,KAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAOA,MAAM,YAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAMA,MAAM,eAAA,CACJ,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,OAAO,KAAK,OAAA,CAAgC,MAAA,EAAQ,sBAAA,EAAwB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9F;AAAA,EAOA,MAAM,cAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,EACiC;AACjC,IAAA,MAAM,WAAA,GAAc,+BAA+B,IAAI,CAAA;AACvD,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,QAAA,CAAA;AAAA,MAC1C,WAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,qBAAA,CACJ,SAAA,EACA,IAAA,EACA,IAAA,GAAuB,EAAC,EACS;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,MAAA;AAAA,MACA,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAS,CAAC,CAAA,oBAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,2BAAA,CACJ,KAAA,EACA,IAAA,GAAuB,EAAC,EACW;AACnC,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,KAAA;AAAA,MACA,WAAA,CAAY,8BAA8B,KAAK,CAAA;AAAA,MAC/C,MAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAGA,MAAM,UAAA,CAAW,IAAA,EAAyB,IAAA,EAA0C;AAClF,IAAA,OAAO,KAAK,OAAA,CAAc,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACtE,IAAA,OAAO,IAAA,CAAK,QAAc,KAAA,EAAO,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC1F;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAgB,IAAA,GAAuB,EAAC,EAAkB;AACzE,IAAA,OAAO,IAAA,CAAK,QAAc,QAAA,EAAU,CAAA,OAAA,EAAU,mBAAmB,MAAM,CAAC,CAAA,CAAA,EAAI,MAAA,EAAW,IAAI,CAAA;AAAA,EAC7F;AAAA,EAMA,MAAM,qBAAA,CACJ,IAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,OAAO,KAAK,OAAA,CAAyB,MAAA,EAAQ,oBAAA,EAAsB,IAAA,EAAM,MAAM,IAAI,CAAA;AAAA,EACrF;AAAA,EAEA,MAAc,QACZ,MAAA,EACA,IAAA,EACA,MACA,IAAA,GAA4B,MAAA,EAC5B,qBAAqB,KAAA,EACT;AACZ,IAAA,MAAM,WAAA,GAAc,wBAAwB,IAAI,CAAA;AAChD,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,SAAS,CAAA,CAAA;AAAA,MACvC,uBAAA,EAAyB,WAAA;AAAA,MACzB,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,kBAAA,EAAoB;AACtB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE,CAAA,MAAA,IAAW,WAAA,CAAY,cAAA,KAAmB,MAAA,EAAW;AACnD,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,qBAAA,CAAsB,WAAW,CAAA;AAAA,IAChE;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,KAAK,SAAA,CAAU,CAAA,EAAG,KAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,QACnD,MAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAM,IAAA,KAAS,KAAA,CAAA,GAAY,KAAA,CAAA,GAAY,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,QAC1D,QAAQ,WAAA,CAAY;AAAA,OACrB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,WAAA,CAAY;AAAA,QACpB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,wBAAA;AAAA,QAC9C,SAAA,EAAW;AAAA,OACZ,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,mBAAmB,GAAG,CAAA;AAC/C,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,OAAA,KACjC,IAAI,aAAa,OAAO;;;ACvanB,IAAM,gBAAA,GAAmB,CAAC,UAAA,KAA6D;AAC5F,EAAA,OAAO,UAAA,IAAA,IAAA,GAAA,UAAA,GAAc,IAAA;AACvB;AAEO,IAAM,qBAAA,GAAwB,CAAC,UAAA,KAA4C;AAChF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,iBAAA,IAAqB,UAAA,CAAW,SAAS,KAAA,KAAU,QAAA;AACjF;AAEO,IAAM,wBAAA,GAA2B,CAAC,UAAA,KAA4C;AACnF,EAAA,OAAA,CAAO,UAAA,IAAA,IAAA,GAAA,MAAA,GAAA,UAAA,CAAY,IAAA,MAAS,oBAAA,IAAwB,UAAA,CAAW,SAAS,KAAA,KAAU,WAAA;AACpF;AAEO,IAAM,uBAAA,GAA0B,CAAC,UAAA,MAAoD;AAAA,EAC1F,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,GAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAA;AAAA,EACnC,MAAA,EAAQ,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO;AACrC,CAAA;AAEA,IAAM,oBAAA,GAAuB,CAAC,MAAA,KAAyB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,MAAM,CAAA;AAAA,EACzB,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAChC,IAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,EAClD;AACF,CAAA;AAEO,IAAM,uBAAA,GAA0B,CACrC,UAAA,KAC8B;AAC9B,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAO,QAAA,CAAS,KAAA;AAAA,IACtB,eAAA,EAAiB,OAAO,QAAA,CAAS,OAAA;AAAA,IACjC,IAAA,EAAM,wBAAwB,MAAM,CAAA;AAAA,IACpC,kBAAA,EAAoB,OAAO,QAAA,CAAS,mBAAA;AAAA,IACpC,oBAAA,EAAsB,OAAO,QAAA,CAAS;AAAA,GACxC;AACF;AAEO,IAAM,4BAAA,GAA+B,CAC1C,UAAA,EACA,mBAAA,GAAuC,GAAA,KACyC;AAChF,EAAA,IAAI,CAAC,qBAAA,CAAsB,UAAU,KAAK,CAAC,UAAA,CAAW,SAAS,wBAAA,EAA0B;AACvF,IAAA,MAAM,IAAI,MAAM,2EAA2E,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO;AAAA,IACL,oBAAA,EAAsB,mBAAA;AAAA,IACtB,wBAAA,EAA0B,WAAW,QAAA,CAAS;AAAA,GAChD;AACF;AAwJA,IAAM,UAAA,GAAa,CAAC,KAAA,KAClB,KAAA,CACG,QAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,MAAM,CAAA,CACpB,OAAA,CAAQ,MAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAEnB,IAAM,0BAAA,GAA6B,CAAC,UAAA,KAA0C;AACnF,EAAA,MAAM,IAAA,GAAO,wBAAwB,UAAU,CAAA;AAC/C,EAAA,oBAAA,CAAqB,KAAK,MAAM,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,KAAW,eAAA,GAAkB,wBAAA,GAA2B,OAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,CACjB,GAAA;AAAA,IACC,CAAC,KAAA,KACC,CAAA,2BAAA,EAA8B,UAAA,CAAW,KAAA,CAAM,IAAI,CAAC,CAAA,SAAA,EAAY,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,EAAA;AAAA,GAC3F,CACC,KAAK,EAAE,CAAA;AACV,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,KAAW,eAAA,GACZ,kFAAA,GACA,EAAA;AACN,EAAA,OAAO,CAAA,8DAAA,EAAiE,MAAM,CAAA,4BAAA,EAA+B,UAAA,CAAW,IAAA,CAAK,MAAM,CAAC,CAAA,UAAA,EAAa,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,iEAAA,CAAA;AACpK","file":"index.cjs","sourcesContent":["export type ArcPayErrorType =\n | \"validation_error\"\n | \"configuration_error\"\n | \"authentication_error\"\n | \"authorization_error\"\n | \"state_error\"\n | \"rate_limit_error\"\n | \"api_error\"\n | \"network_error\"\n | \"challenge_aborted\";\n\ninterface ArcPayErrorInit {\n type: ArcPayErrorType;\n message: string;\n code?: string;\n param?: string;\n paymentId?: string;\n declineCode?: string;\n retryable: boolean;\n requestId?: string;\n}\n\nexport class ArcPayError extends Error {\n readonly type: ArcPayErrorType;\n readonly code?: string;\n readonly param?: string;\n readonly paymentId?: string;\n readonly declineCode?: string;\n readonly retryable: boolean;\n readonly requestId?: string;\n\n constructor(init: ArcPayErrorInit) {\n super(init.message);\n this.name = \"ArcPayError\";\n this.type = init.type;\n this.code = init.code;\n this.param = init.param;\n this.paymentId = init.paymentId;\n this.declineCode = init.declineCode;\n this.retryable = init.retryable;\n this.requestId = init.requestId;\n }\n}\n\nexport const isValidationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"validation_error\";\nconst isConfigurationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"configuration_error\";\nexport const isAuthenticationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authentication_error\";\nexport const isAuthorizationError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"authorization_error\";\nexport const isStateError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"state_error\";\nexport const isRateLimitError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"rate_limit_error\";\nexport const isApiError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"api_error\";\nexport const isNetworkError = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"network_error\";\nexport const isChallengeAborted = (e: unknown): e is ArcPayError =>\n e instanceof ArcPayError && e.type === \"challenge_aborted\";\n","import { ArcPayError, type ArcPayErrorType } from \"../core/errors\";\nimport type {\n AvailablePaymentMethod,\n CaptureRequest,\n ChargeSavedCardRequest,\n CheckoutSession,\n CompleteThreeDSMethodRequest,\n CreateCheckoutSessionRequest,\n CreateCardSetupRequest,\n CreateLinkRequest,\n CreatePaymentRequest,\n CreateRefundRequest,\n ExecutePaymentRequest,\n ExecutePaymentResponse,\n Link,\n ListAvailablePaymentMethodsQuery,\n ListPaymentsQuery,\n Payment,\n PaymentList,\n PaymentNextAction,\n Refund,\n TerminalPaymentStatus,\n VoidRequest,\n WaitForPaymentOptions,\n} from \"./types\";\n\nexport type {\n AvailablePaymentMethod,\n CaptureRequest,\n ChargeSavedCardRequest,\n CheckoutSession,\n CompleteThreeDSMethodRequest,\n CreateCheckoutSessionRequest,\n CreateLinkRequest,\n CreatePaymentRequest,\n CreateRefundRequest,\n ExecutePaymentRequest,\n ExecutePaymentResponse,\n PaymentNextAction,\n Link,\n ListAvailablePaymentMethodsQuery,\n ListPaymentsQuery,\n Payment,\n PaymentFlowMode,\n PaymentList,\n PaymentMethod,\n Refund,\n VoidRequest,\n} from \"./types\";\n\nexport interface ArcPayClientOptions {\n secretKey: string;\n apiBase?: string;\n fetch?: typeof fetch;\n}\n\nexport interface IdempotencyOptions {\n idempotencyKey: string;\n signal?: AbortSignal;\n}\n\ntype RequestOptionsInput = RequestOptions | IdempotencyOptions | null | undefined;\n\nexport interface RequestOptions {\n signal?: AbortSignal;\n}\n\nconst DEFAULT_API_BASE = \"https://api.arcpay.space/v1\";\nconst API_VERSION = \"2026-05-06\";\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_POLL_TIMEOUT_MS = 60_000;\nconst DEFAULT_TERMINAL_PAYMENT_STATUSES: readonly TerminalPaymentStatus[] = [\n \"authorized\",\n \"captured\",\n \"settled\",\n \"voided\",\n \"expired\",\n \"refunded\",\n \"chargeback\",\n \"declined\",\n \"failed\",\n];\n\nfunction validateSecretKey(key: unknown): asserts key is string {\n if (typeof key !== \"string\" || key.length === 0) {\n throw new ArcPayError({\n type: \"authentication_error\",\n code: \"invalid_secret_key\",\n message: \"Secret key must be a non-empty string\",\n retryable: false,\n });\n }\n if (!key.startsWith(\"sk_test_\") && !key.startsWith(\"sk_live_\")) {\n throw new ArcPayError({\n type: \"authentication_error\",\n code: \"invalid_secret_key\",\n message:\n \"Secret key must start with sk_test_ or sk_live_. Publishable keys cannot call server APIs.\",\n retryable: false,\n });\n }\n}\n\nconst normalizeBase = (base: string): string => {\n let end = base.length;\n while (end > 0 && base.charCodeAt(end - 1) === 47) {\n end -= 1;\n }\n return base.slice(0, end);\n};\n\ninterface RequestOptionsWithOptionalIdempotency extends RequestOptions {\n idempotencyKey?: string;\n}\n\nconst normalizeRequestOptions = (\n opts: RequestOptionsInput,\n): RequestOptionsWithOptionalIdempotency => opts ?? {};\n\nconst IDEMPOTENCY_KEY_RE =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\nconst requireIdempotencyKey = (opts: RequestOptionsWithOptionalIdempotency): string => {\n if (!opts.idempotencyKey) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"missing_idempotency_key\",\n message: \"idempotencyKey is required for this operation\",\n retryable: false,\n });\n }\n if (!IDEMPOTENCY_KEY_RE.test(opts.idempotencyKey)) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_idempotency_key\",\n message: \"idempotencyKey must be a valid UUID\",\n retryable: false,\n });\n }\n return opts.idempotencyKey;\n};\n\nconst normalizeExecutePaymentRequest = (body: ExecutePaymentRequest): ExecutePaymentRequest => {\n if (!body || !body.payment_method) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"payment_method is required\",\n retryable: false,\n });\n }\n if (body.payment_method === \"bank_card\" && !body.card_token_id) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"missing_card_token_id\",\n message: \"card_token_id is required for bank_card executePayment\",\n retryable: false,\n });\n }\n if (body.payment_mode !== \"h2h\") {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_payment_mode\",\n message: \"payment_mode must be h2h for executePayment\",\n retryable: false,\n });\n }\n if (body.payment_method !== \"bank_card\") {\n if (!body.wallet_interaction) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"wallet_interaction is required for wallet executePayment\",\n retryable: false,\n });\n }\n if (body.wallet_interaction.provider !== body.payment_method) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_request\",\n message: \"wallet_interaction.provider must match payment_method\",\n retryable: false,\n });\n }\n }\n return body;\n};\n\nconst appendQuery = (path: string, query?: object): string => {\n if (!query) return path;\n const params = new URLSearchParams();\n for (const [key, value] of Object.entries(query)) {\n if (value === undefined || value === null || value === \"\") continue;\n params.set(key, String(value));\n }\n const encoded = params.toString();\n return encoded ? `${path}?${encoded}` : path;\n};\n\nconst sleep = (ms: number, signal?: AbortSignal): Promise<void> =>\n new Promise((resolve, reject) => {\n if (signal?.aborted) {\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n return;\n }\n const timer = setTimeout(resolve, ms);\n signal?.addEventListener(\n \"abort\",\n () => {\n clearTimeout(timer);\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n },\n { once: true },\n );\n });\n\nconst normalizePollMs = (value: number | undefined, fallback: number): number => {\n if (value === undefined) return fallback;\n if (!Number.isFinite(value) || value <= 0) {\n throw new ArcPayError({\n type: \"validation_error\",\n code: \"invalid_poll_options\",\n message: \"Polling intervals and timeouts must be positive finite numbers\",\n retryable: false,\n });\n }\n return value;\n};\n\ninterface APIErrorBody {\n error?: {\n type?: string;\n code?: string;\n message?: string;\n param?: string;\n request_id?: string;\n decline_code?: string;\n };\n}\n\nconst isPublicErrorType = (value: unknown): value is ArcPayErrorType =>\n value === \"validation_error\" ||\n value === \"authentication_error\" ||\n value === \"authorization_error\" ||\n value === \"state_error\" ||\n value === \"rate_limit_error\" ||\n value === \"api_error\";\n\nconst isRetryableError = (type: ArcPayErrorType, status: number, code?: string): boolean => {\n if (type === \"rate_limit_error\") return true;\n if (code === \"timeout\") return false;\n return type === \"api_error\" && status >= 500;\n};\n\nconst parseErrorResponse = async (res: Response): Promise<ArcPayError> => {\n let body: APIErrorBody = {};\n try {\n body = (await res.json()) as APIErrorBody;\n } catch {\n /* keep default error below */\n }\n const detail = body.error ?? {};\n const type = isPublicErrorType(detail.type)\n ? detail.type\n : res.status >= 500\n ? \"api_error\"\n : \"validation_error\";\n return new ArcPayError({\n type,\n code: detail.code,\n message: detail.message ?? `Request failed with status ${res.status}`,\n param: detail.param,\n requestId: detail.request_id,\n declineCode: detail.decline_code,\n retryable: isRetryableError(type, res.status, detail.code),\n });\n};\n\nexport class ArcPayClient {\n private readonly secretKey: string;\n private readonly apiBase: string;\n private readonly fetchImpl: typeof fetch;\n\n constructor(options: ArcPayClientOptions) {\n const secretKey: unknown = options.secretKey;\n validateSecretKey(secretKey);\n if (!options.fetch && typeof fetch === \"undefined\") {\n throw new ArcPayError({\n type: \"api_error\",\n code: \"fetch_unavailable\",\n message: \"A fetch implementation is required in this runtime\",\n retryable: false,\n });\n }\n this.secretKey = secretKey;\n this.apiBase = normalizeBase(options.apiBase ?? DEFAULT_API_BASE);\n this.fetchImpl = options.fetch ?? fetch;\n }\n\n async listPayments(\n query: ListPaymentsQuery = {},\n opts: RequestOptions = {},\n ): Promise<PaymentList> {\n return this.request<PaymentList>(\"GET\", appendQuery(\"/payments\", query), undefined, opts);\n }\n\n async createPayment(body: CreatePaymentRequest, opts: IdempotencyOptions): Promise<Payment>;\n async createPayment(body: CreatePaymentRequest, opts: RequestOptionsInput): Promise<Payment> {\n return this.request<Payment>(\"POST\", \"/payments\", body, opts, true);\n }\n\n async createCardSetup(body: CreateCardSetupRequest, opts: IdempotencyOptions): Promise<Payment>;\n async createCardSetup(body: CreateCardSetupRequest, opts: RequestOptionsInput): Promise<Payment> {\n return this.request<Payment>(\"POST\", \"/cards/setup\", body, opts, true);\n }\n\n async getPayment(paymentId: string, opts: RequestOptions = {}): Promise<Payment> {\n return this.request<Payment>(\n \"GET\",\n `/payments/${encodeURIComponent(paymentId)}`,\n undefined,\n opts,\n );\n }\n\n async waitForPaymentTerminal(\n paymentId: string,\n opts: WaitForPaymentOptions = {},\n ): Promise<Payment> {\n const intervalMs = normalizePollMs(opts.intervalMs, DEFAULT_POLL_INTERVAL_MS);\n const timeoutMs = normalizePollMs(opts.timeoutMs, DEFAULT_POLL_TIMEOUT_MS);\n const terminalStatuses = new Set(opts.terminalStatuses ?? DEFAULT_TERMINAL_PAYMENT_STATUSES);\n const startedAt = Date.now();\n\n for (;;) {\n const payment = await this.getPayment(paymentId, { signal: opts.signal });\n if (terminalStatuses.has(payment.status as TerminalPaymentStatus)) {\n return payment;\n }\n if (Date.now() - startedAt >= timeoutMs) {\n throw new ArcPayError({\n type: \"api_error\",\n code: \"payment_poll_timeout\",\n message: `Payment ${paymentId} did not reach a terminal status within ${timeoutMs}ms`,\n retryable: true,\n });\n }\n await sleep(intervalMs, opts.signal);\n }\n }\n\n async capturePayment(\n paymentId: string,\n body: CaptureRequest,\n opts: IdempotencyOptions,\n ): Promise<Payment>;\n async capturePayment(\n paymentId: string,\n body: CaptureRequest,\n opts: RequestOptionsInput,\n ): Promise<Payment> {\n return this.request<Payment>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/capture`,\n body,\n opts,\n true,\n );\n }\n\n async voidPayment(\n paymentId: string,\n body: VoidRequest,\n opts: IdempotencyOptions,\n ): Promise<Payment>;\n async voidPayment(\n paymentId: string,\n body: VoidRequest,\n opts: RequestOptionsInput,\n ): Promise<Payment> {\n return this.request<Payment>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/void`,\n body,\n opts,\n true,\n );\n }\n\n async createRefund(\n paymentId: string,\n body: CreateRefundRequest,\n opts: IdempotencyOptions,\n ): Promise<Refund>;\n async createRefund(\n paymentId: string,\n body: CreateRefundRequest,\n opts: RequestOptionsInput,\n ): Promise<Refund> {\n return this.request<Refund>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/refunds`,\n body,\n opts,\n true,\n );\n }\n\n async chargeSavedCard(\n body: ChargeSavedCardRequest,\n opts: IdempotencyOptions,\n ): Promise<ExecutePaymentResponse>;\n async chargeSavedCard(\n body: ChargeSavedCardRequest,\n opts: RequestOptionsInput,\n ): Promise<ExecutePaymentResponse> {\n return this.request<ExecutePaymentResponse>(\"POST\", \"/payments/saved-card\", body, opts, true);\n }\n\n async executePayment(\n paymentId: string,\n body: ExecutePaymentRequest,\n opts: IdempotencyOptions,\n ): Promise<ExecutePaymentResponse>;\n async executePayment(\n paymentId: string,\n body: ExecutePaymentRequest,\n opts: RequestOptionsInput,\n ): Promise<ExecutePaymentResponse> {\n const requestBody = normalizeExecutePaymentRequest(body);\n return this.request<ExecutePaymentResponse>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/execute`,\n requestBody,\n opts,\n true,\n );\n }\n\n async completeThreeDSMethod(\n paymentId: string,\n body: CompleteThreeDSMethodRequest,\n opts: RequestOptions = {},\n ): Promise<ExecutePaymentResponse> {\n return this.request<ExecutePaymentResponse>(\n \"POST\",\n `/payments/${encodeURIComponent(paymentId)}/complete-3ds-method`,\n body,\n opts,\n );\n }\n\n async listAvailablePaymentMethods(\n query: ListAvailablePaymentMethodsQuery,\n opts: RequestOptions = {},\n ): Promise<AvailablePaymentMethod[]> {\n return this.request<AvailablePaymentMethod[]>(\n \"GET\",\n appendQuery(\"/payment-methods/available\", query),\n undefined,\n opts,\n );\n }\n\n async createLink(body: CreateLinkRequest, opts: IdempotencyOptions): Promise<Link>;\n async createLink(body: CreateLinkRequest, opts: RequestOptionsInput): Promise<Link> {\n return this.request<Link>(\"POST\", \"/links\", body, opts, true);\n }\n\n async getLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n return this.request<Link>(\"GET\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n }\n\n async cancelLink(linkId: string, opts: RequestOptions = {}): Promise<Link> {\n return this.request<Link>(\"DELETE\", `/links/${encodeURIComponent(linkId)}`, undefined, opts);\n }\n\n async createCheckoutSession(\n body: CreateCheckoutSessionRequest,\n opts: IdempotencyOptions,\n ): Promise<CheckoutSession>;\n async createCheckoutSession(\n body: CreateCheckoutSessionRequest,\n opts: RequestOptionsInput,\n ): Promise<CheckoutSession> {\n return this.request<CheckoutSession>(\"POST\", \"/checkout/sessions\", body, opts, true);\n }\n\n private async request<T>(\n method: \"GET\" | \"POST\" | \"DELETE\",\n path: string,\n body: unknown,\n opts: RequestOptionsInput = undefined,\n requireIdempotency = false,\n ): Promise<T> {\n const requestOpts = normalizeRequestOptions(opts);\n const headers: Record<string, string> = {\n Authorization: `Bearer ${this.secretKey}`,\n \"X-Arc-Pay-API-Version\": API_VERSION,\n \"Content-Type\": \"application/json\",\n };\n if (requireIdempotency) {\n headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n } else if (requestOpts.idempotencyKey !== undefined) {\n headers[\"Idempotency-Key\"] = requireIdempotencyKey(requestOpts);\n }\n\n let res: Response;\n try {\n res = await this.fetchImpl(`${this.apiBase}${path}`, {\n method,\n headers,\n body: body === undefined ? undefined : JSON.stringify(body),\n signal: requestOpts.signal,\n });\n } catch (err) {\n throw new ArcPayError({\n type: \"network_error\",\n message: err instanceof Error ? err.message : \"Network request failed\",\n retryable: true,\n });\n }\n if (!res.ok) throw await parseErrorResponse(res);\n return (await res.json()) as T;\n }\n}\n\nexport const createArcPayClient = (options: ArcPayClientOptions): ArcPayClient =>\n new ArcPayClient(options);\n","import type { CardBrowserInfo, ExecutePaymentResponse, PaymentNextAction } from \"../server/types\";\n\nexport type ThreeDSAction = PaymentNextAction;\nexport type BrowserInfo = CardBrowserInfo;\n\nexport interface BrowserFormField {\n name: string;\n value: string;\n}\n\nexport interface BrowserPostForm {\n action: string;\n method: \"POST\";\n target: \"hidden_iframe\" | \"browser\";\n fields: BrowserFormField[];\n}\n\nexport interface ThreeDSBrowserStep {\n kind: \"method\" | \"challenge\";\n protocolVersion: \"1\" | \"2\";\n form: BrowserPostForm;\n completionEndpoint?: string;\n threeDSServerTransId?: string;\n}\n\nexport interface MountedThreeDSForm {\n form: HTMLFormElement;\n iframe?: HTMLIFrameElement;\n submit: () => void;\n remove: () => void;\n}\n\nexport interface ThreeDSMountOptions {\n document?: Document;\n container?: HTMLElement;\n challengeTarget?: \"_self\";\n submitter?: (form: HTMLFormElement) => void;\n}\n\nexport interface RunThreeDSBrowserFlowOptions extends ThreeDSMountOptions {\n completeThreeDSMethod?: (\n completion: ReturnType<typeof buildThreeDSMethodCompletion>,\n nextAction: PaymentNextAction,\n ) => Promise<ExecutePaymentResponse>;\n methodCompletionIndicator?: \"Y\" | \"N\" | \"U\";\n methodTimeoutMs?: number;\n signal?: AbortSignal;\n}\n\nexport type ThreeDSBrowserFlowResult =\n | {\n status: \"no_action\";\n response?: ExecutePaymentResponse;\n }\n | {\n status: \"method_completed\";\n response: ExecutePaymentResponse;\n methodResult: \"loaded\" | \"timeout\";\n }\n | {\n status: \"challenge_submitted\";\n action: PaymentNextAction;\n response?: ExecutePaymentResponse;\n mounted: MountedThreeDSForm;\n methodResult?: \"loaded\" | \"timeout\";\n };\n\nconst supportedColorDepths = [1, 4, 8, 15, 16, 24, 32, 48] as const;\n\nconst normalizeColorDepth = (value: number): BrowserInfo[\"color_depth\"] =>\n supportedColorDepths.includes(value as BrowserInfo[\"color_depth\"])\n ? (value as BrowserInfo[\"color_depth\"])\n : 24;\n\nconst resolveWindowSize = (width: number): NonNullable<BrowserInfo[\"window_size\"]> => {\n if (width >= 1000) return \"05\";\n if (width >= 600) return \"04\";\n if (width >= 500) return \"03\";\n if (width >= 390) return \"02\";\n return \"01\";\n};\n\nexport const collectBrowserInfo = (\n acceptHeader = \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n): BrowserInfo => {\n if (\n typeof window === \"undefined\" ||\n typeof navigator === \"undefined\" ||\n typeof screen === \"undefined\"\n ) {\n throw new Error(\"collectBrowserInfo must be called in a browser environment\");\n }\n return {\n accept_header: acceptHeader,\n language: navigator.language || \"en\",\n screen_width: screen.width,\n screen_height: screen.height,\n color_depth: normalizeColorDepth(screen.colorDepth),\n timezone_offset_minutes: new Date().getTimezoneOffset(),\n java_enabled: false,\n user_agent: navigator.userAgent,\n window_size: resolveWindowSize(window.innerWidth || screen.width),\n };\n};\n\nexport const getThreeDSAction = (nextAction?: PaymentNextAction): PaymentNextAction | null => {\n return nextAction ?? null;\n};\n\nexport const isThreeDSMethodAction = (nextAction?: PaymentNextAction): boolean => {\n return nextAction?.type === \"three_ds_method\" && nextAction.three_ds.phase === \"method\";\n};\n\nexport const isThreeDSChallengeAction = (nextAction?: PaymentNextAction): boolean => {\n return nextAction?.type === \"three_ds_challenge\" && nextAction.three_ds.phase === \"challenge\";\n};\n\nexport const buildThreeDSBrowserForm = (nextAction: PaymentNextAction): BrowserPostForm => ({\n action: nextAction.three_ds.submit.url,\n method: nextAction.three_ds.submit.method,\n target: nextAction.three_ds.submit.target,\n fields: nextAction.three_ds.submit.fields,\n});\n\nconst assertHTTPSActionURL = (action: string): void => {\n let parsed: URL;\n try {\n parsed = new URL(action);\n } catch {\n throw new Error(\"3DS form action must be an absolute HTTPS URL\");\n }\n if (parsed.protocol !== \"https:\") {\n throw new Error(\"3DS form action must use HTTPS\");\n }\n};\n\nexport const buildThreeDSBrowserStep = (\n nextAction?: PaymentNextAction,\n): ThreeDSBrowserStep | null => {\n const action = getThreeDSAction(nextAction);\n if (!action) return null;\n return {\n kind: action.three_ds.phase,\n protocolVersion: action.three_ds.version,\n form: buildThreeDSBrowserForm(action),\n completionEndpoint: action.three_ds.completion_endpoint,\n threeDSServerTransId: action.three_ds.three_ds_server_trans_id,\n };\n};\n\nexport const buildThreeDSMethodCompletion = (\n nextAction: PaymentNextAction,\n completionIndicator: \"Y\" | \"N\" | \"U\" = \"Y\",\n): { completion_indicator: \"Y\" | \"N\" | \"U\"; three_ds_server_trans_id: string } => {\n if (!isThreeDSMethodAction(nextAction) || !nextAction.three_ds.three_ds_server_trans_id) {\n throw new Error(\"nextAction must be a three_ds_method action with three_ds_server_trans_id\");\n }\n return {\n completion_indicator: completionIndicator,\n three_ds_server_trans_id: nextAction.three_ds.three_ds_server_trans_id,\n };\n};\n\nconst requireDocument = (explicitDocument?: Document): Document => {\n if (explicitDocument) return explicitDocument;\n if (typeof document === \"undefined\") {\n throw new Error(\"3DS browser helpers must be called in a browser environment\");\n }\n return document;\n};\n\nconst defaultSubmitter = (form: HTMLFormElement): void => {\n form.submit();\n};\n\nexport const mountThreeDSBrowserForm = (\n nextAction: PaymentNextAction,\n options: ThreeDSMountOptions = {},\n): MountedThreeDSForm => {\n const doc = requireDocument(options.document);\n const container = options.container ?? doc.body;\n const formDescriptor = buildThreeDSBrowserForm(nextAction);\n assertHTTPSActionURL(formDescriptor.action);\n const form = doc.createElement(\"form\");\n const target =\n formDescriptor.target === \"hidden_iframe\"\n ? `arcpay-three-ds-method-${crypto.randomUUID()}`\n : (options.challengeTarget ?? \"_self\");\n let iframe: HTMLIFrameElement | undefined;\n\n form.method = formDescriptor.method;\n form.action = formDescriptor.action;\n form.target = target;\n form.hidden = true;\n\n for (const field of formDescriptor.fields) {\n const input = doc.createElement(\"input\");\n input.type = \"hidden\";\n input.name = field.name;\n input.value = field.value;\n form.append(input);\n }\n\n if (formDescriptor.target === \"hidden_iframe\") {\n iframe = doc.createElement(\"iframe\");\n iframe.name = target;\n iframe.title = \"3-D Secure method\";\n iframe.hidden = true;\n container.append(iframe);\n }\n\n container.append(form);\n\n return {\n form,\n iframe,\n submit: () => (options.submitter ?? defaultSubmitter)(form),\n remove: () => {\n form.remove();\n iframe?.remove();\n },\n };\n};\n\nconst waitForMethodFrame = (\n mounted: MountedThreeDSForm,\n timeoutMs: number,\n signal?: AbortSignal,\n): Promise<\"loaded\" | \"timeout\"> =>\n new Promise((resolve, reject) => {\n if (!mounted.iframe) {\n resolve(\"loaded\");\n return;\n }\n if (signal?.aborted) {\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n return;\n }\n\n let settled = false;\n const cleanup = () => {\n mounted.iframe?.removeEventListener(\"load\", onLoad);\n signal?.removeEventListener(\"abort\", onAbort);\n clearTimeout(timer);\n };\n const settle = (result: \"loaded\" | \"timeout\") => {\n if (settled) return;\n settled = true;\n cleanup();\n resolve(result);\n };\n const onLoad = () => settle(\"loaded\");\n const onAbort = () => {\n if (settled) return;\n settled = true;\n cleanup();\n reject(new DOMException(\"The operation was aborted\", \"AbortError\"));\n };\n const timer = setTimeout(() => settle(\"timeout\"), timeoutMs);\n\n mounted.iframe.addEventListener(\"load\", onLoad, { once: true });\n signal?.addEventListener(\"abort\", onAbort, { once: true });\n });\n\nexport const runThreeDSBrowserFlow = async (\n nextAction: PaymentNextAction | undefined,\n options: RunThreeDSBrowserFlowOptions,\n): Promise<ThreeDSBrowserFlowResult> => {\n if (!nextAction) return { status: \"no_action\" };\n\n if (isThreeDSChallengeAction(nextAction)) {\n const mounted = mountThreeDSBrowserForm(nextAction, options);\n mounted.submit();\n return { status: \"challenge_submitted\", action: nextAction, mounted };\n }\n\n if (!isThreeDSMethodAction(nextAction)) return { status: \"no_action\" };\n const completeThreeDSMethod = options.completeThreeDSMethod;\n if (!completeThreeDSMethod) {\n throw new Error(\"completeThreeDSMethod is required for 3DS Method actions\");\n }\n\n const mounted = mountThreeDSBrowserForm(nextAction, options);\n try {\n mounted.submit();\n const methodResult = await waitForMethodFrame(\n mounted,\n options.methodTimeoutMs ?? 10_000,\n options.signal,\n );\n const indicator = options.methodCompletionIndicator ?? (methodResult === \"loaded\" ? \"Y\" : \"N\");\n const response = await completeThreeDSMethod(\n buildThreeDSMethodCompletion(nextAction, indicator),\n nextAction,\n );\n const followUpAction = getThreeDSAction(response.next_action);\n if (followUpAction && isThreeDSChallengeAction(followUpAction)) {\n const challengeMounted = mountThreeDSBrowserForm(followUpAction, options);\n challengeMounted.submit();\n return {\n status: \"challenge_submitted\",\n action: followUpAction,\n response,\n mounted: challengeMounted,\n methodResult,\n };\n }\n return { status: \"method_completed\", response, methodResult };\n } finally {\n mounted.remove();\n }\n};\n\nconst htmlEscape = (value: string): string =>\n value\n .replace(/&/g, \"&amp;\")\n .replace(/</g, \"&lt;\")\n .replace(/>/g, \"&gt;\")\n .replace(/\"/g, \"&quot;\")\n .replace(/'/g, \"&#39;\");\n\nexport const buildThreeDSAutoSubmitHtml = (nextAction: PaymentNextAction): string => {\n const form = buildThreeDSBrowserForm(nextAction);\n assertHTTPSActionURL(form.action);\n const target = form.target === \"hidden_iframe\" ? \"arcpay-three-ds-method\" : \"_self\";\n const inputs = form.fields\n .map(\n (field) =>\n `<input type=\"hidden\" name=\"${htmlEscape(field.name)}\" value=\"${htmlEscape(field.value)}\">`,\n )\n .join(\"\");\n const iframe =\n form.target === \"hidden_iframe\"\n ? '<iframe name=\"arcpay-three-ds-method\" title=\"3-D Secure method\" hidden></iframe>'\n : \"\";\n return `<!doctype html><html><head><meta charset=\"utf-8\"></head><body>${iframe}<form method=\"POST\" action=\"${htmlEscape(form.action)}\" target=\"${target}\">${inputs}</form><script>document.forms[0].submit();</script></body></html>`;\n};\n"]}