@thavguard/arc-pay 0.1.4 → 0.1.6

package/README.md

@@ -68,6 +68,27 @@ Mutating server-client methods require an explicit `{ idempotencyKey }`:
 `createCheckoutSession`. Missing idempotency raises `ArcPayError` with
 `code="missing_idempotency_key"` before any HTTP request is sent.
 
+H2H card execution returns a standardized `next_action` when the buyer must do
+something in the browser. The SDK helper turns that action into the POST form
+descriptor you render in a hidden iframe or visible browser page:
+
+```ts
+import { buildThreeDSBrowserForm, getThreeDSAction } from "@thavguard/arc-pay/server";
+
+const result = await client.executePayment(paymentId, body, { idempotencyKey });
+const action = getThreeDSAction(result.next_action);
+
+if (action) {
+  const form = buildThreeDSBrowserForm(action);
+  // Render POST form using form.action, form.method, form.target, form.fields.
+  // For action.type === "three_ds_method", call completeThreeDSMethod from your
+  // backend after the hidden iframe finishes or times out.
+}
+```
+
+Do not branch on bank-specific 3DS fields. Arc Pay normalizes 3DS 1.x and 2.x
+into `next_action.three_ds.submit`.
+
 The server client accepts an optional `apiBase` only for local or isolated test
 environments. Production integrations should use the default
 `https://api.arcpay.space/v1`; sandbox/live is selected by the key prefix.

package/dist/actions-D0CoBTF4.d.cts

@@ -0,0 +1,292 @@
+type Currency = "RUB" | "KZT" | "UZS";
+type PaymentMethod = "bank_card" | "sbp" | "sberpay" | "tpay" | "alfapay" | "dolyami" | "mirpay" | "applepay" | "googlepay" | "bnpl";
+type CaptureMode = "one_stage" | "two_stage";
+type PaymentFlowMode = "h2h" | "redirect";
+type Locale = "ru" | "en";
+type PaymentStatus = "created" | "pending" | "pending_3ds" | "authorized" | "captured" | "settled" | "voided" | "expired" | "refunded" | "chargeback" | "declined" | "failed" | "timeout";
+interface Payment {
+    id: string;
+    amount: number;
+    authorized_amount?: number;
+    captured_amount?: number;
+    refunded_amount?: number;
+    currency: Currency;
+    payment_method: PaymentMethod;
+    status: PaymentStatus;
+    external_id?: string;
+    description?: string;
+    bank_payment_id?: string;
+    bank_code?: string;
+    bank_order_id?: string;
+    bank_terminal_id?: string;
+    bank_rrn?: string;
+    bank_internal_ref?: string;
+    bank_auth_code?: string;
+    card_token_id?: string;
+    decline_code?: string;
+    card_mask?: string;
+    card_scheme?: string;
+    redirect_url?: string;
+    payment_mode?: PaymentFlowMode;
+    capture_mode?: CaptureMode;
+    created_at: string;
+    updated_at: string;
+    metadata?: Record<string, string>;
+}
+interface PaymentList {
+    payments: Payment[];
+    total: number;
+    page: number;
+    page_size: number;
+}
+interface CreatePaymentRequest {
+    amount: number;
+    currency: Currency;
+    payment_method: PaymentMethod;
+    external_id: string;
+    capture_mode: CaptureMode;
+    save_card?: boolean;
+    customer_id?: string;
+    description?: string;
+    success_url?: string;
+    fail_url?: string;
+    callback_url?: string;
+    customer_email?: string;
+    customer_phone?: string;
+    metadata?: Record<string, string>;
+}
+interface CaptureRequest {
+    amount?: number;
+}
+interface VoidRequest {
+    reason?: string;
+}
+interface CreateRefundRequest {
+    amount: number;
+    reason?: string;
+}
+interface Refund {
+    id: string;
+    payment_id: string;
+    amount: number;
+    currency: Currency;
+    status: "pending" | "completed" | "failed";
+    reason?: string;
+    created_at: string;
+}
+interface ExecutePaymentRequest {
+    card_token_id: string;
+    payment_mode: "h2h";
+    browser_info: {
+        accept_header: string;
+        language: string;
+        screen_width: number;
+        screen_height: number;
+        color_depth: 1 | 4 | 8 | 15 | 16 | 24 | 32 | 48;
+        timezone_offset_minutes: number;
+        java_enabled?: boolean;
+        user_agent: string;
+        window_size?: "01" | "02" | "03" | "04" | "05";
+    };
+}
+interface ExecutePaymentResponse {
+    payment_id: string;
+    status: "authorized" | "captured" | "pending" | "pending_3ds" | "failed" | "declined";
+    authorized_amount?: number;
+    payment_mode?: PaymentFlowMode;
+    redirect_url?: string;
+    qr_url?: string;
+    qr_image_base64?: string;
+    qr_content_type?: "image/png" | "image/svg+xml" | string;
+    qr_expires_at?: string;
+    liability_shifted?: boolean;
+    next_action?: PaymentNextAction;
+    decline_code?: string;
+    decline_message?: string;
+}
+interface PaymentNextAction {
+    type: "three_ds_method" | "three_ds_challenge";
+    three_ds: {
+        version: "1" | "2";
+        phase: "method" | "challenge";
+        three_ds_server_trans_id?: string;
+        completion_endpoint?: string;
+        submit: {
+            method: "POST";
+            url: string;
+            target: "hidden_iframe" | "browser";
+            fields: {
+                name: string;
+                value: string;
+            }[];
+        };
+    };
+}
+interface ChargeSavedCardRequest {
+    amount: number;
+    currency: Currency;
+    card_token_id: string;
+    customer_id: string;
+    external_id?: string;
+    description?: string;
+    metadata?: Record<string, string>;
+    fiscal_items?: {
+        name: string;
+        quantity: number;
+        unit_price: number;
+        vat_rate: "no_vat" | "vat0" | "vat10" | "vat20";
+    }[];
+}
+interface CompleteThreeDSMethodRequest {
+    completion_indicator: "Y" | "N" | "U";
+    three_ds_server_trans_id: string;
+}
+interface AvailablePaymentMethod {
+    method: PaymentMethod;
+    payment_mode: PaymentFlowMode;
+    display_name: string;
+    is_active: boolean;
+    unavailable_reason?: string;
+    icon_url?: string;
+    supported_currencies?: Currency[];
+    supported_countries?: string[];
+    min_amount?: number;
+    max_amount?: number;
+    sandbox_requirements?: string;
+}
+interface CreateLinkRequest {
+    link_type: "one_time" | "reusable" | "invoice" | "recurring";
+    amount: number;
+    currency: Currency;
+    description?: string;
+    environment?: "live" | "sandbox";
+    max_uses?: number;
+    expires_at?: string;
+    customer_name?: string;
+    customer_id?: string;
+    customer_email?: string;
+    due_date?: string;
+    redirect_url?: string;
+    webhook_url?: string;
+    external_order_id?: string;
+    metadata?: Record<string, string>;
+    capture_mode: CaptureMode;
+    autocompletion_date?: string;
+    locale?: Locale;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+    }[];
+    items?: {
+        name: string;
+        quantity: string;
+        unit_price: number;
+        vat_rate?: number;
+    }[];
+    billing_config?: {
+        interval_type?: "day" | "week" | "month" | "year";
+        interval_count?: number;
+        trial_days?: number;
+        trial_price?: number;
+    };
+}
+interface Link {
+    id: string;
+    tenant_id?: string;
+    organization_id?: string;
+    short_code: string;
+    link_type: "one_time" | "reusable" | "invoice" | "recurring";
+    status: "active" | "paid" | "expired" | "canceled";
+    environment: "live" | "sandbox";
+    amount: number;
+    currency: Currency;
+    created_at?: string;
+    updated_at?: string;
+    description?: string;
+    url: string;
+    max_uses?: number;
+    uses_count?: number;
+    expires_at?: string;
+    customer_name?: string;
+    customer_id?: string;
+    customer_email?: string;
+    due_date?: string;
+    external_order_id?: string;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+        display_name?: string;
+    }[];
+    redirect_url?: string;
+    webhook_url?: string;
+    items?: {
+        name?: string;
+        quantity?: string;
+        unit_price?: number;
+        vat_rate?: number;
+    }[];
+    billing_config?: {
+        interval_type?: string;
+        interval_count?: number;
+        trial_days?: number;
+        trial_price?: number;
+    };
+    metadata?: Record<string, string>;
+    capture_mode: CaptureMode;
+    autocompletion_date?: string;
+    locale?: Locale;
+}
+interface CreateCheckoutSessionRequest {
+    amount: number;
+    currency: Currency;
+    description?: string;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+    }[];
+    capture_mode: CaptureMode;
+    success_url?: string;
+    fail_url?: string;
+    cancel_url?: string;
+    customer_email?: string;
+    customer_id?: string;
+    external_id?: string;
+    metadata?: Record<string, string>;
+    autocompletion_date?: string;
+    locale?: Locale;
+}
+interface CheckoutSession {
+    id: string;
+    url: string;
+}
+interface ListPaymentsQuery {
+    page?: number;
+    page_size?: number;
+    status?: PaymentStatus;
+    payment_method?: PaymentMethod;
+    bank_code?: string;
+    decline_code?: string;
+    payment_flow_id?: string;
+    search?: string;
+    date_from?: string;
+    date_to?: string;
+}
+interface ListAvailablePaymentMethodsQuery {
+    environment: "live" | "sandbox";
+}
+
+type ThreeDSAction = PaymentNextAction;
+interface BrowserFormField {
+    name: string;
+    value: string;
+}
+interface BrowserPostForm {
+    action: string;
+    method: "POST";
+    target: "hidden_iframe" | "browser";
+    fields: BrowserFormField[];
+}
+declare const getThreeDSAction: (nextAction?: PaymentNextAction) => PaymentNextAction | null;
+declare const buildThreeDSBrowserForm: (nextAction: PaymentNextAction) => BrowserPostForm;
+
+export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, type ExecutePaymentRequest as E, type Link as L, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type BrowserPostForm as a, type ChargeSavedCardRequest as b, type CheckoutSession as c, type CompleteThreeDSMethodRequest as d, type CreateCheckoutSessionRequest as e, type CreateLinkRequest as f, type CreatePaymentRequest as g, type CreateRefundRequest as h, type ExecutePaymentResponse as i, type ListAvailablePaymentMethodsQuery as j, type ListPaymentsQuery as k, type PaymentFlowMode as l, type PaymentList as m, type PaymentMethod as n, type PaymentNextAction as o, buildThreeDSBrowserForm as p, getThreeDSAction as q };

package/dist/actions-D0CoBTF4.d.ts

@@ -0,0 +1,292 @@
+type Currency = "RUB" | "KZT" | "UZS";
+type PaymentMethod = "bank_card" | "sbp" | "sberpay" | "tpay" | "alfapay" | "dolyami" | "mirpay" | "applepay" | "googlepay" | "bnpl";
+type CaptureMode = "one_stage" | "two_stage";
+type PaymentFlowMode = "h2h" | "redirect";
+type Locale = "ru" | "en";
+type PaymentStatus = "created" | "pending" | "pending_3ds" | "authorized" | "captured" | "settled" | "voided" | "expired" | "refunded" | "chargeback" | "declined" | "failed" | "timeout";
+interface Payment {
+    id: string;
+    amount: number;
+    authorized_amount?: number;
+    captured_amount?: number;
+    refunded_amount?: number;
+    currency: Currency;
+    payment_method: PaymentMethod;
+    status: PaymentStatus;
+    external_id?: string;
+    description?: string;
+    bank_payment_id?: string;
+    bank_code?: string;
+    bank_order_id?: string;
+    bank_terminal_id?: string;
+    bank_rrn?: string;
+    bank_internal_ref?: string;
+    bank_auth_code?: string;
+    card_token_id?: string;
+    decline_code?: string;
+    card_mask?: string;
+    card_scheme?: string;
+    redirect_url?: string;
+    payment_mode?: PaymentFlowMode;
+    capture_mode?: CaptureMode;
+    created_at: string;
+    updated_at: string;
+    metadata?: Record<string, string>;
+}
+interface PaymentList {
+    payments: Payment[];
+    total: number;
+    page: number;
+    page_size: number;
+}
+interface CreatePaymentRequest {
+    amount: number;
+    currency: Currency;
+    payment_method: PaymentMethod;
+    external_id: string;
+    capture_mode: CaptureMode;
+    save_card?: boolean;
+    customer_id?: string;
+    description?: string;
+    success_url?: string;
+    fail_url?: string;
+    callback_url?: string;
+    customer_email?: string;
+    customer_phone?: string;
+    metadata?: Record<string, string>;
+}
+interface CaptureRequest {
+    amount?: number;
+}
+interface VoidRequest {
+    reason?: string;
+}
+interface CreateRefundRequest {
+    amount: number;
+    reason?: string;
+}
+interface Refund {
+    id: string;
+    payment_id: string;
+    amount: number;
+    currency: Currency;
+    status: "pending" | "completed" | "failed";
+    reason?: string;
+    created_at: string;
+}
+interface ExecutePaymentRequest {
+    card_token_id: string;
+    payment_mode: "h2h";
+    browser_info: {
+        accept_header: string;
+        language: string;
+        screen_width: number;
+        screen_height: number;
+        color_depth: 1 | 4 | 8 | 15 | 16 | 24 | 32 | 48;
+        timezone_offset_minutes: number;
+        java_enabled?: boolean;
+        user_agent: string;
+        window_size?: "01" | "02" | "03" | "04" | "05";
+    };
+}
+interface ExecutePaymentResponse {
+    payment_id: string;
+    status: "authorized" | "captured" | "pending" | "pending_3ds" | "failed" | "declined";
+    authorized_amount?: number;
+    payment_mode?: PaymentFlowMode;
+    redirect_url?: string;
+    qr_url?: string;
+    qr_image_base64?: string;
+    qr_content_type?: "image/png" | "image/svg+xml" | string;
+    qr_expires_at?: string;
+    liability_shifted?: boolean;
+    next_action?: PaymentNextAction;
+    decline_code?: string;
+    decline_message?: string;
+}
+interface PaymentNextAction {
+    type: "three_ds_method" | "three_ds_challenge";
+    three_ds: {
+        version: "1" | "2";
+        phase: "method" | "challenge";
+        three_ds_server_trans_id?: string;
+        completion_endpoint?: string;
+        submit: {
+            method: "POST";
+            url: string;
+            target: "hidden_iframe" | "browser";
+            fields: {
+                name: string;
+                value: string;
+            }[];
+        };
+    };
+}
+interface ChargeSavedCardRequest {
+    amount: number;
+    currency: Currency;
+    card_token_id: string;
+    customer_id: string;
+    external_id?: string;
+    description?: string;
+    metadata?: Record<string, string>;
+    fiscal_items?: {
+        name: string;
+        quantity: number;
+        unit_price: number;
+        vat_rate: "no_vat" | "vat0" | "vat10" | "vat20";
+    }[];
+}
+interface CompleteThreeDSMethodRequest {
+    completion_indicator: "Y" | "N" | "U";
+    three_ds_server_trans_id: string;
+}
+interface AvailablePaymentMethod {
+    method: PaymentMethod;
+    payment_mode: PaymentFlowMode;
+    display_name: string;
+    is_active: boolean;
+    unavailable_reason?: string;
+    icon_url?: string;
+    supported_currencies?: Currency[];
+    supported_countries?: string[];
+    min_amount?: number;
+    max_amount?: number;
+    sandbox_requirements?: string;
+}
+interface CreateLinkRequest {
+    link_type: "one_time" | "reusable" | "invoice" | "recurring";
+    amount: number;
+    currency: Currency;
+    description?: string;
+    environment?: "live" | "sandbox";
+    max_uses?: number;
+    expires_at?: string;
+    customer_name?: string;
+    customer_id?: string;
+    customer_email?: string;
+    due_date?: string;
+    redirect_url?: string;
+    webhook_url?: string;
+    external_order_id?: string;
+    metadata?: Record<string, string>;
+    capture_mode: CaptureMode;
+    autocompletion_date?: string;
+    locale?: Locale;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+    }[];
+    items?: {
+        name: string;
+        quantity: string;
+        unit_price: number;
+        vat_rate?: number;
+    }[];
+    billing_config?: {
+        interval_type?: "day" | "week" | "month" | "year";
+        interval_count?: number;
+        trial_days?: number;
+        trial_price?: number;
+    };
+}
+interface Link {
+    id: string;
+    tenant_id?: string;
+    organization_id?: string;
+    short_code: string;
+    link_type: "one_time" | "reusable" | "invoice" | "recurring";
+    status: "active" | "paid" | "expired" | "canceled";
+    environment: "live" | "sandbox";
+    amount: number;
+    currency: Currency;
+    created_at?: string;
+    updated_at?: string;
+    description?: string;
+    url: string;
+    max_uses?: number;
+    uses_count?: number;
+    expires_at?: string;
+    customer_name?: string;
+    customer_id?: string;
+    customer_email?: string;
+    due_date?: string;
+    external_order_id?: string;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+        display_name?: string;
+    }[];
+    redirect_url?: string;
+    webhook_url?: string;
+    items?: {
+        name?: string;
+        quantity?: string;
+        unit_price?: number;
+        vat_rate?: number;
+    }[];
+    billing_config?: {
+        interval_type?: string;
+        interval_count?: number;
+        trial_days?: number;
+        trial_price?: number;
+    };
+    metadata?: Record<string, string>;
+    capture_mode: CaptureMode;
+    autocompletion_date?: string;
+    locale?: Locale;
+}
+interface CreateCheckoutSessionRequest {
+    amount: number;
+    currency: Currency;
+    description?: string;
+    payment_methods: {
+        method: PaymentMethod;
+        payment_mode: PaymentFlowMode;
+    }[];
+    capture_mode: CaptureMode;
+    success_url?: string;
+    fail_url?: string;
+    cancel_url?: string;
+    customer_email?: string;
+    customer_id?: string;
+    external_id?: string;
+    metadata?: Record<string, string>;
+    autocompletion_date?: string;
+    locale?: Locale;
+}
+interface CheckoutSession {
+    id: string;
+    url: string;
+}
+interface ListPaymentsQuery {
+    page?: number;
+    page_size?: number;
+    status?: PaymentStatus;
+    payment_method?: PaymentMethod;
+    bank_code?: string;
+    decline_code?: string;
+    payment_flow_id?: string;
+    search?: string;
+    date_from?: string;
+    date_to?: string;
+}
+interface ListAvailablePaymentMethodsQuery {
+    environment: "live" | "sandbox";
+}
+
+type ThreeDSAction = PaymentNextAction;
+interface BrowserFormField {
+    name: string;
+    value: string;
+}
+interface BrowserPostForm {
+    action: string;
+    method: "POST";
+    target: "hidden_iframe" | "browser";
+    fields: BrowserFormField[];
+}
+declare const getThreeDSAction: (nextAction?: PaymentNextAction) => PaymentNextAction | null;
+declare const buildThreeDSBrowserForm: (nextAction: PaymentNextAction) => BrowserPostForm;
+
+export { type AvailablePaymentMethod as A, type BrowserFormField as B, type CaptureRequest as C, type ExecutePaymentRequest as E, type Link as L, type Payment as P, type Refund as R, type ThreeDSAction as T, type VoidRequest as V, type BrowserPostForm as a, type ChargeSavedCardRequest as b, type CheckoutSession as c, type CompleteThreeDSMethodRequest as d, type CreateCheckoutSessionRequest as e, type CreateLinkRequest as f, type CreatePaymentRequest as g, type CreateRefundRequest as h, type ExecutePaymentResponse as i, type ListAvailablePaymentMethodsQuery as j, type ListPaymentsQuery as k, type PaymentFlowMode as l, type PaymentList as m, type PaymentMethod as n, type PaymentNextAction as o, buildThreeDSBrowserForm as p, getThreeDSAction as q };

package/dist/cdn/arcpay.global.js

@@ -1,3 +1,3 @@
-var ArcPay=(function(exports){'use strict';var n=class extends Error{constructor(t){super(t.message),this.name="ArcPayError",this.type=t.type,this.code=t.code,this.param=t.param,this.paymentId=t.paymentId,this.declineCode=t.declineCode,this.retryable=t.retryable,this.requestId=t.requestId;}},T=e=>e instanceof n&&e.type==="validation_error",I=e=>e instanceof n&&e.type==="authentication_error",P=e=>e instanceof n&&e.type==="authorization_error",A=e=>e instanceof n&&e.type==="state_error",z=e=>e instanceof n&&e.type==="rate_limit_error",S=e=>e instanceof n&&e.type==="api_error",R=e=>e instanceof n&&e.type==="network_error",M=e=>e instanceof n&&e.type==="challenge_aborted";var f=e=>e.startsWith("pk_test_")?"sandbox":"live",x=e=>{if(typeof e!="string"||e.length===0)throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must be a non-empty string",retryable:false});if(!e.startsWith("pk_test_")&&!e.startsWith("pk_live_"))throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.",retryable:false})};var w="data-arcpay-sandbox-banner",_=()=>{if(typeof document=="undefined"||document.querySelector(`[${w}]`))return;let e=document.createElement("div");e.setAttribute(w,""),e.style.cssText="position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);";let t=document.createElement("span");t.textContent="ARC PAY TEST MODE \u2014 payments are simulated",e.appendChild(t);let r=document.createElement("button");r.type="button",r.setAttribute("data-arcpay-banner-dismiss",""),r.textContent="\xD7",r.setAttribute("aria-label","Dismiss test mode banner"),r.style.cssText="margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;",r.addEventListener("click",()=>e.remove()),e.appendChild(r),document.body.appendChild(e);};var C="arcpay:",F=e=>typeof e=="object"&&e!==null&&"type"in e&&typeof e.type=="string"&&e.type.startsWith(C),u=(e,t,r)=>{if(r==="*")throw new n({type:"validation_error",code:"wildcard_origin_forbidden",message:"postToIframe: targetOrigin cannot be '*'",retryable:false});if(!e.contentWindow)throw new n({type:"validation_error",code:"iframe_not_loaded",message:"postToIframe: iframe.contentWindow is null (iframe not mounted)",retryable:false});e.contentWindow.postMessage(t,r);};var y=(e,t)=>e.origin!==t||!F(e.data)?null:e.data;var L=new Set(["position","transform","pointer-events","z-index","top","left","right","bottom","inset"]),g=e=>{let t={};for(let[r,o]of Object.entries(e)){let s=r.toLowerCase();L.has(s)||(t[r]=o);}return t},h=e=>{let t={base:g(e.base)};return e.invalid!==void 0&&(t.invalid=g(e.invalid)),e.focus!==void 0&&(t.focus=g(e.focus)),t};var m=class{constructor(t,r,o){this.field=t;this.options=r;this.context=o;this.iframe=null;this.listeners=new Set;this.status="pending";this.messageHandler=null;}mount(t){if(this.iframe)throw new n({type:"validation_error",code:"already_mounted",message:`Element ${this.field} is already mounted`,retryable:false});let r=typeof t=="string"?document.querySelector(t):t;if(!(r instanceof HTMLElement))throw new n({type:"validation_error",code:"mount_target_not_found",message:`mount target not found: ${String(t)}`,retryable:false});let o=document.createElement("iframe");o.src=`${this.context.iframeBase}/iframe/${this.field}`,o.style.cssText="border:0;width:100%;height:100%;display:block;",o.setAttribute("allow","payment"),o.setAttribute("data-arcpay-element",this.field),r.appendChild(o),this.iframe=o;let s=new URL(this.context.iframeBase).origin;this.messageHandler=a=>{var l;if(a.source!==((l=this.iframe)==null?void 0:l.contentWindow))return;let d=y(a,s);d&&this.handleMessage(d);},window.addEventListener("message",this.messageHandler),o.addEventListener("load",()=>{if(!this.iframe)return;let a={type:"arcpay:hello",origin:window.location.origin,publishableKey:this.context.publishableKey,channelId:this.context.channelId};u(this.iframe,a,s);},{once:true});}handleMessage(t){t.type==="arcpay:ready"?(this.status="ready",this.options.style&&this.send({type:"arcpay:style",payload:h(this.options.style)}),this.emit({type:"ready"})):t.type==="arcpay:rejected"?(this.status="error",this.emit({type:"error",reason:t.reason})):t.type==="arcpay:change"&&t.field===this.field&&this.emit({type:"change",isValid:t.isValid,brand:t.brand,lastFour:t.lastFour});}update(t){t.style&&this.send({type:"arcpay:style",payload:h(t.style)});}destroy(){this.iframe&&(this.iframe.remove(),this.iframe=null),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.listeners.clear(),this.status="pending";}on(t,r){return this.listeners.add(r),()=>this.listeners.delete(r)}focus(){this.send({type:"arcpay:focus"});}clear(){this.send({type:"arcpay:clear"});}isReady(){return this.status==="ready"}getIframeContentWindow(){var t,r;return (r=(t=this.iframe)==null?void 0:t.contentWindow)!=null?r:null}send(t){if(!this.iframe)throw new n({type:"validation_error",code:"not_mounted",message:`Element ${this.field} is not mounted`,retryable:false});u(this.iframe,t,new URL(this.context.iframeBase).origin);}emit(t){for(let r of this.listeners)r(t);}};var B="https://sdk.arcpay.space",O=()=>{var e;if(!((e=globalThis.crypto)!=null&&e.randomUUID))throw new n({type:"validation_error",code:"crypto_unavailable",message:"crypto.randomUUID is required for Hosted Fields",retryable:false});return globalThis.crypto.randomUUID()},p=class{constructor(t){this.elementMap=new Map;this.tokenizeInFlight=false;var r;this.publishableKey=t.publishableKey,this.iframeBase=(r=t.iframeBase)!=null?r:B,this.channelId=O();}create(t,r={}){if(this.elementMap.has(t))throw new n({type:"validation_error",code:"duplicate_element",message:`Element for ${t} already created`,retryable:false});let o={iframeBase:this.iframeBase,publishableKey:this.publishableKey,channelId:this.channelId},s=new m(t,r,o);return this.elementMap.set(t,s),s}async tokenize(t,r){if(this.tokenizeInFlight)throw new n({type:"validation_error",code:"tokenize_in_progress",message:"A tokenize() call is already in progress for this Elements instance",retryable:false});let o=this.elementMap.get("cardNumber"),s=this.elementMap.get("cardExpiry"),a=this.elementMap.get("cardCvv");if(!o||!s||!a)throw new n({type:"validation_error",code:"incomplete_elements",message:"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()",retryable:false});if(!o.isReady()||!s.isReady()||!a.isReady())throw new n({type:"validation_error",code:"elements_not_ready",message:"Wait for all elements to fire 'ready' event before tokenize()",retryable:false});this.tokenizeInFlight=true;try{return await this.doTokenize(o,t,r)}finally{this.tokenizeInFlight=false;}}doTokenize(t,r,o){let s=new URL(this.iframeBase).origin,a=t.getIframeContentWindow();return new Promise((d,l)=>{let E=window.setTimeout(()=>{window.removeEventListener("message",c),l(new n({type:"network_error",code:"tokenize_timeout",message:"tokenize() timed out after 30 seconds",retryable:true,paymentId:r}));},3e4),c=v=>{if(a!==null&&v.source!==a)return;let i=y(v,s);if(i){if(i.type==="arcpay:tokenize-result")clearTimeout(E),window.removeEventListener("message",c),d({cardTokenId:i.cardTokenId,cardMask:i.cardMask,cardScheme:i.cardScheme,cardBin:i.cardBin,expiresIn:i.expiresIn,expiresAt:i.expiresAt});else if(i.type==="arcpay:tokenize-error"){clearTimeout(E),window.removeEventListener("message",c);let k=i.errorType==="validation_error"||i.errorType==="api_error"?i.errorType:"api_error";l(new n({type:k,code:i.code,message:i.message,retryable:false,paymentId:r}));}}};window.addEventListener("message",c),t.send({type:"arcpay:tokenize",paymentId:r,idempotencyKey:o});})}destroy(){for(let t of this.elementMap.values())t.destroy();this.elementMap.clear();}};var W=x,b=new Map,K=e=>(f(e)==="sandbox"&&_(),{publishableKey:e,environment:f(e),elements:()=>new p({publishableKey:e})});function H(e){try{W(e);}catch(s){return Promise.reject(s)}let t=e,r=b.get(t);if(r)return r;let o=Promise.resolve(K(e));return b.set(t,o),o}var U=()=>{b.clear();},D={load:H,__resetForTests:U};var le="0.1.4";
-exports.ArcPay=D;exports.ArcPayError=n;exports.Elements=p;exports.SDK_VERSION=le;exports.isApiError=S;exports.isAuthenticationError=I;exports.isAuthorizationError=P;exports.isChallengeAborted=M;exports.isNetworkError=R;exports.isRateLimitError=z;exports.isStateError=A;exports.isValidationError=T;return exports;})({});//# sourceMappingURL=arcpay.global.js.map
+var ArcPay=(function(exports){'use strict';var n=class extends Error{constructor(t){super(t.message),this.name="ArcPayError",this.type=t.type,this.code=t.code,this.param=t.param,this.paymentId=t.paymentId,this.declineCode=t.declineCode,this.retryable=t.retryable,this.requestId=t.requestId;}},I=e=>e instanceof n&&e.type==="validation_error",A=e=>e instanceof n&&e.type==="authentication_error",S=e=>e instanceof n&&e.type==="authorization_error",z=e=>e instanceof n&&e.type==="state_error",F=e=>e instanceof n&&e.type==="rate_limit_error",R=e=>e instanceof n&&e.type==="api_error",B=e=>e instanceof n&&e.type==="network_error",M=e=>e instanceof n&&e.type==="challenge_aborted";var f=e=>e.startsWith("pk_test_")?"sandbox":"live",w=e=>{if(typeof e!="string"||e.length===0)throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must be a non-empty string",retryable:false});if(!e.startsWith("pk_test_")&&!e.startsWith("pk_live_"))throw new n({type:"validation_error",code:"invalid_publishable_key",message:"Publishable key must start with pk_test_ or pk_live_. Secret keys (sk_*) cannot be used in browser.",retryable:false})};var x="data-arcpay-sandbox-banner",_=()=>{if(typeof document=="undefined"||document.querySelector(`[${x}]`))return;let e=document.createElement("div");e.setAttribute(x,""),e.style.cssText="position:fixed;top:0;left:0;right:0;z-index:2147483647;background:#ffd166;color:#222;font:13px/1.4 system-ui,sans-serif;padding:6px 12px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 3px rgba(0,0,0,0.1);";let t=document.createElement("span");t.textContent="ARC PAY TEST MODE \u2014 payments are simulated",e.appendChild(t);let r=document.createElement("button");r.type="button",r.setAttribute("data-arcpay-banner-dismiss",""),r.textContent="\xD7",r.setAttribute("aria-label","Dismiss test mode banner"),r.style.cssText="margin-left:12px;background:transparent;border:0;font-size:18px;cursor:pointer;color:inherit;",r.addEventListener("click",()=>e.remove()),e.appendChild(r),document.body.appendChild(e);};var C="arcpay:",L=e=>typeof e=="object"&&e!==null&&"type"in e&&typeof e.type=="string"&&e.type.startsWith(C),u=(e,t,r)=>{if(r==="*")throw new n({type:"validation_error",code:"wildcard_origin_forbidden",message:"postToIframe: targetOrigin cannot be '*'",retryable:false});if(!e.contentWindow)throw new n({type:"validation_error",code:"iframe_not_loaded",message:"postToIframe: iframe.contentWindow is null (iframe not mounted)",retryable:false});e.contentWindow.postMessage(t,r);};var m=(e,t)=>e.origin!==t||!L(e.data)?null:e.data;var O=new Set(["position","transform","pointer-events","z-index","top","left","right","bottom","inset"]),h=e=>{let t={};for(let[r,o]of Object.entries(e)){let s=r.toLowerCase();O.has(s)||(t[r]=o);}return t},g=e=>{let t={base:h(e.base)};return e.invalid!==void 0&&(t.invalid=h(e.invalid)),e.focus!==void 0&&(t.focus=h(e.focus)),t};var y=class{constructor(t,r,o){this.field=t;this.options=r;this.context=o;this.iframe=null;this.listeners=new Set;this.status="pending";this.messageHandler=null;}mount(t){if(this.iframe)throw new n({type:"validation_error",code:"already_mounted",message:`Element ${this.field} is already mounted`,retryable:false});let r=typeof t=="string"?document.querySelector(t):t;if(!(r instanceof HTMLElement))throw new n({type:"validation_error",code:"mount_target_not_found",message:`mount target not found: ${String(t)}`,retryable:false});let o=document.createElement("iframe");o.src=`${this.context.iframeBase}/iframe/${this.field}`,o.style.cssText="border:0;width:100%;height:100%;display:block;",o.setAttribute("allow","payment"),o.setAttribute("data-arcpay-element",this.field),r.appendChild(o),this.iframe=o;let s=new URL(this.context.iframeBase).origin;this.messageHandler=a=>{var l;if(a.source!==((l=this.iframe)==null?void 0:l.contentWindow))return;let d=m(a,s);d&&this.handleMessage(d);},window.addEventListener("message",this.messageHandler),o.addEventListener("load",()=>{if(!this.iframe)return;let a={type:"arcpay:hello",origin:window.location.origin,publishableKey:this.context.publishableKey,channelId:this.context.channelId};u(this.iframe,a,s);},{once:true});}handleMessage(t){t.type==="arcpay:ready"?(this.status="ready",this.options.style&&this.send({type:"arcpay:style",payload:g(this.options.style)}),this.emit({type:"ready"})):t.type==="arcpay:rejected"?(this.status="error",this.emit({type:"error",reason:t.reason})):t.type==="arcpay:change"&&t.field===this.field&&this.emit({type:"change",isValid:t.isValid,brand:t.brand,lastFour:t.lastFour});}update(t){t.style&&this.send({type:"arcpay:style",payload:g(t.style)});}destroy(){this.iframe&&(this.iframe.remove(),this.iframe=null),this.messageHandler&&(window.removeEventListener("message",this.messageHandler),this.messageHandler=null),this.listeners.clear(),this.status="pending";}on(t,r){return this.listeners.add(r),()=>this.listeners.delete(r)}focus(){this.send({type:"arcpay:focus"});}clear(){this.send({type:"arcpay:clear"});}isReady(){return this.status==="ready"}getIframeContentWindow(){var t,r;return (r=(t=this.iframe)==null?void 0:t.contentWindow)!=null?r:null}send(t){if(!this.iframe)throw new n({type:"validation_error",code:"not_mounted",message:`Element ${this.field} is not mounted`,retryable:false});u(this.iframe,t,new URL(this.context.iframeBase).origin);}emit(t){for(let r of this.listeners)r(t);}};var D="https://sdk.arcpay.space",N=()=>{var e;if(!((e=globalThis.crypto)!=null&&e.randomUUID))throw new n({type:"validation_error",code:"crypto_unavailable",message:"crypto.randomUUID is required for Hosted Fields",retryable:false});return globalThis.crypto.randomUUID()},p=class{constructor(t){this.elementMap=new Map;this.tokenizeInFlight=false;var r;this.publishableKey=t.publishableKey,this.iframeBase=(r=t.iframeBase)!=null?r:D,this.channelId=N();}create(t,r={}){if(this.elementMap.has(t))throw new n({type:"validation_error",code:"duplicate_element",message:`Element for ${t} already created`,retryable:false});let o={iframeBase:this.iframeBase,publishableKey:this.publishableKey,channelId:this.channelId},s=new y(t,r,o);return this.elementMap.set(t,s),s}async tokenize(t,r){if(this.tokenizeInFlight)throw new n({type:"validation_error",code:"tokenize_in_progress",message:"A tokenize() call is already in progress for this Elements instance",retryable:false});let o=this.elementMap.get("cardNumber"),s=this.elementMap.get("cardExpiry"),a=this.elementMap.get("cardCvv");if(!o||!s||!a)throw new n({type:"validation_error",code:"incomplete_elements",message:"All three elements (cardNumber, cardExpiry, cardCvv) must be created and mounted before tokenize()",retryable:false});if(!o.isReady()||!s.isReady()||!a.isReady())throw new n({type:"validation_error",code:"elements_not_ready",message:"Wait for all elements to fire 'ready' event before tokenize()",retryable:false});this.tokenizeInFlight=true;try{return await this.doTokenize(o,t,r)}finally{this.tokenizeInFlight=false;}}doTokenize(t,r,o){let s=new URL(this.iframeBase).origin,a=t.getIframeContentWindow();return new Promise((d,l)=>{let v=window.setTimeout(()=>{window.removeEventListener("message",c),l(new n({type:"network_error",code:"tokenize_timeout",message:"tokenize() timed out after 30 seconds",retryable:true,paymentId:r}));},3e4),c=E=>{if(a!==null&&E.source!==a)return;let i=m(E,s);if(i){if(i.type==="arcpay:tokenize-result")clearTimeout(v),window.removeEventListener("message",c),d({cardTokenId:i.cardTokenId,cardMask:i.cardMask,cardScheme:i.cardScheme,cardBin:i.cardBin,expiresIn:i.expiresIn,expiresAt:i.expiresAt});else if(i.type==="arcpay:tokenize-error"){clearTimeout(v),window.removeEventListener("message",c);let P=i.errorType==="validation_error"||i.errorType==="api_error"?i.errorType:"api_error";l(new n({type:P,code:i.code,message:i.message,retryable:false,paymentId:r}));}}};window.addEventListener("message",c),t.send({type:"arcpay:tokenize",paymentId:r,idempotencyKey:o});})}destroy(){for(let t of this.elementMap.values())t.destroy();this.elementMap.clear();}};var W=w,b=new Map,K=e=>(f(e)==="sandbox"&&_(),{publishableKey:e,environment:f(e),elements:()=>new p({publishableKey:e})});function H(e){try{W(e);}catch(s){return Promise.reject(s)}let t=e,r=b.get(t);if(r)return r;let o=Promise.resolve(K(e));return b.set(t,o),o}var U=()=>{b.clear();},q={load:H,__resetForTests:U};var T=e=>e!=null?e:null,k=e=>({action:e.three_ds.submit.url,method:e.three_ds.submit.method,target:e.three_ds.submit.target,fields:e.three_ds.submit.fields});var ye="0.1.6";
+exports.ArcPay=q;exports.ArcPayError=n;exports.Elements=p;exports.SDK_VERSION=ye;exports.buildThreeDSBrowserForm=k;exports.getThreeDSAction=T;exports.isApiError=R;exports.isAuthenticationError=A;exports.isAuthorizationError=S;exports.isChallengeAborted=M;exports.isNetworkError=B;exports.isRateLimitError=F;exports.isStateError=z;exports.isValidationError=I;return exports;})({});//# sourceMappingURL=arcpay.global.js.map
 //# sourceMappingURL=arcpay.global.js.map